IT Security News Daily Summary 2023-09-25

• Kick off a career in IT with this cybersecurity training bundle

• Xenomorph Android Malware Targets Customers of 30 US Banks

• MOVEit Flaw Leads to 900 University Data Breaches

• UAE-Linked ‘Stealth Falcon’ APT Mimics Microsoft in Homoglyph Attack

• Hackers steal $200M from crypto company Mixin

• The Future of Cybersecurity: Insights from Forrester’s Latest Report

• EFF at FIFAfrica 2023

• Mixin Network Halts Services After $200M Crypto Hack

• How to Compare the Contents of Local & Remote Files with the Help of SSH

• LogRhythm vs. SolarWinds (2023): SIEM Tool Comparison

• How to Compare the Contents of Local & Remote Files With the Help of SSH

• Are iPhones more secure than Android devices?

• 6 reasons Cisco acquired Splunk

• Weekly Vulnerability Recap – Sept. 25, 2023 – Flaws in Apple Devices, DevOps Tools and More

• Mixin suspends deposits and withdrawals after $200m cryptocurrency heist

• What is Digital Identity? | Avast

• A phishing campaign targets Ukrainian military entities with drone manual lures

• Navigating the Skies

• Are you ready to build your organization’s digital trust?

• Top 67 Cybersecurity Startups You Should Know in 2023

• CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

• 900 U.S. Schools Hit by MOVEit Hack, Exposing Student Data

• The U.S. Government’s Database of Immigrant DNA Has Hit Scary, Astronomical Proportions

• Sophisticated APT Clusters Target Southeast Asia

• CISA Releases Hardware Bill of Materials Framework (HBOM) for Supply Chain Risk Management (SCRM)

• Hackers steal $200 million from crypto company Mixin

• TA866 Threat Actor: Python Malware Targets Tatar-language Users

• Trends to watch at this year’s IoT Tech Conference

• Amazon Invests $4bn In Anthropic, As ChatGPT Gets Voice, Image Features

• Deadglyph: A New Backdoor Linked to Stealth Falcon APT in the Middle East

• China-Linked EvilBamboo Targets Mobiles

• CISA Adds Three Known Exploited Vulnerabilities to Catalog

• Decade of newborn child registry data stolen in MOVEit mass-hack

• Nurturing Our Cyber Talent

• Adarma Names James Todd as Chief Technology Officer, Reinforcing Dedication to Security Operations Excellence

• How to make sure the reputation of your products and company is good

• Medusa Ransomware Strikes Philippines’ PhilHealth, Demands $300,000 Ransom

• Spotify AI Tool Translates Podcasts In Speaker’s Own Voice

• The best travel VPNs of 2023: Expert tested and reviewed

• Voting Equipment Giants Team Up For Security

• SEC Probe ‘Collects Thousands Of Wall Street App Messages’

• Cyberattack Responses at MGM and Caesars Required Brutal Actions

• Accurate Eye Diagnosis, Early Parkinson’s Detection

• Two-Year Chase: FBI Relaunches Search for Cybercriminals

• BIND DNS System Flaws Let Attackers Launch DoS Attacks

• Nigerian Pleads Guilty in US to Million-Dollar BEC Scheme Role

• Stealthy APT Gelsemium Seen Targeting Southeast Asian Government

• The Hot Seat: CISO Accountability in a New Era of SEC Regulation

• Localization Problems: 10 Biggest Challenges and Solutions

• Huawei Launches Luxury Brand, Remains Silent On Advanced Chip

• Gossips on Cryptography: Part 1 and 2

• Apple issues security fixes for iPhone, iPad, Apple Watch to fight Predator spyware

• Web3 Platform Mixin Network Hit by $200m Crypto Hack

• City Of Dallas Details Ransomware Attack Impact, Costs

• 3 iOS 0-Days, A Cellular Network Compromise, And HTTP Used To Infect An iPhone

• Government Of Bermuda Links Cyberattacks To Russian Hackers

• 900 US Schools Impacted By MOVEit Hack At National Student Clearinghouse

• Webinar — AI vs. AI: Harnessing AI Defenses Against AI-Powered Risks

• Ukrainian Military Targeted in Phishing Campaign Leveraging Drone Manuals

• Zyxel announces WiFi 6-enabled security firewalls for small- and medium-sized business networks

• GitHub Makes Passkey For Passwordless Logins Publicly Available

• Hong Kong Regulator Seeks To Limit Fallout From JPEX Crypto Scandal

• The City of Kamloops Protects City Data and Networks with Check Point Software

• Cyber Hygiene: A First Line of Defense Against Evolving Cyberattacks

• Akira Ransomware Adapts to Linux Systems, Incorporates New Tactics and TTPs

• City of Dallas Details Ransomware Attack Impact, Costs

• 900 US Schools Impacted by MOVEit Hack at National Student Clearinghouse

• Alert! Patch your TeamCity instance to avoid server hack

• Scattered Spider “bites” in Las Vegas

• E-commerce Website Design: How to Build a Successful Online Store in 2023

• Are You Willing to Pay the High Cost of Compromised Credentials?

• Watch the Webinar — AI vs. AI: Harnessing AI Defenses Against AI-Powered Risks

• Thunder Shield Security introduces Custos to help organizations identify critical vulnerabilities

• National Student Clearinghouse MOVEit breach impacts nearly 900 schools

• Allegro Packets boosts analysis performance with new features and enhancements

• Amazon collaborates with Anthropic to advance generative AI

• Cyber Security Today, Sept. 25, 2023 – Hackers from India say they are targeting Canadian web sites

• LockBit 3.0 Ransomware Victim: altmanplants[.]com

• UK, EU Car Makers Call For Delay To Brexit EV Tariff

• Your Boss’s Spyware Could Train AI to Replace You

• A Tricky New Way to Sneak Past Repressive Internet Censorship

• New Report Uncovers 3 Distinct Clusters of China-Nexus Attacks on Southeast Asian Government

• From Watering Hole to Spyware: EvilBamboo Targets Tibetans, Uyghurs, and Taiwanese

• Cobalt Stike Beacon Detected – :

• Predator Spyware Delivered to iOS, Android Devices via Zero-Days, MitM Attacks

• In-the-Wild Exploitation Expected for Critical TeamCity Flaw Allowing Server Takeover

• Hands-on threat simulations: Empower cybersecurity teams to confidently combat threats

• BinDiff: Open-source comparison tool for binary files

• Frontend as a Service (FaaS): Revolutionizing Web Development for Speed and Simplicity

• Police, Teachers Say TikTok ‘Frenzies’ Placing Strain On Services

• 8 of the Best Cybersecurity Conferences

• Defending against DDoS Attacks: What you need to know

• How generative AI changes cybersecurity

• Almost 900 US Schools Breached Via MOVEit

• Researchers Spot Novel “Deadglyph” Backdoor

• BEC Scammer Pleads Guilty to Part in $6m Scheme

• Is Gelsemium APT behind a targeted attack in Southeast Asian Government?

• OpenKnowledgeMaps cross-site scripting | CVE-2023-40618

• Point of Sale Security Guide and Checklist

• Almost US 900 Schools Breached Via MOVEit

• New Report Uncovers Three Distinct Clusters of China-Nexus Attacks on Southeast Asian Government

• Software developers, how secure is your software?

• OilRig: Never-seen C#/.NET Backdoor to Attack Wide Range of Industries

• 8 Base Ransomware Victim: Springer Eubank

• 8 Base Ransomware Victim: J[.]T[.] Cullen Co[.], Inc[.]

• Don’t Get Burned by CAPTCHAs: A Recipe for Accurate Bot Protection

• Nigerian National pleads guilty to participating in a millionaire BEC scheme

• Understanding and Safeguarding against QR Code Phishing Attacks aka Quishing

• Hands-on threat simulations: empower cybersecurity teams to confidently combat threats

• Trending Ransomware News headlines on Google

• New variant of BBTok Trojan targets users of +40 banks in LATAM

• Nintendo adds Passkey passwordless authentication support to accounts

• Balancing cybersecurity with convenience and progress

• How global enterprises navigate the complex world of data privacy

• Fake celebrity photo leak videos flood TikTok with Temu referral codes

• Despite rising insider risk costs, budgets are being wasted in the wrong places

• Current ransomware defenses efforts are not working

• T-Mobile US exposes some customer data – but don’t call it a breach

• T-mobile US exposes some customer data – but don’t call it a breach

• T-mobile exposes some customer data – but don’t call it a breach

• Implementing Stronger RBAC and Multitenancy in Kubernetes Using Istio

• Future Skills in Cybersecurity: Nurturing Talent for the Evolving Threatscape

• 3 iOS 0-days, a cellular network compromise, and HTTP used to infect an iPhone

• Worm that jumps from rats to slugs to human brains has invaded Southeast US

• Incomplete disclosures by Apple and Google create “huge blindspot” for 0-day hunters

• ‘Power, influence, notoriety’: The hackers who struck MGM, Caesars

• Your Fingerprints Might Change the Color of Your iPhone 15 Pro

• RANSOMEDVC Ransomware Group Claims Breach of Sony Corporation

• IT Security News Daily Summary 2023-09-24

• EDRaser – Tool For Remotely Deleting Access Logs, Windows Event Logs, Databases, And Other Files

• Canada cyber centre issues caution after group from India issues threat

• FBI and CISA Issue Joint Advisory on Snatch Ransomware Threat

• Deadglyph, a very sophisticated and unknown backdoor targets the Middle East

• Sandman Hackers: Threat Actors use LuaDream Info-stealing Malware

• Report: Insider Cybersecurity Threats have Increased 40% Over the Past Four Years

• Unlocking the Future: Passkeys, the Next Frontier in Online Security

• Alphv group claims the hack of Clarion, a global manufacturer of audio and video equipment for cars

• Security Affairs newsletter Round 438 by Pierluigi Paganini – International edition

• Six Tips to Ensure a Strong Patch Management Strategy

• Ransomware Nightmare: FBI and CISA Issue Dire Warning on Menacing New Strain

• Don’t make this USB mistake! Protect your data with this encrypted gadget instead

• Popular Thesaurus Website Used in Sneaky Cryptojacking Scheme

• National Student Clearinghouse data breach impacted approximately 900 US schools

• Week in review: 18 free Microsoft Azure cybersecurity resources, K8 vulnerability allows RCE

• Samsung Mobile Processor Exynos 2200 denial of service | CVE-2023-42482

• Mobile Security Framework information disclosure | CVE-2023-42261

• Contribsys faktory denial of service | CVE-2023-37279

• Ivanti Endpoint Manager file disclosure | CVE-2023-38344

• Ivanti Endpoint Manager information disclosure | CVE-2023-38343

• Cyber Security Management System (CSMS) for the Automotive Industry

• Most Important Network Penetration Testing Checklist

• Unveiling the Power and Beast Practices of Data Encryption – Your Weekly Cybersecurity Tip

• Evasive Gelsemium hackers spotted in attack against Asian govt

• National Student Clearinghouse data breach impacts 890 schools

• Air Canada discloses data breach of employee and ‘certain records’

• New stealthy and modular Deadglyph malware used in govt attacks

• Researchers Discover Attempt to Infect Leading Egyptian Opposition Politician With Predator Spyware

Generated on 2023-09-25 23:55:40.308133