IT Security News Daily Summary 2023-05-23

• Email Spoofing: What it Is & How to Prevent It

• SuperMailer Abuse Bypasses Email Security for Super-Sized Credential Theft

• Most Organizations Expect Ransomware Attack Within a Year

• 8 Data Anonymization Techniques to Safeguard User PII Data

• DOD aims to leverage AI and automation in records management

• EY survey: Tech leaders to invest in AI, 5G, cybersecurity, big data, metaverse

• Understand the Evolution of Captive Portal to Cloud Authentication Solutions

• Threat actors leverage kernel drivers in new attacks

• 5 Ways Smart Contracts Are Making A Real-World Difference

• Metadata catalog refreshes one state’s water use insights

• County’s integrated platform delivers client-focused social services

• Report: Facebook Layoffs Could Hurt Effort To Stop Misinformation

• 5 Best Bot Protection Solutions and Software for 2023

• What Security Professionals Need to Know About Aggregate Cyber Risk

• Navigating the Web with Confidence: Tips for a Cleaner, Safer Experience

• Lawmakers advocate more funds for state fusion centers

• Dell’s Project Helix heralds a move toward specifically trained generative AI

• Chinese Labs Are Selling Fentanyl Ingredients for Millions in Crypto

• The previously undocumented GoldenJackal APT targets Middle East, South Asia entities

• Threat Actor Abuses SuperMailer for Large-scale Phishing Campaign

• Mikrotik Belatedly Patches RouterOS Flaw Exploited at Pwn2Own

• There’s Finally a Way to Improve Cloud Container Registry Security

• GAO Urges Federal Agencies to Implement Key Cloud Security Practices

• Microsoft Build 2023: Announcing new identity, compliance, and security features from Microsoft Security

• Security Challenges for Microservice Applications in Multi-Cloud Environments

• Cohesity partners with Google Cloud to empower organizations with generative AI and data capabilities

• The hidden key to stopping public sector fraud

• City greenlights autonomous vehicle testing for public transit

• How to become a bug bounty hunter: Getting started

• How to use Wfuzz to find web application vulnerabilities

• PyPI open-source code repository deals with manic malware maelstrom

• LogRhythm vs Splunk: Top SIEM Solutions Compared

• Red Hat Advanced Cluster Security Cloud Service scales cloud-native security across the hybrid cloud

• Hornetsecurity 365 Permission Manager helps companies protect critical data

• Delinea Cloud Suite updates reduce the risk of lateral movement in cybersecurity breaches

• NETSCOUT introduces visibility and instrumentation for threat detection in 4G and 5G networks

• What the Supreme Court’s Decision in Warhol Means for Fair Use

• 6 Ways to Mitigate Risk While Expanding Access

• Why Republican-led states keep leaving a group that verifies voter rolls

• How to use Bitwarden Send (and when you should)

• Microsoft Dataverse: Going from Excel to new AI-powered tools

• New ‘GoldenJackal’ APT Targets Middle East, South Asia Governments

• A New Look for Risk in Awareness Training

• 100% OSCP Certified Team: How PacketLabs Recruits Top Talent

• How the Chrome Root Program Keeps Users Safe

• Dish confirms 300,000 people’s data was exposed in February’s attack

• A TikTok ban isn’t a data security solution. It will be difficult to enforce – and could end up hurting users

• Google Unveils Bug Bounty Program For Android Apps

• GoldenJackal: New Threat Group Targeting Middle Eastern and South Asian Governments

• Avos Ransomware takes control of emergency systems in Bluefield University

• The intersection of telehealth, AI, and Cybersecurity

• Popular Android Screen Recorder iRecorder App Revealed as Trojan

• WhatsApp Now Allow You to Edit Sent Messages

• Fata Morgana Watering Hole Attack Targets Shipping, Logistics Firms

• Red Hat Trusted Software Supply Chain enhances an organization’s resilience to vulnerabilities

• Stytch expands its platform to offer B2B authentication

• Veriff Age Estimation prevents users from accessing age restricted products or services

• Vaultree unveils Fully Functional Data-In-Use Encryption solution for the healthcare sector

• Radware Cloud Web DDoS Protection blocks Tsunami DDoS attacks

• The Royal Gang Is Developing Its Own Malware Loader

• GoldenJackal Targets Diplomatic Entities in Middle East, South Asia

• Google announced its Mobile VRP (vulnerability rewards program)

• 12 Ways To Protect Small Businesses From Cyberattacks

• Fake ChatGPT Apps may Fraud you out of Your Money

• How Hackers Launched an Attack on European Spacecraft

• Data And Employees Of BSI Shared On The Dark Web By LockBit Ransomware Gang

• TikTok to let Oracle view source code, algorithm, and content moderation

• Red Hat Pushes New Tools to Secure Software Supply Chain

• Rheinmetall Says Military Business Not Impacted by Ransomware Attack

• Google Launches Bug Bounty Program for Mobile Applications

• Iranian Hackers Using New Windows Kernel Driver in Attacks

• Bridgestone CISO: Lessons From Ransomware Attack Include Acting, Not Thinking

• Microsoft: BEC Attackers Evade ‘Impossible Travel’ Flags With Residential IP Addresses

• TikTok to let Oracle view source code, algorithm and content-moderation

• China Says AI Disruption Could Pose ‘Serious Challenge’

• North Korean Kimsuky Hackers Strike Again with Advanced Reconnaissance Malware

• German arms manufacturer Rheinmetall suffered Black Basta ransomware attack

• 5 Ways Hackers Will Use ChatGPT For Cyberattacks

• Conceal and White Rock Cybersecurity partner to isolate browsing sessions

• IRONSCALES and Infinigate collaborate to provide customers with email security solution

• Fusion Risk Management TPRM enhancements deliver continuous monitoring of third parties

• Dark Web Monitoring: Unveiling the Underground Ecosystem of Cybercriminals

• EU Restarts Apple Tax Case Before EU’s Top Court

• Enterprises Must Prepare Now for Shorter TLS Certificate Lifespans

• Amazon’s PillPack Reports Data Breach Affecting More Than 19,000

• China Hasn’t Told Micron Why It Failed Security Review, Or What Its Ban Means

• Uncle Sam Strangles Criminals’ Cash Flow By Reining In Money Mules

• Ads For Lucrative Jobs In Asia Fail To Mention Chance Of Slavery As Crypto-Scammer

• KeePass Bug Lets Attackers Extract The Master Password From Memory

• FBI Warns of Hackers Exploiting Public Charging Stations to Steal iPhone Data

• This Brute-force Fingerprint Attack has the Potential to Compromise Your Android Phone

• Hypervisors and Ransomware: Defending Attractive Targets

• SFPD Obtained Live Access to Business Camera Network in Anticipation of Tyre Nichols Protest

• Ensuring Qr Code Safety: Best Practices For Secure Scanning

• How To Reduce The Security Risk Of Remote Work

• Mastercard collaborates with HealthLock to protect medical data

• WithSecure releases Cloud Security Posture Management to identify insecure cloud configurations

• N-able partners with JCDC to reduce security risk for MSPs

• ESET: Android App ‘iRecorder – Screen Recorder’ Trojanized with AhRat

• How To Plan An App Launch

• Microsoft China Exec Warns Of Hasty China AI Investments

• New WinTapix.sys Malware Engages in Multi-Stage Attack Across Middle East

• The Rising Threat of Secrets Sprawl and the Need for Action

• Why is electronics so important today and how to secure your data?

• Schools’ AI Weapon Detection Systems Accused Of Flaws

• Mitigating Risks in Cloud Native Applications

• Cutting Through the Noise: What is Zero Trust Security?

• Two-Thirds of IT Leaders Say GDPR Has Reduced Consumer Trust

• A deeper insight into the CloudWizard APT’s activity revealed a long-running activity

• Regulator Group Proposes First Global Crypto Rules

• AppMap: A map to reduce developer toil

• A Bright Future for Forensic Analysis

• #TripwireBookClub – How to Hack Like a Legend

• Simple OSINT techniques to spot AI-fueled disinformation, fake reviews

• Future Exploitation Vector: File Extensions as Top-Level Domains

• TikTok Sues Montana Over App Ban

• Employer Of Record Germany And Hiring: What You Need To Know

• FBI Misuse of Surveillance Tool on Jan. 6 Protesters

• WhatsApp Lets Users Edit Sent Messages – For 15 Minutes

• Meet the GoldenJackal APT group. Don’t expect any howls

• An Exploding Pentagon In A Fake Photo Sends Twitter Into Frenzy

• Privileged Access Management (PAM) Best Practices

• IAM-Driven Biometrics: The Security Issues with Biometric Identity and Access Management

• Need to improve the detection capabilities in your security products?

• China Bans U.S. Chip Giant Micron, Citing “Serious Cybersecurity Problems”

• 8 Key Components of a CIAM Platform

• BlackCat Ransomware affiliate uses signed kernel driver to evade detection

• BrutePrint – Bruteforce Attack to Bypass User Authentication on Smartphones

• 7 access management challenges during M&A

• Ads for lucrative jobs in Asia fail to mention chance of slavery as crypto-scammer

• Cyber threat with iPhone Phone Link feature on Windows 11 laptops

• Online scams target bargain-hunting holiday travelers

• The fragmented nature of API security ownership

• Gap between OT security assumptions and reality

• FCW Insider Chat: The top winners of the Fed100

• A Threat to Passkeys? BrutePrint Attack Bypasses Fingerprint Authentication

• China hasn’t told Micron why it failed security review, or what its ban means

• Interview With a Crypto Scam Investment Spammer

• A week in security (May 15-21)

• Update now: 9 vulnerabilities impact Cisco Small Business Series

• ChatGPT: Cybersecurity friend or foe?

• Webinar recap: EDR vs MDR for business success

• Identity crisis: How an anti-porn crusade could jam the Internet, featuring Alec Muffett: Lock and Code S04E11

• Uncle Sam strangles criminals’ cashflow by reining in money mules

• Newly Public FISC Opinion is The Best Evidence For Why Congress Must End Section 702

• Iowa hospital discloses breach following Royal ransomware leak

• Google Cloud launches new cloud region in Doha

• Stop Backing Up Ransomware

• Chinese state-sponsored attack uses custom router implant to target European governments

• CapCut Users Beware: Phishing Sites Distributing Malware

• Improving Cybersecurity Requires Building Better Public-Private Cooperation

• IT Security News Daily Summary 2023-05-22

• Meta Hit With $1.3B Record-Breaking Fine for GDPR Violations

• PyPI Shuts Down Over the Weekend, Says Incident Was Overblown

• EFF to Court: California’s Public Records Law Must Remain a Check on Police Use of Drones

• Follow a 6-phase roadmap to secure cyber-physical systems

• EU Regulators Hit Meta with Record $1.3 Billion Fine for Data Transfer Violations

• How to manage and share files online using NordLocker

• DarkBERT: Enhancing Cybersecurity Efforts on the Dark Web

• What Is Istio Ambient Mesh?

• FBI and CIA combat cyber talent shortage with new hiring methods

• Gurucul Powered by Snowflake to Rapidly ID and Mitigate Risks

• China bars Micron chips from critical infrastructure purchases

• Leaked EU Document Shows Spain Wants to Ban End-to-End Encryption

• Carper says he won’t run for fifth Senate term

• Leaked Government Document Shows Spain Wants to Ban End-to-End Encryption

• CISA adds iPhone bugs to its Known Exploited Vulnerabilities catalog

• Ferrari teams up with Bitdefender, as car racing security shifts into high gear

• Micron: China Issues Ban On US Chipmaker

• First responders need presumptive ID technology to better assess and act on hazardous incidents

• Palo Alto Networks Recognized in Critical Capabilities Report

• From Past Lessons to Future Protections: EFF’s Advice to the EU Commission on Extended Reality Governance

• Developers Are Scaling Faster Than Ever: Here’s How Security Can Keep Up

• Start students early to build semiconductor talent pipeline

• Phone scamming kingpin gets 13 years for running “iSpoof” service

• Digital twins for cities promising, yet problematic

• Update: Facebook Hit With Record $1.3 Billion Fine For Data Transfers

• Hackers Utilise Azure Serial Console to Get Unauthorized Access to Virtual Machines

• From Harvard to Ukraine

• Cyber Threat Hunting vs Incident Response: What’s the Difference?

• Forrester predicts 2023’s top cybersecurity threats: From generative AI to geopolitical tensions

• Fish and Wildlife to deploy drones in battle against invasive plants

• Indonesian Cybercriminals Exploit AWS for Profitable Crypto Mining Operations

• EU hits Meta with $1.3 billion fine for transferring European user data to the US

• Google Settles Location Tracking Lawsuit For Only $39.9M

• More UK Councils Caught By Capita’s Open AWS Bucket Blunder

• Meta Fined $1.3 Billion, Ordered To Stop Sending EU Data To US

• The Undergound History Of Russia’s Most Ingenious Hacker Group

• Sharing your business’s data with ChatGPT: How risky is it?

• How and why to use multiple Apple IDs on the same Mac

• How to make sure the reputation of your products and company is good

• Facebook Meta faces €1.3 billion penalty by GDPR

• Ohio Senate approves DATA Act standardizing elections information statewide

• 5 simple ways to improve your Android phone security today

• China Issues Ban on US Chipmaker Products

• IBM’s Polar Buy Creates Focus on a New ‘Shadow Data’ Cloud Security Area

• How Blockchain Technology is Playing a Major Role in Combating Crypto Hacking Risk

• Tackling the Top Initial Attack Vectors in Ransomware Campaigns

• Changing Methods of Tracking and Sharing Healthcare Data

• Meta’s $1.3 Billion Fine Is a Strike Against Surveillance Capitalism

• New Type of Attack: BrutePrint Can Breach Your Smartphone’s Fingerprint Security

• Google settles location tracking lawsuit for only $39.9M

• Italy Data Protection Office Plans Broader AI Review

• Report: More organizations still plan to increase their tech staff

• Food Distributor Sysco Says Cyberattack Exposed 126,000 Individuals

• GAO Tells Federal Agencies to Fully Implement Key Cloud Security Practices

• Cyber Warfare Lessons From the Russia-Ukraine Conflict

• Onfido acquires Airside to boost identity verification for individuals and businesses

• Nvidia Builds ‘Grace’ CPU-Powered Supercomputer

• NIST Launches Cybersecurity Initiative for Small Businesses

• Bad Magic’s Extended Reign in Cyber Espionage Goes Back Over a Decade

• API security

• Dish Network says the February ransomware attack impacted +300,000 individuals

• CISA Warns that Hackers Actively Exploiting Samsung Vulnerability

• Dish Ransomware Attack Impacted Nearly 300,000 People

• Food Distributor Sysco Says Cyberattack Affects 126,000 Individuals

• Meta Faces Hefty €1.2bn Fine For GDPR Breach In EU-US Data Transfers

• KeePass Vulnerability: Hackers May Have Stolen the Master Passwords

• Vulnerability in Zyxel firewalls may soon be widely exploited (CVE-2023-28771)

• IBM partners with global universities to develop a quantum-centric supercomputer

• More UK councils caught by Capita’s open AWS bucket blunder

• Meta Fined Record £1bn Over Facebook Data Transfers

• VPN Architecture for Internal Networks

• Do you Work in a SOC Noise Factory?

• How ChatGPT is Changing Our World

• VERT Reads All About It – Cybersecurity News May 22, 2023

• Meta Fined €1.2bn for Violating GDPR

• Impacket Cheatsheet For Penetration Testers

• Tencent Launches WeChat Palm Payments

• Mastermind Behind iSpoof Fraud Website Sentenced to 13 Years in the UK

• Cyberattacks Worst Threat to Local Governments in 2023: Here’s How to Stay Protected

• Are Your APIs Leaking Sensitive Data?

• China bans chip maker Micron from its key information infrastructure

• Using Tech For Good: Introducing The Zensory

• How to stay anonymous online

• 5 Reasons for Building an RPA Center of Excellence

• China Tells Tech Manufacturers to Stop Using Micron Chips, Stepping Up Feud With United States

• Facebook Parent Meta Hit With Record Fine for Transferring European User Data to US

• Microsoft: BEC Scammers Use Residential IPs to Evade Detection

• Investigating Risks Through Threat Hunting Capability Guide

• Fighting the five

• An Overview of Kubernetes Security Projects at KubeCon Europe 2023

• BlackCat Ransomware Deploys New Signed Kernel Driver

• Cash App Founder Bob Lee Murder Suspect Pleads Not Guilty

• Russian IT Guy Jailed for DDoSing Government Websites

• Samsung Smartphone Users Warned of Actively Exploited Vulnerability

• UK Man Sentenced to 13 Years for Running Multi-Million Fraud Website

• Meta fined a record $1.3 billion over EU user data transfers to the U.S.

• 6 Key Technologies Used In RPG Video Game Development

• Council Publishes 15,000 Staff Salary Details Online

• How To Install Potato Streams in Windows 7, 8.1, 10, 11, Mac, Linux, and Ubuntu

• How To Become A Measurement Consultant And Why

• The Silicon UK In Focus Podcast: Reducing Operational Emissions

• China Bans Micron From Key Infrastructure

• U.K. Fraudster Behind iSpoof Scam Receives 13-Year Jail Term for Cyber Crimes

• Diligent developer courageously lied about exec’s NSFW printouts – and survived long enough to quit with dignity

• Software developers, how secure is your software?

• KeePass Exploit Allows Attackers to Recover Master Passwords from Memory

• Energy Department officials eye 2027 date to stand-up cyber intelligence center

• Lawmakers have questions about online passport renewal

• BatLoader campaign impersonates ChatGPT and Midjourney to deliver Redline Stealer

• Blacklist untrustworthy apps that peek behind your firewall

• Cyber Attack on European Space Agency to compromise satellite imaging data

• Exploring Cybersecurity Research Topics for Master’s Degree Studies

• Hackers Using AI Tools Like ChatGPT to Deploy Malware

• How continuous security monitoring is changing the compliance game

• How generative AI is reshaping the identity verification landscape

• Wireless Broadband Alliance CEO on key drivers for Wi-Fi adoption in enterprise networks

• What flying a plane can teach you about cybersecurity

• Malicious links and misaddressed emails slip past security controls

Generated on 2023-05-23 23:55:28.732387