IT Security News Daily Summary 2023-08-08

• Microsoft’s red team has monitored AI since 2018. Here are five big insights

• 75% of Organizations Worldwide Set to Ban ChatGPT and Generative AI Apps on Work Devices

• BlackBerry intelligence report reveals a 40 per cent increase in cyberattacks

• Microsoft Azure AI Adds GPT-4 and New Virtual Machines

• Multiplying Force with Automation — Reducing the Soul Crushing Work

• VERT Threat Alert: August 2023 Patch Tuesday Analysis

• Patch Tuesday: Microsoft (Finally) Patches Exploited Office Zero-Days

• Google unveils ‘Downfall’ attacks, vulnerability in Intel chips

• Serious Security: Why learning to touch-type could protect you from audio snooping

• India Data Protection Bill Approved, Despite Privacy Concerns

• August 2023 Patch Tuesday: Microsoft fixes critical bugs in Teams, MSMQ

• UK Electoral Commission Admits Major Data Breach Spanning Over a Year

• Vandals messing up your metaverse? Apple’s new patent lets you delete virtual graffiti

• Custom Yashma Ransomware Crashes Into the Scene

• Raft of TETRA Zero-Day Vulnerabilities Endanger Industrial Communications

• Cyber-extortionists pillage Colorado education dept

• Google’s Messages app will now use RCS by default and encrypt group chats

• California’s DELETE Act Protects Us From Data Brokers

• White House Holds First-Ever Summit on the Ransomware Crisis Plaguing the Nation’s Public Schools

• Patch Tuesday: Adobe Patches 30 Acrobat, Reader Vulns

• Citrix Zero-Day: 7K Instances Remain Exposed, 460 Compromised

• Govt Proposes Rs 250 Cr Fine for Consumer Data Leaks

• This Ransomware Targets Several English-Speaking Nations

• Identity-based attacks increasing, warns CrowdStrike

• 5 steps to ensure HIPAA compliance on mobile devices

• Meet the Brains Behind the Malware-Friendly AI Chat Service ‘WormGPT’

• Code42 and Tines launch Incydr Flows to streamline workflows

• ThreatX extends API protection with sensitive data detection and visualizations

• Australia’s Banking Industry Mulls Better Cross-Collaboration to Defeat Scam Epidemic

• New ‘Downfall’ Flaw Exposes Valuable Data in Generations of Intel Chips

• UK Electoral Commission discloses a data breach

• An update on Chrome Security updates – shipping security fixes to you faster

• Android 14 introduces first-of-its-kind cellular connectivity security features

• Downfall and Zenbleed: Googlers helping secure the ecosystem

• Congratulations to the MSRC 2023 Most Valuable Security Researchers!

• Horizon3 AI Raises $40 Million to Expand Automated Pentesting Platform

• The Problem With Cybersecurity (and AI Security) Regulation

• Rubrik acquires Laminar to expand in data security across public clouds

• Announcing the Tor University Challenge

• The impact of blockchain technology on the future of shipping and logistics

• Code Mirage: How cyber criminals harness AI-hallucinated code for malicious machinations

• Cryptomining and Malware Flourish on Misconfigured Kubernetes Clusters

• The 3 Cs of Renting vs Buying Ebooks | Avast

• Tampa General Hospital Sued Over Data Breach

• 91% of IT leaders better protected with PAM but want more affordable solutions

• The industry’s most insightful minds come together at Digital Transformation EXPO Europe (DTX)

• SecurityScorecard unveils Managed Cyber Risk Services to solve the third-party cyber risk puzzle

• XDR Alliance unveils open-source API specifications to improve cybersecurity for customers

• Silobreaker unveils risk scoring capabilities to help threat intel teams define and evaluate risks

• Isolated Systems at Risk: How Threat Actors Can Still Infect Your Systems With Malware

• White House to bolster cybersecurity training for K-12 schools, with help from the FCC, Amazon Web Services and more

• CrowdStrike observes massive spike in identity-based attacks

• UK voter data exposed for over a year in attack on Electoral Commission

• Many organizations want to limit employee access to AI, survey shows

• Cyber Attack on UK Electoral Database leaks 8 yrs voters information

• Protection is No Longer Straightforward – Why More Cybersecurity Solutions Must Incorporate Context

• #BHUSA: Ransomware Threat Activity Cluster Uncovered

• QakBot Malware Operators Expand C2 Network with 15 New Servers

• Google Fails To End $5 Billion Consumer Privacy Lawsuit

• AI Could Identify Passwords By Sound Of Keys Being Pressed, Study Suggests

• Stalkerware Slinger LetMeSpy Shuts Down For Good After Database Robbery

• Millions Of UK Voters’ Data Accessible In Cyber Attack, Says Electoral Commission

• Rest In Peace Bram Moolenaar, Author Of Vim And Hero Of Many Developers

• North Korean Hackers Infiltrate Russian Missile Engineering Firm

• Stay Safe Online: How to Protect Yourself from Pass-the-Cookie Attacks

• Multi-State Cyberattack Disrupts Health Care Services in Multiple States

• How to Create a Data Center Disaster Recovery Plan

• The Forrester Consulting TEI of Guardium Data Protection study: 5 data security lessons

• Dropzone AI launches autonomous AI agent to investigate security alerts, raises $3.5M in seed funding

• UK Voters’ Data Exposed in Electoral Commission Cyber-Attack

• Vietnamese-Origin Ransomware Operation Mimics WannaCry Traits

• Abnormal Security CheckGPT detects AI-generated email attacks

• With 95% Accuracy, New Acoustic Attack can Steal from Keystrokes

• U.S. Hunts Chinese Malware Halting Military Operations

• Colorado Higher Education Hit By Ransomware: What Students And Educators Need To Know

• North Korean hackers breached Russian missile development firm

• Vectra AI Platform provides real-time attack signal intelligence

• Patch Tuesday August 2023 – Microsoft Releases 12 Security Patches for Chromium-based Edge Browser

• EFF at Las Vegas Hacker Summer Camp

• It’s Summer Security Week at EFF

• 43 Malicious Android Apps With Over 2.5 Million Installs Display Secret Ads

• Do’s and Don’ts When Building an Internal Developer Platform

• Cybersecurity startup ConductorOne grows series A funding to $27M to boost least privilege access

• 10 Key Controls to Show Your Organization Is Worthy of Cyber Insurance

• Rubrik acquires Laminar for up to $250M to expand in data security across public clouds

• Clop Ransomware Adopts Torrents for Data Leaks in Effort to Evade Detection

• ICS Patch Tuesday: Siemens Fixes 7 Vulnerabilities in Ruggedcom Products

• Identity-Based Attacks Soared in Past Year: Report

• Celebrating Infinity Day. To August 8th… and Beyond!

• Threat Actors Using an Armed OpenBullet Pentesting Tool to Manipulate Script Kids

• Unmasking hypnotized AI: The hidden risks of large language models

• #BHUSA: Identity Compromise the Cause of Most Breaches

• SandboxAQ Open Sources Cryptography Management Tool for Post-Quantum Era

• Dark Reading News Desk: Live at Black Hat USA 2023

• Hackers Abusing Cloudflare Tunnels for Covert Communications

• Evolution of Enterprise IT and AI: DTX + UCX Europe 2023 prepares teams for new realm

• Solvo SecurityGenie helps organizations improve their cloud security posture

• Open Raven automates attack prevention and remediation with DDR capabilities

• NetSPI launches ML/AI Pentesting solution to help organizations build more secure models

• Electoral Commission hack exposed data of 40 million UK voters

• White House Announces New Actions to Strengthen K-12 Schools’ Cybersecurity

• Bug Bounty Program: Microsoft Rewarded $13.8M for 345 Security Researches

• Black Hat Preview: The Business of Cyber Takes Center Stage

• UK Think Tank Proposes Greater Ransomware Reporting From Cyberinsurance to Government

• What Doctors Wish You Knew About HIPAA and Data Security

• Horizon3 secures $40M to expand its pen testing platform

• What are the safest cars from break ins and system hacks

• You Can’t Rush Post-Quantum-Computing Cryptography Standards

• Mastering DevOps: Best Practices for Agile Software Delivery

• ComplyCube ID Liveness Layer combats screen replay attacks

• Q2 2023 Cyber Attacks Statistics

• China – which surveils everyone everywhere – floats facial recognition rules

• PayPal Launches USD-Pegged Crypto Stablecoin

• Encryption Policy

• Russia To Launch First Moon Mission Since 1976

• Microsoft Shares Guidance and Resources for AI Red Teams

• Understanding Active Directory Attack Paths to Improve Security

• CraftRise – 2,532,527 breached accounts

• Is the Metaverse Dead?

• North Korean Hackers Compromise Russian Missile Maker

• LOLBAS in the Wild: 11 Living-Off-The-Land Binaries That Could Be Used for Malicious Purposes

• New Yashma Ransomware Variant Targets Multiple English-Speaking Countries

• How to Conduct a Phishing Attack in a 5 Easy Steps

• Huawei Looks To AI-Driven HarmonyOS For Smartphone ‘Comeback’

• Amazon Meets With FTC Ahead Of Expected Antitrust Case

• Two-Thirds of UK Sites Vulnerable to Bad Bots

• Zuckerberg ‘Not Holding Breath’ Over Musk Cage Fight

• Virgin Galactic To Transport First Mother, Daughter Into Space

• North Korea ‘Hacked Russian Missile Firm’

• Over 200 Million Brits Have Data Compromised in Four Years

• Protecting Sensitive Data from Insider Threats in PCI DSS 4.0

• Need to improve the detection capabilities in your security products?

• LOLBAS in the Wild: 11 Living-Off-The-Land Binaries Used for Malicious Purposes

• New PaperCut NG/MF Flaw Let Attackers Execute Code on Unpatched Windows Servers

• North Korean hackers had access to Russian missile maker for months, say researchers

• Getting the best possible outcome in ransomware negotiation

• For TSA’s updated Pipeline Security Directive, consistency and collaboration are key

• Exploitation of Artificial Intelligence AI technology to facilitate password theft

• What may be lurking behind that QR code

• Seasoned cyber pros are more complacent in their skills than junior staff

• Dark web activity targeting the financial sector

• 43 Android apps in Google Play with 2.5M installs loaded ads when a phone screen was off

• How to get started with ongoing configuration assessments

• Managing human cyber risks matters now more than ever

• Microsoft AI Red Team building future of safer AI

• Adopting guidance from the US National Cybersecurity Strategy to secure the Internet of Things

• Ransomware Victims Surge as Threat Actors Pivot to Zero-Day Exploits

• Vulnerability Summary for the Week of July 31, 2023

• Apple Users See Big Mac Attack, Says Accenture

• Leverage the AWS Sustainability Pillar to Minimize Environmental Impact

• SEC’s controversial cybersecurity disclosure warning: What enterprises need to do now

• Ransomware Attack Timeline

• A week in security (July 31 – August 6)

• New Security Advisor amps up security in minutes

• 2022’s most routinely exploited vulnerabilities—history repeats

• FCC comes down hard on robocallers with record $300m fine

• TikTok facing fines for violating children’s privacy

• Zoom trains its AI model with some user data, without giving them an opt-out option

• Your Computer Should Say What You Tell It To Say

• IT Security News Daily Summary 2023-08-07

• Akamai Research: Rampant Abuse of Zero-Day and One-Day Vulnerabilities Leads to 143% Increase in Victims of Ransomware

• SecurityScorecard Launches Managed Cyber Risk Services to Mitigate Zero-Day and Critical Supply Chain Vulnerabilities

• Stalkerware slinger LetMeSpy shuts down for good after database robbery

• LetMeSpy Android Spyware Service Shuts Down After Data Breach

• Cyberinsurance Firm Resilience Raises $100 Million to Expand Its Cyber Risk Platform

• orphan account

• Smart devices: Putting a premium on peace of mind

• Facebook Accused Of Ignoring Warnings About Dangerous Content

• cryptosystem

• Research Eyes Misconfiguration Issues At Google, Amazon and Microsoft Cloud

• Integrate Security Testing Into Your Development Cycle With Foundry and Diligence Fuzzing

• The Mystery of Chernobyl’s Post-Invasion Radiation Spikes

• Colorado warns hackers stole 16 years of public school data in ransomware attack

• Researcher Exposes Cryptocurrency Scam Network of 300 Domains

• The 3 Cs of renting vs buying textbooks: Cost, convenience, and cybersecurity

• Databases beware: Abusing Microsoft SQL Server with SQLRecon

• Microsoft’s AI Red Team Has Already Made the Case for Itself

• Generative AI Has an Increasing Effect on the Workforce and Productivity

• ChatGPT Security Concerns: Credentials on the Dark Web and More

• North Korea compromised Russian missile engineering firm NPO Mashinostroyeniya

• New SkidMap Malware Attacking Wide Range of Linux Distributions

• North Korean Hackers Targeted Russian Missile Developer

• New Malware Campaign Targets Inexperienced Cyber Criminals with OpenBullet Configs

• Microsoft Addresses Azure AD Flaw Following Criticism from Tenable’s CEO

• US Primary Care Services Shuttered After Cyber-Attack

• Mallox Ransomware Group Revamps Malware Variants, Evasion Tactics

• SANS Teaches Cybersecurity Leadership in Saudi Arabia

• Colorado warns hackers stole 16 years of public school data

• Data Protection and Digital Information Bill – what are the changes?

• Here’s why investors should not be selling one big tech stock and maybe buying another

• AI Model Listens to Typing, Potentially Compromising Sensitive Data

• What is the dark web? Everything you need to know before you access it

• Invisible Ad Fraud Targets Korean Android Users

• Colorado Dept. of Higher Education Hit With Massive Data Breach

• Cybersecurity Companies Offer Technology Stack Incorporating Zero Trust Edge

• A Software Vulnerability in AMD’s Chip Compromises Tesla’s Paid Features

• Worldcoin’s Verification Process Under Scrutiny After CertiK’s Discovery

• Autonomous-Car Technology May Possess a Threat to Privacy

• How to make sure the reputation of your products and company is good

• CLOP Ransomware avoids takedowns by using torrents

• Google to discuss LLM benefits for threat intelligence programs

• FBI Warns Against Criminals Posing as NFT Developers

• A new sophisticated SkidMap variant targets unsecured Redis servers

• ThreatConnect empowers security teams to operationalize intelligence requirements

• How to Tell if a Company Is Selling Your Email Address

• New PaperCut Vulnerability Allows Remote Code Execution

• Vulnerability Found In Rewards Programs

• Post Tenable’s CEO Blast Of Microsoft, Bug Gets Fixed

• Navy Soldiers Charged With Giving Chinese Spies Secret Military Info

• Advancing API Security: An Interview with Richard Bird of Traceable AI

• Get Protected the Right Way with Avast Free Antivirus

• Don’t Miss Check Point’s Black Hat Demos & Sessions

• North Korean Hackers Targets Russian Missile Engineering Firm

• How Technology Revolutionizes the Way You Earn Money Teaching English Online

• The evolution of security analyst experience

• SEC controversial cybersecurity disclosure warning: What enterprises need to do now

• Name That Edge Toon: How Now?

• Selling Software to the US Government? Know Security Attestation First

• techUK and Axiologik join forces to present the UK Tech Plan at major political party conferences

• Keystroke sounds can betray passwords

• How an 8-Character Password Could be Cracked in Just a Few Minutes

• CISA Unveils Cybersecurity Strategic Plan for Next 3 Years

• Cyber Threats Loom Over Major Sporting Events, Microsoft Study Reveals

• Behind the Scenes of a Tailor-Made Massive Phishing Campaign

• Elite North Korean Hackers Breach Russian Missile Developer

• Russian-Linked Hackers Exploit Microsoft Teams in Advanced Cyber Espionage

• Tripwire Patch Priority Index for July 2023

• How an 8-character password could be cracked in just a few minutes

• Collide+Power Attack: New Side-Channel Attack Risks All CPUs

• 3 Typеs of DAST Tools for Enhancing Application Sеcurity

• Intel Exec Talks Up China As Sanctions Threat Looms

• Amazon Shares Surge On Profit Spike

• US Judge Narrows Google Antitrust Cases

• Amazon Fined Over US Warehouse Conditions

• Revolut To Halt US Crypto Services Amidst Regulatory Crackdown

• IBM SDK, Java Technology Flaw Lets Remote Attacker Execute Arbitrary

• Microsoft Signing Key Stolen by Chinese

• PaperCut fixes bug that can lead to RCE, patch quickly! (CVE-2023-39143)

• Hunters partners with Kudelski Security to help companies strengthen their cyber resilience

• Colorado Department of Higher Education Discloses Ransomware Attack, Data Breach

• Criminals Have Created Their Own ChatGPT Clones

• New SkidMap Redis Malware Variant Targeting Vulnerable Redis Servers

• New ‘Deep Learning Attack’ Deciphers Laptop Keystrokes with 95% Accuracy

• Enhancing Security Operations Using Wazuh: Open Source XDR and SIEM

• FBI warns of crooks posing as NFT developers in fraudulent schema

• TargetCompany Ransomware Abuses FUD Obfuscator Packers

• Latest Batloader Campaigns Use Pyarmor Pro for Evasion

• Research Jailbreak Tesla’s Software-Locked Features Worth up to $15,000

• Russian Hacktivists Overwhelm Spanish Sites With DDoS

• Colorado Education Department Suffers Ransomware Breach

• Web 3.0: The Future of the Internet and its Cybersecurity Features and Challenges

• Clop Gang Offers Data Downloads Via Torrents

• Software developers, how secure is your software?

• FBI Alert: Crypto Scammers are Masquerading as NFT Developers

• The number of ransomware attacks targeting Finland increased fourfold since it started the process to join NATO

• The Dark Web Is Expanding (As Is the Value of Monitoring It)

• Android automated SOS feature is causing serious problems

• Honeypots in Cybersecurity: A Deceptive Defense

• 8 free cybersecurity documentaries you can watch right now

• Microsoft hits back at Tenable criticism of its infosec practices

• Ransomware attack targets 3 hospitals in the United States

• Zoom CISO Michael Adams discusses cybersecurity threats, solutions, and the future

• Navigating the gray zone of ransomware payment practices

• Budget constraints threaten cybersecurity in government bodies

• Unraveling the importance of software supply chain security

• Five Eyes nations detail dirty dozen most exploited vulnerabilities

• Bram Moolenaar, Creator of Vim Text Editor for Linux Passes Away

Generated on 2023-08-08 23:55:29.476056