IT Security News Daily Summary 2023-08-03

• New AI Threats Emerge as FraudGPT Creator Unleashes DarkBERT and DarkBART

• Russia’s Cozy Bear is back and hitting Microsoft Teams to phish top targets

• SOC 2 (System and Organization Controls 2)

• Risk & Repeat: Microsoft takes heat over Storm-0588 attacks

• MoveIt Transfer attacks dominate July ransomware disclosures

• Qualys Announces First-Party Software Risk Management Solution

• Tromzo secures $8M to lead the charge in AI-powered application security posture management

• SolarWinds Next-Generation Build System Aligns with NIST SSDF

• Cybersecurity: How Can Companies Benefit From FBI and Homeland Security Collaboration?

• Could C2PA Cryptography be the Key to Fighting AI-Driven Misinformation?

• Center for Cyber Safety and Education Awards $174K in Cybersecurity Scholarships

• Vulcan Cyber Attack Path Graph Targets Cloud-Scale Risk Prioritization and Mitigation

• Mission Secure, Idaho National Laboratory Announce Partnership to Protect Critical Infrastructure

• Decommissioned medical infusion pumps sold on secondary market could reveal Wi-Fi configuration settings

• Tromzo secures $8M to lead the charge in AI-powered cloud security solutions

• Risk appetite vs. risk tolerance: How are they different?

• Free Airline Miles, Hotel Points, and User Data Put at Risk by Flaws in Points Platform

• Old-school hacktivism is back because it never went away

• Bringing threat intelligence and adversary insights to the forefront: X-Force Research Hub

• Datadog launches AI helper Bits and new model monitoring solution

• S3 Ep146: Tell us about that breach! (If you want to.)

• China To Limit Time Kids Use Smartphones

• Operation Narsil INTERPOL Busts Decade-Old Child Abuse Network

• TPG Acquires Forcepoint Government & CI (G2CI) Business for $2.45B

• Insider Threat Protection And Modern DLP

• Arc Browser Review (2023): Pricing, Features, Alternatives and More

• Companies Should Implement ROI-Driven Cybersecurity Budgets, Expert Says

• Hacktivist Group ‘Mysterious Team Bangladesh’ Goes on DDoS Rampage

• Microsoft Bug Bounty Program Year in Review: $13.8M in Rewards

• Cisco announces general availability of XDR platform

• World Cup Glory Looms, and So Do Cyber Threats, Microsoft Warns

• Cult of the Dead Cow Hacktivists Give Life to ‘Privacy-First’ App Framework

• Openreach Saves £10m, Extends FTTP Rollout Via ‘Subtended Headends’

• Data breaches grow nearly three times, with US accounts most compromised

• 670 ICS Vulnerabilities Disclosed by CISA in First Half of 2023: Analysis

• Jericho Security Raises $3 Million for Awareness Training Powered by Generative AI

• How to Prevent Cross-Site Scripting (XSS) Attacks

• Exclusive: CISA Sounds the Alarm on UEFI Security

• As Artificial Intelligence Accelerates, Cybercrime Innovates

• Malicious Apps Use Sneaky Versioning Technique to Bypass Google Play Store Scanners

• Data Leak from Far-Right Forum Poast Reveals Daycare Owner with Nazi Avatar

• What Is Global Privacy Control (GPC), and how can it help you protect your data?

• Protecting energy infrastructure from cyberattacks

• Researchers Leverage ChatGPT to Expose Notorious macOS Malware

• Hacktivist Collective “Mysterious Team Bangladesh” Revealed

• Security Concerns Escalate as Unsafe VPNs Pose Major Threat to Businesses

• Hackers using Flipper Zero to Cyber Attack Power Grids

• Ebooks are cheap, but you might pay in other ways

• Jericho Security uses AI to fight AI in new frontier of cybersecurity

• Cisco Talos Discusses Flaws in SOHO Routers Post-VPNFilter

• Russia’s ‘Midnight Blizzard’ Hackers Launch Flurry of Microsoft Teams Attacks

• Report: Possible Chinese Malware in US Systems a ‘Ticking Time Bomb’

• ‘Room-Temperature Superconductor Claim Triggers Investigation

• CISA Guide to Network and System Administrators to Harden Cisco Firewalls

• Microsoft Teams Targeted in Midnight Blizzard Phishing Attacks

• Hundreds of Citrix NetScaler ADC and Gateway Servers Hacked in Major Cyber Attack

• New Version of Rilide Data Theft Malware Adapts to Chrome Extension Manifest V3

• RFP Template for Browser Security

• Top 3 CISO concerns for 2023

• Qualys unveils first-party software risk management solution

• Contrast Security helps organizations identify susceptible data flows to their LLMs

• Empowering the User: An Interview with Guy Guzner on SAVVY’s User-Centric Security Solution

• HackerOne Lays off 12% of Its Employees as a One-Time Event

• DevSecOps: Enhancing Security With Vulnerability Scanning of Images and Source Code in CI/CD

• Decommissioned Medical Infusion Pumps Expose Wi-Fi Configuration Data

• These Are the Top Five Cloud Security Risks, Qualys Says

• Dozens of RCE Vulnerabilities Impact Milesight Industrial Router

• Germany Admits Investigating Worldcoin’s Eye-Scanning Orb

• AI Experts Unearth Infinite ways to Bypass Bard and ChatGPT’s Safety Measures

• Virtual Data Rooms: The Key to Successful IPO Preparation and Investor Relations

• Microsoft Identifies Russia-Based Hackers For Teams Phishing Attacks

• All CISOs should know this about cloud network security

• Facebook Caves And Will Now Seek User Consent Before Collecting Data

• Piles of Unpatched IoT, OT Devices Attract ICS Cyberattacks

• Dasera Mesa Verde protects sensitive information across diverse data environments

• CISO Global enhances Argo platform to improve real-time security decision making

• Unprecedented Data Breach: Millions Impacted by Personal Information Theft via Website Error

• Was the digital transformation worth it, security-wise?

• LogRhythm vs Splunk (2023): SIEM tool comparison

• How to Create an Effective GRC Program: 3 Phases

• Researchers jailbreak a Tesla to get free in-car feature upgrades

• Endor Labs, which helps companies secure their open source packages, raises $70M

• The Technology Behind Fair Gambling: Ensuring Transparency and Integrity

• Penetration Testing: A Comprehensive Guide

• A Penetration Testing Buyer’s Guide for IT Security Teams

• Russia-backed hackers used Microsoft Teams to breach government agencies

• Orange and Palo Alto Networks Deliver Cloud-Native Managed SASE

• Cult Of The Dead Cow Is Trying To Release A New Encryption Protocol

• Microsoft Says Russian Govt Hackers Behind Teams Phishing Attacks

• Salesforce Email Service Zero-Day Exploited In Phishing Campaign

• MS Comes Under Criticism For Grossly Irresponsible Security

• These Are The Top Five Cloud Security Risks, Qualys Says

• Endor Labs raises $70 million to expand into other areas of code and pipeline security

• Russian APT phished government employees via Microsoft Teams

• Onyxia’s CPM platform enables CISOs to optimize their security programs

• Lineaje BOMbots remediate security issues using generative AI

• Beware of Fake FlipperZero Sites That Promise Free Device Offer

• Cyber-Attacks Targeting Government Agencies Increase 40%

• Midnight Blizzard conducts targeted social engineering over Microsoft Teams

• Menlo Leverages Advanced Technology to Combat Surging Browser Threats

• OWASP Top 10 for LLM (Large Language Model) applications is out!

• X Sued By AFP, Twitter Sues Hate Watchdog

• Social Media Marketing with Residential Proxies: Things You Must Know

• Torq Socrates delivers automated contextual alert triaging, incident investigation, and response

• Russian Midnight Blizzard Hackers Hit MS Teams in Precision Attack

• The Role of Continuous Testing in Delivering Quality Digital Experiences

• How Malicious Android Apps Slip Into Disguise

• Humans Unable to Reliably Detect Deepfake Speech

• Fake Android App Enables Hackers to Steal Signal and WhatsApp User Data

• Hackers Abuse AWS SSM Agent to Perform Various Malicious Activities

• Cybersecurity M&A Roundup: 42 Deals Announced in July 2023

• Deloitte and Palo Alto Networks help clients increase operational efficiency with new SSDL offering

• Ivanti discloses another vulnerability in MobileIron Core (CVE-2023-35082)

• “Mysterious Team Bangladesh” Targeting India with DDoS Attacks and Data Breaches

• Microsoft Flags Growing Cybersecurity Concerns for Major Sporting Events

• Cloud Key Management Solution for Azure, Azure Stack and M365

• Ransomware on manufacturing industry caused $46bn in losses

• Managed Security Service Providers (MSSPs) on the Rise. A Vendor’s View on Current Landscape & Future Trends

• June 2023 Cyber Attacks Statistics

• US Starts Probe Of Alleged China Hack Of Federal Emails

• Salesforce Email Service Zero-Day Exploited in Phishing Campaign

• Google Awards Over $60,000 for V8 Vulnerabilities Patched With Chrome 115 Update

• Uncover Your Cybersecurity Blind Spots

• What’s happening in the world of crimeware: Emotet, DarkGate and LokiBot

• Silicon Insights: The State of MarTech: Part 2 Podcast

• Silicon Insights: The State of MarTech: Part 1 Podcast

• Cocaine Smugglers that Posed as PC Sellers Jailed

• Rapid7 found a bypass for the recently patched actively exploited Ivanti EPMM bug

• Brit healthcare body rapped for WhatsApp chat sharing patient data

• Is secure-by-default an achievable reality?

• Hundreds of Citrix Endpoints Compromised With Webshells

• Cool, Aesthetic, Good & Unique Twitter Username – Stand Out in Style

• Ivanti Patches Yet Another Critical Flaw

• Russian APT29 conducts phishing attacks through Microsoft Teams

• Software Supply Chain Startup Endor Labs Scores Massive $70M Series A Round

• Manufacturing Sector Reeling From Financial Costs of Ransomware

• 7 fake cryptocurrency investment apps discovered in Google Play, Apple App Store

• How to Login to GoDaddy Account – 3 Popular Methods

• Prepare for plenty more pain from Ivanti’s MDM flaws, warn cyber agencies

• Do you know what your supply chain is and if it is secure?

• Hackers targeting air-gapped devices in Eastern Europe with new malware

• Ongoing Attacks: Over 600+ Citrix Servers Compromised to Install Web Shells

• Endor Labs raises $70M to ease application security, streamline developer productivity

• Microsoft Exposes Russian Hackers’ Sneaky Phishing Tactics via Microsoft Teams Chats

• 7 Container Security Best Practices For Better Apps

• Google’s AI Red Team: Advancing cybersecurity on the AI frontier

• Cisco Introduces Automated Ransomware Recovery Solution for Enhanced Cybersecurity

• White House Announced the National Cybersecurity Strategy Implementation Plan

• Researchers Discover Bypass for Recently Patched Critical Ivanti EPMM Vulnerability

• SCARF cipher sets new standards in protecting sensitive data

• How local governments can combat cybercrime

• Assess multi-cloud security with the open-source CNAPPgoat project

• Ransomware business model-What is it and how to break it?

• Organizations want stronger AI regulation amid growing concerns

• CISOs Leading Cyber Risk Engagement with C-Suite & Board

• Performance and security clash yet again in “Collide+Power” attack

• MagicDuel – 138,443 breached accounts

• Ivanti patches second zero-day vulnerability being used in attacks

• Minecraft fans beware: Players and servers at risk from BleedingPipe vulnerability

• CISOs Need Backing to Take Charge of Security

• What is Advanced Persistent Cyber Threat Hunting, and why is it important?

• Russian APT ‘BlueCharlie’ Swaps Infrastructure to Evade Detection

• Events Ripper Updates

• Facebook Apparently Will Ask for Consent Before Showing Behavioral Ads to Some Users

• Microsoft Catches Russian Government Hackers Phishing with Teams Chat App

• Menlo Security Establishes Browser Security With AI-Powered Phishing and Ransomware Protection

• Building a Resilient Cyber Team

• IT Security News Daily Summary 2023-08-02

• Still No Death Star In Sight

• Tanium Selected by DHS CISA to Join the Joint Cyber Defense Collaborative

• Guardio Uncovers Zero-Day Vulnerability in Salesforce’s Email Services

• BeyondTrust’s Identity Security Insights Provides Unprecedented Visibility into Identity Threats

• HackerOne lays off 12% workforce as ‘one-time event’

• Hackers already installed web shells on 581 Citrix servers in CVE-2023-3519 attacks

• A Clear Road To Net Zero – Tackling Data Centre Sustainability Myths

• Global Optical Sensor Market to Reach $45.56B by 2030, Rising Demand in Consumer Electronics and IoT Applications

• SynSaber and ICS Advisory Project Identify Vulnerability Trends Within The Critical Infrastructure Sector

• Solvo Unveils SecurityGenie: A Revolutionary ChatGPT-Like Solution for Cloud Security Teams

• Instagram Flags AI-Generated Content

• VALIC Retirement Services Company Experiences PBI Data Breach Exposing Approximately 798,000 Social Security Numbers

• The best security cameras of 2023: Expert reviewed

• Zero-day in Salesforce email services exploited in targeted Facebook phishing campaign

• Tesla Investigated Over Steering Problems

• Torq launches Torq Socrates, an AI agent for Tier-1 SecOps threat resolution

• Iranian Company Plays Host to Reams of Ransomware, APT Groups

• Shield and Visibility Solutions Target Phishing From Inside the Browser

• Hot Topic Apparel Brand Faces Credential-Stuffing Attack

• Iran’s APT34 Hits UAE With Supply Chain Attack

• Mondee security lapse exposed flight itineraries and unencrypted credit card numbers

• Tech Consolidation – How and When?

• Impact of Freenom halting registrations on cybercrime

• NodeStealer 2.0 Poses as ‘Microsoft’ to Hack Facebook and Browser Data

• How To Approach Dependency Management in Java [Video]

• UN Cybercrime Convention Negotiations Enter Final Phase With Troubling Surveillance Powers Still on the Table

• Amazon Clinic Rolls Out Across US, As Healthcare Push Continues

• Cyber-Insurance Underwriting Is Still Stuck in the Dark Ages

• The State Of Cybersecurity – Outlook And Challenges For 2023 And Beyond

• Emerging Cybersecurity Threat: How Google AMP Phishing Attacks Are Bypassing Email Security Measures

• AI-Powered CryptoRom Scam Targets Mobile Users

• Burger King forgets to put a password on their systems, again

• Safeguarding Against Pharming Cyber Attacks: Tips for Enhanced Security

• BT Appoints Allison Kirkby As Carrier’s First Female CEO

• jQuery vs. Angular: Common Differences You Must Know

• Threat Actors Use AWS SSM Agent as a Remote Access Trojan

• Keeper empowers cybersecurity advocates with new Influencer Programme

• Care Bears and Open Campus Launch Educational Games on Climate Change

• Users of Facebook for Business are the Target of a New Phishing Attack

• Researchers Uncovered a New Flaw in ChatGPT to Turn Them Evil

• Cloud Firm Under Scrutiny For Suspected Support of APT Operations

• It’s A Hot 0-Day Summer For Apple, Google, And Microsoft Security Fixes

• Nearly All Modern CPUs Leak Data To New Collide+Power Side Channel Attack

• Wi-Fi Vuln In Canon Inkjet Printers May Expose User Information

• Firefox 116 Patches High Severity Vulnerabilities

• New hVNC macOS Malware Advertised On Hacker Forum

• Traceable AI combats API abuse with digital fraud prevention capabilities

• Salesforce and Meta suffer phishing campaign that evades typical detection methods

• Sonar’s new deep-analysis capability discovers and fixes code security issues

• Eyes on IDOR Vulnerabilities! US and Australia Release Joint Advisory

• White House Panel Recommends Restricting the FBI’s Access to spy Data

• Designers Still Have an Opportunity to Get AI Right

• Royal Mail Begins UK’s First Drone Delivery Postal Service

• Beware! Hacker-Sold macOS HVNC Tool Allows Complete Takeover

• Cyble Raises $24 Million for AI-Powered Threat Intelligence Platform

• New hVNC macOS Malware Advertised on Hacker Forum

• Russian Cyber Adversary BlueCharlie Alters Infrastructure in Response to Disclosures

• The generative A.I. battle between companies and hackers is starting

• Here’s How Microsoft Fought Against Ireland’s HSE Attackers

• Bad Hygiene: New Study Uncovers Common Security Failures of Cloud-First Organizations

• SSH Remains Most Targeted Service in Cado’s Cloud Threat Report

• Review of Recent NPM-Based Vulnerabilities

• Tesla Jailbreak Unlocks Theft of In-Car Paid Features

• Blocking Access to AI Apps is a Short-term Solution to Mitigate Safety Risk

• The BleedingPipe RCE Exploit Presents Minecraft With a New Security Challenge

• Utilities Face Security Challenges as They Embrace Data in New Ways

• Phishers Exploit Salesforce’s Email Services Zero-Day in Targeted Facebook Campaign

• Industrial Control Systems Vulnerabilities Soar: Over One-Third Unpatched in 2023

• US, Norway say hackers have been exploiting Ivanti zero-day since April

• PrivacyHawk Privacy Score enables users to understand their privacy and data risk

• Cyble raises $24 million to enhance its AI-driven security solutions

• Attackers can turn AWS SSM agents into remote access trojans

• Armis partners with Security Risk Advisors to protect cyber physical systems

• Melton Littlepage joins 1Password as CMO

• Best Health and Nutrition Apps to Kickstart Your Wellness Journey 2023

• Rolls Royce targeted in a sophisticated Cyber Attack with potential Data Breach

• Juice Jacking Cyber Attack: The Hidden Threat at Public Charging Stations

• Staff at NHS Lanarkshire Exposed Patient`s Data on Unauthorized WhatsApp Group

• Microsoft Defender for Office 365 gets highest rating in SE Labs Enterprise Email Security Services test for Q1 2023

• ARM Targets $60 Billion Valuation For IPO

• Unified XDR and SIEM Alleviate Security Alert Fatigue

• Analyzing Android and iOS Cybersecurity Vulnerabilities

• The Future of Cloud Computing: Unleashing the Power of the Cloud

• Google AMP Abused in Phishing Attacks Aimed at Enterprise Users

• Firefox 116 Patches High-Severity Vulnerabilities

• Researchers Uncover AWS SSM Agent Misuse as a Covert Remote Access Trojan

• Top Industries Significantly Impacted by Illicit Telegram Networks

• The Ups and Downs of 0-days: A Year in Review of 0-days Exploited In-the-Wild in 2022

• New Collide+Power Exploit Let Attacker Steal Sensitive Data From All Modern CPUs

• ClearSale Brand Protection combats phishing, fake accounts, and counterfeit products

• 7 Benefits of Implementing ZTNA

• Biometric as a Service (BaaS) – An Opinion Piece

• CISA Published a Warning About Ivanti EPMM Zero-day Vulnerabilities

• Synopsys Launches Software Risk Manager to Simplify Enterprise-Scale AppSec

• Cloud Service Provider Cloudzy Accused of Aiding Ransomware and APTs

• 4-Optimization Techniques for Enhancing Algorithmic Trading Performance

• Meta Begins News Closure In Canada Over Publisher Payment Law

• AI-Enhanced Phishing Driving Ransomware Surge

• Hot Topic Announces Potential Data Breach Due to Stolen Account Credentials

• Understanding India’s Personal Data Protection Bill (PDPB)

• An Introduction to Cyber Threat Intelligence: Key Concepts and Principles

• Is Your MSP Taking Its Own Security Seriously?

• Russian Cybersecurity Exec Wanted By Russia and US

• OT/IoT Malware Surges Tenfold in First Half of the Year

• New SEC Regulations: US Businesses Must Report Cyberattacks within 4 Days

• CISA in New Warning Over Ivanti Vulnerabilities

• Iranian Company Cloudzy Accused of Aiding Cybercriminals and Nation-State Hackers

• Why performing security testing on your products and systems is a good idea

• Fake Chat App On Android Steals Signal and WhatsApp Data

• MSMQ QueueJumper (RCE Vulnerability): An In-Depth Technical Analysis

• Australian Senate committee recommends bans on Chinese social media apps

• Australian Senate committee recommends further bans on Chinese social media apps

• Ivanti Zero-Day Exploited by APT Since at Least April in Norwegian Government Attack

• CISA adds second Ivanti EPMM flaw to its Known Exploited Vulnerabilities catalog

• 67% of data breaches start with a single click

• From tech expertise to leadership: Unpacking the role of a CISO

• Delivering privacy in a world of pervasive digital surveillance: Tor Project’s Executive Director speaks out

• Norwegian Entities Targeted in Ongoing Attacks Exploiting Ivanti EPMM Vulnerability

• 1 in 100 emails is malicious

• Open-source penetration testing tool BloodHound CE released

• New NodeStealer Variant Targeting Facebook Business Accounts and Crypto Wallets

• Socket moves beyond JavaScript and Python and gets into Go

• 2023-08-01 – Bandook infection

• Public companies must now disclose breaches within 4 days

Generated on 2023-08-03 23:55:27.935697