IT Security News Daily Summary 2023-05-06

• Twitter confirmed that a security incident publicly exposed Circle tweets

• DEF CON to set thousands of hackers loose on LLMs

• Online Predators Target Children’s Webcams, Study Finds

• FBI seized other domains used by the shadow eBook library Z-Library

• It’s 2023: Do you know if your Kubernetes environments are safe?

• Google is Phasing Out Passwords and Adopting Passkeys: Here’s What You Should Know

• The Ransomware Gang Targets University Alert Systems

• Mobile Menace: McAfee’s 2023 Report on the Top Mobile Threats

• CERT-In Warns Of ‘Royal Ransomware’ Virus Attacking India’s Critical Sectors

• Imperva Red Team Patches a Privacy Vulnerability in TikTok

• How to Protect Yourself From Increasingly Sneaky Hacking Tactics

• Russian ‘Ghost Ships’ Identified Near the Nord Stream Blasts

• Summary Of News and Events That Happened This week

• Dragon Breath APT Group Using Double-Clean-App Technique to Target Gambling Industry

• WordPress Advanced Custom Fields plugin XSS exposes +2M sites to attacks

• Build or Buy your own antivirus product

• New Vulnerability in Popular WordPress Plugin Exposes Over 2 Million Sites to Cyberattacks

• Newspaper evades Russian censors, hides news in Counter-Strike map

• Apple releases first Rapid Security Response update for iOS, iPadOS, and macOS users

• CACI collaborates with Torchlight to provide secure access to dark web for SOF customers

• Attestation in confidential computing

• The Rise in SBOM Adoption and How They Can Effectively Improve Software Supply Chain Security Programs

• Fortinet fixed two severe issues in FortiADC and FortiOS

• IT Security News Daily Summary 2023-05-05

• Friday Squid Blogging: “Mediterranean Beef Squid” Hoax

• It’s generative AI models vs. hackers at DEF CON’s AI Village

• Army wants help with safeguarding datasets for AI use

• Cloud move takes city’s GIS from rough to ready

• How local governments can protect themselves against third-party threats

• Dump these insecure phone adapters because we’re not fixing them, says Cisco

• Best Patch Management Software & Tools for 2023

• Satori Unveils Universal Data Permissions Scanner, A Free Open-Source Tool that Sheds Light on Data Access Authorization

• KnowBe4 Launches Password Kit to Celebrate World Password Day

• Pro-Russia group NoName took down multiple France sites, including the French Senate one

• Browser Isolation Adapts to Remote Work, Greater Cloud Usage

• NITAAC extends CIO-SP3 contracts amid protests of follow-on vehicle

• Transferring WhatsApp Data Between Android and iPhone [2023]

• A right Royal pain in the Dallas: City IT systems crippled by ransomware

• 3 core principles for secure data integration

• Apple Patches Bluetooth Flaw in AirPods, Beats

• Judge Spares Former Uber CISO Jail Time Over 2016 Data Breach Charges

• Buyer beware: Avoid immature AI solutions

• FTC Proposes Ban on Meta Profiting Off Children’s Data

• How to start handling Azure network security

• How to implement principle of least privilege in Azure AD

• Former Uber CSO Joe Sullivan avoids jail for breach cover-up

• Attackers Route Malware Activity Over Popular CDNs

• Doctors Behind Mifepristone Ban Called ‘Christians’ a Top Threat

• The Pentagon wants to peer inside its cloud providers’ infrastructure

• AI exemplifies the ‘free rider’ problem – here’s why that points to regulation

• Constellation Struck By Ransomware Attack, ALPHV Lays Claim

• PHP Packagist supply chain poisoned by hacker “looking for a job”

• Dallas Police Department Compromised in Ransomware Attack

• Mirantis k0s updates simplify management of Kubernetes clusters

• Introducing rules_oci

• Making authentication faster than ever: passkeys vs. passwords

• CSO sentenced to 3 years imprisonment for Uber Data Breach cover up

• Application Programming Interface (API) testing for PCI DSS compliance

• Prediction: 2023 will be a ‘very active’ hurricane season

• Pro-Russian Hackers Claim Downing of French Senate Website

• North Korean APT Kimsuky Launches Global Spear-Phishing Campaign

• New White House AI Initiatives Include AI Software-Vetting Event at DEF CON

• Senator Asks Big Banks How They’re Going To Stop AI Cloned Voices From Breaking Into Banks

• Tennessee Health System Stops All Operations Amid Cyberattack Recovery

• China Labels USA Empire Of Hacking Based On Old Wikileaks Dump

• Cisco Warns RCE Bug In EOL IP Phone Adapters Won’t Get Patched

• Capita Admits Some Pension Data Likely Accessed In March Breach

• Religious Institutions Become the Latest Focus of Cybercrime Groups

• “Kekw” Malware in Python Packages Could Steal Data and Hijack Crypto

• Online Predators are Targeting Children Webcams

• AutoCrypt KEY provides the key management features needed for automotive production

• Royal Ransomware Targets the City of Dallas in Ransomware Attack

• Fight over Kids Online Safety Act Sparks Debate, as Bill Gains Support in Congress

• Cryptocurrency Exchanges Linked to Ransomware

• Google Launches New Cybersecurity Analyst Training Program

• New Android Trojans Infected Many Devices in Asia via Google Play, Phishing

• New Android Malware ‘FluHorse’ Targeting East Asian Markets with Deceptive Tactics

• 8 Top Authenticator App For iOS and Andriod In 2023

• VPN Encryption: How it Works and Why it Matters – 2023 Guide

• RIP World Password Day

• The (Security) Cost of Too Much Data Privacy

• 2 Years After Colonial Pipeline, US Critical Infrastructure Still Not Ready for Ransomware

• What Is Patch Management? Definition, Importance, Key Steps, and Best Practices

• Identity and Access Management Best Practices

• OpenAI changed its plans and won’t train on customer data, Sam Altman says

• Why Robot Vacuums Have Cameras (and What to Know About Them)

• Vulnerability in Oracle Property Management Software Puts Hotels at Risk

• Fortinet Patches High-Severity Vulnerabilities in FortiADC, FortiOS

• Google Expands Passkey Support With Passwordless Authentication

• North Korea-linked Kimsuky APT uses new recon tool ReconShark

• Jack Dorsey Withdraws Support For Elon Musk As Twitter Boss

• Hackers Targeting Italian Corporate Banking Clients with New Web-Inject Toolkit DrIBAN

• Former Uber CSO avoids prison for concealing data breach

• Capita admits some pension data ‘likely’ to have been accessed in March breach

• Azure API Management Vulnerabilities Allowed Unauthorized Access

• Biden, Harris Meet With CEOs About AI Risks

• Google Expands Passkey Support with Passwordless Authentication

• US Warns Of Economic Damage If China Invades Taiwan

• Generative AI brings new risks to everyone. Here’s how you can stay safe

• Tripwire Patch Priority Index for April 2023

• Facebook Issues Warning About Malware Campaigns Targeting Businesses

• Lack of Visibility: The Challenge of Protecting Websites from Third-Party Scripts

• N. Korean Kimsuky Hackers Using New Recon Tool ReconShark in Latest Cyberattacks

• ReconShark – Kimsuky’s Newest Recon Tool

• Apple Depressed Results Beat Expectations, Thanks To iPhone Sales

• Critical Siemens RTU Vulnerability Could Allow Hackers to Destabilize Power Grid

• Vulnerability Could Have Been Exploited for ‘Unlimited’ Free Credit on OpenAI Accounts

• Events Ripper Updates

• Fleckpe Android malware totaled +620K downloads via Google Play Store

• Cisco Issues Urgent Security Warning For End-of-Life Phone Adapters

• Packagist Repository Hacked: Over a Dozen PHP Packages with 500 Million Compromised

• Edgecore Networks and Wedge Networks partner to offer next-generation network security

• Critical RCE vulnerability in Cisco phone adapters, no update available (CVE-2023-20126)

• Cyber Patrols Lead to Seizure of Stolen Artefacts

• What Is IPAM in Networking and Cybersecurity?

• How To Install Freeflix HQ In PC ( Windows 7, 8, 10, and Mac )

• Android Security Update Patches Kernel Vulnerability Exploited by Spyware Vendor

• Ransomware Actors Extort University Via Alert System

• Users complain over UK state-owned bank’s services as Atos eyes the exit

• Cisco Umbrella® Now Integrates With Protective DNS

• An overview of the OSI model and its security threats

• Subscription Trojan Downloaded 600K Times From Google Play

• Fleckpe Android Malware Sneaks onto Google Play Store with Over 620,000 Downloads

• OneTrust’s AI-driven document classification enhances data discovery and governance

• Edgecore Networks and Wedge Networks partner to offer a next-generation network security

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Silicon Pulse: Your Tech News Update: Episode 1

• May 2023 Patch Tuesday forecast: Dealing with End-of-Support (EOS)

• Inside the Carrington Mortgage Services Ransomware Attack: Compromised Data and Cybersecurity Measures

• Cisco Warns of Vulnerability in Popular Phone Adapter, Urges Migration to Newer Model

• Information Security News headlines trending on Google

• 10 Effective Ways to Protect Your Privacy Online

• Universal Data Permissions Scanner: Open-source tool to overcome data authorization blindspots

• New infosec products of the week: May 5, 2023

• Guidance on network and data flow diagrams for PCI DSS compliance

• New Weaponized Android Apps With 1M Installs Steals 2FA Codes & Passwords

• Hackers use WinRAR as a Cyberweapon to Conduct Destructive Cyberattacks

• Think your data has no value? Scammers disagree

• Organizations brace for cyber attacks despite improved preparedness

• Atomic Stealer: Thieving Mac malware sold via Telegram

• China labels USA ‘Empire of hacking’ based on old Wikileaks dumps

• $10M Is Yours If You Can Get This Guy to Leave Russia

• Former Uber CSO Joe Sullivan Avoids Prison Time Over Data Breach Cover-Up

• World Password Day must die

• The one and only password tip you need

• How small businesses can secure employees’ mobile devices

• AI-powered content farms start clogging search results with ad-stuffed spam

Generated on 2023-05-06 23:55:25.864183