IT Security News Daily Summary 2023-07-13

• Introducing EncryptionSafe: A Free and Easy-to-Use Encryption App for Windows PC

• Secure Code Warrior Ushers in Next Era in Developer Driven Security With $50M Series C Funding Round

• Black Hat Announces Sustainability Pledge

• Secure Code Warrior Raises $50M to Accelerate Product Innovation

• Crit.IX: Flaws in Honeywell Experion DCS, Posing Risk to Critical Industries

• Malicious Microsoft Drivers Could Number in the Thousands: Cisco Talos

• Safe Security Acquires RiskLens

• Facebook and Microsoft are the Most Impersonated Brands in Phishing Attacks

• Zimbra urges customers to manually fix actively exploited zero-day reported by Google TAG

• Celsius feels the heat: Ex-CEO arrested, watchdogs line up to sue bankrupt crypto biz

• Secure Code Reviews

• Cybersecurity Leaders Report Reduction in Disruptive Cyber Incidents With MSS/MDR Solutions

• Linux Hacker Exploits Researchers With Fake PoCs Posted to GitHub

• Microsoft: Government agencies breached in email attacks

• Gartner: Due to stress, half of cyber leaders will change jobs, and a quarter will quit the field

• How the EU AI Act Will Affect Businesses, Cybersecurity

• Orca Sues Wiz for ‘Copying’ Its Cloud Security Tech

• Top 7 multicloud security solution providers for 2023

• WormGPT Heralds An Era of Using AI Defenses to Battle AI Malware

• Blue Team Con announces Lesley Carhart as keynote speaker

• Fake THREADS App Climbs to Number 1 Spot on Apple Store in Europe

• API Flaw in QuickBlox Framework Exposed PII of Millions of Users

• Critical RCE Bug in Rockwell Automation PLCs Zaps Industrial Sites

• Celsius Founder Alex Mashinsky Arrested, Charged

• Top 9 DevOps Trends

• INTERSECT Network Security Summit 2023: Where Insight Meets Innovation

• Closing out FY23 — Breakaway 1=5

• A Leader in IDC’s 2023 NESaaS and ZTNA MarketScape Reports

• Security Journey announces accelerated learning platform updates for developers

• Chinese Hackers Breach Government Email

• The hidden pitfalls of travel apps

• S3 Ep143: Supercookie surveillance shenanigans

• Okta, Ping Identity, CyberArk & Oracle Lead the IDaaS Omdia Universe

• TeamTNT’s Silentbob Botnet Infecting 196 Hosts in Cloud Attack Campaign

• PicassoLoader Malware Used in Ongoing Attacks on Ukraine and Poland

• ScarletEel Hackers Breach AWS Cloud Infrastructure

• Genesis Market: Formerly a Popular Dark Web Marketplace Now up for Sale

• Stories from the SOC: OneNote MalSpam – Detection & response

• Twitter Sues Four Texas Firms For Data Scraping

• iPhone users: This Eufy deal means you’ll never lose your wallet again

• Apple just released iOS 16.5.1 (c), and you need to install it now

• Honeywell DCS Platform Vulnerabilities Can Facilitate Attacks on Industrial Organizations

• BlackLotus UEFI Bootkit Source Code Leaked on GitHub

• Cisco Shopping Spree Adds Oort ID Threat Detection Tech

• Black Hat AI Tools Fuel Rise in Business Email Compromise (BEC) Attacks

• Rootshell Security works with Microsoft to identify three vulnerabilities

• AU10TIX app automates identity and age verification for businesses

• Truework Guardian improves employee data security

• Twitter sues companies for data scraping to corner Facebook Meta Thread

• DevOps Security Best Practices for Your SaaS Application

• New CVSS Version Unveiled Amid Rising Cyber Threats

• SolarWinds Attackers Dangle BMWs to Spy on Diplomats

• Chinese hackers compromised emails of U.S. Government agencies

• What Is Advanced Endpoint Protection. Key Features and Benefits

• International Diplomats Targeted by Russian Hacking Group APT29

• Latest macOS malware can steal your banking information

• Elon Musk Launches AI Startup Focus on Understanding Reality

• Concentric AI unveils archetype functionality for data discovery and protection

• ManageEngine adds OpenAI observability to Site24x7

• Chinese intelligence hacked Microsoft emails belonging to U.S. government in ‘significant’ breach

• Chinese hackers breach US government emails using a Microsoft cloud bug

• Microsoft Blow As FTC Files Activision Appeal

• Re-released Apple WebKit Zero-Day Patch Fixes Website Breaking

• Average Weekly Global Cyberattacks peak with the highest number in 2 years, marking an 8% growth year over year, according to Check Point Research

• Check Point Software Prevents Potential ChatGPT and Bard data breaches

• Check Point scored highest for Public Cloud Security Use Case in May 2023 Gartner® Critical Capabilities for Network Firewalls

• Popular WordPress Security Plugin Caught Logging Plaintext Passwords

• 3 Tax Prep Firms Shared ‘Extraordinarily Sensitive’ Data About Taxpayers With Meta, Lawmakers Say

• Mandiant Unveils Russian GRU’s Cyber Playbook Against Ukraine

• Rockwell Automation Exploit Spurs Fears Of Critical Infrastructure Security

• WordPress Security Plugin Caught Logging Plaintext Passwords

• Microsoft Fixes 130 CVE Listed Bugs, 5 Flaws Exploited

• Juniper Networks Patches High Severity Vulnerabilities

• Secure Code Warrior raises $50 million to accelerate product innovation

• Private Data of 12,000 SBI Employees Exposed on Telegram Channels

• Meta Responds to User Complaints by Introducing Feeds for Threads

• Apple WebKit Zero-Day Patch Re-Released to Fix Broken Webpages

• Crypto fraud in 2023: How can security teams fight

• White House Publishes Plan to Implement US National Cybersecurity Strategy

• Tax Prep Companies Sent Millions Of Users’ Data To Facebook

• Creating a Patch Management Playbook: 6 Key Questions

• Killnet Tries Building Russian Hacktivist Clout With Media Stunts

• Users of Honeywell Experion DCS Platforms urged to patch 9 vulnerabilities immediately

• Jenkins Plugin Flaw Lets Attackers Gain Admin Access

• Malicious Chrome Extension Steals Businesses Ads Manager Login Details

• How Google Keeps Company Data Safe While Using Generative AI Chatbots

• Fake PoC for Linux Kernel Vulnerability on GitHub Exposes Researchers to Malware

• White House publishes National Cybersecurity Strategy Implementation Plan

• Unnamed APT eyes vulnerabilities in Rockwell Automation industrial contollers (CVE-2023-3595 CVE-2023-3596)

• Fidelis Active Directory Intercept enables identification of AD issues

• Network, IAM and cloud are the top 3 cybersecurity spending priorities for 2023

• Regula enhances document examination capabilities to help forensic experts fight identity fraud

• Juniper Networks Patches High-Severity Vulnerabilities in Junos OS

• APT Exploit Targeting Rockwell Automation Flaws Threatens Critical Infrastructure

• SonicWall Patches Critical Vulnerabilities in GMS, Analytics Products

• Apple Re-Releases Urgent Zero-Day Patches With Fix for Website Access Issue

• Secure Code Warrior lands $50M to educate developers on best cyber practices

• CVSS 4.0 released, to help assess real-time threat and impact of vulnerabilities

• An Interview with Greg Van Der Gaast

• What are NIST Encryption Standards? Why Do They Matter a Lot?

• FCA CEO Warns Of AI Disruption To Financial Services Sector

• French Police Will Be Able to Spy on People through Their Cell Phones

• Microsoft July Patch Tuesday Fixed Six Zero-Day Vulnerabilities

• SonicWall Critical Flaws Let Attackers Bypass Authentication

• Security flaws in Honeywell devices could be used to disrupt critical industries

• APT Exploit Targeting Rockwell Automation Flaws Could Threaten Critical Infrastructure

• Detecting BPFDoor Backdoor Variants Abusing BPF Filters

• Actionable Threat Intel (III) – Introducing the definitive YARA editor

• PC Shipment Decline Slows In Q2, Says Gartner

• Rockwell Automation ControlLogix Bugs Expose Industrial Systems to Remote Attacks

• Elon Musk Launches AI Startup xAI

• The State of Wearable MedTech

• US on Track For Record Number of Data Breaches

• Fewer Than 100 Scammers Responsible For Global Email Extortion

• SonicWall urges organizations to fix critical flaws in GMS/Analytics products

• An introduction to the benefits and risks of Packet Sniffing

• Hiring Kit: Security Architect

• Chinese Threat Group Compromises US Government

• OWASP ZAP 2.13.0 Released – What’s New!

• Do you know what your supply chain is and if it is secure?

• World Youth Skills Day 2023: Engaging Youth with Cybersecurity

• U.S. Government Agencies’ Emails Compromised in China-Backed Cyber Attack

• New Vulnerabilities Disclosed in SonicWall and Fortinet Network Security Products

• Microsoft admits unauthorized access to Exchange Online, blames Chinese gang

• Ransomware attack exposes Swiss Hooligans data onto Dark Web

• Hackers Leverage USB Flash Drives to Attack Public and Private Sectors Globally

• Attack Surface Management: Identify and protect the unknown

• Combatting data governance risks of public generative AI tools

• Infrastructure upgrades alone won’t guarantee strong security

• 20% of malware attacks bypass antivirus protection

• Victory! Ninth Circuit Allows Human Rights Case to Move Forward Against Cisco Systems

• Top 7 Best IP Geolocation APIs For Cybersecurity – 2023

• Only 45% of cloud data is currently encrypted

• Hackers Target Chinese Gamers With Microsoft-Signed Rootkit

• Criminals target businesses with malicious extension for Meta’s Ads Manager and accidentally leak stolen accounts

• Proposed Massachusetts law to ban sale of your mobile location data

• Update now! Microsoft patches a whopping 130 vulnerabilities

• How to secure your business before going on vacation

• Unveiling the Top Three Use Cases for SASE: Revolutionizing Network Security and Connectivity

• Chainalysis observes sharp rise in ransomware payments

• Exploitable Flaws in QuickBlox Framework Expose Millions of User Records

• Startup Spotlight: Mobb Aims to Be the Fixer

• Citrix fixed a critical flaw in Secure Access Client for Ubuntu

• IT Security News Daily Summary 2023-07-12

• AI and cybersecurity: Friends, foes, collaborators

• How a Cloud Flaw Gave Chinese Spies a Key to Microsoft’s Kingdom

• New Attack Drops LokiBot Malware Via Malicious Macros in Word Docs

• Orca Sues Wiz Over Alleged Cloud Security Patent Violations

• Chinese APT Cracks Microsoft Outlook Emails at 25 Government Agencies

• Microsoft patches four zero-days, finally takes action against crimeware kernel drivers

• Top 7 Cloud Security Posture Management (CSPM) Tools

• Firedome Integrates With Microsoft Defender for IoT to Enhance IoT Device Security, Using Microsoft Sentinel

• Hackers Say Generative AI Unlikely to Replace Human Cybersecurity Skills According to Bugcrowd Survey

• Executive summary: NIS2 Directive for the EU members

• Chinese intelligence hacked U.S. government emails in ‘significant’ breach

• Less Than Half of SMBs Deploy Privileged Access Management

• (ISC)² Strengthens DEI Initiatives through Global Partnerships

• Console & Associates, P.C. Investigates HCA Healthcare After Report of Data Breach Affecting an Estimated 11M Patients

• (ISC)² expands its diversity, equity and inclusion (DEI) partner network

• iPhone users: This $17 Prime Day deal means you never lose your wallet again

• Ransomware Gangs Exposing Private Files of Students Online

• Twitter Becomes the Epicentre of FTM Fraud

• Critical Ransomware Threat: Disguised as Windows Update, Beware!

• Hackers Steal 25 Crore From Thane Company’s Escrow Account

• Chinese Group Storm-0558 Hacked European Govt Emails, Microsoft

• Microsoft Patch Tuesday Addresses 130 Flaws – Including Unpatched RomCom Exploit

• QuickBlox API Vulnerabilities Open Video, Chat Users to Data Theft

• Team82, Check Point Research Uncover QuickBlox API Vulnerabilities

• Cl0p hacker operating from Russia-Ukraine war front line – exclusive

• China-Based Hackers Breached US Govt Email Accounts

• New Research Reveals APT Groups Targeting Security Researchers

• Leveraging DevSecOps To Elevate Cloud Security

• WatchGuard expands identity protection capabilities with AuthPoint Total Identity Security

• Chinese intelligence hacked State Department emails in ‘significant’ breach

• Microsoft whips up unrest after revealing Azure AD name change

• How to Put Generative AI to Work in Your Security Operations Center

• Fortinet fixed a critical flaw in FortiOS and FortiProxy

• White House Urged to Quickly Nominate National Cyber Director

• Microsoft Warns That A Chinese Cyberattack Breached Government Email Accounts

• Coalition Presses White House To Name A New National Cyber Director

• Windows Loophole Exploited To Give Malware Kernel Access

• Microsoft Warns Of Office Zero Day Attacks, No Patch Available

• TenSec 2019

• Exploiting Wi-Fi Stack on Tesla Model S

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• Tencent Security Keen Lab: Experimental Security Assessment of Mercedes-Benz Cars

• Europe Gives Conditional Blessing To Broadcom’s $61bn VMware Deal

• Inside the Mind of the Hacker: Report Shows Speed and Efficiency of Hackers in Adopting New Technologies

• Hardcoded Accounts Allow Full Takeover of Technicolor Routers

• The history, evolution and current state of SIEM

• Diplomats in Ukraine Targeted by “Staggering” BMW Phishing Campaign

• Lookout Announces Operations in Mainland China

• anecdotes Analysis Engine helps users detect gaps in their data

• Liongard launches Configuration Change Detection and Response platform

• Cyber Attack news headlines trending on Google

• Hackers Actively Exploit Unpatched Office Zero-Day Flaw in the Wild

• Hackers Exploit Policy Loophole in Windows Kernel Drivers

• Chinese intelligence hacked State Department emails in ‘significant’ breach

• Oxeye warns of SSRF Vulnerability in Owncast, SQL Injection Flaws in EaseProbe

• Citrix Secure Access Client Flaw Let Attackers Execute Remote Code

• Demystifying AWS Security: 8 Key Considerations for Secure Cloud Environments

• Ethical Hackers Reveal How They Use Generative AI

• Google Is Using Its Vast Data Stores to Train AI

• Salt Security Chosen to Protect APIs as Part of Application Modernisation at Jemena

• CyberCatch collaborates with Proficioto to protect users against cyber threats

• DirectDefense partners with SCADAfence to strengthen industrial cybersecurity

• Wipro announces Wipro ai360 and the $1 billion investment in AI

• 11 Million Patients` Data Stolen in HCA Healthcare Data Breach

• The Unmatched Technological Superiority Of Led Neon Signs Over Traditional Gas Neon

• Chinese intelligence hacked U.S government emails in ‘significant’ breach

• Online Safety Bill: Lords Demand Changes To Social Media Algorithms

• Microsoft Inspire 2023: New Check Point tools and integrations for Azure

• The Security Challenge: Mapping and Securing Your Distributed Data

• Security Flaws unraveled in Popular QuickBlox Chat and Video Framework could exposed sensitive data of millions

• EU Media Freedom Act: A Media Privilege in Content Moderation Is a Really Bad Idea

• The 5Ws of the Software Supply Chain — How Security Teams Can Prevent Costly Mistakes

• Big Head Ransomware Found in Malvertising and Fake Windows Updates

• Former Security Engineer Arrested for Stealing $9 Million from Crypto Exchange

• Personal data vs. sensitive data: What is the difference?

• CISO Conversations: CISOs of Identity Giants IDEMIA and Ping

• Chinese Cyberspies Used Forged Authentication Tokens to Hack Government Emails

• Financial Industry Faces Soaring Ransomware Threat

• Ransomware, From a Different Perspective

• Ransomware Extortion Skyrockets in 2023, Reaching $449.1 Million and Counting

• 8 VCs explain why there’s good reason to be optimistic about cybersecurity

• JFrog Curation aims to secure the software supply chain from hackers

• Ransomware Attacks Are on the Rise, Again

• Same code, different ransomware? Leaks kick-start myriad of new variants

• IDrive introduces Google Shared Drive backup

• IronNet appoints Linda Zecher as CEO

• Hubble Aurora empowers businesses to gain insights into their technology ecosystems

• Securing RESTful Endpoints

• Crypto Crime Down 62% but Ransomware Activity Surges

• Chinese hackers raided US government email accounts by exploiting Microsoft cloud bug

• Microsoft mitigated an attack by Chinese threat actor Storm-0558

• EU Healthcare: ENISA Reports that 54% of Cyber Threats Are Ransomware

• Citrix Patches Critical Vulnerability in Secure Access Client for Ubuntu

• New research finds less than half of SMBs use Privileged Access Management

• IBM Mulls Use Of AI Chip To Lower Watsonx Cloud Service Cost

• MOVEit: Testing the Limits of Supply Chain Security

• Microsoft Revokes Many Signed Drivers Used by Chinese Cybercriminals

• Fortinet Patches Critical FortiOS Vulnerability Leading to Remote Code Execution

• Microsoft Thwarts Chinese Cyber Attack Targeting Western European Governments

• The Risks and Preventions of AI in Business: Safeguarding Against Potential Pitfalls

• Hackers Steal Over $55 Million in Mexican Financial Fraud

• Security Serious Unsung Heroes Awards 2023 have launched

• Deutsche Bank, ING, and Postbank Customers` Data Exposed in Breach

• Trial Begins Of Samsung Executive Accused Of Stealing Chip Secrets

• Chinese Hackers Deploy Microsoft-Signed Rootkit to Target Gaming Sector

• Chinese hackers forged authentication tokens to breach government emails

• Microsoft Renamed Azure Active Directory to Entra ID

• New IT spending survey bodes well for 7 tech stocks in A.I. to cloud to cybersecurity

• Nvidia In Talks To Be Anchor Investor In ARM – Report

• Cyber insurance startup Coalition acquires privacy assistant Jumbo

• Zero-day Alert! Microsoft Unpatched Vulnerability Exploited in NATO Summit Attacks

• Windows Policy Loophole Let Hackers to Install Malicious Kernel Mode Drivers

• What to Expect When Seeking Cybersecurity Insurance

• The Value of Vulnerability Management

• SAP Patches Critical Vulnerability in ECC and S/4HANA Products

• Brute Force and Dictionary Attacks: A Guide for IT Leaders

• Scam Page Volumes Surge 304% Annually

• Microsoft Fixes Six Zero-Days This Patch Tuesday

• Python-Based PyLoose Fileless Attack Targets Cloud Workloads for Cryptocurrency Mining

• Unpatched Office zero-day CVE-2023-36884 actively exploited in targeted attacks

• Why performing security testing on your products and systems is a good idea

• Silicon Insights: The State of MarTech: Part 1

• Malware found in over 100 signed Windows drivers

• Microsoft Releases Patches for 132 Vulnerabilities, Including 6 Under Active Attack

• This Threat Actor Targeted NATO Summit Attendees

• OpenShift sandboxed containers on-prem: Going nested without nested

• Red Hat: Building a quantum-ready world

• Ransomware attack on Hayward City of California

• Understanding the Distinction: Ethical Hacking vs. Cybersecurity

• Microsoft Releases Patches for 130 Vulnerabilities, Including 6 Under Active Attack

• Storm-0978 attacks reveal financial and espionage motives

• Staying ahead of the “professionals”: The service-oriented ransomware crime industry

• CIOs prioritize innovation over tech stack optimization

• How Google Cloud’s AML AI redefines the fight against money laundering

• 30 days of Formbook: Full List

• 2023-07-11 – Files for an ISC diary (Loader activity for Formbook)

• Free entry-level cybersecurity training and certification exam

• Microsoft mitigates China-based threat actor Storm-0558 targeting of customer email

• Threatening rogue finance apps removed from the Apple Store

• “TootRoot” Mastodon vulnerabilities fixed: Admins, patch now!

• Apple issues Rapid Security Response for zero-day vulnerability

• New ChatGPT rival, Claude 2, launches for open beta testing

• Silk Road’s Second-in-Command Gets 20 Years in Prison

• Hackers exploit gaping Windows loophole to give their malware kernel access

Generated on 2023-07-13 23:55:28.908661