IT Security News Daily Summary 2023-11-10

• Intel Faces ‘Downfall’ Bug Lawsuit, Seeking $10K per Plaintiff

• Senate Leaders Plan to Prolong NSA Surveillance Using a Must-Pass Bill

• Maine government says data breach affects 1.3 million people

• Friday Squid Blogging: The History and Morality of US Squid Consumption

• IBM to Bring AI to Cloud-Native SIEM Platform

• What Is Log Monitoring? Benefits & Security Use Cases

• The NSA Seems Pretty Stressed About the Threat of Chinese Hackers in US Critical Infrastructure

• Senate Leaders Are Trying to Extend a Controversial NSA Surveillance Program

• Experts discuss demonstrating the value of digital ID, acknowledging concerns, barriers to adoption, and more at EXCITE

• Toronto Public Library says ‘sensitive’ information may have been copied

• Microsoft and SysAid Find Clop Malware Vulnerability

• McLaren Health Care revealed that a data breach impacted 2.2 million people

• Impatient LockBit says it’s leaked 50GB of stolen Boeing files after ransom fails to land

• Cyber Security Today, Week in Review for the week ending Friday, Nov. 10, 2023

• What Is DNS Security? Everything You Need to Know

• ‘CitrixBleed’ Linked to Ransomware Hit on China’s State-Owned Bank

• State of Maine Becomes Latest MOVEit Victim to Surface

• OpenAI: DDoS Attack the Cause of ChatGPT Outages

• Sapphire Sleet Hackers Attacking LinkedIn Users Based on Their Expertise

• Best Mac Password Managers for 2023

• ‘Shields Ready’ Critical Infrastructure Initiative Addresses Inevitable Cyberattacks

• Poloniex crypto-exchange offers 5% cut to thieves if they return that $120M they nicked

• Is a VPN Worth It? Benefits and Choosing the Best VPN

• How to Use a VPN: 4 Easy Steps to Get Started

• Leaky DICOM Medical Standard Exposes Millions of Patient Records

• ChatGPT: OpenAI Attributes Regular Outages to DDoS Attacks

• ‘Shields Ready’ Critical Infrastructure Initiative Addresses Inevitable Cyberattack

• Spring OAuth Server: Default Configuration

• Roll-up

• World’s Largest Bank ICBC Discloses Crippling Ransomware Attack

• Advancing IoT Security: IoT Security Analytics Tools

• AWS HIPAA Compliance Best Practices You Should Be Aware Of

• World’s Biggest Bank Hacked: ICBC Walks Trades on USBs

• Microsoft: Iran’s Cyberattacks on Israel Exaggerated & Fabricated

• In Other News: EU Government Surveillance, Rewards for Iranian Hackers, Evolution of Chinese Spying

• Cavelo Raises CA$5 Million for Attack Surface Management Platform

• OpenAI Says ChatGPT Outage Caused By DDoS Attack

• Silicon UK Pulse: Your Tech News Update: Episode 26

• Celsius Network Approved To Exit Bankruptcy

• Newport Wafer Fab Sold To US Buyer For $177m

• Apple Co-Founder Steve Wozniak Confirms ‘Minor Stroke’

• GitHub Universe: Open Source Trends Report and New AI Security Products

• S.T.O.P.: Putting a Check on Unchecked Local N.Y. Government Surveillance

• Strangely enough, no one wants to buy a ransomware group that has cops’ attention

• It’s Never Too Soon to Begin Thinking About Your 2024 Cybersecurity Journey

• Cyber Attack news headlines trending on Google

• Navigating Tech Risks in Modern M&A Waters

• After ChatGPT, Anonymous Sudan took down the Cloudflare website

• Security review for Microsoft Edge version 119

• France, UK Seek Greater Regulation of Commercial Spyware

• Intel Sued Over ‘Downfall’ CPU Vulnerability

• What is the Diamond Model of Intrusion Analysis – And How to Use the Framework

• How the AI era has fundamentally altered the cyberthreat landscape

• SysAid IT Service Software 0-day Exploited to Deploy Cl0p Ransomware

• Sapphire Sleet Hackers Attacking Linkedin Users Based on their Expertise

• YouTube shows ads for ad blocker, financial scams

• Cybersecurity Workforce Facing Critical Shortfall, AI Adoption Could Help

• SentinelOne integrates with Snyk for end-to-end app security

• Debunking the Myth of “Anonymous” Data

• Marna Bay Sands: Data of 665,000 Customers Hacked by Unknown Third Party

• Japan Aviation Electronics Hit by Cyberattack: Servers Accessed in Security Breach

• Genetic Data Security Strengthened with Two-Factor Authentication

• Google to Label Android VPNs Clearing a Security Audit

• Check Point Honors U.S. Active Military and Veterans with Launch of Employee Resource Group (ERG)

• Data Posture Management in Action: Meet the New Check Point CloudGuard

• Deepfake Nudes – Can I Sue?

• Holiday shopping cyber security safety tips 2023

• IoT Security: Strategies, Challenges, and Essential Tools

• No Patches, No Security

• Morgan Stanley Cybersecurity Director: Teams Need to Focus on Four Rs

• Cyber Security Today, Nov. 10, 2023 – Patch SysAid software fast, how Ukraine’s power system was crippled by Russia and more

• D2iQ DKP Insights identifies security issues in Kubernetes clusters

• Russian Hackers Sandworm Cause Power Outage in Ukraine Amidst Missile Strikes

• The Privacy Disaster of Modern Smart Cars

• Ransomware Attack on China’s Biggest Bank Disrupts Treasury Market Trades, Reports Say

• 1.3 Million Maine Residents Impacted by MOVEit Hack

• US Government Issues Guidance on SBOM Consumption

• Chinese multinational bank hit by ransomware

• Picus Security unveils new capabilities to give security teams full context of their attack surface

• Unlucky Kamran: Android malware spying on Urdu-speaking residents of Gilgit-Baltistan

• Industrial and Commercial Bank of China (ICBC) suffered a ransomware attack

• Outpost24 CORE advancement delivers complete visibility of technology assets and threat exposure

• Russian Hackers Hijacked Power Station Circuit Breakers Using LotL Technique

• Moving To Capability-Based Security With Flow: A Critical Evolution in Blockchain Security

• CherryBlos, the malware that steals cryptocurrency via your photos – what you need to know

• MPs Dangerously Uninformed About Facial Recognition – Report

• Cerber Ransomware Exploits Atlassian Confluence Vulnerability CVE-2023-22518

• BlueNoroff Hackers Attacking Apple Users with New macOS Malware

• Balancing functionality and privacy concerns in AI-based Endpoint Security solutions

• Hackers Actively Exploiting Big-IP and Citrix Vulnerabilities

• Electric Ireland Confirms Compromise of 8,000 Customers’ Personal and Financial Data

• MOVEit Gang Targets SysAid Customers With Zero-Day Attacks

• Buffer Overflow Flaws in Trusted Platform Modules Allow Malicious Commands

• SysAid zero-day exploited by Clop ransomware group

• Alert: ‘Effluence’ Backdoor Persists Despite Patching Atlassian Confluence Servers

• The New 80/20 Rule for SecOps: Customize Where it Matters, Automate the Rest

• ICBC and Allen & Overy Hit By Ransomware

• NTA SMTP Functionality Usage

• The 248th Marine Corps Birthday Message

• The New APT Group DarkCasino and the Global Surge in WinRAR 0-Day Exploits

• Buyer beware: Phishing sites & Fake Shops still popular among criminals

• Iran-Linked Imperial Kitten Cyber Group Targeting Middle East’s Tech Sectors

• ICBC hit by ransomware impacting global trades

• This New Tool Aims to Keep Terrorism Content Off the Internet

• Ducktail fashion week

• Gartner® Market Guide for DLP | Why Context is King

• New Gootloader Malware Abuses RDP to Spread Rapidly

• WhatsApp New Privacy Feature Let Users Hide Location During Calls

• Hackers Exploiting Confluence Flaw to Deploy Ransomware

• New infosec products of the week: November 10, 2023

• November 2023 Patch Tuesday forecast: Year 21 begins

• Stealthy Kamran Spyware Targeting Urdu-speaking Users in Gilgit-Baltistan

• Sandworm Disrupts Power in Ukraine Using a Novel Attack Against Operational Technology

• Cyber Attack on US Bank forces it to transit data via USB Sticks

• What is a diamond model of Intrusion Analysis

• Data protection demands AI-specific security strategies

• How to withstand the onslaught of cybersecurity threats

• Rethinking cyber risk: The case against spreadsheets

• Organizations lack the skills and headcount to manage Kubernetes

• Chess – 827,620 breached accounts

• Microsoft shares threat intelligence at CYBERWARCON 2023

• Defending from Within: Strategies to Thwart Insider Threats

• It’s Time to Oppose the New San Francisco Policing Ballot Measure

• The Top Five Scariest Public Sector Cybersecurity Trends

• Hacker Leaks 800,000 Scraped Chess.com User Records

• Dolly.com pays ransom, attackers release data anyway

• Forrester predicts A.I. code flaws will enable new attacks next year

• MOVEit Hackers Pivot to SysAid Zero-Day in Ransomware Attacks

• ‘BlazeStealer’ Python Malware Allows Complete Takeover of Developer Machines

• Here’s How Violent Extremists Are Exploiting Generative AI Tools

• IT Security News Daily Summary 2023-11-09

• Verkada unveils privacy updates to its security system and cameras

• What We Can Learn from Major Cloud Cyberattacks

• Treasury Markets Disrupted by ICBC Ransomware Attack

• Maine government says data breach affects 1.3 million residents

• Downfall fallout: Intel knew AVX chips were insecure and did nothing, lawsuit claims

• Omegle Was Forced to Shut Down by a Lawsuit From a Sexual Abuse Survivor

• Lace Tempest exploits SysAid zero-day vulnerability

• DDoS attack leads to significant disruption in ChatGPT services

• DEF CON 31 – Xavier ‘X’ Cadena’s ‘LLMs At The Forefront Pioneering The Future Of Fuzz Testing’

• Cisco and Rockwell strengthen OT/ICS security with visibility for converged plantwide ethernet (CPwE)

• High Traffic + High Vulnerability = an Attractive Target for Criminals: The Dangers of Viewing Clickbait Sites

• SolarWinds says SEC sucks: Watchdog ‘lacks competence’ to regulate cybersecurity

• Ontario privacy commissioner investigating hospital group ransomware attack

• Why you need ZTNA with Desktops-as-a-Service

• Opinion: The Pros and Cons of the UK’s New Digital Regulation Principles

• API Leaks

• When Good Security Awareness Programs Go Wrong

• Russian Sandworm disrupts power in Ukraine with a new OT attack

• Threat Roundup for November 3 to November 10

• A new video series, Google Forms spam and the various gray areas of cyber attacks

• CISA Signs Memorandum of Understanding with the Republic of Korea to Share Cyber Threat Information and Cybersecurity Best Practices

• Hive Ransomware Resurfaces as Hunters International, Bitdefender Claim

• Data Brokers Sell Sensitive Data of US Military and Veterans

• Storage And Backup Cyber Resiliency – CISOs Guide 2024

• Data Privacy and Its Impact on Management

• 35 Million LinkedIn Users’ Information Shared on Hacking Forum

• Abusing Slack for Offensive Operations: Part 2

• US Government Surveillance Reform Act (GSRA), What It Will Change?

• ChatGPT down for you yesterday? OpenAI says DDoS attack was to blame

• The best identity theft protection and credit monitoring services of 2023

• How to Outsmart Malware Attacks That Can Fool Antivirus Protection

• How to Design and Implement Automated Security Workflows

• Australia to investigate Optus outage that impacted millions

• Human Rights Group Says Facebook Should Compensate Victims Of Hate Speech And Violence

• Imperial Kitten APT Claws at Israeli Industry with Multiyear Spy Effort

• Simplified Partner Tools: Cisco’s First-Ever MSP Support for Exceptional Customer Experiences

• Salt Security Named 2023 CISO Choice Award Winner for API Security

• SolarWinds: SEC ‘lacks the competence’ to regulate cybersecurity

• ‘Fraud is a Security Problem’: Bot Management as a Cornerstone of Online Fraud Prevention

• Arista Networks expands zero trust networking architecture

• Zero-Day Alert: Lace Tempest Exploits SysAid IT Support Software Vulnerability

• How to Associate an Apple ID with a Second New or Reset iPhone

• Imperial Kitten APT Claws at Israeli Industry With Multiyear Spy Effort

• Artificial Intelligence vs. Machine Learning

• OT remote access: can you trust your technician’s laptop?

• Judge rules it’s fine for car makers to intercept your text messages

• Tidal Cyber Raises $5 Million for Threat-Informed Defense Platform

• Medical Company Fined $450,000 by New York AG Over Data Breach

• Netskope Next Gen SASE Branch eliminates complicated, inefficient legacy branch infrastructure

• Signature Techniques of Asian APT Groups Revealed

• Eight Ways to Bolster Your Cybersecurity Resources Without Blowing Your Budget

• How to Get Facebook Without Ads—if It’s Available for You

• Johnson Controls Quantum HD Unity

• CISA Releases Four Industrial Control Systems Advisories

• Hitachi Energy eSOMS

• Meet Swisscom’s Damian Erni, a Cisco Insider Advocate

• Meta whistleblower says company has long ignored how it sexually endangers children

• Sandworm hackers incapacitated Ukrainian power grid amid missile strike

• New Kamran Spyware Targets Urdu-Speaking Users in Pakistan

• Google Cloud’s Cybersecurity Trends to Watch in 2024 Include Generative AI-Based Attacks

• Worldwide Hacktivists Take Sides Over Gaza, With Little to Show for It

• Mr. Cooper says customer data exposed during cyberattack

• How can You Protect Yourself From the Increasing AI Scams?

• From Boom to Bust: WeWork’s Bankruptcy Filing Sends Shockwaves

• Akamai and Deloitte partner for zero trust and incident response services

• Is Microsoft ChatGPT grappling with DDoS Cyber Attack

• Want To Build Successful Data Products? Start With Ingestion and Integration

• Implementing a Comprehensive ERP System Using SAFe®

• Data Brokers Selling US Military Personnel Info for Cheap

• Modern Cryptographic Methodologies Are Essential for Cybersecurity

• YesWeHack unveils Attack Surface Management product that unifies offensive security testing

• Virtually Patch Vulnerabilities with Microsegmentation and Akamai Hunt

• What are passkeys? Experience the life-changing magic of going passwordless

• There’s Only One Way to Solve the Cybersecurity Skills Gap

• Major ChatGPT Outage Caused by DDoS Attack

• ‘BlazeStealer’ Malware Delivered to Python Developers Looking for Obfuscation Tools

• GitLab updates Duo to enhance security and efficiency throughout SDLC

• MOVEit hackers leverage new zero-day bug to breach organizations (CVE-2023-47246)

• NetRise Trace utilizes AI to Identify compromised software assets

• How CBA Is Managing Cyber Security in an Age of ‘Infinite Signals’

• emergency communications plan (EC plan)

• SysAid warns customers to patch after ransomware gang caught exploiting new zero-day flaw

• Record number of schoolgirls and cyber specialists to gather amid UK digital skills crisis

• Threat Predictions for 2024: Chained AI and CaaS Operations Give Attackers More “Easy” Buttons Than Ever

• The Intricacies of Constructing an Efficient Security Operations Center

• Smart Car Dread: Mozilla Reports Tested Cars Failed Privacy Regulations, User Data at Risk

• New Malvertising Campaign Uses Fake Windows News Portal to Distribute Malicious Installers

• ChatGPT Down? OpenAI Blames Outages on DDoS Attacks

• This Is How We Do It — Season One Recap

• The Most Common Healthcare Cyberattacks

• Daixin Threat Group Claims Ransomware Attack on 5 Hospitals in Ontario

• Hackers Exploit Atlassian Vulnerabilities for Cerber Ransomware Attacks

• Update now! SysAid vulnerability is actively being exploited by ransomware affiliate

• Nude “before and after” photos stolen from plastic surgeon, posted online, and sent to victims’ family and friends

• ManageEngine Endpoint Central MSP Cloud automates everyday management and security tasks

• Iran-Affiliated Group Targets Israeli Firms Amid Israel-Hamas Conflict

• Keeping Up with Today’s Top Mobile Spyware Threat Trends

• A Hole in the (fire) Wall: Check Point Research reveals technique allowing attackers to bypass Firewall rules designed to stop NTLM credential thefts, and provides protection methods

• Cisco Networking Academy helps veterans with career transition programs

• Unlocking New Opportunities: Cisco Capital’s Next Wave of Partner Innovations

• Introducing Cisco Cloud Protection – Complete Protection, from Ground to Cloud

• Finding Support as a Navy Reservist at Cisco: My Bridge To Possible

• CISA adds SLP flaw to its Known Exploited Vulnerabilities catalog

• Three Reasons Device Makers Should Prepare Now for the Cyber Resilience Act

• Novel GootLoader Malware Strain Bypasses Detection and Spreads Quickly

• Ivanti and Securin join forces to protect customers against cyber threats

• What is NIS2, and how can you best prepare for the new cybersecurity requirements in the EU?

• Spammers abuse Google Forms’ quiz to deliver scams

• Microsoft Authenticator Restricts Suspicious MFA Notifications

• Chinese APT Posing as Cloud Services to Spy on Cambodian Government

• MOVEit cybercriminals unearth fresh zero-day to exploit on-prem SysAid hosts

• Japan Aviation Electronics Targeted in Ransomware Attack

• Risk Ledger Raises £6.25 Million for Supply Chain Security Solution

• 94% Deepfake Adult Content Targets Celebs

• Cryptocurrency Engineers Targeted by New macOS Malware ‘KandyKorn’

• Insights from Microsoft Security Copilot early adopters

• Quishing Campaigns Spike 50% in September

• Online Retail Hack

• Arlo SPF and DKIM configuration: Step By Step Guideline

• NetSuite SPF and DKIM configuration: Step By Step Guideline

• Centercode SPF and DKIM configuration: Step By Step Guideline

• SnapAttack extends collaboration with Mandiant to optimize threat detection for organizations

• Open-source vulnerability disclosure: Exploitable weak spots

• Tidal Cyber raises $5 million to accelerate the growth of its platform

• Secure messaging app Signal moves a step closer to launching usernames

• MuddyC2Go: New C2 Framework Iranian Hackers Using Against Israel

• When Email Security Meets SaaS Security: Uncovering Risky Auto-Forwarding Rules

• The largest Russian bank Sberbank hit by a massive DDoS attack

• Dallas County Departments Hit by the Play Gang

• Group-IB Uncovered Farnetwork’s Ransomware-as-a-Service Business Model

• Orange Business partners with VMware to improve employee productivity

• OpenAI blames DDoS attack for ongoing ChatGPT outage

• SysAid Zero-Day Vulnerability Exploited by Ransomware Group

• CISA Says SLP Vulnerability Allowing Amplified DoS Attacks Exploited in the Wild

• OpenAI Reveals ChatGPT Is Being DDoS-ed

• Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes

• BIG-IP Vulnerability Alert: Remote Code Execution Risk

• Unpacking the Latest Okta Breach, What All You Need to Know

• UK Shoppers Lost Nearly £11m to Fraud Last Festive Season

• Threat Actors Leverage File-Sharing Service and Reverse Proxies for Credential Harvesting

• Sandworm Cyberattackers Down Ukrainian Power Grid During Missile Strikes

• Sandworm Hackers Caused Another Blackout in Ukraine—During a Missile Strike

• Russia’s Sandworm – not just missile strikes – to blame for Ukrainian power blackouts

• Modern Asian APT groups’ tactics, techniques and procedures (TTPs)

• HIPAA Compliance Checklist for Enhanced Data Security

• Russian APT Sandworm Disrupted Power in Ukraine Using Novel OT Techniques

• Police Use of Face Recognition Is Sweeping the UK

• Ransomware Actors Exploiting Legitimate System Tools to Gain Access – FBI

• What to do with a cloud intrusion toolkit in 2023? Slap a chat assistant on it, duh

• CISA Alerts: High-Severity SLP Vulnerability Now Under Active Exploitation

• Expected OpenSSL 3.2 Release Date

• Security in the impending age of quantum computers

• How can a CEO or a CTO lose their jobs on ransomware attacks

• Android Security Updates: 2023 – 37 Vulnerabilities Patched Including RCE, DOS

• Unpacking the challenges of anti-money laundering obligations

• Product showcase: Red Piranha’s security first, single vendor SASE, collaboration with Intel

• Most cybersecurity investments aren’t used to their full advantage

• Tech leaders struggle to keep up with AI advances

• Unbreakable Continuity: Business Resilience in the Face of Cyber Threats

• Malvertiser copies PC news site to deliver infostealer

• Know the Five Signs of an Advanced Persistent Threat Attack

• Intern to DevNet Professional Certification: My Personal Journey

• Best Practices for Managing & Maintaining SBOMs

• UK’s online safety regulator puts out draft guidance on illegal content, saying child safety is priority

Generated on 2023-11-10 23:55:52.713157