IT Security News Daily Summary 2023-10-25

• Top 6 Data Loss Prevention (DLP) Solutions for 2023

• EU commissioner sidesteps MEPs’ questions about CSAM proposal microtargeting

• Puncia – Subdomain And Exploit Hunter Powered By AI

• Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report

• Top insights and best practices from the new Microsoft Data Security Index report

• Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction

• Canada goosed as attackers shutter hospitals and China deepfakes its politicians

• Virtual Alarm: VMware Issues Major Security Advisory

• As Citrix Urges Its Clients to Patch, Researchers Release an Exploit

• Okta’s breach shows why identities come first in a zero trust world

• How False Positive Rates Impact E-Commerce Conversion Rates: Balancing Security & UX

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnarav – #264 – The Ketchup Effect

• Features of digital tools for holiday home business management

• 5 Tested Ways to Make Money with Proxies

• Cruise Confirms Taxi Service Suspension In San Francisco

• Database Mess Up: 7TB of Healthcare Data Leak Affects 12 Million Patients

• Kazakh Attackers, Disguised as Azerbaijanis, Hit Former Soviet States

• Okta’s Latest Security Breach Is Haunted by the Ghost of Incidents Past

• HackerOne Bug Bounty Disclosure: b-new-search-feature-search-for-non-public-words-in-limited-disclosure-reports-b-ahacker

• HackerOne Bug Bounty Disclosure: b-blind-ssrf-on-https-my-exnessaffiliates-com-allows-for-internal-network-enumeration-b-null-hypothesis

• HackerOne Bug Bounty Disclosure: b-accessing-apps-protected-via-zt-s-access-when-user-account-is-deleted-disabled-even-after-clearing-user-session-seat-b-suzuka

• Secure Schema Migrations With Flyway and CockroachDB Dedicated

• CISA: Mozilla Releases Security Advisories for Multiple Products

• Access to Law Should Be Fully Open: Tell Congress Not to Be Fooled by the Pro Codes Act

• CISA, HHS Release Collaborative Cybersecurity Healthcare Toolkit

• Resilience Where We Worship: Keeping Faith Based Communities Safe

• Pro-Russia group exploits Roundcube zero-day in attacks on European government emails

• integrated risk management (IRM)

• Cybersecurity Awareness Doesn’t Cut It; It’s Time to Focus on Behavior

• Mozilla Releases Security Advisories for Multiple Products

• Inside the Realm of Black Market AI Chatbots

• Okta’s Latest Cyber Breach Knocks Billions Off Company Value

• Top CNAPP Tools in 2023

• Ransomware: An Existential Threat Demanding Urgent Action

• Best VPN for streaming in 2023

• Elastic Global Threat Report Discloses Rising Threat of Ransomware

• Guard Your Data: The Pitfalls to Avoid on Public Wi-Fi Networks

• Rising Email Security Threats: Here’s All You Need to Know

• Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report

• Microsoft invests $5 billion to bolster Cyber Shield of Australia

• Samsung Galaxy S23 Hacked at Pwn2Own Toronto 2023

• 6 Best Identity & Access Management (IAM) Solutions for 2023

• Winter Vivern APT Blasts Webmail Zero-Day Bug With One-Click Exploit

• SD WAN solutions for utility distribution automation

• Reporting Custom Metrics to FSO Platform Using the OpenTelemetry SDK

• Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report

• Bitdefender Offensive Services incorporates penetration testing and red team simulated attacks

• Winter Vivern: Zero-Day XSS Exploit Targets Roundcube Servers

• Alphabet Profits But Cloud Sales Disappoints

• 2023-10-23 – 404 TDS URL chain leads to Async RAT variant

• 7 Essential Security Features for Messaging Apps to Gain User Trust

• VMware addressed critical vCenter flaw also for End-of-Life products

• Hong Kong residents targeted in malvertising campaigns for WhatsApp, Telegram

• Salt Security: OAuth Implementation Flaw Could Lead to Account Takeover

• Cyber Security Today: Ransomware attacks hit a record in September, and more

• Seiko “BlackCat” Data Breach: 60,000 Records on the Line

• Uncover the nastiest malware of 2023

• US security remains paramount in the continued rise of AI, according to Treasury Department secretary

• Malwarebytes Identity Theft Protection defends users against online threats

• Cybercriminals Target Senior U.S. Executives Using EvilProxy Phishing Kit

• How to secure the WordPress wp-config.php configuration file

• Digital.ai launches Denali to accelerate enterprise software delivery at scale

• The Role of FPGAs in Post-Quantum Cryptography and Cyber Resilience

• The Role of FPGAs in Post-Quantum Cryptography and Cyber Resilience

• Building vs. Buying Software

• Frustrated Facebook User Reports Every Fake Profile He Sees But Says Facebook Has Done Nothing

• Zero Trust in Cybersecurity: from myth to the guide

• Teleport Identity Governance and Security reduces attack surface area

• ICC Confirms Recent Cyberattack Was Espionage

• Digital.ai launches Denali to help enterprises automate secure software releases

• A Cybersecurity Framework for Mitigating Risks to Satellite Systems

• Ex-NSA Techie Pleads Guilty To Selling State Secrets To Russia

• VMware vCenter Flaw So Critical, Patches Released For End-Of-Life Products

• Ransomware Boom Hits All-Time High

• Personal Information Stolen In City Of Philadelphia Email Hack

• Flaws In O-Auth’s Social Sign-In Could Have Put Billions Of Users At Risk

• When it Comes to ZTNA, Buyer Beware

• Critical OAuth Flaws Uncovered in Grammarly, Vidio, and Bukalapak Platforms

• Nation State Hackers Exploiting Zero-Day in Roundcube Webmail Software

• Leveraging AI To Augment Humans in Cybersecurity

• Cost of a data breach: The evolving role of law enforcement

• Lookout Elevates Strategic Investment in Data-centric Cloud Security

• Hackers Breached Okta`s Customer Support System via Stolen Credentials

• Cloud-Native Security: A Tipping Point for Security Teams’ Productivity

• Cyber Militarization: Navigating the Digital Battlefield

• SentinelOne introduces Singularity Threat Intelligence for enhanced threat landscape understanding

• A Continuing Cyber-Storm with Increasing Ransomware Threats and a Surge in Healthcare and APAC region

• A fortified data vault to give you peace of mind

• NCSAM Theme: Securing Our World

• Closing The Gap: Resolving Human Error in Cloud Security

• AWS: Security Not a Priority For a Third of SMBs

• APT Winter Vivern Exploits New Roundcube 0-Day to Target European Entities

• It’s “by mistake” – How I got into Cybersecurity

• Joint Industry statement of support for Consumer IoT Security Principles

• How AI is Transforming Defensive Cybersecurity

• Axiomatics Taps Generative AI to Make Access Control Simpler

• Google Plans To Roll Out IP Protection Feature In Chrome Browser

• How long should a password be in 2023? You’re asking the wrong question

• What you should know about VPN audits

• The Rise of S3 Ransomware: How to Identify and Combat It

• Roundcube webmail zero-day exploited to spy on government entities (CVE-2023-5631)

• CyCognito platform enhancements help users identify and protect unmanaged assets

• Microsoft Q1 Benefits From Cloud Strength

• Elon Musk Mocked Ukraine, and Russian Trolls Went Wild

• Microsoft is Soft-Launching Security Copilot

• LockBit 3.0 Ransomware Victim: fern-plastics[.]co[.]uk

• LockBit 3.0 Ransomware Victim: excon[.]cl

• LockBit 3.0 Ransomware Victim: ambic[.]co[.]uk

• LockBit 3.0 Ransomware Victim: linkmicrotek[.]com

• LockBit 3.0 Ransomware Victim: mgbwlaw[.]com

• Zscaler Report Surfaces Spike in IoT Cyberattacks

• Act Now: VMware Releases Patch for Critical vCenter Server RCE Vulnerability

• Version 1 and The National Museum of Computing Launch New App Using Generative AI Technology to Dramatically Improve Accessibility and Visitor Experience

• A Visual Journey: Exploring the Redesigned Bolster Dashboard

• VMware patches critical vulnerability in vCenter Server (CVE-2023-34048)

• Oscilar introduces generative AI powered platform for fraud prevention

• Meta Sued By US States Over Harm To Children

• Citrix warns admins to patch NetScaler CVE-2023-4966 bug immediately

• More than half of mid-sized firms lack confidence in tackling cyber threats finds new report

• PlainID partners with BigID to enhance data protection and visibility for customers

• Malvertising Campaign Targets Brazil’s PIX Payment System with GoPIX Malware

• Security in the Property Industry: Challenges and How to Avoid Attacks

• US Energy Company Reveals How Akira Ransomware Compromised its Systems

• Serial Numbers for WooCommerce – License Manager Plugin for WordPress cross-site request forgery | CVE-2023-46078

• Kodbox cross-site scripting | CVE-2023-45998

• Soisy Pagamento Rateale plugin for WordPress information disclosure | CVE-2023-5132

• IBM TXSeries denial of service | CVE-2023-42031

• Add Custom Body Class plugin for WordPress cross-site scripting | CVE-2023-5205

• Purchase Scams Surge as Fraud Losses Hit £580m

• Hunters International leaks pre-op plastic surgery pics in negotiation no-no

• Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report

• Small Businesses Suffer Record Number of Cyber-Attacks

• Backdoor Implanted on Hacked Cisco Devices Modified to Evade Detection

• AWS European Sovereign Cloud allows customers to keep all metadata in the EU

• 8 Base Ransomware Victim: EDUARDO G[.] BARROSO

• Why performing security testing on your products and systems is a good idea

• The pirates are back

• Android Malware Masquerades as Chrome Browser Reads SMS & Intercepts Emails

• AI to Create Demand for Digital Trust Professionals, ISACA Survey Finds

• Amazon Web Services launches European Sovereign Cloud

• Ten compelling reasons to assert cloud sprawl can lead to cybersecurity concerns

• New England Biolabs leak sensitive data

• Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities

• Handling SaaS Data Exposure Risks Due to Potential ServiceNow Misconfigurations

• Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report

• VMware reveals critical vCenter vuln that you may have patched already without knowing it

• ASVEL basketball team confirms data breach after ransomware attack

• Hackers backdoor Russian state, industrial orgs for data theft

• VMware warns admins of public exploit for vRealize RCE flaw

• Cyberattack on health services provider impacts 5 Canadian hospitals

• September was a record month for ransomware attacks in 2023

• What is operational risk and why should you care? Assessing SEC rule readiness for OT and IoT

• On the Go, Securely: Top Tips for Mobile Device Security

• Security leaders have good reasons to fear AI-generated attacks

• Strategies to overcome cybersecurity misconceptions

• VMware Aria Operations for Logs Multiple Vulnerabilities

• Consumers are taking action to protect their privacy

• 1Password reports security incident after breach at Okta

• Posh C2 Detected – 185[.]234[.]216[.]64:443

• Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report

• Former NSA employee pleads guilty to attempted selling classified documents to Russia

• The AI-Generated Child Abuse Nightmare Is Here

• How to Prevent Malware: 15 Best Practices for Malware Prevention

• Shielding the Software Supply Chain Through CI/CD Pipeline Protection

• Android trojan spotted in the wild can record audio and phone calls

• The best travel VPNs of 2023: Expert tested and reviewed

• Data poisoning tool lets artists fight back against AI scraping. Here’s how

• Windows security: How to protect your home and small business PCs

• Hot fuzz: Cascade finds dozens of RISC-V chip bugs using random data storm

• Cisco U.’s Live Learning Event: Join the Halloween Fun!

• US-CERT Vulnerability Summary for the Week of October 16, 2023

• Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report

• IT Security News Daily Summary 2023-10-24

• Tines Report Finds More than Half of Security Professionals Likely To Switch Jobs Next Year

• This Cybersecurity Awareness Month, Don’t Lose Sight of Human Risk

• Facad1ng – The Ultimate URL Masking Tool – An Open-Source URL Masking Tool Designed To Help You Hide Phishing URLs And Make Them Look Legit Using Social Engineering Techniques

• Citrix urges ‘immediate; patch for critical NetScaler bug as exploit POC made public

• Cisco Patches Two Dangerous Zero-Day Vulnerabilities

• Accenture Expands Cybersecurity Services Capabilities in Latin America With Acquisition of MNEMO Mexico

• 2023 Ransomware Attacks Up More Than 95% Over 2022, According to Corvus Insurance Q3 Report

• DEF CON 31 – Craig Martell’s ‘Shall We Play A Game’

• Meet Rhysida, a New Ransomware Strain That Deletes Itself

• 1Password Becomes Latest Victim of Okta Customer Service Breach

• The Evolution of Influencer Marketing in Manchester, UK

• Cisco IOS XE instances still under attack, patch now

• Former NSA Employee Faces Life in Prison After Espionage Attempt

• 1Password stops attack linked to Okta breach

• MapleSEC: How Kyndryl built cyber resiliency into its new IT infrastructure

• Social Login Flaws in Popular Websites Risked Billions of User Accounts

• IBM: ChatGPT-Generated Can Write Convincing Phishing Emails

• Dev Up 2023: Leveling Up Our Dev Skills, Security Posture, and Careers

• Experts released PoC exploit code for VMware Aria Operations for Logs flaw. Patch it now!

• HackerOne Bug Bounty Disclosure: b-hacker-email-disclosed-on-submission-at-hackerone-hactivity-b-xdemiray

• Cost of data breach up 12 per cent: Survey

• Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report

• Do Small Companies Need Fractional AppSec Teams Akin to vCISOs?

• Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report

• Gartner Cites Generative AI Impact On Business Going Forward

• 15 Best SaaS SEO Experts That Will Help You Dominate Online

• Ex-NSA techie pleads guilty to selling state secrets to Russia

• Generative AI Can Write Phishing Emails, But Humans are Better at It, IBM X-Force Finds

• How to use SDelete to ensure deleted data is gone for good

• JPMorgan Chase CISO explains why he’s an ‘AI optimist’

• Cyberattacks on Kenya Drop in Third Quarter

• Strengthening Oman’s Economic Backbone

• Europe’s CSAM-scanning plan is a tipping point for democratic rights, experts warn

• Analysis: A Ransomware Attack on a PostgreSQL Database

• University of Michigan Faces Data Breach Impacting Many of its Affiliates

• Improving the Grand Unified Theory of Cloud Governance

• AMA with K8s Experts: Learn from Real-Life Pitfalls & Success Stories

• Amazon Trials Humanoid Robot, Prompting Job Fears

• Israeli-Hamas Conflict Spells Opportunity for Online Scammers

• Don’t Be Evil: Google’s Scary ‘IP Protection’ Privacy Plan

• Ex-NSA Employee Pleads Guilty to Leaking Classified Data to Russia

• CISA Announces Keynote Speakers and Sessions for 2023 National Summit on K-12 School Safety and Security

• 1Password Discloses Security Incident Linked to Okta Breach

• 1Password Latest Hit With Okta Related Intrusion

• Irish Cops Data Debacle Exposes Half A Million Motorist Records

• Canadian Lawmakers Targeted By China-Linked Spamouflage Disinformation

• Bitcoin Soars To Near 18-Month High As ETF Speculation Mounts

• Lacework increases operational efficiency around risk management

• API Security Flaw Impacted Grammarly, Vidio and Bukalapak

• American healthcare looses $78 billion to ransomware attacks

• 1Password confirms attacker tried to pull list of admin users after Okta intrusion

• CISA Releases One Industrial Control Systems Advisory

• Rockwell Automation Stratix 5800 and Stratix 5200

• Learn how to revolutionize your applications the Carhartt way

• Prioritizing sustainability can open doors to profitability

• SMBs Increasingly Confident in Cybersecurity

• Cybersecurity Crisis Deepens in Phillipines as Hackers Leak State Secrets

• Revolutionizing Security: Passkeys by Google and Apple

• Canadian CEO confidence in facing cyber attacks varies, according to KMPG surveys

• Versa Secure SD-LAN delivers zero trust and IoT security

• Philadelphia Alerts Public to Recent Data Breach

• Why EDRs and other preventative measures cannot stop ransomware

• Mexico Orders Samsung, Motorola To Stop Remotely Disabling Phones

• IBM finds that ChatGPT can generate phishing emails nearly as convincing as a human

• Element users are asking for protection against government encryption busting

• What’s the Goal and How Do We Get There? Crucial Issues in Brazil’s Take on Saving the News from Big Tech

• A week in security (October 16 – October 22)

• Battling a new DarkGate malware campaign with Malwarebytes MDR

• MGM attack is too late a wake-up call for businesses, says James Fair: Lock and Code S04E22

• Google Chrome wants to hide your IP address

• Five Southern Ontario hospitals impacted by cyber attack on shared services provider

• Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report

• Blockforia: A Comprehensive Analysis of a Prominent Cryptocurrency Exchange

• CrowdStrike Outlines Its Vision for AI-Driven Security at Fal.Con 2023

• CrowdStrike Services Offers Incident Response Executive Preparation Checklist

• Black Basta Ransomware Victim: Panificio Grandolfo

• Amazon Now Supports Passkeys, Joining Microsoft and Google

• Unravelling the 23andMe Data Leak: A Deep Dive into the Extent of the Breach

• Pro-Palestinian Hacktivists Reportedly Employ Crucio Ransomware

• Data Theorem enhances Cloud Secure platform with ML-based hacker toolkits and visualizations

• Semgrep Secrets prevents sensitive credentials from leaking

• Tech-Forward Strategies to Effectively Fight Fraud

• AI Used In Most Organisations, But Staff Unaware

• What are passkeys? Experience the life-changing magic of going passwordless

• It’s Time to Establish the NATO of Cybersecurity

• Okta’s latest hack fallout hits Cloudflare, 1Password

• Salt Security Discovers Flaws in Social Login Mechanism Impacting Thousands of Websites and Exposing Billions of Users to Account Takeover

• Cato Vice President to Speak About Collaboration on SASE Projects at Gartner IT Symposium/XPO 2023, Barcelona, Spain

• Google Pixel’s Face-altering Feature Sparks AI Manipulation Debates

• Vulnerability Summary for the Week of October 16, 2023

• Veeam and Sophos partner to help organizations detect cybersecurity threats

• Eight Reasons You Need an SSL Certificate for Your Website

• Check Point Unveils Quantum Rugged 1595R: Fortifying Critical Infrastructure and OT Networks with AI Security and 5G Connectivity

• Driving API Security Forward: Protecting Vehicle-to-Cloud Communications

• PikaBot C2 Detected – 45[.]79[.]147[.]119:9785

• Shadow Access Creates Invisible Cloud Security Risks

• Searchlight Cyber improves DarkIQ Dark Web Traffic Monitoring capabilities

• Censys lands new cash to grow its threat-detecting cybersecurity service

• Why You Should Prioritize Your Privacy Policies

• Java Is Still Full of Surprises After 28 Years

• Ivanti’s new capabilities simplify vulnerability prioritization and remediation

• Why access to timely and relevant health information is critical to patient engagement

• The Rise of DevOps in Startups- A Strategic Approach

• Unmasking the Phishing Threat: Beyond Training and Patching

• AppSec Metrics That Matter: Measuring the Success of Your Application Security Program

• Drata unveils platform enhancements to automate GRC processes

• iOS Zero-Day Attacks: Experts Uncover Deeper Insights into Operation Triangulation

• Make API Management Less Scary for Your Organization

• 34 Cybercriminals Arrested in Spain for Multi-Million Dollar Online Scams

• ‘Log in with…’ Feature Allows Full Online Account Takeover for Millions

• Hostile Takeover: Malicious Ads via Facebook

• LockBit 3.0 Ransomware Victim: hgmonline[.]com

• LockBit 3.0 Ransomware Victim: grupocobra[.]com

• Zyxel launches high-performance firewalls to offer multi-layered protection against cyber threats

• Secure the Cluster

• AI vs. human deceit: Unravelling the new age of phishing tactics

• A Powerful Tool US Spies Misused to Stalk Women Faces Its Potential Demise

• A Controversial Plan to Scan Private Messages for Child Abuse Meets Fresh Scandal

• EPA Won’t Force Water Utilities to Audit Their Cybersecurity

• Generative AI Can Save Phishers Two Days of Work

• IBM X-Force pits ChatGPT against humans: Who’s better at phishing?

• Generative AI Can Write Phishing Emails, But Humans Are Better At It, IBM X-Force Finds

• Island raises $100 million, boosts valuation to $1.5 billion

• 1Password also affected by Okta Support System breach

• GenAI Can Save Phishers Two Days of Work

• 5 Tripwire Enterprise Misconfigurations to Avoid

• The growth of APIs attracts Cybercrime: How to prepare against cyber attacks

• Irish cops data debacle exposes half a million motorist records

• They Cracked the Code to a Locked USB Drive Worth $235 Million in Bitcoin. Then It Got Weird

• Semperis and Veritas defend enterprises against cyberattacks on Microsoft AD systems

• Stealer for PIX payment system, new Lumar stealer and Rhysida ransomware

• In Conversation With Ilona Simpson, CIO EMEA at Netskope

• Backdoor Implant on Hacked Cisco Devices Modified to Evade Detection

• Operation Triangulation: Experts Uncover Deeper Insights into iOS Zero-Day Attacks

• Japan Opens Probe Into Google Search Domination

• Open Source Security: Trends and Predictions for 2024

• How to have encryption, computation, and compliance all at once

• How did the Okta Support breach impact 1Password?

• Widgets for Google Reviews plugin for WordPress cross-site request forgery | CVE-2023-3254

• CodeAstro Internet Banking System cross-site scripting | CVE-2023-5696

• HCL Compass weak security | CVE-2023-37504

• CodeAstro Internet Banking System cross-site scripting | CVE-2023-5695

• Pega Platform cross-site scripting | CVE-2023-32088

• Microsoft To Invest Billions To Bolster Australian Cyber Defences

• Police Dismantle Multimillion-Dollar Scam Gang

• Helping you bridge the cloud security gap

• Remote Scripts with Cisco Secure Endpoint: Defend your endpoint from attackers without business disruption

• How an EOR can keep you GDPR compliant in 2023

• Healthcare Ransomware Attacks Cost US $78bn

• September saw a record 153% increase of ransomware attacks, says NCC Group

• New Grandoreiro Malware Variant Targets Spain

• Need to improve the detection capabilities in your security products?

• PII Belonging to Indian Citizens, Including their Aadhaar IDs, Offered for Sale on the Dark Web

• 8 Base Ransomware Victim: SURTECO North America

• Spain police dismantled a cybercriminal group who stole the data of 4 million individuals

• Cisco Raises Alarm Over Critical Vulnerability in IOS XE Software

• Vietnam hackers start stealing Facebook Credentials

• 1Password Detects Suspicious Activity Following Okta Support Breach

• Above the Clouds: Challenges and Solutions in Cloud Security

• D.C. Board of Elections: Hackers may have breached entire voter roll

• QNAP takes down server behind widespread brute-force attacks

• Spain arrests 34 cybercriminals who stole data of 4 million people

• City of Philadelphia discloses data breach after five months

• Hackers update Cisco IOS XE backdoor to hide infected devices

• The primary pain points for SOC teams

• Wazuh: Free and open-source XDR and SIEM

• Bracing for AI-enabled ransomware and cyber extortion attacks

• CI/CD Pipeline: How to Overcome Set-Up Challenges

• Scammers use India’s real-time payment system to siphon off money, send it to China

• Cisco IOS XE Escalation of Privilege Vulnerability

• Today’s CIO has ambitions well beyond IT delivery

• Five fraud solution oversights that gut business growth

• Security That Enables Digital Transformation: Cybersecurity Awareness Month 2023

Generated on 2023-10-25 23:55:56.109720