IT Security News Daily Summary 2023-07-12

• AI and cybersecurity: Friends, foes, collaborators

• How a Cloud Flaw Gave Chinese Spies a Key to Microsoft’s Kingdom

• New Attack Drops LokiBot Malware Via Malicious Macros in Word Docs

• Orca Sues Wiz Over Alleged Cloud Security Patent Violations

• Chinese APT Cracks Microsoft Outlook Emails at 25 Government Agencies

• Microsoft patches four zero-days, finally takes action against crimeware kernel drivers

• Top 7 Cloud Security Posture Management (CSPM) Tools

• Firedome Integrates With Microsoft Defender for IoT to Enhance IoT Device Security, Using Microsoft Sentinel

• Hackers Say Generative AI Unlikely to Replace Human Cybersecurity Skills According to Bugcrowd Survey

• Executive summary: NIS2 Directive for the EU members

• Chinese intelligence hacked U.S. government emails in ‘significant’ breach

• Less Than Half of SMBs Deploy Privileged Access Management

• (ISC)² Strengthens DEI Initiatives through Global Partnerships

• Console & Associates, P.C. Investigates HCA Healthcare After Report of Data Breach Affecting an Estimated 11M Patients

• (ISC)² expands its diversity, equity and inclusion (DEI) partner network

• iPhone users: This $17 Prime Day deal means you never lose your wallet again

• Ransomware Gangs Exposing Private Files of Students Online

• Twitter Becomes the Epicentre of FTM Fraud

• Critical Ransomware Threat: Disguised as Windows Update, Beware!

• Hackers Steal 25 Crore From Thane Company’s Escrow Account

• Chinese Group Storm-0558 Hacked European Govt Emails, Microsoft

• Microsoft Patch Tuesday Addresses 130 Flaws – Including Unpatched RomCom Exploit

• QuickBlox API Vulnerabilities Open Video, Chat Users to Data Theft

• Team82, Check Point Research Uncover QuickBlox API Vulnerabilities

• Cl0p hacker operating from Russia-Ukraine war front line – exclusive

• China-Based Hackers Breached US Govt Email Accounts

• New Research Reveals APT Groups Targeting Security Researchers

• Leveraging DevSecOps To Elevate Cloud Security

• WatchGuard expands identity protection capabilities with AuthPoint Total Identity Security

• Chinese intelligence hacked State Department emails in ‘significant’ breach

• Microsoft whips up unrest after revealing Azure AD name change

• How to Put Generative AI to Work in Your Security Operations Center

• Fortinet fixed a critical flaw in FortiOS and FortiProxy

• White House Urged to Quickly Nominate National Cyber Director

• Microsoft Warns That A Chinese Cyberattack Breached Government Email Accounts

• Coalition Presses White House To Name A New National Cyber Director

• Windows Loophole Exploited To Give Malware Kernel Access

• Microsoft Warns Of Office Zero Day Attacks, No Patch Available

• TenSec 2019

• Exploiting Wi-Fi Stack on Tesla Model S

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• Tencent Security Keen Lab: Experimental Security Assessment of Mercedes-Benz Cars

• Europe Gives Conditional Blessing To Broadcom’s $61bn VMware Deal

• Inside the Mind of the Hacker: Report Shows Speed and Efficiency of Hackers in Adopting New Technologies

• Hardcoded Accounts Allow Full Takeover of Technicolor Routers

• The history, evolution and current state of SIEM

• Diplomats in Ukraine Targeted by “Staggering” BMW Phishing Campaign

• Lookout Announces Operations in Mainland China

• anecdotes Analysis Engine helps users detect gaps in their data

• Liongard launches Configuration Change Detection and Response platform

• Cyber Attack news headlines trending on Google

• Hackers Actively Exploit Unpatched Office Zero-Day Flaw in the Wild

• Hackers Exploit Policy Loophole in Windows Kernel Drivers

• Chinese intelligence hacked State Department emails in ‘significant’ breach

• Oxeye warns of SSRF Vulnerability in Owncast, SQL Injection Flaws in EaseProbe

• Citrix Secure Access Client Flaw Let Attackers Execute Remote Code

• Demystifying AWS Security: 8 Key Considerations for Secure Cloud Environments

• Ethical Hackers Reveal How They Use Generative AI

• Google Is Using Its Vast Data Stores to Train AI

• Salt Security Chosen to Protect APIs as Part of Application Modernisation at Jemena

• CyberCatch collaborates with Proficioto to protect users against cyber threats

• DirectDefense partners with SCADAfence to strengthen industrial cybersecurity

• Wipro announces Wipro ai360 and the $1 billion investment in AI

• 11 Million Patients` Data Stolen in HCA Healthcare Data Breach

• The Unmatched Technological Superiority Of Led Neon Signs Over Traditional Gas Neon

• Chinese intelligence hacked U.S government emails in ‘significant’ breach

• Online Safety Bill: Lords Demand Changes To Social Media Algorithms

• Microsoft Inspire 2023: New Check Point tools and integrations for Azure

• The Security Challenge: Mapping and Securing Your Distributed Data

• Security Flaws unraveled in Popular QuickBlox Chat and Video Framework could exposed sensitive data of millions

• EU Media Freedom Act: A Media Privilege in Content Moderation Is a Really Bad Idea

• The 5Ws of the Software Supply Chain — How Security Teams Can Prevent Costly Mistakes

• Big Head Ransomware Found in Malvertising and Fake Windows Updates

• Former Security Engineer Arrested for Stealing $9 Million from Crypto Exchange

• Personal data vs. sensitive data: What is the difference?

• CISO Conversations: CISOs of Identity Giants IDEMIA and Ping

• Chinese Cyberspies Used Forged Authentication Tokens to Hack Government Emails

• Financial Industry Faces Soaring Ransomware Threat

• Ransomware, From a Different Perspective

• Ransomware Extortion Skyrockets in 2023, Reaching $449.1 Million and Counting

• 8 VCs explain why there’s good reason to be optimistic about cybersecurity

• JFrog Curation aims to secure the software supply chain from hackers

• Ransomware Attacks Are on the Rise, Again

• Same code, different ransomware? Leaks kick-start myriad of new variants

• IDrive introduces Google Shared Drive backup

• IronNet appoints Linda Zecher as CEO

• Hubble Aurora empowers businesses to gain insights into their technology ecosystems

• Securing RESTful Endpoints

• Crypto Crime Down 62% but Ransomware Activity Surges

• Chinese hackers raided US government email accounts by exploiting Microsoft cloud bug

• Microsoft mitigated an attack by Chinese threat actor Storm-0558

• EU Healthcare: ENISA Reports that 54% of Cyber Threats Are Ransomware

• Citrix Patches Critical Vulnerability in Secure Access Client for Ubuntu

• New research finds less than half of SMBs use Privileged Access Management

• IBM Mulls Use Of AI Chip To Lower Watsonx Cloud Service Cost

• MOVEit: Testing the Limits of Supply Chain Security

• Microsoft Revokes Many Signed Drivers Used by Chinese Cybercriminals

• Fortinet Patches Critical FortiOS Vulnerability Leading to Remote Code Execution

• Microsoft Thwarts Chinese Cyber Attack Targeting Western European Governments

• The Risks and Preventions of AI in Business: Safeguarding Against Potential Pitfalls

• Hackers Steal Over $55 Million in Mexican Financial Fraud

• Security Serious Unsung Heroes Awards 2023 have launched

• Deutsche Bank, ING, and Postbank Customers` Data Exposed in Breach

• Trial Begins Of Samsung Executive Accused Of Stealing Chip Secrets

• Chinese Hackers Deploy Microsoft-Signed Rootkit to Target Gaming Sector

• Chinese hackers forged authentication tokens to breach government emails

• Microsoft Renamed Azure Active Directory to Entra ID

• New IT spending survey bodes well for 7 tech stocks in A.I. to cloud to cybersecurity

• Nvidia In Talks To Be Anchor Investor In ARM – Report

• Cyber insurance startup Coalition acquires privacy assistant Jumbo

• Zero-day Alert! Microsoft Unpatched Vulnerability Exploited in NATO Summit Attacks

• Windows Policy Loophole Let Hackers to Install Malicious Kernel Mode Drivers

• What to Expect When Seeking Cybersecurity Insurance

• The Value of Vulnerability Management

• SAP Patches Critical Vulnerability in ECC and S/4HANA Products

• Brute Force and Dictionary Attacks: A Guide for IT Leaders

• Scam Page Volumes Surge 304% Annually

• Microsoft Fixes Six Zero-Days This Patch Tuesday

• Python-Based PyLoose Fileless Attack Targets Cloud Workloads for Cryptocurrency Mining

• Unpatched Office zero-day CVE-2023-36884 actively exploited in targeted attacks

• Why performing security testing on your products and systems is a good idea

• Silicon Insights: The State of MarTech: Part 1

• Malware found in over 100 signed Windows drivers

• Microsoft Releases Patches for 132 Vulnerabilities, Including 6 Under Active Attack

• This Threat Actor Targeted NATO Summit Attendees

• OpenShift sandboxed containers on-prem: Going nested without nested

• Red Hat: Building a quantum-ready world

• Ransomware attack on Hayward City of California

• Understanding the Distinction: Ethical Hacking vs. Cybersecurity

• Microsoft Releases Patches for 130 Vulnerabilities, Including 6 Under Active Attack

• Storm-0978 attacks reveal financial and espionage motives

• Staying ahead of the “professionals”: The service-oriented ransomware crime industry

• CIOs prioritize innovation over tech stack optimization

• How Google Cloud’s AML AI redefines the fight against money laundering

• 30 days of Formbook: Full List

• 2023-07-11 – Files for an ISC diary (Loader activity for Formbook)

• Free entry-level cybersecurity training and certification exam

• Microsoft mitigates China-based threat actor Storm-0558 targeting of customer email

• Threatening rogue finance apps removed from the Apple Store

• “TootRoot” Mastodon vulnerabilities fixed: Admins, patch now!

• Apple issues Rapid Security Response for zero-day vulnerability

• New ChatGPT rival, Claude 2, launches for open beta testing

• Silk Road’s Second-in-Command Gets 20 Years in Prison

• Hackers exploit gaping Windows loophole to give their malware kernel access

• Miscreants exploit five Microsoft bugs as Windows giant addresses 130 flaws

• Microsoft Entra expands into Security Service Edge and Azure AD becomes Microsoft Entra ID

• Apple & Microsoft Patch Tuesday, July 2023 Edition

• Microsoft Discloses 5 Zero-Days in Voluminous July Security Update

• Intrusion Detection & Prevention Systems Guide

• IT Security News Daily Summary 2023-07-11

• The Looming Threat of Business Email Compromise: Insights from John Wilson at Fortra

• VERT Threat Alert: July 2023 Patch Tuesday Analysis

• Cybersecurity professional accused of stealing $9M in crypto

• Former Security Engineer Arrested for $9 Million Crypto Exchange Hack

• API Testing Automation: How and Why Automate API Testing

• Microsoft patches four exploited zero-days, but lags with fixes for a fifth (CVE-2023-36884)

• Cisco Talos Reports Microsoft Windows Policy Loophole Being Exploited by Threat Actor

• Dark Web Genesis Market for Sale: Operators Seek Buyers for Defunct Enterprise

• Playing Around With AWS Vault for Fun and Profit

• Apple’s Rapid Security Response Patches Are Breaking Websites

• Microsoft Warns of Office Zero-Day Attacks, No Patch Available

• Silk Road’s Second-in-Command, Variety Jones, Gets 20 Years in Prison

• Bangladesh government takes down exposed citizens’ data

• Savvy, a platform to secure SaaS apps, launches out of stealth with $30M

• HCA Healthcare reports breach of 11 million patients’ personal data

• Banks, hotels and hospitals among latest MOVEit mass-hack victims

• Cybersecurity professional accused of stealing $9 million in crypto

• Over $30 Billion Stolen from Crypto Sector, Reveals SlowMist’s

• Judge Declines FTC Injunction In Microsoft Activision Blizzard Purchase

• Bangladesh Government Website Leaks Personal Data

• Mastodon Patches 4 Bugs, but Is the Twitter Killer Safe to Use?

• Hackers Exploit Windows Policy Loophole to Forge Kernel-Mode Driver Signatures

• DDoS Attacks Soar by 168% on Government Services, StormWall Warns

• Adobe Patch Tuesday: Critical Flaws Haunt InDesign, ColdFusion

• SaaS Application Security Firm Savvy Exits Stealth Mode With $30 Million in Funding

• OpenAI Has Made The GPT-4 API Available To Everyone

• How to Enhance IAM by Adding Layers of Zero Trust

• Critical VMware Bug Exploit Code Released Into the Wild

• Apple’s Rapid Zero-Day Patch Causes Safari Issues, Users Say

• Cyberattacks Are a War We’ll Never Win, but We Can Defend Ourselves

• What is identity and why is it important?

• How social media compromises information security

• Apple silently pulls its latest zero-day update – what now?

• Clop: Behind MOVEit Lies a Loud, Adaptable and Persistent Threat Group

• Lobbying Group Says Facebook Hosts More Than Half Of Digital Payment Scams

• NETSCOUT enhances its AED with ML-based Adaptive DDoS Protection

• Cyber Attack on Australia Ventia

• PC Shipment Decline Slows In Q2, Says Canalys

• API’s Role in Digital Government, 10 National Best Practices

• ICS Patch Tuesday: Siemens, Schneider Electric Fix 50 Vulnerabilities

• Clop’s MoveIt Transfer attacks lead to mixed results

• 11 Million Patients Impacted in Healthcare Data Breach

• UK Cyber Extortion Rose by 39% in One Year, International Law Firm Reveals

• Anthropic Opens Rival AI Chatbot To Public

• Hackers use Rekoobe Backdoor to Attack Linux Systems

• Razer investigates potential breach involving its digital wallet

• For stronger public cloud data security, use defense in depth

• How to Use Discord’s Family Center With Your Teens

• Verifying Software Integrity With Sigstore

• EU Adopts New US Data Privacy Agreement

• HCA Healthcare data breach impacted 11 million patients

• Apple Releases, Quickly Pulls Rapid Security Response Update For 0-Day WebKit Bug

• Data For 11 Million Patients Stolen In Breach Of HCA Healthcare

• Clever Letscall Vishing Malware Targets Android Phones

• Privacy Activists Slam EU-US Pact On Data Sharing

• The Battle Against Business Logic Attacks: Why Traditional Security Tools Fall Short

• HCA Healthcare Falls Victim to Data Security Incident

• Cato Networks Extends ZTNA to Protect Against Insider Threats

• Drata appoints Sydney Sloan as CMO

• Digilock introduces hardwired keyless lock solution

• Amazon Challenges EU ‘Gatekeeper’ Designation

• Lowering the Bar(d)? Check Point Research’s security analysis spurs concerns over Google Bard’s limitations

• RomCom Spies Target NATO Summit Ahead of Zelensky’s Arrival

• Cyber Mindfulness Corner Company Spotlight: Exabeam

• India’s Finance Ministry Tell State-run Banks to Adopt Emerging Technologies to Increase Operational Efficiency

• SCARLETEEL Hackers Target AWS Fargate in Latest Cryptojacking Campaign

• Top Takeaways From Table Talks With Fortune 100 CISOs

• Vercara partners with HashiCorp to support DevOps teams throughout the development lifecycle

• Perimeter 81 hires Gadi BenMark as CMO

• Are we doomed to make the same security mistakes with AI?

• Users’ Data is Stolen Through 1.5 million Android Apps

• ESET Threat Report H1 2023

• Personal Information of 11 Million Patients Stolen in Data Breach at HCA Healthcare

• Apple issued Rapid Security Response updates to fix a zero-day but pulled them due to a Safari bug

• Cybercrime to Cost Global Economy $10.5 trillion By 2025

• SAAS Security: 6 Best Practices and Strategies

• Privacy of Printing Services

• Netskope collaborates with Wipro to help users protect sensitive data

• Microsoft Confirms More Job Losses

• Apple Issues Device Updates to Patch Critical Vulnerability

• Legion Tool Steals PUBG Players’ Browser Passwords through a Fake GitHub Repo

• Hungary As A Tax Haven: A Strategic Location With Favorable Tax Rates And Skilled Workforce

• How To Setup A Crypto-exchange: Licensing, Software And Banking Guide

• Empowered Encryption

• Most Commonly Overlooked Attack Surface Vulnerabilities & How to Fix Them

• Russia-Linked RomCom Hackers Targeting NATO Summit Guests

• How to Apply MITRE ATT&CK to Your Organization

• Alteryx Analytics Automation powered by AWS allows CFOs to modernize financial processes

• SCARLETEEL Cryptojacking Campaign Exploiting AWS Fargate in Ongoing Campaign

• Foxconn Abandons Indian Chip Joint Venture, Seeks New Project

• ‘ScarletEel’ Hackers Worm Into AWS Cloud

• Managing Complexity, Data Control, and Sovereignty in the Cloud

• European Commission adopts adequacy decision for safe EU-U.S. data flows

• Apple pushes out emergency fix for actively exploited zero-day (CVE-2023-37450)

• How the NIS2 Directive Will Impact You

• Zero-Day Exploits: A Cheat Sheet for Professionals

• Moroccan Charged With OpenSea NFT and Crypto Theft

• What is Vulnerability Assessment In Cybersecurity? – A Comprehensive Guide

• Man Charged With Remote Attack on Water Plant

• Beware of Big Head Ransomware: Spreading Through Fake Windows Updates

• VMware warns customers of exploit available for critical vRealize RCE flaw CVE-2023-20864

• Owncast, EaseProbe security vulnerabilities revealed

• How The Internet Of Things Has Revolutionized Your Finances

• Hunting for A New Stealthy Universal Rootkit Loader

• E-commerce Fraud Surges By Over 50% Annually

• Vermillion – 8,106 breached accounts

• Hiring Kit: Security Analyst

• Implementing secure over-the-air (OTA) updates in embedded devices

• CISO perspective on why boards don’t fully grasp cyber attack risks

• Barts NHS hack leaves folks on tenterhooks over extortion

• Need to improve the detection capabilities in your security products?

• Update Now! Apple Issues an Emergency Patch to Address a Zero-Day Flaw in iOS and macOS

• Cybercriminals Evolve Antidetect Tooling for Mobile OS-Based Fraud

• Update Now! Apple Issues Emergency Patch for iOS & macOS Zero-day Flaw

• New Crypto Phishing Attack Steals Funds from Cold Wallets

• Critical TootRoot Bug Hijack Mastodon Servers

• Anonymous Sudan launches DDoS Attack on fan fiction website for 24 hours

• Cybersecurity best practices while working in the summer

• CISO perspective on why Boards don’t fully grasp cyber attack risks

• Apple Issues Urgent Patch for Zero-Day Flaw Targeting iOS, iPadOS, macOS, and Safari

• Compliance seizes spotlight in the connected devices arena

• Industry responses and strategies for navigating the tides of DDoS attacks

• A week in security (July 3 – 9)

• Warning issued over increased activity of TrueBot malware

• Malwarebytes Browser Guard introduces three new features

• MOVEit Transfer fixes three new vulnerabilities

• 1Kosmos BlockID Latest Nominee in 2023 ‘ASTORS’ Awards Program

• Urgent! Apple fixes critical zero-day hole in iPhones, iPads and Macs

Generated on 2023-07-12 23:55:30.450361