IT Security News Daily Summary 2023-11-07

• Myrror Security Emerges From Stealth With $6M Seed Round to Prevent Attacks on the Software Development Process

• Risk Ledger Secures £6.25M to Prevent Cyberattacks on the Supply Chains of Nation’s Largest Enterprises

• Malwarebytes Launches ThreatDown to Empower Resource Constrained IT Organizations

• Social Media and SMS Toll Fraud

• Microsoft Pushes MFA Adoption Via Conditional Policies

• Marina Bay Sands Becomes Latest Hospitality Cyber Victim

• DON’T PANIC! How to Manage IT Product Risk with Supply Chain Intelligence

• hide.me VPN Review 2023: Features, Pricing, and More

• Facebook Bans Political Campaigns, Other Advertisers From Using AI

• CVSS 4.0 Offers Significantly More Patching Context

• Government Surveillance Reform Act of 2023 Seeks to End Warrantless Police and FBI Spying

• North Korea’s BlueNoroff APT Debuts ‘Dumbed Down’ macOS Malware

• This Month, The EU Parliament Can Take Action To Stop The Attack On Encryption

• Introducing Badger Swarm: New Project Helps Privacy Badger Block Ever More Trackers

• A Journey from Military Defense Systems to PKI Expertise

• Ransomware was behind Toronto Public Library attack

• Speedify Review 2023: Features, Security & Performance

• Marina Bay Sands Luxury Hotel in Singapore Suffers a Data Breach

• MTE – The promising path forward for memory safety

• Hackers Exploit Atlassian Flaw in Cerber Ransomware Attacks

• Frontegg Forward is here, allowing enterprises to securely manage their customers’ digital identities

• Atlassian Bug Escalated to 10, All Unpatched Instances Vulnerable

• Internet Blackouts in Gaza Are a New Weapon in the Israel-Hamas War

• Observation Mission Stresses Key Elements of Ola Bini’s Case for Upholding Digital Rights

• Daniel Stori’s ‘When Artificial Intelligence Meets git’

• Insights from Security Mavericks: Interpublic Group, FICO, and Mercury

• The Role of Enhanced Visibility for Data Privacy and Security

• US Man Sentenced to Over 21 Years for Dark Web Distribution of CSAM

• What is Network Detection and Response (NDR)?

• Microsoft .NET 8 enhances ID management

• Frontegg introduces Forward, allowing enterprises to securely manage their customers’ digital identities

• Article 45 Will Roll Back Web Security by 12 Years

• Win First and Then Go to War: Truly Protecting Your APIs | Impart Security

• Crafting an AI Policy That Safeguards Data Without Stifling Productivity

• 23andMe data theft prompts DNA testing companies to switch on 2FA by default

• How Splunk and Cisco will Keep Customers at the Center

• The Government Surveillance Reform Act Would Rein in Some of the Worst Abuses of Section 702

• Microsoft likens MFA to 1960s seatbelts, buckles admins in yet keeps eject button

• AI Safety Summit at Bletchley Park all about trust: Champagne

• Iran-Linked Agrius APT Group Targets Israeli Education, Tech Sectors

• Bitwarden Revolutionises Online Security with Passkey Management

• ThreatDown powered by Malwarebytes: A 15 Year Journey

• UK may demand tech world tell it about upcoming security features

• Webinar Recap: Hands-on guide to Runtime Security for CI/CD Pipelines with StepSecurity

• 5 ways to improve your GraphQL hacking skills

• Medusa Ransomware Group Takes Ownership for Cyber-attack on Canadian Psychological Association

• Coffee Briefing Nov. 7 – CGI teams up with Google, CyberCatch protects SMBs against ransomware and data theft; All Nova Scotians to have access to free virtual healthcare; and more

• Uptycs provides unified supply chain and runtime security for Kubernetes

• GootBot Implant Heightens Risk of Post-Infection Ransomware

• Data Breach at Singapore’s Marina Bay Sands Affects 665,000 Customers

• OpenAI Prepares GPT Store, Adds ‘Turbo’ GPT-4

• YouTube’s Ad Blocker Detection Believed to Break EU Privacy Law

• UK may demand tech world tell it about upcoming security features so it can ‘disable them’

• Data Brokers Expose Sensitive US Military Member Info to Foreign Threat Actors: Study

• Critical Vulnerabilities Expose Veeam ONE Software to Code Execution

• What Developers Need to Succeed for Effective Application Security

• Torrent Service Data Breach: What You Need to Know

• Notorious Ransomware Gang Claims Responsibility for Cyberattack on Southwestern Ontario Hospitals

• Bitwarden launches passkey management for passwordless authentication across accounts

• Varonis enhances its Microsoft 365 offering to prevent sensitive email exposure

• Cybersecurity and AI Deep in the Heart of Texas Cyber Summit

• NETSCOUT releases Adaptive DDoS Protection for AED

• IRONSCALES expands platform capabilities to improve employee phishing awareness

• The best VPN trials of 2023

• GE MiCOM S1 Agile

• CISA Releases One Industrial Control Systems Advisory

• Kentik Kube collects metadata across Kubernetes pods, clusters, and services

• Predator AI | ChatGPT-Powered Infostealer Takes Aim at Cloud Platforms

• Marina Bay Sands Singapore suffers Information Security Breach

• EU Agrees New Restrictions For Online Political Ads

• Veeam Critical Flaws Let Attackers Execute Remote Code and Steal NTLM Hashes

• Introducing ThreatDown: A new chapter for Malwarebytes

• Free Tool Helps Industrial Organizations Find OPC UA Vulnerabilities

• New MacOS Malware Linked to North Korean Hackers

• 5 Things to Consider Before Downloading an App

• Sumo Logic launches HELM Chart V4 to unify data collection on Kubernetes clusters

• Microsoft introduces new access policies in Entra to boost MFA usage

• Traefik Hub updates modernize API runtime operations

• N. Korea’s BlueNoroff Blamed for Hacking macOS Machines with ObjCShellz Malware

• Baidu ‘Turns To Huawei’ For AI Chips

• NIST’s security transformation: How to keep up

• IT Pros in Australian Crypto Need to Brace for Regulation

• How to Secure the 5 Cloud Environment Types

• Identity Alone Won’t Save Us: The TSA Paradigm and MGM’s Hack

• Fresh find shines new light on North Korea’s latest macOS malware

• Google Introduces Badges to Identify Which VPN App has Passed a Security Audit

• American Airlines Pilot Union Targeted in a Major Ransomware Attack

• Malwarebytes ThreatDown helps organizations to overpower threats

• New BlueNoroff Malware Variant Targets Cryptocurrency Exchanges

• Top 6 Cybersecurity Incident Response Phases – 2024

• Empowering Cyber Security by Enabling 7 Times Faster Log Analysis

• dark web monitoring

• The Rising Role of Artificial Intelligence in The Cybersecurity Market

• A New Ai Arms Race

• Border Crossing: A New Battle Over Governments Extending Information Mandates Beyond National Security to National Interest

• Why Policy-as-Code is the Best Way to Streamline Authorization

• Phishing Scare at Bitfinex: Employee Breach Exposes Users to Cyber Threats

• ExtremeCloud Universal ZTNA strengthens network security

• N. Korean BlueNoroff Blamed for Hacking macOS Machines with ObjCShellz Malware

• Glasgow Caledonian University Selects CyberArk to Reduce Identity Security Risk for Thousands of Staff and Students

• Cloud Security in Action: Meet Check Point CloudGuard

• Introducing Cisco User Protection Suite

• Cisco further delivers on Full-Stack Observability ecosystem vision

• Time to Simplify: A Fresh Look at Infrastructure and Operations for Artificial Intelligence

• Navigating the Sea, Exploiting DigitalOcean APIs

• Imperva Expands Global Network, Adds First PoP in Vietnam

• ThreatDown: A new chapter for Malwarebytes

• Narrowing the Focus of AI in Security

• Myrror Security Emerges From Stealth Mode With $6 Million in Funding

• 37 Vulnerabilities Patched in Android With November 2023 Security Updates

• Configuration of SPF and DKIM for Cakemail

• How to Select the Right Cyber Risk Management Services

• New SEC Disclosure Rules Demand Better CISO Communication

• IBM introduces cloud-native SIEM to empower today’s security teams

• On Election Day, CISA and Partners Coordinate on Security Operations

• Bumble Chief Whitney Wolfe Herd To Step Down

• Roundtable: Bridging the Tech Skills Gap: Do You Need More than a Degree?

• IBM X-Force Discovers Gootloader Malware Variant- GootBot

• Security Vulnerabilities in CasaOS

• Confidence in File Upload Security is Alarmingly Low. Why?

• New GootLoader Malware Variant Evades Detection and Spreads Rapidly

• Malwarebytes makes B2B unit spin-off official, launches ThreatDown

• Veeam fixed multiple flaws in Veeam ONE, including critical issues

• Spaf on the Morris Worm

• Cloud Foundry Foundation updates Korifi to simplify Kubernetes developer experience

• VMware advances IT modernization and security

• Suspicious Microsoft Authenticator requests don’t trigger notifications anymore

• Epic And Google Go To Court Over App Store Fees

• Okta breach happened after employee logged into personal Google account

• Ransomware Gang Leaks Data Allegedly Stolen From Canadian Hospitals

• Federal Push for Secure-by-Design: What It Means for Developers

• Moving Beyond CVSS Scores for Vulnerability Prioritization

• Winter Vivern’s Roundcube Zero-Day Exploits

• Italy Seizes £677m From Airbnb In Tax Dispute

• What a Bloody San Francisco Street Brawl Tells Us About the Age of Citizen Surveillance

• Offensive and Defensive AI: Let’s Chat(GPT) About It

• WeWork Files For Bankruptcy Protection In US

• Looking Ahead: Highlights from ENISA’s Foresight 2030 Report

• Google introduces real-time scanning on Android devices to fight malicious apps

• Pro-Palestinian hackers group ‘Soldiers of Solomon’ disrupted the production cycle of the biggest flour production plant in Israel

• Cybersecurity M&A Roundup: 31 Deals Announced in October 2023

• Looney Tunables bug exploited for cryptojacking

• Veeam Patches Two Critical Bugs in Veeam ONE

• SideCopy Exploiting WinRAR Flaw in Attacks Targeting Indian Government Entities

• SIM Box Fraud to Drive 700% Surge in Roaming Scams

• Cerber Ransomware hackers target Atlassian Confleunce servers

• Critical Atlassian Bug Exploited in Ransomware Attacks

• Iranian Agonizing Serpens APT is targeting Israeli entities with destructive cyber attacks

• LinkedIn Scraped and Faked Data (2023) – 5,820,276 breached accounts

• VMware Explore Barcelona 2023: Enhanced Private AI and Sovereign Cloud Services Announced

• NSFOCUS WAF Running Modes

• A major cyber attack: $3.5 Trillion Loss can occur!

• Experts Warn of Ransomware Hackers Exploiting Atlassian and Apache Flaws

• 7 cool and useful things to do with your Flipper Zero

• Steps to Follow to Comply With the SEC Cybersecurity Disclosure Rule

• Intensified Israeli Surveillance Has Put the West Bank on Lockdown

• 7 free cyber threat maps showing attack intensity and frequency

• How AI is transforming consumer privacy expectations

• Kubescape 3.0 elevates open-source Kubernetes security

• Critical Flaws Discovered in Veeam ONE IT Monitoring Software – Patch Now

• Outdated cryptographic protocols put vast amounts of network traffic at risk

• Microsegmentation proves its worth in ransomware defense

• Automatic Conditional Access policies in Microsoft Entra streamline identity protection

• eBook: Keeping Active Directory out of hackers’ cross-hairs

• E-commerce Armor: Ensuring Secure Payment Processing

• Decoupled SIEM: Brilliant or Stupid?

• Woman jailed after Rentahitman.com assassin turned out to be – surprise – FBI

• The Evolution of Oil & Gas Industry

• Endpoint security getting a boost from AI and machine learning

• EFF to Ninth Circuit: Activists’ Personal Information Unconstitutionally Collected by DHS Must Be Expunged

• Kinsing Cyberattackers Debut ‘Looney Tunables’ Cloud Exploits

• Online store exposed millions of Chinese citizen IDs

• Cloud Connectivity: Learn How to Connect the Cloud (The Right Way)

• ICE faces heat after agents install thousands of personal apps, VPNs on official phones

• Randall Munroe’s XKCD ‘Doctor’s Office’

• DEF CON 31 – Bohan Liu, Zheng Wang, GuanCheng Li ‘ndays Are Also 0days’

• IT Security News Daily Summary 2023-11-06

• Okta Breach Linked to Employee’s Google Account, Affects 134 Customers

• CVSS 4.0 Arrived As The New Vulnerability Scoring Standard

• Discord Adopts Temporary CDN Links To Prevent Malware

• Virtual Kidnapping: AI Tools Are Enabling IRL Extortion Scams

• Gootloader Aims Malicious, Custom Bot Army at Enterprise Networks

• Vulnerability Summary for the Week of October 30, 2023

• Weekly Vulnerability Recap – November 6, 2023 – Windows Drivers and Exchange Flaws

• Novel Google Cloud RAT Uses Calendar Events for C2

• Google Play Store just unveiled a security badge for some apps. Here’s what it means

• Ransomware continues to rise in October across all sectors

• Digital Rights Updates with EFFector 35.14

• multisig (multisignature)

• New Facebook Whistleblower Comes Forward Alleging Company Failed To Protect Young Users

• Aqua Security Introduces Industry-First Kubernetes Vulnerability Scanning With Trivy KBOM

• Excelsior University Contends for National Cyber League Competition Title

• Elevating the standard for cybersecurity education

• Congress Shouldn’t Limit The Public’s Right To Fight Bad Patents

• Critical Confluence flaw exploited in ransomware attacks

• Travelers to Acquire Cyberinsurance Firm Corvus for $435 Million

• Authentication Systems Decoded: The Science Behind Securing Your Digital Identity

• GUEST ESSAY: How to mitigate the latest, greatest phishing variant — spoofed QR codes

• Google Launches Verification Badges for Security Tested VPN Apps

• Name That Edge Toon: Out for the Count

• US Focus on Cybersecurity, But Contractors Lag Behind in Preparedness

• How is Brave’s ‘Leo’ a Better Generative AI Option?

• Middle East’s 5G Acceleration May Pose Serious Security Issues

• CISA Published When to Issue VEX Information

• US sanctions Russian accused of laundering Ryuk ransomware funds

• Palo Alto to Acquire Talon, Intensifying Competition in Cloud Data Security

• QNAP Releases Patch for 2 Critical Flaws Threatening Your NAS Devices

• New Jupyter Infostealer Version Emerges with Sophisticated Stealth Tactics

• Palo Alto Networks to acquire Talon Cyber Security

• Beyond Identity launches Okta Defense Kit to identify and prevent security vulnerabilities

• Russian National Sanctioned For Virtual Currency Money Laundering

• Arid Viper | APT’s Nest of SpyC23 Malware Continues to Target Android Devices

• NIS2 Directive: Mitigating Risk Across Critical Industries

• US slaps sanctions on accused fave go-to money launderer of Russia’s rich

• Red Hat Device Edge ensures consistency across edge and hybrid cloud deployments

• MITRE partners with Microsoft to address generative AI security risks

• Spy Trojan SpyNote Unveiled in Attacks on Gamers

• Tesla To Build Cut-Price EV In Germany: Report

• Japan’s NTT To Invest In US Driverless Car Start-Up

• Hackers Actively Exploiting Linux Privilege Escalation Flaw to Attack Cloud Environments

• American Airlines Pilot Union Recovering After Ransomware Attack

• Here’s How RegTech is Transforming India’s Regulatory Landscape

• How Blockchain Technology Can Reshape Systems Via Computer Vision?

• Security Executives: Navigating Cyber Liability Risks

• Palo Alto Networks acquired Talon Cyber Security

• The Journey of Becoming a Blockchain Developer

• Meet Your New Cybersecurity Auditor: Your Insurer

• Cisco Welcomes Rodney Clark to Lead Global Partner Sales

• QNAP fixed two critical vulnerabilities in QTS OS and apps

• Crashing iPhones with a Flipper Zero

• Ransomware gang continues to publish data stolen from Ontario hospitals

• Wing Simulator enables developers to build and test Kubernetes applications

• SecuriDropper: New Android Dropper-as-a-Service Bypasses Google’s Defenses

• Cyera Adds Automated Remediation Capability to DSPM Platform

• RedSense Compromised Credential Services 2.0 helps users prevent future incidents

• US, Japan and South Korea Unite to Counter North Korean Cyber Activities

• X Reinstates More Controversial UK Banned Accounts

• Scammers Use Fake Ledger App on Microsoft Store to Steal $800,000 in Crypto

• Secure Your Web Applications With Facial Authentication

• The Power of Resource-Oriented Programming in Cadence: A Deep Dive

• Who’s Behind the SWAT USA Reshipping Service?

• Confirmed: Palo Alto has acquired Talon Cyber Security, sources say for $625M

• Prisma® SASE and Talon to Secure the Rising Risk of Unmanaged Devices

• Okta breach affected 134 orgs, ‘or less than 1%’ of customers, company admits

• ‘Looney Tunables’ Glibc Vulnerability Exploited in Cloud Attacks

• US Sanctions Russian National for Helping Ransomware Groups Launder Money

• Configuration of SPF and DKIM for Adobe Marketo

• Okta breach post mortem reveals weaknesses exploited by attackers

• Worldwide Alliance: 50 Countries Join Forces Against Ransomware Attacks

• Impersonation Attack: Cybercriminals Impersonates AUC Head Using AI

• Study: More Than 100 Research Projects Affected By X Changes

• 6th Annual Partner Innovation Challenge: Remarkable Growth, Outstanding Winners

• Exploitation of Critical Confluence Vulnerability Begins

• Gaining Security and Flexibility With Private 5G

• Cyber Security Today, Nov. 6, 2023 – Okta employee faulted for HAR hack, another US school board’s data stolen, and more

• Canada Bans Kaspersky, WeChat On Govt Devices Suspecting Spying

• Check Point Recognized on the 2023 CRN Edge Computing 100 List

• Over Half of Users Report Kubernetes/Container Security Incidents

• Attackers use Google Calendar RAT to abuse Calendar service as C2 infrastructure

• Chinese AI Start-Up Achieves $1bn Valuation In Eight Months

• Medical research data Advarra stolen after SIM swap

• Securing frontline Operational Technology environments

• Iranian APT Targets Israeli Education, Tech Sectors With New Wipers

• Silobreaker AI enhances threat intelligence strategy

• Musk’s xAI Launches ‘Grok’ Chatbot

• China Invests Billions In Memory Firms In Face Of US Sanctions

• Corrupt Police Imprisoned for Revealing Investigation Secrets to Criminal

• New DDoS Attacks Waves. Cybersecurity Expert Robertino Matausch Explains HTTP/2 Rapid Reset

• Agonizing Serpens (Aka Agrius) Targeting the Israeli Higher Education and Tech Sectors

• Is paying the ransom worth it?

• Socks5Systemz Proxy Hacked 10,000+ Systems World Wide

• Security Incident Response Policy

• Defeating Little Brother requires a new outlook on privacy: Lock and Code S04E23

• Google Play will mark independently validated VPN apps

• Iranian Hackers Launches Destructive Cyberattacks on Israeli Tech and Education Sectors

• Is ChatGPT writing your code? Watch out for malware

• KubeCon points to the future of enterprise IT

• A Cyber Breach Delays Poll Worker Training in Mississippi’s Largest County Before the Statewide Vote

• Microsoft Says Exchange ‘Zero Days’ Disclosed by ZDI Already Patched or Not Urgent

• Atlassian Confluence data-wiping vulnerability exploited

• Gaming-related cyberthreats in 2023: Minecrafters targeted the most

• Security Agency Publishes Post-Quantum Guidance For Firms

• What We Learned From “The Cyber-Resilient CEO” Report

• What is Classiscam Scam-as-a-Service?

• Okta Breach Hit Over 130 Customers

• DDoS attack revealed as cause of online service outage at public healthcare institutions

• Google Warns How Hackers Could Abuse Calendar Service as a Covert C2 Channel

• Zero Day Threat Protection for Your Network

• What are passkeys? Experience the life-changing magic of going passwordless

• Socks5Systemz proxy service delivered via PrivateLoader and Amadey

• A week in security (October 30 – November 5)

• Bolstering API Security and Bot Attack Protection with NSFOCUS Next-Generation WAF

• ‘Crypto King’ Sam Bankman-Fried Pleads Guilty Multi-billion Dollar Fraud

• Arid Viper Steals Sensitive Data From Android’s & Deploy Other Malware

• Sky’s the Limit, but What About API Security? Challenges in the Cloud-First Era

• Keep Your Organization’s APIs Protected This Holiday Season

• Data Breaches in October 2023 – Infographic

• HITRUST vs. HIPAA: Ensuring Data Security and Compliance

• U.S. Treasury Sanctions Russian Money Launderer in Cybercrime Crackdown

• Be careful if you use Apple’s Find My network

• Okta Hacked Again, Quishing Is The New Phishing, Google Play Protect Real-Time Scanning

• Exploring the global shift towards AI-specific legislation

• How global password practices are changing

• U.S. Treasury Targets Russian Money Launderer in Cybercrime Crackdown

• Cyber Attack news headlines trending on Google

• Exploring Different Types of Cybersecurity: Protecting the Digital Realm

• Securing data at the intersection of the CISO and CDO

• The roadblocks to preventive cybersecurity success

• The perils of over-reliance on single cloud providers

• The role of Kubernetes in modern app management

• Vendor Risk Management: Protecting Your Business’s Digital Borders

• GamingMonk – 654,510 breached accounts

Generated on 2023-11-07 23:56:14.902242