IT Security News Daily Summary 2023-07-19

• Microsoft to expand free cloud logging following recent hacks

• JFrog Curation blocks malicious open source software packages

• Tech support scammers go analog, ask victims to mail bundles of cash

• Ukraine’s cyber police dismantled a massive bot farm spreading propaganda

• Dark.IoT & Custom Botnets Exploit Zyxel Flaw in DDoS Attacks

• An important step towards secure and interoperable messaging

• House committee takes aim at U.S. venture capital firms for investments in Chinese A.I.

• The best travel VPNs of 2023: Expert tested and reviewed

• Windows 11 setup: Which user account type should you choose?

• Citrix NetScaler ADC and Gateway flaw exploited in the wild

• Top API Security Tools 2023

• I tried to buy a post on TechCrunch.com

• macOS Sonoma’s Latest Update Brings Significant Enhancements to Apple’s Password Manager

• Check Point Research: Microsoft the Most Phished Brand in Q2 2023

• Feedzai Railgun protects customers against financial crime

• Diligent Board Reporting for IT Risk equips CISOs with third party risk scores

• Vonage Protection Suite strengthens end-to-end communications security

• Meta Updates Open Source AI Model With Llama 2

• Google is cutting off internet access for some employees. Here’s why

• 3 Ways AI Could Improve Authentication

• Practice Your Security Prompting Skills

• Microsoft, Activision Extend Deal Deadline To Secure UK Approval

• Hackers Exploiting Critical Zero-Day Vulnerability in Citrix NetScaler Products

• Microsoft Bows to Pressure to Free Up Cloud Security Logs

• Facebook Flooded with Ads and Pages for Fake ChatGPT, Google Bard and other AI services, Tricking Users into Downloading Malware

• What is the new Enhanced Safe Browsing for Gmail (and should you enable it)?

• Trend Vision One empowers organizations to safeguard their cloud workloads

• ExtraHop IDS for Government identifies malicious activity within encrypted traffic

• Bitwarden adds passwordless SSO function with universal compatibility

• LimaCharlie SecOps Cloud Platform eliminates integration challenges

• Rubrik offers $10m ransomware compensation to victims

• AWS Reliability Pillar: Consistent Cloud Architecture

• Hackers Use “chatgpt5[.]zip” Lure to Trick Users into Downloading Malware

• WormGPT: What you need to know about the cybercriminal’s answer to ChatGPT

• What is the new Enhanced Safe Browing for Gmail (and should you enable it)?

• Recycling Giant Tomra Takes Systems Offline Following Cyberattack

• Chinese APT41 Linked to WyrmSpy and DragonEgg Surveillanceware

• Proton Pass password manager apps released as open source

• UK Clears Broadcom’s $61 Billion VMware Purchase

• Estee Lauder Hacked And Data Stolen

• United States Announces New IoT Cybersecurity Label

• Critical API Security Gaps Found in Financial Services

• Growing Demand for Healthcare Cybersecurity Specialists

• Typo Delivers Millions of US Military Emails to Russia’s Ally Mali

• The Met Police passed victims’ data to Facebook

• AI-Based Deepfake Fraud: Police Retrieves Money Worth ₹40,000 Defrauded From Kozhikode Victim

• Sophisticated DDoS Attacks Have Evolved Rapidly; Targeting IT Services

• Using defense in depth to secure cloud-stored data

• How Cyber Threat Intelligence Practitioners Should Leverage Automation and AI

• US Adds Euro Spyware Makers To Export Naughty List

• FIN8 Retools Backdoor Malware To Avoid Detection

• Two Jira Plugin Vulnerabilities In Attacker Crosshairs

• The Tail Of The MOVEit Hack May Be Longer Than We Realize

• Macnica and Dragos Partner to Deliver OT Cybersecurity to CNI and Manufacturing Control Systems in Japan

• FIN8 Revamped Hacking Toolkit with New Stealthy Attack Features

• 6 Ways Cloud Computing and Virtualization Energize Utility IT Operations With Scalability and Flexibility

• Unmasking HotRat: The hidden dangers in your software downloads

• Sensitive data FOMO: You can’t afford to miss out on data security

• Recently Patched GE Cimplicity Vulnerabilities Reminiscent of Russian ICS Attacks

• Virtual Event Today: 2023 Cloud & Data Security Summit

• Two Jira Plugin Vulnerabilities in Attacker Crosshairs

• Biden-Harris Administration Unveils Smart Device Cyber Program

• Researchers Discover New Facebook Malware Campaign After Hackers Accidentally Leak Stolen Data

• Reducing Security Debt in the Cloud

• US Gov adds surveillance firms Cytrox and Intellexa to Entity List for trafficking in cyber exploits

• Report Finds That 70% of Financial Services and Insurance Companies Have Suffered Rollout Delays Due to API Security

• Perle Systems enhances edge computing capabilities with OCI Container support

• Tenable unveils agentless container scanning to prevent vulnerable containers from reaching runtime

• How has AI Technology Influenced the Gambling and Casino Industry?

• Operationalizing Zero Trust Architecture

• Phishing Kit: New Frontier of Hacker Attacks within Everyone’s Reach

• Lenovo introduces new data management solutions to deploy AI workloads

• Veeam Software delivers new backup and restore capabilities with Microsoft 365 Backup

• Code42 helps security analysts to address the most pressing insider events with IRIs

• Zero-Day Alert! Critical Flaw in Citrix ADC and Gateway Exploited in the Wild

• Industry Experts Urge CISA to Update Secure by Design Guidance

• New Outpost24 CORE Solution Announced Bringing Visibility, Cyber Resilience & Threat Mitigation

• Security Awareness Training Isn’t Working – How Can We Improve It?

• Leverage Threat Intelligence, AI, and Data at Scale to Boost Cyber Defenses

• How to Manage Your Attack Surface?

• Comprehensive analysis of initial attack samples exploiting CVE-2023-23397 vulnerability

• AI Discussed At UN Security Council Meeting

• Understanding Reverse Email Lookup: A Tool to Strengthen Cybersecurity

• OWASP Released Top 10 Critical Vulnerabilities for LLMs(AI models)

• Citrix NetScaler zero-day exploited in the wild, patch is available (CVE-2023-3519)

• CompTIA DataSys+ program provides resources for database management skills

• U.S. Cyber Trust Mark labeling program raises the bar for smart devices’ cybersecurity

• Cybersecurity measures SMBs should implement

• Cohesity expands collaboration with Cisco and HPE to improve data security for enterprises

• How To Use ChatGPT To Trade Cryptocurrency

• Exploring the Dark Side: OSINT Tools and Techniques for Unmasking Dark Web Operations

• Chinese APT41 Hackers Target Mobile Devices with New WyrmSpy and DragonEgg Spyware

• Record Price For Engineer’s First Generation Apple iPhone

• Cloud Security Best Practices – A Complete Cloud Protection Guide 2023

• Chrome 115 Patches 20 Vulnerabilities

• Exploitation of New Citrix Zero-Day Likely to Increase, Organizations Warned

• Oracle Releases 508 New Security Patches With July 2023 CPU

• 1-15 June 2023 Cyber Attacks Timeline

• Bad.Build Flaw in Google Cloud Build Raises Concerns of Privilege Escalation

• INTERSECT ’23: Network Security Summit unveils cutting-edge strategies to safeguard digital assets

• Using MFT to Solve Your Cloud Data Challenges: 5 Key Takeaways

• Why Integrity is Vital to Your Corporate Infrastructure

• Get a Lifetime of Powerful VPN Protection for Your Business Data for Just $70

• Scam Job Offers Target Uni Students

• NCA: Nation States Using Cybercrime Groups as Proxies

• Citrix warns of actively exploited zero-day in ADC and Gateway

• High Energy Consumption Energies Ranked by Usage

• Norwegian Giant Tomra Suffers “Extensive” Attack

• Business Productivity Solutions: The Hidden Benefits of Online Faxing

• NHS Cybersecurity Strategy to 2030: Is it Enough to Protect Healthcare?

• Why performing security testing on your products and systems is a good idea

• U.S. Government Blacklists Cytrox and Intellexa Spyware Vendors for Cyber Espionage

• FIA World Endurance Championship driver passports leaked

• The Crucial Role of Time Stamps in Data Security

• Sophos gets startled by Sophos Encrypt Ransomware

• What to do (and what not to do) after a data breach

• Using AI/ML to optimize your tech stack and enhance business efficiency

• Trends in ransomware-as-a-service and cryptocurrency to monitor

• Hackers Actively Exploit Multiple Adobe ColdFusion Vulnerabilities

• Zero-Day Attacks Exploited Critical Vulnerability in Citrix ADC and Gateway

• Bureau raises $16.5 million to help users prevent fraud

• eBook: 9 Ways to Secure Your Cloud App Dev Pipeline

• Supply chain executives unaware of growing customer trust issues

• Google Virus Total leaks list of spooky email addresses

• Google restricting internet access to some employees to reduce cyberattack risk

• FakeSG enters the ‘FakeUpdates’ arena to deliver NetSupport RAT

• US adds Euro spyware makers to export naughty list

• US Gov Mercenary Spyware Clampdown Hits Cytrox, Intellexa

• Google Cloud Build Flaw Enables Privilege Escalation, Code Tampering

• Virustotal data leak exposed data of some registered customers, including intelligence members

• Automating the API Security Lifecycle – An Interview with Subbu Iyer of Cequence Security

• The XDR Payoff: Better Security Posture

• Building security certifications into your image builder blueprint

• Securing the Digital Frontier: How Caveonix Empowers Cyber Defense

• X-Force certified containment: Responding to AD CS attacks

• Microsoft Unsure How Chinese Hackers Stole MSA Key to Breach U.S. Agencies

• Roblox Developer Conference – 3,943 breached accounts

• IT Security News Daily Summary 2023-07-18

• Pernicious Rootkits Pose Growing Blight On Threat Landscape

• How HealthEdge Deals with Security and Data Privacy in the Face of Rapid Expansion

• You Can Help Stop These Bad Internet Bills

• Multiple Adobe ColdFusion flaws exploited in the wild

• EFF Supports the PRESS Act to Protect Journalists

• FIN8 Group spotted delivering the BlackCat Ransomware

• FortiGuard Labs Discovers .ZIP Domains Fueling Phishing Attacks

• E-Waste: Australia’s Hidden ESG Nightmare

• VirusTotal Data Leak Affects 5K+ Users

• EFF Poker Tournament at DEF CON 31 ♠️

• A Broad Federal Publicity Right Is a Risky Answer to Generative AI Problems

• Hacker Infected & Foiled by Own Infostealer

• EFF Poker Tournament at DEF CON 31 ♠️

• 5 AI Tools That may Save Your Team’s Working Hours

• Cybersecurity: Are Viruses Still a Threat?

• Vulnerability Summary for the Week of July 10, 2023

• Microsoft hit by Storm season – a tale of two semi-zero days

• EFF Poker Tournament at DEF CON 31 ♠️

• A Few Cybercriminals Account for All Email Extortion Attacks, New Research Reveals

• Five key ways to effectively manage email signatures

• US government adds two more spyware makers to denylist

• Privacera Governed Data Stewardship empowers businesses’ data initiatives

• Rapid7 Executive Risk View allows security teams to prioritize remediation actions

• EFF Poker Tournament at DEF CON 31 ♠️

• Supercloud security concerns foreshadow concept’s adoption

• Name That Toon: Shark Sighting

• EFF Poker Tournament at DEF CON 31 ♠️

• Effectively managing security budgets in a recession

• What is an incident response plan (IRP) and how effective is your incident response posture?

• Attacker exploits vulnerability in Active Directory Certificate Services to take control of domain

• NSA, CISA Issue Guidance on 5G Network Slicing Security

• New Vulnerabilities Found in Adobe ColdFusion

• FIN8 Modifies ‘Sardonic’ Backdoor to Deliver BlackCat Ransomware

• Hammerspace raises $56.7 million to unlock business opportunities hidden in unstructured data

• EFF Poker Tournament at DEF CON 31 ♠️

• U.S. blacklists two firms that built Meta, iOS and Android spyware

• VirusTotal Data Leak Exposes User Info, Including Intel Agencies’ Data

• Nasuni teams with Microsoft Sentinel to shield file data from cyber-threats

• CISA Unveils Guide to Aid Firms Transition to Cloud Security

• Sogu, SnowyDrive Malware Spreads, USB-Based Cyberattacks Surge

• Attackers Pummel Millions of Websites via Critical WooCommerce Payments Flaw

• Fourth Amendment Is Not for Sale Act Goes Back to Congress

• Splunk Edge Hub provides visibility across IT and OT environments

• Spectro Cloud brings Kubernetes management to government organizations with Palette VerteX

• EFF Poker Tournament at DEF CON 31 ♠️

• Darktrace shares pop 26% after EY concludes report into accounting allegations

• Cyber Attack news headlines trending on Google

• A Deep Dive Into Token-Based Authentication and OAuth 2.0 in MQTT

• Mario movie malware might maliciously mess with your machine

• Protect yourself from ticketing scams ahead of the Premier League Summer Series USA Tour

• How to Protect and Secure Your Data in 10 Ways

• drIBAN Fraud Operations Target Corporate Banking Customers

• EFF Poker Tournament at DEF CON 31 ♠️

• Black Hat Hacker Exposes Real Identity After Infecting Own Computer With Malware

• Nigerian Man Sentenced to 8 Years in US Prison for $8 Million BEC Scheme

• LeakedSource Owner Quit Ashley Madison a Month Before 2015 Hack

• Millions of Keyboard Walk Patterns Found in Compromised Passwords

• Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203)

• Kyndryl and Veritas launch two services for data protection and recovery

• EFF Poker Tournament at DEF CON 31 ♠️

• The Use of Biometrics as a Cybersecurity Method

• Microsoft Dominates as the Most Impersonated Brand for Phishing Scams in Q2 2023

• Why Organizations Must Reinforce Their Endpoint Security with a Modern Web Security Solution

• Armis, Honeywell Uncover Vulnerabilities in Honeywell Systems

• Pakistani Entities Targeted in Sophisticated Attack Deploying ShadowPad Malware

• US government adds two more spyware makers to deny list

• EFF Poker Tournament at DEF CON 31 ♠️

• VirusTotal += Crowdsourced AI

• Cloud security in the era of artificial intelligence

• WordPress Sites Hacked via Critical Vulnerability in WooCommerce Payments Plugin

• JumpCloud Confirms Data Breach By Nation-State Actor

• Linux Ransomware Poses Significant Threat to Critical Infrastructure

• Cybersecurity firm Netcraft lands $100M investment

• US government adds two more spyware makers on deny list

• Congress Is Going To Be Talking About UFOs Next Week

• Hacker Conversations: Inside The Mind Of Daniel Kelley, Ex-Blackhat

• TOMRA Pulls Systems Offline Following Extensive Cyberattack

• Beijing Wants To Make The Great Firewall Of China Even Greater

• Mass Attack On WordPress Sites Targets Bug In WooCommerce Plugin

• VirusTotal leaked data of 5,600 registered users

• Egress defends users against phishing threats with adaptive security capability

• Seed Group and Resecurity collaborate to reshape Middle East’s cybersecurity landscape

• Pat Clawson joins CheckRed Security as CEO

• EFF Poker Tournament at DEF CON 31 ♠️

• IT hiring picks up amid ongoing economic concerns

• EFF Poker Tournament at DEF CON 31 ♠️

• Urgent Action Required: Delete Apps with Privacy Breach Potential

• Gay Furry Hackers: Digital Activism Against Anti-Trans Laws

• Recycling giant TOMRA pulls systems offline following ‘extensive cyberattack’

• KYB by ComplyAdvantage automates customer onboarding and monitoring

• Netcraft raises over $100 million to drive growth and expand globally

• EFF Poker Tournament at DEF CON 31 ♠️

• CISA Released Free Cloud Security Tools to Secure Cloud Data

• Basic Authentication Using Spring Boot Security: A Step-By-Step Guide

• White House Unveils Cybersecurity Labeling Program for Smart Devices

• EFF Poker Tournament at DEF CON 31 ♠️

• Phishers Targeting Diplomats in Kyiv with Fake 2011 BMW Flyers

• Go Beyond the Headlines for Deeper Dives into the Cybercriminal Underground

• VirusTotal Data Leak Exposes Some Registered Customers’ Details

• EFF Poker Tournament at DEF CON 31 ♠️

• Leveraging Enhanced Authentication for MQTT Security

• Reviewing Remote Work Security: Best Practices

• Learning from the Playground: The Original SOC

• Norway Threatens $100,000 Daily Fine on Meta Over Data

• Two New Adobe ColdFusion Vulnerabilities Exploited in Attacks

• Netcraft Raises $100M, Hires New CEO for Global Expansion

• Hacker Conversations: Inside the Mind of Daniel Kelley, ex-Blackhat

• Disabling Self-Driving Cars with a Traffic Cone

• Dragos Accelerates Growth in Europe, Expands Leadership Team

• Splunk partners with Microsoft to strengthen digital resilience

• EFF Poker Tournament at DEF CON 31 ♠️

• Hacking campaign targets sites using WordPress WooCommerce Payments Plugin

• EFF Poker Tournament at DEF CON 31 ♠️

• SEC ‘Disappointed’ At Ripple Court Defeat

• Head Of Engineering For Trump’s Truth Social ‘Quits’

• Suspected Scareware Fraudster Arrested After Decade on the Run

• FIN8 Group Using Modified Sardonic Backdoor for BlackCat Ransomware Attacks

• EFF Poker Tournament at DEF CON 31 ♠️

• Netcraft Secures First Funding with Over $100M from Spectrum Equity; Names Experienced Technology Executive Ryan Woodley as New CEO

• EFF Poker Tournament at DEF CON 31 ♠️

• Tesla Produces First Cybertruck At Texas Plant

• Tesla Sues Australian Company Over Patent Infringement

• WooCommerce Bug Exploited in Targeted WordPress Attacks

• US government launches the Cyber Trust Mark, its long-awaited IoT security labeling program

• EFF Poker Tournament at DEF CON 31 ♠️

• JumpCloud Hacked – Attackers Compromised The Systems Via Spear-phishing Attack

• EFF Poker Tournament at DEF CON 31 ♠️

• China Delivery Giant Meituan Expands Livestream Commerce

• US Chip Group Warns Against More China Sanctions

• IT Security Pro Jailed for Attempted Extortion

• EFF Poker Tournament at DEF CON 31 ♠️

• ID verification platform Bureau bumps its Series A to $16.5M

• JumpCloud revealed it was hit by a sophisticated attack by a nation-state actor

• EFF Poker Tournament at DEF CON 31 ♠️

• Need to improve the detection capabilities in your security products?

• Musk Says Twitter Has Lost Half Of Ad Revenue

• Cybercriminals Exploiting WooCommerce Payments Plugin Flaw to Hijack Websites

• Owner of BreachForums Pleads Guilty to Cybercrime and Child Pornography Charges

• The Eternal Sunshine of the Criminal Mind

• EFF Poker Tournament at DEF CON 31 ♠️

• EFF Poker Tournament at DEF CON 31 ♠️

• EFF Poker Tournament at DEF CON 31 ♠️

• EFF Poker Tournament at DEF CON 31 ♠️

• Ransomware makes two cities declare emergency

• 12 open-source penetration testing tools you might not know about

• EFF Poker Tournament at DEF CON 31 ♠️

• EFF Poker Tournament at DEF CON 31 ♠️

• Get the AT&T Cybersecurity InsightsTM Report: Focus on Healthcare

• Data compromises on track to set a new record

• Healthcare organizations in the crosshairs of cyberattackers

• Broadband consumers demand security and sustainability

• EFF Poker Tournament at DEF CON 31 ♠️

• JumpCloud Blames ‘Sophisticated Nation-State’ Actor for Security Breach

• EFF Poker Tournament at DEF CON 31 ♠️

• EFF Poker Tournament at DEF CON 31 ♠️

• EFF Poker Tournament at DEF CON 31 ♠️

• Cybercrime – big in Asia Pacific

• EFF Poker Tournament at DEF CON 31 ♠️

• The Evolution of Threat Defense – An Interview with Steve Povolny of Exabeam

• Startup Spotlight: Binarly Hardens Firmware Security

• EFF Poker Tournament at DEF CON 31 ♠️

• EFF Poker Tournament at DEF CON 31 ♠️

• EFF Poker Tournament at DEF CON 31 ♠️

• Typo watch: ‘Millions of emails’ for US military sent to .ml addresses in error

• EFF Poker Tournament at DEF CON 31 ♠️

• Taking the Fight to the Cyber-Criminals

• A week in security (July 10 – 16)

• Spy vs. spy: Exploring the LetMeSpy hack, with maia arson crimew

• Act now! In-the-wild Zimbra vulnerability needs a workaround

• EFF Poker Tournament at DEF CON 31 ♠️

Generated on 2023-07-19 23:55:15.941445