IT Security News Daily Summary 2023-11-09

• Verkada unveils privacy updates to its security system and cameras

• What We Can Learn from Major Cloud Cyberattacks

• Treasury Markets Disrupted by ICBC Ransomware Attack

• Maine government says data breach affects 1.3 million residents

• Downfall fallout: Intel knew AVX chips were insecure and did nothing, lawsuit claims

• Omegle Was Forced to Shut Down by a Lawsuit From a Sexual Abuse Survivor

• Lace Tempest exploits SysAid zero-day vulnerability

• DDoS attack leads to significant disruption in ChatGPT services

• DEF CON 31 – Xavier ‘X’ Cadena’s ‘LLMs At The Forefront Pioneering The Future Of Fuzz Testing’

• Cisco and Rockwell strengthen OT/ICS security with visibility for converged plantwide ethernet (CPwE)

• High Traffic + High Vulnerability = an Attractive Target for Criminals: The Dangers of Viewing Clickbait Sites

• SolarWinds says SEC sucks: Watchdog ‘lacks competence’ to regulate cybersecurity

• Ontario privacy commissioner investigating hospital group ransomware attack

• Why you need ZTNA with Desktops-as-a-Service

• Opinion: The Pros and Cons of the UK’s New Digital Regulation Principles

• API Leaks

• When Good Security Awareness Programs Go Wrong

• Russian Sandworm disrupts power in Ukraine with a new OT attack

• Threat Roundup for November 3 to November 10

• A new video series, Google Forms spam and the various gray areas of cyber attacks

• CISA Signs Memorandum of Understanding with the Republic of Korea to Share Cyber Threat Information and Cybersecurity Best Practices

• Hive Ransomware Resurfaces as Hunters International, Bitdefender Claim

• Data Brokers Sell Sensitive Data of US Military and Veterans

• Storage And Backup Cyber Resiliency – CISOs Guide 2024

• Data Privacy and Its Impact on Management

• 35 Million LinkedIn Users’ Information Shared on Hacking Forum

• Abusing Slack for Offensive Operations: Part 2

• US Government Surveillance Reform Act (GSRA), What It Will Change?

• ChatGPT down for you yesterday? OpenAI says DDoS attack was to blame

• The best identity theft protection and credit monitoring services of 2023

• How to Outsmart Malware Attacks That Can Fool Antivirus Protection

• How to Design and Implement Automated Security Workflows

• Australia to investigate Optus outage that impacted millions

• Human Rights Group Says Facebook Should Compensate Victims Of Hate Speech And Violence

• Imperial Kitten APT Claws at Israeli Industry with Multiyear Spy Effort

• Simplified Partner Tools: Cisco’s First-Ever MSP Support for Exceptional Customer Experiences

• Salt Security Named 2023 CISO Choice Award Winner for API Security

• SolarWinds: SEC ‘lacks the competence’ to regulate cybersecurity

• ‘Fraud is a Security Problem’: Bot Management as a Cornerstone of Online Fraud Prevention

• Arista Networks expands zero trust networking architecture

• Zero-Day Alert: Lace Tempest Exploits SysAid IT Support Software Vulnerability

• How to Associate an Apple ID with a Second New or Reset iPhone

• Imperial Kitten APT Claws at Israeli Industry With Multiyear Spy Effort

• Artificial Intelligence vs. Machine Learning

• OT remote access: can you trust your technician’s laptop?

• Judge rules it’s fine for car makers to intercept your text messages

• Tidal Cyber Raises $5 Million for Threat-Informed Defense Platform

• Medical Company Fined $450,000 by New York AG Over Data Breach

• Netskope Next Gen SASE Branch eliminates complicated, inefficient legacy branch infrastructure

• Signature Techniques of Asian APT Groups Revealed

• Eight Ways to Bolster Your Cybersecurity Resources Without Blowing Your Budget

• How to Get Facebook Without Ads—if It’s Available for You

• Johnson Controls Quantum HD Unity

• CISA Releases Four Industrial Control Systems Advisories

• Hitachi Energy eSOMS

• Meet Swisscom’s Damian Erni, a Cisco Insider Advocate

• Meta whistleblower says company has long ignored how it sexually endangers children

• Sandworm hackers incapacitated Ukrainian power grid amid missile strike

• New Kamran Spyware Targets Urdu-Speaking Users in Pakistan

• Google Cloud’s Cybersecurity Trends to Watch in 2024 Include Generative AI-Based Attacks

• Worldwide Hacktivists Take Sides Over Gaza, With Little to Show for It

• Mr. Cooper says customer data exposed during cyberattack

• How can You Protect Yourself From the Increasing AI Scams?

• From Boom to Bust: WeWork’s Bankruptcy Filing Sends Shockwaves

• Akamai and Deloitte partner for zero trust and incident response services

• Is Microsoft ChatGPT grappling with DDoS Cyber Attack

• Want To Build Successful Data Products? Start With Ingestion and Integration

• Implementing a Comprehensive ERP System Using SAFe®

• Data Brokers Selling US Military Personnel Info for Cheap

• Modern Cryptographic Methodologies Are Essential for Cybersecurity

• YesWeHack unveils Attack Surface Management product that unifies offensive security testing

• Virtually Patch Vulnerabilities with Microsegmentation and Akamai Hunt

• What are passkeys? Experience the life-changing magic of going passwordless

• There’s Only One Way to Solve the Cybersecurity Skills Gap

• Major ChatGPT Outage Caused by DDoS Attack

• ‘BlazeStealer’ Malware Delivered to Python Developers Looking for Obfuscation Tools

• GitLab updates Duo to enhance security and efficiency throughout SDLC

• MOVEit hackers leverage new zero-day bug to breach organizations (CVE-2023-47246)

• NetRise Trace utilizes AI to Identify compromised software assets

• How CBA Is Managing Cyber Security in an Age of ‘Infinite Signals’

• emergency communications plan (EC plan)

• SysAid warns customers to patch after ransomware gang caught exploiting new zero-day flaw

• Record number of schoolgirls and cyber specialists to gather amid UK digital skills crisis

• Threat Predictions for 2024: Chained AI and CaaS Operations Give Attackers More “Easy” Buttons Than Ever

• The Intricacies of Constructing an Efficient Security Operations Center

• Smart Car Dread: Mozilla Reports Tested Cars Failed Privacy Regulations, User Data at Risk

• New Malvertising Campaign Uses Fake Windows News Portal to Distribute Malicious Installers

• ChatGPT Down? OpenAI Blames Outages on DDoS Attacks

• This Is How We Do It — Season One Recap

• The Most Common Healthcare Cyberattacks

• Daixin Threat Group Claims Ransomware Attack on 5 Hospitals in Ontario

• Hackers Exploit Atlassian Vulnerabilities for Cerber Ransomware Attacks

• Update now! SysAid vulnerability is actively being exploited by ransomware affiliate

• Nude “before and after” photos stolen from plastic surgeon, posted online, and sent to victims’ family and friends

• ManageEngine Endpoint Central MSP Cloud automates everyday management and security tasks

• Iran-Affiliated Group Targets Israeli Firms Amid Israel-Hamas Conflict

• Keeping Up with Today’s Top Mobile Spyware Threat Trends

• A Hole in the (fire) Wall: Check Point Research reveals technique allowing attackers to bypass Firewall rules designed to stop NTLM credential thefts, and provides protection methods

• Cisco Networking Academy helps veterans with career transition programs

• Unlocking New Opportunities: Cisco Capital’s Next Wave of Partner Innovations

• Introducing Cisco Cloud Protection – Complete Protection, from Ground to Cloud

• Finding Support as a Navy Reservist at Cisco: My Bridge To Possible

• CISA adds SLP flaw to its Known Exploited Vulnerabilities catalog

• Three Reasons Device Makers Should Prepare Now for the Cyber Resilience Act

• Novel GootLoader Malware Strain Bypasses Detection and Spreads Quickly

• Ivanti and Securin join forces to protect customers against cyber threats

• What is NIS2, and how can you best prepare for the new cybersecurity requirements in the EU?

• Spammers abuse Google Forms’ quiz to deliver scams

• Microsoft Authenticator Restricts Suspicious MFA Notifications

• Chinese APT Posing as Cloud Services to Spy on Cambodian Government

• MOVEit cybercriminals unearth fresh zero-day to exploit on-prem SysAid hosts

• Japan Aviation Electronics Targeted in Ransomware Attack

• Risk Ledger Raises £6.25 Million for Supply Chain Security Solution

• 94% Deepfake Adult Content Targets Celebs

• Cryptocurrency Engineers Targeted by New macOS Malware ‘KandyKorn’

• Insights from Microsoft Security Copilot early adopters

• Quishing Campaigns Spike 50% in September

• Online Retail Hack

• Arlo SPF and DKIM configuration: Step By Step Guideline

• NetSuite SPF and DKIM configuration: Step By Step Guideline

• Centercode SPF and DKIM configuration: Step By Step Guideline

• SnapAttack extends collaboration with Mandiant to optimize threat detection for organizations

• Open-source vulnerability disclosure: Exploitable weak spots

• Tidal Cyber raises $5 million to accelerate the growth of its platform

• Secure messaging app Signal moves a step closer to launching usernames

• MuddyC2Go: New C2 Framework Iranian Hackers Using Against Israel

• When Email Security Meets SaaS Security: Uncovering Risky Auto-Forwarding Rules

• The largest Russian bank Sberbank hit by a massive DDoS attack

• Dallas County Departments Hit by the Play Gang

• Group-IB Uncovered Farnetwork’s Ransomware-as-a-Service Business Model

• Orange Business partners with VMware to improve employee productivity

• OpenAI blames DDoS attack for ongoing ChatGPT outage

• SysAid Zero-Day Vulnerability Exploited by Ransomware Group

• CISA Says SLP Vulnerability Allowing Amplified DoS Attacks Exploited in the Wild

• OpenAI Reveals ChatGPT Is Being DDoS-ed

• Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes

• BIG-IP Vulnerability Alert: Remote Code Execution Risk

• Unpacking the Latest Okta Breach, What All You Need to Know

• UK Shoppers Lost Nearly £11m to Fraud Last Festive Season

• Threat Actors Leverage File-Sharing Service and Reverse Proxies for Credential Harvesting

• Sandworm Cyberattackers Down Ukrainian Power Grid During Missile Strikes

• Sandworm Hackers Caused Another Blackout in Ukraine—During a Missile Strike

• Russia’s Sandworm – not just missile strikes – to blame for Ukrainian power blackouts

• Modern Asian APT groups’ tactics, techniques and procedures (TTPs)

• HIPAA Compliance Checklist for Enhanced Data Security

• Russian APT Sandworm Disrupted Power in Ukraine Using Novel OT Techniques

• Police Use of Face Recognition Is Sweeping the UK

• Ransomware Actors Exploiting Legitimate System Tools to Gain Access – FBI

• What to do with a cloud intrusion toolkit in 2023? Slap a chat assistant on it, duh

• CISA Alerts: High-Severity SLP Vulnerability Now Under Active Exploitation

• Expected OpenSSL 3.2 Release Date

• Security in the impending age of quantum computers

• How can a CEO or a CTO lose their jobs on ransomware attacks

• Android Security Updates: 2023 – 37 Vulnerabilities Patched Including RCE, DOS

• Unpacking the challenges of anti-money laundering obligations

• Product showcase: Red Piranha’s security first, single vendor SASE, collaboration with Intel

• Most cybersecurity investments aren’t used to their full advantage

• Tech leaders struggle to keep up with AI advances

• Unbreakable Continuity: Business Resilience in the Face of Cyber Threats

• Malvertiser copies PC news site to deliver infostealer

• Know the Five Signs of an Advanced Persistent Threat Attack

• Intern to DevNet Professional Certification: My Personal Journey

• Best Practices for Managing & Maintaining SBOMs

• UK’s online safety regulator puts out draft guidance on illegal content, saying child safety is priority

• Sumo Logic discloses security breach and recommends customers rotate credentials

• Evasive Jupyter Infostealer Campaign Showcases Dangerous Variant

• DEF CON 31 – Nicolas Minvielle’s, Xavier Facelina’s ‘What Can We Learn About Hacking In SciFi’

• Southwestern Ontario hospitals over a month away from restoring full service as IT network rebuilt

• IT Security News Daily Summary 2023-11-08

• Ransomware Mastermind Uncovered After Oversharing on Dark Web

• Unfiltered Takeaways from API World 2023 | Impart Security

• EDR vs MDR vs XDR

• Yes, GitHub’s Copilot Can Leak (Real) Secrets

• FBI: Ransomware actors hacking casinos via third parties

• Sumo Logic urges customers to reset API keys following security breach

• Introducing Advanced Device Control: Shielding businesses from USB threats

• How To Implement OAuth User Authentication in Next.js

• Platforms Must Stop Unjustified Takedowns of Posts By and About Palestinians

• Speaking Freely: David Kaye

• Key Announcements from Cisco Partner Summit 2023

• FBI: Ransomware actors abuse third parties and legitimate system tools for initial access

• Microsoft, Meta detail plans to fight election disinformation in 2024

• Microsoft Azure Exploited to Create Undetectable Cryptominer

• Vanta report: AI-powered trust management will help close security compliance gaps

• Protecto Joins Cadre of Startups in AI Data Protection Space

• What is a risk control matrix?

• Oracle open-sources Jipher for FIPS-compliant SSL

• Atlassian Confluence vulnerability under widespread attack

• MGM and Caesars Attacks Highlight Social Engineering Risks

• The GOP Presidential Debate Is Livestreaming on Rumble, Home to White Nationalist Nick Fuentes

• Introducing Security Advisor Site Scores for OneView: Easy assessment of client security for MSPs

• Cradlepoint’s mantra: Connect and protect

• Implementing Zero Trust: 5 Key Considerations

• threat detection and response (TDR)

• Greater Together: Cisco Partner Summit 2023 Global Award Winners

• Build Your Cybersecurity Career Path with Learn One

• DHS Launches New Critical Infrastructure Security and Resilience Campaign

• GitHub Enhances Security Capabilities With AI

• How to Create a Comprehensive Investigative Research Process

• Commvault Cloud provides users with AI-driven threat prediction

• Tutorial for Building an Ethereum DApp With Integrated Web3 Monitoring

• New SecuriDropper Malware Bypasses Android 13 Restrictions, Disguised as Legitimate Applications

• Is it time to virtualize your factory floor?

• Phosphorus and Check Point integrate to provide xIoT visibility and protection

• Predator AI ChatGPT Integration Poses Risk to Cloud Services

• Microsoft Warns of Election Threats in 2024

• CISA Adds One Known Exploited Vulnerability to Catalog

• Qualys Unveils Risk Management Platform

• Critical Flaw in Atlassian’s Confluence Server Allows Hackers to Run Commands

• Why recovering quickly from a cyber attack should be infosec pros’ prime goal

• Predator AI ChatGPT Integration Poses Risks to Cloud Services

• Bitwarden rolls out passkeys management to all users, including free accounts

• Keeper Security Announces Integration with ServiceNow

• Offense Intended: How Adversarial Emulation Went From State Secret To Board Bullet Point

• IBM: New Gootloader Variant Moves Laterally and Is Harder to Detect

• KandyKorn: Apple MacOS Malware Targets Blockchain Engineers of Crypto Exchange Platform

• Increasing Data Security in the Digital Era

• British Library Hit by Cyber Incident, Disrupting Services

• Palo Alto Networks Strata Cloud Manager proactively prevents network disruptions

• Ten 10 ways Senior Citizens and Disabled can stay cyber safe and secure online

• Atlassian Bug now a Perfect 10: Riot of Ransomware Raids

• Entrust and NEDAP partner for credential and ID program interoperability

• FBI Warns of Emerging Ransomware Initial Access Techniques

• 6 Strategies to Combat Advanced Persistent Threats

• Data security tools make data loss prevention more efficient

• WhatsApp releases new security features to protect users’ IP addresses

• CISOs Beware: SEC’s SolarWinds Action Shows They’re Scapegoating Us

• Evolving the App Defense Alliance

• Sumo Logic Urges Users to Change Credentials Due to Security Breach

• Symmetrium releases IM and SMS data protection solution

• Microsoft Authenticator suppresses suspicious MFA notifications

• Cybellum partners with Hitachi Solutions to provide PLM security solutions in Japan

• Kasten K10 V6.5 improves ransomware and data protection for Kubernetes environments

• WhatsApp Introduces New Privacy Feature to Protect IP Address in Calls

• Researchers Uncover Undetectable Crypto Mining Technique on Azure Automation

• October 2023’s Most Wanted Malware: NJRat Jumps to Second Place while AgentTesla Spreads through new File Sharing Mal-Spam Campaign

• Google-led App Defense Alliance joins Linux Foundation, with Meta and Microsoft joining too

• Five Canadian Hospitals impacted by a ransomware attack on TransForm provider

• How to Safeguard EV Charging Stations From Cyberattacks

• Elastic simplifies data investigations with piped query language, ES|QL

• Lazarus-Linked BlueNoroff APT Targeting macOS with ObjCShellz Malware

• Atlassian cranks up the threat meter to max for Confluence authorization flaw

• Greater Together! Creating more value at Partner Summit 2023

• Online Retailers: Five Threats Targeting Your Business This Holiday Shopping Season

• Palo Alto Networks Adds Cloud Management Service

• Unlocking the Shadows: New Research Reveals AI’s Hidden Role in Unofficial Financial Markets

• Socks5Systemz Proxy Service Impacts 10,000 Systems Globally

• Cyber Security Today, Nov. 8, 2023 – Personal data on US military members is easily bought from data brokers

• Protecto raises $4 million to empower enterprises with trusted AI

• Elevating Cybersecurity Prevention: Check Point Software’s Innovative MSSP Program Redefines Security Collaboration

• Leading a new era with the Cisco Partner Program

• Introducing Cisco Breach Protection, Delivering Complete Detection and Response of MITRE ATT&CK TTP’s

• Internet-of-Things (IoT) Security Best Practices

• ThreatX enhances API and app protection for containerized environments

• Beware, Developers: BlazeStealer Malware Discovered in Python Packages on PyPI

• The Top 6 Key Features of a Modern NDR Platform

• Testing the Limits of Firewall Performance and Flexibility

• Outmatch Adversaries with PAN-OS 11.1 Cosmos & Strata Cloud Manager

• Quantum Security is National Security

• Using ChatGPT to cheat on assignments? New tool detects AI-generated text with amazing accuracy

• Digital security sessions at Microsoft Ignite to prepare you for the era of AI

• Decoupling for Security

• Druva introduces Azure VM backup and recovery capabilities

• SUSE boosts cloud native portfolio to enhance customer productivity

• QNAP warns about critical vulnerabilities in NAS systems

• Monero Project admits thieves stole 6-figure sum from a wallet in mystery breach

• Marina Bay Sands Discloses Data Breach Impacting 665k Customers

• FBI Highlights Emerging Initial Access Methods Used by Ransomware Groups

• Sumo Logic discloses potential breach via compromised AWS credential

• EU Rules for Digital Identities and Trust Services Face Backlash

• BlueNoroff APT Targets macOS with new RustBucket Malware Variant

• The rise of .ai: cyber criminals (and Anguilla) look to profit

• Get 3 Years of Rock-Solid Protection With Surfshark VPN for $67.20 by 11/9

• LastPass and Acronis join forces to strenghten password protection for MSPs

• Guide: How vCISOs, MSPs and MSSPs Can Keep their Customers Safe from Gen AI Risks

• BlueNoroff Deploying New RustBucket Malware Variant to Target macOS- Jamf Threat Labs.

• Key Highlights from the 2023 UK Cyber Crime Landscape

• Some Financial Institutions Must Report Breaches in 30 Days

• This Is the Ops Manual for the Most Tech-Savvy Animal Liberation Group in the US

• Dropper Service Bypassing Android Security Restrictions to Install Malware

• US Urges Critical Infrastructure Firms to Get “Shields Ready”

• Can a Brute Force Attack Be Reversed?

• Three-Quarters of Retail Ransomware Attacks End in Encryption

• Royal Mail jeopardizes users with open redirect flaw

• Preventing data theft with ADX technology

• Firefox and Chrome Updates Patch High-Severity Vulnerabilities

• Avoiding Common Linux Configuration Mistakes that Lead to Security Vulnerabilities

• New TuxCare Partner Program Arms System Integrators with Modernized Linux Security Offerings

• NextGen’s Vulnerability: Protecting Healthcare Data

• Marina Bay Sands breach exposed data of 665,000 customers

• Webinar: Kickstarting Your SaaS Security Strategy & Program

• Threat Actor Farnetwork Linked to Five Ransomware Schemes

• North Korea-linked APT BlueNoroff used new macOS malware ObjCShellz

• Bad eIDAS: Europe ready to intercept, spy on your encrypted HTTPS connections

• Experts Expose Farnetwork’s Ransomware-as-a-Service Business Model

• Fresh Optus Australia server disruption not caused by a Cyber Attack

• The 3 key stages of ransomware attacks and useful indicators of compromise

• eBPF Kubernetes Security Tool Tetragon Improves Performance and Stability

• Iranian APT Hackers Attacking Education & Tech Sectors to Steal Sensitive Data

• Aqua Trivy open-source security scanner now finds Kubernetes security risks

• AI-assisted coding and its impact on developers

• Chinese APT Targeting Cambodian Government

• Companies have good reasons to be concerned about generative AI

• QNAP OS Command Injection Vulnerability Let Attackers Execute Malicious Commands

• LinkedIn Scraped and Faked Data (2023) – 19,788,753 breached accounts

• Uphold Linux systems’ performance and availability in Azure

• News alert: AppMap launches ‘Runtime Code Review’ — GitHub integration innovation

• Intellectual Property Protection: Safeguarding Your Digital Assets

• Software Complexity Bedevils Mainframe Security

• Hacker Leaks 35 Million Scraped LinkedIn User Records

• PayPal’s CISO on how generative AI can improve cybersecurity

Generated on 2023-11-09 23:56:00.964196