IT Security News Daily Summary 2023-11-22

• New InfectedSlurs Mirai-based botnet exploits two zero-days

• 2023-11-22 – AgentTesla infection with FTP data exfil

• US nuke reactor lab hit by ‘gay furry hackers’ demanding cat-human mutants

• 4 data loss examples keeping backup admins up at night

• What Is Cloud Security? Everything You Need to Know

• Hack The Box Launches 5th Annual University CTF Competition

• Kiteworks’ Maytech Acquisition Reaffirms Commitment to UK Market

• Fake Browser Updates Targeting Mac Systems With Infostealer

• Building Security Culture Starts with Building Relationships

• Atomic Stealer Distributes Malware to Macs Through False Browser Downloads

• CISA relaunches working group on cyber insurance, ransomware

• What Is Cloud Configuration Management? Complete Guide

• Qatar Cyber Agency Runs National Cyber Drills

• Web Shells Gain Sophistication for Stealth, Persistence

• Measures Healthcare Providers Can Take to Mitigate Disruptions

• Microsoft Improves Windows Security with a Path to Move Off NTLM

• Researchers Undermine ‘Windows Hello’ on Lenovo, Dell, Surface Pro PCs

• North Korea-backed hackers target CyberLink users in supply-chain attack

• Kinsing Crypto Malware Targets Linux Systems via Apache ActiveMQ Flaw

• 6 Best Unified Threat Management (UTM) Devices & Software for 2023

• Bytes of Delight: Snacking on Snack Minutes Videos

• Foreign Cyberattack Blamed For Kansas Court System Disruption – Report

• Mideast Oil & Gas Facilities Could Face Cyber-Related Energy Disruptions

• APT29 Strikes: WinRAR Exploits in Embassy Cyber Attacks

• LummaC2 Malware Introduces Innovative Anti-Sandbox Technique Utilizing Trigonometry

• Facebook Is Tracking Teens Online As They Prep For College

• Autumn Statement 2023: Tech Implications

• OpenAI saga shows the race for AI supremacy is no longer just between nations

• Equal Pay Day: Women, Cybersecurity, and Money

• Researchers Discover Dangerous Exposure of Sensitive Kubernetes Secrets

• ‘LitterDrifter’ Russian USB Worm Leaks from Ukraine War Zone

• 10 Years On, Microsoft’s Bug Bounty Program Has Paid Out $60 Million

• After Qakbot, DarkGate and Pikabot Emerge as the New Notorious Malware

• Vulnerabilities in Adobe Acrobat, Microsoft Excel could lead to arbitrary code execution

• Sekoia: Latest in the Financial Sector Cyber Threat Landscape

• Scattered Spider Hops Nimbly From Cloud to On-Prem in Complex Attack

• 3 Ways to Stop Unauthorized Code From Running in Your Network

• Establishing and Keeping the Trust: The Cisco Duo Managed Services Story

• Guarding the Gate: How to Thwart Initial Access Brokers’ Intrusions

• Russian Hackers Target Ukraine’s Fighter Jet Supplier

• Flaw in Apache ActiveMQ Exposes Linux Systems to Kinsing Malware

• Autopilot Flaw Known By Tesla, Elon Musk, Judge Finds

• Rootkit Turns Kubernetes From Orchestration to Subversion

• A guide to Purdue model for ICS security

• Employee Policy Violations Cause 26% of Cyber Incidents

• Australia runs cybersecurity health check on all gov websites and infrastructure

• Everything You Need to Know and Do With Load Balancers

• Employees breaking security policies just dangerous as being hacked, Kaspersky global study shows

• Global Smartphone Market Grows After Two Year Slump – Counterpoint

• FBI Alert: Silent Ransom Group Utilizes Callback Phishing for Network Hacks

• Cansina A Web Content Discovery Application

• Mozilla Releases Security Updates for Firefox and Thunderbird

• Fidelity National Financial shuts down network in wake of cybersecurity incident

• SiegedSec hacktivist group hacked Idaho National Laboratory (INL)

• USB Worm Unleashed By Russian State Hackers Spreads Worldwide

• Netflix Bug That Opened Smart TVs To Attacks Is Detailed, 4 Years Later

• Kinsing Malware Exploits Critical Apache ActiveMQ Flaw To Mine Crypto

• Windows Hello Fingerprint Authentication Bypassed On Popular Laptops

• 185,000 Individuals Impacted By MOVEit Hack At AutoZone

• How AI is Encouraging Targeted Phishing Attacks

• New Flaws in Fingerprint Sensors Let Attackers Bypass Windows Hello Login

• Why Ensuring Supply Chain Security in the Space Sector is Critical

• Binance CEO Changpeng Zhao Pleas Guilty, Resigns

• Simplifying Access: The Power of Single Sign-On

• The Persian Gulf’s March to the Cloud Presents Global Opportunities

• Fortinet Insights from the World Economic Forum’s Annual Meeting on Cybersecurity

• Microsoft Offers Up to $20,000 for Vulnerabilities in Defender Products

• Sam Altman is Back as OpenAI CEO Just Days After Being Removed, Along With a New Board

• Windows Hello Fingerprint Authentication Bypassed on Popular Laptops

• 185,000 Individuals Impacted by MOVEit Hack at Car Parts Giant AutoZone

• The AI Paradox: Balancing Generative AI Adoption With Cybersecurity Risks

• What are Hardware Security Keys, and is it Safe to Use Them?

• Google CEO Warns of Potential Security Risks Associated with Sideloading Apps

• HasMySecretLeaked: Building a Trustless and Secure Protocol

• Broadcom completes $69 billion acquisition of VMware in cash and stock

• How LockBit used Citrix Bleed to breach Boeing and other targets

• Check Point enhances AWS security—see it in action at AWS re:Invent!

• Cyber Security Today, Nov. 22, 2023 – Boeing division hacked through NetScaler vulnerability, and more

• Chiselled Ubuntu closes prevailing container security gaps

• Connecting With the Community at BSides Atlanta 2023

• A Maven Story

• Malwarebytes consumer product roundup: The latest

• US cybercops take on ‘pig butchering’ org, return $9M in scammed crypto

• North Korean Hackers Pose as Job Recruiters and Seekers in Malware Campaigns

• Apple to Add Manual Authentication to iMessage

• Over Half of Organisations Are at Risk of Cyberattack Due to Exhausted and Stressed Staff

• Explained: Privacy washing

• Citrix, Gov Agencies Issue Fresh Warnings on CitrixBleed Vulnerability

• Kansas Officials Blame 5-Week Disruption of Court System on ‘Sophisticated Foreign Cyberattack’

• Humans Are Notoriously Bad at Assessing Risk

• CyberArk unveils passwordless authentication options to reduce credential theft

• North Korean Hackers Posed as Job Recruiters and Seekers

• Integration Spotlight: Stellar Cyber Open XDR

• Insights from SentinelOne’s OneCon23

• ENow App Governance Accelerator helps organizations identify risky apps

• Microsoft announces Defender bug bounty program

• AI Solutions Are the New Shadow IT

• LockBit Affiliates are Exploiting Citrix Bleed, Government Agencies Warn

• Sam Altman Reinstated As CEO, New OpenAI Board Appointed

• CISA adds Looney Tunables Linux bug to its Known Exploited Vulnerabilities catalog

• Microsoft’s bug bounty turns 10. Are these kinds of rewards making code more secure?

• Coincover collaborates with Utila to improve crypto asset management

• ClearFake Campaign Expands to Target Mac Systems with Atomic Stealer

• Poloniex Offered $10 Million Reward to Hacker for Return of $120 Million

• UK’s cookie crumble: Data watchdog serves up tougher recipe for consent banners

• Microsoft Launches Defender Bug Bounty Program

• Canada Government Admits Data Breach Impacting Public Employees

• HrServ – Previously unknown web shell used in APT attack

• Measuring the Efficacy of your Insider Risk Program

• What Is a Credential Vault?

• CISA offers cybersecurity services to non-federal orgs in critical infrastructure sector

• Regulator Issues Privacy Ultimatum to UK’s Top Websites

• UK Finance Reports Slight Decrease in FinTech Cyberattacks

• The Cybersecurity Skills Gap: You’re Looking at the Wrong Gap

• Enterprise software provider TmaxSoft leaks 2TB of data

• Europol Launches OSINT Taskforce to Hunt For Russian War Crimes

• DarkGate Gained Popularity for its Covert Nature and Antivirus Evasion

• Citrix provides additional measures to address Citrix Bleed

• India Faces Surge in IM App Attacks With Trojan Campaigns

• Security researchers bypass Windows Hello fingerprint authentication

• Unmasking the latest trends of the Financial Cyber Threat Landscape

• ClearFake Campaign Expands to Deliver Atomic Stealer on Mac Systems

• Breaking News: Sam Altman will return as OpenAI CEO, New board announced in a dramatic turnaround

• ClearFake Campaign Expands to Deliver Atomic Stealer on Macs Systems

• Attack Signals Possible Return of Genesis Market, Abuses Node.js, and EV Code Signing

• Sam Altman will return as OpenAI CEO, New board announced in a dramatic turnaround

• Just beware of these 5 Black Friday or thanksgiving Cyber Scams

• Leveraging Hybrid Cloud Solutions for Enhanced Cybersecurity in Healthcare

• CISOs can marry security and business success

• LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability to Break In

• 5G Technology: Speeding Up the Digital Age

• Always Thankful for Our Customers

• IoT Revolution: Connecting the World Digitally

• Why boards must prioritize cybersecurity expertise

• Fuel for thought: Can a driverless car get arrested?

• Organizations rethink cybersecurity investments to meet NIS Directive requirements

• Open-source AV/EDR bypassing lab for training and learning

• 2023-11-20 – DarkGate infection

• Binance and CEO admit financial crimes, billions coughed up to US govt

• Visibility Isn’t Enough; It’s What You Do with It That Counts

• 4 Key Security Challenges to Address with Confidential Computing

• The 7 Deadly Sins of Security Awareness Training

• InfectedSlurs Botnet Spreads Mirai via Zero-Days

• Nothing Chats pulled from Google Play

• How to stop fake System notifications on macOS

• IT Security News Daily Summary 2023-11-21

• Citrix Bleed Bug Inflicts Mounting Wounds, CISA Warns

• Exploit for Critical Windows Defender Bypass Goes Public

• AutoZone Files MOVEit Data Breach Notice With State of Maine

• DOJ Charges Binance With Vast Money-Laundering Scheme and Sanctions Violations

• Why less is more: 10 steps to secure customer data

• DPRK Hackers Masquerade as Tech Recruiters, Job Seekers

• Join CX for Cisco Live Demos

• Digital Twins Will Revolutionize Modern Logistics. Here’s How

• The Role of the CISO in Digital Transformation

• DOJ Charges Binance With Vast Money Laundering Scheme and Sanctions Violations

• Accelerating Security Risk Management

• Randall Munroe’s XKCD ‘Materials Scientists’

• DEF CON 31 – Jonathan Bar Or’s, Michael Pearse’s, Anurag Bohra’s ‘Getting A Migraine – Uncovering A Unique SIP Bypass On macOS’

• YouTube is slowing video loads on Firefox. Here’s how to fix that

• Inside Job: Cyber Exec Admits to Hospital Hacks

• Meeting the needs of the application generation

• Tor Project removed several relays associated with a suspicious cryptocurrency scheme

• Outdated Wallets Threatening Billions in Crypto Assets

• DevOps Service Providers Facilitating ISO 27001 and GDPR Compliance for Organizations

• The Eyes on the Board Act Is Yet Another Misguided Attempt to Limit Social Media for Teens

• Evil Twin Attack: Definition + How to Prevent It

• Microsoft Azure Confidential VMs Will Roll Out This December

• possession factor

• Introducing the Microsoft Defender Bounty Program

• Password Manager Cheat Sheet: What Is a Password Manager?

• Atomic Stealer distributed to Mac users via fake browser updates

• DEF CON 31 – Tal Skverer’s ‘GhostToken Exploiting Google Cloud Platform To Create Unremovable Trojan Apps’

• Several K-12 Schools and Colleges Suffers Outage Due to Cyberattack

• SOLUTION REVIEW: Enzoic for Active Directory

• Bringing passwords to the pie table for unconventional holiday discussions

• Hands on with Google’s new Titan Security Keys – and why they still have their place

• 6 Best Password Recovery Software for 2023

• Kinsing Cyberattackers Target Apache ActiveMQ Flaw to Mine Crypto

• Major Saudi University to Offer AI, Cybersecurity Studies

• Cisco partners drive innovation through Purpose

• Powering Observability at Scale with Telemetry

• Sumo Logic wrestles with security breach, pins down customer data

• Cyber Safety on Sale! How to Navigate Black Friday & Cyber Monday Securely

• Fuji Electric Tellus Lite V-Simulator

• #StopRansomware: LockBit 3.0 Ransomware Affiliates Exploit CVE 2023-4966 Citrix Bleed Vulnerability

• WAGO PFC200 Series

• Cato Networks Named SASE Leader, Again

• The Dark Web: A Hidden Menace for Businesses

• Coffee Briefing Nov. 21 – Microsoft Ignite updates; Canadians want more AI training; SalvageData expands to Canada; and more

• Konni Campaign Deploys Advanced RAT With UAC Bypass Capabilities

• Latest Buzz in Cybersecurity: Trending Headlines on Google

• British Library Says Staff Data Stolen In Ransomware Attack

• Broadcom Expects To Complete $61bn VMware Deal On Weds

• Konni RAT Exploiting Word Docs to Steal Data from Windows

• New Phishing Attack Hijacks Email Thread to Inject Malicious URL

• 3 skills could make or break your cybersecurity career in the generative AI era

• SEC’s 4-Day Breach Disclosure Rule Hits Opposition In Congress

• LummaC2 4.0 Infostealer Uses Trigonometry To Avoid Sandboxes

• Tor Network Removes Risky Relays Associated With Crypto Scheme

• Canadian Military, Police Impacted By Data Breach

• Why Botnets Persist: How to Stop Direct-Path DDoS Attacks

• Vulnerability Summary for the Week of November 13, 2023

• CISA Offering Free Cybersecurity Services to Non-Federal Critical Infrastructure Entities

• LLM Security Startup Lasso Emerges From Stealth Mode

• DarkGate and PikaBot Activity Surge in the Wake of QakBot Takedown

• Cyberbullying, a growing problem in Europe

• AI Helps Uncover Russian State-Sponsored Disinformation in Hungary

• Maximize Cybersecurity Returns: 5 Key Steps to Enhancing ROI

• MAR-10478915-1.v1 Citrix Bleed

• Lookout Alerts U.S. Employees and Businesses of Significant Phishing Threat This Week

• Hacking Employers and Seeking Employment: Two Job-Related Campaigns Bear Hallmarks of North Korean Threat Actors

• Nadella Calls For ‘Change’ At OpenAI Following Altman Ouster

• Former Infosec COO Pleads Guilty for Hacking Hospitals

• EU cybersecurity exercise: foster cooperation, secure free and fair EU elections

• Detecting Obfuscated Command-lines with a Large Language Model

• ‘Tis the Season for Cybercrime: What to Watch for and How to Protect Yourself

• MailCamp SPF and DKIM configuration: Step By Step Guideline

• MailerLite SPF and DKIM Configuration: Step By Step

• Overcoming Password Fatigue With Single Sign-On Solutions

• DarkGate and PikaBot Phishing Campaign is Using Qakbot Tactics

• FBI Reveals Scattered Spider’s Alliance with Notorious Ransomware Outfit

• Truepill Data Breach: Navigating Healthcare’s Digital Security Crisis

• Privacy Act Compliance Staggered, NASSCOM Seeks Collaboration

• Telstra and Netskope expand partnership to deliver managed SASE globally

• FreeBSD 14.0 released, OpenSSH and OpenSSL updated

• Hackers Abusing WhatsApp Messages to Install Android Malware

• The XBOM vs SBOM debate

• Tor Network Removes Risky Relays Associated With Cryptocurrency Scheme

• Canadian Military, Police Impacted by Data Breach at Moving Companies

• Play Ransomware Goes Commercial – Now Offered as a Service to Cybercriminals

• Black Friday: Significant Security Gaps in E-Commerce Web Apps

• Comparative Study Results on Linux and Windows Ransomware Attacks, Exploring Notable Trends and Surge in Attacks on Linux Systems

• Third-party data breach affecting Canadian government could involve data from 1999

• Rapid7 introduces AI-powered cloud anomaly detection

• Top 5 Best Telegram Client Apps for Android

• New Agent Tesla Malware Variant Using ZPAQ Compression in Email Attacks

• How Cisco Helps Me Balance My Passions and Career Experience

• Sam Altman Ouster Adds Fuel To EU AI Regulation Debate

• Europol Busts Major Online CSAM Racket in Western Balkans

• Email Security Flaw Found in the Wild

• Sumo Logic Completes Investigation Into Recent Security Breach

• Microsoft Paid Out $63 Million Since Launch of First Bug Bounty Program 10 Years Ago

• Insider Q&A: Pentagon AI Chief on Network-Centric Warfare, Generative AI Challenges

• Sumsub Global Database Verification eliminates document-based processes

• Major Exchange OKX Applies For Hong Kong Crypto Licence

• How Can I Manage Certificates From Multiple Public CAs?

• Apache ActiveMQ bug exploited to deliver Kinsing malware

• US DOJ Negotiates With Binance Over $4bn Settlement

• How do cybercriminals steal credit card information?

• Experts warn of a surge in NetSupport RAT attacks against education and government sectors

• The shifting sands of the war against cyber extortion

• How Multi-Stage Phishing Attacks Exploit QRs, CAPTCHAs, and Steganography

• The definitive VirusTotal’s admin guide

• Maintaining a state of readiness to deal with cyber attacks

• KashFlow SPF and DKIM configuration: Step By Step Guideline

• Kreativmedia SPF and DKIM configuration: Step By Step Guideline

• Social engineering attacks lure Indian users to install Android banking trojans

• 8 free AI and GenAI courses from AWS

• Lasso Security emerges from stealth and raises $6 million

• Kinsing Hackers Exploit Apache ActiveMQ Vulnerability to Deploy Linux Rootkits

• Cybersecurity Executive Pleads Guilty to Hacking Hospitals

• Hackers Exploit Asset Management Program to Deploy Malware

• Crimeware and financial cyberthreats in 2024

• US Cybersecurity Lab Suffers Major Data Breach

• Ukraine Sacks Two Senior Cyber Officials

• FCC Implemented New Rules to Stop SIM Swapping Attacks

• SMB Protocol Explained: Understanding its Security Risks and Best Practices

• AI-Enabled Information Manipulation Poses Threat to EU Elections: ENISA Report

• In What ways do CVSS v3 and CVSS v4 differ?

• Musk’s X Sues Media Matters Over Nazism Report

• FCC Implemented new Rules to Stop SIM swapping Attacks

• The Top 5 Reasons to Use an API Management Platform

• Malicious Apps Disguised as Banks and Government Agencies Targeting Indian Android Users

• Why XDR Is A Must In Securing Cloud And Hybrid Environments

• Mustang Panda Hackers Targets Philippines Government Amid South China Sea Tensions

• PolarDNS: Open-source DNS server tailored for security evaluations

• Rhysida Ransomware demands 20 BTC from British Library

• Segmentation proves crucial for fast response to security incidents

• The hidden obstacles to integrating AI into your business

• Organizations’ serious commitment to software risk management pays off

• Blockchain Breakthroughs: Transforming Industries

• Kaspersky’s Advanced Persistent Threats Predictions for 2024

Generated on 2023-11-22 23:55:58.283758