IT Security News Daily Summary 2023-05-16

• The Intersection of Finance and Cybersecurity: A Closer Look at Prop Trading Firms

• Methods You Should Utilize When Hiring for a Tech Company

• Is the Internet of Things Putting Your Business at Risk?: Here’s What You Need to Know

• Tech experts say federal government needs more AI leadership positions at agencies

• Sticking to traditional security playbook is mistake for cloud security: Palo Alto Networks SVP

• Facebook Criticized For Not Responding To Hacked Users

• XM Cyber Announces Partnership With SAP to Deliver Robust Security for Hybrid Environments

• VA puts Oracle Cerner on a short leash in $10B health records contract

• State auditor seeks cyber readiness evaluation for agencies with DOD contracts

• Labor Department tests new identity options for accessing unemployment benefits

• Chinese APT exploits TP-Link router firmware via implant

• Russian Ransomware Perp Charged After High-Profile Hive, Babuk & LockBit Hits

• Malicious VSCode extensions with more than 45K downloads steal PII and enable backdoors

• Enforcement questions dog state’s proposed TikTok ban

• How to build a better vulnerability management program

• Protect against current and future threats with encryption

• Belkin Wemo Smart Plug V2 – the buffer overflow that won’t be patched

• China-linked APT Mustang Panda targets TP-Link routers with a custom firmware implant

• How to encrypt your email (and why you should)

• ChatGPT’s Chief Testifies Before Congress, Calls for New Agency to Regulate Artificial Intelligence

• Aqua Security launches Real-Time CSPM to help teams focus on critical threats

• How Virtualization Helps Security

• Convincing Phishing Pages are Now Possible With Phishing-as-a-Service

• Beware of WhatsApp Scam Calls From International Numbers

• Qilin Ransomware Operation Outfits Affiliates With Sleek, Turnkey Cyberattacks

• Circle Security and ForgeRock join forces to enhance clients’ digital security posture

• Scality ARTESCA 2.0 strenghtens ransomware protection

• SchoolDude Hacked – Over 3 million Users Records Exposed

• Qilin’s RaaS Program Advertised on Dark Web Along with Compromised Company Details

• Ruling Makes Exchanges Liable For Customer Losses In EU

• Lawmakers Want To Train Rural Hospital Workforce In Infosec

• OpenAI Chief Concerned About AI Used To Compromise Elections

• Twitter Criticized For Blocking Tweets In Turkey

• Microsoft Is Scanning The Inside Of Password Protected Zip Files For Malware

• Vulnerability Summary for the Week of May 8, 2023

• VirusTotal AI code Analysis Expanded to Spot Malicious Windows, and Linux Script Files

• Insurance Industry Suffers 12x More Cyber Attacks

• Do You Really Need a CISO?

• SBOMs and security: What IT and DevOps need to know

• IBM Snaps up DSPM Startup Polar Security

• How to Prevent DDoS Attacks: 5 Steps for DDoS Prevention

• Circle Security Technology Partnership With ForgeRock to Accelerate the Prevention-First Era in Digital Security

• Name That Toon: One by One

• Intel Says Friday’s Mystery Security Update Microcode Isn’t Really A Security Update

• Leostream unveils ZTNA-enabled remote desktop access for AWS

• ComplyAdvantage Fraud Detection identifies and prevents transaction fraud

• Veriff and MassPay partner to provide seamless verification of customers and ensure compliance

• Nozomi delivers Vantage IQ to strengthen cybersecurity and resilience for critical infrastructure

• Island Self-Protection provides secure browsing in challenging environments

• Encrypting files and emails: A beginner’s guide to securing sensitive information

• State efforts to undercut local governance widen in scope

• Camaro Dragon APT Group Exploits TP-Link Routers With Custom Implant

• Google AI powered driverless vehicles making San Francisco a testing ground

• 237,000 US government employees affected by data breach

• The best secure browsers for privacy in 2023

• Lacroix Shuts Three Factories For a Week After Cyber-Attack

• Infostealer Malware Surges: Stolen Logs Up 670% on Russian Market

• China’s Mustang Panda Hackers Exploit TP-Link Routers for Persistent Attacks

• President Zelensky imposes sanctions against the Russian IT sector

• Can Large Language Models Boost Your Security Posture?

• Huntress Closes $60M Series C for MDR Expansion

• New Babuk-Based Ransomware Targeting Organizations in US, Korea

• Lancefly APT Targeting Asian Government Organizations for Years

• Severe RCE Bugs Open Thousands of Industrial IoT Devices to Cyberattack

• WhatsApp 2023: New Privacy Features, Settings, and More

• Fraudsters send fake invoice, follow up with fake exec confirmation

• IBM acquires Polar Security to address the growing shadow data problem

• CellTrust partners with Proofpoint to tackle mobile communication risk

• Confluent enhances Confluent Cloud to enforce data integrity

• SolarWinds unveils AI features to help users solve everyday IT problems

• Chip-Maker Arm Reveals Side-attack on Cortex-M, Denies it as failure of The Architecture’s Defenses

• Hacker Marketplace Remains Operational Despite Police ‘Takedown’ Claim

• OpenAI Chief To Call For AI Regulation Before Congress

• Interior wants a fleet of drones ‘on call’ to help with wildfires, other emergencies

• Q1 2023 Privacy: In for Another Wild Year

• How to comply with PCI DSS 4.0 while juggling day-to-day tasks

• decentralized identity

• RA Group Hacks Businesses Using Stolen Babuk Source-Code

• International Cyber Expo 2023 – Registration is now OPEN

• How to Turn Off Phone Without Power Button (Android and iPhone) – A Complete Guide

• OpenAI CEO Sam Altman testifies before U.S. Senate: live

• Compliance automation to confound cyber criminals

• Backups can be Quicker and Less Expensive than Paying the Ransom

• Bl00dy Ransomware Targets Education Orgs via PaperCut Flaw

• 4 Big Mistakes to Avoid in OT Incident Response

• Musk Says He Must Approve All Tesla Hires

• Lacework Appoints Lea Kissner as Chief Information Security Officer

• Inside Qilin Ransomware: Affiliates Take Home 85% of Ransom Payouts

• CISA adds Ruckus bug and another six flaws to its Known Exploited Vulnerabilities catalog

• PharMerica Cyber Incident Exposes 5.8 M People’s Data

• Teltonika Vulnerabilities Could Expose Thousands of Industrial Organizations to Remote Attacks

• Crosspoint Capital Partners Acquires Absolute Software in $870 Million Deal

• BEC Attackers Spoof CC’d Execs to Force Payment

• Re-Victimization from Police-Auctioned Cell Phones

• CopperStealer Malware Crew Resurfaces with New Rootkit and Phishing Kit Modules

• Cyolo Product Overview: Secure Remote Access to All Environments

• CMA Chief Defends Activision Decision Before Parliament

• Lacroix manufacturing facilities shut down following cyberattack

• The Windows Registry

• The Future is (Cyber) Mindful

• EU Ministers Approve World’s First Crypto Rules

• Check Point Research reveals a malicious firmware implant for TP-Link routers, linked to Chinese APT group

• Identify and Protect against Endpoint vulnerabilities

• Coalition: Employee actions are driving cyber insurance claims

• Discord Suffers Data Breach Through Compromised Third Party

• Virustotal expands AI security scans to AutoHotkey and other scripts

• Former ByteDance Executive Accuses Firm Of ‘Lawlessness’

• Attack Surface Risk, Challenges and Changes

• 8220 Gang Evolves With New Strategies

• AI-related threats: How should SMBs approach them?

• Don’t overlook attack surface management

• Google Cloud CISO on why the Google Cybersecurity Certificate matters

• WhatsApp allows users to lock sensitive chats

• What information do hackers need to commit cybercrime?

• Residential Vs. Datacenter Proxies: Which One Is Best For You?

• Amazon ‘Adding ChatGPT-Like Features’ To Product Search

• Ducktail Operation – Hackers May Steal Your Credentials From Web Browser

• Hey, Congress—if you’re looking to cut spending, go after wasteful software contracts

• European Commission Approves Microsoft-Activision Takeover

• Researchers Uncover New “RA Group” Ransomware

• PharMerica Breach Hits Over 5.8 Million Customers

• Damage Cyberattack Halts Publication At The Philadelphia Inquirer

• Silicon Insights: The Past, Present and Future of Account Based Marketing: Part 2

• Hackers Using Golang Variant of Cobalt Strike to Target Apple macOS Systems

• How to Maximize Cloud Benefit with Digital Sovereignty

• The nature of cyberincidents in 2022

• Need to improve the detection capabilities in your security products?

• WhatsApp – Now you Can Lock & Hide Chats with a Password

• Cops crack gang that used bots to book and resell immigration appointments

• Podcast Episode: People With Disabilities Are The Original Hackers

• Lancefly APT uses powerful Merdoor backdoor in attacks on Asian orgs

• Toyota Data Breach – Over 2 Million Customers Data Exposed

• Ransomware News Headlines Trending on Google

• Microsoft’s cloud services are scanning password protected ZIP archives

• New trends in ransomware attacks shape the future of cybersecurity

• 3 tips to accelerate zero trust adoption

• CISOs: How to improve cybersecurity in an ever-changing threat landscape

• FCW Insider Chat: Defense Tech

• Hackers Adapting New Unique Way to Overcome Microsoft Default Macro Block

• A week in security (May 8-14)

• Why we should be more open about ransomware attacks

• Windows 11 is showing its first signs of Rust

• Update now! Ruckus vulnerability added to CISA’s list of actively exploited bugs

• FTC sues VoIP provider over ‘billions of illegal robocalls’

• DDoS Myths: Blackholing and Outsourcing Won’t Stop Everything

• Google combats AI misinformation with Search labels, adds dark web security upgrades

• Israel-based threat actors show growing sophistication of email attacks

• Ferrari Website Flaw Exposes Their Database Credentials

• Merdoor Backdoor Exploits Agencies By The Lancefly APT

• Intel says Friday’s mystery ‘security update’ microcode isn’t really a security update

• Extra! Extra! Don’t quite read all about it: Cyber attack hits Philadelphia Inquirer

• IT Security News Daily Summary 2023-05-15

• Novel Malware Strain, PIPEDREAM, Deployed by Russian-Linked Hackers Against US Energy Corporations

• VA seeks cyber operations help

• Lacework Appoints Lea Kissner As Chief Information Security Officer

• One city’s growing opioid crisis brings data-driven solutions to the front lines

• Housing authority looks to AI for voucher processing

• RA Ransomware Group Emerges With Custom Spin on Babuk

• PharMerica Leaks 5.8M Deceased Users’ PII, Health Information

• Cloudflare unveils Cloudflare One for AI to enable safe use of generative AI tools

• Buffalo Mass Shooting Victims’ Families Sue Meta, Reddit, Amazon

• Some potential: How bad software updates could over-volt, brick remote servers

• Lawmakers propose training program for federal officials on AI risks and rewards

• State AG floats ‘nation-leading’ crypto regulation

• Stellar Open XDR Nominated for Two 2023 ‘ASTORS’ Cybersecurity Awards

• Generative AI Empowers Users but Challenges Security

• 5 ways AI-driven patch management is driving the future of cybersecurity

• Toyota Discloses Decade-Long Data Leak Exposing 2.15M Customers’ Data

• Breaking the DDoS Attack Loop With Rate Limiting

• PharMerica data breach impacts more than 5.8 million individuals

• $22k awarded to SBFT ‘23 fuzzing competition winners

• Hackers remotely turn up the voltage on motherboards to brick servers

• Here are 4 stocks Jim Cramer thought about buying for the Club and the reasons why

• Establishing a Legacy of Wins in the Annual ‘ASTORS’ Awards Program

• CrowdStrike warns of rise in VMware ESXi hypervisor attacks

• Digital Rights Updates with EFFector 35.6

• Survey: Most CISOs feel their business is at risk for cyberattack

• Zut alors! Raclage crapuleux! Clearview AI in 20% more trouble in France

• Facebook Glitch Sent Friend Request To Any Profile You Visited

• No more macros? No problem, say miscreants, we’ll adapt

• Philadelphia Inquirer possibly hit by ransomware attack

• Qilin’s Dark Web Ransomware Targets Critical Sectors

• Year-long Cyber Campaign Reveals Potent Backdoor and Custom Implant,

• Facebook glitch sent unintended friend requests to users

• Ex-Ubiquiti Employee Imprisoned For $2m Crypto Extortion Scheme

• Microsoft Follina Bug Is Back in Meme-Themed Cyberattacks Against Travel Orgs

• Discord Announces a Data Breach Involving a Support Agent

• Microsoft Security highlights from RSA Conference 2023

• How to make sure the reputation of your products and company is good

• Voting machines must be test hacked for certification, under proposed bill

• Lancefly APT Custom Backdoor Targets Government and Aviation Sectors

• How a Dutch training center is solving the challenges of classroom training with hands-on cybersecurity courses

• Not-Too-Safe Boot: Remotely Bypassing Endpoint Security Solutions And Anti-Tampering Mechanisms

• Parablu to deliver Microsoft Azure-hosted cybersecurity and data resiliency SaaS solutions

• SAP and Microsoft collaborate to help customers recruit and develop their teams

• ARM Acknowledges Side-Channel Attack But Denies Cortex-M Is Crocked

• Toyota Bungling Customer Privacy Is Becoming A Pattern

• Passkeys May Not Be For You, But They Are Safe And Easy – Here’s Why

• Pakistan Shut Down The Internet – But That Didn’t Stop Protests

• North Korean Hackers Stole $721 Million In Cryptocurrency From Japan

• A US Cyber Team’s Perspective on US Military Cyber Defense of Ukraine

• Critical WordPress Plugin Vulnerability Enables Hackers To Exploit Over 1M Sites

• ‘Greatness’ Phishing Tool Abuses Microsoft 365 Credentials

• Sam Altman Start-Up Worldcoin ‘Close To Securing $100m’

• Companies have to figure out the skills they need to reap AI benefits

• Industrial Cellular Routers at Risk: 11 New Vulnerabilities Expose OT Networks

• New RA Group ransomware gang is the latest group using leaked Babuk source code

• Everbridge and samdesk partnership enables early incident triage and response

• Cloudflare One for AI helps organizations to safely use generative AI tools

• Discord Informs Users of Data Breach Involving Customer Support Provider

• Brightly Software Notifying 3 Million SchoolDude Users of Data Breach

• TSA Official: Feds Improved Cybersecurity Response Post-Colonial Pipeline

• Microsoft Advisories Are Getting Worse

• North Korea ‘Stole $721m’ In Crypto From Japan

• Today’s Biggest Threats Against the Energy Grid

• Introducing the DRM-Report Q1 2023: Unveiling the Current State of Ransomware

• How to Hire a Programmer: Step by Step Guide

• Empowering Small Businesses – Unleashing the Cyber Defense Revolution

• Why High Tech Companies Struggle with SaaS Security

• New Ransomware Gang RA Group Hits U.S. and South Korean Organizations

• Former Ubiquiti employee gets 6 years in jail for stealing confidential data and extorting company

• Advantech’s industrial serial device servers open to attack

• Google’s .zip Top Level domain is already used in phishing attacks

• Toyota Japan confirms decade-long security breach

• UK Further Restricts Microsoft-Activision Buy

• Kioxia, Western Digital ‘Accelerate’ Merger Talks

• Tripwire Products: Quick Reference Guide

• Beyond the firewall: How social engineers use psychology to compromise organizational cybersecurity

• 5.8 Million People Affected by Data Breach at PharMerica

• Capita Cyberattack Hits UK Pension Funds

• PharMerica Discloses Data Breach Impacting 5.8 Million Individuals

• WordPress Field Builder Plugin Vulnerability Exploited in Attacks Two Days After Patch

• Micro-Star International Signing Key Stolen

• What Is Endpoint Privilege Management?

• Toyota Disclosed a Ten-Year Long Data Breach

• New ‘MichaelKors’ Ransomware-as-a-Service Targeting Linux and VMware ESXi Systems

• Researchers Uncover Powerful Backdoor and Custom Implant in Year-Long Cyber Campaign

• Third-Party Patch Management: A Comprehensive Guide

• How Digitalization Is Simplifying Company Registration Processes

• Mike Lynch Extradited To Face Trial In California

• CISA: Several Old Linux Vulnerabilities Exploited in Attacks

• Philadelphia Inquirer Hit by Cyberattack Causing Newspaper’s Largest Disruption in Decades

• Water Orthrus’s New Campaigns Deliver Rootkit and Phishing Modules

• Criminal Website Genesis ‘Still Online’ After Takedown

• Discord Breached After Service Agent Targeted

• Toyota: Tragic Data Breach, 2 Million Vehicles Affected For Ten Years

• Is human threat hunting a fool’s errand?

• SquareX’s vision: A future where internet security is a non-issue

• How To Install Swapper Configuration In PC ( Windows 7, 8, 10, and Mac )

• Sigstore: Roots of trust for software artifacts

• US Says VoIP Firm Delivered Billions of Scam Robocalls

• 6 Myths of the Enterprise Browser: What you should know

• Cisco Umbrella for Government: Enabling Advanced Public Sector Cybersecurity

• Cyberdefense will need AI capabilities to safeguard digital borders

• UK Pension Scheme: Members Should Assume Capita Data Theft

• CLR SqlShell Malware Targets MS SQL Servers for Crypto Mining and Ransomware

• Former ByteDance executive alleges TikTok of wrongful conduct

• How To Install Desprotetor de links In PC ( Windows 7, 8, 10, and Mac )

• Musk Names Linda Yaccarino As Twitter Chief

• An important system on project [REDACTED] was all [REDACTED] up

• Software developers, how secure is your software?

• Former Ubiquiti Employee Gets 6 Years in Jail for $2 Million Crypto Extortion Case

• What Is a Remote Code Execution Attack? Definition, Risks, and Mitigation Measures

• Ransomware corrupts data, so backups can be faster and cheaper than paying up

• The UK’s Secretive Web Surveillance Program Is Ramping Up

• Arm acknowledges side-channel attack but denies Cortex-M is crocked

• Ghanian children involved in Britain Catfishing Romance Scams

• How is information stored in cloud secure from hacks

• Bad bots are coming for APIs

• Web entity activity reveals insights into internet security

• Toyota’s bungling of customer privacy is becoming a pattern

• SIEM for SAP – Log Evaluation to Attack Detection

• The Cybercrime Blame Game: It’s Time to Unite the Industry Against a Common Enemy.

Generated on 2023-05-16 23:55:28.328703