IT Security News Daily Summary 2023-06-22

• Dangerous driving, poorly designed roadways accelerate pedestrian traffic deaths

• Growing SaaS Usage Means Larger Attack Surface

• LockBit Developing Ransomware for Apple M1 Chips, Embedded Systems

• US ‘can’t PSA our way out’ of cyber vulnerability, CISA director says

• Australia gives Twitter legal notice to clean up online hate content

• Former Duo Security Co-Founder Jon Oberheide Joins DNSFilter Board of Directors

• Airgap Networks Acquires NetSpyGlass

• New Mirai botnet targets tens of flaws in popular IoT devices

• US Auto Insurance Price Comparison Site RateForce Leaks Massive PII Data

• Google Backs Creation of Cybersecurity Clinics With $20 Million Donation

• Tanium Platform Advances Threat Identification Capabilities and Enhances Endpoint Reach

• Sumsub Launches Advanced Deepfakes Detector

• Even With No Recession, Smaller Firms Aim to Consolidate Security Tools

• How to Implement a Secure API Gateway

• Will Hurd, former GOP lawmaker with tech expertise, announces White House bid

• Legacy tech could undermine zero trust push

• SMS Phishers Harvested Phone Numbers, Shipment Data from UPS Tracking Tool

• Louisiana bans TikTok on state networks and devices. Will it make any difference?

• Azure AD ‘Log in With Microsoft’ Authentication Bypass Affects Thousands

• TikTok COO Pappas Steps Down

• Apple patches zero days used in spyware attacks on Kaspersky

• What is a VLAN? Ultimate Guide to How VLANs Work

• How will AI affect workers? Tech waves of the past show how unpredictable the path can be

• S3 Ep140: So you think you know ransomware?

• An Overview of OffSec’s OSCE³ Certification: The Ultimate Achievement in Offensive Security

• Student Monitoring Tools Should Not Flag LGBTQ+ Keywords

• Now BlackCat extortionists threaten to leak stolen plastic surgery pics

• Twitter Is Top Platform For Online Hate, Says Australia

• Microsoft Warns of Stealthy Password Attacks Using Proxy Services

• California Public Employees’ Retirement System Compromised by MOVEit Hackers

• Cyberattackers Target the Latin American Health Care Sector

• NIST wants to help prevent a major cyberattack on the water sector

• MULTI#STORM Campaign Targets India and U.S. with Remote Access Trojans

• US Military Personnel Receiving Unsolicited, Suspicious Smartwatches

• #InfosecurityEurope: Experts Highlight Evolving Attack Techniques

• #InfosecurityEurope Case Study: Attack Surface Operations at Nationwide

• 5 Steps for Minimizing Dark Data Risk

• Threat Hunt: KillNet’s DDoS HEAD Flood Attacks – cc.py

• Threat Hunting Uncovered: Innovative Strategies for Cybersecurity

• VA official expects Oracle Cerner to deliver on $10B EHR contract despite layoffs

• Apple Addresses Exploited Security Flaws in iOS, macOS and Safari

• Patch Now: Cisco AnyConnect Bug Exploit Released in the Wild

• Google Cloud Awards $313,337 in 2022 VRP Prizes

• Optimizing Network Security for Administrators

• US Military Personnel Targeted by Unsolicited Smartwatches Linked to Data Breaches

• Big tech is actually doing all this with your personal data. True or false?

• #InfosecurityEurope: Drones Contain Over 156 Different Cyber Threats, Angoka Research Finds

• US Justice Department Launches New National Security Cyber Section

• Report: Facebook Isn’t Fully Reviewing Content Users Flag For Violating Its Rules

• 6 Attack Surfaces You Must Protect

• Researchers released a PoC exploit for CVE-2023-20178 flaw in Cisco AnyConnect Secure

• AI as Sensemaking for Public Comments

• NCSC warns all British Law firms against ransomware attacks

• Apple Violated NYC Store Workers Union Rights, Judge Rules

• Records agency to DHS: Look into your watchdog’s use of text messages

• This $6 USB condom can protect your data in the most unsuspecting places

• North Korean Hackers Caught Using Malware With Microphone Wiretapping Capabilities

• China-Linked APT15 Targets Foreign Ministries With ‘Graphican’ Backdoor

• RedEyes Group Targets Individuals with Wiretapping Malware

• IT Staff Increasingly Saddled With Data Protection Compliance

• USB Drives Spread Spyware as China’s Mustang Panda APT Goes Global

• PwC Caught in the Crossfire: Australian Fallout from Major Cyber Breach Deepens

• Exabeam appoints Adam Geller as CEO

• What Is CIAM?

• Data Collection: What are Some ‘Unlikable’ Traits in This Growing Trend?

• DevSecOps: Striking a Balance Between Speed and Security

• Check Point Harmony Email & Collaboration Recognized as MVP APAC by Pax8

• The next wave of cyber threats: Defending your company against cybercriminals empowered by generative AI

• Plan ahead to reduce cloud forensics challenges

• Twitter Sued Over Unpaid Staff Bonuses

• Can ChatGPT Detect Phishing Sites? – Researchers Answered

• First Directory of Virtual CISO Providers Launched by Cynomi

• Building a Robust Cloud Migration Framework: Security Considerations

• Get three years of a powerful VPN plus 30 days of anti-virus protection for $30

• #InfosecurityEurope: Industry Pros Urged to Advocate For Neuroinclusion

• #InfosecurityEurope: It’s Time to Think Creatively to Combat Skills Shortages

• Lessons From a Pen Tester: 3 Steps to Stay Safer

• Camaro Dragon Hackers Strike with USB-Driven Self-Propagating Malware

• Alert: Million of GitHub Repositories Likely Vulnerable to RepoJacking Attack

• Generative-AI apps & ChatGPT: Potential risks and mitigation strategies

• Norton parent firm Gen Digital, was victim of a MOVEit ransomware attack too

• vCISO Directory helps SMBs manage their cybersecurity

• Threat Actors Claim International Finance Corporation (IFC) Attack

• North Korean APT37 Exploits New FadeStealer Malware

• Mastering the Art of Playing in Crypto Casinos

• Critical WordPress Plugin Vulnerabilities

• Crimeware-as-a-Service on the Rise; Here’s How to Protect Yourself

• Can ChatGPT Detect Phishing Sites? Researchers Answered

• Stealthy USB: New versions of Chinese espionage malware propagating through USB devices found by Check Point Research

• The Benefits of Red Zone Threat Intelligence

• PoC Exploit Published for Cisco AnyConnect Secure Vulnerability

• #InfosecurityEurope: Dunelm Shifts Security to the Edge

• #InfosecurityEurope: Hackers Are the Immune System of the Digital Age

• Enterprise DevOps: Importance and Key Benefits You Need to Know

• 2 More Apple Zero-Days Exploited in Ongoing iOS Spy Campaign

• Apple Squashes Kernel Bug Used By TriangleDB Spyware

• Japan’s Digital ID Card Gets Emergency Review Amid Data Leaks

• North Korean APT Targets Defectors, Activists With Infostealer Malware

• Bipartisan Bill Proposes Cybersecurity Funds For Rural Water Systems

• API Security Testing: Importance, Risks, and Test Cases

• Massive Data Breach: Over 100,000 ChatGPT Accounts Stolen via Info-Stealing Malware

• Microsoft warns of rising NOBELIUM credential attacks on defence sector

• Former FBI Analyst Sentenced for Keeping Hundreds of National Defense Documents

• Bipartisan Bill Proposes Cybersecurity Funds for Rural Water Systems

• Unveiling the Unseen: Identifying Data Exfiltration with Machine Learning

• EU Now Wants Smartphones to Feature Replaceable Batteries

• Apple fixes zero-day vulnerabilities used to covertly deliver spyware (CVE-2023-32435)

• 1-15 May 2023 Cyber Attacks Timeline

• New Exploit Unleashed for Cisco AnyConnect Bug Granting SYSTEM Privileges

• Intel Restructures Manufacturing Business, Shares Slide

• Critical Flaw Found in WordPress Plugin for WooCommerce Used by 30,000 Websites

• Apple addressed actively exploited zero-day flaws in iOS, macOS, and Safari

• RedClouds APT Deploys RDStealer Against Remote Desktop

• Elon Musk Challenges Mark Zuckerberg To Cage Fight. Zuck Accepts

• #InfosecurityEurope: Angoka Named UK’s Most Innovative Cyber SME of 2023

• Docs Show FBI Pressures Cops to Keep Phone Surveillance Secrets

• Forcepoint DLP Product Review

• DoNot APT Target Android Users With Spyware Via Fake Apps

• Hackers Can Extract Cryptographic Keys Via Device’s Power LED Videos

• Norton Parent Ransomware Attack

• Maltego: Check how exposed you are online

• LockBit Green and phishing that targets organizations

• Cato Networks Recognized as Global Security Service Edge (SSE) Leader

• Apple Responds Swiftly to Active Security Threats with iOS 16.5.1 Update

• Navigating the Cyber Threat Landscape: Key Insights from Trellix ARC’s Q1 2023 Report

• New survey: 50% of Europeans do not know how to recognise fake news

• The Log4j vulnerability – how can we all do better next time?

• #InfosecurityEurope: Internet of Things Continues to Pose Security Risk

• Analyzing the TriangleDB implant used in Operation Triangulation

• Do you know what your supply chain is and if it is secure?

• Silicon Insights: The Evolution of Account Based Marketing: Part 2

• Zero-Day Alert: Apple Releases Patches for Actively Exploited Flaws in iOS, macOS, and Safari

• Preventing Attacks and Securing the Supply Chain in the Security Software Industry

• List of victimized companies of MOVEit Cyber Attack

• Using social media as a tool to share knowledge on day-to-day Cybersecurity risks

• Hackers Attack Linux SSH Servers with Tsunami DDoS Malware

• Photos: Infosecurity Europe 2023, part 3

• ChatGPT shows promise in detecting phishing sites

• 1Password adds Telemetry to its password manager, but it is opt-in, sort of

• Cloud-native security hinges on open source

• Japan’s digital ID card gets emergency review amid data leaks

• Unraveling the multifaceted threats facing telecom companies

• Understanding the interplay between DevOps productivity and security

• Xerosploit – Pentesting Toolkit to Perform MITM, Spoofing, Sniffing & DOS Attacks

• Increased spending doesn’t translate to improved cybersecurity posture

• A clash of titans

• Apple patch fixes zero-day kernel hole reported by Kaspersky – update now!

• Ironscales Adds AI Assistant to Suss Out Phishing Attempts

• DNA testing company failed to protect sensitive genetic and health data, says FTC

• Ransomware attackers email bemused students as leverage for a payout

• A (cautionary) tale of two patched bugs, both exploited in the wild

• A (cautionary) tale of two patched bugs, both being exploited in the wild

• New DDoS Botnet ‘Condi’ Targets Vulnerable TP-Link AX21 Routers

• FIRST Announces CVSS v4.0 Public Preview

• RHEL confidential virtual machines on Azure: A technical deep dive

• Vulnerability Summary for the Week of June 12, 2023

• 20-Year-Old Chinese APT15 Finds New Life in Foreign Ministry Attacks

• CFPB looks to existing law to regulate workplace surveillance tech

• Schumer says ‘don’t count Congress out’ when it comes to regulating AI

• New DoJ Cyber Prosecution Team Will Go After Nation-State Threat Actors

• 20 Year-Old Chinese APT15 Finds New Life in Foreign Ministry Attacks

• IT Security News Daily Summary 2023-06-21

• House panel zeros out TMF funding for 2024 fiscal year

• How a data-centric approach can lift agencies above the cybersecurity poverty line

• Apple just released iOS 16.5.1 with security fixes

• Ransomware Misconceptions Abound, to the Benefit of Attackers

• Avast, Norton Parent Latest Victim of MOVEit Ransomware Attacks

• New DOJ Cyber Prosecution Team Will Go After Nation-State Threat Actors

• Bias, privacy among governments’ generative AI headaches

• The best security cameras of 2023

• Remote work and the cloud create new endpoint security challenges

• #InfosecurityEurope: From Passion to Profession, Becky Pinkard’s Dedication to Cybersecurity

• Ransomware Misconceptions Abound, To the Benefit of Attackers

• Apple squashes kernel bug used by TriangleDB spyware

• 5 Benefits Of SIEM To The Cybersecurity Of Any Business

• Apple Patches iOS Flaws Used in Kaspersky ‘Operation Triangulation’

• Russia-linked APT28 hacked Roundcube email servers of Ukrainian entities

• Researcher Identifies Popular Swing VPN Android App as DDoS Botnet

• FTC accuses DNA testing company of lying about dumping samples

• Keep Job Scams From Hurting Your Organization

• Researchers Devise New EMFI Attack Leading To Drone Takeover

• There’s something DHS can do to help civilian agencies fight cyberattacks

• Beware bad passwords as attackers co-opt Linux servers into cybercrime

• Why Malware Crypting Services Deserve More Scrutiny

• Linux Patch Management: Tools, Issues & Best Practices

• What Happens When You Type a URL Into Your Browser?

• Critical VMware Aria Operations bug under active exploitation

• Emerging Ransomware Group 8Base Doxxes SMBs Globally

• SMB Edge Devices Walloped With Asus, Zyxel Patch Warnings

• Google Files FTC Cloud Complaint Against Microsoft

• Hiding in plain site: Women are part of ‘invisible’ labor market building Maine’s fiber networks

• Australia plans to mandate file scanning for all tech companies

• #InfosecurityEurope Hall of Fame: Becky Pinkard, Managing Director of Global Cyber Operations, Barclays

• Ethical Problems in Computer Security

• Google accuses Microsoft of unfair practices in Azure cloud unit

• When homes flood, who retreats and to where?

• Cooperation or Competition? China’s Security Industry Sees the US, Not AI, as the Bigger Threat

• CISOs’ New Stressors Brought on by Digitalization: Report

• Google accuses Microsoft of anticompetitive practices in Azure cloud unit

• Who’s responsible for securing the open-source software organizations used to build all applications?

• Zero Trust: The Key to a Hybrid Workforce

• Justice Department launches new unit to combat cyber threats

• ‘Muddled Libra’ Uses Oktapus-Related Smishing to Target Outsourcing Firms

• FTC Sues Amazon For ‘Duping’ Customers With Prime Subscriptions

• Military Satellite Access Sold on Russian Hacker Forum for $15,000

• #InfosecurityEurope: Cybersecurity Industry Still Fighting to Recruit and Retain Talent

• Cyberattacks on OT, ICS Lay Groundwork for Kinetic Warfare

• ScarCruft Hackers Exploit Ably Service for Stealthy Wiretapping Attacks

• Exabeam launches Outcomes Navigator to help organizations detect security threats

• Cloudflare joins forces with Databricks to enable organizations collaborate on live data

• Toward a more resilient SOC: the power of machine learning

• How can small businesses ensure Cybersecurity?

• Enphase Ignores CISA Request to Fix Remotely Exploitable Flaws

• Kaspersky Dissects Spyware Used in iOS Zero-Click Attacks

• Critical WordPress Plugin Vulnerabilities Impact Thousands of Sites

• Supply Chain and APIs Top Security Concerns, CISO Survey Shows

• New Condi DDoS botnet targets TP-Link Wi-Fi routers

• Progress Software Hit With Class Action Suit Over MOVEit Hack

• Oreo Cookie Maker Says Crooks Gobbled Up Staff Info

• Reddit Confirms BlackCat Gang Pinched Some Data

• Now Patched VMware Zero-Day Bug Exploited In Wild

• Government Agencies are Compromised by Russian Ransomware

• US DoJ creates a litigation section dedicated to Cybersecurity

• How to earn money using AI based ChatGPT

• Setting Up iPhone For Child Safety: Essential Parental Controls And Restrictions

• AI could shore up democracy—Here’s one way

• Security Researchers Uncover New Spyware Implant TriangleDB

• OffSec Guide: The OSCE³ Certification

• An Overview of OffSec’s OSCE³ Certification: The Ultimate Achievement in offensive security

• Chinese Hackers APT15 Use New Backdoor Malware to Target American Ministries

• Microsoft looks to speed up materials science research with quantum-compatible system

• phishing

• Cool, Aesthetic, Good & Unique Twitter Username – Stand Out in Style

• Delhi Police, FBI & Interpol in a Joint Operation Expose a Cybercrime Syndicate, Arrested Four

• School Kids are Stealing NFTs Worth Millions of Dollars to Purchase Roblox Skins

• How Generative AI is Creating New Classes of Security Threats

• Amazon Faces Senate Warehouse Safety Investigation

• Elon Musk Touts Significant India Investment By Tesla

• Habu announces AWS Clean Rooms solution for democratized data collaboration

• Patch Alert! Critical Command Injection Flaw Discovered in NAS Devices

• Windows Patch Management: Definition, How It Works and Why It Helps

• Paying Ransomware’s Ransom: Why it’s Time to Reconsider

• Going on vacation soon? Stay one step ahead of travel scammers

• DOJ Launches Cyber Unit to Prosecute Nation-State Threat Actors

• CISO Conversations: Three Leading CISOs From the Payment Industry

• “The Ransomware Documentary” – brand new video series from Sophos starting now!

• #InfosecurityEurope: Compliance Does Not Mean Security, Experts Warn

• Placing People & Realism at the Center of Your Cybersecurity Strategy

• New Report Exposes Operation Triangulation’s Spyware Implant Targeting iOS Devices

• Stealthy SMS Side-Channel Attack Exposes SMS Recipient Location

• AI Threats Today: The Unseen Challenges in Our Automated World

• Building Web Applications With .NET: Best Practices and Techniques

• #InfosecurityEurope: Security Training Failures Impacting Digital Transformation

• Critical ‘nOAuth’ Flaw in Microsoft Azure AD Enabled Complete Account Takeover

• Startup Security Tactics: Friction Surveys

• Training in Spanish for cyber security pros

• Orca Security expands partnership with Google Cloud to secure enterprise cloud estates

• #InfosecurityEurope: Transparency and Context Key to Insider Risk Management

• React Native vs Native: Which one is better?

• Real-World Cyberattacks Targeting Data Science Tools

• IRS direct file is a free and easy option for taxpayers from historically marginalized communities

• Chrome and Its Vulnerabilities – Is the Web Browser Safe to Use?

• The Quintessential Toolkit: Five Essential Skills for Advancing in the Cybersecurity Realm

• Island integrates DLP capabilities for ChatGPT, Bard, and other AI

• APIs Under Attack: How To Prepare for and Respond to Breaches

• Chinese Hacker Group ‘Flea’ Targets American Ministries with Graphican Backdoor

• From Offline To Online: Integrating QR Codes Into Your Instagram Marketing Strategy

• #InfosecurityEurope: One in Three UK&I Workers Susceptible to Phishing

• President Biden Meets AI Experts, Warns Of Risks

• Top Considerations for Securing AWS Lambda, part 3

• May ransomware activity rises behind 8base, LockBit gangs

• How the Most Popular Cars in the US Track Drivers

• How to create SBOMs for container images

• Compromised ChatGPT accounts garner rapid dark web popularity

• Photos: Infosecurity Europe 2023, part 2

• Infosecurity Europe 2023 video walkthrough

• VMware Aria Operations for Networks vulnerability exploited in the wild (CVE-2023-20887)

• Strengthening Cybersecurity Defenses: Cyber Assessment Framework

• Gaps in Azure Service Fabric’s Security Call for User Vigilance

• Over 100K+ Compromised ChatGPT Accounts on Dark Web Marketplaces

• Insider Risk Hits Closer to Home

• PCI DSS 4.0 Requirements – Restrict Access, Identify Users and Authenticate Access

• #InfosecurityEurope: Financial Firms to Build Resilience in Face of Growing Cyber-Threats

• Dissecting TriangleDB, a Triangulation spyware implant

• DoJ Creates Cyber Unit, Amid Growing National Security Focus

• Network security policy

• #InfosecurityEurope: Does Pentesting Need a New Service Model?

• #InfosecurityEurope: Why API Security Could Be the Next Big Thing in Cyber

• Linux Servers Hacked to Launch DDoS Attacks and Mine Monero Cryptocurrency

• Purely AI-generated songs declared ineligible for Grammy Awards

• Google’s $200 metal Pixel Watch band is very premium, very expensive

• Thousands of realistic but fake AI child sex images found online, report says

• How to Find the Titanic Sub Before It’s Too Late

• Virus definition updates for Avast version 9/10/11 end in summer 2023

• Hiring kit: GDPR data protection compliance officer

• Alert! Hackers Exploiting Critical Vulnerability in VMware’s Aria Operations Networks

• New Condi Malware Hijacking TP-Link Wi-Fi Routers for DDoS Botnet Attacks

• Best Methods to Know Who Viewed Your Facebook Profile – Alternatives You Need to Know About

• Phishing Tools for Purchase: A Closer Look at Facebook Scamming Groups

• #InfosecurityEurope: Security Training Needs to Nudge, Not Nag

• How to Login to Godaddy Account – Three Popular Methods

• Why performing security testing on your products and systems is a good idea

• 100,000 Stolen ChatGPT Account Credentials Found on Dark Web

• Hackers Attacks on Websites Developed by a Specific Website Development Company

• Critical RCE flaw CVE-2023-20887 in VMware vRealize exploited in the wild

• DDoS Attack Hits European Investment Bank – Websites Unavailable

• Azure AD アプリケーションにおける特権昇格の潜在的なリスクについて

• Asus releases firmware updates for routers to address critical security issues

• What is NFV

• Rise of AI in Cybercrime: How ChatGPT is revolutionizing ransomware attacks and what your business can do

• Biden Discusses Risks and Promises of Artificial Intelligence With Tech Leaders in San Francisco

• Organizations actively embrace zero trust, integration remains a hurdle

• NOS chooses Censys to monitor its attack surface

• Getting ahead of cyberattacks with a DevSecOps approach to web application security

• VMware Confirms Live Exploits Hitting Just-Patched Security Flaw

• Overcoming Challenges in Delivering Machine Learning Models from Research to Production

• Unraveling an AI Scam with AI

• Black Cat ransomware group wants $4.5m from Reddit or will leak stolen files

• Baby monitor safety: What you need to know

• Update now! ASUS fixes nine security flaws

• Why businesses need a disinformation defense plan, with Lisa Kaplan: Lock and Code S04E13

Generated on 2023-06-22 23:55:35.310059