IT Security News Daily Summary 2023-06-02

• AI in the workplace: Local officials explore responsible use

• PyPI’s 2FA Requirements Don’t Go Far Enough, Researchers Say

• Cybersecurity standards gain ground in counties

• Kaspersky Reveals iPhones of Employees Infected with Spyware

• Agencies issue rule to ban TikTok on contractor devices

• ‘PostalFurious’ SMS Attacks Target UAE Citizens for Data Theft

• New botnet Horabot targets Latin America

• Google’s Latest Android Feature Drop: Dark Web Search for Gmail ID

• NASA puts error data to use to speed up tsunami detection

• Fūsus Competes in Fourth ‘ASTORS’ Homeland Security Awards

• New QBot Malware Campaign Exploits WordPad for Infection

• Shiba Inu: The Meme Coin Fueling an Open-Source Ecosystem

• Malaysia goes its own Huawei, won’t ban Chinese vendor from 5G network

• U.S., South Korean agencies warn of state-sponsored spearphishing

• Point32Health ransomware attack exposed info of 2.5M people

• Two Years Since the Colonial Pipeline Hack, Here’s What We’ve Learned

• Microsoft is finally making Edge a much more secure place to surf the web

• Improve your app security on Azure

• Streamers Ditch Netflix for Dark Web After Password Sharing Ban

• ‘Picture-in-Picture’ Obfuscation Spoofs Delta, Kohl’s for Credential Harvesting

• Understanding SEBI’s Framework for Cloud Services Adoption by Financial Entities in India

• Digital Rights Updates with EFFector 35.7

• How AI could take over elections – and undermine democracy

• Enzo Biochem Hit by Ransomware, 2.5 Million Patients’ Data Compromised

• How to Protect Operational Technology (OT) from Cyber Threats

• Netflix password sharing crackdown can be hacked with a new VPN

• Navigating the complex world of Cybersecurity compliance

• Encrypting files and emails: A beginner’s guide to securing sensitive information

• MOVEit file transfer vulnerability exploited by hackers

• Develop valuable cyber security skills over a lifetime for only $70

• 1Password enables passkeys — a new option from passwords

• Zyxel vulnerability under ‘widespread exploitation’

• US and Korean Agencies Issue Warning on North Korean Cyber-Attacks

• Japan Privacy Watchdog Warns ChatGPT Maker OpenAI On User Data

• Python Byte Code Used To Avoid Detection And Load Malware

• Clickless iOS Exploits Infect Kaspersky iPhones With Never-Before-Seen Malware

• BlackCat Updates Tradecraft With Stealth And Speed

• China Is Digging A Big Frickin’ Hole 33,000 Feet Into The Earth

• Safeguarding Your Work: What Not to Share with ChatGPT

• Undiscovered Attacks Against Middle Eastern Targets Conducted Since 2020

• Senate passes debt ceiling bill, approves new work requirements for benefits

• Researchers claim Windows “backdoor” affects hundreds of Gigabyte motherboards

• Malicious PyPI Packages Use Compiled Python Code to Bypass Detection

• Our Right To Challenge Junk Patents Is Under Threat

• Capita Cyberattack Sees 90 Organizations Report Possible Data Breaches

• Ghost Sites: Attackers are now Exposing Data From Deactivated Salesforce Sites

• Here’s How Script Kiddies are Targeting Internet Users Worldwide

• Military vehicle electrification continues to roll forward, but may face bumps in the road

• Login.gov is still ‘vital’ despite setbacks, GSA official says

• Kali Linux Penetration Testing Tutorial: Step-By-Step Process

• Digi International updates SkyCloud features for industrial monitoring and control solutions

• 9 Million Patients’ Data Exposed by Ransomware Attack on US Dental Giant

• Privacy vs. Security: Discovering the Difference

• Meta Workers Told To Return To Office Three Days A Week – Report

• Detecting Insider Threats: Leverage User Behavior Analytics

• Information of 2.5M People Stolen in Ransomware Attack at Massachusetts Health Insurer

• Open-Source LLMs

• How CISOs Can Manage the Intersection of Security, Privacy, And Trust

• Want Sustainable Security? Find Middle Ground Between Tech & Education

• Idaho Hospitals Working to Resume Full Operations After Cyberattack

• High-Severity Vulnerabilities Patched in Splunk Enterprise

• US, South Korea Detail North Korea’s Social Engineering Techniques

• MOVEit Transfer software zero-day actively exploited in the wild

• Extending Zero Trust OT Security to Meet Air Gap Requirements

• OffSec expands Global Partner Program to empower and support partner organizations

• Google triples reward for Chrome full chain exploits

• ON2IT adds CISA Zero Trust Maturity Model to AUXO cloud platform

• Ransomware Attack on Harvard Pilgrim Health Care Exposes 2.5M Patients Data

• New Botnet Malware ‘Horabot’ Targets Spanish-Speaking Users in Latin America

• Moscow Alleges NSA Mass Spying On Russian iPhones

• In search of the Triangulation: triangle_check utility

• Watch CNBC’s full interview with SentinelOne CEO Tomer Weingarten

• SentinelOne CEO Tomer Weingarten on Q1 earnings: We need to perform better

• Senate passes debt deal, agency spending freeze bill headed to Biden’s desk

• Galvanick raises $10 million for its industrial cybersecurity platform

• The Importance of Managing Your Data Security Posture

• Russia’s FSB blames the US intelligence for Operation Triangulation

• Twitter Loses Second Head Of Trust And Safety

• Check Point’s Interactive Cyber Center Teaches Thousands of Young People to Be Safe Online

• Apple Denies Helping US Government Hack Russian iPhones

• Enzo Biochem Ransomware Attack Exposes Information of 2.5M Individuals

• MOVEit Transfer zero-day attacks: The latest info

• Free Threat Hunting Platform Security Onion Released Updates – What’s New!

• Poor Communication During a Data Breach Can Cost You — Here’s How to Avoid It

• Elevate Your Cloud Defense: 6 Top Strategies for Safeguarding Cloud-Native Apps

• Camaro Dragon Strikes with New TinyNote Backdoor for Intelligence Gathering

• Cybersecurity in Online Trading: Protecting Your Investments

• Jetpack Plugin Patched A Critical Vulnerability Triggering WordPress Force-Installs

• Zero-Day in MOVEit File Transfer Software Exploited to Steal Data From Organizations

• Insurers Predict $33bn Bill for Catastrophic “Cyber Event”

• Checklist: Network and systems security

• Chinese Phishing Gang “PostalFurious” Expands Campaign

• Qakbot: The trojan that just won’t go away

• Kaspersky Says it is Being Targeted By Zero-Click Exploits

• Malicious extensions: Avast detects new threats on the Chrome Web Store

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Silicon UK Pulse: Your Tech News Update: Episode 5

• The rise and fall of ransomware: Insights from Avast’s Q1/2023 Threat Report

• North Korea’s Kimsuky Group Mimics Key Figures in Targeted Cyber Attacks

• This malicious PyPI package mixed source and compiled code to dodge detection

• Amazon agrees to pay $31 after FTC Privacy and Security charges

• The Evolving Landscape of Cybersecurity: Trends and Challenges

• How defense contractors can move from cybersecurity to cyber resilience

• New infosec products of the week: June 2, 2023

• Toyota Server Misconfiguration Leaks Owners Data for Over Seven Years

• You might have been phished by the gang that stole North Korea’s lousy rocket tech

• Google Temporarily Offering $180,000 for Full Chain Chrome Exploit

• Despite cutbacks, IT salaries expected to rise

• Cybercriminals use legitimate websites to obfuscate malicious payloads

• Introducing the book: Cybersecurity First Principles

• When internet security is a requirement, look to dedicated fiber

• CISOs: How to improve cybersecurity in an ever-changing threat landscape

• MOVEit Transfer Under Attack: Zero-Day Vulnerability Actively Being Exploited

• Millions of Gigabyte PC motherboards backdoored? What’s the actual score?

• Operation Triangulation: previously undetected malware targets iOS devices

• Amazon’s Ring cameras were used to spy on customers

• US hospital forced to divert ambulances after cyberattack

• Deployed publicly accessible MOVEit Transfer? Oh no. Mass exploitation underway

• Events Ripper Update

• Windows Users Beware: Crooks Relying on SeroXen RAT to Target Gamers

• Utilizing the Economic Calendar: A Key to Enhancing Safety in Cryptocurrency Trading

• California-based workforce platform Prosperix leaks drivers licenses and medical records

• The Foreign Intelligence Surveillance Court Has Made a Mockery of the Constitutional Right to Privacy

• Early funding allows states to explore broadband options

• Digital driver’s license available for Google Wallet

• Kremlin claims Apple helped NSA spy on diplomats via iPhone backdoor

• IT Security News Daily Summary 2023-06-01

• Cyversity and United Airlines to Provide Cybersecurity Training Scholarships to Cyversity Members

• DNB Strengthens its Network Security Posture and Productivity With Ericsson Security Manager Solution

• How To Reduce Cost Overruns For AI Implementation Projects

• New bill proposes ‘made in China’ tags for mobile apps

• Federal vision to streamline cyber incident reporting expected this summer

• Tel Aviv Stock Exchange Selects CardinalOps to Reduce Risk of Breaches Due to Undetected Attacks

• Kaspersky Says New Zero-Day Malware Hit iPhones—Including Its Own

• Here’s what earnings from industry rivals mean for two Club names

• Why DMARC Is Failing: 3 Issues With DMARC

• Amazon Pays $30.8M to Settle Ring Spying & Alexa Privacy Lawsuits

• Generative AI: What Every CISO Needs to Know

• Damage assessment tool streamlines data collection for disaster prep, response, recovery

• Pharma Companies Fight Back Against Counterfeit Drug Sellers On Facebook

• What Is DMARC Email Security Technology?

• The Dark Side of DevSecOps and Why We Need Governance Engineering

• DMARC Setup & Configuration: Step-By-Step Guide

• Apps with over 420 Million downloads from Google Play unveil the discovery of SpinOk spyware

• The Perfect Blend: Qdoba’s SASE Transformation

• Zero-day vulnerability in MoveIt Transfer under attack

• How Do I Reduce Security Tool Sprawl in My Environment?

• Jetpack WordPress Plug-in API Bug Triggers Mass Updates

• 1Kosmos BlockID available in AWS Marketplace

• Resecurity presents Digital Identity Product to protect digital identities

• Most people are aware of their data trails, but few know how to deal with it: Okta study

• VentureBeat Q&A: CrowdStrike’s Michael Sentonas on importance of unifying endpoint and identity security

• What state unemployment modernization pilots get right

• 10 Top Governance, Risk and Compliance (GRC) Tools for 2023

• Amazon To Discontinue Celebrity Voices For Alexa – Report

• Google Drive Deficiency Allows Attackers to Exfiltrate Workspace Data Without a Trace

• Sustained ‘Red Deer’ Phishing Attacks Impersonate Israel Post, Drop RATs

• New Relic launches Amazon Security Lake integration

• Cobalt Iron Compass NAS Protector simplifies management of NAS data

• WithSecure’s USB armory enables post-quantum cryptography in space

• Secureworks strengthens industrial cybersecurity with two new offerings

• Automation risks creating a two-tier workforce of haves and have-nots

• NICE Framework (National Initiative for Cybersecurity Education Cybersecurity Workforce Framework)

• 6 ways Amazon Security Lake could boost security analytics

• S3 Ep137: 16th century crypto skullduggery

• Novel PyPI Malware Uses Compiled Python Bytecode to Evade Detection

• Where SBOMs Stand Today

• Evasive QBot Malware Leverages Short-lived Residential IPs for Dynamic Attacks

• Cracking the Code — How Machine Learning Supercharges Threat Detection

• The downside of frenemies

• BSA taps former chief acquisition officer as new procurement lead

• FTC charges Ring over ‘disregard’ for customer data security

• Ask Fitis, the Bear: Real Crooks Sign Their Malware

• Horabot Campaign Targets Spanish-Speaking Users in the Americas

• Announcing the Chrome Browser Full Chain Exploit Bonus

• Embracing Advanced Frameworks for Effective Vulnerability Management

• The role of cybersecurity in financial institutions -protecting against evolving threats

• The intersection of telehealth, AI, and Cybersecurity

• Mark Zuckerberg Announces Meta Quest 3 VR Headset

• How can Congress regulate AI? Erect guardrails, ensure accountability and address monopolistic power

• Satellite data could boost border security, disaster response

• How to determine exactly what personal information Microsoft Edge knows about you

• Void Rabisu’s RomCom Backdoor Reveals Shifting Threat Actor Goals

• Biometric Bypass: BrutePrint Makes Short Work of Fingerprint Security

• Unmasking XE Group: Experts Reveal Identity of Suspected Cybercrime Kingpin

• New Zero-Click Hack Targets iOS Users with Stealthy Root-Privilege Malware

• Uptycs integrates with Amazon Security Lake to provide telemetry across workloads

• CYTRACOM improves efficiency for MSPs with ControlOne platform updates

• Critical zero-day vulnerability in MOVEit Transfer exploited by attackers!

• Nozomi and Cynalytica team to deliver security solutions to OT & IoT environments

• Palo Alto Networks CEO Nikesh Arora: We don’t see the demand for cybersecurity slowing down

• Risk: Everything Everywhere All at Once

• Ransomware Attacks Pose Significant Threats to the Security of Medical Devices

• Most CEOs Increasingly Prioritise Cybersecurity Over Economic Performance

• Ransomware attack on Biotech company exposes info of over 2.5 million patients

• Amazon fined $31 million over privacy breaches, including snooping on kids

• Decade-old critical vulnerability in Jetpack patched on millions of WordPress websites

• 6 ways Amazon Security Lake could boost data security

• Potential Backdoor in Gigabyte PCs Exposes Supply Chain Risks

• Watch Out For These ChatGPT and AI Scams

• Lazarus Hackers Exploit Windows IIS Web Servers for Initial Access

• VPN Split Tunneling: A Better VPN Option?

• Meta Warns It May Pull News Content In California

• Twitter Value Collapses After Fidelity Writedown

• Toyota Discloses New Data Breach Involving Vehicle, Customer Information

• Russia Blames US Intelligence for iOS Zero-Click Attacks

• Russia Says U.S. Accessed Thousands Of Apple Phones In Spy Plot

• Amazon To Pay $30.8M For Alexa And Ring Privacy Violations

• New Vulnerability Gives MacOS Users A Migraine

• War Crimes Evidence Erased By Social Media Firms

• Researchers Tell Owners To Assume Compromise Of Unpatched Zyxel Firewalls

• Stellar Cyber integrates with Amazon Security Lake to boost data processing and threat detection

• Safe Security unveils Cyber Risk Cloud of Clouds platform

• Code42 names Wayne Jackson to its Board of Directors

• Increasingly Sophisticated Cyberattacks Target Healthcare

• Five ways enterprises can stop synthetic identity fraud with AI

• SolarWinds Transforms Brand to Signify Ongoing Evolution, Portfolio Expansion, and Customer Empowerment

• Expanding Our Global Partner Program

• Cisco Acquiring Armorblox for Predictive and Generative AI Technology

• Top macOS Malware Threats Proliferate: Here Are 6 to Watch

• New Threat Intelligence Report Provides Actionable Intelligence Against Cyberattacks

• Threat Actors Exploit Qbot Malware: Evolving Tactics for Stealthy Attacks

• Meet Charlotte, CrowdStrike’s New Generative AI Assistant

• Dark Reading Launches Inaugural CISO Advisory Board

• Top MacOS Malware Threats Proliferate: Here Are 6 to Watch

• How Wazuh Improves IT Hygiene for Cyber Security Resilience

• Malicious PyPI Packages Using Compiled Python Code to Bypass Detection

• Operation Triangulation: iOS devices targeted with previously unknown malware

• Resecurity appoints Shawn Loveland as COO

• Syxsense partners with VLCM to provide customers with endpoint security and management solutions

• Threat actors can exfiltrate data from Google Drive without leaving a trace

• 10 Effective Strategies To Safeguard Your IoT Network From Threats

• An Overview of Cloud Cryptography

• Moxa Patches MXsecurity Vulnerabilities That Could Be Exploited in OT Attacks

• The Role of Automation in Streamlining DevOps Processes

• Mitiga warns free Google Drive license lacks logging visibility

• BlackCat claims the hack of the Casepoint legal technology platform used by US agencies

• On the Catastrophic Risk of AI

• Amazon To Pay $30m Over Alexa, Ring Privacy Violations

• Dark Pink APT Group Compromised 13 Organizations in 9 Countries

• Ransomware Renaissance 2023: The Definitive Guide to Stay Safer

• Adobe Inviting Researchers to Private Bug Bounty Program

• Organizations Warned of Salesforce ‘Ghost Sites’ Exposing Sensitive Information

• Amazon Settles Ring Customer Spying Complaint

• Improved BlackCat Ransomware Strikes with Lightning Speed and Stealthy Tactics

• Zyxel firewalls under attack by Mirai-like botnet

• UK SMEs To Increase IT Investments In 2023

• PCI DSS 4.0 Requirements – Network Security Controls and Secure Configuration

• Critical Vulnerabilities Found in Faronics Education Software

• HMRC in New Tax Credits Scam Warning

• TechRepublic Premium editorial calendar: IT policies, checklists, toolkits and research for download

• Amazon to Pay $31m After FTC’s Security and Privacy Allegations

• Zyxel Customers Urged to Patch Exploited Bug

• Widespread exploitation by botnet operators of Zyxel firewall flaw

• Champions League: How to stay safe while streaming matches

• N. Korean ScarCruft Hackers Exploit LNK Files to Spread RokRAT

• Do you know what your supply chain is and if it is secure?

• Hackers Exploit Barracuda Zero-Day Flaw Since 2022 to Install Malware

• Amazon Ring, Alexa accused of every nightmare IoT security fail you can imagine

• Navigating cybersecurity in the age of remote work

• Why organizations should adopt a cloud cybersecurity framework

• Ukraine war blurs lines between cyber-crims and state-sponsored attackers

• Cyber Attack on exams and its impact on ambulances

• Critical vulnerability in Gigabyte Motherboards discovered

• Urgent WordPress Update Fixes Critical Flaw in Jetpack Plugin on Million of Sites

• Active Mirai Botnet Variant Exploiting Zyxel Devices for DDoS Attacks

• Infosec products of the month: May 2023

• Phishing campaigns thrive as evasive tactics outsmart conventional detection

• Fighting ransomware: Perspectives from cybersecurity professionals

• Disaster recovery challenges enterprise CISOs face

• Sharing your business’s data with ChatGPT: How risky is it?

• API security: key to interoperability or key to an organization?

• XDR meets IAM: Comprehensive identity threat detection and response with Microsoft

• Dark Pink cyber-spies add info stealers to their arsenal, notch up more victims

• [updated] Barracuda Networks patches zero-day vulnerability in Email Security Gateway

• CISA issues warning to US businesses: Beware of China’s state-sponsored cyber actor

• Microsoft gives Apple a migraine

• Financial services company OneMain fined $4.25 million for security lapses

• Feds, you’ll need a warrant for that cellphone border search

Generated on 2023-06-02 23:55:24.562431