IT Security News Daily Summary 2023-11-28

• Europol, Ukraine police arrest alleged ransomware ringleader

• LockBit claims cyberattack on India’s national aerospace lab

• Threat actors started exploiting critical ownCloud flaw CVE-2023-49103

• Plex gives fans a privacy complex by sharing viewing habits with friends by default

• Say Goodbye to Monolithic EdgeWorkers: Introducing Flexible Composition (Part 1)

• AWS Launches New Chips for AI Training and Its Own AI Chatbot

• Unsealed Documents Reveal Facebook Has An “Open Secret” Of Millions Of Underage Users

• Plex sharing streaming habits raises privacy hackles

• KubeCon 2023: Bridging the AppSec Tools Gap

• A Civil Rights Firestorm Erupts Around a Looming Surveillance Power Grab

• Digital Car Keys Are Coming

• Five Takeaways from Black Friday & Cyber Monday Cyber Attacks

• E-mail Compromise

• IP network security in the age of DDoS and quantum computing

• NIST CSF 2.0: Changes and Implications

• KubeCon 2023: Briding the AppSec Tools Gap

• Atomic Stealer Again Targets Mac Via Fake Browser Updates

• Ukraine Hacks Russia’s Aviation Agency, Claims “Aviation Cannibalism”

• International police operation dismantled a prominent Ukraine-based Ransomware group

• SEO Poisoning Brings Users to Attackers’ Doors

• Essential Baby Gadgets for Modern Parents

• ‘Start Here’ for Lifecycle Practice optimization

• Ransomware gangs and Living Off the Land (LOTL) attacks: A deep dive

• AWS re:Invent: Amazon Nvidia Expand Collaboration

• Worried about iOS 17’s NameDrop feature? Here’s why I’m not turning it off

• How to Detect VPN Proxies With Python and IP2Location.io API

• How to Integrate Istio and SPIRE for Secure Workload Identity

• Integrating Data Management With Business Intelligence (BI) for Enhanced Insights

• AWS re:Invent 2023 defines a resilient vision for cloud security’s future

• timing attack

• News alert: Hunters’ Team Axon discloses severe privilege escalation flaw in Google Workspace

• Objection Filed To Meta’s Paid Ad-Free Subscription

• Design Flaw in Domain-Wide Delegation Could Leave Google Workspace Vulnerable to Takeover – Hunters

• 2023-11-27 – TA577 pushes IcedID (Bokbot) variant

• Unlocking Tomorrow’s Cybersecurity: A Sneak Peek into ReadySetCyber

• Advanced Persistent Threats: OffSec’s Comprehensive Guide

• BD FACSChorus

• Delta Electronics InfraSuite Device Master

• ColdFusion’s Close Call: A Peek into the Anatomy of a Failed Ransomware Strike

• Lacework AI Assist enhances SOC efficiency

• European Commission Cites Competition Concerns Over Amazon’s iRobot Deal

• Hunters Security: Google Workspace Vulnerable to Takeover Due to Domain-Wide Delegation Flaw

• Navigating the API Seas: A Product Manager’s Guide to Authentication

• Non-delivery and non-payment scams top the charts in holiday fraud

• The Hundred-Year Battle for India’s Radio Airwaves

• Elon Musk Is Giving QAnon Believers Hope Just in Time for the 2024 Elections

• Powering up in harsh environments: Five questions to ask before selecting the right industrial PoE switch

• Let Them Know It’s Time to Power Up

• CISA Urges Congress to Reauthorize Key Chemical Security Program

• Undetected Android Trojan Expands Attack on Iranian Banks

• ID Theft Service Resold Access to USInfoSearch Data

• Understanding OT Cybersecurity Risks in the Energy Sector

• DEF CON 31 – Wojciech Reguła’s ‘ELECTRONizing MacOS Privacy – A New Weapon In Your Red Teaming Armory’

• Compel social media apps to toughen their privacy, trust practices, Parliament told

• Coffee Briefing Nov. 28 – Canadian 5G users will pay more for quality experience; Holiday shoppers on board with GenAI; KPGM and Chainalysis partner; and more

• Entrust launches Digital Account Opening solution to simplify global customer onboarding

• Ardent Health Services Grapples With Ransomware Disruption

• Binance Founder Changpeng Zhao To Remain In United States

• Google Workspace Vulnerable to Takeover Due to Domain-Wide Delegation Flaw, Warns Cybersecurity Firm Hunters

• New Innovations to Deliver Enhanced Visibility to AWS-powered Application Experiences

• Cisco Wins the AWS Global ISV Partner of the Year Award!

• Delivering application performance to maximize business KPIs

• Palo Alto Networks Advises U.S. Government on AI and Cybersecurity

• Police Dismantle Major Ukrainian Ransomware Operation

• Announcing Hyperproof’s New HyperComply Integration

• Cyber Monday Scams: Stay Vigilant and Protect Yourself from These Sneaky Tricks

• Armis releases version 23.3 of the Armis Centrix platform

• Ardent Health Services hit by ransomware

• Design Flaw in Domain-Wide Delegation Could Leave Google Workspace Vulnerable for Takeover, Says Cybersecurity Company Hunters

• Unified endpoint management for purpose-based devices

• Hybrid cloud connectivity best practices and considerations

• GoTitan Botnet – Ongoing Exploitation on Apache ActiveMQ

• The Necessity of Security Best Practices When Implementing Generative AI

• Google’s Ad Blocker Crackdown Sparks Controversy

• Slovenian power company hit by ransomware

• Design flaw leaves Google Workspace vulnerable for takeover

• Armory simplifies deployments to AWS Lambda

• Deepfake Digital Identity Fraud Surges Tenfold, Sumsub Report Finds

• Europol arrest hackers allegedly behind string of ransomware attacks

• Exploitation of Critical ownCloud Vulnerability Begins

• Ringleader of Ransomware Group in Ukraine Arrested: Europol

• Trend Micro empowers security teams to eliminate threats with new automated risk prioritization

• Decoding the Past, Securing the Future | Enhancing Cyber Defense with Historical Threat Intelligence

• Chinese Hackers Stolen Chip Designs from Major Dutch Semiconductor Company

• Hackers Behind High-Profile Ransomware Attacks on 71 Countries Arrested

• Los Angeles SIM Swapper Sentenced To 8 Years In Prison

• Ransomware Hackers Wreaking Havoc Arrested In Ukraine

• 4 Key Takeaways From New Global AI Security Guidelines

• Critical Vulnerability Found In Ray AI Framework

• Critics Of Serbia’s Government Targeted With Military-Grade Spyware

• Helping companies defend what attackers want most – their data

• Amazon One Enterprise Enables Palm-Based Access to Physical Locations, Digital Assets

• Los Angeles SIM Swapper Sentenced to 8 Years in Prison

• Critical Vulnerability Found in Ray AI Framework

• A Step-by-Step Guide to Migrating from Legacy VPN to ZTNA

• Chinese Hackers Lurked for Over Two Years to Steal NXP’s Chipmaking IP

• Sumo Logic accelerates troubleshooting and security across AWS environments

• Paladin Cloud unveils Prioritization Engine for Cloud Security

• Ethyrial: Echoes of Yore Hit by Ransomware, Player Accounts Deleted

• A Comprehensive Guide to Cloud Monitoring Tools: Ensuring Optimal Performance and Security

• Heimdal Collaborates with Microsoft to Match Evolving Market Needs

• Defending your voice against deepfakes

• Europol shutters ransomware operation with kingpin arrests

• Reasons your WAN is Failing You, and What You Can You Do about It

• Phil’s Food for Thought – Career Development

• Challenges, Trends and Opportunities for Healthcare Cybersecurity Leaders

• From Vacation to Volunteer: How Hawaii Has Our Hearts and Our Help

• AI Gets a Legal Gift for Thanksgiving

• Design Flaw in Google Workspace Could Let Attackers Gain Unauthorized Access

• Transform Your Data Security Posture – Learn from SoFi’s DSPM Success

• What is threat hunting?

• Broadcom Completes the $61 Billion Acquisition of VMware

• Exploring VPN Alternatives: Secure Solutions

• Daixin Team group claimed the hack of North Texas Municipal Water District

• Datadog enhances Security Inbox to help DevOps teams improve security posture

• IBM partners with AWS to optimize data management for AI workloads

• Nvidia Sued After Engineer Shows Trade Secrets On Video Call

• Telegram’s Bans on Extremist Channels Aren’t Really Bans

• 16-30 September 2023 Cyber Attacks Timeline

• Cybercriminals Hesitant About Using Generative AI

• AWS brings Amazon One palm-scanning authentication to the enterprise

• Critical ownCloud flaw under attack (CVE-2023-49103)

• Key Cybercriminals Behind Notorious Ransomware Families Arrested in Ukraine

• How Hackers Phish for Your Users’ Credentials and Sell Them

• Iran launches cyber attack on water authority in the United States

• How Does NIST’s AI Risk Management Framework Affect You?

• QR Code Phishing –What Is It?

• Australian SMBs Feel the Cyber Security Heat: Here’s What IT Pros Can Do to Help

• ownCloud vulnerability can be used to extract admin passwords

• Ardent Hospitals Diverting Patients Following Ransomware Attack

• Ukrainian ransomware gang behind high-profile attacks dismantled

• Americans Receive Two Billion Spam Calls Per Month

• Board Support Critical For Robust Cybersecurity Defence – Trellix

• Hackers Can Exploit ‘Forced Authentication’ to Steal Windows NTLM Tokens

• Stop Identity Attacks: Discover the Key to Early Threat Detection

• CISA Warns Congress on Chemical Industry Terror Attacks

• Healthcare provider Ardent Health Services disclosed a ransomware attack

• Another Look at Accountability in Cybersecurity

• Ddostf DDoS Botnet Malware Targets MySQL Servers

• SMBs face surge in “malware free” attacks

• Ukraine Police Dismantle Major Ransomware Group

• A bird’s eye view of your global attack surface

• CrowdStrike Endpoint Protection: Solution Overview

• Disable Windows Event Logging – Security Spotlight

• Google Drive Users Files Suddenly Disappeared, Tech Gaint Investigating

• Amazon One Enterprise palm-based identity service improves security of physical spaces, digital assets

• India’s CERT given exemption from Right To Information requests

• Stop panic buying your security products and start prioritizing

• How passkeys are reshaping user security and convenience

• Guarding the gateway: Securing dispersed networks

• N. Korean Hackers ‘Mixing’ macOS Malware Tactics to Evade Detection

• The Role of the CISO in Digital Transformation

• Rethinking shift left: How a lack of context creates unnecessary friction between AppSec and Developers

• Generative AI security: Preventing Microsoft Copilot data exposure

• Product showcase: New ESET Home Security

• Report: The state of authentication security 2023

• Quantum Computing Unleashed: Exploring the Possibilities

• ‘Serial cybercriminal and scammer’ jailed for 8 years, told to pay back $1.2M

• Earthquakes, Cyber Breaches, and Mitigating Disasters through Design

• Safeguarding Healthcare: A Closer Look at the Major Trends in the Health IT Security Market

• Beyond Goals: Developing Systems for Success in Tech

• CISA, NCSC Offer a Road Map, Not Rules, in New Secure AI Guidelines

• Cyber Threats to Watch Out for in 2024

• Next stop, the future.

• Ukraine detains Victor Zhora, former top government cyber official

• DEF CON 31 – Noam Moshe’s, Sharon Brizino’s ‘Exploiting OPC UA – Practical Attacks Against OPC UA Architectures’

• IT Security News Daily Summary 2023-11-27

• Multiple Vulnerabilities Found In ownCloud File Sharing App

• Threat actors targeting critical OwnCloud vulnerability

• IndiHome – 12,629,245 breached accounts

• Ardent Health Hospitals Disrupted After Ransomware Attack

• General Electric, DARPA Hack Claims Raise National Security Concerns

• CyberTalk Series: MSP and MSSP SaaS Security and Management Challenges in 2023 and Goals for 2024 with George Smith

• How generative AI will enhance cybersecurity in a zero-trust world

• The 3 biggest risks from generative AI – and how to deal with them

• Section 702 Surveillance Reauthorization May Get Slipped Into ‘Must-Pass’ NDAA

• Sustainability 101: What is the circular economy?

• Ukraine’s intelligence service hacked Russia’s Federal Air Transport Agency, Rosaviatsia

• Randall Munroe’s XKCD ‘Thanksgiving Arguments’

• Guardians of the Cloud: Navigating the Advanced Frontiers of Cybersecurity

• Canada, U.S. sign international guidelines for safe AI development

• Microsoft Defender Lures Researchers With Bug Bounty Program

• General Electric Probes Security Breach as Hackers Sell DARPA-Related Access

• Resilience in a Time of Uncertainty: National Chemical Security During the CFATS Lapse

• Transforming career development through AI

• How We Fundraise

• Digital Rights Updates with EFFector 35.15

• Russia Places Meta Spokesman On Wanted List

• Algorithms soon will run your life – and ruin it, if trained incorrectly

• Trio of major holes in ownCloud expose admin passwords, allow unauthenticated file mods

• Ransomware ‘catastrophe’ at Fidelity National Financial causes panic with homeowners and buyers

• Vulnerability Summary for the Week of November 20, 2023

• How to Handle Retail SaaS Security on Cyber Monday

• Advertising Exodus To Cost Elon Musk’s X $75m – Report

• Securing the Cloud: Navigating the Frontier of Cloud Security

• Australia directs businesses to apply critical security patches faster

• Businessman Warns People To “Never Ever” Buy Anything From Facebook Advertisers After Deepfake Scam

• Hamas-Linked APT Wields New SysJoker Backdoor Against Israel

• Meta Sued for Ignoring its Underage Kids Problem (Because Money)

• Cyberattack on legal tech provider causing widespread disruption to UK law firms

• Building a greener tomorrow: the power of partnerships

• Critical ownCloud Flaws Lead to Sensitive Information Disclosure, Authentication Bypass

• Top 5 Questions from the World’s Largest CMMC Event

• UK, South Korea Warn of North Korea Supply-Chain Attacks

• Cybersecurity Incident Hits Fidelity National Financial

• Konni RAT Malware Campaign Spreads Via Malicious Word Files

• US, UK, Others Agree ‘Secure By Design’ AI

• Leader Of Killnet Crew Unmasked By Russian State Media

• Do Kwon’s Extradition Approved, But Destination Is Unclear

• ownCloud Flaws Lead To Sensitive Info Disclosure, Auth Bypass

• Hackers Hijack Industrial Control System At US Water Utility

• Appscook Data Breach: App Used by Hundreds of Schools Leak Children’s Data

• AWS re:Invent grabs the spotlight, with cloud, cybersecurity and AI in a business focus

• Fortanix Key Insight discovers and remediates data security risks in hybrid multicloud environments

• SysJoker Malware: Hamas-Related Threat Expands With Rust Variant

• GE servers hacked n DARPA Military Info Leaked

• New Alerts Issued For CitrixBleed Flaw Following Active Exploits

• Binance Founder Zhao Pleads To Leave United States

• ChatGPT Applications: Unleashing the Potential Across Industries

• CRN Names Check Point’s Christina Ruth to its 2023 Channel Women on the Rise List

• Iranian hacker group Cyber Av3ngers hacked the Municipal Water Authority of Aliquippa in Pennsylvania

• Henry Schein Again Restoring Systems After Ransomware Group Causes More Disruption

• Private Data Of 185,000 Customers Stolen in AutoZone Cyber Attack

• You Don’t Need to Turn Off Apple’s NameDrop Feature in iOS 17

• Study Finds Amazon, eBay and Afterpay as Top Android User Data Collectors

• DPRK Hackers Exploit MagicLine4NX Zero-day in Supply Chain Attacks

• NukeSped Malware Exploiting Apache ActiveMQ Vulnerability

• A New Telekopye Bots That Tricks Users to Steal Payment Details

• Cybersecurity tool investments are rising in Asia-Pacific as Cyberattacks grow

• How generative AI  will enhance cybersecurity in a zero-trust world

• Data De-Identification: Balancing Privacy, Efficacy & Cybersecurity

• Return to Sender: Why DMARC is no longer a “nice to have”

• Leader of pro-Russia DDoS crew Killnet ‘unmasked’ by Russian state media

• Hacktivism: What’s in a Name… It May be More Than You Expect

• US, UK Cybersecurity Agencies Publish AI Development Guidance

• Data Breach Threat: OwnCloud Users Urged to Patch Vulnerabilities Now

• Australia’s Cyber Strategy: No Ransomware Payment Ban

• Crypto Investors Face Nearly $1M in Losses Due to Rug Pull Schemes

• Veracode’s latest innovations help developers enhance cloud-native security

• Small Business Cybersecurity Hampered by Fear of Change, Judgement

• Security is an Economically Resilient Market: Strategies for Uncertain Times

• Released: AI security guidelines backed by 18 countries

• The Importance of DevOps Engineers for Your Business

• Managing SELinux Policies: Implementing and Customizing

• PyPI Malicious Packages with Thousands of Downloads Targeting Python Developers

• Cyber Security Today, Nov. 27, 2023 – Ransomware gang posts data stolen from a Canadian POS provider, and more

• Experts Uncover Passive Method to Extract Private RSA Keys from SSH Connections

• UK, Korea Warn of DPRK Supply Chain Attacks Involving Zero-Day Flaws

• Fidelity National Financial Takes Down Systems Following Cyberattack

• Elon Musk To Meet Israeli President Amid Anti-Semitism Row

• Hackers compromised sensitive data of Rivers Casino employees and customers

• Silicon In Focus Podcast: Tech and Mental Health

• Nissan To Invest £3bn, Switch All UK Models To Full Electric

• Konni Group Uses Weaponized Word Documents to Deliver RAT Malware

• Hackers Hijack Industrial Control System at US Water Utility

• Trellix accelerates threat detection and response with GenAI capabilities

• Leader of pro-Russia DDoS crew Killnet unmasked by Russian state media

• Guarding the Grid: Navigating the Current and Future Landscape of Utility Cybersecurity

• PoC for Splunk Enterprise RCE flaw released (CVE-2023-46214)

• MDP warns parents about this iOS feature

• Modern Attack Surface Management for Cloud Teams

• NIST NCCoE Publishes Cybersecurity Framework Profile for Hybrid Satellite Networks

• KyberSwap Says Hackers Stole $55m in Crypto

• Education is the foundation of modern cyber defence

• Computer Equipment Disposal policy

• Keep Web Traffic Streamlined and Safe With This $29.99 DNS

• Ransomware-hit British Library: Too open for business, or not open enough?

• UK Publishes First Guidelines on Safe AI Development

• General Electric Investigates Alleged DARPA Breach

• MOVEit Hack : Over 185,000 AutoZone Users Personal Data Hacked

• A week in security (November 20 – November 26)

• Balancing Simplicity and Security in the Digital Experience

• The hack of MSP provider CTS potentially impacted hundreds of UK law firms

• U.S., U.K., and Global Partners Release Secure AI System Development Guidelines

• OpenSSL 3.2.0 released: New cryptographic algorithms, support for TCP fast open, and more!

• North Korean Hackers Exploiting Zero-day Vulnerabilities & Supply Chains

• Topics to study for job in Artificial Intelligence

• DarkGate Malware-as-a-Service Evolved as Complete Toolkit

• Comprehensive Cyber Security Audit Checklist for 2024

• A Comprehensive Guide to Writing a Cyber Security Audit Report

• A Comprehensive Guide to Software Penetration Testing

• AWS Kill Switch: Open-source incident response tool

• Windows 11 new update bolsters cybersecurity of healthcare

• Crypto crasher Do Kwon’s extradition approved, but destination is unclear

• Why it’s the perfect time to reflect on your software update policy

• Security leaders on high alert as GenAI poses privacy and security risks

• Jam Tangan – 434,784 breached accounts

• Vulnerability disclosure: Legal risks and ethical considerations for researchers

• Beijing fosters foreign influencers to spread its propaganda

• Pentagon’s AI Initiatives Accelerate Hard Decisions on Lethal Autonomous Weapons

• Building cyber resilience for tomorrow’s threats

• Cyber-Physical Systems: Where the Digital and Physical Worlds Converge

• CISA and UK NCSC Unveil Joint Guidelines for Secure AI System Development

• DHS CISA and UK NCSC Release Joint Guidelines for Secure AI System Development

Generated on 2023-11-28 23:55:42.207425