IT Security News Daily Summary 2023-06-21

• House panel zeros out TMF funding for 2024 fiscal year

• How a data-centric approach can lift agencies above the cybersecurity poverty line

• Apple just released iOS 16.5.1 with security fixes

• Ransomware Misconceptions Abound, to the Benefit of Attackers

• Avast, Norton Parent Latest Victim of MOVEit Ransomware Attacks

• New DOJ Cyber Prosecution Team Will Go After Nation-State Threat Actors

• Bias, privacy among governments’ generative AI headaches

• The best security cameras of 2023

• Remote work and the cloud create new endpoint security challenges

• #InfosecurityEurope: From Passion to Profession, Becky Pinkard’s Dedication to Cybersecurity

• Ransomware Misconceptions Abound, To the Benefit of Attackers

• Apple squashes kernel bug used by TriangleDB spyware

• 5 Benefits Of SIEM To The Cybersecurity Of Any Business

• Apple Patches iOS Flaws Used in Kaspersky ‘Operation Triangulation’

• Russia-linked APT28 hacked Roundcube email servers of Ukrainian entities

• Researcher Identifies Popular Swing VPN Android App as DDoS Botnet

• FTC accuses DNA testing company of lying about dumping samples

• Keep Job Scams From Hurting Your Organization

• Researchers Devise New EMFI Attack Leading To Drone Takeover

• There’s something DHS can do to help civilian agencies fight cyberattacks

• Beware bad passwords as attackers co-opt Linux servers into cybercrime

• Why Malware Crypting Services Deserve More Scrutiny

• Linux Patch Management: Tools, Issues & Best Practices

• What Happens When You Type a URL Into Your Browser?

• Critical VMware Aria Operations bug under active exploitation

• Emerging Ransomware Group 8Base Doxxes SMBs Globally

• SMB Edge Devices Walloped With Asus, Zyxel Patch Warnings

• Google Files FTC Cloud Complaint Against Microsoft

• Hiding in plain site: Women are part of ‘invisible’ labor market building Maine’s fiber networks

• Australia plans to mandate file scanning for all tech companies

• #InfosecurityEurope Hall of Fame: Becky Pinkard, Managing Director of Global Cyber Operations, Barclays

• Ethical Problems in Computer Security

• Google accuses Microsoft of unfair practices in Azure cloud unit

• When homes flood, who retreats and to where?

• Cooperation or Competition? China’s Security Industry Sees the US, Not AI, as the Bigger Threat

• CISOs’ New Stressors Brought on by Digitalization: Report

• Google accuses Microsoft of anticompetitive practices in Azure cloud unit

• Who’s responsible for securing the open-source software organizations used to build all applications?

• Zero Trust: The Key to a Hybrid Workforce

• Justice Department launches new unit to combat cyber threats

• ‘Muddled Libra’ Uses Oktapus-Related Smishing to Target Outsourcing Firms

• FTC Sues Amazon For ‘Duping’ Customers With Prime Subscriptions

• Military Satellite Access Sold on Russian Hacker Forum for $15,000

• #InfosecurityEurope: Cybersecurity Industry Still Fighting to Recruit and Retain Talent

• Cyberattacks on OT, ICS Lay Groundwork for Kinetic Warfare

• ScarCruft Hackers Exploit Ably Service for Stealthy Wiretapping Attacks

• Exabeam launches Outcomes Navigator to help organizations detect security threats

• Cloudflare joins forces with Databricks to enable organizations collaborate on live data

• Toward a more resilient SOC: the power of machine learning

• How can small businesses ensure Cybersecurity?

• Enphase Ignores CISA Request to Fix Remotely Exploitable Flaws

• Kaspersky Dissects Spyware Used in iOS Zero-Click Attacks

• Critical WordPress Plugin Vulnerabilities Impact Thousands of Sites

• Supply Chain and APIs Top Security Concerns, CISO Survey Shows

• New Condi DDoS botnet targets TP-Link Wi-Fi routers

• Progress Software Hit With Class Action Suit Over MOVEit Hack

• Oreo Cookie Maker Says Crooks Gobbled Up Staff Info

• Reddit Confirms BlackCat Gang Pinched Some Data

• Now Patched VMware Zero-Day Bug Exploited In Wild

• Government Agencies are Compromised by Russian Ransomware

• US DoJ creates a litigation section dedicated to Cybersecurity

• How to earn money using AI based ChatGPT

• Setting Up iPhone For Child Safety: Essential Parental Controls And Restrictions

• AI could shore up democracy—Here’s one way

• Security Researchers Uncover New Spyware Implant TriangleDB

• OffSec Guide: The OSCE³ Certification

• An Overview of OffSec’s OSCE³ Certification: The Ultimate Achievement in offensive security

• Chinese Hackers APT15 Use New Backdoor Malware to Target American Ministries

• Microsoft looks to speed up materials science research with quantum-compatible system

• phishing

• Cool, Aesthetic, Good & Unique Twitter Username – Stand Out in Style

• Delhi Police, FBI & Interpol in a Joint Operation Expose a Cybercrime Syndicate, Arrested Four

• School Kids are Stealing NFTs Worth Millions of Dollars to Purchase Roblox Skins

• How Generative AI is Creating New Classes of Security Threats

• Amazon Faces Senate Warehouse Safety Investigation

• Elon Musk Touts Significant India Investment By Tesla

• Habu announces AWS Clean Rooms solution for democratized data collaboration

• Patch Alert! Critical Command Injection Flaw Discovered in NAS Devices

• Windows Patch Management: Definition, How It Works and Why It Helps

• Paying Ransomware’s Ransom: Why it’s Time to Reconsider

• Going on vacation soon? Stay one step ahead of travel scammers

• DOJ Launches Cyber Unit to Prosecute Nation-State Threat Actors

• CISO Conversations: Three Leading CISOs From the Payment Industry

• “The Ransomware Documentary” – brand new video series from Sophos starting now!

• #InfosecurityEurope: Compliance Does Not Mean Security, Experts Warn

• Placing People & Realism at the Center of Your Cybersecurity Strategy

• New Report Exposes Operation Triangulation’s Spyware Implant Targeting iOS Devices

• Stealthy SMS Side-Channel Attack Exposes SMS Recipient Location

• AI Threats Today: The Unseen Challenges in Our Automated World

• Building Web Applications With .NET: Best Practices and Techniques

• #InfosecurityEurope: Security Training Failures Impacting Digital Transformation

• Critical ‘nOAuth’ Flaw in Microsoft Azure AD Enabled Complete Account Takeover

• Startup Security Tactics: Friction Surveys

• Training in Spanish for cyber security pros

• Orca Security expands partnership with Google Cloud to secure enterprise cloud estates

• #InfosecurityEurope: Transparency and Context Key to Insider Risk Management

• React Native vs Native: Which one is better?

• Real-World Cyberattacks Targeting Data Science Tools

• IRS direct file is a free and easy option for taxpayers from historically marginalized communities

• Chrome and Its Vulnerabilities – Is the Web Browser Safe to Use?

• The Quintessential Toolkit: Five Essential Skills for Advancing in the Cybersecurity Realm

• Island integrates DLP capabilities for ChatGPT, Bard, and other AI

• APIs Under Attack: How To Prepare for and Respond to Breaches

• Chinese Hacker Group ‘Flea’ Targets American Ministries with Graphican Backdoor

• From Offline To Online: Integrating QR Codes Into Your Instagram Marketing Strategy

• #InfosecurityEurope: One in Three UK&I Workers Susceptible to Phishing

• President Biden Meets AI Experts, Warns Of Risks

• Top Considerations for Securing AWS Lambda, part 3

• May ransomware activity rises behind 8base, LockBit gangs

• How the Most Popular Cars in the US Track Drivers

• How to create SBOMs for container images

• Compromised ChatGPT accounts garner rapid dark web popularity

• Photos: Infosecurity Europe 2023, part 2

• Infosecurity Europe 2023 video walkthrough

• VMware Aria Operations for Networks vulnerability exploited in the wild (CVE-2023-20887)

• Strengthening Cybersecurity Defenses: Cyber Assessment Framework

• Gaps in Azure Service Fabric’s Security Call for User Vigilance

• Over 100K+ Compromised ChatGPT Accounts on Dark Web Marketplaces

• Insider Risk Hits Closer to Home

• PCI DSS 4.0 Requirements – Restrict Access, Identify Users and Authenticate Access

• #InfosecurityEurope: Financial Firms to Build Resilience in Face of Growing Cyber-Threats

• Dissecting TriangleDB, a Triangulation spyware implant

• DoJ Creates Cyber Unit, Amid Growing National Security Focus

• Network security policy

• #InfosecurityEurope: Does Pentesting Need a New Service Model?

• #InfosecurityEurope: Why API Security Could Be the Next Big Thing in Cyber

• Linux Servers Hacked to Launch DDoS Attacks and Mine Monero Cryptocurrency

• Purely AI-generated songs declared ineligible for Grammy Awards

• Google’s $200 metal Pixel Watch band is very premium, very expensive

• Thousands of realistic but fake AI child sex images found online, report says

• How to Find the Titanic Sub Before It’s Too Late

• Virus definition updates for Avast version 9/10/11 end in summer 2023

• Hiring kit: GDPR data protection compliance officer

• Alert! Hackers Exploiting Critical Vulnerability in VMware’s Aria Operations Networks

• New Condi Malware Hijacking TP-Link Wi-Fi Routers for DDoS Botnet Attacks

• Best Methods to Know Who Viewed Your Facebook Profile – Alternatives You Need to Know About

• Phishing Tools for Purchase: A Closer Look at Facebook Scamming Groups

• #InfosecurityEurope: Security Training Needs to Nudge, Not Nag

• How to Login to Godaddy Account – Three Popular Methods

• Why performing security testing on your products and systems is a good idea

• 100,000 Stolen ChatGPT Account Credentials Found on Dark Web

• Hackers Attacks on Websites Developed by a Specific Website Development Company

• Critical RCE flaw CVE-2023-20887 in VMware vRealize exploited in the wild

• DDoS Attack Hits European Investment Bank – Websites Unavailable

• Azure AD アプリケーションにおける特権昇格の潜在的なリスクについて

• Asus releases firmware updates for routers to address critical security issues

• What is NFV

• Rise of AI in Cybercrime: How ChatGPT is revolutionizing ransomware attacks and what your business can do

• Biden Discusses Risks and Promises of Artificial Intelligence With Tech Leaders in San Francisco

• Organizations actively embrace zero trust, integration remains a hurdle

• NOS chooses Censys to monitor its attack surface

• Getting ahead of cyberattacks with a DevSecOps approach to web application security

• VMware Confirms Live Exploits Hitting Just-Patched Security Flaw

• Overcoming Challenges in Delivering Machine Learning Models from Research to Production

• Unraveling an AI Scam with AI

• Black Cat ransomware group wants $4.5m from Reddit or will leak stolen files

• Baby monitor safety: What you need to know

• Update now! ASUS fixes nine security flaws

• Why businesses need a disinformation defense plan, with Lisa Kaplan: Lock and Code S04E13

• 2023-06-17 – 30 days of Formbook: Day 13, Saturday 2023-06-17 – “MR04”

• 2023-06-18 – 30 days of Formbook: Day 14, Sunday 2023-06-18 – “JY05”

• 2023-06-19 – 30 days of Formbook: Day 15, Monday 2023-06-19 – “CE18”

• 2023-06-20 – 30 days of Formbook: Day 16, Tuesday 2023-06-20 – “F1W6”

• 3CX data exposed, third-party to blame

• DOJ launches cyber unit with national security focus as China, Russia threats mount

• An Analyst View of Gartner Security & Risk Management Summit 2023

• IT Security News Daily Summary 2023-06-20

• Passwords out, passkeys in: are you ready to make the switch?

• Netskope Enables Secure Enterprise Use of ChatGPT and Generative AI Applications

• Cymulate Announces Security Analytics for Continuous Threat Exposure Management

• eSentire’s AI Investigator Chatbot Aids Human Response to Security Incidents

• Vacant White House cyber post draws concern amid global software breach

• Mayors: There’s a mental health crisis in every city

• Oreo cookie maker says crooks gobbled up staff info

• Jordanian Cyber Leaders Kick Off Cybersecurity Framework Development

• 100K+ Infected Devices Leak ChatGPT Accounts to the Dark Web

• NineID Raises $2.6M to Build a Secure Bridge Between the Digital and Physical Worlds of Corporate Security

• New Tsunami botnet targets Linux SSH servers

• Modern Access Control Explained

• How to Get Started With Istio in Kubernetes in 5 Steps

• Bipartisan bill proposes blue-ribbon panel to address AI risks, regulations

• Researchers Flag Account Takeover Flaw in Microsoft Azure AD OAuth Apps

• Going On the Defensive: Turning the Tide on The Cybersecurity Vulnerabilities Of Smart Home Devices With Value-Added Services

• Communicating Cyber Risk

• Data Governance – Data Privacy and Security – Part 1

• Researchers Expose New Severe Flaws in Wago and Schneider Electric OT Products

• Passwordless security gains ground for authentication

• Fresh Ransomware Gangs Emerge As Market Leaders Decline

• BlackCat Ransomware Group Claims to Have Stolen 80GB of Data from Reddit

• Reddit confirms BlackCat gang pinched some data

• Choosing the Right Functions in C Programming: Strcpy vs. Strncpy

• 5 ways generative AI will help bring greater precision to cybersecurity

• AI could shore up democracy – here’s one way

• FEMA’s buyout program reduces flood risk. But does it deepen segregation?

• Okta moves passkeys to cloud, allowing multi-device authentication

• Reddit Braces for Data Leak as Hackers Threaten to Expose Stolen Information

• Microsoft Acknowledges Hacking Incident Targeting Outlook and OneDrive in June

• Largest US Publisher Sues Google Over Online Ad Monopoly

• Animal movement powers new GPS wildlife tracker

• Schneider Power Meter Vulnerability Opens Door to Power Outages

• IRONSCALES boosts email security with generative AI capabilities

• eSentire AI Investigator provides real-time answers to security data queries

• Blockchain security: Everything you should know for safe use

• Implement zero trust to improve API security

• #InfosecurityEurope: Certifications Are No Guarantee of Security

• Mysterious Mystic Stealer Spreads Like Wildfire in Mere Months

• Hackers Threatened to Leak 80GB of Data Allegedly Stolen From Reddit in February

• All Veterans Affairs police officers to be issued bodycams, dashcams by end of 2023

• Norton Parent Says Employee Data Stolen in MOVEit Ransomware Attack

• Russian APT Group Caught Hacking Roundcube Email Servers

• ASUS warns router customers: Patch now, or block all inbound requests

• #InfosecurityEurope: Certifications are no guarantee of security

• Hackers Will Be Quick to Bypass Gmail’s Blue Check Verification System

• Protect and manage browser extensions using Chrome Browser Cloud Management

• 100,000 Hacked ChatGPT Accounts Discovered on Dark Web

• #InfosecurityEurope: Digital Dependence Means Government and Industry Must Bolster Collaboration

• Smart Pet Feeders Expose Personal Data

• CYE Hyver enhancements empower organizations with real-time risk analysis module

• Next DLP Scoped Investigations separates employee identity from their behavioral data

• Biden hosts an AI Forum in San Francisco

• Next-Generation Firewalls: A comprehensive guide for network security modernization

• Digital dumpster diving: Exploring the intricacies of recycle bin forensics

• Suzuki Agrees To Make “Flying Cars” With SkyDrive

• Megaupload Developers Plead Guilty to Avoid US Extradition

• Majority of Users Neglect Best Password Practices: Keeper Security

• Securing the Secure: The Importance of Secure Software Practices in Security Software Development

• Join Our #BetheResource – Torches Challenge 2023

• Potential Risk of Privilege Escalation in Azure AD Applications

• Biden to meet with AI experts to talk regulation and safety

• New ‘RDStealer’ Malware Targets RDP Connections

• OT:Icefall: Vulnerabilities Identified in Wago Controllers

• Over 100,000 ChatGPT Accounts Found in Dark Web Marketplaces

• ExaGrid Version 6.3 guards customers against external threats

• Photos: Infosecurity Europe 2023

• Orange Business, Orange Cyberdefense and Palo Alto Networks improve security for enterprises

• Cymulate Exposure Analytics provides users with an attacker’s view of their cyber resilience

• Google Seeks To Move Some Pixel Production To India

• #InfosecurityEurope: CISOs Must Be Better Marketers and Negotiators

• Zyxel addressed critical flaw CVE-2023-27992 in NAS Devices

• One Overlooked Element of Executive Safety: Data Privacy

• As Data Gravity Goes Up, are Clouds Becoming Black Holes?

• Attackers discovering exposed cloud assets within minutes

• Facebook Rolls Back Controversial Misinformation Rules

• Adobe’s $20bn Deal For Figma At Risk From EU Regulators – Report

• PCI compliance

• #InfosecurityEurope: How to Weather the Coming Cybersecurity Storm

• Rorschach Ransomware: What You Need to Know

• We Can’t Do It Alone: Sharing Threat Intelligence Makes Everyone Safer

• Edgescan EASM allows organizations to secure their critical assets and applications

• Black Kite releases two modeling solutions for ransomware and business interruption scenarios

• Info Stealing Malware Dropped via Only Fans

• Progress Software Advises MOVEit Customers to Patch Third Severe Vulnerability

• #InfosecurityEurope: Michael Johnson Reminds Security Pros Where Success Comes from

• #InfosecurityEurope: ThriveDX Launches Cyber Academy for Enterprise to Address Skills Shortages

• Data Leak At Law Firm Sets Australia’s Elites Scrambling

• Over 100,000 ChatGPT Accounts Found For Sale On Dark Web

• Hacktivist Group Anonymous Sudan A Bear In Wolf’s Clothing

• Pentagon’s Secret Service: Monitoring Social Media for Criticism of Generals

• Microsoft: Disruptions in Outlook, Cloud Platform Services Were Caused by a Cyberattack

• Understanding Blockchain: The Network of Networks

• Massive Data Breach: Clop Ransomware Gang Targets MOVEit Transfer, Millions of Driver’s Licenses at Risk

• #InfosecurityEurope: Ironscales Launches GPT-Powered Chat Assistant for Self-Service Threat Reporting

• Zyxel Releases Urgent Security Updates for Critical Vulnerability in NAS Devices

• How to Solve “Tap to Load” Problem on Snapchat – Troubleshooting Tips

• The Reddit Files: Hackers Demand $4.5M Ransom and API Access Waiver

• Helping production agencies deliver

• One overlooked element of executive safety: Data privacy

• Australian Government Says Its Data Was Stolen in Law Firm Ransomware Attack

• Fulfilling Expected SEC Requirements for Cybersecurity Expertise at Board Level

• How Much Does Penetration Testing Cost? 11 Pricing Factors

• Experts Uncover Year-Long Cyber Attack on IT Firm Utilizing Custom Malware RDStealer

• SaaS in the Real World: How Global Food Chains Can Secure Their Digital Dish

• Enterprises Planning Expansion Worry Over Connectivity, Expereo Finds

• Kafka: Navigating GDPR Compliance

• Tackling Data Sovereignty with DDR

• Understanding Cyber Resilience: Building a Holistic Approach to Cybersecurity

• Compromised Linux SSH servers engage in DDoS attacks, cryptomining

• Malwarebytes launches Reseller Partner Program to drive partner profitability

• Netskope Intelligent SSE helps enterprises securely manage employee use of generative AI apps

• Silobreaker unveils new geopolitical threat intelligence capabilities With RANE

• Why Businesses Should Consider Implementing Proxy Servers for Enhanced Security

• Supply Chain Attack: Abandoned S3 Buckets Used for Malicious Payloads

• The Benefits of Paying More Than the Minimum on Credit

• New CA/B Forum Code Signing Requirements in Effect – Is Your Organization Compliant?

• Over 100,000 compromised ChatGPT accounts found for sale on dark web

• Terra Co-Founder Do Kwon Prison Sentence

• Sign in to Leak Your Credentials – Attackers Abusing Legitimate Services

• ASUS Releases Patches to Fix Critical Security Bugs Impacting Multiple Router Models

• A bowl full of security problems: Examining the vulnerabilities of smart pet feeders

• Zyxel patches critical vulnerability in NAS devices (CVE-2023-27992)

• 2023 Zero Trust Security Report Highlights

• The Real Value-Add of Red Teaming

• VirusTotal += Docguard

• Understanding the Microsoft Teams Vulnerability: The GIFShell Attack

• #InfosecurityEurope: Netskope Sets Out to Help Enterprises Safely Use ChatGPT

• Over 100,000 Stolen ChatGPT Account Credentials Sold on Dark Web Marketplaces

• ASUS addressed critical flaws in some router models

• 4 Tips for Cultivating a Healthy Work Environment for Your Employees

• Need to improve the detection capabilities in your security products?

• Understanding and Mitigating the MOVEit Incidents

• UK set to ramp up citizen surveillance program

• Hackers Are Actively Using New Mystic Stealer Malware in Cyber Attacks

• Cyber Attack on European Investment Bank and Redditt

• Rogue Android Apps Target Pakistani Individuals in Sophisticated Espionage Campaign

• Data leak at major law firm sets Australia’s government and elites scrambling

• 10 open-source recon tools worth your time

• ChatGPT and data protection laws: Compliance challenges for businesses

• The significance of CIS Control mapping in the 2023 Verizon DBIR

• What if the browser was designed for the enterprise?

• Demand for STEM training skyrockets

• The future of passwords and authentication

• The Need for Innovation in DFIR

• GraphQL vs gRPC: Which One Creates More Secure APIs?

• Decrypting Cyber Risk Quantification

• A week in security (June 12 – 18)

• Phishing scam takes $950k from DoorDash drivers

• US dangles $10 million reward for information about Cl0p ransomware gang

Generated on 2023-06-21 23:55:35.171067