IT Security News Daily Summary 2023-11-24

• App used by hundreds of schools leaking children’s data

• Hackers Leak Thousands of Idaho National Lab Employees’ PII Data

• KitchenPal – 98,726 breached accounts

• Understanding JWKS (JSON Web Key Set)

• Telekopye: Chamber of Neanderthals’ secrets

• Microsoft launched its new Microsoft Defender Bounty Program

• Chocolate Swiss Army Knife

• Cyber Security Today, Week in Review for the week ending November 24, 2023

• Citrix Bleed widely exploitated, warn government agencies

• Windows Hello fingerprint authentication can be bypassed on popular laptops

• Microsoft Windows Hello Fingerprint Authentication Bypass – Research

• 40% of Cybersecurity Departments Want More Budget to Upskill Employees

• Remote Video Security Surveillance

• Cybercriminals Using Telekopye Telegram Bot to Craft Phishing Scams on a Grand Scale

• Taj Hotel Data Breach details

• Nvidia Delays Launch Of AI Chip For China – Report

• Alaa Abd El-Fattah: Letter to the United Nations Working Group on Arbitrary Detention

• OpenCart owner turns air blue after researcher discloses serious vuln

• Cybersecurity Insights with Contrast CISO David Lindner | 11/24

• The drawbacks of using video training for your security awareness program

• How to implement ISO 27001 Annex A controls by using AI

• GPS Warfare: Ukraine-Israel Tensions Raise Alarms

• AutoZone Faces Data Breach Headache as MOVEit System Compromised

• Hackers are Targeting Indians Via Novel Courier Scam

• Terra Co-Founder Do Kwon To Be Extradited

• What Is Artificially Inflated Traffic?

• CyberLink Breached by North Korean Threat Actors in Supply Chain Attack

• Idaho National Laboratory Suffers Data Breach, Employee Data Compromised

• Scammers Exploit Crypto Hype with Fake Token Factory, Stealing Millions

• Check Point CloudGuard: A Leader and Fast Mover in GigaOm’s Radar Report for CSPM

• North Korean Software Supply Chain Attack Hits North America, Asia

• Addressing Top Technology Risks on the Digital Frontier

• Cyber Security Today, Nov. 24, 2023 – A warning to tighten security on Kubernetes containers, and more

• OpenAI Made AI Breakthrough Before Ousting Of Sam Altman

• Go on a Psychedelic Journey of the Internet’s Growth and Evolution

• Exposed Kubernetes configuration secrets can fuel supply chain attacks

• LitterDrifter USB Worm

• Effective Methods of Tackling Modern Cybersecurity Threats

• In Other News: National Laboratory Breach, Airplane GPS Attacks, Russia Accuses Allies of Hacking

• Cyber-Attack Disrupts UK Property Deals

• Tell Me Your Secrets Without Telling Me Your Secrets

• AI Receives £500 Million Funding in Finance Minister’s 2023 Autumn Statement

• Hamas-Linked Cyberattacks Using Rust-Powered SysJoker Backdoor Against Israel

• Windows Hello Fingerprint Tech is Hacked

• Mimecast SPF and DKIM Configuration: Step By Step Guide

• Black Friday: Phishing Emails Soar 237%

• Silicon UK Pulse: Your Tech News Update: Episode 28

• ‘Pig butchering’: Authorities Seized $9M in Crypto During Dollar Conversion

• Security Risk Assessment Checklist

• North Korea-linked Konni APT uses Russian-language weaponized documents

• Linux 6.6 is Now Officially an LTS Release

• Weekly Blog Wrap-Up (November 20 – November 23, 2023)

• CISA Launches Project to Assess Effectiveness of Security Controls

• What is IRDAI Compliance? Guidelines for the Insurer

• Kubernetes Secrets of Fortune 500 Companies Exposed in Public Repositories

• Report Phishing and Spam messages on Google in this way

• Demystifying Data Protection Design: A Comprehensive Overview

• NIS2 and its global ramifications

• ZTNA vs VPN: What is the Difference? Will ZTNA Replace VPN?

• 1 in 5 executives question their own data protection programs

• UX Design and Human-Computer Interaction: Crafting User-Friendly Experiences

• Network security tops infrastructure investments

• AI and contextual threat intelligence reshape defense strategies

• Kubernetes vs docker swarm: A brief explanation of all differences

• Understanding Kubernetes secrets in a Kubernetes environment

• Kubernetes security best practices: Secure your secrets

• Understand all the Cyber Essentials requirements for IT infrastructure

• The Best Cyber Security Audit Companies across the UK

• Cloud security and devops have work to do

• Guarding Against the Insider Threat: Do Your Employees Pose the Greatest Risk?

• National Cyber Security Vulnerabilities in The Changing Security Environment

• Web Management Address Autodetection

• IT Security News Daily Summary 2023-11-23

• Canada’s privacy czar investigating data theft of federal employees from relocation companies

• Windows 11 setup: Which user account type should you choose?

• ClearFake campaign spreads macOS AMOS information stealer

• How to apply natural language processing to cybersecurity

• Rise of cloud agnosticism: challenges and myths

• YouTube Denies Slowing Down Mozilla Firefox

• Welltok Data Breach Affects Over 8.5 Million Patients

• BlackCat claims it is behind Fidelity National Financial ransomware shakedown

• Microsoft named a Leader in 2023 Gartner® Magic Quadrant™ for Access Management for the 7th year​​

• Diamond Sleet supply chain compromise distributes a modified CyberLink installer

• Revolutionize your security strategy: Introducing automatic asset discovery

• Telekopye Toolkit Used as Telegram Bot to Scam Marketplace Users

• GM Cruise To Re-Launch Operation In One City – Report

• What Are the Pillars of API Security?

• $9 million seized from “pig butchering” scammers who preyed on lonely hearts

• InfectedSlurs Botnet Resurrects Mirai With Zero-Days

• Amazon Set To Win EU Approval For iRobot Purchase – Report

• Navigating Challenges in Online Banking API Testing

• Chrome pushes forward with plans to limit ad blockers in the future

• Patch Management Guide

• British Library Staff Passports Leaked Online, Hackers Demand £600,000 Ransom

• Rug Pull Schemes: Crypto Investor Losses Near $1M

• Two Insurance companies come under the influence of Ransomware Attacks

• Binance Sees $956m Funds Withdrawn, After CEO Pleads Guilty

• What Is Network Availability?

• TLS/SSL Handshake Errors & How to Fix Them

• Key Components of a Successful DevSecOps Pipeline

• $19 Stanley cup deal is a Black Friday scam

• Welltok data breach impacted 8.5 million patients in the U.S.

• Amazon Cuts Hundreds Of Jobs In Alexa Division

• Half of Cybersecurity Professionals Kept Awake By Workload Worries

• Konni Group Using Russian-Language Malicious Word Docs in Latest Attacks

• OpenSSL Announces Final Release of OpenSSL 3.2.0

• MySQL Security Best Practices Guide – 2024

• Industry piles in on North Korea for sustained rampage on software supply chains

• Websites Must Allow Users to “Reject All” Cookies, UK Regular Warns

• Unlocking a World of Cybersecurity Insights with the CISO’s Secrets Podcast

• Alert: New WailingCrab Malware Loader Spreading via Shipping-Themed Emails

• How Altcoins Influence The World of Crypto

• How to Create a Cybersecurity Incident Response Plan?

• Vulnerability Prioritization: How to Beat Patching Paralysis

• Researchers Warn NetSupport RAT Attacks Are on the Rise

• Mac Systems Under Threat: ClearFake Campaign Deploys Atomic Stealer Malware

• What Is DNS Security and How Does It Work [A Comprehensive Guide]

• White House Joins Threads, Amid X Extremist Content Row

• It’s Time to Log Off

• North Korea-linked APT Diamond Sleet supply chain attack relies on CyberLink software

• Cyber Mindfulness Corner Company Spotlight: Pentest People

• Implementing Effective Compliance Testing: A Comprehensive Guide

• Securing Reality: The Role of Strict Laws and Digital Literacy in the Fight Against Deepfakes

• North Korean Software Supply Chain Threat is Booming, UK and South Korea Warn

• FBI and CISA warn against Scattered Spider triggered cyber attacks

• Exposed Kubernetes Secrets Allow Hackers to Access Sensitive Environments

• Attack on direct debit provider London & Zurich leaves customers with 6-figure backlogs

• Data of 8.5 million patients compromised in the United States

• University of Manchester CISO Speaks Out on Summer Cyber-Attack

• Cisco Patched Products Vulnerable to HTTP/2 Rapid Reset Attack

• Mirai-based Botnet Exploiting Zero-Day Bugs in Routers and NVRs for Massive DDoS Attacks

• 6 Steps to Accelerate Cybersecurity Incident Response

• Actionable Threat Intel (VI) – A day in a Threat Hunter’s life

• Windows Hello Fingerprint Authentication Exploited on Microsoft, Dell, & Lenovo Laptops

• US Seizes $9m From Pig Butchering Scammers

• Consumer cyberthreats: predictions for 2024

• North Korea Blamed For CyberLink Supply Chain Attacks

• Stop social engineering at the IT help desk

• N. Korean Hackers Distribute Trojanized CyberLink Software in Supply Chain Attack

• British Library: Ransomware Attack Led to Data Breach

• Happy Thanksgiving 2023!

• ParaSiteSnatcher: How Malicious Chrome Extensions Target Brazil

• Automotive parts giant AutoZone disclosed data breach after MOVEit hack

• Mirai we go again: Zero-day flaws see routers and cameras co-opted into botnet

• First Linux Kernel 6.7 Release Candidate Announced

• Cybellum’s Product Security Platform achieves Mitre’s CWE-Compatible designation

• 117 Vulnerabilities Discovered in Microsoft 365 Apps

• Million-Dollar Crypto Scam that Leaves Investors Empty-handed

• North Korean Hackers Distribute Trojanized CyberLink Software in Supply Chain Attack

• Cybercriminals turn to ready-made bots for quick attacks

• New horizons in cyber protection with 2024 trends to watch

• Cloud Computing Explained: Benefits and Challenges

• New Relic warns customers it’s experienced a cyber … something

• Consumers plan to be more consistent with their security in 2024

• Online stores may not be as secure as you think

• Defeat Web Shell WSO-NG

• OpenAI in turmoil: Altman’s leadership, trust issues and new opportunities for Google and Anthropic — 4 key takeaways

• Your voice is my password

• North Korea makes finding a gig even harder by attacking candidates and employers

• How to give Windows Hello the finger and login as someone on their stolen laptop

• Cisco Learners: What’s in store for Cyber Monday 2023

Generated on 2023-11-24 23:55:43.469847