IT Security News Daily Summary 2023-07-15

• Russia-linked APT Gamaredon starts stealing data from victims between 30 and 50 minutes after the initial compromise

• AI Malware vs. AI Defences: WormGPT Cybercrime Tool Predicts a New Era

• Sharp Increase in Malware Attacks via USB Flash Drives

• Unveiling Entrepreneurs’ Hesitations with ChatGPT

• Ransomware Resurgence: A Renewed Wave of Cyber Threats

• Analysis of Storm-0558 techniques for unauthorized email access

• Stories from the SOC: Fighting back against credential harvesting with ProofPoint

• Unveiling the secrets: Exploring whitespace steganography for secure communication

• Dark Web Secrets: Mystery Behind the Anonymous World

• Lazarus APT Group Hijack Windows IIS Servers to Distribute Malware

• WormGPT – The Malicious ChatGPT Alternative Empowering Cybercriminals

• Nude Videos of Kids From Hacked Baby Monitors Were Sold on Telegram

• How Sandboxes Protect Organizations from Malware — Known And Unknown

• Hacks And Data Leaks

• Former Amazon Security Engineer Charged of Defrauding a Crypto Exchange

• WormGPT: New AI Tool Allows Cybercriminals to Launch Sophisticated Cyber Attacks

• Infosec watchers: TeamTNT crew may blast holes in Azure, Google Cloud users

• Build or Buy your own antivirus product

• Microsoft Bug Allowed Hackers to Breach Over Two Dozen Organizations via Forged Azure AD Tokens

• What is the difference between incident response & threat hunting?

• Malwarebytes stops 100% of Advanced Threats in latest AV-Test assessment

• Ransomware making big money through “big game hunting”

• Tax preparation firms shared sensitive information with Meta

• Golang vulnerability checker flags Go vulnerabilities

• Scarleteel Threat Targets AWS Fargate, Launches DDoS and Cryptojacking Campaigns

• Teenagers Face Trial for Hacking BT, Nvidia, Rockstar Games, Revolut, Uber

• Cisco Flags Critical SD-WAN Vulnerability

• SBOMs Still More Mandate Than Security

• How Hackers Can Hijack a Satellite

• The source code of the BlackLotus UEFI Bootkit was leaked on GitHub

• IT Security News Daily Summary 2023-07-14

• Events Ripper Update

• What to Expect When Reporting Vulnerabilities to Microsoft

• 2023-07-12 – Gozi/ISFB infection with Cobalt Strike

• 2023-07-13 – IcedID (Bokbot) from malspam

• Mastercard, eBay and Capital One talk equitable generative AI and innovation

• Mass Shooting Victims Sue Facebook For Helping Radicalize Shooter

• US CISA warns of Rockwell Automation ControlLogix flaws

• Fake TeamViewer Installer Used to Deliver njRAT Malware

• Even the Government Thinks It Should Stop Buying Corporate Surveillance Data

• White House Launches Cybersecurity Implementation Plan

• Rogue Azure AD Guests Can Steal Data via Power Apps

• GitHub updates platform with passkey authentication, DevOps streamlining

• Zimbra Collaboration Suite warning: Patch this 0-day right now (by hand)!

• Zimbra Zero-Day Demands Urgent Manual Update

• FBI Surveillance Fears Are Uniting a Badly Broken Congress

• BlotchyQuasar: X-Force Hive0129 targeting financial institutions in LATAM with a custom banking trojan

• Rein in cybersecurity tool sprawl with a portfolio approach

• Congratulations to the Top MSRC 2023 Q2 Security Researchers!

• Clop Attacks: More Organizations Confirm to have Fallen Prey to MOVEit Mass-hack

• BlackRock’s Bitcoin ETF Reveals the Future of Cryptocurrency Surveillance

• Navigating the Cyber Insurance landscape as a Gen Z digital citizen

• AI Tool WormGPT Enables Convincing Fake Emails For BEC Attacks

• Zscaler, Palo Alto Under Pressure from Microsoft’s Rapidly Increasing Cybersecurity Offerings

• Major Companies Restrict Employee Use of ChatGPT: Amazon, Apple, and More

• Massive Data Breach at HCA Healthcare: 11 Million Patients’ Information Compromised by Hackers

• FTC starts data security probe on ChatGPT OpenAI

• Location Fingerprint: Incognia’s Innovative Answer to Online Fraud Prevention

• New Threat Actor Launches Cyber-attacks on Ukraine and Poland

• BlueVoyant MXDR for Splunk empowers users to identify security threats

• New Cloud Credential Stealing Campaign Targets Microsoft Azure and Google Cloud

• BlackCat Alphv Ransomware

• Twitter To Share Ad Revenues With Content Creators

• LokiBot Malware Targets Windows Users in Office Document Attacks

• Critical Security Flaws Uncovered in Honeywell Experion DCS and QuickBlox Services

• Teleskope launches AI-based data protection platform

• Jim Cramer gauges the threat of Microsoft’s cybersecurity foray on Palo Alto Networks stock

• Beware of Weaponized TeamViewer Installer that Delivers njRAT

• BlotchyQuasar: X-Force Hive0129 targeting financial intuitions in LATAM with a custom banking trojan

• How To Use Nmap for Vulnerability Scanning: Complete Tutorial

• Google Researchers Discover In-The-Wild Exploitation Of Zimbra Zero Day

• How A Cloud Flaw Gave Chinese Spies A Key To Microsoft

• Adobe Patches Critical ColdFusion, InDesign Zero Day Bugs

• Fake PoC On GitHub Lures Researchers To Download Malware

• Industry Reactions to EU-US Data Privacy Framework: Feedback Friday

• Zluri Raises $20 Million for SaaS Management Platform

• In Other News: Security Firm Hit by Investor Lawsuit, Satellite Hacking, Cloud Attacks

• Electrical Grid Stability Relies on Balancing Digital Substation Security

• Cribl scales observability across large enterprises with new product features

• BlueKeep: Understanding the Critical RDP Vulnerability

• BreachForums’ Pompompurin Pleads Guilty to Holding Child Abuse Content

• How to Check If Someone Else Accessed Your Google Account

• Just-in-Time Access Explained. What It Means, Benefits and Best Practices of JIT

• Critical Cisco SD-WAN Vulnerability Leads to Information Leaks

• Chinese APT Favorite Backdoor Found in Pakistani Government App

• Meta’s Threads app used as a lure

• Chinese Hackers Compromised Emails Of US Commerce Secretary

• Rockwell Automation ControlLogix Flaws Expose ICS Devices to RCE & DoS Attacks

• Hackers Target Reddit Alternative Lemmy via Zero-Day Vulnerability

• Secure Code Warrior Raises $50 Million to Help Developers Write Secure Code

• TeamTNT’s Cloud Credential Stealing Campaign Now Targets Azure and Google Cloud

• AIOS WordPress Plugin Faces Backlash for Storing User Passwords in Plain Text

• Defend Against Insider Threats: Join this Webinar on SaaS Security Posture Management

• Buying Campaign Contributions as a Hack

• Indexing Over 15 Million WordPress Websites with PWNPress

• Evaluating the Reputation and Trustworthiness of Gambling Sites: Ensuring a Safe and Secure Experience

• Twitter Owes Former Staff $500m, Lawsuit Claims

• ChatGPT Reconnaissance Techniques for Penetration Testing Success

• Former contractor accused of remotely accessing town’s water treatment facility

• Google Researchers Discover In-the-Wild Exploitation of Zimbra Zero-Day

• US Publishes Implementation Plan for National Cybersecurity Strategy

• New AVrecon botnet remained under the radar for two years while targeting SOHO Routers

• Micro-Segmentation: Strengthening Network Security Through Granular Control

• NCSC Shares Alternatives to Using a SOC

• Silicon UK Pulse: Your Tech News Update: Episode 11

• Understanding the New European Union AI Law

• Train AI models with your own data to mitigate risks

• Ransomware Costs Financial Services $32bn in Five Years

• Craft an IR-Optimized Company Story to Engage Investors

• Brand Awareness: Everything You Need to Know for Your Business 6 Strategies

• Supply-Chain Attack Targeting Pakistani Government Delivers Shadowpad

• UK Financial Regulator Urges Banks to Tackle AI-Based Fraud

• Zimbra Warns of Critical Zero-Day Flaw in Email Software Amid Active Exploitation

• New SOHO Router Botnet AVrecon Spreads to 70,000 Devices Across 20 Countries

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Wireshark 4.0.7 Released – What’s New!

• The danger within: 5 steps you can take to combat insider threats

• Zoom Vulnerabilities Allow Attackers to Escalate Privileges

• Elon Musk to develop maximally curious AI robots with xAI

• Five 5 free online cybersecurity courses

• Want to stay safer online? Beware Meta services

• Generative AI outperforms hackers but not their creativity

• Facebook and Microsoft remain prime targets for spoofing

• New infosec products of the week: July 14, 2023

• Satellites lack standard security mechanisms found in mobile phones and laptops

• ​​​​​​​With new aerospace Cybersecurity rules set to land – What’s the standard for operators?

• Top priorities for chief audit executives in 2023

• Zero-day deploys remote code execution vulnerability via Word documents

• Ransomware review: July 2023

• From Malvertising to Ransomware: A ThreatDown webinar recap

Generated on 2023-07-15 23:55:27.690114