IT Security News Daily Summary 2023-07-28

• OpenAI, Microsoft, Google, Anthropic Launch Frontier Model Forum to Promote Safe AI

• Friday Squid Blogging: Zaqistan Flag

• Choose the Best Biometrics Authentication for Your Use Case

• Senator Blasts Microsoft for Negligence in 365 Email Breach

• Stark#Mule Malware Campaign Targets Koreans, Uses US Army Documents

• CherryBlos Malware Uses OCR to Pluck Android Users’ Cryptocurrency

• Hack Crew Responsible for Stolen Data, NATO Investigates Claims

• A Successful IGA Deployment is a Journey, Not a Destination

• Zimbra Patched An XSS Zero-Day Vulnerability Under Active Attack

• Android’s new ‘unknown tracker alerts’ can help warn users of rogue Apple AirTags

• FBI boss: Congress must renew Section 702 spy powers – that’s how we get nearly all our cyber intel

• Chinese companies evade sanctions, fuel Moscow’s war on Ukraine, says report

• HackerOne: How Artificial Intelligence Is Changing Cyber Threats and Ethical Hacking

• Another AI Pitfall: Digital Mirroring Opens New Cyberattack Vector

• Government Needs Both the Ability to Talk to Social Media Platforms and Clear Limits, EFF Argues in Brief to Appellate Court

• Malvertising Attack Drops BlackCat Ransomware via Fake Search Results

• Improve IAM with identity threat detection and response

• Intersection of generative AI, cybersecurity and digital trust

• How to Prioritize Vulnerabilities Effectively: Vulnerability Prioritization Explained

• DNS Protection: A Must-Have Defense Against Cyber Attacks

• ‘Verified human’: Worldcoin Users Crowd for Iris Scans

• national identity card

• Incident Response Plan: What It Is and How to Build One

• Hackers Attack Apache Tomcat Servers to Deploy Malware

• In Other News: Data Breach Cost Rises, Russia Targets Diplomats, Tracker Alerts in Android

• US, Australia Issue Warning Over Access Control Vulnerabilities in Web Applications

• UK MoD Error Sends Emails to Russia’s Ally Instead of US

• Programme for International Cyber Expo’s Global Cyber Summit 2023 Announced

• Hacker Using Google and Bing ads to Deliver Weaponized IT tools

• The best AirTag wallets of 2023: Secure your cash

• New Study Reveals Forged Certificate Attack Risks

• MOVEit latest: US Government services provider Maximus hit

• Challenge Arising From the ChatGPT Plugin

• ChatGPT boss wants to scan eyeballs of billions amid AI privacy concerns

• 40% of Ubuntu Cloud Workloads Vulnerable to Exploits

• What is Managed Detection and Response (MDR)? Benefits & Capabilities

• 40,000 HRM Enterprises Clients Had Their Credit Card Information Stolen Following Cyberattack

• Zenbleed: Security Flaw Steals Data from AMD Zen 2 CPUs

• Corporate Data Heist: Infostealer Malware Swipes 400,000 Credentials in a Record Breach

• SentinelOne unveils cloud data security products for Amazon S3, NetApp

• Industry Reactions to New SEC Cyber Incident Disclosure Rules: Feedback Friday

• Exploitation of Recent Citrix ShareFile RCE Vulnerability Begins

• Microsoft Accused of Negligence in Recent Email Compromise

• Employees are Feeding Sensitive Data to ChatGPT, Prompting Security Concerns

• Crypto Fraud Prevention and E-commerce Fraud Detection: Safeguarding the Digital Economy

• compliance audit

• IT Ops and Security Teams Need Automation, Not Couples Therapy

• IcedID Malware Adapts and Expands Threat with Updated BackConnect Module

• NATO Probes Hacktivist Crew’s Boasts Of Stolen Data

• MOVEit Bug Tied To Breach Of Up To 11M Records Via Govt Contractor

• US Senator Blasts Microsoft For Negligent Cybersecurity Practices

• Exploitation Of Recent Citrix ShareFile RCE Vulnerability Begins

• STARK#MULE Targets Koreans with U.S. Military-themed Document Lures

• Baffle Advanced Encryption analyzes regulated data while meeting all compliance standards

• Zimbra Patches Exploited Zero-Day Vulnerability

• Australia and US Issue Warning About Web App Threats

• Cyclops Launches From Stealth With Generative AI-Based Search Tool

• Citrix expands cloud and on-premises capabilities to support the needs of hybrid customers

• Mark Zuckerberg Admits More Than Half Of Users Have Left Threads

• Evolving Data Strategy at Major Canadian Bank

• The rise of malicious Chrome extensions targeting Latin America

• Hackers Abusing Windows Search Feature to Install Remote Access Trojans

• A Data Exfiltration Attack Scenario: The Porsche Experience

• What Is Secure Remote Access?

• Data Leak Exposes 572 GB of Student, Faculty Info from Accreditation Org

• Cyber insurance audit: Painful necessity, or a valuable opportunity?

• New Zenbleed Attack Threatens AMD Zen2 CPUs – Patch released

• AMD To Invest $400m In India Over Five Years

• Weintek Weincloud Vulnerabilities Allowed Manipulation, Damaging of ICS Devices

• CoinsPaid Blames North Korean Hackers for $37 Million Cryptocurrency Heist

• WhatsApp’s New Record Feature Lets You Record And Send Short Videos In Chats

• Dark Power Ransomware Abusing Vulnerable Dynamic-Link Libraries in Resolved API Flow

• U.S. Government Contractor Maximus Hit by Massive Data Breach

• The Road to Redemption: Ransomware Recovery Strategies for Businesses

• Campaign Finance Charge Against FTX’s Sam Bankman-Fried Dropped

• CoinsPaid blames North Korea-linked APT Lazarus for theft of $37M worth of cryptocurrency

• BlueBravo Deploys GraphicalProton Backdoor Against European Diplomatic Entities

• Anomaly detection in certificate-based TGT requests

• The lost art of cloud application engineering

• SSNDOB Marketplace Admin Pleads Guilty

• Related CherryBlos and FakeTrade Android Malware Involved in Scam Campaigns

• North Korean Hackers Bag Another $100m in Crypto Heists

• MOVEit Campaign Claims Millions More Victims

• Monitor Insider Threats but Build Trust First

• Data Loss Prevention for Small and Medium-Sized Businesses

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Microsoft and Samsung launch Advanced Mobile Security Solution

• How to Spot Whaling Attacks: Safeguarding Against Targeted Cyber Threats

• Akira Ransomware Expands to Linux with In-built Tor Website

• Cybersecurity Agencies Warn Against IDOR Bugs Exploited for Data Breaches

• Major Security Flaw Discovered in Metabase BI Software – Urgent Update Required

• New infosec products of the week: July 28, 2023

• ZTNA can be more than a VPN replacement for application access

• Effectively managing security budgets in a recession

• Get the AT&T Cybersecurity InsightsTM Report: Focus on Healthcare

• National Cyber Strategy Implementation Plan: What you need to know

• Blocking access to ChatGPT is a short term solution to mitigate risk

• CISOs consider zero trust a hot security ticket

• Credit Card Fraud Prevention: 12 Tips to Protect Yourself

• Cybersecurity in the Age of Remote Work: Best Practices for Businesses

• New SEC Rules Require Breach Disclosure within Four Days

• Enhance Productivity with Canon’s New B&W All-in-One Laser Printers

• Google: 41 zero-day vulnerabilities exploited in 2022

• Why CISOs Should Get Involved With Cyber Insurance Negotiation

• Patch now! Ivanti Endpoint Manager Mobile Authentication vulnerability used in the wild

• Funding for Cybersecurity Startups Plunges – But Some Still Get Deals

• How to connect with Microsoft Security at Black Hat USA 2023

• How scammers used SEO to disguise themselves as an electric utility

• NATO probes hacktivist crew’s boasts of stolen portal data

• Cl0p Ransomware Strikes Deloitte, Company Refutes Breach

• Despite Post-Log4J Security Gains, Developers Can Still Improve

• US, Australia cyber agencies warn IDOR security flaws can be exploited ‘at scale’

• Zimbra fixed actively exploited zero-day CVE-2023-38750 in ZCS

• How researchers broke ChatGPT and what it could mean for future AI development

• CompTIA ChannelCon Technology Vendor Fair Highlights Tech Solutions

• 7 in 10 MSPs Name Data Security and Network Security As Their Top IT Priorities for 2023

• Healthcare files of 8M-plus people fall into hands of Clop via MOVEit mega-bug

• IT Security News Daily Summary 2023-07-27

• Millions of People Affected in MOVEit Attack on US Gov’t Vendor

• Ryanair Hit With Lawsuit Over Use of Facial Recognition Technology

• Deloitte, Maximus, Chuck E. Cheese join 500+ orgs as MOVEit attack victims

• Can AI detectors save us from ChatGPT? I tried 5 online tools to find out

• The NSA Is Lobbying Congress to Save a Phone Surveillance ‘Loophole’

• How a Cyber Security Platform Addresses the 3 “S”

• US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’

• Vulnerabilities exposed Peloton treadmills to malware and DoS attacks

• Deloitte and Chuck E. Cheese join 500+ orgs as MOVEit victims

• Microsoft responsible for China’s U.S. government email hack, Senator Wyden says

• BlueHat October 2023 Call for Papers is Now Open!

• Benefits of hiring a Java web application development company

• 7 Best Cloud Security Posture Management (CSPM) Software for 2023

• Group-IB Co-Founder Sentenced to 14 Years in Russian Penal Colony

• Deja Vu: The FBI Proves Again it Can’t be Trusted with Section 702

• Think tank calls for monitoring of Chinese AI-enabled products

• Bipartisan Bill Seeks New US Tech Regulator

• Israeli-Trained Azerbaijan Cyber Students Mark Inaugural Graduation

• Laptops will need to support growing AI and security priorities, says Lenovo

• S3 Ep145: Bugs With Impressive Names!

• DepositFiles exposed config file, jeopardizing user security

• Maryland Supreme Court: Police Can’t Search Digital Data When Users Revoke Consent

• What Happens When an AI Company Falls Victim to a Software Supply Chain Vulnerability

• Ubuntu Linux Cloud Workloads Face Rampant Root Take Takeovers

• What Will CISA’s Secure Software Development Attestation Form Mean?

• The Ups and Downs of 0-days: A Year in Review of 0-days Exploited In-the-Wild in 2022

• What your peers want to know before buying a DLP tool

• The human element of Cybersecurity: Nurturing a cyber-aware culture to defend against social engineering attacks

• EU Investigates Microsoft Over Teams Bundling With Office

• Security Incident Impacts CardioComm’s Operations

• Group-IB CEO Ilya Sachkov sentenced to 14 years in a strict prison colony

• Critical Privilege Escalation Flaw Risks 900K+ MikroTik Routers

• Microsoft Message Queuing Service Flaw Allows DoS and RCE Attacks

• Multiple Security Issues Identified in Peloton Fitness Equipment

• Watch Now: Exposing Common Myths of OT Cybersecurity

• TSA Updates Pipeline Cybersecurity Requirements

• Head of US Cybersecurity Agency Sees Progress on Election Security, With More Work Needed for 2024

• European Threat Intelligence Firm QuoIntelligence Raises $5.5 Million in Seed Funding

• China’s Wuhan Earthquake Center Suffers Cyber-Attack

• High Severity Vulnerabilities Discovered in Ninja Forms Plugin

• Android will now warn about unknown Bluetooth trackers, like AirTag, traveling with you

• Seraphic extends enterprise browser security to collaboration apps

• Palo Alto Networks unveils CI/CD Security module to improve risk prevention

• US SEC makes it mandatory to report cyber attack within 4 days

• Samsung Extends Chip Production Cuts After $7 Billion Loss

• Iranian Stalkerware ‘Spyhide’ Steals Data from 60,000 Android Devices

• The best home security systems of 2023: Ring, Simplisafe, and more compared

• The best home automation systems of 2023

• “Mysterious Elephant” Emerges, Kaspersky Reports

• Wormhole digs out of its hole with new security measures to move on from $320M hack

• Microsoft must be held responsible for China’s U.S. government email hack, Senator Wyden demands

• Singapore Explores Generative AI Use Cases Through Sandbox Options

• Stolen Session Cookies Turns Into the Next Cyber Threat

• Exposed Secrets: Backdoor Vulnerabilities in Worldwide Radio Systems

• SolarWinds Platform 2023.3 Released – What’s New!

• SEC requires reporting cyberattacks within 4 days, but not everyone may like it.

• 4 Most Dangerous and Destructive Ransomware Groups of 2023

• Two New Vulnerabilities Could affect 40% of Ubuntu Cloud Workloads

• The Good, the Bad and the Ugly of Generative AI

• SkyKick Cloud Management Platform upgrades enhance data protection capabilities

• Island appoints Steve Tchejeyan as President

• N2WS Backup and Recovery enhancements strengthen AWS workload protection

• Notorious Lazarus Hacking Outfit Linked to a $60 Million Alphapo Crypto Theft

• Explaining risk maturity models and how they work

• Why Today’s CISOs Must Embrace Change

• New Malvertising Campaign Distributing Trojanized IT Tools via Google and Bing Search Ads

• GameOver(lay): Two Severe Linux Vulnerabilities Impact 40% of Ubuntu Users

• Hackers are infecting Call of Duty players with a self-spreading malware

• Two New Vulnerabilities Could Affect 40% Of Ubuntu Cloud Workloads

• Axis Door Controller Vulnerability Exposes Facilities to Threats

• Infostealer Incidents More Than Doubled In Q1 2023

• The UFO Hearing Got Pretty Interesting

• Russia Throws Group-IB Founder In The Clink For Treason

• Top 7 ecommerce cybersecurity threats and tips to avoid them

• PDF Malware Distribution Has Increased by 500%, as Reported by VirusTotal

• How credential stuffing works (and how to stop it)

• Decentralized Identity Puts People In Control Of Their Data

• Cyberattack Investigation Shuts Down Ambulance Patient Records System

• Insights from the cybersecurity trenches: Security is essential as a defensive strategy, but it’s also good for business

• Settling for the bare minimum is jeopardising your business’ cyber safety

• AXIS A1001 Network Door Controller Flaw Exposes Secure Facilities

• Axis Door Controller Vulnerability Exposes Facilities to Physical, Cyber Threats

• CardioComm Takes Systems Offline Following Cyberattack

• Egnyte’s AI-powered solutions empower users to classify and protect sensitive data

• AXIS A1001 System Flaws Expose Secure Facilities to Unauthorized Access

• US government contractor says MOVEit hackers accessed health data of ‘at least’ 8 million individuals

• The Future of Web Development: Predictions and Possibilities

• Up to 11 Million People Hit by MOVEit Hack at Government Services Firm Maximus

• OpenAI, Microsoft, Google and Anthropic Form Body to Regulate AI

• The 4 Keys to Building Cloud Security Programs That Can Actually Shift Left

• Takeaways From Perception Point’s “H1 2023 Report: Cybersecurity Trends & Insights”

• Protect AI raises $35 million to help organizations build safer AI

• Harnessing Technology For Research In Essay Writing

• The Next Evolution of Devsecops For The Defense Department

• Cyberattack Impacts Two Ambulance Services

• Fooling an AI Article Writer

• Over 40% of Ubuntu Users Vulnerable to Privilege Escalation Flaw

• Group-IB Co-Founder Sentenced to 14 Years in Russian Prison for Alleged High Treason

• Hackers Target Apache Tomcat Servers for Mirai Botnet and Crypto Mining

• Ivanti Mobile Management Software Zero-Day Under Active Attack

• Fake Games Deliver Redline, Realst Malware On Windows and Mac

• Facebook Parent Meta Profits From Advertising Increase

• Companies Required by SEC to Disclose Cybersecurity Incidents in 4 Days

• APT trends report Q2 2023

• Is a Chat GP Coming?

• Tripwire Enterprise: Reimagining a Winning Product

• NCSC Publishes New Guidance on Shadow IT

• Dear all, What are some common subject lines in phishing emails?

• Gathering dust and data: How robotic vacuums can spy on you.

• Supply Chain Attack Hits NHS Ambulance Trusts

• SEC Wants Cyber-Incident Disclosure Within Four Days

• Do you know what your supply chain is and if it is secure?

• Rust Infostealer Malware Attacks macOS Sonoma Ahead of Public Release

• New SEC Rules Require U.S. Companies to Reveal Cyber Attacks Within 4 Days

• Thales partners with Hint AG to provide managed security services for the Swiss healthcare sector

• Two flaws in Linux Ubuntu affect 40% of Ubuntu users

• How to migrate your Bitwarden vaults from US to EU storage

• Hacker-Attacking Developers Using Weaponized MS Visual Studio

• Are we getting close to the mass adoption of digital IDs?

• Data Security firm Imperva to be acquired by Thales for $3.5 billion

• Key factors for effective security automation

• Why are computer security guidelines so confusing?

• A step-by-step guide for patching software vulnerabilities

• Cryptojacking soars as cyberattacks increase, diversify

• UAC: Live response collection script for incident response

• CISOs gear up to combat the rising threat of B2B fraud

• User Awareness Training: A Critical Component to Collaboration Tool Security

• Companies Must Have Corporate Cybersecurity Experts, SEC Says

• Thoughts on Tool Features

• Wiz Says 62% of AWS Environments Exposed to Zenbleed Exploitation

• Ransomware groups claim responsibility for double-attack on Yamaha

• 60,000 Androids have stalkerware-type app Spyhide installed

• Crooks pwned your servers? You’ve got four days to tell us, SEC tells public companies

Generated on 2023-07-28 23:55:31.481304