IT Security News Daily Summary 2023-05-25

• DHS’ cyber agency seeks small biz support for strategic planning

• Building better maps with open data on building heights

• Lazarus Group Striking Vulnerable Windows IIS Web Servers

• Chinese state-sponsored hackers infiltrated U.S. naval infrastructure, Secretary of the Navy says

• Spotted: Suspected Russian malware designed to disrupt Euro, Asia energy grids

• RBAC With API Gateway and Open Policy Agent (OPA)

• 9 smart contract vulnerabilities and how to mitigate them

• Game over for negligence: What game companies need to know about fast-approaching new trust and safety regulations

• House passes bill to permanently authorize VA’s tech training program

• Microsoft warns of Volt Typhoon, latest salvo in global cyberwar

• Chinese hackers targeting U.S. critical infrastructure

• Netflix’s Password-Sharing Ban Offers Security Upsides

• Smart contract vulnerabilities and how to mitigate them

• Prepare for the Azure Security Engineer Associate certification

• Zyxel firewall and VPN devices affected by critical flaws

• Victory in California! Police Instructors Can’t Claim Copyright Protections to Block Release of Use-of-Force and Other Training Materials

• AI Technology Is Drastically Disrupting the Background Screening Industry

• Memcyco Delivers Real-Time Brandjacking Detection and Protection Solution

• Perception Point Report Finds That Advanced Phishing Attacks Grew by 356% in 2022

• Bcrypt, a Popular Password Hashing Algorithm, Starts Its Long Goodbye

• State turns to the cloud to manage transportation projects

• Microsoft warning about China hacking highlights tensions in South China Sea, says Phosphorus CEO

• Netflix’s Password Sharing Crackdown Goes Global: 103 Countries Affected

• AI Revolutionizes Job Searching, Promotions, and Workplace Success in America

• Virgin Galactic Spaceplane Lands Safely After Test Flight

• How to conduct a smart contract audit and why it’s needed

• WithSecure launches ‘outcome-based’ security at Sphere23 conference

• S3 Ep136: Navigating a manic malware maelstrom

• The Imperative of Automating Fraud Detection in Financial Institutions

• Bank of Ghana Opens SOC to Enable Threat Intelligence Sharing

• EU Approves Viasat Inmarsat Merger

• How I Got Started: White Hat Hacker

• New Russia-Linked CosmicEnergy ICS Malware Could Disrupt Electric Grids

• Memcyco Raises $10 Million in Seed Funding to Prevent Website Impersonation

• Users dish on ransomware protection, recovery at VeeamON

• Data Breach At Apria Healthcare Affects 2 Million People Now Notified

• NordPass unveils File Attachments functionality

• Civil Liberties Groups Demand California Police Stop Sharing Drivers’ Location Data With Police In Anti-Abortion States

• Cyber agencies unveil updated ransomware guide

• Advanced Phishing Attacks Surge 356% in 2022

• Reflections On Ten Years Past The Snowden Revelations

• Google Trust Services ACME API available to all users at no cost

• Happy Mother’s Day! Serving, surviving, and thriving as a mom with a cyber career

• Expo Framework API Flaw Reveals User Data in Online Services

• ChatGPT now generates Malware mutations

• Google Introduces Mobile VRP For Its Android Apps

• NCSC Warns Against Chinese Cyber Attacks on Critical Infrastructure

• Google Cloud Bug Allows Server Takeover From CloudSQL Service

• ‘Operation Magalenha’ Attacks Gives Window Into Brazil’s Cybercrime Ecosystem

• Zyxel Issues Critical Security Patches for Firewall and VPN Products

• Dark Frost Botnet Launches Devastating DDoS Attacks on Gaming Industry

• Tufin R23-1 prevents security blind spots with improved network access automation

• AI Knife Detection System Fails at Hundreds of US Schools

• Microsoft Issues Alert Over Rise in Advanced Phishing Scams

• How is 3-2-1 Backup Policy now Out-dated?

• Criminal Digitisation: How UK Police Forces Use Technology

• Volt Typhoon targets US critical infrastructure with living-off-the-land techniques

• Major Massachusetts Health Insurer Hit by Ransomware Attack, Member Data May Be Compromised

• Security Pros: Before You Do Anything, Understand Your Threat Landscape

• New Russia-Linked CosmicEnergy ICS Malware Could Disrupt Electric Grid

• Chinese Hackers That Triggered US Alarm Hit Defense Targets

• Why Are 1.8M Apria Patients Just Now Being Notified Of A 2021 Breach?

• API Bug In OAuth Dev Tool Opened Apps To Account Hijacking

• UN Official And Others In Armenia Hacked By NSO Group Spyware

• Legion Malware Expands Scope To Target AWS CloudWatch Monitoring Tool

• So the FBI ‘persistently’ abused its snoop powers. What’s to worry about?

• Microsoft Appeals CMA Veto Of Activision Blizzard Acquisition

• New PowerExchange Backdoor Used in Iranian Cyber Attack on UAE Government

• Cynet Protects Hospital From Lethal Infection

• China-linked APT Volt Typhoon targets critical infrastructure organizations

• Invisible Chinese Hackers Penetrate American Bases And Guam

• Corvus Signal provides continuous threat analysis, tailored alerts and always-on recommendations

• Dangerous Regions: Isolating Branch Offices in High-Risk Countries

• What Makes React.js and Node.js the Best Technologies for Building High-Performance Web Apps in 2023?

• CISO Criminalization, Vague Cyber Disclosure Rules Create Angst for Security Teams

• Malicious Windows Kernel Drivers Utlized in BlackCat Ransomware Attacks

• Downing Street Acknowledges ‘Existential’ Risk Of AI

• How Cross-Chain DEXes are Democratizing the Crypto Market?

• Heads Up CEO! Cyber Risk Influences Company Credit Ratings

• Today’s Cyber Defense Challenges: Complexity and a False Sense of Security

• European Cybersecurity Firm Sekoia.io Raises $37.5 Million

• Apria Healthcare Notifying 2 Million People of Years-Old Data Breaches

• How Cybersecurity Reporting Tools Can Help Enhance Your Incident Response Capabilities

• Samsung ASLR Bypass Flaw Is Actively Exploited – Warns CISA

• Buhti Ransomware Adopts Stolen Encryptors For Windows & Linux

• Microsoft, Five Eyes Warn Of Chinese Spying On US Critical Infrastructure

• Wireshark 4.0.6 Released – Fix for 9 vulnerabilities

• Buhti Ransomware Gang Switches Tactics, Utilizes Leaked LockBit and Babuk Code

• Webinar with Guest Forrester: Browser Security New Approaches

• Alert: Brazilian Hackers Targeting Users of Over 30 Portuguese Banks

• Phishing campaign targets ChatGPT users

• Five Eyes agencies detail how Chinese hackers breached US infrastructure

• North Korea-linked Lazarus APT targets Microsoft IIS servers to deploy malware

• New security model launched to eliminate 95% of cyber breaches

• Tips to Protect Against Holiday and Airline Scams

• Latest Chinese state-sponsored attacks on critical US infrastructure spies a continuation of trend, Reports Check Point Research

• Azure Virtual WAN security is enhanced by Check Point CloudGuard, now Generally Available

• Check Point Announces Quantum DDoS Protector X Series with Advanced SecOps Capabilities

• Zero-Day Vulnerability Exploited to Hack Barracuda Email Security Gateway Appliances

• GitLab Security Update Patches Critical Vulnerability

• Drop in Insider Breaches Drives Decline in Intrusions at OT Organizations

• Barracuda email security appliances hacked via zero-day vulnerability (CVE-2023-2868)

• 16-30 April 2023 Cyber Attacks Timeline

• Facial recog system used by Met Police shows racial bias at low thresholds

• Virgin Orbit Shuts Down After Chapter 11 Filing

• File Upload Security and Malware Protection

• Why Today’s Online Entertainment Can Be Compulsive and Self-Control Techniques

• When Does Your iPhone Become Unsafe to Use? – Intego Mac Podcast Episode 293

• Be Cyber-Vigilant on Your Cruise with These Cyber Security Tips

• China’s Stealthy Hackers Infiltrate U.S. and Guam Critical Infrastructure Undetected

• Abusing Web Services Using Automated CAPTCHA-Breaking Services and Residential Proxies

• Biden Picks New NSA Head, Key to Support of Ukraine, Defense of US Elections

• Microsoft Catches Chinese .Gov Hackers Targeting US Critical Infrastructure

• SMBs Targeted by State-Aligned Actors for Financial Theft and Supply Chain Attacks

• AI Used to Create Malware, WithSecure Observes

• Combining GCN and Route Fifty: A note to our readers

• Do you know what your supply chain is and if it is secure?

• Apria Healthcare Hacked – Over 2M Users Data Exposed

• Cybersecurity Asset Inventory in Your Home

• The Rise of the Sovereign Cloud

• Iran-linked Tortoiseshell APT behind watering hole attacks on shipping and logistics Israeli websites

• KnowBe4 Helps Organisations Battle QR Code Phishing Attacks With New Tool

• Navigating the complex world of Cybersecurity compliance

• OneNote documents have emerged as a new malware infection vector

• Fully Encrypted GuLoader Uses Google Drive to Download Payloads

• The Security Hole at the Heart of ChatGPT and Bing

• GUAC 0.1 Beta: Google’s Breakthrough Framework for Secure Software Supply Chains

• Iranian Agrius Hackers Targeting Israeli Organizations with Moneybird Ransomware

• What are the Common Security Challenges CISOs Face?

• Microsoft alerts United States on Volt Typhoon Cyber Attack campaign

• The essence of OT security: A proactive guide to achieving CISA’s Cybersecurity Performance Goals

• Combining FCW and Nextgov: A Note to Our Readers

• 12 vulnerabilities newly associated with ransomware

• Realistic simulations are transforming cybersecurity training

• How smart bots are infecting and exploiting the internet

• Five Eyes and Microsoft accuse China of attacking US infrastructure again

• Space Force will look at how to hack targets from space

• Debt ceiling furloughs are unconstitutional, union will argue before court next week

• Top 10 Cloud Workload Protection Platforms (CWPP) in 2023

• CISA updates ransomware guidance

• Webinar alert: How Coffee County Schools safeguards 7500 students and 1200 staff

• Tracking down a trojan: An inside look at threat hunting in a corporate network

• Rheinmetall attacked by BlackBasta ransomware

• This legit Android app turned into audio-snooping malware – and Google missed it

• Barracuda Alerts Of Breaches In Email Gateways From Zero-Day Flaws

• China Hacks US Critical Networks in Guam, Raising Cyberwar Fears

• How Must IT Leaders Develop Contingency Plans to Combat Geopolitical and Environmental Risks?

• How the Increasing IT Talent Gap is Impacting the Cybersecurity Industry

• Updated ‘StopRansomware Guide’ warns of shifting tactics

• ‘Volt Typhoon’ China-Backed APT Infiltrates US Critical Infrastructure Orgs

• Honeywell Releases Cyber Insights to Better Identify Cybersecurity Threats and Vulnerabilities

• IT Security News Daily Summary 2023-05-24

• FDA seeks industry support to develop standardized data ‘supersets’

• Netwrix Report: Enterprises Suffer More Ransomware and Other Malware Attacks Than Smaller Organizations

• Appdome Launches Build-to-Test, Automated Testing Option for Protected Mobile Apps

• Technology Veterans James Wickett and Ken Johnson Launch DryRun Security to Bring Security to Developers

• Harvard Pilgrim Health Care Notifies Individuals of Privacy Incident

• Apria Healthcare Discloses Major Data Breach Impacting 1.8M Users

• Microsoft Catches Chinese .Gov Hackers in Guam Critical Infrastructure Orgs

• Threat Actors Compromise Barracuda Email Security Appliances

• DHS wants answers on how well digital identity systems work

• Is the census still the only reliable population data source?

• The top 6 enterprise VPN solutions to use in 2023

• Cloudflare releases new AI security tools with Cloudflare One

• Barracuda discloses zero-day flaw affecting ESG appliances

• Philly Inquirer says Cuba ransomware gang’s data leak claims are fake news

• The challenge in identifying problematic online gambling

• Facial Recognition Software: Top Vendors in 2023

• Biden Picks New NSA head, Key to Support of Ukraine, Defense of US Elections

• Top breach and attack simulation use cases

• The best security cameras of 2023

• Addigy exposes RSR update gap in 25% of managed macOS devices

• Congress Must Exercise Caution in AI Regulation

• Spearphishing report: 50% of companies were impacted in 2022

• Ransomware tales: The MitM attack that really had a Man in the Middle

• Digital security for the self‑employed: Staying safe without an IT team to help

• Google’s .zip, .mov Domains Give Social Engineers a Shiny New Tool

• Barracuda Email Security Gateway (ESG) hacked via zero-day bug

• Researchers Spot APTs Targeting Small Business MSPs

• OAuth Flaw in Expo Platform Affects Hundreds of Third-Party Sites, Apps

• Top 10 Pillars of Zero Trust Networks

• DataRobot and Microsoft join forces to accelerate AI adoption

• Wipro and Google Cloud expand partnership to advance generative AI adoption

• Kasten K10 V6.0 enables organizations to create proactive ransomware protection strategies

• Kyndryl unveils new services to help Red Hat OpenShift customers move to hybrid cloud environments

• Announcing the launch of GUAC v0.1

• Memcyco Raises $10M To Deliver Real-Time Brandjacking Protection

• Apple Signs Multi-Billion Dollar Deal With Broadcom For US Chips

• Bail Rescinded For Terra Co-Founder Do Kwon

• Free VPN Service SuperVPN Exposes 360 Million User Records

• Is generative AI bad for the environment? A computer scientist explains the carbon footprint of ChatGPT and its cousins

• How Universities Can Bridge Cybersecurity’s Gender Gap

• Vulnerability Summary for the Week of May 15, 2023

• DevOps Midwest: A Community Event Full of DevSecOps Best Practices

• Israeli Shipping, Logistics Companies Targeted in Watering Hole Attacks

• Why Your Branch of the Future Needs Next-Gen SD-WAN and Prisma SASE

• Apria Loses Financial Data of Nearly Two Million Customers Due to Cyberattack

• British pregnant women are unwittingly handing over their Genetic data to China

• When internet security is a requirement, look to dedicated fiber

• Encrypting files and emails: A beginner’s guide to securing sensitive information

• Meta Starts Axing Nearly 20 Percent Of Irish Workforce

• White House releases new AI national frameworks, educator recommendations

• ‘Chin up and don’t put a lot of money to work’ — why Cramer is getting worried about the market

• Ethical Issues Mount as AI Takes Bigger Decision-Making Role in Multiple Sectors

• Kimsuky Hackers from North Korea Back in Action with Advanced Reconnaissance Malware

• China’s Assessment of Micron’s Security Was Rejected

• Onfido Acquires Airside to Strengthen Digital ID Verification

• Iranian Hackers Set Sights On Israeli Shipping & Logistics Firms

• Dell introduces Project Fort Zero to provide an end-to-end zero trust security solution

• Honeywell launches Cyber Insights to identify cybersecurity threats in OT environments

• Ofcom Allows BT Openreach To Lower Fibre Wholesale Prices

• Memcyco Introduces Real-Time Solution to Combat Brandjacking

• SRE vs. DevOps

• OAuth Vulnerabilities in Widely Used Expo Framework Allowed Account Takeovers

• Now Live: Threat Detection and Incident Response Virtual Summit

• Lazarus Group Targeting Microsoft Web Servers to Launch Espionage Malware

• New Apple RSR Flaw Blocks MDM Functionality on macOS Devices

• Iranian Tortoiseshell Hackers Targeting Israeli Logistics Industry

• Infecting SSH Public Keys With Backdoors

• Identify and Fix XSS Vulnerabilities in Your Web App

• The US government sanctioned four entities and one individual for supporting cyber operations conducted by North Korea

• Quantum Attack Would Trigger Great Depression, Think Tank Warns

• OpenAI Leaders Call For Regulation To Prevent AI Destroying Humanity

• Widespread FBI Abuse Of Foreign Spy Law Sets Off Alarm Bells

• BlackCat Ransomware Takes Control With New Kernel Driver

• Netflix Puts U.S. Password Sharing Customers On Notice

• Memcyco raises $10 million to deliver real-time brandjacking protection

• Cohesity partners with Google Cloud to bring the power of AI to data security and management

• Appdome’s Build-to-Test streamlines mobile app cybersecurity testing

• US Sanctions North Korean Entities Training Expat IT Workers in Russia, China and Laos

• 5 Questions to Ask When Evaluating a New Cybersecurity Technology

• A.I. poses existential risk of people being ‘harmed or killed,’ ex-Google CEO Eric Schmidt says

• CISA, NSA Issue New IAM Best Practice Guidelines

• Improving supply chain resiliency with Red Hat Trusted Software Supply Chain

• What’s Russia Planning?

• Salt Security Uncovers API Security Flaws in Expo Framework, Issues have been Remediated

• Gartner Names Synopsys Leader in Application Security Testing for Seventh Consecutive Year

• Red Hat Service Interconnect solves cross-platform and multi-cloud communication challenges

• Axiado introduces AI-driven security processors

• Dell NativeEdge secures and automates edge infrastructure

• Europe’s largest known illegal IPTV operation dismantled by police

• Android App With 50,000 Downloads in Google Play Turned Into Spyware via Update

• Private Sector Cybersecurity Task Force Called for to Defend Democracies

• To Save the News, We Must Shatter Ad-Tech

• Password manager Bitwarden will soon be able to store passkeys

• Meta Sells Giphy At Huge Loss After CMA Order

• New Android Malware on Google Play Store with Over 50,000 Installs

• Auditing Tools for Kubernetes

• Breach Alert! Rheinmetall AG Confirms Being Hit by BlackBasta Ransomware Attack

• New Honeywell OT Cybersecurity Solution Helps Identify Vulnerabilities, Threats

• US Sanctions North Korean University for Training Hackers

• Data Stealing Malware Discovered in Popular Android Screen Recorder App

• What to Look for When Selecting a Static Application Security Testing (SAST) Solution

• Ukraine’s CERT-UA warns of espionage activity conducted by UAC-0063

• Indiana, Iowa, and Tennessee Pass Comprehensive Privacy Laws

• IT employee piggybacked on cyberattack for personal gain

• Microsoft, GitHub announce application security testing tools for Azure DevOps

• Sekoia.io raises €35 million to strengthen its positioning on the international stage

• Opti9 collaborates with Wasabi to provide clients with AI-powered ransomware detection

• Cool, Funny, Best Gaming Names – Creative Ideas For Your Ing Personality

• AnimeUltima 2023 – Top 10 Alternatives to Watch Anime Online

• Secure Your Netflix Account: Limited Sharing Can Result in Dark Web Sales for €2 per Month

• What is DKIM Email Security Technology? DKIM Explained

• Netflix Password Crackdown Arrives In UK, US

• Diversity advocate and renowned practitioner, Becky Pinkard, to be Inaugurated into Infosecurity Europe’s Hall of Fame

• Legion Malware Upgraded to Target SSH Servers and AWS Credentials

• Legion AWS credential harvester and hijacker analyzed

• White House Unveils New Efforts to Guide Federal Research of AI

• 50% of UK CEOs See Cyber as a Bigger Business Risk than the Economy

• Backup Repositories Targeted in 93% of Ransomware Attacks

• How Your Business Could Protect Its Cybersecurity in a Surprisingly Cost-Effective Fashion

• How to Streamline Communication with Microsoft Teams Operator Connect

• What Is the Ghost of Tsushima Legends Mode – Everything You Need to Know

• Security Awareness Training (SAT) is finally having its day. Here’s why.

• Understanding how Polymorphic and Metamorphic malware evades detection to infect systems

• Legitimate Android app transforms into data-snooping malware

• IT security analyst admits hijacking cyber attack to pocket ransom payments

• AhRat Android RAT was concealed in iRecorder app in Google Play

• Confidential Containers on Azure with OpenShift: A technical deep dive

• Pros and Cons of Android vs. iOS Game Development

• The rising trend of phishing on IPFS: What you need to know

• Virtual Event Today: Threat Detection and Incident Response Summit

• Cyber Attacks Strike Ukraine’s State Bodies in Espionage Operation

• N. Korean Lazarus Group Targets Microsoft IIS Servers to Deploy Espionage Malware

• Why performing security testing on your products and systems is a good idea

• Facebook Hit With record-breaking $1.3 Billion Fine Over Data Rules

• Almost 300k People Affected by Ransomware Attack on Dish Network

• How to Track Ransomware Attacks: A Comprehensive Guide

• Ransomware news trending on Google

• China’s tech sector may see fewer regulatory surprises — not zero, says S&P Global Ratings

• GoldenJackal: Threat Risk For Organizations In Middle East & South Asia

• CISO-level tips for securing corporate data in the cloud

• How to avoid shadow AI in your SOC

• CISOs: How to improve cybersecurity in an ever-changing threat landscape

• 6 ChatGPT risks for legal and compliance leaders

• Navigating the quantum leap in cybersecurity

• US bans North Korean outsourcer and its feisty freelancers

• Against the Clock: Cyber Incident Response Plan

• Google Adds Guardrails to Keep AI in Check

• Hackers Use Weaponized DOCX File to Deploy Stealthy Malware

• Cloud-based IT operations are on the rise

• 2023-05-23 – Pikabot infection with Cobalt Strike

• Here’s the secret sauce that fueled Palo Alto Networks’ beat and raise despite tough times

• Palo Alto Networks CEO calls generative AI a boon for customer satisfaction and company efficiency

• Malvertising via brand impersonation is back again

• Update now! Apple issues patches for three actively used zero-days

• Google to pay $40m for “deceptive and unfair” location tracking practices

• Employee guilty of joining ransomware attack on his own company

• AI generated Pentagon explosion photograph goes viral on Twitter

• Apria Healthcare says potentially 2M people caught up in IT security breach

• What Is Sender Policy Framework? SPF Email Explained

Generated on 2023-05-25 23:55:34.387234