IT Security News Daily Summary 2023-06-14

• New report identifies over $100B in potential government services savings

• 2023-06-14 – 30 days of Formbook: Day 10, Wednesday 2023-06-14 – “J0C7”

• The Future of Cloud Security: Trends and Predictions

• DOD needs more diverse emerging tech investment, Democratic caucus argues

• XSS Vulnerabilities Found in Microsoft Azure Cloud Services

• State preps for digital ID rollout

• State governments among victims of MoveIT Transfer breach

• Public preview: Improve Win32 app security via app isolation

• Cadet Blizzard emerges as a novel and distinct Russian threat actor

• AI Voice Cloning Technology Evoking Threat Among People

• IRS to get a new acting CIO

• LockBit victims in the US alone paid over $90m in ransoms since 2020

• Zilla Security introduces new suite of identity security SaaS solutions

• Windows Users Alert: Skuld Malware Steals Discord and Browser Data

• Microsoft Outs New Russian APT Linked to Wiper Attacks in Ukraine

• From Zero Trust To Secure Access: The Evolution of Cloud Security

• ARM In Talks With Potential IPO Investors – Report

• Lawmakers take bipartisan swing at deepfake regulation

• Feds give states more flexibility in Medicaid redeterminations

• Quantum Origin Onboard strengthens device security against cyberattacks

• Absolute Software expands its SSE solution with Absolute Secure Web Gateway Service

• Former DHS top buyer joins trade group to lead revived knowledge hub

• Moving the Cyber Industry Forward Requires a Novel Approach

• Chinese Hackers Exploit VMware Zero-Day to Backdoor Windows and Linux Systems

• Learnings from kCTF VRP’s 42 Linux kernel exploits submissions

• EU Seeks Breakup Of Google Ad Tech Business

• Why Your SEG Could Be Your Email Security Achilles’ Heel

• Rom Kosla joins HPE as CIO

• Zscaler enhances Zero Trust Exchange platform to monitor and remediate large-scale attacks

• Rezilion releases agentless runtime monitoring solution for vulnerability management

• Kodem employs runtime intelligence to assess application risk for AppSec teams

• Patch Tuesday June 2023 – 78 Flaws and 38 RCE Bugs Fixed

• Managing technology risk

• Malicious Actors Exploit GitHub to Distribute Fake Exploits

• Fortinet: Patched Critical Flaw May Have Been Exploited

• Lethal weather

• This Hacker Outfit has Targeted Thousands of Companies Across the Globe

• Challenges in Ensuring AI Safety: A Deeper Look into Complexity

• Artificial Intelligence Act gets passed in EU

• Temporary Phone Number: An Essential Tool for Privacy Protection

• PII Exposed: Unauthenticated IDOR in WooCommerce Stripe Plugin

• Actionable Threat Intel (II) – IoC Stream

• CISA Instructs Federal Agencies to Secure Internet-Exposed Devices

• Critical flaw found in WooCommerce Stripe Gateway Plugin used by +900K sites

• Silent Push launches with a total of $10 million in total funding

• Deloitte and AWS deliver ConvergeSECURITY to enable cloud transformation and adoption

• Echoworx improves email security offerings with implementation of passkeys

• Okta Device Access enables businesses to secure access to both devices and applications

• Fake Security Researchers Deliver Malicious Zero-Day Exploits

• Vodafone, Three Merger: Industry Reaction

• New “DoubleFinger” Malware Strikes Cryptocurrency Wallets

• Informatica bets big on data privacy with Privitar acquisition

• Lawmakers push for expanded cyber training, education

• Cisco releases new security offerings at Cisco Live 2023

• Microsoft Fixes 69 Bugs, but None Are Zero-Days

• How Popular Messaging Tools Instill a False Sense of Security

• Severe Vulnerabilities Reported in Microsoft Azure Bastion and Container Registry

• Capita wins £50M fraud reporting contract with City of London cops

• Extreme Networks Hit by Clop MOVEit Attack

• CoWIN App Data Leak Claims: Minister Denies Direct Breach

• Critical Financial Institutions Under Siege: Argentina’s Securities Commission Hit by Medusa Ransomware

• Vodafone, Three Merger To Create UK’s Biggest Mobile Operator

• CISA’s Known Vulnerabilities Impact 15M Public Services

• Hundreds of Thousands of eCommerce Sites Impacted by Critical Plugin Vulnerability

• EU Passes Landmark Artificial Intelligence Act

• How Ticket Scalping Impacts Asia’s Live Entertainment Industry

• Sycope 2.3 detects network problems and identifies security threats

• Wiz partners with Contrast Security to provide real-time insights into potential security risks

• Microsoft mitigates set of cross-site scripting (XSS) vulnerabilities in Azure Bastion and Azure Container Registry

• Lawmakers suggest ‘radical transparency’ as key to shoring up US cyber posture

• Researchers Uncover XSS Vulnerabilities in Azure Services

• Best Passkey Solutions for MFA, SSO & Passwordless Authentication

• DTX highlights top 50 innovators driving digital change across the North West

• The Ultimate Guide to Cloud Security: Protecting Your Data in the Digital Age

• Chrome 114 Update Patches Critical Vulnerability

• Threat Intelligence Firm Silent Push Launches With $10 Million in Seed Funding

• Switzerland under cyberattack

• Eviden AIsaac Cyber Mesh helps enterprises detect security threats

• Behind the Scenes: Unveiling the Hidden Workings of Earth Preta

• #InfosecurityEurope: (ISC)² and CIISec Release Guide to Inclusive Language in Cybersecurity

• Where from, Where to — The Evolution of Network Security

• New Golang-based Skuld Malware Stealing Discord and Browser Data from Windows PCs

• Unveiling the Balada injector: a malware epidemic in WordPress

• Amazon Web Services Restored After Widespread Outage In US

• MOVEit Vulnerability Weaponized in Ransomware Attack

• ICS Patch Tuesday: Siemens Addresses Over 180 Third-Party Component Vulnerabilities

• SAP Patches High-Severity Vulnerabilities With June 2023 Security Updates

• On the Need for an AI Public Option

• Synopsys Recognised as a Leader in Software Composition Analysis by Independent Research Firm

• Agencies Are Compelled to Secure All Internet-exposed Equipment by CISA Orders

• Bringing security to account: why identity must be unified

• #InfosecurityEurope: Cyber Leaders’ Plea to Tackle the Industry’s Mental Health Crisis

• Fake Researcher Profiles Spread Malware through GitHub Repositories as PoC Exploits

• Judge Grants FTC Injunction To Temporarily Block Microsoft-Activision Deal

• Massive Phishing Campaign Uses 6,000 Sites to Mimic Popular Brands

• New study: Threat actors harness generative AI to amplify and refine email attacks

• Spotify Fined $5 Million for Breaching EU Data Rules

• China-linked APT UNC3886 used VMware ESXi Zero-Day

• Cyber Risk Quantification: A New Way to Understand Security Risks

• Evolution of the CISO Role

• The Wonderful Cybersecurity Community: Watching Past Employees Succeed

• PCI DSS 4.0 Requirements – Protect from Malicious Software and Maintain Secure Systems and Software

• Europol Warns of Metaverse and AI Terror Threat

• MFA Bypass Kits Account For One Million Monthly Messages

• Critical Security Vulnerability Discovered in WooCommerce Stripe Gateway Plugin

• Zscaler unveils a set of security solutions designed to leverage the full potential of generative AI

• No Zero-Days but PGM Flaws Cause Patch Tuesday Concern

• Microsoft Releases Updates to Patch Critical Flaws in Windows and Other Software

• LLM meets Malware: Starting the Era of Autonomous Threat

• Fueling Your Business: The Surprising Benefits of Natural Gas

• Why performing security testing on your products and systems is a good idea

• Safe summer travel: Your essential cybersecurity checklist

• Microsoft to pay $20m penalty for collecting children info without consent

• Enhancing Cybersecurity Awareness: A Comprehensive Guide

• Microsoft Patches Critical Windows Vulns, Warns of Code Execution Risks

• Beyond MFA: 3 steps to improve security and reduce customer authentication friction

• Forrester names Microsoft a Leader in the 2023 Enterprise Email Security Wave

• How Microsoft and Sonrai integrate to eliminate attack paths

• Hackers Can Uncover Cryptographic Keys by Recording Footage of Power LEDs

• Ignoring digital transformation is more dangerous than a recession

• Enhancing security team capabilities in tough economic times

• 3 ways we’ve made the CIS Controls more automation-friendly

• IT providers become go-to for cybersecurity advice

• 2023-06-13 – 30 days of Formbook: Day 9, Tuesday 2023-06-13 – XLoader “MD8S”

• Watch CNBC’s full interview with Crowdstrike CEO George Kurtz

• Crowdstrike CEO George Kurtz: New A.I. tool ‘Charlotte’ acts as a ‘virtual security analyst’

• Florida man insists he didn’t violate the law by keeping Top Secret docs

• Essential Insights on Google Cloud Backup and Disaster Recovery Service

• Edge browser feature sends images you view back to Microsoft

• Patch Tuesday fixes 4 critical RCE bugs, and a bunch of Office holes

• Microsoft Patch Tuesday for June 2023 fixes 6 critical flaws

• 2023 年 6 月のセキュリティ更新プログラム (月例)

• Windows PGM Accounts for Half of Patch Tuesday’s Critical Flaws

• The Rise of Blockchain Gaming and Secure Marketplaces

• 2 Russians charged in Mt. Gox Bitcoin heist and BTC-e money laundering

• New phishing and business email compromise campaigns increase in complexity, bypass MFA

• Dozens Of Suicide Hotlines Are Sending Sensitive Data To Facebook

• Chinese Threat Actor Abused ESXi Zero-Day to Pilfer Files From Guest VMs

• Analysis: Social Engineering Drives BEC Losses to $50B Globally

• Cycode Launches CI/CD Pipeline Monitoring Solution (Cimon) to Prevent Supply Chain Attacks

• Popular Apparel, Clothing Brands Being Used in Massive Phishing Scam

• IT Security News Daily Summary 2023-06-13

• Spy agencies acquire commercial data with little coordination and few controls

• CISA’s new directive targets devices that can be configured over public internet

• VERT Threat Alert: June 2023 Patch Tuesday Analysis

• Cyberattacks surge to 61% of small and medium-sized businesses, says study

• Harness the Power of PKI to Battle Data Breaches

• What Reddit Got Wrong

• Spring Cloud: How to Implement Service Discovery (Part 1)

• Microsoft Patch Tuesday, June 2023 Edition

• U.S. Intelligence Has Amassed Sensitive And Intimate Data On Nearly Everyone

• Chinese Spies Caught Exploiting VMware ESXi Zero Day

• Fortinet Warns Customers Of Possible Zero Day Exploited In Limited Attacks

• MSSQL Makes Up 93% Of All Activity On Honeypots Across 10 DBs

• Hackers Can Steal Cryptographic Keys By Video Recording Power LEDs 60 Feet Away

• June Patch Tuesday: VMware vuln under attack by Chinese spies, Microsoft kinda meh

• Trade groups press White House to digitize forms of identification

• How targeted emails help one agency fill critical jobs

• New bill would give CISA greater cyber outreach responsibilities

• Mandiant: New VMware ESXi zero day used by Chinese APT

• Fortinet warns critical VPN vulnerability ‘may’ be under attack

• Red Hat compliance certifications and attestations achieved

• June 2023 Patch Tuesday: Critical patches for Microsoft Windows, SharePoint, Exchange

• Governor signs bill paving the way for state-level AI bill of rights

• Lawmaker advocates ‘all-of-the-above’ approach to fix cyber worker shortage

• The FTC Forces Ring to Take User Privacy Seriously

• As Kentucky’s largest coal producer mines bitcoin, its power discounts draw scrutiny

• Debt deal casts doubt on CHIPS Act innovation hubs

• The best secure browsers for privacy in 2023

• Chinese Cyberspies Caught Exploiting VMware ESXi Zero-Day

• Microsoft Patches Critical Windows Vulns, Warn of Code Execution Risks

• St. Margaret’s Health is the first hospital to cite a cyberattack as a reason for its closure

• Last of the Gozi 3 sentenced over Windows info-stealing malware ops

• Top 10 cybersecurity findings from Verizon’s 2023 data breach report

• oak9 adds GitLab support to alert developers of security gaps

• HashiCorp expands its identity-based security portfolio

• Google grants $12 million to bolster NYC’s cybersecurity ecosystem

• UK’s Ofcom confirms cyber attack as PoC exploit for MOVEit is released

• Cyber insurance: What is it and does my company need it?

• Gozi banking malware “IT chief” finally jailed after more than 10 years

• How Security Leaders Should Approach Cybersecurity Startups

• CosmicEnergy ICS Malware Poses No Immediate Threat, but Should Not Be Ignored

• Patch Tuesday: Critical Flaws in Adobe Commerce Software

• Fortinet Addresses Critical FortiGate SSL-VPN Vulnerability

• Clop Ransomware gang strikes London Transport for London (TfL)

• Rise of AI in Cybercrime: How ChatGPT is revolutionizing ransomware attacks and what your business can do

• The role of cybersecurity in financial institutions -protecting against evolving threats

• How can small businesses ensure Cybersecurity?

• When internet security is a requirement, look to dedicated fiber

• Crypto Wallets Under Attack By DoubleFinger Malware

• Beware: New DoubleFinger Loader Targets Cryptocurrency Wallets with Stealer

• Cynerio partners with Microsoft to ensure the security of medical and IoT devices

• IoT: Why is this Attacker’s Favorite Target?

• Nvidia’s AI Software Raises Concerns Over Exposing Sensitive Data

• Mountain View Hospital Restores Operations, Two Weeks Following the Cyberattack

• How to Prevent Phishing Attacks

• Accused Cybercriminals: Russians Charged with Hacking Mt. Gox Crypto Exchange and Manages BTC-e

• Government has a policy over people problem, civic tech leader argues

• Virtual Event Today: CISO Forum 2023 – Register to Join

• #InfosecurityEurope: Armis Highlights Riskiest Devices in Critical Infrastructure

• Seceon unveils two products for MSPs and MSSPs to quantify risk

• GuidePoint Security improves organizations’ security posture and ROI with its BASaaS

• The commonality of criminal intrusion

• Are smartphone thermal cameras sensitive enough to uncover PIN codes?

• Over Half of Security Leaders Lack Confidence in Protecting App Secrets, Study Reveals

• DDoS threats and defense: How certain assumptions can lead to an attack

• OneTrust enhances data policy engine to identify data security and privacy risks

• Dragos Partner Program helps users strengthen OT cybersecurity

• NETSCOUT introduces Visibility Without Borders platform

• New Research Shows Potential of Electromagnetic Fault Injection Attacks Against Drones

• Romanian Operator of Bulletproof Hosting Service Sentenced to Prison in US

• Top 42 Cybersecurity Companies To Know in 2023

• Why Critical Infrastructure Remains a Ransomware Target

• Adversary-in-the-Middle Attack Campaign Hits Dozens of Global Organizations

• AMD Spurs AI Interest With Forthcoming MI300 Chip

• BreachForums Returns Under the Control of ShinyHunters Hackers

• ChatGPT and the Race to Secure Your Intellectual Property

• Google’s ChromeOS aims for enterprise with security and compatibility

• A database containing data of +8.9 million Zacks users was leaked online

• Insider Threat vs Outsider Threat: Which is Worse?

• Cato Networks Breaks SASE Speed Barrier (Again) With 5 Gbps Encrypted Tunnels to Sites and the Cloud

• ‘Aggressive’ China cyberattacks are the ‘defining threat’ of our time, top U.S. cyber official says

• Struggling Huawei Clinches Major China Mobile 5G Contract

• How to hack Facebook with just a phone number

• #InfosecurityEurope: What TechUK’s New Plan Means for Cybersecurity

• Dragos Launches OT Cyber Industry’s Only Global Partner Program to Span Technology, Services, Threat Intelligence, and Training

• PoC exploit for exploited MOVEit vulnerability released (CVE-2023-34362)

• Automation Anywhere and Google Cloud join forces to accelerate the adoption of AI

• Accenture announced a $3 billion investment in AI

• AI-powered malware is a growing security concern, CyberArk survey finds

• Strengthening Data Security: 5 Critical Controls to Protect Your Business

• Pros and Cons of Multi-Step Data Platforms

• Data of 8.8 Million Zacks Users Emerges Online

• Ransomware Attack Played Major Role in Shutdown of Illinois Hospital

• Bank of China Boosts Hong Kong Crypto With Tokenised Security

• #InfosecurityEurope: Leading Cybersecurity Providers to Share Insights on Breach Containment

• UFO Whistleblower, Meet a Conspiracy-Loving Congress

• Two Russian Nationals Charged for Masterminding Mt. Gox Crypto Exchange Hack

• Webinar – Mastering API Security: Understanding Your True Attack Surface

• Fortinet urges to patch the critical RCE flaw CVE-2023-27997 in Fortigate firewalls

• Identifying the Idaho Killer

• Zacks Investment Research Faces Larger Data Breach Affecting 8.8 Million Users

• Amazon Uses AI To Track Down Fake Reviews

• CoWIN Data Leak – Personal Data of COVID Vaccine Recipients Leaked on Telegram

• Ethical AI and Responsible Data Science: What Can Developers Do?

• #InfosecurityEurope: Top Five Things to Check Out at This Year’s Event

• Art = Human + Machine

• These Microsoft Office security signatures are ‘practically worthless’

• US FTC Seeks Injunction Blocking Microsoft-Activision Deal

• Microsoft Pays $20m to Settle Another FTC COPPA Case

• Armis Identifies Riskiest OT and ICS Devices across CNI

• What Is the Future of Virtual Reality (VR) in Casino Gaming?

• Ofcom Hit By MOVEit Extortion Hack

• Malicious hackers are weaponizing generative AI

• Equipment reassignment checklist

• Fortinet Warns Customers of Possible Zero-Day Exploited in Limited Attacks

• Ofcom Latest MOVEit Victim as Exploit Code Released

• Russia-Ukraine war sending shockwaves into cyber-ecosystem

• Ransomware Insurance: Security Strategies to Obtain Coverage

• Yaccarino Lays Out Vision For Twitter 2.0 As ‘Global Town Square’

• Historic Zacks Breach Impacts Nearly Nine Million

• UK communications regulator Ofcom hacked with a MOVEit file transfer zero-day

• US charges two men with Mt. Gox heist, the world’s largest cryptocurrency hack

• ChatGPT and Data Privacy

• Incorporating cloud security teams into the SOC enhances operational efficiencies

• Building a hyper-connected future with 6G networks

• Quantum computing’s threat to national security

• How to achieve cyber resilience?

• Need to improve the detection capabilities in your security products?

• Critical FortiOS and FortiProxy Vulnerability Likely Exploited – Patch Now!

• UK telco watchdog Ofcom, Minnesota Dept of Ed named as latest MOVEit victims

• Ransomware related news headlines trending on Google

• Experts released PoC exploit for MOVEit Transfer CVE-2023-34362 flaw

• The intersection of telehealth, AI, and Cybersecurity

• China’s cyber now aimed at infrastructure, warns CISA boss

• India probes medical info ‘leak’ to Telegram

• 2023-06-10 – 30 days of Formbook: Day 6, Saturday 2023-06-10 – “SN84”

• 2023-06-11 – 30 days of Formbook: Day 7, Sunday 2023-06-11 – GuLoader Formbook “XCHU”

• 2023-06-12 – 30 days of Formbook: Day 8, Monday 2023-06-12 – “EE2Q”

• API Security: Unveiling Best Practices for a Secure Digital Ecosystem

• Balancing User and Business Needs: The Key to Successful Digital Product Strategy

• A week in security (June 5 – 11)

• Public and free WiFi: Can I safely use it?

• More MOVEit vulnerabilities found while the first one still resonates

• Strava heatmap loophole may reveal users’ home addresses

Generated on 2023-06-14 23:55:30.995282