IT Security News Daily Summary 2023-11-21

• Citrix Bleed Bug Inflicts Mounting Wounds, CISA Warns

• Exploit for Critical Windows Defender Bypass Goes Public

• AutoZone Files MOVEit Data Breach Notice With State of Maine

• DOJ Charges Binance With Vast Money-Laundering Scheme and Sanctions Violations

• Why less is more: 10 steps to secure customer data

• DPRK Hackers Masquerade as Tech Recruiters, Job Seekers

• Join CX for Cisco Live Demos

• Digital Twins Will Revolutionize Modern Logistics. Here’s How

• The Role of the CISO in Digital Transformation

• DOJ Charges Binance With Vast Money Laundering Scheme and Sanctions Violations

• Accelerating Security Risk Management

• Randall Munroe’s XKCD ‘Materials Scientists’

• DEF CON 31 – Jonathan Bar Or’s, Michael Pearse’s, Anurag Bohra’s ‘Getting A Migraine – Uncovering A Unique SIP Bypass On macOS’

• YouTube is slowing video loads on Firefox. Here’s how to fix that

• Inside Job: Cyber Exec Admits to Hospital Hacks

• Meeting the needs of the application generation

• Tor Project removed several relays associated with a suspicious cryptocurrency scheme

• Outdated Wallets Threatening Billions in Crypto Assets

• DevOps Service Providers Facilitating ISO 27001 and GDPR Compliance for Organizations

• The Eyes on the Board Act Is Yet Another Misguided Attempt to Limit Social Media for Teens

• Evil Twin Attack: Definition + How to Prevent It

• Microsoft Azure Confidential VMs Will Roll Out This December

• possession factor

• Introducing the Microsoft Defender Bounty Program

• Password Manager Cheat Sheet: What Is a Password Manager?

• Atomic Stealer distributed to Mac users via fake browser updates

• DEF CON 31 – Tal Skverer’s ‘GhostToken Exploiting Google Cloud Platform To Create Unremovable Trojan Apps’

• Several K-12 Schools and Colleges Suffers Outage Due to Cyberattack

• SOLUTION REVIEW: Enzoic for Active Directory

• Bringing passwords to the pie table for unconventional holiday discussions

• Hands on with Google’s new Titan Security Keys – and why they still have their place

• 6 Best Password Recovery Software for 2023

• Kinsing Cyberattackers Target Apache ActiveMQ Flaw to Mine Crypto

• Major Saudi University to Offer AI, Cybersecurity Studies

• Cisco partners drive innovation through Purpose

• Powering Observability at Scale with Telemetry

• Sumo Logic wrestles with security breach, pins down customer data

• Cyber Safety on Sale! How to Navigate Black Friday & Cyber Monday Securely

• Fuji Electric Tellus Lite V-Simulator

• #StopRansomware: LockBit 3.0 Ransomware Affiliates Exploit CVE 2023-4966 Citrix Bleed Vulnerability

• WAGO PFC200 Series

• Cato Networks Named SASE Leader, Again

• The Dark Web: A Hidden Menace for Businesses

• Coffee Briefing Nov. 21 – Microsoft Ignite updates; Canadians want more AI training; SalvageData expands to Canada; and more

• Konni Campaign Deploys Advanced RAT With UAC Bypass Capabilities

• Latest Buzz in Cybersecurity: Trending Headlines on Google

• British Library Says Staff Data Stolen In Ransomware Attack

• Broadcom Expects To Complete $61bn VMware Deal On Weds

• Konni RAT Exploiting Word Docs to Steal Data from Windows

• New Phishing Attack Hijacks Email Thread to Inject Malicious URL

• 3 skills could make or break your cybersecurity career in the generative AI era

• SEC’s 4-Day Breach Disclosure Rule Hits Opposition In Congress

• LummaC2 4.0 Infostealer Uses Trigonometry To Avoid Sandboxes

• Tor Network Removes Risky Relays Associated With Crypto Scheme

• Canadian Military, Police Impacted By Data Breach

• Why Botnets Persist: How to Stop Direct-Path DDoS Attacks

• Vulnerability Summary for the Week of November 13, 2023

• CISA Offering Free Cybersecurity Services to Non-Federal Critical Infrastructure Entities

• LLM Security Startup Lasso Emerges From Stealth Mode

• DarkGate and PikaBot Activity Surge in the Wake of QakBot Takedown

• Cyberbullying, a growing problem in Europe

• AI Helps Uncover Russian State-Sponsored Disinformation in Hungary

• Maximize Cybersecurity Returns: 5 Key Steps to Enhancing ROI

• MAR-10478915-1.v1 Citrix Bleed

• Lookout Alerts U.S. Employees and Businesses of Significant Phishing Threat This Week

• Hacking Employers and Seeking Employment: Two Job-Related Campaigns Bear Hallmarks of North Korean Threat Actors

• Nadella Calls For ‘Change’ At OpenAI Following Altman Ouster

• Former Infosec COO Pleads Guilty for Hacking Hospitals

• EU cybersecurity exercise: foster cooperation, secure free and fair EU elections

• Detecting Obfuscated Command-lines with a Large Language Model

• ‘Tis the Season for Cybercrime: What to Watch for and How to Protect Yourself

• MailCamp SPF and DKIM configuration: Step By Step Guideline

• MailerLite SPF and DKIM Configuration: Step By Step

• Overcoming Password Fatigue With Single Sign-On Solutions

• DarkGate and PikaBot Phishing Campaign is Using Qakbot Tactics

• FBI Reveals Scattered Spider’s Alliance with Notorious Ransomware Outfit

• Truepill Data Breach: Navigating Healthcare’s Digital Security Crisis

• Privacy Act Compliance Staggered, NASSCOM Seeks Collaboration

• Telstra and Netskope expand partnership to deliver managed SASE globally

• FreeBSD 14.0 released, OpenSSH and OpenSSL updated

• Hackers Abusing WhatsApp Messages to Install Android Malware

• The XBOM vs SBOM debate

• Tor Network Removes Risky Relays Associated With Cryptocurrency Scheme

• Canadian Military, Police Impacted by Data Breach at Moving Companies

• Play Ransomware Goes Commercial – Now Offered as a Service to Cybercriminals

• Black Friday: Significant Security Gaps in E-Commerce Web Apps

• Comparative Study Results on Linux and Windows Ransomware Attacks, Exploring Notable Trends and Surge in Attacks on Linux Systems

• Third-party data breach affecting Canadian government could involve data from 1999

• Rapid7 introduces AI-powered cloud anomaly detection

• Top 5 Best Telegram Client Apps for Android

• New Agent Tesla Malware Variant Using ZPAQ Compression in Email Attacks

• How Cisco Helps Me Balance My Passions and Career Experience

• Sam Altman Ouster Adds Fuel To EU AI Regulation Debate

• Europol Busts Major Online CSAM Racket in Western Balkans

• Email Security Flaw Found in the Wild

• Sumo Logic Completes Investigation Into Recent Security Breach

• Microsoft Paid Out $63 Million Since Launch of First Bug Bounty Program 10 Years Ago

• Insider Q&A: Pentagon AI Chief on Network-Centric Warfare, Generative AI Challenges

• Sumsub Global Database Verification eliminates document-based processes

• Major Exchange OKX Applies For Hong Kong Crypto Licence

• How Can I Manage Certificates From Multiple Public CAs?

• Apache ActiveMQ bug exploited to deliver Kinsing malware

• US DOJ Negotiates With Binance Over $4bn Settlement

• How do cybercriminals steal credit card information?

• Experts warn of a surge in NetSupport RAT attacks against education and government sectors

• The shifting sands of the war against cyber extortion

• How Multi-Stage Phishing Attacks Exploit QRs, CAPTCHAs, and Steganography

• The definitive VirusTotal’s admin guide

• Maintaining a state of readiness to deal with cyber attacks

• KashFlow SPF and DKIM configuration: Step By Step Guideline

• Kreativmedia SPF and DKIM configuration: Step By Step Guideline

• Social engineering attacks lure Indian users to install Android banking trojans

• 8 free AI and GenAI courses from AWS

• Lasso Security emerges from stealth and raises $6 million

• Kinsing Hackers Exploit Apache ActiveMQ Vulnerability to Deploy Linux Rootkits

• Cybersecurity Executive Pleads Guilty to Hacking Hospitals

• Hackers Exploit Asset Management Program to Deploy Malware

• Crimeware and financial cyberthreats in 2024

• US Cybersecurity Lab Suffers Major Data Breach

• Ukraine Sacks Two Senior Cyber Officials

• FCC Implemented New Rules to Stop SIM Swapping Attacks

• SMB Protocol Explained: Understanding its Security Risks and Best Practices

• AI-Enabled Information Manipulation Poses Threat to EU Elections: ENISA Report

• In What ways do CVSS v3 and CVSS v4 differ?

• Musk’s X Sues Media Matters Over Nazism Report

• FCC Implemented new Rules to Stop SIM swapping Attacks

• The Top 5 Reasons to Use an API Management Platform

• Malicious Apps Disguised as Banks and Government Agencies Targeting Indian Android Users

• Why XDR Is A Must In Securing Cloud And Hybrid Environments

• Mustang Panda Hackers Targets Philippines Government Amid South China Sea Tensions

• PolarDNS: Open-source DNS server tailored for security evaluations

• Rhysida Ransomware demands 20 BTC from British Library

• Segmentation proves crucial for fast response to security incidents

• The hidden obstacles to integrating AI into your business

• Organizations’ serious commitment to software risk management pays off

• Blockchain Breakthroughs: Transforming Industries

• Kaspersky’s Advanced Persistent Threats Predictions for 2024

• What Healthcare Cybersecurity Leaders Should Know About the FDA’s Section 524B Guidelines

• Scattered Spider ransomware gang falls under government agency scrutiny

• CyberTalk Series: MSP and MSSP Cybersecurity Compliance Challenges in 2023 and Goals for 2024 with Kimberly Simon

• OMGPOP – 7,071,293 breached accounts

• DEF CON 31 – Panel: ‘Hack the Future – Why Congress & White House Support AI Red Teaming’

• IT Security News Daily Summary 2023-11-20

• Malware Uses Trigonometry to Track Mouse Strokes

• Lasso Security Emerges From Stealth With $6M Seed Funding for Gen AI and Advanced LLM Cybersecurity

• Canadian government impacted by data breaches of two of its contractors

• Protecting Kids on Social Media Act: Amended and Still Problematic

• Amid Military Buildup, China Deploys Mustang Panda in the Philippines

• Facebook Breaks Up Its Ethical AI Watchdog Group

• Cisco Live is the time to jump into the future. Together.

• MOVEit victim count latest: 2.6K+ orgs hit, 77M+ people’s data stolen

• CISA Launches Pilot Program to Address Critical Infrastructure Threats

• Thousands of new honeypots deployed across Israel to catch hackers

• Cisco Transportation at Smart City Expo World Congress (SCEWC) 2023

• Automating your way out of an AppSec staffing shortage

• 2024: The Year Microsoft’s AI-Driven Zero Trust Vision Delivers

• Data stolen on Canadian federal employees in third party hack may go back 24 years

• Rhysida ransomware gang is auctioning data stolen from the British Library

• LummaC2 v4.0 Malware Stealing Data with Trigonometry to Detect Human Users

• Hacker Leaks Vaccination Records of Over 2 Million Turkish Citizens

• Cybersecurity Insurance and Data Analysis Working Group Re-Envisioned to Help Drive Down Cyber Risk

• ‘Not consistently candid’: The cryptic phrase that ended Sam Altman’s tenure at OpenAI

• Enterprise Generative AI Enters Its Citizen Development Era

• Celebrating ten years of the Microsoft Bug Bounty program and more than $60M awarded

• Secretive White House Surveillance Program Gives Cops Access to Trillions of US Phone Records

• Saudi Arabia Arms Public Sector With Google Cloud Services

• Ukraine fires top cybersecurity officials

• Hybrid Work for Government: Resiliency in Emergency Situations

• Former infosec COO pleads guilty to attacking hospitals to drum up business

• Microsoft Announces Launch of Customizable AI-Powered Digital Avatar

• Big Data Empowers IoT: Challenges and Solutions

• Stay safe while shopping online on Black Friday and Cyber Monday

• 15 benefits of outsourcing your cybersecurity operations

• CISA Unveils Healthcare Cybersecurity Guide

• What to do if the phone is hacked or becomes espionage target

• British Library confirms data stolen during ransomware attack

• Details Emerge Of Surprise Board Coup That Ousted CEO Sam Altman At OpenAI

• Rhysida Ransomware Gang Attacked The British Library

• Morgan Stanley Fined $6.5 Million For Exposing Customer Info

• Most OpenAI Staff Threaten To Quit After Microsoft Hires Sam Altman

• DEF CON 31 Packet Hacking Village – Pete Hay’s ‘The Importance Of Arts And Crafts In ThreatOps’

• Infostealer Lumma Evolves With New Anti-Sandbox Method

• Google Workspace Vulnerabilities Risk Security Breaches – Warn Researchers

• Microsoft ‘Stronger’ After OpenAI Chaos, Altman Hire

• 6 FinOps Principles and Best Practices

• The Call to Fuel Partner Success

• Student discount: Get 50% off Malwarebytes

• CISA Releases Cybersecurity Guidance for Healthcare, Public Health Organizations

• FCC’s Got New Rules for SIM-Swap and Port-Out Fraud

• CISA to Provide Cybersecurity Services to Critical Infrastructure Entities

• NetSupport RAT Infections on the Rise – Targeting Government and Business Sectors

• OpenAI Staff Threaten To Resign Over Altman Sacking

• READYgg Onboards 15 Million Web2 Players into Web3 in Partnership with Aptos Labs

• Operationalize cyber risk quantification for smart security

• Optus CEO resigns following service outage debacle

• Sam Altman’s AI ‘mission continues’ at Microsoft, future of OpenAI and ChatGPT uncertain

• Morgan Stanley Fined $6.5 Million for Exposing Customer Information

• XDR Cybersecurity: Technologies and Best Practices

• Apple Adopts Universal Texting Standard

• Product Walkthrough: Silverfort’s Unified Identity Protection Platform

• DarkGate and PikaBot Malware Resurrect QakBot’s Tactics in New Phishing Attacks

• Akamai EdgeWorkers and Uniform: Personalize Web Pages at Scale Without Flicker

• Do We Want an Immersive Web?

• Musk Vows ‘Thermonuclear’ Lawsuit Against Watchdog

• How the Evolving Role of the CISO Impacts Cybersecurity Startups

• LummaC2 Stealer’s New Anti-Sandbox Technique? Trigonometry

• Johnson Controls Patches Critical Vulnerability in Industrial Refrigeration Products

• Microsoft Hires Sam Altman and OpenAI’s New CEO Vows to Investigate His Firing

• Morgan Stanley Ordered to Pay $6.5 Million for Exposing Customer Information

• Maximizing Data Security: Why Simply Factory Resetting Your Android Phone Won’t Suffice Before Selling

• BYD Targets Tesla With Premium ‘Sea Lion’ EV

• Fortify Your Online Business – Security Tips for Starting an e-Commerce Website

• Yamaha Ransomware Attack: Employees Personal Information Exposed

• Hackers accessed sensitive health data of Welltok patients

• Russia-linked APT29 group exploited WinRAR 0day in attacks against embassies

• Konni Campaign Distributed Via Malicious Document

• Adopting CNAPP as a Bridge Between DevOps and Cloud-Native Security

• Google’s Bard AI Chatbot is now Accessible to Teenagers

• Threat Intelligence with Sandbox Analysis: Security Analyst Guide – 2024

• Lasso Security emerges from stealth to wrangle LLM security

• Inside OpenAI’s chaotic weekend: The Sam Altman dismissal to Emmett Shear’s appointment

• Are DarkGate and PikaBot the new QakBot?

• Google Eases Restrictions: Teens Navigate Bard with Guardrails

• Intel Released Urgent Patch For Reptar Vulnerability In Its CPUs

• Google Elaborates On Campaigns Exploiting A Now-Patched Zimbra Zero-Day

• The Human Factor of Cyber Security

• Cisco ISE Takes a Trio of TrustRadius Awards

• New “Agent Tesla” Variant: Unusual “ZPAQ” Archive Format Delivers Malware

• Using Generative AI for Surveillance

• Cybersecurity, Legal, and Financial Experts Share Their Reactions to the SEC’s Latest Cyber Disclosure Regulations | Kovrr Blog

• Yamaha Motor Confirms Data Breach Following Ransomware Attack

• 5 Steps to Assessing Risk Profiles of Third-Party SSE Platforms

• Cyber Security Today, Nov. 20, 2023 – Forbid ransomware payments, says a Canadian hospital

• OpenAI’s Altman Courted Investors For AI Chip, Device

• Fake Online Stores See A 135% Spike As Black Friday And Holiday Shopping Approaches

• Rhysida ransomware gang: We attacked the British Library

• Altman, Brockman Join Microsoft After Shock OpenAI Ouster

• AMIDES – Open-source Detection System to Uncover SIEM Blind Points

• Recognising Scam Patterns and Preventing Data Loss: A Unified Approach

• Sophos Web Appliance vulnerability exploited in the wild (CVE-2023-1671)

• LummaC2 Malware Deploys New Trigonometry-Based Anti-Sandbox Technique

• Why Defenders Should Embrace a Hacker Mindset

• Understanding the UK government’s new cybersecurity regime, GovAssure

• Resecurity partners with University of Jeddah to improve cybersecurity education

• Navigating the Waters of AI: Safeguarding Against Data Security Risks

• Ransomware group wants to partner up with government, files SEC complaint against its victim

• K-12 Schools Improve Protection Against Online Attacks, but Many Are Vulnerable to Ransomware Gangs

• US Announces $70 Million Cybersecurity Boost for Rural, Municipal Utilities

• 250 Organizations Take Part in Electrical Grid Security Exercise

• How are Crypto Phishing Scams Done, and How Do You Avoid Them?

• DarkGate Internals

• Now a Stock Market business hires hackers

• Secretary Fined For Accessing Scores of Patient Records

• Shear Takes Over As OpenAI Interim Chief, Promises Independent Probe

• Change Variance: How Tiny Differences Can Impact Your IT World

• Phishing Trends Examined by the SANS Institute

• The dark side of Black Friday: decoding cyberthreats around the year’s biggest shopping season

• Randstorm Exploit: Bitcoin Wallets Created b/w 2011-2015 Vulnerable to Hacking

• Russia’s APT29 Targets Embassies With Ngrok and WinRAR Exploit

• CVE-2023-46604 (Apache ActiveMQ) Exploited to Infect Systems With Cryptominers and Rootkits

• Critical AI Tool Vulnerabilities Let Attackers Execute Arbitrary Code

• US teenager pleads guilty to his role in credential stuffing attack on a betting site

• DarkCasino joins the list of APT groups exploiting WinRAR zero-day

• NCSC Announces New Standard For Indicators of Compromise

• ‘123456’ Crackable in seconds, 2023’s Most Prevalent Password

• A week in security (November 13 – November 19)

• A Detection and Response Benchmark Designed for the Cloud

• Leveraging Sandbox and Threat Intelligence Feeds to Combat Cyber Threats

• Gang of 5 Employees Stole The Customer Data at Late Night in Office

• OracleIV DDoS Botnet Alert: Secure Your Docker Engine APIs

• Indian Hack-for-Hire Group Targeted U.S., China, and More for Over 10 Years

• 9 Black Friday cybersecurity deals you don’t want to miss

• How effective compensation makes a difference with cyber talent retention

• MFA under fire, attackers undermine trust in security measures

• Smaller businesses embrace GenAI, overlook security measures

• Outsmarting cybercriminals is becoming a hard thing to do

• Only 9% of IT budgets are dedicated to security

• Your password hygiene remains atrocious, says NordPass

• CrowdStrike Extends AI Approach to Cybersecurity to SMBs

• Four Years and a Pandemic Later: Have Agencies Become Cloud Smart?

• Embracing Zero Trust Architecture: A Critical Best Practice for Cybersecurity in Enterprises

Generated on 2023-11-21 23:55:54.560119