IT Security News Daily Summary 2023-07-06

• StackRot Linux Kernel Bug Has Exploit Code on the Way

• Microsoft puts out Outlook fire, says ‘everything’s fine’ with Teams malware flaw

• New court ruling may hinder federal information sharing efforts, experts warn

• CISA: Truebot malware infecting networks in U.S., Canada

• Penetration Testing vs Vulnerability Scanning: What’s the Difference?

• Expanding Broadband in Portland, The Time Is Now

• Truebot Hackers Exploiting Netwrix Auditor Flaw: CISA, FBI Alert

• Patchless Cisco Flaw Breaks Cloud Encryption for ACI Traffic

• Hashed Emergent Announces India Blockchain Week (IBW) Conference

• Shell Becomes Latest Cl0p MOVEit Victim

• Nexo Achieves Type 2 SOC 2 Audit, Reinforces Data Security Compliance

• Retail Wins with Umbrella

• single-factor authentication (SFA)

• Don’t Join Threads—Make Instagram’s ‘Twitter Killer’ Join You

• 6 steps to securing operational technology in critical infrastructure

• New Malware Targets 97 Browser Variants, 76 Crypto Wallets & 19 Password Managers

• S3 Ep142: Putting the X in X-Ops

• Experts Criticize New Facebook Privacy Features For Kids

• Don’t Join Threads—Make Meta’s Instagram-Linked Twitter Alternative Join You

• Now’s the Time for a Pragmatic Approach to New Technology Adoption

• JumpCloud invalidates API keys in response to ongoing incident

• Iranian Hackers’ Sophisticated Malware Targets Windows and macOS Users

• Microservices Security in a Nutshell

• Privacy Woes Hold Up Global Instagram Threads Launch

• StackRot, a new Linux Kernel privilege escalation vulnerability

• TikTok Seeks To Block Montana 1 January 2024 Ban

• TeamTNT Launches Widespread Attacks Against Cloud Infrastructures

• Meta’s Threads Surpasses 30 Million Signups

• Looking to create a LLM-based chatbot that harnesses your company’s data? — Join me at VB Transform and find out how

• TMF announces 5 new digital services and cybersecurity investments

• Hackers already infiltrate EV chargers. It could only get worse.

• 8 Best Password Managers for Business & Enterprises in 2023

• Cybersecurity’s Future Hinges on Stronger Public-Private Partnerships

• Rustbucket Malware Targeting MacOS Devices Silently

• ‘Cyber Battlefield’ Map Shows Attacks Being Played in Real Time

• Ransomware Attacks on the Rise in Manufacturing Industry

• Federal Report Highlights Steps for Enhancing Software Code Pipeline Security Amid App Attacks

• Open Standards & Open-Source Software: What do these solutions mean, and why are they relevant for Digital ID systems?

• Here are 11 of the best technology podcasts you should listen to

• ChatGPT, the new rubber duck

• Blacktail: Unveiling the tactics of a notorious cybercrime group

• Ongoing Incident Prompts JumpCloud to Reset API Keys

• Nurturing the Internet Freedom Movement 🌱

• The U.S. Patent Office Should Drop Proposed Rules That Favor Patent Trolls

• Data Protection: Utilizing the Power of SIEM and CASB

• Cisco Enterprise Switch Flaw Exposes Encrypted Traffic

• Nurturing the Internet Freedom Movement 🌱

• Horse Riding details of 10k users leaked by Ransomware group

• NHTSA Squeezes Tesla For More Records In Autopilot Probe

• Unpatched SolarView Systems Vulnerable to Exploits

• Google Searches for ‘USPS Package Tracking’ Leads to Banking Theft

• Nurturing the Internet Freedom Movement 🌱

• Embracing DevSecOps: Staying Ahead of the Curve for Enhanced Software Security

• Understanding Cloud-Native Application Protection Platforms: A Comprehensive Overview

• Human coding error identified as cause of digital bank service outage

• Android Security Updates Patch 3 Exploited Vulnerabilities

• JumpCloud Says All API Keys Invalidated to Protect Customers

• Dig Security adds OCR capabilities to detect sensitive customer data in image files

• Nurturing the Internet Freedom Movement 🌱

• June 2023’s Most Wanted Malware: Qbot Most Prevalent Malware in First Half of 2023 and Mobile Trojan SpinOk Makes its Debut

• RedEnergy Stealer Ransomware: A New Threat Targeting Critical Infrastructure

• Nurturing the Internet Freedom Movement 🌱

• User Data Goldmine: Google’s Ambitious Mission to Scrape Everything for AI Advancement

• Here’s Why Twitter is Limiting the Number of Tweets You May View

• China Releases Open Source Operating System

• Beware of the Growing Scourge of Job Recruitment Scams

• Decryption tool for Akira ransomware available for free

• Botnets Send Exploits Within Days to Weeks After Published PoC

• CISOs Find ‘Business as Usual’ Shows the Harsh Realities of Cyber-Risk

• How to Configure the Most Secure Settings for Microsoft Defender

• Preliminary Injunction Limiting Government Communications with Platforms Tackles Illegal “Jawboning,” But Fails to Provide Guidance on What’s Unconstitutional

• Canadian Government Halts Advertising On Facebook, Instagram

• 6 Steps To Outsmart Business Email Compromise Scammers

• ISACA joins ECSO to strengthen cybersecurity and digital skills in Europe

• TXOne Networks introduces Stellar to secure OT/ICS devices from malware and abuse threats

• Critical RCE Bugs Expose Hundreds of Solar Power Stations

• Shell Confirms MOVEit-Related Breach After Ransomware Group Leaks Data

• 28,000 Impacted by Data Breach at Pepsi Bottling Ventures

• Critical RCE Vulnerability Puts 330,000 Fortinet Firewalls at Risk

• Cisco Switch Flaw Let Attack Reads Encrypted Traffic

• Interpol: Key Member of Major Cybercrime Group Arrested in Africa

• StackRot Linux Kernel Vulnerability Shows Exploitability of UAFBR Bugs

• Silentbob Campaign: Cloud-Native Environments Under Attack

• How Pen Testing can Soften the Blow on Rising Costs of Cyber Insurance

• Researchers Uncover New Linux Kernel ‘StackRot’ Privilege Escalation Vulnerability

• Surviving the 800 Gbps Storm: Gain Insights from Gcore’s 2023 DDoS Attack Statistics

• May 2023 Cyber Attacks Statistics

• Belgian Tax Hack

• SMUGX Campaign Targets European Entities

• Meta Launches Twitter Rival Threads

• Exploit Released For Barracuda Shell Command Injection Vulnerability

• How To Secure RESTful Web Services

• The Urban Gardener’s Guide to Growing Plants in Small Spaces with Concrete Planters (2023)

• Vulnerability in Cisco Enterprise Switches Allows Attackers to Modify Encrypted Traffic

• Human Error the Leading Cause of Cloud Data Breaches

• Risks and Best Practices: Navigating Privacy Concerns When Interacting with AI Chatbots

• How to delete saved addresses and credit cards in Firefox for improved security and privacy

• INTERPOL Nabs Hacking Crew OPERA1ER’s Leader Behind $11 Million Cybercrime

• Why Do Scientists Use ELN Notebooks to Improve Productivity, Research Data Integrity, and Team Collaboration?

• 12 Essential Tips for Keeping Your Email Safe

• Experts Warn of Impending TeamTNT Docker Attacks

• Internal Threats: A Major Risk to Any Business

• Linux Ransomware Exposed: Not Just a Windows Problem Anymore

• Ransomware Attackers Dump Students’ Data Online After School Hacks

• Police Arrest Suspected OPERAE1R Cybercrime Kingpin

• The rising risk of eavesdropping

• Suspicious Email Reports Up a Third as NCSC Hails Active Defense

• DSA Must Follow a Human-Rights Centered Enforcement Process, With Regulators Engaging International Civil Society Voices

• Do you know what your supply chain is and if it is secure?

• Thales payShield receives the French Cartes Bancaires HSM certification

• Four Must-haves to Strengthen Your Endpoint Security

• CVE-2022-29303 flaw in SolarView product can be exploited in attacks against the energy sector

• Ransomware accounts for 54% of cyber threats in the health sector

• Google Authenticator – what is it and why should you use it?

• TeamsPhisher Tool Exploits Microsoft Teams Flaw to Send Malware to Users

• Gmail client-side encryption: A deep dive

• India Union Cabinet approves Digital Personal Data Protection Bill

• Top five things to do in Amsterdam

• Turning fridges into SIM cards: An ecological SIM portfolio

• What is the difference between incident response & threat hunting?

• Stories from the SOC: Fighting back against credential harvesting with ProofPoint

• How to cultivate a culture of continuous cybersecurity improvement

• Cybercriminals can break voice authentication with 99% success rate

• ChatGPT’s unknown potential keeps us guessing

• Promoting responsible AI: Balancing innovation and regulation

• Startup Spotlight: Gomboc.ai Balances Cloud Infrastructure Security

• LockBit louts unload ransomware at Japan’s most prolific cargo port

• Potential 500GB Nickelodeon Data Leak: Unreleased Shows and Scripts at Risk

• Former boss who stole $10M from Amazon using fake vendor invoices is jailed for 16 years

• North Korean satellite had no military utility for spying, says South Korea

• Self-driving cars are a privacy issue, says security expert

• Google plans to scrape everything you post online to train its AI

• Malicious ad for USPS fishes for banking credentials

• Actively exploited vulnerability threatens hundreds of solar power stations

• Russian railway site allegedly taken down by Ukrainian hackers

• knowledge-based authentication

• Microsoft Teams Exploit Tool Auto-Delivers Malware

• 83% of Brits Demand Messaging Apps Remain Private, Ahead of Threat From Online Safety Bill

• 3 Critical RCE Bugs Threaten Industrial Solar Panels, Endangering Grid Systems

• IT Security News Daily Summary 2023-07-05

• Resource constraints led to EPA’s failure to address critical vulnerabilities in air and radiation data

• Thales: For Data Breaches, Cloud Assets are Biggest Cybersecurity Headache

• Wall Streets sees even more upside for these 2 tech names — and we agree

• RAM-ramming Rowhammer is back – to uniquely fingerprint devices

• Pentagon’s reversal on new travel expense system “troubling,” key lawmaker says

• Is Quantum Computing Right for Your Business?

• RedEnergy Stealer-as-a-Ransomware employed in attacks in the wild

• Cities extract mobility insights from ride-hailing company data

• SmugX: Chinese Hackers Targeting Embassies in Europe

• host intrusion prevention system (HIPS)

• How some agencies used tech to decrease improper payments

• What Is a Pentest Framework? Top 7 Frameworks Explained

• OPERA1ER Cybercrime Group’s Leader Arrested by Interpol

• Suspected bank-infecting OPERA1ER crime boss cuffed

• SmugX: Chinese Hackers Targeting Ministries and Embassies in Europe

• OPERA1ER Cybercrime Group’s Leader Arrested by INTERPOL

• US Spies Are Buying Americans’ Private Data. Congress Has a Chance to Stop It

• Raise a Glass: EFF’s 15th Annual Cyberlaw Trivia Winners!

• M2E Platform Sweat Economy Launches Flagship NFT Game: Sweat Hero

• Creating a framework for secure-by-design software development

• June saw flurry of ransomware attacks on education sector

• 4 Major Innovations in Healthcare Smart Cards

• Banking upstarts: from challengers to pace-setters

• Navigating the Cyber Insurance landscape as a Gen Z digital citizen

• Amazon Prime Day: This Year Already Started for Cybercriminals. Check Point Research calls online shoppers to be wary

• Ransomware Halts Operations at Japan’s Port of Nagoya

• Apple Cuts Production For Vision Pro Headset – Report

• Great job, US Embassy in Beijing

• Firefox 115 is out, says farewell to older Windows and Mac users

• Nagoya Port Faces Disruption After Ransomware Attack

• Judge Blocks Biden Officials Communicating With Social Media Firms

• Firefox, ESR, and Thunderbird Memory Safety Bugs Could Allow Unauthorized Code Execution

• ChatGPT Disables the Browsing Feature as it Bypasses Paywalls on Websites

• Handprints for IDs? State liquor board discusses biometrics for alcohol sales

• Infisical Snags $2.8M Seed Funding for Secrets Sprawl Security Tech

• C10p’s MOVEit Campaign Represents a New Era in Cyberattacks

• A Golden Age of AI … or Security Threats?

• Cato SASE Cloud Identified as a “Leader” in GigaOm’s Secure Service Access (SSA) Ranking

• Everything You Need to Know About Cyber hygiene

• ChatGPT is Only One Beginning point: 10 AI tools that are beating out to OpenAI’s Chatbot

• 11 best practices for securing data in cloud services

• 3 ways to troubleshoot using Wireshark and tcpdump

• High-Severity Flaws Fixed in Firefox 115 Update

• China’s Mustang Panda Linked to SmugX Attacks on European Governments

• New Meduza Infostealer Designed for Windows Collects Users’ and Systems` Data

• LockBit ransomware targets Japan Port of Nagoya

• Apple Loses London Appeal Over Optis 4G Patent

• Why the government should take a page from Google’s IT playbook

• High turnover is disrupting efforts to fix the workforce crisis, a survey finds

• Sophisticated Email Attacks Target Cryptocurrency Wallets

• HackGATE monitors activities of ethical hackers

• LTIMindtree V-Protect provides data protection for M365 workloads

• The Safety of VPN Use: A Closer Look

• AIIMS Ransomware Attack Leads to a New Cyber Response Framework

• EV Charger Hacking Poses a ‘Catastrophic’ Risk

• Best Practices for Building a Scalable and Secure Online Marketplace

• Realising the Potential of EMR Systems in Indian Healthcare

• Ransomware Makes Up 58% of Malware Families Sold as Services

• Chinese Chip Material Export Retaliation ‘Just A Start’

• RedEnergy Stealer-as-a-Ransomware Threat Targeting Energy and Telecom Sectors

• A Complete API Development Guide: Common Terms, Tools, and Best Practices

• Sweden Orders Four Companies to Stop Using Google Tool

• Exploited Solar Power Product Vulnerability Could Expose Energy Organizations to Attacks

• Japan’s Nagoya Port Suspends Cargo Operations Following Ransomware Attack

• Microsoft Can Fix Ransomware Tomorrow

• The Port of Nagoya, the largest Japanese port, suffered a ransomware attack

• CampusGuard Central 2.0 enables organizations to manage their PCI DSS compliance status

• LockBit Ransomware Attack Freezes Japan`s Largest Port Activities

• ChatGPT Shared Links and Information Protection: Risks and Measures Organizations Must Understand

• Microsoft rubbishes Anonymous Sudan’s claim of Stealing 30M accounts

• China to Restrict Export of Chipmaking Materials

• SOAR and SIEM in 2023: Key Trends and New Changes

• Hackers use Malicious QR Codes to Retrieve Employee Credentials

• Secrets, Secrets Are No Fun. Secrets, Secrets (Stored in Plain Text Files) Hurt Someone

• Adarma Expands MDR Offering with Integrated Digital Forensics and Incident Response Capabilities

• 16-31 May 2023 Cyber Attacks Timeline

• Meta Set To Launch Twitter Rival This Week

• ChatGPT and Cybersecurity: Top 5 Cyber Security Risks of ChatGPT

• Cybersecurity M&A Roundup: 23 Deals Announced in June 2023

• Firefox 115 Patches High-Severity Use-After-Free Vulnerabilities

• Ransomware Criminals Are Dumping Kids’ Private Files Online After School Hacks

• Class-Action Lawsuit for Scraping Data without Permission

• ImmuniWeb unveils email security test to help users verify privacy and compliance of email servers

• AI gold rush makes basic data security hygiene critical

• NoName(057)16’s DDoSia Project’s gets an upgrade

• What Is Passwordless Authentication?

• Companies Affected by Ransomware [Updated 2023]

• Toyota Claims Battery Breakthrough For EVs

• Password Management Policy

• UK Citizens Wary of NHS AI Use, Citing Privacy Concerns

• Node.js Users Beware: Manifest Confusion Attack Opens Door to Malware

• Email crypto phishing scams: stealing from hot and cold crypto wallets

• Innovative AI System Trained to Identify Recyclable Waste

• Behind the business of NASA’s digital transformation

• European Commission to Tweak GDPR For Cross-Border Cases

• CISA Warning! 8 Actively Exploited Flaws in Samsung and D-Link Devices

• PCI DSS 4.0 Requirements –Test Security Regularly and Support Information Security with Organizational Policies and Programs

• Phishing Trends and Tactics: Q1 of 2023

• EU Court Deals Blow to Meta in German Data Case

• New Tool Helps Devs Check For Manifest Confusion Mismatches

• Instagram’s Twitter Alternative ‘Threads’ Launch Halted in Europe Over Privacy Concerns

• Burp Suite New GraphQL API to Detect Hidden Endpoints

• Security Experts Raise Major Concerns With Online Safety Bill

• Swedish data protection authority rules against the use of Google Analytics

• Charming Kitten’s POWERSTAR Malware Boosts its Techniques

• Why performing security testing on your products and systems is a good idea

• The Importance of Implementing an Information Security Management System (ISMS)

• Singapore tells crypto operators: act like grown up financial institutions

• Ransomware attacks on manufacturing sector proving successful

• Understanding Cybersecurity Risk Assessment: A Comprehensive Overview

• 75% of consumers prepared to ditch brands hit by ransomware

• How to make your phishing campaign a success

• How ransomware impacts the healthcare industry

• Small organizations face security threats on a limited budget

• Island Enterprise Browser: Intelligent security built into the browsing session

• Cyber Security & Cloud Expo Europe: Agenda Delivers Beyond Expectations

• What Are Software Whitelisting and Blacklisting?

• Elderly targeted in car accident scam, kingpin arrested

• Fake reviewers face big fines

• Waterfall Security Solutions is expanding its European presence to the Netherlands

Generated on 2023-07-06 23:55:28.641968