IT Security News Daily Summary 2023-09-07

• Rwanda Launches Smart-City Investment Program

• Apple discloses 2 new actively exploited zero-day flaws in iPhones, Macs

• Investing in Cybersecurity’s Future: A Conversation with Richard Seewald of Evolution Equity Partners

• Update NOW! Pegasus Spyware Exploit Found in iPhones Running Latest iOS

• Apple fixes zero-day bugs used to plant Pegasus spyware

• Best Practices To Secure Data Transmission

• Rigged Software and Zero-Days: North Korean APT Caught Hacking Security Researchers

• Apple Patches Actively Exploited iOS, macOS Zero-Days

• Rwanda Launches Smart City Investment Program

• Visa’s report makes a case for outsmarting payment fraud with AI now

• Patch ‘Em or Weep: Study Reveals Most Vulnerable IoT, Connected Assets

• NFL Security Chief: Generative AI Threats a Concern as New Season Kicks Off

• US and UK Mount Aggressive Crackdown on Trickbot and Conti Ransomware Gangs

• Weaponized Windows Installers Target Graphic Designers in Crypto Heist

• FBI Duck Hunt Operation Against Qakbot Resurgence

• Microsoft: How Chinese Hackers Stole Signing Key to Breach Outlook Accounts

• Implementing Zero-Trust in Enterprise Environments

• Wealthy Russian With Kremlin Ties Gets 9 Years in Prison for Hacking and Insider Trading Scheme

• A malvertising campaign is delivering a new version of the macOS Atomic Stealer

• Mozilla Names And Shames Privacy Compromising Cars

• How New SEC Rules Can Benefit Cybersecurity Teams

• The perils of the platforms of paranoia

• Perception Point combats QR code phishing threats using image recognition

• OPSWAT and BlackBerry join forces to strengthen cybersecurity for organizations

• Cloudflare One Data Protection Suite secures developer and AI environments

• Threat Actors Exploits SQL Servers to Deploy FreeWorld Ransomware

• Lawsuit claims Tesla corp data security is far less advanced than its cars

• API Vulnerabilities: 74% of Organizations Report Multiple Breaches

• The International Criminal Court Will Now Prosecute Cyberwar Crimes

• Mac Users Beware: Malvertising Campaign Spreads Atomic Stealer macOS Malware

• Publisher’s Spotlight: Fortra: Best-in-Class Cybersecurity Portfolio

• The cat and mouse game: Staying ahead of evolving cybersecurity threats

• Is Cybersecurity as a Service (CSaaS) the answer: Move faster | Do more

• Mobile threat defense or bust

• US Government To Investigate Hauwei Breakthrough Phone

• Thousands of dollars stolen from Texas ATMs using Raspberry Pi

• The Team8 Foundry Method for Selecting Investable Startups

• How Storm-0558 hackers stole an MSA key from Microsoft

• DGA Behavior Shifts Raise Cybersecurity Concerns

• Traderie, a marketplace for in-game items, alerts users to data breach

• Golfing Community Shaken as Calloway Data Breach Hits One Million Fans

• Hackers gain access to Microsoft Cryptographic Key to spy on US Govt Departments

• Zero-Day Flaw Exposes Atlas VPN User IPs

• Building a Cyber Resilient Business: The Protection Layer

• KnowBe4 Opens New Office to Bolster UK’s Northern Powerhouse

• Druva unveils new security and cyber resilience capabilities for MSPs

• Sprinklr integrates with Google Cloud for unified customer experience management

• The Future of Health and Medicine: The Impact of Generative AI

• Google Faces UK Lawsuit Claim It Contributes To Cost Of Living Crisis

• How Easy is Email Encryption? You’d Be Surprised.

• Webinar Today: Scaling Software Supply Chain Security

• ‘Atomic macOS Stealer’ Malware Delivered via Malvertising Campaign

• CISA Releases Guidance on Adopting DDoS Mitigations

• See Tickets Alerts 300,000 Customers After Another Web Skimmer Attack

• UK and US Sanction 11 Russians Tied to Conti/TrickBot Ransomware

• Peril vs. Promise: Companies, Developers Worry Over Generative AI Risk

• Chinese social media campaigns are successfully impersonating U.S. voters, Microsoft warns

• United Airlines Claims to Have Patched the Technical Glitch That Briefly Held Up Its Flights

• distributed ledger technology (DLT)

• US, UK authorities sanction more alleged Trickbot gang members

• Two flaws in Apache SuperSet allow to remotely hack servers

• Atlas VPN Zero-Day Vulnerability Exposes Linux Users’ IP Addresses

• Electoral Commission’s Cybersecurity Lapses Exposed Amidst Major Hack

• Cyber: Dealing with a Data Breach

• Does Generative AI Comply With Asimov’s 3 Laws of Robotics?

• China Bans iPhones From More Government Offices

• How China Gets Free Intel On Tech Companies’ Vulnerabilities

• Crash Dump Error: How A Chinese Espionage Group Exploited Microsoft’s Mistakes

• Cisco Patches Critical Vulnerability In BroadWorks Platform

• AI Abuse Grows Beyond Phishing To Multistage Cyberattacks

• AUCloud selects SentinelOne for government and business security

• Accenture and Workday help companies reinvent their finance functions

• How Chinese hackers got their hands on Microsoft’s token signing key

• Microsoft offers an explanation for the hack of its cloud

• IBM Notifies Janssen CarePath Customers of Data Breach

• Why consumer drones represent a special cybersecurity risk

• Phishing via Google Looker Studio

• Cisco Patches Critical Vulnerability in BroadWorks Platform

• ActiveFence snaps up Spectrum Labs, last valued at $137M, to help fight the harmful content creep

• Tenable to Acquire Cloud Security Firm Ermetic for $240 Million

• IBM Reports Patient Data Breach at Johnson & Johnson Subsidiary

• More than half of UK organisations know they aren’t well protected against cyber threats

• Payment diversion fraud poses significant threat to businesses

• Pynt introduces API security platform and raises $6 million

• MacOS malware has a new trick up its sleeve

• Tenable to acquire Ermetic for $240 million in cash and $25 million in restricted stock and RSUs

• Minneapolis School District Reveals Full Extent of Data Breach

• AI In Cybersecurity – Risks and Rewards

• Electoral Commission Fails Cyber-Security Test Amidst Major Data Breach

• ProtonMail Code Vulnerabilities Leaked Emails

• Facebook Trains Its AI on Your Data. Opting Out May Be Futile

• The State of the Virtual CISO Report: MSP/MSSP Security Strategies for 2024

• If you like to play along with the illusion of privacy, smart devices are a dumb idea

• BT Halts Sale Of New Copper Lines On Openreach Network

• Chinese Hacker Steals Microsoft Signing Key, Spies on US Government

• IBM Discloses Data Breach Impacting Janssen Healthcare Platform

• Cisco Finds 8 Vulnerabilities in OAS Industrial IoT Data Platform

• Alert: Apache SuperSet Vulnerabilities Expose Servers to Remote Code Execution Attacks

• The Hacker Tool to Get Personal Data from Credit Bureaus

• GAM3S.GG Raises $2M to Grow Web3 Gaming Superapp

• Chinese Hack of Microsoft Consumer Key Stemmed From its Engineer’s Corporate Account

• SafeBase acquires Stacksi to automate responses to security questionnaires

• Microsoft Account Compromise Led To Chinese Hack Of US Officials

• Mirai Botnet Variant ‘Pandora’ Hijacks Android TVs for Cyberattacks

• July 2023 Cyber Attacks Statistics

• UK drops ‘spy clause’ for scanning encrypted messages, admits it’s not ‘feasible’

• Think Tank Urges Labour to Promote “Securonomics” Agenda

• Hackers Use Weaponized LNK Files to Deploy RedEyes Malware

• Vendor Comparison: DIY Home Security Systems

• Vulnerabilities Uncovered: Critical Remote Code Execution Risks in ASUS Routers

• How to Get a Personal Loan as a Server or Waitress

• Hundreds of Scam Pages Uncovered in Major Investment Fraud Campaign

• AI triggers tech anxiety for senior leaders, reveals new research

• Government Abandons Plan To Scan Encrypted Messages

• UK Government Backs Down on Anti-Encryption Stance

• PHPFusion Flaw Allows Attackers to Read Critical System Data

• Do you know what your supply chain is and if it is secure?

• Outlook Breach: Microsoft Reveals How a Crash Dump Led to a Major Security Breach

• 3 Key Takeaways from the recently announced NIST Post-Quantum Cryptography Standards

• PHPFusion Critical Flaw Allows Attackers to Read Critical System Data

• Chinese cyberspies obtained Microsoft signing key from Windows crash dump due to a mistake

• How to use Tor browser (and why you should)

• 3 ways to strike the right balance with generative AI

• LibreOffice: Stability, security, and continued development

• Ransomware spreading gang reveals visa details of working employees in America

• China reportedly bans iPhones from more government offices

• UK Government withdraws proposal for controversial spy clause in its Online Safety Bill

• Shifting left and right, innovating product security

• How cybercriminals use look-alike domains to impersonate brands

• Battling malware in the industrial supply chain

• Leveraging AT&T Cybersecurity Consulting for a robust Zero Trust Center of Excellence

• Baseline standards for BYOD access requirements

• Cybersecurity pros battle discontent amid skills shortage

• How Zero Trust and XDR Work Together

• CybeReady Provides Cybersecurity Awareness Month Kits As CISOs Defend Against AI Driven Attacks

• FreeWorld ransomware attacks MSSQL—get your databases off the Internet

• Smart chastity device exposes sensitive user data

• X wants your biometric data

• Mac users targeted in new malvertising campaign delivering Atomic Stealer

• Coding Tips to Sidestep JavaScript Vulnerabilities

• The Comedy of Errors That Let China-Backed Hackers Steal Microsoft’s Signing Key

• CrowdStrike CEO talks generative AI, cybersecurity and new ‘virtual security analyst’

• Cybersecurity Builds Trust in Critical Infrastructure

• Microsoft: China stole secret key that unlocked US govt email from crash debug dump

• IBM Expands Cloud Security and Compliance Center

• IBM Addresses Data Incident for Janssen CarePath Database

• W3LL Gang Compromises Thousands of Microsoft 365 Accounts

• Zscaler CEO Jay Chaudhry talks 2024 outlook after quarterly earnings beat

• IT Security News Daily Summary 2023-09-06

• Crash Dump Error: How a Chinese Espionage Group Exploited Microsoft’s Mistakes

• How to prevent ransomware in 6 steps

• Facebook Oversight Board Says Posts About Abortion Are Not Death Threats

• Guy who ran Bitcoins4Less tells Feds he had less than zero laundering protections

• Cash-Strapped IronNet Faces Bankruptcy Options

• Understanding Google Analytics 4, Server-Side Tracking, and GDPR Compliance

• Okta: 4 customers compromised in social engineering attacks

• AtlasVPN Linux Zero-Day Disconnects Users, Reveals IP Addresses

• China Bans Government Officials From Using Apple iPhones – Report

• Vulnerability Summary for the Week of August 28, 2023

• MinIO Attack Showcases Fresh Corporate Cloud Attack Vector

• Google addressed an actively exploited zero-day in Android

• Intro To Honeypots

• Russian Cyber-Attacks and the Looming Threat of WW3

• Newport Wafer Fab To Cut Jobs, Blames Government Restrictions

• Unveiling Vulnerabilities via Generative AI

• How to stop Google from selling your browser history for ad targeting

• Best VPN for streaming in 2023: Unblock your favorite streaming services now

• The best travel VPNs of 2023: Expert tested and reviewed

• Russia’s ‘Fancy Bear’ APT Targets Ukrainian Energy Facility

• Ransomware gang claims credit for Sabre data breach

• Results of Major Technical Investigations for Storm-0558 Key Acquisition

• Cut through cybersecurity vendor hype with these 6 tips

• A zero-day in Atlas VPN Linux Client leaks users’ IP address

• EC Names Alphabet, Apple, Meta, Microsoft Among DMA Gatekeepers

• The best VPN deals for September 2023

• Webinar Tomorrow: Unpacking the Secure Supply Chain Consumption Framework (S2C2F)

• Investors Betting Big on Upwind for CNAPP Tech

• Google’s Souped-up Chrome Store Review Process Foiled by Data-Stealer

• Insight Managed Cloud Services streamline cloud management

• Staying ahead of threats: 5 cybercrime trends to watch

• Government Denies U-Turn On Encrypted Messaging Row

• What Businesses Need To Know To Comply With SEC’s New Cyber Disclosure Rules

• Android Zero Day Patched With September 2023 Security Updates

• SaphhireStealer: New Malware in Town, Possess More Capabilities

• Revolutionizing the Future: How AI is Transforming Healthcare, Cybersecurity, and Communications

• Keeping cybersecurity regulations top of mind for generative AI use

• Biden’s IoT Cybersecurity initiative

• New Agent Tesla Variant Uses Excel Exploit to Infect Windows PCs

• Russian APT28 Hacking Group Attacking Critical Power Infrastructure

• One-Click Deploying EMQX MQTT Broker on AWS Using Terraform

• Coffee Meets Bagel outage caused by cybercriminals deleting data and files

• Jim Cramer calls Palo Alto Networks’ CEO the Tom Brady of executives

• Considerations to be made when dealing with Ransomware Payments

• Password-Stealing Chrome Extension Demonstrates New Vulnerabilities

• Dozens of Unpatched Flaws Expose Security Cameras Made by Defunct Company Zavio

• Thousands of Popular Websites Leaking Secrets

• Old vulnerabilities are still a big problem

• Netskope acquires Kadiska for enhanced network and app performance monitoring

• D2iQ DKP 2.6 improves Kubernetes management capabilities

• CyberSaint launches Remediation Suite to optimize resource allocation and decision-making

• Taming Your Android: A Step-Step Guide to Restricting Background App Data

• Publisher’s Spotlight: IANS: Providing Expert Guidance to CISOs and their Teams

• TikTok Opens First European Data Centre Amid China Fears

• Hackers Steal Over $5,700 from ATMs Using Raspberry Pi

• Hackers Use Flipper Zero Device to Attack Nearby iPhones with Notification Pop-ups

• Why companies must use AI to think differently, and not simply to cut costs

• MITRE and CISA Release OT Attack Emulation Tool

• Machine learning operations can revolutionize cybersecurity

• Obsessed with privacy? Keep Tails on a USB drive and secure most any computer

• Alert: Phishing Campaigns Deliver New SideTwist Backdoor and Agent Tesla Variant

• Zero-Day Alert: Latest Android Patch Update Includes Fix for Newly Actively Exploited Flaw

• Simple Guide: Enabling Virtualization on Windows 11

• Six ways to safeguard important digital assets

• China’s Temu App Pose a Security Threat to Online Shoppers

• Securing Your Legacy: Identities, Data, and Processes

• The most surveilled football stadiums around the world

• Cybercriminals target MS SQL servers to deliver ransomware

• TXOne Networks Edge V2 isolates security breaches

• The Best of Both Worlds Made Possible with A Hybrid SOC

• UK Ministry Of Defence Documents Leaked After Supplier Hack

• 25 Major Car Brands Get Failing Marks From Mozilla for Security and Privacy

• How China Demands Tech Firms Reveal Hackable Flaws in Their Products

• REVEALED: Lineup of IT pioneers and practitioners navigating the next realm of digital and AI

• Testing Microservices: Performance Testing Challenges and Strategies

• Cybersecurity in Spain – Challenges and Solutions

• Meatbag mishaps more menacing than malware? CISOs think so

• Freecycle Data Breach: Urgent Password Update Required

• The Role of AI in Cybersecurity

• Addressing the Rising Threat of Web DDoS Tsunami Attacks in 2023

• Overcoming Open Source Vulnerabilities in the Software Supply Chain

• See Tickets says hackers accessed customers’ payment data — again

• Meet the AI, fintech, SaaS and security industry chairs at TC Disrupt 2023

• API security startup Pynt raises $6M

• Android Zero-Day Patched With September 2023 Security Updates

• Russia-Backed APT28 Tried to Attack a Ukrainian Critical Power Facility

• BugProve Discovers Critical Security Vulnerabilities in Zavio IP Cameras

• Fasoo collaborates with Egnyte to simplify data governance

• NTT launches Samurai XDR SaaS to strengthen detection and response capabilities across the network

• Heimdal®’s Semiannual Rundown of the Most Exploited Vulnerabilities of 2023

• Three CISOs Share How to Run an Effective SOC

• Cyber Security Today, Sept. 6, 2023 – Advice on cyber insurance

• AtlasVPN to Patch IP Leak Vulnerability After Public Disclosure

• Chrome 116 Update Patches High-Severity Vulnerabilities

• Hacker Conversations: Alex Ionescu

• High-Severity Vulnerability Discovered in Popular CMS

• Russia-Backed APT28 Tried to Attack Ukrainian Critical Power Facility

• Generative AI’s Biggest Security Flaw Is Not Easy to Fix

• Cryptocurrency Startup Loses Encryption Key for Electronic Wallet

• accessiBe: Transforming the Web With An Ecosystem of Accessibility Solutions

• MITRE and CISA release Caldera for OT attack emulation

• University of Sydney Reports Data Breach

• Okta warns against attacks targeting IT service desk agents

• Elon Musk Blames ADL For Ad Revenue Slump, Threatens Lawsuit

• Caldera: A New Security Tool to Emulate Attacks in Critical Infrastructure

• 9 Alarming Vulnerabilities Uncovered in SEL’s Power Management Products

• Blame Culture: An Organisation’s Ticking Time Bomb

• Cloudera partners with AWS to help organizations accelerate their modernization to the cloud

• W3LL Store: How a Secret Phishing Syndicate Targets 8,000+ Microsoft 365 Accounts

• School’s Back, Cyberattack: Navigating Cyberattacks in the Education Sector

• 5 Common Business Mistakes in Ransomware Prevention Planning

• What is ISO 27002:2022 Control 8.9? A Quick Look at the Essentials

• UK Boards Are Growing Less Concerned About Cyber-Risk

• Experts Uncover Underground Phishing “Empire” W3LL

• Fortifying Cybersecurity for Schools as New Academic Year Begins

• Hackers Using BlueShell Malware to Attack Windows, Linux, and Mac Systems

• Crypto Casino Stake.com Back Online After $40m Heist

• Ukraine’s CERT Thwarts APT28’s Cyberattack on Critical Energy Infrastructure

• ASUS routers are affected by three critical remote code execution flaws

• MITRE Caldera for OT now available as extension to open-source platform

• Why performing security testing on your products and systems is a good idea

• Cyber Threats Emerging from Text Message Spam and Smishing

• Top 5 Cybersecurity Concerns with 5G

• Are kids using ChatGPT for school projects?

• Critical security vulnerabilities in ASUS routers — update immediately

• Compliance budgets under strain as inflation and workload grow

• Cyber talent gap solutions you need to know

• Emerging threat: AI-powered social engineering

• Securing the smart cities of tomorrow: Cybersecurity challenges and solutions

• United Airlines Says the Outage That Held Up Departing Flights Was Not a Cybersecurity Issue

• Nascent Malware Attacking npm, PyPI, and RubyGems Developers

• CIS Benchmarks Communities: Where configurations meet consensus

• From unsuspecting click to data compromise

• Avoidable digital certificate issues fuel data breaches

• Diving Deeper Into Windows Event logs for Security Operation Center (SOC) – Guide

• North Korean hackers have allegedly stolen hundreds of millions in crypto to fund nuclear programs

• Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

• Malicious attackers can flood iPhone users with endless popups using a $170 tool

• Password-stealing Chrome extension smuggled on to Web Store

• Reddit faces content quality concerns after its Great Mod Purge

• 4 Okta customers hit by campaign that gave attackers super admin control

• What OpenAI Really Wants

• TikTok hires Britain’s NCC for auditing data security

• United Airlines says outage that held up departing flights was not a cybersecurity issue

Generated on 2023-09-07 23:55:26.212272