IT Security News Daily Summary 2023-05-17

• Unveiling the Power of Threat Models: Enhancing Cyber Intrusion Detection for Data Analysts

• IBM Security Guardium Ranked as a Leader in the Data Security Platforms Market

• ChatGPT can rapidly build solutions for network defense

• How the Wrong Content Type Introduced a Vulnerability in Odoo

• BianLian Cybercrime Group Changes Attack Methods, CISA Advisory Notes

• 5 Ways Security Testing Can Aid Incident Response

• ‘Strictly limit’ remote desktop – unless you like catching BianLian ransomware

• Is it Getting Harder to Pigeonhole Games into Specific Genres?

• The future of zero trust is about more than thwarting hackers, officials say

• Ransomware vulnerability warning pilot yielding valuable lessons, CISA official says

• Top 10 facial recognition software vendors for 2023

• PaperCut vulnerability abused by several threat actors could impact 70,000 organizations

• Houthi-Backed Spyware Effort Targets Yemen Aid Workers

• Phishing attacks already using the .zip TLD

• Saving the News From Big Tech

• County builds future-ready transportation IT network

• US offers $10m bounty for Russian ransomware suspect outed in indictment

• Apple Boots a Half-Million Developers From Official App Store

• The US Post Office Is Spying on the Mail. Senators Want to Stop It

• Acronis launches Advanced Security + EDR for MSPs

• Enzoic’s identity breach monitoring solution protects accounts and data from fraud

• Satori enhances its platform to help companies proactively protect data

• Broadcom Offers Remedies To Ease EU Worries Over VMware Deal

• Announcing The BlueHat Podcast: Listen and Subscribe Now!

• BadTrip: A chain of fake travel sites abuses search ads to commit fraud and credential theft

• Hackers Modified Cobalt Strike Capabilities to Attack macOS Users

• Insider Threats and Software Development: What You Should Know

• Microsoft Teams Features Amp Up Orgs’ Cyberattack Exposure

• Boomi introduces Boomi AI to accelerate business transformation

• Next integrates with Splunk to help security teams consolidate security processes

• Barracuda SecureEdge strengthens security for businesses and MSPs

• New Android & Google Device Vulnerability Reward Program Initiatives

• Don’t Mess With Texas’ Anti-SLAPP Law

• US Offers $10 Million Reward For Russian Hacker

• New RA Hacker Group Attack Organizations in the U.S. & Threaten to Leak Data

• Federal CIO says IDEA Act guidance coming this summer

• Access to Energy Sector ICS/OT Systems Offered on Hacker Forums

• Talking Security Strategy: Cybersecurity Has a Seat at the Boardroom Table

• Digital Privacy Legislation is Civil Rights Legislation

• Navigating the complex world of Cybersecurity compliance

• Preventing sophisticated phishing attacks aimed at employees

• Russian scientists develop new communication medium through quantum teleportation

• Meta Paid Verification Arrives For UK Users

• Facebook & Instagram Begun Rolling Out Paid Blue Tick Service

• Social Engineering Risks Found in Microsoft Teams

• Cleo and Cognizant join forces to accelerate digital transformation of the supply chain

• ServiceNow releases generative AI capabilities for the Now Platform to deliver workflow automation

• Neurotechnology MegaMatcher IDMS handles the most common identity lifecycle procedures

• BatLoader Impersonates ChatGPT and Midjourney in Cyber-Attacks

• Here’s How ChatGPT is Charging the Landscape of Cyber Security

• Possible Cyberattack on ‘The Philadelphia Inquirer’ Disrupts Printing Operations

• Energy Industry Faces Increasing Dark Web Cyber Threats

• How to Protect Your Organization From Vulnerabilities

• How to deny websites access to your location in Safari (and why you should)

• These ransomware victims are paying more to recover data

• 4 Countries Join NATO Cyber Defense Center

• Sunday Paper Debacle: Philadelphia Inquirer Scrambles to Respond to Cyberattack

• ammune.ai integrates with Intel to protect Kubernetes clusters from API attacks

• Inseego and UScellular launch 5G indoor router FX3100

• Vodafone To Cut 11,000 Jobs, After Strategic Review

• Are Ransomware Attacks Declining, or Has Reporting Worsened?

• secure access service edge (SASE)

• OilAlpha: Emerging Houthi-linked Cyber Threat Targets Arabian Android Users

• Oil And Gas Sectors Lag Behind Other Industries In Gathering Intel

• Ex-Apple Engineer Accused Of Stealing Self-Driving Car Secrets

• Malware Turns Home Routers Into Proxies For Chinese Hackers

• Upstart Encryption App Walks Back Privacy Claims, Pulls From Stores After Probe

• Twitter Sued Over Saudi Spying That Landed User In Prison

• Warning Issued About BianLian Ransomware Attacks By CISA & FBI

• Critical Infrastructure Organizations Warned of BianLian Ransomware Attacks

• Apple Blocked 1.7 Million Applications From App Store in 2022

• I Was an RSAC Innovation Sandbox Judge — Here’s What I Learned

• Preventing Bot Attacks and Online Fraud on APIs

• Mental Health Awareness Week: Improving Cyber Mindfulness with KnowBe4’s Anna Collard

• Mithril Security raises €1.2 million to protect data privacy in AI

• KeePass flaw allows retrieval of master password, PoC is public (CVE-2023-32784)

• Syam Nair joins Zscaler as CTO

• Amartus partners with ServiceNow to offer industry standard inter-party automation process and APIs

• U.S. Transportation Department Breach Exposes Data of 237,000 Employees

• Architecture Matters When it Comes to SSE

• Lemon Group’s Cybercriminal Businesses Built on Preinfected Devices

• Security Journeys: From Change Management to Compliance

• Common Social Media Scams and How to Avoid Them

• US Gov offers a $10M reward for a Russian ransomware actor

• Understanding Cyber Risk and the C-Suite

• Safeguarding Your Data Under GDPR Regulations

• Acronis Launches EDR Solution with Potential for AI Integration

• Veza launches Authorization Platform on the Snowflake Data Cloud

• Entro raises $6 million to address secret-based breaches

• Brivo and Eagle Eye Networks announce $192 million investment

• TP-Link routers implanted with malicious firmware in state-sponsored attacks

• How To Play Defense Paladin Class In World Of Warcraft Dragonflight

• Another security calamity for Capita: An unsecured AWS bucket

• Outdated Technology Could Cost Your Business a Lot

• How to Use News API for Powerful Data Analysis: Unlocking Insights

• Microsoft Digital Defense Report: Nation-State Threats and Cyber Mercenaries

• Threat Group UNC3944 Abusing Azure Serial Console for Total VM Takeover

• Identifying a Patch Management Solution: Overview of Key Criteria

• Prisma Access Achieves DoD IL5 Provisional Authorization

• Adarma Announces Management Expansion Amid Rapid Growth

• VirusTotal += Mandiant Permhash: Unearthing adversary infrastructure and toolkits by leveraging permissions similarity

• Chrome 113 Security Update Patches Critical Vulnerability

• Cybersecurity M&A Roundup for May 1-15, 2023

• Lacroix Closes Production Sites Following Ransomware Attack

• Entro Raises $6M to Tackle Secrets Sprawl

• Google To Cull Inactive Accounts At Year End

• Six things you do every day on the Internet that can leave you unprotected

• This is the USB flash drive James Bond would use

• The True Cost of a Free Telly TV

• Serious Unpatched Vulnerability Uncovered in Popular Belkin Wemo Smart Plugs

• Microsoft Secure Boot Bug

• Technology based acquisition news trending on Google

• Inactive Google accounts will be deleted

• Scammers exploit AI trend with fake ChatGPT apps on Google Play, Apple App Store

• UNC3944 Uses Azure Serial Console for Stealthy Access to Virtual Machines

• 10 Best Smallest Atx Cases For Compact Pc Builds In 2023 – Power In A Tiny Package

• The Transformative Power of Artificial Intelligence Across Industries

• DoJ Charges Ex Apple Engineer With Stealing Trade Secrets

• How to reduce your devops tool sprawl

• US Offering $10M Reward for Russian Man Charged With Ransomware Attacks

• Cyber-Resilience Programs Failing on Poor Visibility

• ChatGPT Scams Are Infiltrating Apple’s App Store and Google Play

• Minas – on the way to complexity

• US Offers $10 Million For Russian Ransomware Operator’s Capture

• Capita Recommends Its Customers to Assume Their Data Was Stolen

• US Offers $10m Reward For Alleged Prolific Ransomware Actor

• State-Sponsored Sidewinder Hacker Group’s Covert Attack Infrastructure Uncovered

• Don’t panic. Google offering scary .zip and .mov domains is not the end of the world

• NSO Group Spends Millions Lobbying US Government

• Mitigating Risks of AI Apps: Keeping Your Users Productive & Your Data Safe

• ChatGPT Chief Testifies on AI risks To US Congress

• Why performing security testing on your products and systems is a good idea

• Multiple flaws in Teltonika industrial cellular router expose OT networks to hack

• Upstart encryption app walks back privacy claims, pulls from stores after probe

• U.S. Offers $10 Million Bounty for Capture of Notorious Russian Ransomware Operator

• University admission platform Leverage EDU exposed student passports

• Lancefly APT Hackers Using Custom Backdoor to Attack Government Orgs

• Malicious open-source components threatening digital infrastructure

• Preparing for federal supply chain security standardization

• The CIS Benchmarks Community consensus process

• Infamous cybercrime marketplace offers pre-order service for stolen credentials

• You may not care where you download software from, but malware does

• Temu accused of data risks after sister app was suspended for malware

• Ransomware-as-a-service groups rain money on their affiliates

• Getting a Public SSL Certificate Free of Cost for a Lifetime

• Cyphercon 6: Staying Up Late for Cybersecurity

• Feds offer $10m reward for info on alleged Russian ransomware crim

• Composite Objects and Constellations

• Debt Collection Firm Credit Control Corporation Hit by Major Data Breach

• 3 reasons to use a VPN

• Lacroix Group shut down three facilities after a ‘targeted cyberattack’

• Unpatched Wemo Smart Plug Bug Opens Countless Networks to Cyberattacks

• HIPAA-HITECH: Keeping the Compliance Engine Running on a Classic Data Protection Regulation

• WhatsApp users can now use Chat Lock to secure private or sensitive chats

• IBM snags Polar Security to boost cloud data practice

• How to Prevent SQL Injection: 5 Key Prevention Methods

• IRS will test government-run free file system in 2024

• Linux security: What is sudo and why is it so important?

• Russian Hacker “Wazawaka” Indicted for Ransomware

• Attackers Target macOS With ‘Geacon’ Cobalt Strike Tool

• Chinese Hackers Mustang Panda Attacks TP-Link Routers

• US Dept of Transport security breach exposes info on a quarter-million people

• IT Security News Daily Summary 2023-05-16

• The Intersection of Finance and Cybersecurity: A Closer Look at Prop Trading Firms

• Methods You Should Utilize When Hiring for a Tech Company

• Is the Internet of Things Putting Your Business at Risk?: Here’s What You Need to Know

• Tech experts say federal government needs more AI leadership positions at agencies

• Sticking to traditional security playbook is mistake for cloud security: Palo Alto Networks SVP

• Facebook Criticized For Not Responding To Hacked Users

• XM Cyber Announces Partnership With SAP to Deliver Robust Security for Hybrid Environments

• VA puts Oracle Cerner on a short leash in $10B health records contract

• State auditor seeks cyber readiness evaluation for agencies with DOD contracts

• Labor Department tests new identity options for accessing unemployment benefits

• Chinese APT exploits TP-Link router firmware via implant

• Russian Ransomware Perp Charged After High-Profile Hive, Babuk & LockBit Hits

• Malicious VSCode extensions with more than 45K downloads steal PII and enable backdoors

• Enforcement questions dog state’s proposed TikTok ban

• How to build a better vulnerability management program

• Protect against current and future threats with encryption

• Belkin Wemo Smart Plug V2 – the buffer overflow that won’t be patched

• China-linked APT Mustang Panda targets TP-Link routers with a custom firmware implant

• How to encrypt your email (and why you should)

• ChatGPT’s Chief Testifies Before Congress, Calls for New Agency to Regulate Artificial Intelligence

• Aqua Security launches Real-Time CSPM to help teams focus on critical threats

• How Virtualization Helps Security

• Convincing Phishing Pages are Now Possible With Phishing-as-a-Service

• Beware of WhatsApp Scam Calls From International Numbers

• Qilin Ransomware Operation Outfits Affiliates With Sleek, Turnkey Cyberattacks

• Circle Security and ForgeRock join forces to enhance clients’ digital security posture

• Scality ARTESCA 2.0 strenghtens ransomware protection

• SchoolDude Hacked – Over 3 million Users Records Exposed

• Qilin’s RaaS Program Advertised on Dark Web Along with Compromised Company Details

• Ruling Makes Exchanges Liable For Customer Losses In EU

• Lawmakers Want To Train Rural Hospital Workforce In Infosec

• OpenAI Chief Concerned About AI Used To Compromise Elections

• Twitter Criticized For Blocking Tweets In Turkey

• Microsoft Is Scanning The Inside Of Password Protected Zip Files For Malware

• Vulnerability Summary for the Week of May 8, 2023

• VirusTotal AI code Analysis Expanded to Spot Malicious Windows, and Linux Script Files

• Insurance Industry Suffers 12x More Cyber Attacks

• Do You Really Need a CISO?

• SBOMs and security: What IT and DevOps need to know

• IBM Snaps up DSPM Startup Polar Security

• How to Prevent DDoS Attacks: 5 Steps for DDoS Prevention

• Circle Security Technology Partnership With ForgeRock to Accelerate the Prevention-First Era in Digital Security

• Name That Toon: One by One

• Intel Says Friday’s Mystery Security Update Microcode Isn’t Really A Security Update

• Leostream unveils ZTNA-enabled remote desktop access for AWS

• ComplyAdvantage Fraud Detection identifies and prevents transaction fraud

• Veriff and MassPay partner to provide seamless verification of customers and ensure compliance

• Nozomi delivers Vantage IQ to strengthen cybersecurity and resilience for critical infrastructure

• Island Self-Protection provides secure browsing in challenging environments

• Encrypting files and emails: A beginner’s guide to securing sensitive information

• State efforts to undercut local governance widen in scope

• Camaro Dragon APT Group Exploits TP-Link Routers With Custom Implant

• Google AI powered driverless vehicles making San Francisco a testing ground

• 237,000 US government employees affected by data breach

• The best secure browsers for privacy in 2023

• Lacroix Shuts Three Factories For a Week After Cyber-Attack

• Infostealer Malware Surges: Stolen Logs Up 670% on Russian Market

• China’s Mustang Panda Hackers Exploit TP-Link Routers for Persistent Attacks

• President Zelensky imposes sanctions against the Russian IT sector

• Can Large Language Models Boost Your Security Posture?

• Huntress Closes $60M Series C for MDR Expansion

• New Babuk-Based Ransomware Targeting Organizations in US, Korea

• Lancefly APT Targeting Asian Government Organizations for Years

• Severe RCE Bugs Open Thousands of Industrial IoT Devices to Cyberattack

• WhatsApp 2023: New Privacy Features, Settings, and More

• Fraudsters send fake invoice, follow up with fake exec confirmation

• IBM acquires Polar Security to address the growing shadow data problem

• CellTrust partners with Proofpoint to tackle mobile communication risk

• Confluent enhances Confluent Cloud to enforce data integrity

• SolarWinds unveils AI features to help users solve everyday IT problems

• Chip-Maker Arm Reveals Side-attack on Cortex-M, Denies it as failure of The Architecture’s Defenses

• Hacker Marketplace Remains Operational Despite Police ‘Takedown’ Claim

• OpenAI Chief To Call For AI Regulation Before Congress

• Interior wants a fleet of drones ‘on call’ to help with wildfires, other emergencies

• Q1 2023 Privacy: In for Another Wild Year

• How to comply with PCI DSS 4.0 while juggling day-to-day tasks

• decentralized identity

• RA Group Hacks Businesses Using Stolen Babuk Source-Code

• International Cyber Expo 2023 – Registration is now OPEN

• How to Turn Off Phone Without Power Button (Android and iPhone) – A Complete Guide

• OpenAI CEO Sam Altman testifies before U.S. Senate: live

• Compliance automation to confound cyber criminals

• Backups can be Quicker and Less Expensive than Paying the Ransom

• Bl00dy Ransomware Targets Education Orgs via PaperCut Flaw

• 4 Big Mistakes to Avoid in OT Incident Response

• Musk Says He Must Approve All Tesla Hires

• Lacework Appoints Lea Kissner as Chief Information Security Officer

• Inside Qilin Ransomware: Affiliates Take Home 85% of Ransom Payouts

• CISA adds Ruckus bug and another six flaws to its Known Exploited Vulnerabilities catalog

• PharMerica Cyber Incident Exposes 5.8 M People’s Data

• Teltonika Vulnerabilities Could Expose Thousands of Industrial Organizations to Remote Attacks

• Crosspoint Capital Partners Acquires Absolute Software in $870 Million Deal

• BEC Attackers Spoof CC’d Execs to Force Payment

• Re-Victimization from Police-Auctioned Cell Phones

• CopperStealer Malware Crew Resurfaces with New Rootkit and Phishing Kit Modules

• Cyolo Product Overview: Secure Remote Access to All Environments

• CMA Chief Defends Activision Decision Before Parliament

• Lacroix manufacturing facilities shut down following cyberattack

• The Windows Registry

• The Future is (Cyber) Mindful

• EU Ministers Approve World’s First Crypto Rules

• Check Point Research reveals a malicious firmware implant for TP-Link routers, linked to Chinese APT group

• Identify and Protect against Endpoint vulnerabilities

• Coalition: Employee actions are driving cyber insurance claims

• Discord Suffers Data Breach Through Compromised Third Party

• Virustotal expands AI security scans to AutoHotkey and other scripts

• Former ByteDance Executive Accuses Firm Of ‘Lawlessness’

• Attack Surface Risk, Challenges and Changes

• 8220 Gang Evolves With New Strategies

• AI-related threats: How should SMBs approach them?

• Don’t overlook attack surface management

• Google Cloud CISO on why the Google Cybersecurity Certificate matters

• WhatsApp allows users to lock sensitive chats

• What information do hackers need to commit cybercrime?

• Residential Vs. Datacenter Proxies: Which One Is Best For You?

• Amazon ‘Adding ChatGPT-Like Features’ To Product Search

• Ducktail Operation – Hackers May Steal Your Credentials From Web Browser

• Hey, Congress—if you’re looking to cut spending, go after wasteful software contracts

• European Commission Approves Microsoft-Activision Takeover

• Researchers Uncover New “RA Group” Ransomware

• PharMerica Breach Hits Over 5.8 Million Customers

• Damage Cyberattack Halts Publication At The Philadelphia Inquirer

• Silicon Insights: The Past, Present and Future of Account Based Marketing: Part 2

• Hackers Using Golang Variant of Cobalt Strike to Target Apple macOS Systems

• How to Maximize Cloud Benefit with Digital Sovereignty

• The nature of cyberincidents in 2022

• Need to improve the detection capabilities in your security products?

• WhatsApp – Now you Can Lock & Hide Chats with a Password

• Cops crack gang that used bots to book and resell immigration appointments

• Podcast Episode: People With Disabilities Are The Original Hackers

• Lancefly APT uses powerful Merdoor backdoor in attacks on Asian orgs

• Toyota Data Breach – Over 2 Million Customers Data Exposed

• Ransomware News Headlines Trending on Google

• Microsoft’s cloud services are scanning password protected ZIP archives

• New trends in ransomware attacks shape the future of cybersecurity

• 3 tips to accelerate zero trust adoption

• CISOs: How to improve cybersecurity in an ever-changing threat landscape

• FCW Insider Chat: Defense Tech

• Hackers Adapting New Unique Way to Overcome Microsoft Default Macro Block

• A week in security (May 8-14)

• Why we should be more open about ransomware attacks

• Windows 11 is showing its first signs of Rust

• Update now! Ruckus vulnerability added to CISA’s list of actively exploited bugs

• FTC sues VoIP provider over ‘billions of illegal robocalls’

• DDoS Myths: Blackholing and Outsourcing Won’t Stop Everything

Generated on 2023-05-17 23:55:34.731538