IT Security News Daily Summary 2023-10-30

• Google Dynamic Search Ads Abused to Unleash Malware ‘Deluge’

• Facebook Unveils Paid Subscription Model To Comply With Privacy Regulations

• VMware Releases Advisory for VMware Tools Vulnerabilities

• Florida man sentenced to prison for SIM Swapping conspiracy that led to theft of $1M in cryptocurrency

• Unpatched NGINX ingress controller bugs can be abused to steal Kubernetes cluster secrets

• Internet access in Gaza partially restored after blackout

• An Anchor in the Race

• Biden issues Executive Order on AI for U.S. government departments and application developers

• Lazarus Group Malware Targets Legitimate Software

• Budget Cuts at CISA Could Affect Enterprise Cybersecurity

• Lateral Movement: Abuse the Power of DCOM Excel Application

• Vulnerability Summary for the Week of October 23, 2023

• 3D Printing: Unpacking Facts and Safeguarding from Cybersecurity Threats

• iOS 17.1 update still no defense against Flipper Zero iPhone crashes

• White House Executive Order on AI Provides Guidelines for AI Privacy and Safety

• UAE Cyber Council Warns of Google Chrome Vulnerability

• Boeing Breached by Ransomware, LockBit Gang Claims

• Cryptojackers steal AWS credentials from GitHub in 5 minutes

• Canada Bans WeChat and Kaspersky on Government Phones

• supercookie

• Weekly Vulnerability Recap – October 30, 2023 – Citrix & Cisco Haunted by Vulnerabilities

• Boeing Evaluates Cyber Group’s Data Dump Threat

• Canada bans federal employees from using WeChat, Kaspersky mobile apps

• Investigate Google Service Account Key Origins and Usage

• Beyond the Login Box: Okta Fuels Developer Innovation in Identity

• Evolving Cyber Dynamics Amidst the Israel-Hamas Conflict

• Break into a career in IT with this cybersecurity training bundle

• UAE Bolsters Cyber Future With US Treasury Partnership, Collaborations

• SternX Resources to Assist Businesses with Insider Threat Risk Assessment

• A Complete Guide to NIST Compliance: Navigating the Cybersecurity Framework, NIST 800-53, and NIST 800-171

• Accelerating FedRAMP ATOs: OMB Memo

• How to Get HITRUST Certified—and Why

• Pro-Palestinian Threat Groups Expand Cyberwar Beyond Israel

• Rishi Sunak Outlines Risks and Potential of AI Ahead of Tech Summit

• The Risk of RBAC Vulnerabilities – A Prevention Guide

• Virtual credit card fraud: An old scam reinvented

• Hamas Hackers Targeting Israelis with New BiBi-Linux Wiper Malware

• Integrating Salesforce With Google BigQuery for Cortex Framework Deployment

• Pro-Hamas Hacktivists Targeting Israeli Entities with Wiper Malware

• F5 fixes critical BIG-IP vulnerability, PoC is public (CVE-2023-46747)

• Wiki-Slack attack allows redirecting business professionals to malicious websites

• Biden Issues Executive Order on Safe, Secure AI

• Report Links ChatGPT to 1265% Rise in Phishing Emails

• Google App turns into malware for many on Smart Phones

• Nonprofit Plans To Lease 24,000 Nvidia H100 GPUs For AI

• Google Chief Pichai Takes Stand In Landmark Antitrust Trial

• Microsoft Exposes Octo Tempest, One of the Most Dangerous Financial Threat Actors to Date

• ‘Accidental’ malvertising via Dynamic Search Ads delivers malware frenzy

• Apple Improves iMessage Security With Contact Key Verification

• Boeing Investigating Ransomware Attack Claims

• Proofpoint to Acquire Tessian for AI-Powered Email Security Tech

• Florida SIM Swapper Sentenced to Prison for Cryptocurrency Theft

• CISA Unveils Logging Tool to Aid Resource-Scarce Organizations

• India’s DPDP Act: Industry’s Compliance Challenges and Concerns

• F5 fixes critical BIG-IP vulnerability (CVE-2023-46747)

• Critical PHPFox RCE Vulnerability Risked Social Networks

• Critical F5 BIG-IP Flaw Allows Remote Code Execution Attacks

• Hackers Deliver Remcos RAT as Weaponized PDF Payslip Document

• iPhone users who don’t want to be tracked need Apple’s iOS 17.1 privacy patch

• Ransomware Roundup – Knight

• Kraken to Provide 42,000 Consumers’ Data with IRS Following Court Order

• Western Digital To Split Into Two After Walking Away From Kioxa Merger

• Cisco Americas Partner Organization: Laser Focused on Customer and Partner Success

• Stanford schooled in cybersecurity after Akira claims ransomware attack

• A New Tactic to Combat Cyber Warfare: Diversity as Digital Defense

• RansomedVC Ransomware Group Quitting and Selling its Entire Infrastructure

• Securely Migrating to AWS with Check Point

• Immuta Discover identifies and classifies sensitive data

• Xiaomi Prepares Unified OS As Huawei Cuts Off Android

• What the Boardroom Is Missing: CISOs

• Hackers Earn Over $1 Million at Pwn2Own Toronto 2023

• Attackers Can Use Modified Wikipedia Pages to Mount Redirection Attacks on Slack

• Cybersecurity Awareness Month: ‘Staff training far most cost-effective than going through a cyber compromise’

• Privacy in the Age of AI: Strategies for Protecting Your Data

• F-Secure Eyes $9.5M in Cost Savings With Layoffs

• Cybersecurity Certifications Play a Vital Role in Shrinking the Skills Gap

• Spookiest Hacks, Cybercriminals and Tactics Lurking in 2023

• Netwrix releases product enhancements to strengthen data security

• New Webinar: 5 Must-Know Trends Impacting AppSec

• 4 Secure Framework Considerations Before Deploying Workloads in The Public Cloud

• Deliver Exceptional Digital Experiences and Unlock New Value With Okta Customer Identity

• F5 Hurriedly Squashes BIG-IP Remote Code Execution Bug

• Boeing Looking Into Hacking Gang’s Ransomware Threat

• HackerOne Paid Ethical Hackers Over $300 Million In Bug Bounties

• Britain To Push Ahead With Rules For Cryptoassets

• Identity Theft: The Silent Threat for Executives

• CCleaner Data Privacy at Risk: MOVEit Mass-Hack Exposes User Information

• White House issues Executive Order for safe, secure, and trustworthy AI

• Patches Released For The Actively Exploited Cisco IOS XE Zero-Day Flaws

• Hackers Abusing OAuth Token to Take Over Millions of Accounts

• UN sets up advisory team to coordinate ‘inclusive’ AI governance

• Get a Lifetime of Secure VPN Protection for Just $28.97 Until 10/31

• The myth of the long-tail vulnerability

• Cisco Networking Academy introduces Professional Skills – empowering tomorrow’s leaders

• HackerOne awarded over $300 million bug hunters

• SEC Regulations, Government Overreach and Access to Cybersecurity Information

• ServiceNow Data Exposure: A Wake-Up Call for Companies

• NetSupport Intrusion Results in Domain Compromise

• CloudKeys in the Air: Tracking Malicious Operations of Exposed IAM Keys

• How to stop important messages going to spam

• Biden Executive Order Sets Out AI Safeguards

• Biden Wants to Move Fast on AI Safeguards and Will Sign an Executive Order to Address His Concerns

• Whistleblowers: Should CISOs Consider Them a Friend or Foe?

• Cyber Security Today, Oct. 30, 2023 – Hackers warn Las Vegas-area parents they have their children’s data

• Citrix Bleed: Mass exploitation in progress (CVE-2023-4966)

• Beware of Data Security Monsters Lurking in the Shadows this Halloween

• Hacking Scandinavian Alcohol Tax

• EleKtra-Leak Cryptojacking Attacks Exploit AWS IAM Credentials Exposed on GitHub

• ZeroRISC raises $5M to deliver commercial OpenTitan-based cloud security for chips

• Surveillance Commissioner Blasts Cops for Data Retention

• G7 Nations Agree To Voluntary AI Guidelines

• Logging Made Easy: Free log management solution from CISA

• A Scary Story of Group Policy Gone Wrong: Accidental Misconfigurations

• 6 Common Phishing Attacks and How to Protect Against Them

• HackerOne Exceeds $300m in Bug Bounty Payments

• Silicon In Focus Podcast: The Omnichannel Evolves

• NHS Data Would Be ‘Safe’ Under Contract, Says Palantir Boss

• This holiday, you could be inviting a fraudster to your home

• StripedFly, a complex malware that infected one million devices without being noticed

• Separation of Privilege (SoP) 101: Definition and Best Practices

• Google expands bug bounty program to cover AI-related threats

• Boeing Investigates LockBit Ransomware Breach Claims

• XWorm Sold Malware-as-a-service Opens Vast Hacking Opportunities

• Hackers Using MSIX App Packages to Infect Windows PCs with GHOSTPULSE Malware

• Urgent: New Security Flaws Discovered in NGINX Ingress Controller for Kubernetes

• Raven: Open-source CI/CD Pipeline Vulnerability Scanner Tool

• Getting Smart With Cybersecurity: AI Can Help the Good Guys, Too

• CISO Skills in a Changing Security Market: Are You Prepared?

• Securing Modern Enterprises in a Borderless Landscape

• The dangers of dual ransomware attacks

• LockBit Ransomware Group Targets Boeing with Data Threat

• Kaspersky Uncovers ‘Operation Triangulation,’ a Threat to iOS Devices

• Ten Ways to Protect PCs and Routers from Holiday Season Cyber Attacks

• Finding the right approach to security awareness

• Companies scramble to integrate immediate recovery into ransomware plans

• AI threat landscape: Model theft and inference attacks emerge as top concerns

• Hackers Using MSIX App Packages to Infect Windows PCs with GHOSTPULSE Maware

• IoT’s convenience comes with cybersecurity challenges

• Cyber attacks cause revenue losses in 42% of small businesses

• Communication Fort Knox: Tools to Safeguard Your Business

• GameSprite – 6,164,643 breached accounts

• LockBit alleges it boarded Boeing, stole ‘sensitive data’

• Toronto Public Library hit by cyber attack

• Netsupport Intrusion Results in Domain Compromise

• IT Security News Daily Summary 2023-10-29

• Email Security in the Remote Work Era

• 8 Essential Windows Security Tips to Protect Your Computer

• Surge in QR Code Quishing: Check Point Records 587% Attack Spike

• DEF CON 31 – Policy Panel: How Hackers Can Work With Government To Protect High Risk Communities

• Xtreme: Flipper Zero can Spam Android, Windows Devices with Bluetooth Alerts

• Rising Healthcare Cyberattacks: White House Contemplates Response

• IT Army of Ukraine disrupted internet providers in territories occupied by Russia

• Shadow AI: The Novel, Unseen Threat to Your Company’s Data

• Achieving Zero-Standing Privileges with Okta and Apono

• Fend Off the Next Phishing Attack With A “Human Firewall.”

• Quishing Emerges as a Leading Cybersecurity Challenge

• iLeakage Attack: Theft of Sensitive Data from Apple’s Safari Browser

• Security Affairs newsletter Round 443 by Pierluigi Paganini – INTERNATIONAL EDITION

• Week in review: VMware patches critical vulnerability, 1Password affected by Okta breach

• MemeChat – 4,348,570 breached accounts

Generated on 2023-10-30 23:55:38.288392