IT Security News Daily Summary 2023-06-05

• Gigabyte Slams Backdoor Shut With Attack-Killing BIOS Update

• 2.5M Impacted by Enzo Biochem Data Leak After Ransomware Attack

• Microsoft Links MOVEit Attack to Cl0p as British Airways, BBC Fall

• Mental Health Charities Share Sensitive Data With Facebook

• JD Group – 521,878 breached accounts

• Atomic Wallet Hit by $35M Theft in Recent Crypto Breach

• DHS spearheads effort to develop next-gen emergency response vehicle

• A Complete Malware Analysis Tutorial, Cheatsheet & Tools List – 2023

• How DISA plans to use its workforce to combat China and global adversaries

• Researchers envision a citywide testbed for future mobility

• British Airways, Boots, BBC payroll data stolen in MOVEit supply-chain attack

• Dozens of Malicious Extensions Found in Chrome Web Store

• MOVEit zero-day exploit used by data breach gangs: The how, the why, and what to do…

• Crypto catastrophe strikes some Atomic Wallet users, over $35M thought stolen

• KeePass fixed the bug that allows the extraction of the cleartext master password

• British Airways, BBC and Boots Hit by Suspected Russian Cyber Attack

• Moonlighter Satellite Offers In-Orbit Target for Space Hackers

• Manage security posture with Microsoft Defender for Endpoint

• Attack surface reduction rules for Microsoft productivity apps

• British Airways, Boots, And BBC Staff Details Targeted In Russia-Linked Cyber Attack

• Gmail Spoofing Vulnerability Sparks Google Priority 1 Probe

• Millions Of Users Vulnerable To Zero Day In MOVEit File Transfer App

• Amazon’s Ring Doorbell Was Used To Spy On Customers

• Qbot Malware Adapts To Live Another Day… And Another…

• security analytics

• Satacom Malware Campaign Steals Crypto Via Stealthy Browser Extension

• Don’t Overlook Twitter’s Trove of Threat Intel for Enterprise Cybersecurity

• Guarding the Gate: The Role of Firewalls in Cybersecurity

• Gmail Flaw Let Hackers Bypass Security Checks

• Writing Better Code: Symfony Dependency Injection

• AI is used widely, but lawmakers have set few rules

• Critical Zero-Day Flaw Exploited in MOVEit Transfer

• Hacks Against Ukraine’s Emergency Response Services Rise During Bombings

• Traceable AI unveils API Security Reference Architecture for Zero Trust

• Google extends passkeys to Google Workspace accounts

• LogicGate accelerates policy management processes with OpenAI integration

• Cramer urges patience with the market: ‘It doesn’t make a lot of sense to get in after the run’

• Unveiling DogeRAT: The Malware Exploiting Counterfeit Netflix, Instagram, and YouTube

• How to make sure the reputation of your products and company is good

• Zellis Cybersecurity Incident causes BA and Boots employee info data breach

• How AI could take over elections—and undermine democracy

• What if the Current AI Hype Is a Dead End?

• Spanish Bank Globalcaja Hit By Ransomware Attack

• Mass Exploitation of Zero-Day Bug in MOVEit File Transfer Underway

• Microsoft blames Clop ransomware gang for ‘MOVEit Transfer’ attacks

• Threat Actors Launch a New Wave of Mass-Hacks Against Business File Transfer Tool

• US Air Force Denies AI Drone Attacked Operator in Test

• Conti’s Legacy: Ransomware’s Evolution and Future Threats

• RBI Announces Draft Norms to Ensure Security of Payment System Operators

• Leveraging FastAPI for Building Secure and High-Performance Banking APIs

• 4 Essential Strategies For Enterprise Cybersecurity Workforce Development

• France To Contribute 2.9bn Euros To New Chip Plant

• Binance ‘Controlled’ Bank Accounts Of US Affiliate

• How to Boost Cybersecurity Through Better Communication

• You can log into Google Workspace more securely with this major update

• Zyxel Urges Customers to Patch Firewalls Against Exploited Vulnerabilities

• Microsoft Makes SMB Signing Default Requirement in Windows 11 to Boost Security

• After ‘Inception’ Attack, New Due Diligence Requirements Are Needed

• MOVEit Transfer zero-day was exploited by Cl0p gang (CVE-2023-34362)

• BigID Integrates with ServiceNow to help customers protect sensitive data

• Researchers Observed Backdoor-Like Behavior In Gigabyte Systems

• Understanding Dependencies…Visually!

• Microsoft: Lace Tempest Hackers Behind Active Exploitation of MOVEit Transfer App

• KissCartoon 2023 – Top 20 Alternatives to Watch Cartoon Online

• Apple Set To Announce Virtual Reality Headset At WWDC

• Scrubs & Beyond Leaks 400GB of User PII and Card Data in Plain Text

• Idaho Hospitals hit by a cyberattack that impacted their operations

• Qbot malware adapts to live another day … and another …

• AI and Cybersecurity Protecting Against Emerging Threats

• SBOMs – Software Supply Chain Security’s Future or Fantasy?

• Gigabyte Rolls Out BIOS Updates to Remove Backdoor From Motherboards

• The Annual Report: 2024 Plans and Priorities for SaaS Security

• AntChain and Intel launch a privacy-preserving computing platform

• Sci-Fi Author Liu Cixin ‘Used ChatGPT’ To Write Speech

• Experts warn of a surge of TrueBot activity in May 2023

• The Software-Defined Car

• Human-Like AI ‘May Face Ban’, Says Government Adviser

• Cybersecurity M&A Roundup: 36 Deals Announced in May 2023

• Ransomware Group Used MOVEit Exploit to Steal Data From Dozens of Organizations

• Phishin’ Impossible: Reinventing Cybersecurity Awareness Training

• How Does Android Stack Up vs iOS?

• Safeguarding Your Privacy Online: Essential Tips and Best Practices

• AI news trending on Google

• Human-Like AI May Be Banned, Says Government Adviser

• Data-Driven Goals and Science-Based Strategy

• Terminator Antivirus Killer: Vulnerable Windows Driver Masquerading as Threat

• Considering All Returns on a Cybersecurity Compliance Program

• Secure Enterprise Collaboration Tools Are Critical in Light of Remote Work and Cyber-Attacks.

• Silicon Insights: The Past, Present and Future of Account Based Marketing: Podcast: Part 2

• The Future of Driverless Cars: Technology, Security and AI

• How to Avoid Cybercrime While Traveling Internationally

• North Korea Makes 50% of Income from Cyber-Attacks: Report

• UK Closes CCP Cyber Certification Scheme

• Inside 4chan’s Top-Secret Moderation Machine

• Satacom delivers browser extension that steals cryptocurrency

• US Air Force Denies Simulated AI Drone ‘Attacked’ Operator

• Silicon Insights: The Past, Present and Future of Account Based Marketing: Podcast: Part 1

• Silicon UK In Focus Podcast: Fighting Cyberthreats with Data

• What is “This person is unavailable on Messenger” – 12 Quick Ways to Fix it

• Atomic Wallet Customers Lose Over $35m in Crypto Attacks

• Spanish bank Globalcaja confirms Play ransomware attack

• Magecart campaign abuses legitimate sites to host web skimmers and act as C2

• Top NBCUniversal Exec Joins Twitter

• Software developers, how secure is your software?

• Redbus & MakeMyTrip Bug Let Users Book Free Seats

• Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack

• Alarming Surge in TrueBot Activity Revealed with New Delivery Vectors

• Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts

• How fraudsters undermine text passcodes

• 9 free cybersecurity whitepapers you should read

• Surveilling your employees? You could be putting your company at risk of attack

• Emerging tech, misinformation dominate May transatlantic council talks

• Australian cyber-op attacked ISIL with the terrifying power of Rickrolling

• Virtual claims raise alarms among insurance carriers and customers

• A new wave of sophisticated digital fraud hits Europe

• Toyota admits to yet another cloud leak

• Katie Boswell on AI security and women’s rise in cybersecurity

• Meet TeamT5, the Taiwanese infosec outfit taking on Beijing and defeating its smears

• IT Security News Weekly Summary – Week 22

• IT Security News Daily Summary 2023-06-04

• Friday Squid Blogging: Squid Chromolithographs

• The Unintended Consequences of Netflix’s Password Sharing Ban

• Security Affairs newsletter Round 422 by Pierluigi Paganini – International edition

• Music Streaming Royalties To Be Examined by The UK Government

• Which Country Ranked the Highest in the Global National Privacy Test?

• Government and Military Institutions Under Persistent Attacks by Dark Pink Hackers

• What B2C Service Providers can Learn From Netflix’s Accidental Model

• Most Important Web Server Penetration Testing Checklist

• Cybersecurity Crisis: Anonymous Sudan Demands $3 Million from SAS Airlines

• Confidential computing: From root of trust to actual trust

• Xplain hack impacted the Swiss cantonal police and Fedpol

• Zyxel published guidance for protecting devices from ongoing attacks

• Week in review: MOVEit Transfer critical zero-day vulnerability, Kali Linux 2023.2 released

• Cyber Security Management System (CSMS) for the Automotive Industry

• KeePass password manager update improves security

Generated on 2023-06-05 23:55:25.310340