IT Security News Daily Summary 2023-07-14

• Events Ripper Update

• What to Expect When Reporting Vulnerabilities to Microsoft

• 2023-07-12 – Gozi/ISFB infection with Cobalt Strike

• 2023-07-13 – IcedID (Bokbot) from malspam

• Mastercard, eBay and Capital One talk equitable generative AI and innovation

• Mass Shooting Victims Sue Facebook For Helping Radicalize Shooter

• US CISA warns of Rockwell Automation ControlLogix flaws

• Fake TeamViewer Installer Used to Deliver njRAT Malware

• Even the Government Thinks It Should Stop Buying Corporate Surveillance Data

• White House Launches Cybersecurity Implementation Plan

• Rogue Azure AD Guests Can Steal Data via Power Apps

• GitHub updates platform with passkey authentication, DevOps streamlining

• Zimbra Collaboration Suite warning: Patch this 0-day right now (by hand)!

• Zimbra Zero-Day Demands Urgent Manual Update

• FBI Surveillance Fears Are Uniting a Badly Broken Congress

• BlotchyQuasar: X-Force Hive0129 targeting financial institutions in LATAM with a custom banking trojan

• Rein in cybersecurity tool sprawl with a portfolio approach

• Congratulations to the Top MSRC 2023 Q2 Security Researchers!

• Clop Attacks: More Organizations Confirm to have Fallen Prey to MOVEit Mass-hack

• BlackRock’s Bitcoin ETF Reveals the Future of Cryptocurrency Surveillance

• Navigating the Cyber Insurance landscape as a Gen Z digital citizen

• AI Tool WormGPT Enables Convincing Fake Emails For BEC Attacks

• Zscaler, Palo Alto Under Pressure from Microsoft’s Rapidly Increasing Cybersecurity Offerings

• Major Companies Restrict Employee Use of ChatGPT: Amazon, Apple, and More

• Massive Data Breach at HCA Healthcare: 11 Million Patients’ Information Compromised by Hackers

• FTC starts data security probe on ChatGPT OpenAI

• Location Fingerprint: Incognia’s Innovative Answer to Online Fraud Prevention

• New Threat Actor Launches Cyber-attacks on Ukraine and Poland

• BlueVoyant MXDR for Splunk empowers users to identify security threats

• New Cloud Credential Stealing Campaign Targets Microsoft Azure and Google Cloud

• BlackCat Alphv Ransomware

• Twitter To Share Ad Revenues With Content Creators

• LokiBot Malware Targets Windows Users in Office Document Attacks

• Critical Security Flaws Uncovered in Honeywell Experion DCS and QuickBlox Services

• Teleskope launches AI-based data protection platform

• Jim Cramer gauges the threat of Microsoft’s cybersecurity foray on Palo Alto Networks stock

• Beware of Weaponized TeamViewer Installer that Delivers njRAT

• BlotchyQuasar: X-Force Hive0129 targeting financial intuitions in LATAM with a custom banking trojan

• How To Use Nmap for Vulnerability Scanning: Complete Tutorial

• Google Researchers Discover In-The-Wild Exploitation Of Zimbra Zero Day

• How A Cloud Flaw Gave Chinese Spies A Key To Microsoft

• Adobe Patches Critical ColdFusion, InDesign Zero Day Bugs

• Fake PoC On GitHub Lures Researchers To Download Malware

• Industry Reactions to EU-US Data Privacy Framework: Feedback Friday

• Zluri Raises $20 Million for SaaS Management Platform

• In Other News: Security Firm Hit by Investor Lawsuit, Satellite Hacking, Cloud Attacks

• Electrical Grid Stability Relies on Balancing Digital Substation Security

• Cribl scales observability across large enterprises with new product features

• BlueKeep: Understanding the Critical RDP Vulnerability

• BreachForums’ Pompompurin Pleads Guilty to Holding Child Abuse Content

• How to Check If Someone Else Accessed Your Google Account

• Just-in-Time Access Explained. What It Means, Benefits and Best Practices of JIT

• Critical Cisco SD-WAN Vulnerability Leads to Information Leaks

• Chinese APT Favorite Backdoor Found in Pakistani Government App

• Meta’s Threads app used as a lure

• Chinese Hackers Compromised Emails Of US Commerce Secretary

• Rockwell Automation ControlLogix Flaws Expose ICS Devices to RCE & DoS Attacks

• Hackers Target Reddit Alternative Lemmy via Zero-Day Vulnerability

• Secure Code Warrior Raises $50 Million to Help Developers Write Secure Code

• TeamTNT’s Cloud Credential Stealing Campaign Now Targets Azure and Google Cloud

• AIOS WordPress Plugin Faces Backlash for Storing User Passwords in Plain Text

• Defend Against Insider Threats: Join this Webinar on SaaS Security Posture Management

• Buying Campaign Contributions as a Hack

• Indexing Over 15 Million WordPress Websites with PWNPress

• Evaluating the Reputation and Trustworthiness of Gambling Sites: Ensuring a Safe and Secure Experience

• Twitter Owes Former Staff $500m, Lawsuit Claims

• ChatGPT Reconnaissance Techniques for Penetration Testing Success

• Former contractor accused of remotely accessing town’s water treatment facility

• Google Researchers Discover In-the-Wild Exploitation of Zimbra Zero-Day

• US Publishes Implementation Plan for National Cybersecurity Strategy

• New AVrecon botnet remained under the radar for two years while targeting SOHO Routers

• Micro-Segmentation: Strengthening Network Security Through Granular Control

• NCSC Shares Alternatives to Using a SOC

• Silicon UK Pulse: Your Tech News Update: Episode 11

• Understanding the New European Union AI Law

• Train AI models with your own data to mitigate risks

• Ransomware Costs Financial Services $32bn in Five Years

• Craft an IR-Optimized Company Story to Engage Investors

• Brand Awareness: Everything You Need to Know for Your Business 6 Strategies

• Supply-Chain Attack Targeting Pakistani Government Delivers Shadowpad

• UK Financial Regulator Urges Banks to Tackle AI-Based Fraud

• Zimbra Warns of Critical Zero-Day Flaw in Email Software Amid Active Exploitation

• New SOHO Router Botnet AVrecon Spreads to 70,000 Devices Across 20 Countries

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Wireshark 4.0.7 Released – What’s New!

• The danger within: 5 steps you can take to combat insider threats

• Zoom Vulnerabilities Allow Attackers to Escalate Privileges

• Elon Musk to develop maximally curious AI robots with xAI

• Five 5 free online cybersecurity courses

• Want to stay safer online? Beware Meta services

• Generative AI outperforms hackers but not their creativity

• Facebook and Microsoft remain prime targets for spoofing

• New infosec products of the week: July 14, 2023

• Satellites lack standard security mechanisms found in mobile phones and laptops

• ​​​​​​​With new aerospace Cybersecurity rules set to land – What’s the standard for operators?

• Top priorities for chief audit executives in 2023

• Zero-day deploys remote code execution vulnerability via Word documents

• Ransomware review: July 2023

• From Malvertising to Ransomware: A ThreatDown webinar recap

• White House Fills in Details Of National Cybersecurity Strategy

• SEO Expert Hired and Fired By Ashley Madison Turned on Company, Promising Revenge

• Apple re-released Rapid Security Response to fix recently disclosed zero-day

• IT Security News Daily Summary 2023-07-13

• Introducing EncryptionSafe: A Free and Easy-to-Use Encryption App for Windows PC

• Secure Code Warrior Ushers in Next Era in Developer Driven Security With $50M Series C Funding Round

• Black Hat Announces Sustainability Pledge

• Secure Code Warrior Raises $50M to Accelerate Product Innovation

• Crit.IX: Flaws in Honeywell Experion DCS, Posing Risk to Critical Industries

• Malicious Microsoft Drivers Could Number in the Thousands: Cisco Talos

• Safe Security Acquires RiskLens

• Facebook and Microsoft are the Most Impersonated Brands in Phishing Attacks

• Zimbra urges customers to manually fix actively exploited zero-day reported by Google TAG

• Celsius feels the heat: Ex-CEO arrested, watchdogs line up to sue bankrupt crypto biz

• Secure Code Reviews

• Cybersecurity Leaders Report Reduction in Disruptive Cyber Incidents With MSS/MDR Solutions

• Linux Hacker Exploits Researchers With Fake PoCs Posted to GitHub

• Microsoft: Government agencies breached in email attacks

• Gartner: Due to stress, half of cyber leaders will change jobs, and a quarter will quit the field

• How the EU AI Act Will Affect Businesses, Cybersecurity

• Orca Sues Wiz for ‘Copying’ Its Cloud Security Tech

• Top 7 multicloud security solution providers for 2023

• WormGPT Heralds An Era of Using AI Defenses to Battle AI Malware

• Blue Team Con announces Lesley Carhart as keynote speaker

• Fake THREADS App Climbs to Number 1 Spot on Apple Store in Europe

• API Flaw in QuickBlox Framework Exposed PII of Millions of Users

• Critical RCE Bug in Rockwell Automation PLCs Zaps Industrial Sites

• Celsius Founder Alex Mashinsky Arrested, Charged

• Top 9 DevOps Trends

• INTERSECT Network Security Summit 2023: Where Insight Meets Innovation

• Closing out FY23 — Breakaway 1=5

• A Leader in IDC’s 2023 NESaaS and ZTNA MarketScape Reports

• Security Journey announces accelerated learning platform updates for developers

• Chinese Hackers Breach Government Email

• The hidden pitfalls of travel apps

• S3 Ep143: Supercookie surveillance shenanigans

• Okta, Ping Identity, CyberArk & Oracle Lead the IDaaS Omdia Universe

• TeamTNT’s Silentbob Botnet Infecting 196 Hosts in Cloud Attack Campaign

• PicassoLoader Malware Used in Ongoing Attacks on Ukraine and Poland

• ScarletEel Hackers Breach AWS Cloud Infrastructure

• Genesis Market: Formerly a Popular Dark Web Marketplace Now up for Sale

• Stories from the SOC: OneNote MalSpam – Detection & response

• Twitter Sues Four Texas Firms For Data Scraping

• iPhone users: This Eufy deal means you’ll never lose your wallet again

• Apple just released iOS 16.5.1 (c), and you need to install it now

• Honeywell DCS Platform Vulnerabilities Can Facilitate Attacks on Industrial Organizations

• BlackLotus UEFI Bootkit Source Code Leaked on GitHub

• Cisco Shopping Spree Adds Oort ID Threat Detection Tech

• Black Hat AI Tools Fuel Rise in Business Email Compromise (BEC) Attacks

• Rootshell Security works with Microsoft to identify three vulnerabilities

• AU10TIX app automates identity and age verification for businesses

• Truework Guardian improves employee data security

• Twitter sues companies for data scraping to corner Facebook Meta Thread

• DevOps Security Best Practices for Your SaaS Application

• New CVSS Version Unveiled Amid Rising Cyber Threats

• SolarWinds Attackers Dangle BMWs to Spy on Diplomats

• Chinese hackers compromised emails of U.S. Government agencies

• What Is Advanced Endpoint Protection. Key Features and Benefits

• International Diplomats Targeted by Russian Hacking Group APT29

• Latest macOS malware can steal your banking information

• Elon Musk Launches AI Startup Focus on Understanding Reality

• Concentric AI unveils archetype functionality for data discovery and protection

• ManageEngine adds OpenAI observability to Site24x7

• Chinese intelligence hacked Microsoft emails belonging to U.S. government in ‘significant’ breach

• Chinese hackers breach US government emails using a Microsoft cloud bug

• Microsoft Blow As FTC Files Activision Appeal

• Re-released Apple WebKit Zero-Day Patch Fixes Website Breaking

• Average Weekly Global Cyberattacks peak with the highest number in 2 years, marking an 8% growth year over year, according to Check Point Research

• Check Point Software Prevents Potential ChatGPT and Bard data breaches

• Check Point scored highest for Public Cloud Security Use Case in May 2023 Gartner® Critical Capabilities for Network Firewalls

• Popular WordPress Security Plugin Caught Logging Plaintext Passwords

• 3 Tax Prep Firms Shared ‘Extraordinarily Sensitive’ Data About Taxpayers With Meta, Lawmakers Say

• Mandiant Unveils Russian GRU’s Cyber Playbook Against Ukraine

• Rockwell Automation Exploit Spurs Fears Of Critical Infrastructure Security

• WordPress Security Plugin Caught Logging Plaintext Passwords

• Microsoft Fixes 130 CVE Listed Bugs, 5 Flaws Exploited

• Juniper Networks Patches High Severity Vulnerabilities

• Secure Code Warrior raises $50 million to accelerate product innovation

• Private Data of 12,000 SBI Employees Exposed on Telegram Channels

• Meta Responds to User Complaints by Introducing Feeds for Threads

• Apple WebKit Zero-Day Patch Re-Released to Fix Broken Webpages

• Crypto fraud in 2023: How can security teams fight

• White House Publishes Plan to Implement US National Cybersecurity Strategy

• Tax Prep Companies Sent Millions Of Users’ Data To Facebook

• Creating a Patch Management Playbook: 6 Key Questions

• Killnet Tries Building Russian Hacktivist Clout With Media Stunts

• Users of Honeywell Experion DCS Platforms urged to patch 9 vulnerabilities immediately

• Jenkins Plugin Flaw Lets Attackers Gain Admin Access

• Malicious Chrome Extension Steals Businesses Ads Manager Login Details

• How Google Keeps Company Data Safe While Using Generative AI Chatbots

• Fake PoC for Linux Kernel Vulnerability on GitHub Exposes Researchers to Malware

• White House publishes National Cybersecurity Strategy Implementation Plan

• Unnamed APT eyes vulnerabilities in Rockwell Automation industrial contollers (CVE-2023-3595 CVE-2023-3596)

• Fidelis Active Directory Intercept enables identification of AD issues

• Network, IAM and cloud are the top 3 cybersecurity spending priorities for 2023

• Regula enhances document examination capabilities to help forensic experts fight identity fraud

• Juniper Networks Patches High-Severity Vulnerabilities in Junos OS

• APT Exploit Targeting Rockwell Automation Flaws Threatens Critical Infrastructure

• SonicWall Patches Critical Vulnerabilities in GMS, Analytics Products

• Apple Re-Releases Urgent Zero-Day Patches With Fix for Website Access Issue

• Secure Code Warrior lands $50M to educate developers on best cyber practices

• CVSS 4.0 released, to help assess real-time threat and impact of vulnerabilities

• An Interview with Greg Van Der Gaast

• What are NIST Encryption Standards? Why Do They Matter a Lot?

• FCA CEO Warns Of AI Disruption To Financial Services Sector

• French Police Will Be Able to Spy on People through Their Cell Phones

• Microsoft July Patch Tuesday Fixed Six Zero-Day Vulnerabilities

• SonicWall Critical Flaws Let Attackers Bypass Authentication

• Security flaws in Honeywell devices could be used to disrupt critical industries

• APT Exploit Targeting Rockwell Automation Flaws Could Threaten Critical Infrastructure

• Detecting BPFDoor Backdoor Variants Abusing BPF Filters

• Actionable Threat Intel (III) – Introducing the definitive YARA editor

• PC Shipment Decline Slows In Q2, Says Gartner

• Rockwell Automation ControlLogix Bugs Expose Industrial Systems to Remote Attacks

• Elon Musk Launches AI Startup xAI

• The State of Wearable MedTech

• US on Track For Record Number of Data Breaches

• Fewer Than 100 Scammers Responsible For Global Email Extortion

• SonicWall urges organizations to fix critical flaws in GMS/Analytics products

• An introduction to the benefits and risks of Packet Sniffing

• Hiring Kit: Security Architect

• Chinese Threat Group Compromises US Government

• OWASP ZAP 2.13.0 Released – What’s New!

• Do you know what your supply chain is and if it is secure?

• World Youth Skills Day 2023: Engaging Youth with Cybersecurity

• U.S. Government Agencies’ Emails Compromised in China-Backed Cyber Attack

• New Vulnerabilities Disclosed in SonicWall and Fortinet Network Security Products

• Microsoft admits unauthorized access to Exchange Online, blames Chinese gang

• Ransomware attack exposes Swiss Hooligans data onto Dark Web

• Hackers Leverage USB Flash Drives to Attack Public and Private Sectors Globally

• Attack Surface Management: Identify and protect the unknown

• Combatting data governance risks of public generative AI tools

• Infrastructure upgrades alone won’t guarantee strong security

• 20% of malware attacks bypass antivirus protection

• Victory! Ninth Circuit Allows Human Rights Case to Move Forward Against Cisco Systems

• Top 7 Best IP Geolocation APIs For Cybersecurity – 2023

• Only 45% of cloud data is currently encrypted

• Hackers Target Chinese Gamers With Microsoft-Signed Rootkit

• Criminals target businesses with malicious extension for Meta’s Ads Manager and accidentally leak stolen accounts

• Proposed Massachusetts law to ban sale of your mobile location data

• Update now! Microsoft patches a whopping 130 vulnerabilities

• How to secure your business before going on vacation

Generated on 2023-07-14 23:55:26.299972