IT Security News Daily Summary 2023-06-06

• 2023-06-05 – 30 days of Formbook: Day 1, Monday 2023-06-05 – “HE2A”

• 2023-06-06 – 30 days of Formbook: Day 2, Tuesday 2023-06-06 – “CG62”

• How to Implement Istio in Multicloud and Multicluster

• ILTA and Conversant Group Release Cybersecurity Benchmarking Survey of the Legal Industry

• With SEC Rule Changes on the Horizon, Research Reveals Only 14% of CISOs Have Traits Desired for Cyber Expert Board Positions

• Microsoft Preps $425M Payment for LinkedIn GDPR Violations

• 11 IoT security challenges and how to overcome them

• Can a chief data officer reignite federal data strategy?

• Google launches passkeys for Workspace

• Service Rents Email Addresses for Account Signups

• Facebook Content Moderation Board Receives Appeal Every 24 Seconds

• NASA website flaw jeopardizes astrobiology fans

• SpinOk Malware, Discovered in 193 Apps with Over 451M Installs

• Malwarebytes may not be allowed to label rival’s app as ‘potentially unwanted’

• From Phishing to Firewalls: Solving Security with AI

• Listen to your talent — leverage technology for classified

• 6 pillars of an effective real-time crime center

• Netskope Intelligent SSE Selected by Transdev to Secure and Connect its Hybrid Workforce

• Malwarebytes may not be allowed to say rival’s software is potentially unwanted

• US govt now bans TikTok from contractors’ work gear

• What Is A Dedicated Development Team And When Should You Hire One?

• Microsoft cops $20M slap on the wrist for mishandling kids’ Xbox data

• Five Ways to Configure a SIEM for Accurate Threat Detection

• New Malware Campaign Leveraging Satacom Downloader to Steal Cryptocurrency

• The MOVEit Hack Affected BBC, British Airways, and Boots

• Hackers stole around $35 million in Atomic Wallet security breach

• Identity thieves can hunt us for ‘rest of our lives,’ claims suit after university data leak

• Preserving Email Privacy: How to Block Hidden Read Receipts and Enhance Security

• DigiCert and ReversingLabs partner to advance software supply chain security

• ITG10 Likely Targeting South Korean Entities of Interest to the Democratic People’s Republic of Korea (DPRK)

• NIST unveils new leadership team to drive semiconductor innovation

• WWDC 2023: Apple launches Vision Pro and raft of products powered by new chipsets

• Chrome zero-day: “This exploit is in the wild”, so check your version now

• Three Vulnerabilities Discovered in Game Dev Tool RenderDoc

• CVE-2023-34362 – MOVEit Transfer – An attack chain that retrieves sensitive information

• Next-gen emergency vehicle offers zero-emission power generation

• Ransomware Attacks Have Room To Grow, Verizon Report Shows

• SEC Accuses Coinbase Cryptocurrency Exchange Of Breaking US Regulations

• MoveIt Hack: What Actions Can Data Breach Victims Take?

• Microsoft To Pay $20m For Child Privacy Violations

• Crypto Catastrophe Stikes Some Atomic Wallet Users, Over $35 Million Thought Stolen

• Lacework simplifies cloud security with risk calculation on users’ permissions

• Trulioo announces platform enhancements to automate KYB and KYC verification

• NinjaOne Patch Management enhancements mitigate security vulnerabilities

• North Korean cyber attacks income and free VPN data breach

• Managing technology risk

• SeroXen RAT for sale

• Blockchain is a key technology—a computer scientist explains why the post-crypto-crash future is bright

• iOS 17 cheat sheet: Release date, supported devices and more

• Exploitation of Vulnerabilities Have Soared, Unit 42 Report Finds

• How DMARC Can Protect Against Phishing & Ransomware

• New Information-Stealing Malware Campaign Targets Online Sellers

• How To Use Ethereum Events Properly: An Solidity Dapp Tutorial

• Tuning EMQX To Scale to One Million Concurrent Connection on Kubernetes

• New ChatGPT Attack Technique Spreads Malicious Packages

• BlackBerry and Upstream Security join forces to protect software-defined vehicles

• Datadog Workflow Automation helps security teams investigate and resolve service disruptions

• Fingerprint unveils Smart Signals to fight and prevent fraud

• Appdome collaborates with GitHub to automate delivery of secure mobile apps

• Enveedo Strategy Execution Platform for Security strengthens cyber resiliency for businesses

• 5 Cloud Computing Security Risks and Recommended Prevention Measures

• UK Mental Health Charities Imparted Facebook Private Data for Targeted Ads

• Casepoint Investigates Alleged Breach After Hackers Claimed Theft of Government Data

• Travel Agency Priceline To Adopt Google AI

• Ransomware takes down multiple municipalities in May

• Over 60K Adware Apps Posing as Cracked Versions of Popular Apps Target Android Devices

• US State’s TikTok Lawsuit Criticised For ‘Irrelevant Posturing’

• Will Commercial Spyware Survive Biden’s Executive Order?

• AntChain, Intel Create New Privacy-Preserving Computing Platform for AI Training

• KeePass Update Patches Vulnerability Exposing Master Password

• Filling the Gaps: How to Secure the Future of Hybrid Work

• Verizon 2023 Data Breach Investigations Report: 74% of breaches involve human element

• 1Password introduces two new passkey features to promote passwordless future

• To Save the News, We Must Open Up App Stores

• Atlassian unveils new DevSecOps feature in Jira to bolster security prioritization

• Zoom Expands Privacy Options for European Customers

• Cybersecurity Startup Elba Raises €2.5 Million for Employee-Focused Product

• Google Workspace Gets Passkey Authentication

• Keep Aware Raises $2.4M to Eliminate Browser Blind Spots

• US Aerospace Contractor Hacked With ‘PowerDrop’ Backdoor

• Google fixed the third Chrome zero-day of 2023

• Breaching Nature’s Firewall: The Convergence of the Climate Change Crisis and Cyberattacks

• MOVEit Hack – BBC, British Airways Employees Contact and Financial Data Exposed

• Zero-day MOVEit Transfer vulnerability exploited in the wild, heavily targeting North America

• ChatGPT Hallucinations Open Developers to Supply Chain Malware Attacks

• This Cryptocurrency Tracking Firm is Employing AI to Identify Attackers

• Hackers Leak i2VPN Admin Credentials on Telegram

• 5 Reasons Why IT Security Tools Don’t Work For OT

• J Brand: The Challenges of Putting Mental Health First in an Unfamiliar Industry

• IDnow boosts fraud prevention capabilities with latest platform updates

• Zoom announces privacy enhancements and tools

• 10 Best Vulnerability Scanner Tools For Penetration Testing – 2023

• Verizon 2023 DBIR: Human Error Involved in Many Breaches, Ransomware Cost Surges

• Apple Unveils Upcoming Privacy and Security Features

• Several Major Organizations Confirm Being Impacted by MOVEit Attack

• ChatGPT Hallucinations Open Developers to Supply-Chain Malware Attacks

• Linda Yaccarino Clocks In As Twitter Boss

• Snowden Ten Years Later

• Microsoft To Pay $20m In Child Data Settlement

• Lessons from Denmark: Why knowledge sharing is the most important weapon against cyber threats

• British Airways and Boots Battling Data Breaches, Millions of Customers Affected

• UK Organisations lack clear path to achieve threat intelligence

• Half of UK Employees Suffer From “Sunday Scaries”

• MOVEit Transfer hack fallout: BBC, Aer Lingus, Boots among the victims

• How To Install Pravoslaven kalendar 2023 In PC – Windows 7, 8, 10, and Mac

• How To Install Gay Male Video Chat Random Male Live Video Chat In PC – Windows 7, 8, 10, And Mac

• How To Install Gaming Keyboard Splitter in Windows 7, 8.1, 10, 11, Mac, Linux, and Ubuntu

• The Best Strategy Games You Should Consider Playing

• Zero-Day Alert: Google Issues Patch for New Chrome Vulnerability – Update Now!

• Cyclops Ransomware group offers a multiplatform Info Stealer

• KeePass Vulnerability Could Expose Master Password In Plaintext

• BBC, Boots, British Airways Hit By Mass Hack

• Moonlighter – World’s First and Only Satellite-Hacking Sandbox

• BEC Volumes and Ransomware Costs Double in a Year

• Kaspersky Releases Tool to Detect Zero-Click iOS Attacks

• Apple Pushes ‘Spatial Computing’ With Vision Pro Headset

• Has Ransomware Turmoil Started Slowing Down for Good?

• What APIs Do and Don’t Do

• Google Patches Third Chrome Zero-Day of 2023

• What Is SCIM Provisioning?

• Taking the art of email security to the next level

• Clop Ransom Gang Breaches Big Names Via MOVEit Flaw

• Cyclops Ransomware Gang Offers Go-Based Info Stealer to Cybercriminals

• Need to improve the detection capabilities in your security products?

• Modern Identity and Access Security – Keeping the Good Guys In and the Bad Guys Out

• British Airways, BBC and Boots were impacted the by Zellis data breach

• France Contributes 2.9bn Euros To New Chip Plant

• Event-Driven Architecture & the Security Implications

• Chinese PostalFurious Gang Strikes UAE Users with Sneaky SMS Phishing Scheme

• Hackers exploit Gmail Blue checkmark impacting 1.8 billion Google users

• Three ways agribusinesses can protect vital assets from cyberattacks

• Introduction to the purpose of AWS Transit Gateway

• ChatGPT Cybersecurity Grant Program – $1M to Boost AI Capabilities

• Generative AI’s influence on data governance and compliance

• Apple announces next-level privacy and security innovations

• Leveraging large language models (LLMs) for corporate security and privacy

• Cybersecurity: Don’t assume you have better defenses than bad actors, data protection company says

• TSP participants sue agency over ‘botched’ recordkeeper transition

• Zyxel Firewalls Under Attack! Urgent Patching Required

• Brace for disruption — but A.I. won’t eliminate jobs completely, says Singapore’s deputy prime minister

• Verizon 2023 DBIR: Ransomware remains steady but complicated

• Consumers overestimate their deepfake detection skills

• CISOs focus more on business strategy than threat research

• 5 unusual cybersecurity tips that actually work

• The 2023 State of Ransomware in Education: 84% increase in attacks over 6-month period

• Information stealer compromises legitimate sites to attack other sites

• Play ransomware gang compromises Spanish bank, threatens to leak files

• Vice Society: The #1 cyberthreat to schools, colleges, and universities

• Ransomware actors exploiting MoveIt Transfer vulnerability

• Apple Expands Its On-Device Nudity Detection to Combat CSAM

• 2023-06-05 – 30 days of Formbook: Day 1, Monday 2023-06-05

• Vulnerability Summary for the Week of May 29, 2023

• City builds a future-facing tech foundation

• Red Sift Launches Relevance Detection as GPT-4-Powered Asset Discovery and Classification Solution

• IT Security News Daily Summary 2023-06-05

• Gigabyte Slams Backdoor Shut With Attack-Killing BIOS Update

• 2.5M Impacted by Enzo Biochem Data Leak After Ransomware Attack

• Microsoft Links MOVEit Attack to Cl0p as British Airways, BBC Fall

• Mental Health Charities Share Sensitive Data With Facebook

• JD Group – 521,878 breached accounts

• Atomic Wallet Hit by $35M Theft in Recent Crypto Breach

• DHS spearheads effort to develop next-gen emergency response vehicle

• A Complete Malware Analysis Tutorial, Cheatsheet & Tools List – 2023

• How DISA plans to use its workforce to combat China and global adversaries

• Researchers envision a citywide testbed for future mobility

• British Airways, Boots, BBC payroll data stolen in MOVEit supply-chain attack

• Dozens of Malicious Extensions Found in Chrome Web Store

• MOVEit zero-day exploit used by data breach gangs: The how, the why, and what to do…

• Crypto catastrophe strikes some Atomic Wallet users, over $35M thought stolen

• KeePass fixed the bug that allows the extraction of the cleartext master password

• British Airways, BBC and Boots Hit by Suspected Russian Cyber Attack

• Moonlighter Satellite Offers In-Orbit Target for Space Hackers

• Manage security posture with Microsoft Defender for Endpoint

• Attack surface reduction rules for Microsoft productivity apps

• British Airways, Boots, And BBC Staff Details Targeted In Russia-Linked Cyber Attack

• Gmail Spoofing Vulnerability Sparks Google Priority 1 Probe

• Millions Of Users Vulnerable To Zero Day In MOVEit File Transfer App

• Amazon’s Ring Doorbell Was Used To Spy On Customers

• Qbot Malware Adapts To Live Another Day… And Another…

• security analytics

• Satacom Malware Campaign Steals Crypto Via Stealthy Browser Extension

• Don’t Overlook Twitter’s Trove of Threat Intel for Enterprise Cybersecurity

• Guarding the Gate: The Role of Firewalls in Cybersecurity

• Gmail Flaw Let Hackers Bypass Security Checks

• Writing Better Code: Symfony Dependency Injection

• AI is used widely, but lawmakers have set few rules

• Critical Zero-Day Flaw Exploited in MOVEit Transfer

• Hacks Against Ukraine’s Emergency Response Services Rise During Bombings

• Traceable AI unveils API Security Reference Architecture for Zero Trust

• Google extends passkeys to Google Workspace accounts

• LogicGate accelerates policy management processes with OpenAI integration

• Cramer urges patience with the market: ‘It doesn’t make a lot of sense to get in after the run’

• Unveiling DogeRAT: The Malware Exploiting Counterfeit Netflix, Instagram, and YouTube

• How to make sure the reputation of your products and company is good

• Zellis Cybersecurity Incident causes BA and Boots employee info data breach

• How AI could take over elections—and undermine democracy

• What if the Current AI Hype Is a Dead End?

• Spanish Bank Globalcaja Hit By Ransomware Attack

• Mass Exploitation of Zero-Day Bug in MOVEit File Transfer Underway

• Microsoft blames Clop ransomware gang for ‘MOVEit Transfer’ attacks

• Threat Actors Launch a New Wave of Mass-Hacks Against Business File Transfer Tool

• US Air Force Denies AI Drone Attacked Operator in Test

• Conti’s Legacy: Ransomware’s Evolution and Future Threats

• RBI Announces Draft Norms to Ensure Security of Payment System Operators

• Leveraging FastAPI for Building Secure and High-Performance Banking APIs

• 4 Essential Strategies For Enterprise Cybersecurity Workforce Development

• France To Contribute 2.9bn Euros To New Chip Plant

• Binance ‘Controlled’ Bank Accounts Of US Affiliate

• How to Boost Cybersecurity Through Better Communication

• You can log into Google Workspace more securely with this major update

• Zyxel Urges Customers to Patch Firewalls Against Exploited Vulnerabilities

• Microsoft Makes SMB Signing Default Requirement in Windows 11 to Boost Security

• After ‘Inception’ Attack, New Due Diligence Requirements Are Needed

• MOVEit Transfer zero-day was exploited by Cl0p gang (CVE-2023-34362)

• BigID Integrates with ServiceNow to help customers protect sensitive data

• Researchers Observed Backdoor-Like Behavior In Gigabyte Systems

• Understanding Dependencies…Visually!

• Microsoft: Lace Tempest Hackers Behind Active Exploitation of MOVEit Transfer App

• KissCartoon 2023 – Top 20 Alternatives to Watch Cartoon Online

• Apple Set To Announce Virtual Reality Headset At WWDC

• Scrubs & Beyond Leaks 400GB of User PII and Card Data in Plain Text

• Idaho Hospitals hit by a cyberattack that impacted their operations

• Qbot malware adapts to live another day … and another …

• AI and Cybersecurity Protecting Against Emerging Threats

• SBOMs – Software Supply Chain Security’s Future or Fantasy?

• Gigabyte Rolls Out BIOS Updates to Remove Backdoor From Motherboards

• The Annual Report: 2024 Plans and Priorities for SaaS Security

• AntChain and Intel launch a privacy-preserving computing platform

• Sci-Fi Author Liu Cixin ‘Used ChatGPT’ To Write Speech

• Experts warn of a surge of TrueBot activity in May 2023

• The Software-Defined Car

• Human-Like AI ‘May Face Ban’, Says Government Adviser

• Cybersecurity M&A Roundup: 36 Deals Announced in May 2023

• Ransomware Group Used MOVEit Exploit to Steal Data From Dozens of Organizations

• Phishin’ Impossible: Reinventing Cybersecurity Awareness Training

• How Does Android Stack Up vs iOS?

• Safeguarding Your Privacy Online: Essential Tips and Best Practices

• AI news trending on Google

• Human-Like AI May Be Banned, Says Government Adviser

• Data-Driven Goals and Science-Based Strategy

• Terminator Antivirus Killer: Vulnerable Windows Driver Masquerading as Threat

• Considering All Returns on a Cybersecurity Compliance Program

• Secure Enterprise Collaboration Tools Are Critical in Light of Remote Work and Cyber-Attacks.

• Silicon Insights: The Past, Present and Future of Account Based Marketing: Podcast: Part 2

• The Future of Driverless Cars: Technology, Security and AI

• How to Avoid Cybercrime While Traveling Internationally

• North Korea Makes 50% of Income from Cyber-Attacks: Report

• UK Closes CCP Cyber Certification Scheme

• Inside 4chan’s Top-Secret Moderation Machine

• Satacom delivers browser extension that steals cryptocurrency

• US Air Force Denies Simulated AI Drone ‘Attacked’ Operator

• Silicon Insights: The Past, Present and Future of Account Based Marketing: Podcast: Part 1

• Silicon UK In Focus Podcast: Fighting Cyberthreats with Data

• What is “This person is unavailable on Messenger” – 12 Quick Ways to Fix it

• Atomic Wallet Customers Lose Over $35m in Crypto Attacks

• Spanish bank Globalcaja confirms Play ransomware attack

• Magecart campaign abuses legitimate sites to host web skimmers and act as C2

• Top NBCUniversal Exec Joins Twitter

• Software developers, how secure is your software?

• Redbus & MakeMyTrip Bug Let Users Book Free Seats

• Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack

• Alarming Surge in TrueBot Activity Revealed with New Delivery Vectors

• Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts

• How fraudsters undermine text passcodes

• 9 free cybersecurity whitepapers you should read

• Surveilling your employees? You could be putting your company at risk of attack

• Emerging tech, misinformation dominate May transatlantic council talks

• Australian cyber-op attacked ISIL with the terrifying power of Rickrolling

• Virtual claims raise alarms among insurance carriers and customers

• A new wave of sophisticated digital fraud hits Europe

• Toyota admits to yet another cloud leak

• Katie Boswell on AI security and women’s rise in cybersecurity

• Meet TeamT5, the Taiwanese infosec outfit taking on Beijing and defeating its smears

Generated on 2023-06-06 23:55:30.298406