IT Security News Daily Summary 2023-07-26

• SEC Adopts New Rule on Cybersecurity Incident Disclosure Requirements

• Massive macOS Campaign Targets Crypto Wallets, Data

• ‘Nitrogen’ Ransomware Effort Lures IT Pros via Google, Bing Ads

• Russia throws founder of infosec biz Group-IB in the clink for treason

• From Vulnerability to Vigilance: How Mobile App Evolution Influenced Security Mindsets

• ETSI Dismisses Claims of ‘Backdoor’ Vulnerabilities in TETRA Standard

• The U.K. Government Is Very Close To Eroding Encryption Worldwide

• Following WormGPT, FraudGPT Emerges for AI-Driven Cyber Crime

• Two ambulance services in UK lost access to patient records after a cyber attack on software provider

• Flipper Zero Launched “Apps Hub” As A Third-Party App Store

• SEC adopts new cybersecurity incident disclosure rules for companies

• International Rights Groups to Thierry Breton: You Need to Make Clear That Under the DSA States Can’t Shut Down the Internet as Punishment for Hateful Content on Platforms

• 6 Best Practices To Protect Your Company From Data Loss

• Lazarus Hackers Target Microsoft IIS Servers to Propagate Malware

• Listed US Firms Must Disclose Cyber Breaches In Four Days

• Security hygiene and posture management: A work in progress

• Russia Sends Cybersecurity CEO to Jail for 14 Years

• Ex-NSA Official Harry Coker Tapped for National Cyber Director Job

• Future careers: how to make it in biometrics

• How to improve employee phishing awareness

• Unveiling the secrets: Exploring whitespace steganography for secure communication

• Repeatable VEC Attacks Target Critical Infrastructure

• Virgin Media O2 To Axe 2,000 UK Jobs

• Apple Mulls Price Rise For iPhone Pro – Report

• VMware Patches Vulnerability Exposing Admin Credentials

• Peloton Bugs Expose Enterprise Networks to IoT Attacks

• Source: CrowdStrike is close to acquiring Bionic.AI for between $200M and $300M

• Terrestrial Trunked Radio System Vulnerable to Leakage and Message Injection

• BlackCat Attackers Target Italian Asset Manager Azimut

• Google Cloud’s Security Strategy: Emphasizing ‘Secure by Design’ and ‘Secure by Default’

• Travel HACK: Why you Should not Share Photos of Your Boarding Pass Online

• Security Breach: Clearweb Sites Attacked by MOVEit, Data Exposed

• VirusTotal Malware Trends Report: Emerging Formats and Delivery Techniques

• Group-IB Founder Sentenced in Russia to 14 Years for Treason

• Experts Warn About Privacy Issues With Facebook-Owned Threads App

• Source: Crowdstrike is close to acquiring Bionic.AI for between $200M and $300M

• SeeMetrics Security Performance Boards empowers CISOs to validate security programs

• EndaceProbe Cloud detects threats and network performance issues

• SentinelOne introduces cloud data security products

• Cyber Attack news headlines trending on Google

• OWASP ModSecurity Core Rule 3.3.5 Released – What’s New!

• Dark Web Markets Offer New FraudGPT AI Tool

• Cyclops Emerges From Stealth With Security Search Platform Powered by Generative AI

• Alphabet CFO Steps Aside, As Q2 Profit Beats Expectations

• QRadar SIEM reduces incident investigation time by 90%

• 4 Essential Elements for a Comprehensive Cloud Security Stack

• Dozens of Organizations Targeted by Akira Ransomware

• Microsoft Message Queuing Vulnerabilities Allow Remote Code Execution, DoS Attacks

• FraudGPT, a new malicious generative AI tool appears in the threat landscape

• Australian Home Affairs Leaks Sensitive Information Of Cybersecurity Survey Respondents

• Clear Skye IGA 5.0 optimizes identity security and business processes on ServiceNow

• DataGrail unveils Managed Services offering for data privacy

• MikroTik vulnerability could be used to hijack 900,000 routers (CVE-2023-30799)

• Talon Extension enhances security and control over browser activity

• Kubernetes and the Software Supply Chain

• Decoy Dog: New Breed of Malware Posing Serious Threats to Enterprise Networks

• Dozens Of Organizations Targeted By Akira Ransomware

• Crypto Bills To Face Congressional Committee Vote

• New AI Phishing Tool FraudGPT Tied To Same Group Behind WormGPT

• FraudGPT: A New Dark Side AI Tool For Cyber Criminals

• Thales Agrees to Buy App Security Vendor Imperva in $3.6B Deal

• Threat Intelligence Is Growing — Here’s How SOCs Can Keep Up

• Congress Is About To Stream UFO Hearings On YouTube At 10AM EST

• Cyclops raises $6.4M in seed funding to launch AI-powered cybersecurity search platform

• Protect AI raises $35M to expand its AI and machine learning security platform

• Code Execution Vulnerability Impacts 900k MikroTik Devices

• Russian Cybersecurity Firm Founder Jailed for 14 Years

• Webinar Today: Exposing Common Myths of OT Cybersecurity

• CardioComm, a provider of ECG monitoring devices, confirms cyberattack downed its services

• Protect AI raises $35M to build a suite of AI-defending tools

• Darktrace HEAL provides security teams with abilities to simulate real-world cyber incidents

• BreachRx Cyber RegScout helps legal and compliance professionals eliminate manual processe

• Rise of Bossware: Balancing Workplace Surveillance and Employee Privacy

• Trustmi lands $17M to scale its payments fraud prevention tech

• CISA adds Ivanti EPMM flaw to its Known Exploited Vulnerabilities catalog

• Norwegian Government`s System Breached over Ivanti EPMM Zero-Day

• Microsoft Signals Heavy AI Spending, Amid Healthy FY23 Results

• Dynatrace expands Davis AI engine to boost productivity across teams

• Critical MikroTik RouterOS Flaw Exposes 900,000 Systems to Cyber Attacks

• CISO Conversations: Field CISOs From VMware Carbon Black and NetSPI

• Twitter Scammers Stole $1,000 From My Friend—So I Hunted Them Down

• Fenix Cybercrime Group Poses as Tax Authorities to Target Latin American Users

• The Alarming Rise of Infostealers: How to Detect this Silent Threat

• Backdoor in TETRA Police Radios

• Ransomware Attacks Skyrocket in Q2 2023

• Norway government ministries hit by cyber attack

• New AI Tool ‘FraudGPT’ Emerges, Tailored for Sophisticated Attacks

• Over 500K MikroTik RouterOS systems potentially exposed to hacking due to critical flaw

• Meta, Microsoft Own Trademarks For New Twitter Name

• Checklist: Securing Digital Information

• Learn How to Protect Your Business With Ultimate Security for $80

• Education Sector Has Highest Ransomware Victim Count

• Yamaha Confirms Cyber Attack on Its Canadian Division

• New Vulnerability Puts 926,000 MikroTik Routers at Risk! Users Urged to Patch

• Ambulance patient records system hauled offline for cyber-attack probe

• Dear all! What are some common subject lines in phishing emails?

• Enhanced Data Analysis with Synthetic Datasets

• Understanding Machine Learning Attacks, Techniques, and Defenses

• Over 900,000 MikroTik Routers Exposed to Critical Bug

• Industry Coalition Calls For Enhanced Network Resilience

• Transforming Your Phone into an Intercom: Harnessing Alexa’s Power for Seamless Communication

• Rust-based Realst Infostealer Targeting Apple macOS Users’ Cryptocurrency Wallets

• Why performing security testing on your products and systems is a good idea

• Sneaky Python package security fixes help no one – except miscreants

• Cyber Attack on Norway govt websites identified to Ivanti Security vulnerability

• What is an SSL stripping attack

• DarkSide Ransomware: Definition and Prevention Tips

• Ivanti plugs critical bug – but not before it was used against Norwegian government

• Critical MikroTik RouterOS Vulnerability Exposes Over Half a Million Devices to Hacking

• Overcoming the cybersecurity talent shortage with upskilling initiatives

• Enterprises should layer-up security to avoid legal repercussions

• Companies encounter months-long delays in filling critical security positions

• Zero trust rated as highly effective by businesses worldwide

• Product showcase: Stellar Toolkit for Exchange – Restore Exchange Database

• Mitigating generative A.I. risks: ‘Fight innovation with innovation,’ says identity security firm

• 2023-07-25 – IcedID (Bokbot) from wave of malspam on 2023-07-24

• Zenbleed: How the quest for CPU performance could put your passwords at risk

• i-PRO: How to Advance Cybersecurity with Secure Element & FIPS

• Tampa General Hospital half thwarts ransomware attack, but still loses patient data

• How to set up computer security for your parents

• Update now! Apple fixes several serious vulnerabilities

• Palo Alto Networks Secures Black Hat from Itself

• Atlassian addressed 3 flaws in Confluence and Bamboo products

• Why computer security advice is more confusing than it should be

• IT Security News Daily Summary 2023-07-25

• SiegedSec Hacktivist Claims to Strike NATO and Leak Sensitive Docs

• Apple patches exploited bugs in iPhones plus other holes

• Who and What is Behind the Malware Proxy Service SocksEscort?

• Decoy Dog Gets an Upgrade With New Persistence Features

• KnowBe4 Phishing Test Results Reveal Half of Top Malicious Email Subjects Are HR Related

• 50% of Zero Trust Programs Risk Failure According to PlainID Survey

• Why Computer Security Advice Is More Confusing Than It Should Be

• ChatGPT Has a Plug-In Problem

• What is Incident Response? Ultimate Guide + Templates

• Zero-Day Vulnerabilities Discovered in Global Emergency Services Communications Protocol

• FBI Seizure of Mastodon Server is a Wakeup Call to Fediverse Users and Hosts to Protect their Users

• Thoma Bravo sells Imperva to Thales Group for $3.6B

• VMware addressed an information disclosure flaw in VMware Tanzu Application Service for VMs and Isolation Segment

• Explainability of Machine Learning Models: Increasing Trust and Understanding in AI Systems

• Stay Vigilant: Google Docs Phishing Scams Spreading Rapidly

• Human Error: A Helping Hand for Cyber Criminals

• Webinar Tomorrow: Exposing Common Myths of OT Cybersecurity

• Ivanti EPMM zero-day vulnerability exploited in wild

• Lazarus APT Group Targets Windows IIS Web Servers to Distribute Malware

• Get 8 Months of Live Cyber Security Training for Under $500

• Ivanti Zero-Day Exploit Disrupts Norway’s Government Services

• ChatGPT Has a Plugin Problem

• How to build stronger security teams

• Cryptojacking: Understanding and defending against cloud compute resource abuse

• Database APIs: Benefits, Limitations, and When You Should Switch to Datasets

• 4 ways to avoid clicking malicious links that everyone online should know

• Maritime Cyberattack Database Launched by Dutch University

• Decoy Dog Malware Upgraded to Include New Features

• Essential Metrics to Boost Support for Your Cybersecurity Learning Program – Part 1

• Cybercrime as a Public Health Crisis

• Ransomware business model-What is it and how to break it?

• How to Leverage AWS Performance Efficiency Pillar

• TETRA Radio Standard Vulnerabilities Can Expose Military Comms, Industrial Systems

• Actively Exploited Apple Zero-Day Affects iPhone Kernel

• Groundbreaking Integration: Stellar Cyber Safeguards OT Environments Alongside IT

• North Korean Cyber Group Suspected in JumpCloud Breach

• Google limits internet access to employees to save them from Cyber Attacks

• Critical Flaws Found in Microsoft Message Queuing Service

• ZEDEDA improves application performance and security with Edge Application Services

• NETSCOUT introduces next generation Omnis Cyber Intelligence solution

• Zenbleed – AMD’s Zen2 Processor Flaw Allows Attackers to Steal Sensitive Data

• North Korean Nation-State Actors Exposed in JumpCloud Hack After OPSEC Blunder

• Open Source Software Supply Chain Attacks Spotted Targeting the Banking Sector

• Yoga Trainer Defrauded of Rs.94,998 in a Paytm Fraud

• 5 steps to approach BYOD compliance policies

• Panorays unveils cybersecurity enhancements for supply chains

• Lookout releases new endpoint agents to replace virtual private networks

• Dig Data Security Platform enhancements secure LLM architectures

• How Generative AI Affects Mobile Security

• Beyond ChatGPT: Organizations Must Protect Themselves Against the Power of AI

• AMD Zenbleed Chip Bug Leaks Secrets Fast And Easy

• Apple Patches Another Kernel Flaw Exploited In Operation Triangulation

• China-Backed Hackers Suspected In NetScaler RCE Attacks

• Ivanti Zero-Day Vuln Exploited In Attack On Norwegian Government

• Critical Vulnerabilities in AMI MegaRAC BMC Software

• Canadian Cybersecurity Head Warns of Surging AI-Powered Hacking and Disinformation

• Vulnerability Summary for the Week of July 17, 2023

• Combining EPP and EDR tools can boost your endpoint security

• Thales Acquiring Imperva From Thoma Bravo for $3.6 Billion

• Casbaneiro Banking Malware Goes Under the Radar with UAC Bypass Technique

• AMD CPU Vulnerability ‘Zenbleed’ Can Expose Sensitive Information

• UK Government Report Finds Cybersecurity Skills Gap Stagnant

• Ivanti zero-day exploited to target Norwegian government (CVE-2023-35078)

• OpenText Cloud Editions 23.3 helps customers interconnect and exchange insights across clouds

• How Memcyco Battles Brandjacking with a Multi-Layered Defense

• Hackers Use SMS Alerts to Install SpyNote Malware

• Zenbleed: New Flaw in AMD Zen 2 Processors Puts Encryption Keys and Passwords at Risk

• How MDR Helps Solve the Cybersecurity Talent Gap

• TETRA:BURST — 5 New Vulnerabilities Exposed in Widely Used Radio Communication System

• macOS Under Attack: Examining the Growing Threat and User Perspectives

• Ivanti rushes to patch zero-day used to breach Norway’s government

• Patch Tuesday July 2023 – Microsoft Publishes Bug Fixes for 142 Vulnerabilities [UPDATED]

• What Is Mobile Device Management? Role in Endpoint Security and Benefits

• Energy-Saving Heroes: Eco-Friendly Home Appliances for a Sustainable Future

• Traversing the Investment Landscape: The Vital Role of Venture Capitalists

• Critical Flaws Exposed Microsoft Message Queuing Service to DoS Attacks

• ‘SIM Swapper’ Pleads Guilty For Hacking Instagram User Accounts

• An Interview with Sarah Armstrong-Smith

• Critical Flaws Exposed Microsoft Message Queuing Service to DoS Attack

• How to Create a Custom Security & Threat Dashboard in Power BI

• ChatGPT Plugins Pose Security Risks

• Thales enters app security market with $3.6B Imperva acquisition

• Protect Your Data Like Your Reputation Depends On It (Because it Does)

• Silicon Insights: The State of MarTech: Part 2

• ‘SIM Swapper’ Pleads Guilty to Hacking into Instagram Users

• Sysdig Sage brings power of generative AI to cloud security with an LLM controller approach

• Hacker Claims to Have Stolen Sensitive Medical Records from Egypt’s Ministry of Health

• TETRA Communication Systems Vulnerabilities Expose Critical Infrastructure

• Worldcoin Holds Official Launch Amidst Crypto Crackdown

• 15 More Vulnerabilities Added to 2023 CWE Top 25 Most Dangerous Software

• Operation Geometrix Do Brasil

• Ivanti Zero-Day Vulnerability Exploited in Attack on Norwegian Government

• Deciphering the IBM Cost of a Data Breach Report: A Statistical Perspective for Business Leaders

• Decoding the PlainID Zero Trust Survey: Key Insights for Business Leaders

• Thales acquires Imperva for $3.6 billion

• Apple fixes exploited zero-day in all of its OSes (CVE-2023-38606)

• SoftBank In Deal With Symbiotic For AI-Powered Warehouses

• EU ‘Set For In-Depth Probe’ Of $20bn Adobe-Figma Buy

• Aussie Government Exposed Personal Info Via Security Report

• EU Agrees on Common Position for Cyber Resilience Act to Enhance Security of Digital Products

• How to Develop a Telemedicine Software in 2023

• ATT&CKing the Center for Internet Security

• CISO to BISO – What’s your next role?

• Ivanti Patches Zero-Day Bug Used in Norway Attacks

• Is the UK about to steal a lead in the AI race?

• Google Ordered To Pay $338.7m Over Chromecast Patents

• Tesla ‘Meeting With Indian Govt’ Over Car Plant

• Data Breach Costs Hit Record High but Fall For Some

• Network Encryption Keeps Our Data in Motion Secure for Business Services

• Need to improve the detection capabilities in your security products?

• China Looks To AI-Generated Hosts For Livestream Sales

• Apple addressed a new actively exploited zero-day tracked as CVE-2023-38606

• BookCrossing – 1,582,323 breached accounts

• Twelve Norwegian ministries were hacked using a zero-day vulnerability

• Converging networking and security with SASE

• Inspiring secure coding: Strategies to encourage developers’ continuous improvement

• Akira and BlackByte ransomware group claim attack on Yamaha Music Canada

• Apple Rolls Out Urgent Patches for Zero-Day Flaws Impacting iPhones, iPads and Macs

• Ivanti Releases Urgent Patch for EPMM Zero-Day Vulnerability Under Active Exploitation

• Atlassian Releases Patches for Critical Flaws in Confluence and Bamboo

• RaaS proliferation: 14 new ransomware groups target organizations worldwide

• Companies are rushing into generative AI without a cohesive, secure strategy

• Safeguarding the IoT Landscape With Data Masking Techniques

• Yes! OpenTelemetry Is a Critical Part of Securing Your Systems

• The Next Step: VHD Files and Metadata

• A week in security (July 17 – 23)

• Apple Patches Another Kernel Flaw Exploited in ‘Operation Triangulation’ Attacks

• Apple ships that recent “Rapid Response” spyware patch to everyone, fixes a second zero-day

• Tigo – 700,394 breached accounts

Generated on 2023-07-26 23:55:31.113527