IT Security News Daily Summary 2023-08-24

• Too good to be true? That online auction price could be triangulation fraud

• Major US Energy Company Hit by QR Code Phishing Campaign

• Malwarebytes Announces Acquisition of Online Privacy Company Cyrus

• Black Hat USA 2023 Closes on Record-Breaking Event in Las Vega

• Local Facebook Groups Are Being Overrun With Hoax Posts

• US Space Industry More Prone to Foreign Espionage, US Agencies Warn

• Kyndryl and Cisco Expand Partnership Focusing on Cyber Resilience

• Cypago Raises $13M and Unveils its Cyber GRC Automation (CGA) Platform to Simplify GRC Processes

• Chinese-backed APT ‘Flax Typhoon’ Hacks Taiwan with Minimal Malware Footprint

• Smoke Loader Botnet Drops Location Tracker Whiffy Recon Malware

• S3 Ep149: How many cryptographers does it take to change a light bulb?

• Ransomware With an Identity Crisis Targets Small Businesses, Individuals

• The Price of Grandeur: Unveiling the Costs Behind Creating a Triple-A Game

• Google AI in Workspace Adds New Zero-Trust and Digital Sovereignty Controls

• University of Minnesota Confirms Data Breach, Says Ransomware Not Involved

• FBI: Suspected Chinese actors continue Barracuda ESG attacks

• Lazarus APT exploits Zoho ManageEngine flaw to target an Internet backbone infrastructure provider

• Russian Hackers Employ Telekopye Toolkit in Broad Phishing Attacks

• eBay Users Beware Russian ‘Telekopye’ Telegram Phishing Bot

• Recent Vulnerability Puts 3,000 Openfire Servers at Risk of Attack

• The Four Big Risk Categories Every SAAS Application Must Address

• Publisher’s Spotlight: Oligo: Protect Your Open Source Libraries

• Traffic Management and Network Resiliency With Istio Service Mesh

• AWS unveils local cloud zones for exclusive customer use

• What the Hive Ransomware Case Says About RaaS and Cryptocurrency

• The Last Hour Before Yevgeny Prigozhin’s Plane Crash

• Lazarus Group Exploits Critical Zoho ManageEngine Flaw to Deploy Stealthy QuiteRAT Malware

• Kingston IronKey Keypad 200C hardware-encrypted USB Type-C drive released

• NETGEAR launches PR60X Pro Router

• MOVEit Attacks Makes Clop the Most-active Ransomware Threat Actor This Summer

• Wireshark 4.0.8 Release: What’s New!

• A simple idea that could make Android more secure

• North Korea ready to cash out more than $40 million in Bitcoin after summer of attacks, warns FBI

• FBI Flags $40M Crypto Cash-Out Plot By North Korean Hackers

• Location Leak: Christie’s Mistakenly Exposes Whereabouts of Consigned Artworks

• Google allows Workstation actions only with two admin authentication

• Bletchley Park To Host Global AI Safety Summit

• Nvidia Reaps AI Chip Demand As Profit Surges

• Mysterious Malware Uses Wi-Fi Scanning to Get Location of Infected Device

• Cisco Patches Vulnerabilities Exposing Switches, Firewalls to DoS Attacks

• Data of 2.6 Million Duolingo Users Leaked on Hacking Forum

• Lessons learned from the Microsoft Cloud breach

• How to Remove a Lost Device From Your Google Account

• New Study Sheds Light on Adhubllka Ransomware Network

• QR Code Red: Quishing Attacks and How to Prevent Them

• Strengthening Your Cybersecurity: The Power of the Three P’s and Team Training

• New Relic enhances its AIOps capabilities with recommended alerts

• Cloud hosting firms hit by devastating ransomware attack

• Talon unveils digital experience capabilities, equipping IT teams with advanced metrics

• Protecting Sensitive Information Within Translation

• Lapsus$ Teen Hackers Convicted: Unraveling the Grand Theft Auto 6 Leak and High-Profile Cyberattacks

• Tornado Cash Crypto Mixer Devs Charged With Money Laundering

• FBI: Patches For Recent Barracuda ESG Zero-Day Ineffective

• Rockwell ThinManager Vulns Could Expose Industrial HMIs To Attacks

• WinRAR 0-Day That Uses Poisoned JPG And TXT Files Under Exploit Since April

• An Interview with Dasha Deckwerth – Stealth ISS Group

• Role of Artificial Intelligence in Preventing Cyberattacks at K-12 Schools

• Password Protection in the Era of AI-Based Attacks

• FBI: Patches for Recent Barracuda ESG Zero-Day Ineffective

• NIST Publishes Draft Post-Quantum Cryptography Standards

• 5 Best Practices for Implementing Risk-First Cybersecurity

• Why It’s Time To Remove Local Admin Rights For The Safety Of Organisations

• Thousands of Openfire Servers at Risk from Critical CVE

• Microsoft Paint To Get AI Makeover – Report

• Secureworks Discovers Vulnerability In Microsoft Identity Solution

• Critical Insight Reports Fewer Cybersecurity Breaches in Health Care, Yet Victim Numbers Are Up in 2023

• Penetration Testing- Shielding the Web Content Against Hacking

• What are Brute Force Attacks, and How to Protect Your APIs Against them?

• Preventing DNS Tunneling with AI Deep Learning

• Rockwell ThinManager Vulnerabilities Could Expose Industrial HMIs to Attacks

• New Telegram Bot “Telekopye” Powering Large-scale Phishing Scams from Russia

• Duolingo Data Breach: 2.6 Million Users At Risk Of Targeted Phishing Attacks

• Ermetic CNAPP available on Google Cloud Marketplace

• Britain to host world’s first AI safety summit at home of World War II codebreakers

• Pulling the strings

• CloudNordic Faces Severe Data Loss After Ransomware Attack

• North Korea’s Lazarus Group Used GUI Framework to Build Stealthy RAT

• WinRAR security issue more wide-reaching than thought

• Sensitive Data of 10 Million at Risk After French Employment Agency Breach

• eSentire Labs Open Sources Project to Monitor LLMs

• Why The Chainsmokers Invest in—and Party With—Niche Cybersecurity Companies

• WinRAR Security Flaw Exploited in Zero-Day Attacks to Target Traders

• New “Whiffy Recon” Malware Triangulates Infected Device Location via Wi-Fi Every Minute

• The Hidden Dangers of Public Wi-Fi

• Cypago, which aims to automate compliance and governance for companies, raises $13M

• Bitwarden launches E2EE Secrets Manager

• Jury Finds Two Teenagers Were Behind Lapsus$ Crime Spree

• Simplify Secure Enterprise Device Management With QR Codes

• UK Court Concludes Teenager Behind Huge Hacking Campaign

• Hosting Provider CloudNordic Loses All Customer Data in Ransomware Attack

• Traders Targeted by Cybercriminals in Attack Exploiting WinRAR Zero-Day

• Digital Identity Protection Firm SpyCloud Raises $110 Million

• Parmesan Anti-Forgery Protection

• University of Minnesota Reports Massive Data Breach

• Ransomware Vs. Malware: What’s The Difference?

• South Africa claims DdoS Cyber Attack from India because of PM Narender Modi

• NoFilter: Tool that Escalates Privilege Abusing Windows Filtering Platform

• Apple Endorses California ‘Right to Repair’ Bill

• Kali Linux 2023.3 Released: What’s New!

• Cyber Mindfulness Corner Company Spotlight: Egress

• Sextortion Scams Surge 178% in a Year

• Thousands of Unpatched Openfire XMPP Servers Still Exposed to High-Severity Flaw

• ImmuniWeb introduces ImmuniWeb Neuron Mobile, an automated mobile app security testing solution

• Into the Heimdalverse

• St Helens Council Warns of Phishing After Ransomware Breach

• Teens Found Responsible For Lapsus$ Cyber-Attacks

• Lapsus$ member has been convicted of having hacked multiple high-profile companies

• Danish Cloud Hosting Companies Ravaged by Ransomware Attacks

• Attack Dwell Times Fall but Threat Actors Are Moving Faster

• Tornado Cash Founders Charged in Billion-Dollar Crypto Laundering Scandal

• Two teens were among those behind the Lapsus$ cyber-crime spree, jury finds

• Do you know what your supply chain is and if it is secure?

• GroundPeony Group Exploiting Zero-day Flaw to Attack Government Agencies

• More than 3,000 Openfire servers exposed to attacks using a new exploit

• Kali Linux 2023.3 released: Kali NetHunter app redesign, 9 new tools, and more!

• Does a secure coding training platform really work?

• Google’s Enhanced Safe Browsing Explained

• Securing your cloud networks: Strategies for a resilient infrastructure

• How digital identity protects connected cars

• AI and the evolution of surveillance systems

• Webinar: The external attack surface & AI’s role in proactive security

• Lack of visibility into cloud access policies leaves enterprises flying blind

• What Is Data Privacy? The Secret to Safe Surfing

• Personal vs. Sensitive Personal Information: Differences & Examples

• 15 Tips to Protect Personal Information Online for 2023

• Prelude Security Tackles Continuous Security Testing in Containers

• U.S. division of CIBC apparently sideswiped by MOVEit hack

• Adobe ColdFusion vulnerability exploited in the wild

• DarkGate reloaded via malvertising and SEO poisoning campaigns

• Ivanti Sentry critical vulnerability—don’t play dice, patch

• Out from the Shadows: SOC Teams Take Their Seat with the “Superheroes”

• DoJ charged Tornado Cash founders with laundering more than $1 billion

• Configuring SSO Using WSO2 Identity Server

• Tornado Cash ‘laundered over $1B’ in criminal crypto-coins

• New Akira Ransomware Targets Businesses via Exploited CISCO VPNs

• OT and IT Visibility and Efficiency Barriers

• 6 Best IT Asset Management (ITAM) Software 2023

• Ransomware Reaches New Heights

• IT Security News Daily Summary 2023-08-23

• Facebook Once Again Says It Will Roll Out End-To-End Encryption By End Of Year

• Threat Actor Exploits Zero-Day in WinRAR to Target Crypto Accounts

• API Misuse: Hacker Exposes 2.6M Duolingo Users’ Emails & Names

• AWS Outages: Is North Virginia the Least Reliable AWS Region and Why?

• Sophos: RDP played a part in 95% of attacks in H1 2023

• FBI Warns of Cryptocurrency Heists by North Korea’s Lazarus Group

• North Korea may be itching to sell $40m of purloined Bitcoin

• network vulnerability scanning

• Meta to roll out end-to-end encryption for Messenger by the end of 2023

• Using WinRAR? Be sure to patch against these code execution bugs…

• FBI identifies wallets holding cryptocurrency funds stolen by North Korea

• Microsoft’s Rise as a Cybersecurity Powerhouse

• Brazil’s Top Escort Service Exposes Millions of Escort and Client Data

• How to Create an Incident Response Plan (+ Free Template)

• Window Snyder talks striking out on her own in cybersecurity at TechCrunch Disrupt

• Danish cloud host says customers ‘lost all data’ after ransomware attack

• The best identity theft protection & credit monitoring services of 2023: Protect your data

• Name That Toon: Swift as an Arrow

• Google plans to bring AI-fueled security enhancements to Google Workspace

• Attackers exploited WinRAR zero-day for months to steal money from brokers (CVE-2023-38831)

• SpyCloud raises $110 million to accelerate identity threat protection

• Google to add more granular security controls to Workspace

• India’s Chandrayaan-3 Lands Successfully On Moon

• Hackers Threaten Patients Following a Massive Cyberattack on a Hospital

• Google introduces 11 new security features for Workspace (some AI-powered)

• What is the Bitwarden Master Password re-prompt and how do you enable it?

• XLoader MacOS Malware Variant Returns With OfficeNote Facade

• The Role of Cryptography in Data Safety

• Google Removes 22 Malicious Android Apps Exposed by McAfee

• U.S. Intelligence Reports: Spies and Hackers are Targeting US Space Industry

• Tesla Data Breach: 75,000 Users Affected Due to Insider Wrongdoing

• Cyberattack Strikes Australian Energy Software Company Energy One

• VMware, NVIDIA team up, launch major GenAI initiative at VMware Explore

• Mobile threat defense or bust

• How Malware Sandboxes Strengthen Your Cybersecurity

• Remote access detection in 2023: Unmasking invisible fraud

• Cybersecurity Companies Report Surge in Ransomware Attacks

• FBI Finds 1,580 Bitcoin in Crypto Wallets Linked to North Korean Hackers

• Smart Cities: Utopian Dream, Security Nightmare, or Political Gimmick?

• Thoma Bravo Merges ForgeRock with Ping Identity

• WinRAR Vulnerability Affects Traders Worldwide

• New HiatusRAT Malware Campaign Targets U.S. Defense Department`s Server

• Headlines about ransomware making waves on Google’s trending news

• Artificial Intelligence and USBs Drive 8% Rise in Cyber-Attacks

• Attackers Dangle AI-Based Facebook Ad Lures to Hijack Business Accounts

• Nagarro-Seclore Secure Collaboration Solution ensures business compliance

• Elon Musk To Axe Headlines From News Links On Twitter

• Salt Security Partners with API Testing Leaders, introduces STEP programme

• An Essential Guide to XDR Software

• Ransomware attacks broke records in July, mainly driven by this one group

• 3,000 Openfire Servers Exposed to Attacks Targeting Recent Vulnerability

• The End of “Groundhog Day” for the Security in the Boardroom Discussion?

• Malwarebytes releases EDR Extra Strength for endpoint protection

• LOKKER launches On-demand Website Privacy Audit for healthcare organizations

• Spear Phishing Prevention: 10 Ways to Protect Your Organization

• 5 Early Warning Indicators That Are Key to Protecting National Secrets

• Learning the lessons from cybersecurity trash fires at TC Disrupt 2023

• Court Finds Teenagers Carried Out Lapsus Hacking Spree

• MacOS Variant Of XLoader Written In C Observed In The Wild

• Guidance On Migrating To Post-Quantum Cryptography Released By US

• Exploitation Of Ivanti Sentry Zero-Day Confirmed

• Surge in Cybercrime: Check Point 2023 Mid-Year Security Report Reveals 48 Ransomware Groups Have Breached Over 2,200 Victims

• Thousands of High-Risk Incidents Neutralized Using AI

• Meta Set to Enable Default End-to-End Encryption on Messenger by Year End

• North Korean Affiliates Suspected in $40M Cryptocurrency Heist, FBI Warns

• St Helens Council Targeted In Suspected Ransomware Attack

• First Weekly Chrome Security Update Patches High-Severity Vulnerabilities

• US Government Publishes Guidance on Migrating to Post-Quantum Cryptography

• How to Talk to Your Kids About Social Media and Mental Health

• FBI says North Korean hackers preparing to cash out after high-profile crypto hacks

• Bogus OfficeNote app delivers XLoader macOS malware

• Surge in identity crime victims reporting suicidal thoughts

• BeyondID launches BeyondID SOC

• Exploring the Top ManageEngine Competitors & Alternatives in 2023

• New Ivanti Zero-Day Vulnerability Allows Hackers to Access Sensitive APIs

• Cyber Security Today, August 23, 2023 – Public exposure doesn’t deter this attacker, and more

• Ensuring Cyber Resilience: The Critical Role of Threat Modeling in Software Security

• FTX’s Sam Bankman-Fried Surviving On ‘Bread And Water’

• Doubling of Identity Theft Victims With Suicidal Thoughts

• Syrian Threat Actor EVLF Unmasked as Creator of CypherRAT and CraxsRAT Android Malware

• Agile Approach to Mass Cloud Credential Harvesting and Crypto Mining Sprints Ahead

• The ‘US Cyber Trust Mark’ finally gives device makers a reason to spend big on security

• Personal Data Privacy: Trends, Challenges, and Solutions

• Researchers Demonstrate Apple Device Spoofing At Def Con 2023

• Microsoft Makes Concession To Win UK Activision Approval

• Carderbee Hacking Group Uses Legitimate Software in Supply Chain Attack

• Canadian PM Trudeau Slams Facebook Amid Wildfire Crisis

• Threat Actors Leak 2.6 Million DuoLingo Users` Data on Hacking Forum

• Choosing the Right Document Format – Business Guide 2023

• Apache XML Graphics Batik Flaw Exposes Sensitive Information

• Open redirect flaws increasingly exploited by phishers

• Security Onion 2.4: Free, open platform for defenders gets huge update

• Meta Releases Web Version Of Threads App

• Spacecolon Toolset Fuels Global Surge in Scarab Ransomware Attacks

• Five processes every organisation needs for successful BizDevOps

• Industrial networks need better security as attacks gain scale

• Exploitation of Ivanti Sentry Zero-Day Confirmed

• Cybersecurity’s Crucial Role Amidst Escalating Financial Crime Risks

• Experian Pays $650,000 to Settle Spam Claims

• Hackers exploit WinRAR zero-day bug to steal funds from broker accounts

• TP-Link Smart Bulb Spills Wi-Fi Passwords

• Carderbee APT targets Hong Kong orgs via supply chain attacks

• Why performing security testing on your products and systems is a good idea

• Over a Dozen Malicious npm Packages Target Roblox Game Developers

• TP-Link Tapo L530E smart bulb flaws allow hackers to steal user passwords

• Criminals go full Viking on CloudNordic, wipe all servers and customer data

• Meta plans to roll out default end-to-end encryption for Messenger by the end of the year

• Facebook users have little time left to make $725m data privacy claims

• Leveraging ChatGPT to Alleviate Stress on Cybersecurity Teams

• Scarabs colon-izing vulnerable servers

• Bitwarden launches Secrets Manager for teams

• Anticipating the next wave of IoT cybersecurity challenges

• How the downmarket impacted enterprise cybersecurity budgets

• Duolingo – 2,676,696 breached accounts

• How to make your phishing campaign a success

• Get the AT&T Cybersecurity Insights Report: Focus on US SLED

• ProxyNation: The dark nexus between proxy apps and malware

• Large-scale breaches overshadow decline in number of healthcare data incidents

• Cybercriminals turn to AI to bypass modern email security measures

• Profile Stealers Spread via LLM-themed Facebook Ads

• CarderBee hacking group targets organizations in Asia

• Threat actor targeted DOD contracting website

• Meta’s “massively multilingual” AI model translates up to 100 languages, speech or text

• How ChatGPT and Large Language Models Can Impact the Future of Cybersecurity

• A New Supply Chain Attack Hit Close to 100 Victims—and Clues Point to China

• Yet Another Glitch In The Matrix

• Update now! WinRAR files can be abused to run malware

• Alert Prioritization and Guided Remediation: The future of EDR

Generated on 2023-08-24 23:55:11.673566