IT Security News Daily Summary 2023-06-23

• Silobreaker Unveils Geopolitical Threat Intelligence Capabilities With RANE at Infosecurity Europe 2023

• ITDR Combines and Refines Familiar Cybersecurity Approaches

• NSA: BlackLotus BootKit Patching Won’t Prevent Compromise

• House Oversight members want Login.gov documents outlining $187M modernization award

• Public transit systems remain vulnerable to cyber threats

• Suspicious Smartwatches Mailed to US Army Personnel

• Chinese Espionage Malware Targets European Healthcare via USB Drives

• Democrats call YouTube ‘extremely irresponsible’ for election misinformation rollback

• 5 Best Chrome VPN Extensions for 2023

• Palo Alto Networks CTO Talks Securing ‘Code to Cloud’

• 11 Key Steps of the Patch Management Process

• VMware fixed five memory corruption issues in vCenter Server

• Most government software stinks. Here’s what you can do about it.

• EE To Deploy Temporary 4G, 5G Masts To Bolster Capacity

• Top 10 threat modeling tools, plus features to look for

• AWS Reveals $100m Programme To Fund AI Initiatives

• Dell Technologies World 2023: Interview with Rob Emsley on data protection, recovery and more

• GSA activates 5-year option on Alliant 2 IT vehicle

• The Pentagon’s ambitious AI plans look less and less like ChatGPT

• Why Legacy System Users Prioritize Uptime Over Security

• Microsoft Teams Attack Skips the Phish to Deliver Malware Directly

• NSA Releases Guide to Combat BlackLotus Malware

• First AI advisory committee report stresses getting regulatory balance right

• NIST launches new working group to tackle AI risks

• Air taxis are taking off. Cities should start planning now

• Patched OpenSSH Exploited for IoT, Linux Cryptomining

• Ransomware and phishing attacks continue to plague businesses in Singapore

• Aussie PM says, “Shut down your phone every 24 hours for 5 mins” – but that’s not enough on its own

• Black Hat Asia 2023: Cybersecurity Maturity and Concern in Asia

• Et tu, Brute? From Coworker and Confidant to Cybercriminal

• Business Logic Attacks: Why Should You Care?

• A Year Since Dobbs, The Fight For Reproductive Privacy and Information Access Continues

• Congress needs ‘private sector buy-in’ to address cyber workforce shortage

• Another state signals its intent to leave the voter data system

• NSA Issues Guidance on Mitigating BlackLotus Bootkit Infections

• US Military Personnel Warned of Malicious Smartwatches

• Supply chain security for Go, Part 2: Compromised dependencies

• Russia-Aligned Hackers Trying to Disrupt Canada’s Energy Sector

• Student Sues Whiteworth University for Ransomware Attack

• OpenSSH Trojan Campaign Targets IoT and Linux Systems

• Inside the Dangerous Underground Abortion Pill Market Growing on Telegram

• Fortinet fixes critical FortiNAC RCE, install updates asap

• Wallarm API Abuse Prevention protects organizations against bot-based attacks

• Meta To Pull News On Facebook, Instagram In Canada

• NIST wants to help prevent cyberattacks on the water sector

• USB Drives Used as Trojan Horses By Camaro Dragon

• Cybercrime Group ‘Muddled Libra’ Targets BPO Sector with Advanced Social Engineering

• Digital-First Economy Has Transformed Role of CISO

• Steering Mobility Data to a Better Privacy Regime

• These are the most-loved Club stocks on Wall Street. Here’s where we stand

• 100K+ ChatGPT Login Credentials Leaked to the Dark Web

• Millions of GitHub repositories vulnerable to RepoJacking: Report

• Ransomware and phishing attacks continue to plague businesses in Southeast Asia

• CISA Tells US Agencies to Patch Exploited Roundcube, VMware Flaws

• In Other News: Microsoft Win32 App Isolation,Tsunami Hits Linux Servers, ChatGPT Credentials Exposed on Dark Web

• How to Maximize the Value of Penetration Tests

• UPS Data Harvested for SMS Phishing Attacks

• Microsoft’s Bootkit Patches Offer False Sense Of Security Against BlackLotus Threat, NSA Says

• JavaScript Dropper Delivers Bumblebee And IcedID Malware

• Why Is It So Rare To Hear About Western Cyber Attacks?

• GCHQ Warns Ransomware Crews Are Targeting Law Firms

• Report: U.S. Intelligence Gathers ‘Sensitive and Intimate’ Data From ‘Nearly Everyone’

• PoC exploit released for Cisco AnyConnect, Secure Client vulnerability (CVE-2023-20178)

• PAIG combats the unpredictability of generative AI

• Tanium strengthens threat identification capabilities and enhances endpoint reach

• Digital Espionage: German Intelligence Agency’s NFT Collection Sets New Recruitment Standards

• The Rate of Rorschach Ransomware is Increasing; Here’s How to Safeguard Yourself

• Easy Configuration Fixes Can Protect Your Server from Attack

• Think Your Secrets are Safe in their Vault? Think Again

• How Government Contractors & Agencies Should Navigate New Cyber Rules

• Why Successful Central Bank Digital Currencies require Partnership engagement

• 12 Benefits of a VPN: Advantages of Network Protection

• What Is SCM (Security Configuration Management)?

• BlackLotus bootkit patch may bring “false sense of security”, warns NSA

• VMware Patches Code Execution Vulnerabilities in vCenter Server

• Millions of Repos on GitHub Are Potentially Vulnerable to Hijacking

• Deception Technologies Have a Maturity Problem

• More than 1 in 3 UK&I workers are likely to click a phishing link

• API Security Is a Hot Topic, Here’s Why

• Celerium Compromise Defender detects and disrupts cyber compromise activity

• Microsoft Teams vulnerability allows attackers to deliver malware to employees

• McAfee releases online protection solution for small businesses

• UPS Discloses Data Breach Caused by an SMS Phishing Campaign

• UK cyberspies warn ransomware crews targeting law firms

• #InfosecurityEurope: BlackBerry Cybersecurity President Warns Against Heavy-Handed AI Regulation

• The Power of Browser Fingerprinting: Personalized UX, Fraud Detection, and Secure Logins

• 2.5M Genworth Policyholders and 769K Retired California Workers and Beneficiaries Affected by Hack

• Powerful JavaScript Dropper PindOS Distributes Bumblebee and IcedID Malware

• Aviatrix appoints Doug Merritt as Chairman, CEO, and President

• An Overview of the Different Versions of the Trigona Ransomware

• Inside the Illicit Market for Abortion Pills on Telegram

• The Importance of Training Employees in Cybersecurity

• Governmental Agencies Ordered by CISA to Patch Vulnerabilities Exploited by Russian APT Groups

• NSA Releases Guide to Combat Powerful BlackLotus Bootkit Targeting Windows Systems

• IoT devices and Linux-based systems targeted by OpenSSH trojan campaign

• NCSC Updates Cybersecurity Guidance for the Legal Sector

• Millions of GitHub Repositories Are Vulnerable To RepoJacking

• Microsoft Teams Vulnerability Let Attackers Deliver Malware From External Accounts

• Manchester University Breach Victims Hit with Triple Extortion

• Keep it schtum!

• FBI Analyst Gets Three Years For National Security Breach

• New Cryptocurrency Mining Campaign Targets Linux Systems and IoT Devices

• More than a million GitHub repositories potentially vulnerable to RepoJacking

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Silicon UK Pulse: Your Tech News Update: Episode 8

• Apple M1 Chips face LockBit Ransomware threat in development

• Can we get loan to pay ransom in ransomware attacks

• New infosec products of the week: June 23, 2023

• Operationalizing zero trust in the cloud

• Chinese malware intended to infect USB drives accidentally infects networked storage too

• Why Sucessful Central Bank Digital Currencies require Partnership enagement

• Law enforcement’s battle against Cryptocurrency crime

• Insurance companies neglect basic email security

• Security investments that help companies navigate the macroeconomic climate

• US cyber ambassador says China knows how to steal its way to dominance of cloud and AI

• What is XSS (Cross-Site Scripting)? – A Detailed Understanding Of the Type of XSS

• 2023-06-21 – 30 days of Formbook: Day 17, Wednesday 2023-06-21 – ModiLoader for XLoader “NVP4”

• Files for an ISC diary (obama271 Qakbot)

• 2023-06-22 – 30 days of Formbook: Day 18, Thursday 2023-06-22 – “K2L0”

• From details to big picture: how to improve security effectiveness

• Unveiling the Dark Side of AI: How Prompt Hacking Can Sabotage Your AI Systems

• Enhancing Customer Engagement with Client Portals

• 6 tips for a cybersecure honeymoon

• Reducing your attack surface is more effective than playing patch-a-mole

• Update now! Apple fixes three actively exploited vulnerabilities

• UPS warns customers of phishing attempts after data accessed

• Malwarebytes only vendor to win every MRG Effitas award in 2022 & 2023

• Mullvad VPN Introduces Mullvad Leta: A Privacy-Focused Search Engine

• Agentless Workload Scanning Gets Supercharged with Malware Scanning

• U.S.-China tech battle entering its ‘primetime’ — and generative A.I. could be the next frontier

• What is Dynamic Application Security Testing (DAST)?

• How to bypass CAPTCHAs online with Safari on iOS 16

• Job Seekers, Look Out for Job Scams

• To kill BlackLotus malware, patching is a good start, but…

• IT Security News Daily Summary 2023-06-22

• Dangerous driving, poorly designed roadways accelerate pedestrian traffic deaths

• Growing SaaS Usage Means Larger Attack Surface

• LockBit Developing Ransomware for Apple M1 Chips, Embedded Systems

• US ‘can’t PSA our way out’ of cyber vulnerability, CISA director says

• Australia gives Twitter legal notice to clean up online hate content

• Former Duo Security Co-Founder Jon Oberheide Joins DNSFilter Board of Directors

• Airgap Networks Acquires NetSpyGlass

• New Mirai botnet targets tens of flaws in popular IoT devices

• US Auto Insurance Price Comparison Site RateForce Leaks Massive PII Data

• Google Backs Creation of Cybersecurity Clinics With $20 Million Donation

• Tanium Platform Advances Threat Identification Capabilities and Enhances Endpoint Reach

• Sumsub Launches Advanced Deepfakes Detector

• Even With No Recession, Smaller Firms Aim to Consolidate Security Tools

• How to Implement a Secure API Gateway

• Will Hurd, former GOP lawmaker with tech expertise, announces White House bid

• Legacy tech could undermine zero trust push

• SMS Phishers Harvested Phone Numbers, Shipment Data from UPS Tracking Tool

• Louisiana bans TikTok on state networks and devices. Will it make any difference?

• Azure AD ‘Log in With Microsoft’ Authentication Bypass Affects Thousands

• TikTok COO Pappas Steps Down

• Apple patches zero days used in spyware attacks on Kaspersky

• What is a VLAN? Ultimate Guide to How VLANs Work

• How will AI affect workers? Tech waves of the past show how unpredictable the path can be

• S3 Ep140: So you think you know ransomware?

• An Overview of OffSec’s OSCE³ Certification: The Ultimate Achievement in Offensive Security

• Student Monitoring Tools Should Not Flag LGBTQ+ Keywords

• Now BlackCat extortionists threaten to leak stolen plastic surgery pics

• Twitter Is Top Platform For Online Hate, Says Australia

• Microsoft Warns of Stealthy Password Attacks Using Proxy Services

• California Public Employees’ Retirement System Compromised by MOVEit Hackers

• Cyberattackers Target the Latin American Health Care Sector

• NIST wants to help prevent a major cyberattack on the water sector

• MULTI#STORM Campaign Targets India and U.S. with Remote Access Trojans

• US Military Personnel Receiving Unsolicited, Suspicious Smartwatches

• #InfosecurityEurope: Experts Highlight Evolving Attack Techniques

• #InfosecurityEurope Case Study: Attack Surface Operations at Nationwide

• 5 Steps for Minimizing Dark Data Risk

• Threat Hunt: KillNet’s DDoS HEAD Flood Attacks – cc.py

• Threat Hunting Uncovered: Innovative Strategies for Cybersecurity

• VA official expects Oracle Cerner to deliver on $10B EHR contract despite layoffs

• Apple Addresses Exploited Security Flaws in iOS, macOS and Safari

• Patch Now: Cisco AnyConnect Bug Exploit Released in the Wild

• Google Cloud Awards $313,337 in 2022 VRP Prizes

• Optimizing Network Security for Administrators

• US Military Personnel Targeted by Unsolicited Smartwatches Linked to Data Breaches

• Big tech is actually doing all this with your personal data. True or false?

• #InfosecurityEurope: Drones Contain Over 156 Different Cyber Threats, Angoka Research Finds

• US Justice Department Launches New National Security Cyber Section

• Report: Facebook Isn’t Fully Reviewing Content Users Flag For Violating Its Rules

• 6 Attack Surfaces You Must Protect

• Researchers released a PoC exploit for CVE-2023-20178 flaw in Cisco AnyConnect Secure

• AI as Sensemaking for Public Comments

• NCSC warns all British Law firms against ransomware attacks

• Apple Violated NYC Store Workers Union Rights, Judge Rules

• Records agency to DHS: Look into your watchdog’s use of text messages

• This $6 USB condom can protect your data in the most unsuspecting places

• North Korean Hackers Caught Using Malware With Microphone Wiretapping Capabilities

• China-Linked APT15 Targets Foreign Ministries With ‘Graphican’ Backdoor

• RedEyes Group Targets Individuals with Wiretapping Malware

• IT Staff Increasingly Saddled With Data Protection Compliance

• USB Drives Spread Spyware as China’s Mustang Panda APT Goes Global

• PwC Caught in the Crossfire: Australian Fallout from Major Cyber Breach Deepens

• Exabeam appoints Adam Geller as CEO

• What Is CIAM?

• Data Collection: What are Some ‘Unlikable’ Traits in This Growing Trend?

• DevSecOps: Striking a Balance Between Speed and Security

• Check Point Harmony Email & Collaboration Recognized as MVP APAC by Pax8

• The next wave of cyber threats: Defending your company against cybercriminals empowered by generative AI

• Plan ahead to reduce cloud forensics challenges

• Twitter Sued Over Unpaid Staff Bonuses

• Can ChatGPT Detect Phishing Sites? – Researchers Answered

• First Directory of Virtual CISO Providers Launched by Cynomi

• Building a Robust Cloud Migration Framework: Security Considerations

• Get three years of a powerful VPN plus 30 days of anti-virus protection for $30

• #InfosecurityEurope: Industry Pros Urged to Advocate For Neuroinclusion

• #InfosecurityEurope: It’s Time to Think Creatively to Combat Skills Shortages

• Lessons From a Pen Tester: 3 Steps to Stay Safer

• Camaro Dragon Hackers Strike with USB-Driven Self-Propagating Malware

• Alert: Million of GitHub Repositories Likely Vulnerable to RepoJacking Attack

• Generative-AI apps & ChatGPT: Potential risks and mitigation strategies

• Norton parent firm Gen Digital, was victim of a MOVEit ransomware attack too

• vCISO Directory helps SMBs manage their cybersecurity

• Threat Actors Claim International Finance Corporation (IFC) Attack

• North Korean APT37 Exploits New FadeStealer Malware

• Mastering the Art of Playing in Crypto Casinos

• Critical WordPress Plugin Vulnerabilities

• Crimeware-as-a-Service on the Rise; Here’s How to Protect Yourself

• Can ChatGPT Detect Phishing Sites? Researchers Answered

• Stealthy USB: New versions of Chinese espionage malware propagating through USB devices found by Check Point Research

• The Benefits of Red Zone Threat Intelligence

• PoC Exploit Published for Cisco AnyConnect Secure Vulnerability

• #InfosecurityEurope: Dunelm Shifts Security to the Edge

• #InfosecurityEurope: Hackers Are the Immune System of the Digital Age

• Enterprise DevOps: Importance and Key Benefits You Need to Know

• 2 More Apple Zero-Days Exploited in Ongoing iOS Spy Campaign

• Apple Squashes Kernel Bug Used By TriangleDB Spyware

• Japan’s Digital ID Card Gets Emergency Review Amid Data Leaks

• North Korean APT Targets Defectors, Activists With Infostealer Malware

• Bipartisan Bill Proposes Cybersecurity Funds For Rural Water Systems

• API Security Testing: Importance, Risks, and Test Cases

• Massive Data Breach: Over 100,000 ChatGPT Accounts Stolen via Info-Stealing Malware

• Microsoft warns of rising NOBELIUM credential attacks on defence sector

• Former FBI Analyst Sentenced for Keeping Hundreds of National Defense Documents

• Bipartisan Bill Proposes Cybersecurity Funds for Rural Water Systems

• Unveiling the Unseen: Identifying Data Exfiltration with Machine Learning

• EU Now Wants Smartphones to Feature Replaceable Batteries

• Apple fixes zero-day vulnerabilities used to covertly deliver spyware (CVE-2023-32435)

• 1-15 May 2023 Cyber Attacks Timeline

• New Exploit Unleashed for Cisco AnyConnect Bug Granting SYSTEM Privileges

• Intel Restructures Manufacturing Business, Shares Slide

• Critical Flaw Found in WordPress Plugin for WooCommerce Used by 30,000 Websites

• Apple addressed actively exploited zero-day flaws in iOS, macOS, and Safari

• RedClouds APT Deploys RDStealer Against Remote Desktop

• Elon Musk Challenges Mark Zuckerberg To Cage Fight. Zuck Accepts

• #InfosecurityEurope: Angoka Named UK’s Most Innovative Cyber SME of 2023

• Docs Show FBI Pressures Cops to Keep Phone Surveillance Secrets

• Forcepoint DLP Product Review

• DoNot APT Target Android Users With Spyware Via Fake Apps

• Hackers Can Extract Cryptographic Keys Via Device’s Power LED Videos

• Norton Parent Ransomware Attack

• Maltego: Check how exposed you are online

• LockBit Green and phishing that targets organizations

• Cato Networks Recognized as Global Security Service Edge (SSE) Leader

• Apple Responds Swiftly to Active Security Threats with iOS 16.5.1 Update

• Navigating the Cyber Threat Landscape: Key Insights from Trellix ARC’s Q1 2023 Report

• New survey: 50% of Europeans do not know how to recognise fake news

• The Log4j vulnerability – how can we all do better next time?

• #InfosecurityEurope: Internet of Things Continues to Pose Security Risk

• Analyzing the TriangleDB implant used in Operation Triangulation

• Do you know what your supply chain is and if it is secure?

• Silicon Insights: The Evolution of Account Based Marketing: Part 2

• Zero-Day Alert: Apple Releases Patches for Actively Exploited Flaws in iOS, macOS, and Safari

• Preventing Attacks and Securing the Supply Chain in the Security Software Industry

• List of victimized companies of MOVEit Cyber Attack

• Using social media as a tool to share knowledge on day-to-day Cybersecurity risks

• Hackers Attack Linux SSH Servers with Tsunami DDoS Malware

• Photos: Infosecurity Europe 2023, part 3

• ChatGPT shows promise in detecting phishing sites

• 1Password adds Telemetry to its password manager, but it is opt-in, sort of

• Cloud-native security hinges on open source

• Japan’s digital ID card gets emergency review amid data leaks

• Unraveling the multifaceted threats facing telecom companies

• Understanding the interplay between DevOps productivity and security

• Xerosploit – Pentesting Toolkit to Perform MITM, Spoofing, Sniffing & DOS Attacks

• Increased spending doesn’t translate to improved cybersecurity posture

• A clash of titans

• Apple patch fixes zero-day kernel hole reported by Kaspersky – update now!

• Ironscales Adds AI Assistant to Suss Out Phishing Attempts

• DNA testing company failed to protect sensitive genetic and health data, says FTC

• Ransomware attackers email bemused students as leverage for a payout

• A (cautionary) tale of two patched bugs, both exploited in the wild

Generated on 2023-06-23 23:55:29.410967