IT Security News Daily Summary 2023-10-26

• Apple drops urgent patch against obtuse TriangleDB iPhone malware

• TunnelBear VPN Review 2023: Pricing, Ease of Use & Security

• iLeakage attack exploits Safari to steal data from Apple devices

• PathFinder – Tool That Provides Information About A Website

• The top 20 admin passwords will have you facepalming hard

• What the !#@% is a Passkey?

• Passkeys and Privacy

• Cranium raises $25M to fund enterprise AI monitoring, security, and compliance platform

• Forget the outside hacker, the bigger threat is inside by the coffee machine

• DEF CON 31 – India McKinney’s ‘The Coming War on Encryption Part 3’

• MapleSEC: VMware’s Chad Skipper sheds light on security measures

• Why Quality Assurance Testers Are Essential in a Software Development Team

• What Is Multi-Cloud Security? Everything to Know

• Iran APT Targets the Mediterranean With Watering-Hole Attacks

• Rockwell’s Verve Buy Enlivens Critical Infrastructure Security

• Cloudflare mitigated 89 hyper-volumetric HTTP distributed DDoS attacks exceeding 100 million rps

• How to Remove Malware: Removal Steps for Windows & Mac

• Randall Munroe’s XKCD ‘Daylight Saving Choice’

• Citrix Urges Immediate Patch for Critical NetScaler Vulnerability

• Microsoft: 0ktapus Cyberattackers Evolve to ‘Most Dangerous’ Status

• TikTok Streamers Are Staging ‘Israel vs. Palestine’ Live Matches to Cash In on Virtual Gifts

• Mentorship Programs: A Crucial Element in Retaining Cybersecurity Talent

• Celebrating the Internet Freedom Movement at the EFF Awards

• 1Password’s Swift Response to Okta Data Breach

• Online Safety Act Becomes Law In Blow To Campaigners

• Side channel attacks take bite out of Apple silicon with iLeakage exploit

• NCC Group details 153% spike in September ransomware attacks

• HackerOne Bug Bounty Disclosure: b-rce-on-ingress-nginx-controller-via-ingress-spec-rules-http-paths-path-field-b-ginoah

• HackerOne Bug Bounty Disclosure: b-flickr-api-key-leaked-in-github-commit-b-m-y-nk

• iLeakage: New Safari Exploit Impacts Apple iPhones and Macs with A and M-Series CPUs

• Sam Bankman-Fried Begins Defence In FTX Fraud Trial

• Opinion | Can we Afford the Risk? Measuring the cost of the Expiration of the Chemical Facilities Anti-Terrorism Standards Program

• Play Ransomware Victim: Laiho Group

• CISA: CISA Releases Nine Industrial Control Systems Advisories

• CISA: Apple Releases Security Advisories for Multiple Products

• Ransomware Kingpin Behind Ragnar Locker Arrested in Paris

• Canada Reports Targeting of Trudeau and Others by Chinese Bots

• Firefox Memory Corruption Flaw Let Attacker Execute Arbitrary Code

• Longer Support Periods Raise the Bar for Mobile Security

• Guarding Paradise: Strategies for Cybersecurity in Exclusive Enclaves

• US Energy Service Shared Details on How Akira Ransomware Hacked its Network

• Ransomware news headlines trending on Google

• Cybersecurity month: Why we need to talk about online identities

• Everything You Need to Know About Microsoft’s New $5 Billion Investment in Australia

• Addressing Executive & Social Media Impersonation: Protecting Leaders That Lack an Online Presence

• New Data ‘Poisoning’ Tool Empowers Artist to Combat AI Scraping

• ServiceNow Data Exposure Flaw Raises Concerns

• Nigerian Cybercrime Hub Shut Down With 6 Arrests

• 12 Best Vulnerability Management Systems & Tools 2023

• RSA Conference™ 2023 Security Operations Center Findings Report

• Customer Experience (CX) and Partners are Greater Together at Cisco Partner Summit 2023

• Be You, With Us: Empowering Diverse Authentic Voices in Corporate Spaces

• Evolve to Cloud-Enforced Security to Empower Your Anywhere Workforce

• What Is Two-Factor Authentication (2FA) and Why Should You Use It?

• How Cybersecurity Can Be a Catalyst for Technology Innovation

• CISA and HHS Pull Together Cybersecurity Toolkit for Healthcare Sector

• #iLeakage: All Apple CPUs Vulnerable — No Patch in Sight

• At-Bay Stance MDR improves cyber resilience for SMBs

• Operation Triangulation iOS Attack Details Revealed

• Elon Musk’s X Deploys Audio, Video Calling Option

• Why cybersecurity training isn’t working (and how to fix it)

• Announcing NEW Malwarebytes Identity Theft Protection

• Face search engine PimEyes stops searches of children’s faces

• Cyberattack hits 5 hospitals

• Update vCenter Server now! VMWare fixes critical vulnerability

• Phony job vacancy targets LinkedIn users with DarkGate malware

• RSA Conference™ 2023 Security Operations Center Findings Report

• Octo Tempest Attacking Organizations to Steal Financial Data

• Quishing is the new phishing: What you need to know

• Maine Mass Shooting Disinformation Floods Social Media as Suspect Remains at Large

• Rockwell Automation FactoryTalk View Site Edition

• Centralite Pearl Thermostat

• Sielco Radio Link and Analog FM Transmitters

• Rockwell Automation Arena

• Dingtian DT-R002

• RSA Conference™ 2023 Security Operations Center Findings Report

• Pro-Russian Hackers Target XSS In Roundcube

• BeyondTrust, Cloudflare And 1Password Targeted After Okta Breach

• Google Announces Bug Bounty Program And Other Initiatives To Secure AI

• ServiceNow Quietly Addresses Unauthenticated Data Exposure Flaw From 2015

• You Should Probably Buy A Flipper Zero Before It’s Too Late

• Darktrace Extends AI Reach to Secure AWS Clouds

• Cado Security launches Cloud Incident Readiness Dashboard for proactive response

• Record-Breaking 100 Million RPS DDoS Attack Exploits HTTP/2 Rapid Reset Flaw

• Microsoft Warns as Scattered Spider Expands from SIM Swaps to Ransomware

• CISA Issues Request for Comment on Software Identification Ecosystem Analysis White Paper

• ScamClub’s Deceptive Landing Pages

• Why Compliance Matters When Dealing with AI and Finances

• Unifying threat context with VirusTotal connectors

• BT Clocks 530 Cyberattacks Every Second

• DUCKTAIL Malware Employs LinkedIn Messages to Execute Attacks

• Giving Power Back to Your Users With Flow’s Account Model

• Cisco Patches 2 Dangerous Zero-Day Vulnerabilities

• What Would a Government Shutdown Mean for Cybersecurity?

• RSA Conference™ 2023 Security Operations Center Findings Report

• Monetization of Partner Led Managed Services Model

• Darktrace/Cloud solution based on self-learning AI provides cyber resilience for cloud environments

• The Financial Implications of Cyber Security: How Catch Rates Impact Organizational Risk

• Complex Spy Platform StripedFly Bites 1M Victims

• RSA Conference™ 2023 Security Operations Center Findings Report

• Physical Security Operations: The Costs of not Being Enterprise-Ready

• Progress Flowmon ADS 12.2 AI offers advanced security event monitoring

• #ISC2Congress: CISO Best Practices for Managing Cyber Risk

• Horse Racing Game NEOBRED Integrates with Avalanche for Elite Gaming Experience

• RSA Conference™ 2023 Security Operations Center Findings Report

• Google’s reward criteria for reporting bugs in AI products

• Increasing transparency in AI security

• Effective Workplace Education is Built Around Incentives

• Beware of the Flipper Zero Bluetooth spam attacks

• Google adds generative AI threats to its bug bounty program

• RSA Conference™ 2023 Security Operations Center Findings Report

• Critical Flaw in NextGen’s Mirth Connect Could Expose Healthcare Data

• The Danger of Forgotten Pixels on Websites: A New Case Study

• Four Steps to Integrate Zero-Trust

• Tufin Orchestration Suite R23-2 helps enterprises to fully optimize SASE approach

• Humans are still better than AI at crafting phishing emails, but for how long?

• UK IT Pros Worried About C-Suite Training Gap Ahead of AI Safety Summit

• #ISC2Congress: CISOs Can Elevate Their Role with New Cyber Regulations

• The Haunted House of IoT: When Everyday Devices Turn Against You

• How to craft a password meticulously

• Apple Lends Support To Biden’s Federal Right To Repair Push

• Seiko confirmed a data breach after BlackCat attack

• New NSA Information from (and About) Snowden

• Fortinet expands Universal SASE offering to empower today’s hybrid workforce

• Authorities Seize 17 North Korean Hacker Websites Used for Scamming

• Dual Pillars of Embedded Systems: Ensuring Safety and Security

• Meta Profit Soars From Ongoing Strong Ad Spending

• Indian National Arrested for Stealing $150,000 via Computer Hacking

• Spain Arrests 34 Cybercriminals Who Stole Data of 4 Million People

• How to catch a wild triangle

• Seemplicity integrates with Wiz to accelerate remediation

• SEIKO Cyber Attack: Customers Personal Data Exposed

• Don’t Get Spooked Into Falling For These Phishing Scams

• Europol: Police Must Start Planning For Post-Quantum Future

• Donation fraud: Scammers Exploit Generosity in Gaza Conflict

• Aruba Networks ClearPass Policy Manager privilege escalation | CVE-2023-43508

• Aruba Networks ClearPass Policy Manager privilege escalation | CVE-2023-43506

• Aruba Networks ClearPass Policy Manager command execution | CVE-2023-43510

• Aruba Networks ClearPass Policy Manager open redirect | CVE-2023-43509

• Aruba Networks ClearPass Policy Manager SQL injection | CVE-2023-43507

• Silicon Insights: Integrated B2B Marketing Strategies that Succeed: Part 2

• Citrix Bleed: PoC Released for Citrix NetScaler Zero-Day Vulnerability

• ServiceNow quietly addresses unauthenticated data exposure flaw from 2015

• Citrix NetScaler ADC and Gateway Sensitive Information Disclosure Vulnerability (CVC-2023-4966) Notification

• CISA Releases Cybersecurity Toolkit For Healthcare

• iOS 17.1 and MacOS Sonoma 14.1 Released With Bug Fixes Including Arbitrary Code Execution

• Iranian Group Tortoiseshell Launches New Wave of IMAPLoader Malware Attacks

• YoroTrooper: Researchers Warn of Kazakhstan’s Stealthy Cyber Espionage Group

• Humans Need to Rethink Trust in the Wake of Generative AI

• UK Parliament Opens Inquiry into Cyber-Resilience

• Quishing: Tricks to look out for

• Do you know what your supply chain is and if it is secure?

• 8 Base Ransomware Victim: Carter Transport Claims

• 8 Base Ransomware Victim: Harmann Studios Inc

• 8 Base Ransomware Victim: AVA Limited

• New Undetected Python-Based Info-stealer Offered Via Dedicated Website

• The fallout from the Okta breach continues

• Winter Vivern APT exploited zero-day in Roundcube webmail software in recent attacks

• AtlasReaper command-line Suite Developed For Offensive Security Purposes

• CISA: CISA Releases Guidance for Addressing Cisco IOS XE Web UI Vulnerabilities

• Citrix Bleed exploit lets hackers hijack NetScaler accounts

• Seiko says ransomware attack exposed sensitive customer data

• VMware fixes critical code execution flaw in vCenter Server

• European govt email servers hacked using Roundcube zero-day

• Ransomware isn’t going away – the problem is only getting worse

• OT cyber attacks proliferating despite growing cybersecurity spend

• Winter Vivern exploits zero-day vulnerability in Roundcube Webmail servers

• Building Cyber Warriors: The World of Cybersecurity Training and Certifications

• StripedFly: Perennially flying under the radar

• GOAD: Vulnerable Active Directory environment for practicing attack techniques

• CISOs struggling to understand value of security controls data

• Ransomware groups continue to increase their operational tempo

• 41 States Sue Facebook For Allegedly Being Harmful And Addictive For Kids

• NSFOCUS Achieves Three Certifications, Paving the Path to Sustainable and Environmentally Responsible Development

• How Cyber Risk Quantification can Help Align CISOs with the Board.

• Stronger Together: Attack Surface Management and Security Validation

• BHI Energy Releases Details of Akira Ransomware Attack

• Ripcord Transforms, Anitian Empowers, Agencies Win

• DEF CON 31 – Nils Amiet’s, Marco Macchetti’s ‘Polynonce – An ECDSA Attack and Polynomial Dance ‘

• CCIE Security Certification Exam Tips for Success

• Pwn2Own Toronto 2023 Day 1 – organizers awarded $438,750 in prizes

• Strategic Tips to Optimize Cybersecurity Consolidation

• IT Security News Daily Summary 2023-10-25

• Top 6 Data Loss Prevention (DLP) Solutions for 2023

• EU commissioner sidesteps MEPs’ questions about CSAM proposal microtargeting

• Puncia – Subdomain And Exploit Hunter Powered By AI

• Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report

• Top insights and best practices from the new Microsoft Data Security Index report

• Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction

• Canada goosed as attackers shutter hospitals and China deepfakes its politicians

• Virtual Alarm: VMware Issues Major Security Advisory

• As Citrix Urges Its Clients to Patch, Researchers Release an Exploit

• Okta’s breach shows why identities come first in a zero trust world

• How False Positive Rates Impact E-Commerce Conversion Rates: Balancing Security & UX

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnarav – #264 – The Ketchup Effect

• Features of digital tools for holiday home business management

• 5 Tested Ways to Make Money with Proxies

• Cruise Confirms Taxi Service Suspension In San Francisco

• Database Mess Up: 7TB of Healthcare Data Leak Affects 12 Million Patients

• Kazakh Attackers, Disguised as Azerbaijanis, Hit Former Soviet States

• Okta’s Latest Security Breach Is Haunted by the Ghost of Incidents Past

• HackerOne Bug Bounty Disclosure: b-new-search-feature-search-for-non-public-words-in-limited-disclosure-reports-b-ahacker

• HackerOne Bug Bounty Disclosure: b-blind-ssrf-on-https-my-exnessaffiliates-com-allows-for-internal-network-enumeration-b-null-hypothesis

• HackerOne Bug Bounty Disclosure: b-accessing-apps-protected-via-zt-s-access-when-user-account-is-deleted-disabled-even-after-clearing-user-session-seat-b-suzuka

• Secure Schema Migrations With Flyway and CockroachDB Dedicated

• CISA: Mozilla Releases Security Advisories for Multiple Products

• Access to Law Should Be Fully Open: Tell Congress Not to Be Fooled by the Pro Codes Act

• CISA, HHS Release Collaborative Cybersecurity Healthcare Toolkit

• Resilience Where We Worship: Keeping Faith Based Communities Safe

• Pro-Russia group exploits Roundcube zero-day in attacks on European government emails

• integrated risk management (IRM)

• Cybersecurity Awareness Doesn’t Cut It; It’s Time to Focus on Behavior

• Mozilla Releases Security Advisories for Multiple Products

• Inside the Realm of Black Market AI Chatbots

• Okta’s Latest Cyber Breach Knocks Billions Off Company Value

• Top CNAPP Tools in 2023

• Ransomware: An Existential Threat Demanding Urgent Action

• Best VPN for streaming in 2023

• Elastic Global Threat Report Discloses Rising Threat of Ransomware

• Guard Your Data: The Pitfalls to Avoid on Public Wi-Fi Networks

• Rising Email Security Threats: Here’s All You Need to Know

• Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report

• Microsoft invests $5 billion to bolster Cyber Shield of Australia

• Samsung Galaxy S23 Hacked at Pwn2Own Toronto 2023

• 6 Best Identity & Access Management (IAM) Solutions for 2023

• Winter Vivern APT Blasts Webmail Zero-Day Bug With One-Click Exploit

• SD WAN solutions for utility distribution automation

• Reporting Custom Metrics to FSO Platform Using the OpenTelemetry SDK

• Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report

• Bitdefender Offensive Services incorporates penetration testing and red team simulated attacks

• Winter Vivern: Zero-Day XSS Exploit Targets Roundcube Servers

• Alphabet Profits But Cloud Sales Disappoints

• 2023-10-23 – 404 TDS URL chain leads to Async RAT variant

• 7 Essential Security Features for Messaging Apps to Gain User Trust

• VMware addressed critical vCenter flaw also for End-of-Life products

• Hong Kong residents targeted in malvertising campaigns for WhatsApp, Telegram

• Salt Security: OAuth Implementation Flaw Could Lead to Account Takeover

• Cyber Security Today: Ransomware attacks hit a record in September, and more

• Seiko “BlackCat” Data Breach: 60,000 Records on the Line

• Uncover the nastiest malware of 2023

• US security remains paramount in the continued rise of AI, according to Treasury Department secretary

• Malwarebytes Identity Theft Protection defends users against online threats

• Cybercriminals Target Senior U.S. Executives Using EvilProxy Phishing Kit

• How to secure the WordPress wp-config.php configuration file

• Digital.ai launches Denali to accelerate enterprise software delivery at scale

• The Role of FPGAs in Post-Quantum Cryptography and Cyber Resilience

• The Role of FPGAs in Post-Quantum Cryptography and Cyber Resilience

• Building vs. Buying Software

• Frustrated Facebook User Reports Every Fake Profile He Sees But Says Facebook Has Done Nothing

• Zero Trust in Cybersecurity: from myth to the guide

• Teleport Identity Governance and Security reduces attack surface area

• ICC Confirms Recent Cyberattack Was Espionage

• Digital.ai launches Denali to help enterprises automate secure software releases

• A Cybersecurity Framework for Mitigating Risks to Satellite Systems

• Ex-NSA Techie Pleads Guilty To Selling State Secrets To Russia

• VMware vCenter Flaw So Critical, Patches Released For End-Of-Life Products

• Ransomware Boom Hits All-Time High

• Personal Information Stolen In City Of Philadelphia Email Hack

• Flaws In O-Auth’s Social Sign-In Could Have Put Billions Of Users At Risk

• When it Comes to ZTNA, Buyer Beware

• Critical OAuth Flaws Uncovered in Grammarly, Vidio, and Bukalapak Platforms

• Nation State Hackers Exploiting Zero-Day in Roundcube Webmail Software

• Leveraging AI To Augment Humans in Cybersecurity

• Cost of a data breach: The evolving role of law enforcement

• Lookout Elevates Strategic Investment in Data-centric Cloud Security

• Hackers Breached Okta`s Customer Support System via Stolen Credentials

• Cloud-Native Security: A Tipping Point for Security Teams’ Productivity

• Cyber Militarization: Navigating the Digital Battlefield

• SentinelOne introduces Singularity Threat Intelligence for enhanced threat landscape understanding

• A Continuing Cyber-Storm with Increasing Ransomware Threats and a Surge in Healthcare and APAC region

• A fortified data vault to give you peace of mind

• NCSAM Theme: Securing Our World

• Closing The Gap: Resolving Human Error in Cloud Security

• AWS: Security Not a Priority For a Third of SMBs

• APT Winter Vivern Exploits New Roundcube 0-Day to Target European Entities

• It’s “by mistake” – How I got into Cybersecurity

• Joint Industry statement of support for Consumer IoT Security Principles

• How AI is Transforming Defensive Cybersecurity

• Axiomatics Taps Generative AI to Make Access Control Simpler

• Google Plans To Roll Out IP Protection Feature In Chrome Browser

• How long should a password be in 2023? You’re asking the wrong question

• What you should know about VPN audits

• The Rise of S3 Ransomware: How to Identify and Combat It

• Roundcube webmail zero-day exploited to spy on government entities (CVE-2023-5631)

• CyCognito platform enhancements help users identify and protect unmanaged assets

• Microsoft Q1 Benefits From Cloud Strength

• Elon Musk Mocked Ukraine, and Russian Trolls Went Wild

• Microsoft is Soft-Launching Security Copilot

• LockBit 3.0 Ransomware Victim: fern-plastics[.]co[.]uk

• LockBit 3.0 Ransomware Victim: excon[.]cl

• LockBit 3.0 Ransomware Victim: ambic[.]co[.]uk

• LockBit 3.0 Ransomware Victim: linkmicrotek[.]com

• LockBit 3.0 Ransomware Victim: mgbwlaw[.]com

• Zscaler Report Surfaces Spike in IoT Cyberattacks

• Act Now: VMware Releases Patch for Critical vCenter Server RCE Vulnerability

• Version 1 and The National Museum of Computing Launch New App Using Generative AI Technology to Dramatically Improve Accessibility and Visitor Experience

• A Visual Journey: Exploring the Redesigned Bolster Dashboard

• VMware patches critical vulnerability in vCenter Server (CVE-2023-34048)

• Oscilar introduces generative AI powered platform for fraud prevention

• Meta Sued By US States Over Harm To Children

• Citrix warns admins to patch NetScaler CVE-2023-4966 bug immediately

• More than half of mid-sized firms lack confidence in tackling cyber threats finds new report

• PlainID partners with BigID to enhance data protection and visibility for customers

• Malvertising Campaign Targets Brazil’s PIX Payment System with GoPIX Malware

• Security in the Property Industry: Challenges and How to Avoid Attacks

• US Energy Company Reveals How Akira Ransomware Compromised its Systems

• Serial Numbers for WooCommerce – License Manager Plugin for WordPress cross-site request forgery | CVE-2023-46078

• Kodbox cross-site scripting | CVE-2023-45998

• Soisy Pagamento Rateale plugin for WordPress information disclosure | CVE-2023-5132

• IBM TXSeries denial of service | CVE-2023-42031

• Add Custom Body Class plugin for WordPress cross-site scripting | CVE-2023-5205

• Purchase Scams Surge as Fraud Losses Hit £580m

• Hunters International leaks pre-op plastic surgery pics in negotiation no-no

• Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report

• Small Businesses Suffer Record Number of Cyber-Attacks

• Backdoor Implanted on Hacked Cisco Devices Modified to Evade Detection

• AWS European Sovereign Cloud allows customers to keep all metadata in the EU

• 8 Base Ransomware Victim: EDUARDO G[.] BARROSO

• Why performing security testing on your products and systems is a good idea

• The pirates are back

• Android Malware Masquerades as Chrome Browser Reads SMS & Intercepts Emails

• AI to Create Demand for Digital Trust Professionals, ISACA Survey Finds

• Amazon Web Services launches European Sovereign Cloud

• Ten compelling reasons to assert cloud sprawl can lead to cybersecurity concerns

• New England Biolabs leak sensitive data

• Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities

• Handling SaaS Data Exposure Risks Due to Potential ServiceNow Misconfigurations

• Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report

• VMware reveals critical vCenter vuln that you may have patched already without knowing it

• ASVEL basketball team confirms data breach after ransomware attack

• Hackers backdoor Russian state, industrial orgs for data theft

• VMware warns admins of public exploit for vRealize RCE flaw

• Cyberattack on health services provider impacts 5 Canadian hospitals

• September was a record month for ransomware attacks in 2023

• What is operational risk and why should you care? Assessing SEC rule readiness for OT and IoT

• On the Go, Securely: Top Tips for Mobile Device Security

• Security leaders have good reasons to fear AI-generated attacks

• Strategies to overcome cybersecurity misconceptions

• VMware Aria Operations for Logs Multiple Vulnerabilities

• Consumers are taking action to protect their privacy

• 1Password reports security incident after breach at Okta

• Posh C2 Detected – 185[.]234[.]216[.]64:443

• Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave™ report

• Former NSA employee pleads guilty to attempted selling classified documents to Russia

Generated on 2023-10-26 23:55:44.543793