IT Security News Daily Summary 2023-10-19

• SailPoint Unveils Annual ‘Horizons of Identity Security’ Report

• Fingerprint Raises $33M in Series C Funding to Accelerate Enterprise Device Intelligence and Fraud Prevention Adoption

• Spec Secures $15M Series A Funding, Accelerating Innovation in Fraud Defense

• Norton Boosts Security and Privacy With Enhanced Password Manager and AntiTrack

• AI ‘Will Have a Significant Impact on Energy Industry,’ EPRI Tells Congress

• The First Step In Product Development: It’s Not Development, It’s The Idea

• E-Root Marketplace Admin Extradited to US on Computer Fraud Charge

• Better safe than sorry: 10 tips to build an effective business backup strategy

• 23AndMe Hacker Leaks New Tranche of Stolen Data

• North Korean State Actors Attack Critical Bug in TeamCity Server

• A warning to software founders developing apps with lean teams and open source code

• Casio keyed up after data loss hits customers in 149 countries

• North Korean hackers exploit critical TeamCity vulnerability

• Europol Strike Wounds Ragnar Locker Ransomware Group

• DEF CON 31 – Laurie Kirk’s ‘Runtime Riddles – Abusing Manipulation Points In The Android Source’

• Cisco Web UI Vulnerability Exploited Massly, Impacting Over 40K Devices

• Enterprise security challenges for CNI organizations: Technical solutions to address security challenges

• Runtime security deep dive: Ask An OpenShift Admin episode 116

• EU Sets Deadline For Meta, TikTok To Detail Efforts To Curb Misinformation

• Beat the Bots to Defeat SMS Toll Fraud in Gaming

• New “Complaint Stealer” Malware Escalates, Targeting Cryptocurrency Wallets & Hospitality Sector

• Human Error: Casio ClassPad Data Breach Impacting 148 Countries

• CISA, NSA, FBI publish phishing guidance

• Tips for a Successful SecOps Game Plan

• The Role of IoT Vulnerabilities in Identity Theft: An Unseen Danger for High-Net-Worth Individuals (HNWI)

• AI-Powered Israeli ‘Cyber Dome’ Defense Operation Comes to Life

• Tips for a Successful SecOps Gameplan

• HackerOne Bug Bounty Disclosure: b-deny-admin-from-editing-linkedin-company-page-using-gen-form-visibility-via-post-voyager-api-voyagerorganizationdashcompanies-id-b-domg

• HackerOne Bug Bounty Disclosure: b-responsive-server-side-request-forgery-ssrf-b-bhmth

• BTS #15 – Reverse Engineering BMCs and Other Firmware – Vladyslav Babkin

• APTs Exploiting WinRAR 0day Flaw Despite Patch Availability

• Europol knocks RagnarLocker offline in second major ransomware bust this year

• What is Private Cloud Security? Everything You Need to Know

• CISA Adds Two Known Exploited Vulnerability to Catalog

• Dashlane limits Free users to 25 passwords starting next month

• Q&A: The Outlook for Israeli Cyber Startups, As War Clouds Gather

• Protecting industrial networks from cyber threats. Where do I start?

• Attack Surface Management: The Role it Plays in Cybersecurity

• DNA Data Breaches: A Growing Cybersecurity Concern

• Maritime Companies Increasingly Paying Ransoms Amidst Ransomware Surge

• Meta To Deploy Broadcast Channels For Facebook, Messenger

• Structured Threat Information eXpression (STIX)

• Securing generative AI starts with sustainable data centers

• The cyber risks of overheating data centers

• Cybercrim claims fresh 23andMe batch takes leaked records to 5 million

• Threat Spotlight: Initial Access Brokers on Russian Hacking Forums

• Growing Threat of Cyberattacks Puts Businesses at Risk

• QR Codes Used in 22% of Phishing Attacks

• How to build a content governance model

• Patch Now: APTs Continue to Pummel WinRAR Bug

• Telegram is still leaking user IP addresses to contacts

• Hackers exploit zero-day to compromise tens of thousands of Cisco devices

• Another InfoStealer Enters the Field, ExelaStealer

• Clever malvertising attack uses Punycode to look like KeePass’s official website

• Discord’s Security Challenge: APTs Enter the Malware Mix

• WhatsApp Announces Passkey Support for its Users

• Druva launches Dru to make data protection more autonomous

• Valve Enhances Steam Security With SMS Verification

• Embracing Minimalism: The “Less is More” Approach in UI/UX Design

• 61% of firms worry they are unprepared for security risks in quantum era

• CISA Releases One Industrial Control Systems Advisory

• Cisco IOS XE vulnerability widely exploited in the wild

• 3 crucial security steps people should do, but don’t

• Clever malvertising attack uses Punycode to look like KeePass’s official website

• US Authority Investigates Pedestrian Threats at GM’s Self-Driving Unit Cruise

• Nvidia, Foxconn Partner Up To Build ‘AI Data Centres

• Top 5 Benefits of Data Lineage

• More Content Moderators Sue Facebook For Being Exposed To Graphic Content

• Iran-Linked ‘MuddyWater’ Spies on Mideast Gov’t for 8 Months

• RagnarLocker ransomware dark web site seized in international sting

• Sophisticated MATA Framework Strikes Eastern European Oil and Gas Companies

• Hacktivism in 2023: From Grassroots Movements to State-Sponsored Threats

• What is ransomware? Everything you need to know and how to reduce your risk

• Ex-Navy IT manager jailed for selling people’s data on the dark web

• Ex-Navy IT manager gets 5 years in slammer for 2018 database heist

• CISA, NSA, FBI, and MS-ISAC Release Update to #StopRansomware Guide

• THE 11TH EDITION OF THE ENISA THREAT LANDSCAPE REPORT IS OUT!

• Privacy Advocates To TSA: Slow Down Plans For mDLs

• There’s A New Way To Flip Bits In DRAM

• You Need To Update WinRAR, Right Now

• Hacker Leaks Millions More 23AndMe User Records On Cybercrime Forum

• Database Ransomware: From Attack to Recovery

• Be On Alert; That HR Email Could Be A Phishing Email!

• Zumigo unveils QR code for passwordless login

• What Is Phishing-as-a-Service (PhaaS) and How to Protect Against It

• Securing Police Communications: Protecting Communities

• Google Enhances Play Protect to Defend Against Polymorphic Malware

• Use of QR Codes in Phishing Campaigns is on the Rise

• Zumigo introduces QR code for passwordless login

• Sumsub For Fake’s Sake combats deepfake and synthetic fraud

• Endpoint security in the cloud: What you need to know

• antispoofing

• October Cybersecurity Awareness Month to target internal security risks

• Hybrid Work in Higher Education: What’s Next?

• 3 Ways the Threat Landscape Is Changing

• August 2023 Cyber Attacks Statistics

• Open Source DAST, Browser Security and EDR: Security Tools Anyone Can Afford

• Key Factors and Measures to Address Burnout In The Cybersecurity Field

• itemis and Cybellum partner to enhance product software security

• Hackers Exploit QR Codes with QRLJacking for Malware Distribution

• Developer Week CloudX 2023: Better Security and Accessibility in the Cloud

• Closing the Cybersecurity Skills Gap and Opening Opportunities

• IDC Spotlight: Cisco Secure Access Delivers on Promise of SSE

• Cybersecurity Spending Slows as Investment Patterns Shift

• AuditBoard unveils AI and analytics capabilities to help teams automate critical workflows

• Google Play Protect Introduces Real-Time Code-Level Scanning for Android Malware

• Vulnerability Scanning: How Often Should I Scan?

• This year’s Security Serious Unsung Heroes Awards winners named

• LockBit 3.0 Ransomware Victim: salaw[.]com

• LockBit 3.0 Ransomware Victim: thecsi[.]com

• LockBit 3.0 Ransomware Victim: smart-union[.]org

• LockBit 3.0 Ransomware Victim: frs-fnrs[.]be

• LockBit 3.0 Ransomware Victim: fdf[.]org

• Mastercard enhances its solutions using AI technology

• US Charge Man with Running Stolen Credentials Marketplace

• North Korea-linked APT groups actively exploit JetBrains TeamCity flaw

• The Urgency for Robust Utility Cybersecurity

• Understanding the Difference Between Penetration Testing and Vulnerability Scanning

• Google Play Protect takes on malicious apps with code-level scanning

• Iran-Linked OilRig Targets Middle East Governments in 8-Month Cyber Campaign

• Google Russia Declared Bankrupt After Bank Account Seizure

• What We Learned from the 2023 Annual Cybersecurity Attitudes and Behaviors Report

• Resecurity partners with Spire Solutions to protect organizations in the MEA region

• North Korean Attackers Exploiting Critical CI/CD Vulnerability

• How much money did MGM lose due to last month’s cyber-attack?

• EU Elections at Risk with Rise of AI-Enabled Information Manipulation

• Money-making scripts attack organizations

• Nokia To Axe 14,000 Jobs As US Demand Declines

• Government officials debate effectiveness of multilateral relations in cybersecurity

• WebAuthn4J Spring Security security bypass | CVE-2023-45669

• QNAP QTS, QuTS hero, and QuTScloud directory traversal | CVE-2023-32974

• Who Hit The Page – Hit Counter plugin for WordPress cross-site scripting | CVE-2023-46066

• XnSoft NConvert for Windows denial of service | CVE-2023-43251

• Zephyr buffer overflow | CVE-2023-4263

• Google ads for KeePass, Notepad++ lead to malware

• 2024 cybersecurity predictions: GenAI edition

• Hacker Group GhostSec Unveils New Generation Ransomware Implant

• IT Spending Worldwide To Increase 8 Percent Next Year

• Knight Ransomware Victim: National Health Mission[.] Department of Health & Family Welfare, Govt[.] of U[.]P

• Can AI detectors save us from ChatGPT? I tried 5 online tools to find out

• Microsoft Warns of North Korean Attacks Exploiting JetBrains TeamCity Flaw

• Do you know what your supply chain is and if it is secure?

• Microsoft Warns of North Korean Attacks Exploiting TeamCity Flaw

• Interesting cyber attack headlines trending on Google for this day

• Sustainability data — Are we comparing apples and oranges?

• Hackers Using Secure USB Drives to Attack Government Entities

• Multiple APT groups exploited WinRAR flaw CVE-2023-38831

• Old WinRAR vulnerability is exploited by government-backed actors

• The must-knows about low-code/no-code platforms

• NSFOCUS AISecOps: Elevating Your Security Operations Efficacy and Mitigating Alert Fatigue

• Google links WinRAR exploitation to Russian, Chinese state hackers

• MATA malware framework exploits EDR in attacks on defense firms

• Recently patched Citrix NetScaler bug exploited as zero-day since August

• Qubitstrike attacks rootkit Jupyter Linux servers to steal credentials

• FBI warns of extortion groups targeting plastic surgery offices

• Addressing cyber threats in healthcare operational technology

• Reinforcing cybersecurity: The network’s role to prevent, detect, and respond to attacks

• Google TAG Detects State-Backed Threat Actors Exploiting WinRAR Flaw

• The Trifecta of Consumer Data Privacy: Education, Advocacy & Accountability

• Cyber resilience starts in the C-suite

• From Within: Defending Against Insider Threats

• Business resilience becomes primary force behind cybersecurity investments

• FBI Warns of Extortionists Stealing Plastic Surgery Data for Ransom

• MapleSEC: How to stop CSOs from saying, ‘Goodbye’

• MapleSEC: Rogers Cybersecure Catalyst launches Cyber Talent Management Playbook to address skills shortage

• How to Design Software to Reduce Breaches Caused by Human Error

• A Technical Deep Dive on Meltdown and Does It Work?

• MapleSEC: ‘Quiet hiring’ key to helping reduce cybersecurity staffing crisis

• Android will now scan sideloaded apps for malware at install time

• Elon Musk’s X (Twitter) to Charge $1 for Basic Features

• North Korea experiments with AI in cyber warfare: US official

• Cybersecurity Awareness Month: The Evolution of Ransomware

• How AI can help close IoT’s growing security gaps to contain ransomware

• What CISOs Should Exclude From SEC Cybersecurity Filings

• Who’s Responsible for the Gaza Hospital Explosion? Here’s Why It’s Hard to Know What’s Real

• IT Security News Daily Summary 2023-10-18

• D-Link Confirms Breach, Rebuts Hacker’s Claims About Scope

• Who’s Responsible for the Gaza Hospital Blast? Here’s Why It’s Hard to Know What’s Real

• Privacy Advocates to TSA: Slow Down Plans for mDLs

• Regulations are still necessary to compel adoption of cybersecurity measures

• ExpressVPN Review (2023): Pricing, Features, Pros, & Cons

• FBI: Hackers Are Extorting Plastic Surgery Providers, Patients

• Californian IT company DNA Micro leaks private mobile phone data

• Qubitstrike Malware Hits Jupyter Notebooks for Cryptojacking and Cloud Data

• DEF CON 31: A Hot Time in the Las Vegas Heat and Some Cool Days in AppSec Village

• Critical Citrix Bug Exploited as a Zero-Day, ‘Patching Is Not Enough’

• The Most Popular IT Admin Password Is Totally Depressing

• Spoofed Rocket Alert App Targets Israeli Android Users with Spyware

• CISA, NSA, FBI, MS-ISAC Publish Guide on Preventing Phishing Intrusions

• 12 Best Windows Server Patch Management Software & Tools 2023

• Amazon Drones Begin Medicine Deliveries In Texas

• Phishing: What’s in a Name?

• EPA Turns Off Taps on Water Utility Cyber Regulations

• Elon Musk’s Main Tool for Fighting Disinformation on X Is Making the Problem Worse, Insiders Claim

• CISA, NSA, FBI, and MS-ISAC Release Phishing Prevention Guidance

• HackerOne Bug Bounty Disclosure: b-html-injection-at-company-name-or-product-name-and-can-be-shown-on-contact-sales-form-b-domg

• HackerOne Bug Bounty Disclosure: b-hackers-two-email-disclosed-on-submission-at-hackerone-hactivity-b-rynexx

• Five Eyes Intelligence Heads Warn Of Chinese Cyber Espionage

• Mandiant: Citrix zero-day actively exploited since August

• Adtech Surveillance and Government Surveillance are Often the Same Surveillance

• Multiple SonicWall Vulnerabilities Resulted in a Firewall Crash

• How To Learn Cyber Security Step-by-Step

• Hacker leaks millions more 23andMe user records on cybercrime forum

• Digital Identity Firms Being Bolstered by Investments

• The Iron Swords War – Cyber Perspectives from the First 10 Days of the War in Israel

• What are passkeys? Experience the life-changing magic of going passwordless

• Google Authenticator

• North Korea’s Kimsuky Doubles Down on Remote Desktop Control

• How to Build Elite Technical Teams Internally with Cybersecurity Training

• FBI Boss Slams Unprecedented Chinese Cyber Espionage And IP Theft

• D-Link Clears Up Exaggerations Around Data Breach

• Former Navy IT Manager Sentenced To Prison For Hacking, Selling PII

• Twitter Glitch Allows CIA Informant Channel To Be Hijacked

• FBI: Cybercriminals Targeting Plastic Surgery Offices And Patients

• Employee Clicking on Phishing Link Leads to D-Link Data Breach

• The Complex Landscape of Cybersecurity Threats in South Africa

• Compromised Skype Accounts Facilitate DarkGate Malware Spread

• Cyber attack on payment systems could cost $3.5 trillion loss to the world

• Signal Debunks Rumors About Zero-Day Vulnerability In The App

• Musk’s X Charges New Users $1 Annual Subscription Fee

• Synology NAS System Flaw Let Attackers Remotely Hijack the Admin Account

• Survey Surfaces High Levels of Burnout Among Cybersecurity Professionals

• Google Play Protect Bolsters Security Against Malicious Apps

• What Australian IT Leaders Need to Focus on Ahead of Privacy Act Reforms

• Russia and China-backed hackers are exploiting WinRAR zero-day bug

• Role of Biometric Authentication in Metaverse Technology

• Protecting Goa’s Seniors from Increasing Cyber Threats

• State-sponsored APTs are leveraging WinRAR bug

• AI Adoption Surges But Security Awareness Lags Behind

• China Lashes Out As US Tightens Chip Export Controls

• Plastic surgeries warned by the FBI that they are being targeted by cybercriminals

• D-Link clears up ‘exaggerations’ around data breach

• Lazarus Group Targeting Defense Experts with Fake Interviews via Trojanized VNC Apps

• The US wants governments to commit to not paying ransoms

• Securing Your Conversations: WhatsApp Introduces IP Masking for Calls

• Chen mum on his future with BlackBerry

• The Cost of Magecart: More Than Just a Single Fine

• Juniper Networks enhances Connected Security portfolio with new products and capabilities

• Citrix NetScaler bug exploited in the wild since August (CVE-2023-4966)

• Guardz unveils AI-powered cyber risk assessment prospecting too for MSPs

• Understanding Saudi Arabia’s personal data protection law

• JSpector – Burp Suite Extension To Crawl JavaScript (JS) files

• The Fake Browser Update Scam Gets a Makeover

• Facebook Is Reportedly Suppressing Posts About Middle East Conflict

• Pro-Iranian Hacktivists Set Sights on Israeli Industrial Control Systems

• The Need for a Cybersecurity-Centric Business Culture

• Threat actors have been exploiting CVE-2023-4966 in Citrix NetScaler ADC/Gateway devices since August

• Cybercrime, Cyber Warfare, and Government Attitudes Towards Cybersecurity

• ISACA CEO Hails Europe as a Lighthouse of Capability

• Implementing HPKE in OpenSSL 3.2

• US Cuts China Off From AI Chips, As Export Controls Tightened

• 7 risk mitigation strategies to protect business operations

• Israeli Cybersecurity Startups: Impact of a Growing Conflict

• Digital Identification: The Cornerstone for Confidence Online

• Arcitecta Mediaflux Pocket protects enterprise data

• Critical Citrix NetScaler Flaw Exploited to Target from Government, Tech Firms

• Ensuring Container Security: Safeguarding the Future Of Cloud Computing

• Data Protection: Why SMEs are Targeted by Hackers

• The Evolution of Smart Contract Threats: Staying Ahead with Proactive Auditing

• Silicon Insights: Integrated B2B Marketing Strategies that Succeed: Part 1

• Walmart Jumps to Top Spot as the Most Impersonated Brand for Phishing Scams in Q3 2023

• CIA exposed to potential intelligence interception due to X’s URL bug

• Data Security and Collaboration in the Modern Enterprise

• Keeper Security Protects Against Supply Chain Attacks with New Open Source Project

• DigiCert Survey Reveals Post-Quantum Cybersecurity Challenges

• Cyber Security Today, Oct. 18, 2023 — Plug this Cisco vulnerability now

• Protecting against Ransomware, how Cisco Umbrella can help meet 2022 FFIEC Regulatory Update

• Thales introduces SafeNet IDPrime FIDO Bio Smart Card

• Qubitstrike Targets Jupyter Notebooks with Crypto Mining and Rootkit Campaign

• Unraveling Real-Life Attack Paths – Key Lessons Learned

• Darwinium brings digital security and fraud prevention to the perimeter

• Passwordless authentication startup SecureW2 raises $80M from Insight Partners

• A flaw in Synology DiskStation Manager allows admin account takeover

• Hackers Switching from Weaponized Office Documents to CHM & LNK Files

• Generation Privacy

• Analysis of Intellexa’s Predator Spyware

• LockBit 3.0 Ransomware Victim: kasperekusaoptical[.]com

• Prove Identity raises $40 million to boost its digital identity solutions

• Jupyter Notebooks targeted by cryptojackers

• Streamlining Success: The Crucial Role of Web Services Testing

• Global Economy Could Lose $3.5trn in Systemic Cyber-Attack

• Businesses Turn To Remote Workers To Obtain Skills, Expereo Finds

• Prisma Cloud: Darwin Release Introduces Code-to-Cloud Intelligence

• Data Breach Response: Protecting Your Digital Life After an Incident

• Five Eyes Warn Deep Tech Start-Ups Against Nation-State Threats

• Hackers Deliver Weaponized Notepad++ Via Google Ads

• The Peril of Child Identity Theft and How to Mitigate It

• Jupyter Notebook Ripe for Cloud Credential Theft, Researchers Warn

• Updated MATA attacks industrial companies in Eastern Europe

• 16-31 August 2023 Cyber Attacks Timeline

• 5 Tips for Choosing a Managed Security Services Provider

• Node.js security bypass | CVE-2023-39331

• Grafana privilege escalation | CVE-2023-4822

• HP displays security bypass | CVE-2023-5449

• Extreme Networks Switch Engine (EXOS) directory traversal | CVE-2023-43121

• OpenTelemetry OpenTelemetry-Go Contrib denial of service | CVE-2023-45142

• TetrisPhantom: Cyber Espionage via Secure USBs Targets APAC Governments

• FBI: Hackers Are Extorting Plastic Surgery Patients

• Cyber Security Awareness Month – Answering Google’s Most Commonly Asked Questions

• Knight Ransomware Victim: US Claims Solutions

• D-Link confirms data breach, but downplayed the impact

• DTEX and ServiceNow: A Powerful Integration for Maturing Insider Risk Capability

• Why performing security testing on your products and systems is a good idea

• Why do apps keep getting hacked?

• New Admin Takeover Vulnerability Exposed in Synology’s DiskStation Manager

• Trending cyber attack related news headlines on Google

• How Turning Off Bluetooth Can Safeguard Your Mobile from Cyber Attacks

• Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

• Zygon helps startups avoid data breaches from SaaS providers

• Six Algorithms for Defending Against the Novel “HTTP/2 Rapid Reset” DDoS Attack

• Our new principles to help make cloud backups more resilient

• Amazon adds passkey support as new passwordless login option

• Over 40,000 admin portal accounts use ‘admin’ as a password

• Fighting off cyberattacks? Make sure user credentials aren’t compromised

• SpyNote Android malware spreads via fake volcano eruption alerts

• Over 10,000 Cisco devices hacked in IOS XE zero-day attacks

• 10 essential cybersecurity cheat sheets available for free

• The evolution of deception tactics from traditional to cyber warfare

• D-Link Confirms Data Breach: Employee Falls Victim to Phishing Attack

• SMBs seek help as cyber threats reach an all-time high

• Unlocking Security: Two-Factor Authentication (2FA) Demystified

• Secure source code but vulnerable app: Tackle compiler-born vulnerabilities

• Generative AI merges with intelligent malware, threat level rises

• AndroidLista – 6,640,643 breached accounts

• Phoenix – 74,776 breached accounts

• 2023-10-16 – TA577 IcedID infection

• 2023-10-17 – TA577 Pikabot infection with Cobalt Strike

• Posh C2 Detected – 193[.]36[.]15[.]250:443

• AI: A Collaborative Tool in Writing, Not Just a Replacement

• The top 9 mobile security threats and how you can avoid them

• The benefits of using the new Data Privacy Framework

Generated on 2023-10-19 23:55:57.422847