IT Security News Daily Summary 2023-06-07

• Security Headers is joining Probely! 🎉

• Cl0p Claims the MOVEit Attack; Here’s How The Gang Did It

• VMware fixes a command injection flaw CVE-2023-20887 in VMware Aria Operations for Networks

• Security Headers is joining Probely! 🎉

• Stay Focused on What’s Important

• Sysdig Introduces CNAPP With Realtime CDR

• Firefox 114 is out: No 0-days, but one fascinating “teachable moment” bug

• Defenders Buckle Up for a Future of Detecting Deepfakes

• Security Headers is joining Probely! 🎉

• Data for safely routing carbon-capture pipelines

• Security Headers is joining Probely! 🎉

• State scales up cloud workforce with free training for agency employees

• Microsoft Fined $20M For Xbox Child Data Collection

• Clop ransomware crew sets June extortion deadline for MOVEit victims

• Deepfake Cyber Attack Hits Russia: Fake Putin Message Broadcasted

• Security Headers is joining Probely! 🎉

• Beware of Summer Scams: Vacation-Related Online Scams are on the rise, Warns Check Point Research

• Ransomware gang exploits critical vulnerability in popular file transfer software

• Security Headers is joining Probely! 🎉

• Public sector apps face widespread security challenges, report reveals

• New zero-click threat targets iPhones and iPads

• Security Buyers Are Consolidating Vendors: Gartner Security Summit

• Security Headers is joining Probely! 🎉

• How to Supplement SharePoint Site Drive Security With Java Code Examples

• Lawmakers want to expand USDA’s Circuit Rider program to cover cyber

• Clop ransomware gang claims the hack of hundreds of victims exploiting MOVEit Transfer bug

• N.S. Software Breach: Microsoft Blames Ransomware Gang

• How can small businesses ensure Cybersecurity?

• When internet security is a requirement, look to dedicated fiber

• Global Malware Attack Imitates VPN and Security Apps on Android Phones

• Security Headers is joining Probely! 🎉

• Best VPN for streaming TV and movies in 2023

• What generative AI’s rise means for the cybersecurity industry

• Elevate Security’s Cisco integrations provide visibility and protection against user risk

• Sentra ChatDLP Anonymizer redacts sensitive information from ChatGPT and Google Bard prompts

• Cyera integrates OpenAI to accelerate data security, privacy, and governance

• Tines develops Cases to optimize automation and improve operational efficiency across the enterprise

• Coinbase Sees Transformative Future of AI-Blockchain

• US Senators Warn Elon Musk After Twitter Safety Resignations

• Global Malware Attack Imitates VPN & Security Apps on Android Phones

• North Korean Hackers Mimic Journalists To Steal Credentials From Organizations

• Security Headers is joining Probely! 🎉

• Security Headers is joining Probely! 🎉

• The Library of Congress is looking for the next Oregon Trail game

• 5 Ways to Configure a SIEM for Accurate Threat Detection

• Cyber Essentialism & ‘Doing Less With Less’

• Personal Information of Nova Scotian’s was Stolen in a Global Data Breach

• AI To Fundamentally Change Recruitment Process

• Security Headers is joining Probely! 🎉

• Withheld: The potentially life-saving map that most can’t see

• CISA and Partners Publish Guide For Remote Access Security

• Online Thieves Target Legitimate Ecommerce CCTSites to Steal Credit Cards

• Cybercriminals Target Facebook Users with Malicious ‘Look Who Died’ Messages

• “Securing Your Digital Assets: Uncovering the Untraceable Data Theft Bug in Google Workspace’s Drive Files”

• Security Headers is joining Probely! 🎉

• VMware Plugs Critical Flaws in Network Monitoring Product

• North Korean APT Group Kimsuky Expands Social Engineering Tactics

• ByteDance Accused Of Helping China Spy On Hong Kong Activists

• What’s Really Changed 10 Years After The Snowden Revelations

• BBC, BA, And Boots Issued With Ultimatum By Cyber Gang Clop

• Deepfakes Of Victims Used In Sextortion Attacks Spike, FBI Warns

• Wind River introduces Security Scanning Service for Linux CVEs

• Commvault announces new security capabilities to help businesses combat cyber threats

• Anonymous Sudan launched Cyber Attack on Microsoft Outlook

• Security Headers is joining Probely! 🎉

• Nebraska Farm Bureau, FBI partner for Agriculture Threats Symposium

• “PowerDrop” PowerShell Malware Targets US Aerospace Industry

• Employees Feel 10 Times Calmer in an Environmentally Friendly Office Space

• Microsoft’s Brad Smith Meets Chancellor After Blocked Acquisition

• Sweat Economy Gives Power to Community over 2 Billion SWEAT Tokens

• Security Headers is joining Probely! 🎉

• Atlassian announces new DevSecOps feature for Jira to bolster security prioritization

• Microsoft unveils OpenAI service for government customers

• FBI: Sextortionist Campaigns Use Deepfakes to Target Children, Adults

• Island’s password manager helps users eliminate password abuse

• SAIC Trust Resilience boosts zero trust strategy plans for government agencies

• 0mega ransomware gang changes tactics

• Security Headers is joining Probely! 🎉

• Personal Data vs. Sensitive Data: What Is the Difference?

• Everyone knows that horrible feeling of scrolling

• Verizon 2023 DBIR: DDoS attacks dominant, while pretexting drives BEC growth

• Companies Affected by Ransomware [Updated 2023]

• Should You Take Heed of Online Casino Reviews?

• Google: Gmail Users Warned of a Security Flaw in its New Feature

• Over 60,000 Android Apps Silently Install Malware on Devices

• Mayors oppose a GOP bill to speed up broadband permitting

• US, Israel Provide Guidance on Securing Remote Access Software

• Hackers Issue ‘Ultimatum’ Over Payroll Data Breach

• Chrome and Edge zero-day: “This exploit is in the wild”, so check your versions now

• The Case for a Federal Cyber-Insurance Backstop

• Microsoft to Pay $20 Million Penalty for Illegally Collecting Kids’ Data on Xbox

• Immersive Labs and Accenture join forces to address the cybersecurity talent deficit

• CoSoSys offers same-day support for Apple’s macOS Sonoma

• Velotix releases modular architecture for its data security platform

• Cisco Full-Stack Observability Platform brings data together from multiple domains

• Reddit To Axe 5 Percent Of Workforce

• Secure-by-Design: Which Comes First, Code or Security?

• June 2023 Security Update for Android fixed Arm Mali GPU bug used by spyware

• How to Find Aesthetic Wallpapers for Google Pixel 3XL – Make Your Device Stand Out

• 10 years after Snowden’s first leak, what have we learned?

• Three Risk Mitigation Strategies to Address the Latest Data Security Threats

• Deploying Smart Contract on Ethereum Blockchain

• Blumira Raises $15 Million for SMB-Tailored XDR Platform

• ChatGPT Hallucinations Can Be Exploited to Distribute Malicious Code Packages

• Android’s June 2023 Security Update Patches Exploited Arm GPU Vulnerability

• OWASP’s 2023 API Security Top 10 Refines View of API Risks

• Cisco Touts New AI-Based Security, SSE Features

• Unpacking Verizon DBIR 2023: 3 Key Takeaways for Cyber Security Defenders

• Network Perception NP-View platform 4.2 improves OT security analysis

• Quantum computers are better at guessing, new study demonstrates

• Events Ripper Update

• Cloudbrink app with bridge mode replaces hardware based VPN and SD-WAN appliances

• Nile collaborates with Palo Alto Networks to strengthen enterprise campus security

• SEC Sues Binance, CEO, And Coinbase

• UK To Order Removal Of Chinese CCTV Kit From Sensitive Locations

• Winning the Mind Game: The Role of the Ransomware Negotiator

• A little History: What Hacking and Model Train Sets Have in Common

• New PowerDrop malware targets U.S. aerospace defense industry

• How Attorneys Are Harming Cybersecurity Incident Response

• Outpost24 Acquires EASM Provider Sweepatic

• How Much Money Have I Spent on League of Legends? – Counting the Cost

• AI In The Content Writing Industry: Enhancing Efficiency And Quality

• AI-Powered Writing Assistants: Revolutionizing The Essay Writing Experience!

• Learnings from 2022 Breaches: Reassessing Access Controls and Data Security Strategies

• Microsoft Will Pay $20M to Settle US Charges of Illegally Collecting Children’s Data

• The Bold Plan to Create Cyber 311 Hotlines

• A Deep Dive into the Verizon 2023 DBIR Report: Human Error, Ransomware, and Log4j Exploits

• High-risk vulnerabilities patched in ABB Aspect building management system

• Exploited zero-day patched in Chrome (CVE-2023-3079)

• Vulnerability Alert! Two New Exploited Flaws Discovered on Zyxel Firewalls

• Where are the cybercriminals coming from next?

• DevOps vs. DevSecOps: The Debate

• Stopping Criminals from Profiting Off Malware Requires a New Approach

• The Data Dilemma: Balancing Business Growth and Security

• Cisco Counterfeiter Pleads Guilty to $100m Scheme

• New PowerDrop Malware Discovered Targeting U.S. Aerospace Industry

• Experts call for overhaul of ‘outdated’ critical infrastructure cyber policy

• PCI DSS 4.0 Requirements – Protect Stored Account Data and Protect Cardholder Data During Transmission

• Tripwire Patch Priority Index for May 2023

• FBI Warns of Surge in Deepfake Sextortion Attempts

• The Risks and Ethical Implications of AI Clones

• CVEs Surge By 25% in 2022 to Another Record High

• +60,000 Android apps spotted hiding adware for past six months

• IT threat evolution Q1 2023. Mobile statistics

• IT threat evolution Q1 2023

• IT threat evolution in Q1 2023. Non-mobile statistics

• Why performing security testing on your products and systems is a good idea

• How to make developers love security

• Apple offers new privacy and security protections at WWDC

• Will zero trust make any sense in enterprise cyber world

• New PowerDrop Malware Targeting U.S. Aerospace Industry

• Current SaaS security strategies don’t go far enough

• Public sector apps show higher rates of security flaws

• Embracing realistic simulations in cybersecurity training programs

• Sharing your business’s data with ChatGPT: How risky is it?

• Phishing-resistant MFA 101: What you need to know

• The role of cybersecurity in financial institutions -protecting against evolving threats

• The intersection of telehealth, AI, and Cybersecurity

• Google Chrome Zero-Day Vulnerability Exploited Widely – Urgent Update

• Quality Control in Digital Transformation: Strategies for Ensuring a Positive Outcome

• Hands-on with Apple Vision Pro: This is not a VR headset

• SEC sues Coinbase, continues major crackdown on cryptocurrency exchanges

• Inside 4chan’s top-secret moderation machine

• They Plugged GPT-4 Into Minecraft—and Unearthed New Potential for AI

• Why a proactive detection and incident response plan is crucial for your organization

• Cl0p ransomware gang claims first victims of the MOVEit vulnerability

• Police use of PayPal records under fire after raid on ‘Cop City’ protest fund trio

• Researchers Spot a Different Kind of Magecart Card-Skimming Campaign

• Verizon DBIR: Social Engineering Breaches Double, Leading to Spiraling Ransomware Costs

• As disability claims mount, VA needs to ramp up automation, lawmakers say

• Worried that your TV is listening to you? IARPA wants to safeguard your voice

• How local leaders can make complex data understandable

• Verizon 2023 DBIR: DDoS attacks dominate and pretexting lead to BEC growth

• IT Security News Daily Summary 2023-06-06

• 2023-06-05 – 30 days of Formbook: Day 1, Monday 2023-06-05 – “HE2A”

• 2023-06-06 – 30 days of Formbook: Day 2, Tuesday 2023-06-06 – “CG62”

• How to Implement Istio in Multicloud and Multicluster

• ILTA and Conversant Group Release Cybersecurity Benchmarking Survey of the Legal Industry

• With SEC Rule Changes on the Horizon, Research Reveals Only 14% of CISOs Have Traits Desired for Cyber Expert Board Positions

• Microsoft Preps $425M Payment for LinkedIn GDPR Violations

• 11 IoT security challenges and how to overcome them

• Can a chief data officer reignite federal data strategy?

• Google launches passkeys for Workspace

• Service Rents Email Addresses for Account Signups

• Facebook Content Moderation Board Receives Appeal Every 24 Seconds

• NASA website flaw jeopardizes astrobiology fans

• SpinOk Malware, Discovered in 193 Apps with Over 451M Installs

• Malwarebytes may not be allowed to label rival’s app as ‘potentially unwanted’

• From Phishing to Firewalls: Solving Security with AI

• Listen to your talent — leverage technology for classified

• 6 pillars of an effective real-time crime center

• Netskope Intelligent SSE Selected by Transdev to Secure and Connect its Hybrid Workforce

• Malwarebytes may not be allowed to say rival’s software is potentially unwanted

• US govt now bans TikTok from contractors’ work gear

• What Is A Dedicated Development Team And When Should You Hire One?

• Microsoft cops $20M slap on the wrist for mishandling kids’ Xbox data

• Five Ways to Configure a SIEM for Accurate Threat Detection

• New Malware Campaign Leveraging Satacom Downloader to Steal Cryptocurrency

• The MOVEit Hack Affected BBC, British Airways, and Boots

• Hackers stole around $35 million in Atomic Wallet security breach

• Identity thieves can hunt us for ‘rest of our lives,’ claims suit after university data leak

• Preserving Email Privacy: How to Block Hidden Read Receipts and Enhance Security

• DigiCert and ReversingLabs partner to advance software supply chain security

• ITG10 Likely Targeting South Korean Entities of Interest to the Democratic People’s Republic of Korea (DPRK)

• NIST unveils new leadership team to drive semiconductor innovation

• WWDC 2023: Apple launches Vision Pro and raft of products powered by new chipsets

• Chrome zero-day: “This exploit is in the wild”, so check your version now

• Three Vulnerabilities Discovered in Game Dev Tool RenderDoc

• CVE-2023-34362 – MOVEit Transfer – An attack chain that retrieves sensitive information

• Next-gen emergency vehicle offers zero-emission power generation

• Ransomware Attacks Have Room To Grow, Verizon Report Shows

• SEC Accuses Coinbase Cryptocurrency Exchange Of Breaking US Regulations

• MoveIt Hack: What Actions Can Data Breach Victims Take?

• Microsoft To Pay $20m For Child Privacy Violations

• Crypto Catastrophe Stikes Some Atomic Wallet Users, Over $35 Million Thought Stolen

• Lacework simplifies cloud security with risk calculation on users’ permissions

• Trulioo announces platform enhancements to automate KYB and KYC verification

• NinjaOne Patch Management enhancements mitigate security vulnerabilities

• North Korean cyber attacks income and free VPN data breach

• Managing technology risk

• SeroXen RAT for sale

• Blockchain is a key technology—a computer scientist explains why the post-crypto-crash future is bright

• iOS 17 cheat sheet: Release date, supported devices and more

• Exploitation of Vulnerabilities Have Soared, Unit 42 Report Finds

• How DMARC Can Protect Against Phishing & Ransomware

• New Information-Stealing Malware Campaign Targets Online Sellers

• How To Use Ethereum Events Properly: An Solidity Dapp Tutorial

• Tuning EMQX To Scale to One Million Concurrent Connection on Kubernetes

• New ChatGPT Attack Technique Spreads Malicious Packages

• BlackBerry and Upstream Security join forces to protect software-defined vehicles

• Datadog Workflow Automation helps security teams investigate and resolve service disruptions

• Fingerprint unveils Smart Signals to fight and prevent fraud

• Appdome collaborates with GitHub to automate delivery of secure mobile apps

• Enveedo Strategy Execution Platform for Security strengthens cyber resiliency for businesses

• 5 Cloud Computing Security Risks and Recommended Prevention Measures

• UK Mental Health Charities Imparted Facebook Private Data for Targeted Ads

• Casepoint Investigates Alleged Breach After Hackers Claimed Theft of Government Data

• Travel Agency Priceline To Adopt Google AI

• Ransomware takes down multiple municipalities in May

• Over 60K Adware Apps Posing as Cracked Versions of Popular Apps Target Android Devices

• US State’s TikTok Lawsuit Criticised For ‘Irrelevant Posturing’

• Will Commercial Spyware Survive Biden’s Executive Order?

• AntChain, Intel Create New Privacy-Preserving Computing Platform for AI Training

• KeePass Update Patches Vulnerability Exposing Master Password

• Filling the Gaps: How to Secure the Future of Hybrid Work

• Verizon 2023 Data Breach Investigations Report: 74% of breaches involve human element

• 1Password introduces two new passkey features to promote passwordless future

• To Save the News, We Must Open Up App Stores

• Atlassian unveils new DevSecOps feature in Jira to bolster security prioritization

• Zoom Expands Privacy Options for European Customers

• Cybersecurity Startup Elba Raises €2.5 Million for Employee-Focused Product

• Google Workspace Gets Passkey Authentication

• Keep Aware Raises $2.4M to Eliminate Browser Blind Spots

• US Aerospace Contractor Hacked With ‘PowerDrop’ Backdoor

• Google fixed the third Chrome zero-day of 2023

• Breaching Nature’s Firewall: The Convergence of the Climate Change Crisis and Cyberattacks

• MOVEit Hack – BBC, British Airways Employees Contact and Financial Data Exposed

• Zero-day MOVEit Transfer vulnerability exploited in the wild, heavily targeting North America

• ChatGPT Hallucinations Open Developers to Supply Chain Malware Attacks

• This Cryptocurrency Tracking Firm is Employing AI to Identify Attackers

• Hackers Leak i2VPN Admin Credentials on Telegram

• 5 Reasons Why IT Security Tools Don’t Work For OT

• J Brand: The Challenges of Putting Mental Health First in an Unfamiliar Industry

• IDnow boosts fraud prevention capabilities with latest platform updates

• Zoom announces privacy enhancements and tools

• 10 Best Vulnerability Scanner Tools For Penetration Testing – 2023

• Verizon 2023 DBIR: Human Error Involved in Many Breaches, Ransomware Cost Surges

• Apple Unveils Upcoming Privacy and Security Features

• Several Major Organizations Confirm Being Impacted by MOVEit Attack

• ChatGPT Hallucinations Open Developers to Supply-Chain Malware Attacks

• Linda Yaccarino Clocks In As Twitter Boss

• Snowden Ten Years Later

• Microsoft To Pay $20m In Child Data Settlement

• Lessons from Denmark: Why knowledge sharing is the most important weapon against cyber threats

• British Airways and Boots Battling Data Breaches, Millions of Customers Affected

• UK Organisations lack clear path to achieve threat intelligence

• Half of UK Employees Suffer From “Sunday Scaries”

• MOVEit Transfer hack fallout: BBC, Aer Lingus, Boots among the victims

• How To Install Pravoslaven kalendar 2023 In PC – Windows 7, 8, 10, and Mac

• How To Install Gay Male Video Chat Random Male Live Video Chat In PC – Windows 7, 8, 10, And Mac

• How To Install Gaming Keyboard Splitter in Windows 7, 8.1, 10, 11, Mac, Linux, and Ubuntu

• The Best Strategy Games You Should Consider Playing

• Zero-Day Alert: Google Issues Patch for New Chrome Vulnerability – Update Now!

• Cyclops Ransomware group offers a multiplatform Info Stealer

• KeePass Vulnerability Could Expose Master Password In Plaintext

• BBC, Boots, British Airways Hit By Mass Hack

• Moonlighter – World’s First and Only Satellite-Hacking Sandbox

• BEC Volumes and Ransomware Costs Double in a Year

• Kaspersky Releases Tool to Detect Zero-Click iOS Attacks

• Apple Pushes ‘Spatial Computing’ With Vision Pro Headset

• Has Ransomware Turmoil Started Slowing Down for Good?

• What APIs Do and Don’t Do

• Google Patches Third Chrome Zero-Day of 2023

• What Is SCIM Provisioning?

• Taking the art of email security to the next level

• Clop Ransom Gang Breaches Big Names Via MOVEit Flaw

• Cyclops Ransomware Gang Offers Go-Based Info Stealer to Cybercriminals

• Need to improve the detection capabilities in your security products?

• Modern Identity and Access Security – Keeping the Good Guys In and the Bad Guys Out

• British Airways, BBC and Boots were impacted the by Zellis data breach

• France Contributes 2.9bn Euros To New Chip Plant

• Event-Driven Architecture & the Security Implications

• Chinese PostalFurious Gang Strikes UAE Users with Sneaky SMS Phishing Scheme

• Hackers exploit Gmail Blue checkmark impacting 1.8 billion Google users

• Three ways agribusinesses can protect vital assets from cyberattacks

• Introduction to the purpose of AWS Transit Gateway

• ChatGPT Cybersecurity Grant Program – $1M to Boost AI Capabilities

• Generative AI’s influence on data governance and compliance

• Apple announces next-level privacy and security innovations

• Leveraging large language models (LLMs) for corporate security and privacy

• Cybersecurity: Don’t assume you have better defenses than bad actors, data protection company says

• TSP participants sue agency over ‘botched’ recordkeeper transition

• Zyxel Firewalls Under Attack! Urgent Patching Required

• Brace for disruption — but A.I. won’t eliminate jobs completely, says Singapore’s deputy prime minister

• Verizon 2023 DBIR: Ransomware remains steady but complicated

• Consumers overestimate their deepfake detection skills

• CISOs focus more on business strategy than threat research

• 5 unusual cybersecurity tips that actually work

• The 2023 State of Ransomware in Education: 84% increase in attacks over 6-month period

• Information stealer compromises legitimate sites to attack other sites

• Play ransomware gang compromises Spanish bank, threatens to leak files

• Vice Society: The #1 cyberthreat to schools, colleges, and universities

• Ransomware actors exploiting MoveIt Transfer vulnerability

• Apple Expands Its On-Device Nudity Detection to Combat CSAM

Generated on 2023-06-07 23:55:38.807481