IT Security News Daily Summary 2023-08-17

• Big Medical Privacy Case Against Facebook Advances In Court

• What Is Cloud Security Posture Management (CSPM)?

• CNAP Platforms: The All-in-One Solution for Cloud Security

• Normalyze: How Focusing On Data Can Improve Cloud Security

• TXOne: How to Improve Your Operational Technology Security Posture

• Foretrace Announces Launch of “Tim,” Generative AI Analyst for Assessing and Responding to Data Leaks

• ISC2 Announces Milestone As Community Grows to Half a Million

• Israel-US Binational Industrial R&D Foundation to Invest $3.85M in Critical Infrastructure Cybersecurity Projects

• Karma Catches Up to Global Phishing Service 16Shop

• CISA, vendors warn Citrix ShareFile flaw under attack

• White House Orders Federal Agencies to Bolster Cyber Safeguards

• Cybersecurity ‘still number one on the agenda in boardrooms,’ Cramer says as Palo Alto reports

• 5 Types of Cyber Crime Groups

• APIs in Motion: Keep Your APIs Up-To-Date

• Experts devise an exploit for Apple iOS 16 that relies on fake Airplane Mode

• Alarming lack of cybersecurity practices on world’s most popular websites

• Google Brings AI Magic to Fuzz Testing With Eye-Opening Results

• Researchers Trick an iPhone Into Faking Airplane Mode

• NoFilter Attack: Sneaky Privilege Escalation Method Bypasses Windows Security

• AI Growth Prompts Job Takeover Fears, Corndel Finds

• Control Access To Private Data Using Azure Storage Shared Access Signatures

• 31% of Organizations Using Generative AI Ask It To Write Code

• LinkedIn Suffers ‘Significant’ Wave of Account Hacks

• An Overview of Dubai’s First and Second Cybersecurity Strategy

• Cynomi Study Reveals Number of MSPs Providing Virtual CISO Services Will Grow Fivefold By Next Year

• WhatsApp Adds Support For HD Photos

• Cyber Criminals Attacking Web Services to Breach Organisations

• LinkedIn under attack, malicious hackers seize accounts

• Malicious QR Codes Used in Phishing Attack Targeting US Energy Company

• Rapid7 Says ROI for Ransomware Remains High; Zero-Day Usage Expands

• S3 Ep148: Remembering crypto heroes

• Critical Flaws in PowerShell Gallery Enable Malicious Exploits

• CISA Launches Joint Initiative to Secure RMM Software

• ‘Play’ Ransomware Group Targeting MSPs Worldwide in New Campaign

• China-Linked Bronze Starlight Group Targeting Gambling Sector with Cobalt Strike Beacons

• Enterprise Secrets Management Explained: Best Practices, Challenges, and Tool Selection

• ProjectDiscovery raises $25M to launch a cloud version of its threat-scanning platform

• List of countries that issued TikTok ban due to data security concerns and benefits

• Quarter Of IT Professionals Consider Quitting, Ivanti Finds

• Exploitation Of Citrix ShareFile Vulnerability Spikes As CISA Issues Warning

• Malicious QR Codes Used In Phishing Attack Targeting US Energy Company

• Man Arrested In Northern Ireland Police Data Leak

• Grooming Cases Reach Unprecedented Heights Amidst Regulatory Delays

• New York City Bans TikTok On Government Devices

• Google paves way for FIDO2 security keys that can resist quantum computer attacks

• Phishing Spree Targets Zimbra Collaboration Account Holders

• New LABRAT Campaign Exploits GitLab Flaw for Cryptojacking and Proxyjacking Activities

• New Apple iOS 16 Exploit Enables Stealthy Cellular Access Under Fake Airplane Mode

• 7 Ways to Access Safe Mode in Windows 10 (2023 Update)

• International Cyber Expo Launches ‘Grab the Mic: Women in Cyber’ Event

• Zen 1 Vulnerability AMD Patchwork Proved Weak, Second Pass Issued

• The great Flipper Zero shortage of 2023 has finally come to end

• The link between home, family and company security

• Top 20 cloud native application protection platforms of 2023

• How to Retrieve and Generate Google 2FA Backup Codes

• Thousands of Systems Turned Into Proxy Exit Nodes via Malware

• How Innovation Accelerators Are at Work on the Dark Side

• Cyber Alert: Global Campaign Targets LinkedIn Accounts

• Multiple Severe Flaws Uncovered in CyberPower and Dataprobe Products

• Ransomware Surges With 1500 Confirmed Victims This Year

• Key Notes for Comprehensive Rank Tracking

• The Enterprise Browser: A Security-Hardened Productivity Platform for the Future of Remote Work

• Cyber Defenders Lead the AI Arms Race for Now

• CISA says hackers are exploiting a new file transfer bug in Citrix ShareFile

• BT joins line-up for Wales Tech Week

• How poor cybersecurity policies disrupt business continuity

• Man arrested in Northern Ireland police data leak as more incidents come to light

• Cato Networks Named a “Leader” in Zero Trust Edge (ZTE) Report by Leading Research Firm

• Citrix ShareFile vulnerability actively exploited (CVE-2023-24489)

• Gozi strikes again, targeting banks, cryptocurrency and more

• Cybersecurity M&A Roundup for August 1-15, 2023

• CISA Releases Cyber Defense Plan to Reduce RMM Software Risks

• Why You Need Continuous Network Monitoring?

• Detecting “Violations of Social Norms” in Text with AI

• Lessons From the 2023 National Risk Register Report

• Raccoon Stealer 2.3.0 Malware – A Stealthier Comeback

• Two Brands Suspend Twitter/X Advertising After Pro-Nazi Ad Placement

• HHS Launches ‘Digiheals’ Project to Better Protect US Hospitals From Ransomware

• Phishers use QR codes to target companies in various industries

• Hackers Selling SMS Bomber Attack Tools on Underground Forums

• Cisco Unified Communications Manager Flaw Let Attacker Launch SQL Injection Attacks

• Russian Hackers Use Zulip Chat App for Covert C&C in Diplomatic Phishing Attacks

• PayPal To Pause UK Crypto Sales Until 2024

• Banks defending their right to security are missing the point about consumer trust

• Exploitation of Citrix ShareFile Vulnerability Spikes as CISA Issues Warning

• CISA Urges Patching of Actively Exploited Citrix Bug

• Cyber Mindfulness Corner Company Spotlight: Netskope

• 5-Step Guide on Securing Serverless Architectures in the Cloud with RASP

• Quick Glossary: Cybersecurity Countermeasures

• AnonFiles Shuts Down After Massive User Abuse

• WordPress Security Checklist

• Google Fixes 26 Bugs Amid Fake Update Warning

• Stay Informed: A Guide to ‘Juice Jacking’ Risks Before Your Next Airport Journey

• Do you know what your supply chain is and if it is secure?

• Cleaning Products manufacturer Clorox Company took some systems offline after a cyberattack

• HPE Aruba Networking Product Vulnerabilities Allow File Overwrite

• Back-to-school cybersecurity tips for parents and children

• Why you need to protect your smartphone with mobile security software

• Proton Sentinel: next level account security protection for (almost) everyone

• CISA Adds Citrix ShareFile Flaw to KEV Catalog Due to In-the-Wild Attacks

• Kubernetes clusters face widespread attacks across numerous organizations

• The road ahead for ecommerce fraud prevention

• Japan’s digital minister surrenders salary to say sorry for data leaks

• Findlargedir: Find all “blackhole” directories with a huge amount of filesystem entries

• Heavy workloads driving IT professionals to resign

• What Is a Data Breach + How Do You Prevent It?

• Vietnam admits it has just ten percent of the infosec pros it needs

• Canadian marketing company hit by data breach, says Ontario liquor board

• Beware malware posing as beta versions of legitimate apps, warns FBI

• Malvertisers up their game against researchers

• Discord.io confirms theft of 760,000 members’ data

• CISA adds flaw in Citrix ShareFile to its Known Exploited Vulnerabilities catalog

• Discord.io pulls the cord after crooks steal 760K users’ info

• PowerShell Gallery Prone to Typosquatting, Other Supply Chain Attacks

• Researchers Harvest, Analyze 100K Cybercrime Forum Credentials

• IT Security News Daily Summary 2023-08-16

• Beyond Identity Launches Passkey Adoption Tool, The Passkey Journey

• Insurance Data Breach Victims File Class-Action Suit Against Law Firm

• 67% of Federal Government Agencies Are Confident in Meeting Zero Trust Executive Order Deadline

• Dig Security State of Cloud Data Security 2023 Report Finds Exposed Sensitive Data in More Than 30% of Cloud Assets

• Protecting Your Business from Email Compromise: Essential Security Measures

• The best travel VPNs of August 2023: Expert tested and reviewed

• Adopt embedded penetration testing to keep IoT devices secure

• How to use dynamic reverse engineering for embedded devices

• Continuous Security Testing Is The Key To Strengthening Your Cybersecurity

• FBI warns about scams that lure you in as a mobile beta-tester

• Study Finds 16 Percent Of All Crime Originated On Facebook-Owned Platforms Last Year

• Metrics to Enhance your Cybersecurity Skills Development Program

• “Auth” Demystified: Authentication vs Authorization

• Mirai Common Attack Methods Remain Consistent, Effective

• A massive phishing campaign using QR codes targets the energy sector

• Double Extortion Ransomware: The New Normal

• AI-Powered Fuzzing: Breaking the Bug Hunting Barrier

• Scammers Exploit Kids with Fake Fortnite and Roblox Offers

• Gartner: Generative AI Will Bring “Transformational Benefit” in the Next 2-5 Years

• Beware of New Hacking Attack Targeting LinkedIn Accounts Worldwide

• Securely Managing, Distributing, and Scaling Secrets Across Multiple Kubernetes Clusters

• New ‘ASTORS’ Bid 1Kosmos Now Available in NayaOne Marketplace

• Election Security: Lawmakers Will Introduce New Machines Against Defcon Hackers

• The Gulf’s Dizzying Tech Ambitions Present Risk & Opportunity

• Foxconn Begins iPhone 15 Production In India

• The best VPN services for iPhone and iPad in August 2023

• Clorox Operations Disrupted By Cyber-Attack

• Clorox Cleans Up IT Security Breach That Soaked Its Biz Ops

• Researchers Find Sensitive Personal Data In Over 30% Of Cloud Assets

• Ivanti Patches Critical Vuln In Avalanche Enterprise MDM Solution

• Bank Of Ireland ATM Glitch Hands Out Free Money

• Google Releases Security Key Implementation Resilient To Quantum Attacks

• Discord.io Acknowledges Data Breach: Hacker Exposes Information of 760K Users

• LinkedIn account hacks increased in the past couple of weeks

• Google Releases Security Key Implementation Resilient to Quantum Attacks

• Mass-Exploitation Campaign Targets Citrix NetScalers With Backdoors

• UK Launches £1 Billion FinTech Fund

• Blueprint for Seamless Software Deployment: Insights by a Tech Expert

• Scammers Exploit Hacked Websites For Phishing

• This $70 device can spoof an Apple device and trick you into sharing your password

• Beyond Identity unveils The Passkey Journey to aid enterprise passkey deployment decisions

• UK Watchdogs Target Cookie Pop-ups, Amid Website Design Clampdown

• How To Install Istio Using Helm Chart

• JWT Token Authentication Using the .NET Core 6 Web API

• Five Tips to Securing Your Organization Through Your People.

• From Samsung to the Pentagon – Recent Stories Remind Us About the Importance of Sensitive Data Guardrails

• From Passwords to Passkeys – A Passing of the Torch

• New Indian Data Protection Framework: Data Usage and Ground Rules

• IBM MOVEit Hack Exposes Data of 4 Million US Citizens

• Preserving Consumer Trust Through Data Privacy

• Monti Ransomware’s Linux Variant Attacks the Financial & Healthcare Industries

• Cost of a data breach 2023: Healthcare industry impacts

• Top 12 risk management skills and why you need them

• Zero Trust Edge — Forrester Names Palo Alto Networks a Leader

• LinkedIn users targeted in account hijacking campaign

• Stellar Cyber and OCI partner to offer expanded cybersecurity capabilities

• Cleaning Products Giant Clorox Takes Systems Offline Following Cyberattack

• Ivanti Patches Critical Vulnerability in Avalanche Enterprise MDM Solution

• Boards Don’t Want Security Promises — They Want Action

• Vietnam’s VinFast Car Maker Overtakes GM, Ford After IPO

• Iran and the Rise of Cyber-Enabled Influence Operations

• Applying Data Ontology Concepts to Protect Data

• Bitdefender enhances security for iOS devices with Scam Alert

• SentinelOne Singularity App for Netskope secures remote work from endpoint to cloud

• LinkedIn hack: You need to check your LinkedIn account

• Mandiant Releases Scanner to Identify Compromised NetScaler ADC, Gateway

• QR Code Phishing Campaign Targets Top US Energy Company

• English Police Forces Admit to Data Handling Blunder Affecting Over 1,000 People

• Elon Musk’s X (Twitter) Delays Content Links To Rivals, Critics

• Cyber Security Today, August 16, 2023 – Discord.io database of 760,000 up for sale, LinkedIn under attack and more MOVEit victims

• Chrome 116 Patches 26 Vulnerabilities

• GitHub Paid Out $1.5 Million in Bug Bounties in 2022

• Google Introduces First Quantum Resilient FIDO2 Security Key

• Guide: How Google Workspace-based Organizations can leverage Chrome to improve Security

• Experts Uncover Weaknesses in PowerShell Gallery Enabling Supply Chain Attacks

• What’s the State of Credential theft in 2023?

• (Re)check your patched NetScaler ADC and Gateway appliances for signs of compromise

• What’s New in Selenium 4.11.0?

• Getting Started with Cross-Browser Testing on Real Devices

• Research Insight: IT Professionals Reconsidering Career Trajectories Amid Increased Work Pressures

• New study by AMD finds nearly half of organisations are not ready for AI

• Critical Security Flaws Affect Ivanti Avalanche, Threatening 30,000 Organizations

• Cybersecurity Breach Hits Clorox, Several Systems Taken Offline

• Intel Purchase Of Tower Semiconductor Terminated, China Blamed

• A Third of UK University Students Targeted By Fraud

• Ivanti Avalanche vulnerable to attack by unauthenticated, remote attackers (CVE-2023-32560)

• Gigabud RAT Attacking Android Users to Steal Banking Credentials

• Data Classification Policy

• Get Norton 360 Standard on 2 Devices Plus Identity Theft Protection for $24.99

• A Third of UK Uni Students Targeted By Fraud

• Major LinkedIn Account Takeover Campaign Underway

• Q2 Privacy Update: AI Takes Center Stage, plus Six New US State Laws

• The CISO Report – The Culture Club

• Digital Safety Advice is Not Getting Through to Women

• Two unauthenticated stack buffer overflows found in Ivanti Avalanche EMM

• China accuses U.S. intelligence agencies as source behind Wuhan cybersecurity attack

• Why performing security testing on your products and systems is a good idea

• Approximately 2000 Citrix NetScaler servers were backdoored in a massive campaign

• How the Microsoft Incident Response team helps customers remediate threats

• How social media scams are draining bank accounts of victims

• Exploring the Essence of Confidential Computing

• How CISOs break down complex security challenges

• Why the “voluntary AI commitments” extracted by the White House are nowhere near enough

• Get the AT&T Cybersecurity Insights Report: Focus on US SLED

• Mac systems turned into proxy exit nodes by AdLoad

• Thales Luna HSMs Secure Digital Transactions of a Prominent Bangladeshi Bank

• Nearly 2,000 Citrix NetScaler Instances Hacked via Critical Vulnerability

• Cybertech Africa 2023 marks the first gathering for innovation and networking in the region

• Passwordless is more than a buzzword among cybersecurity pros

• SEC cybersecurity rules shape the future of incident management

• Hackers Rig Casino Card-Shuffling Machines for ‘Full Control’ Cheating

• Hackers could now steal passwords over Zoom by listening to keystrokes using AI

• DARPA Taps Hackers to Fortify Critical Software Against Cyber Threats

• 5 Strategies for Strengthening MQTT Infrastructure Security

• Ford says it’s safe to drive its cars with a WiFi vulnerability

• PCMag ranks Malwarebytes #1 cybersecurity vendor

Generated on 2023-08-17 23:55:16.212116