IT Security News Daily Summary 2023-12-01

• Cisco Live 2023 Melbourne: Cisco U. Theatre Sessions

• Apple slaps patch on WebKit holes in iPhones and Macs amid fears of active attacks

• Java 11 to 21: A Visual Guide for Seamless Migration

• When It Comes to January 6 Lawsuits, a Court Splits Donald Trump in Two

• Cyber Security Today, Week in Review for Friday, December 1, 2023

• UEFI flaws allow bootkits to pwn potentially hundreds of devices using images

• The Qlik Cyber Attack: Why SSPM Is a Must Have for CISOs

• Accelerating Cloud-Native Data Security Deployments at Scale with Imperva’s eDSF Kit

• Randall Munroe’s XKCD ‘X Value’

• Apple Security Update Fixes Zero-Day Webkit Exploits

• U.S. Senator: What Do Our Cars Know? And Who Do They Share that Information With?

• New Tool Set Found Used Against Organizations in the Middle East, Africa and the US

• Make your WhatsApp chats even more private with a secret code. Here’s how

• 7 key OT security best practices

• Congressmen Ask DOJ to Investigate Water Utility Hack, Warning It Could Happen Anywhere

• Natural Language Processing (NLP) in AI: Top 9 Use Cases

• Latest Draft of UN Cybercrime Treaty Is A Big Step Backward

• Embracing Sustainability: Embark on the Journey to a More Sustainable Future!

• TikTok Ban Banned — Montana Loses in US Court

• South Korea Aims to be the Global Leader in Regulating Generative AI

• Apple Releases Security Updates for Multiple Products

• CISA Removes One Known Exploited Vulnerability From Catalog

• Staples Confirms ‘Cybersecurity Risk’ Disrupting Online Stores

• AI expert says report findings proof onset of ‘Terminal AI’ has begun

• Apple, Paramount Discuss Bundling Streaming Service Offer – Report

• Google to Delete Inactive Gmail Accounts From Today: What You Need to Know

• iOS 17.1.2: A seemingly boring iPhone update you need to install now

• US govt sanctioned North Korea-linked APT Kimsuky

• Are the Fears about the EU Cyber Resilience Act Justified?

• Japan Aerospace Agency hit by ransomware attacks

• Questions Surround X/Twitter, After Elon Musk Expletive-Filled Rant

• VirusTotal: Generative AI is Great at Detecting, Identifying Malware

• US readies prison cell for another Russian Trickbot developer

• Australian SMBs Faces Challenges in Cyber Security

• LogoFAIL: UEFI Vulnerabilities Unveiled

• Passkeys & Passwords: Here’s Everything You Need to Know

• CrowdStrike Demonstrates Cloud Security Leadership at AWS re:Invent 2023

• TikTok bans explained: Everything you need to know

• Apple Patches WebKit Flaws Exploited On Older iPhones

• Zoom Flaw Enabled Hijacking Of Accounts With Access To Meetings, Team Chat

• Black Basta’s Ransom Haul Tops $100M In Less Than 2 Years

• Qlik Sense Vulnerabilities Exploited In Ransomware Attacks

• Explained: Domain fronting

• Stressed Employees and Insider Threats Put Data in Danger

• Emergency Rooms Hit by Cyber Siege: Patient Diversions Spread Across Three States

• Black Basta’s Ransom Money Surpasses $100 million in Less Than Two Years

• Cactus Ransomware Exploiting Qlik Sense code execution Vulnerability

• Apple ZERO DAY Vulnerabilities For iOS, macOS- Immediately Patch Now

• Apple releases security updates for iOS, iPadOS and macOS, fixing two actively exploited zero-days

• In Other News: Utilities Targeted by Hackers, Aerospace Attacks, Killnet Leader Unmasked

• LockBit Leaked 4.5 TB Data of Shimano Industry

• AWS Security Hub and 4 Ways to Enhance Security

• Security Pros See Budget Bump, Headcount Rise in 2023

• Cyber Security Today, Dec. 1, 2023 podcast – More on Booking.com compromises

• New FjordPhantom Android Malware Targets Banking Apps in Southeast Asia

• Black Basta Ransomware gang accumulated at least $107 million in Bitcoin ransom payments since early 2022

• AI Decides to Engage in Insider Trading

• Voltron Data Theseus helps organizations solve data processing challenges

• Cable Transaction Assurance enhances the efficacy of front-line financial crime controls

• New Tool Set Found Used Against Middle East, Africa and the US

• US Judge Blocks Montana’s TikTok Use Ban

• Hackers Bypass Antivirus with ScrubCrypt Tool to Install RedLine Malware

• CISA adds ownCloud and Google Chrome bugs to its Known Exploited Vulnerabilities catalog

• New ‘Turtle’ macOS Ransomware Analyzed

• Hitachi Vantara Pentaho+ allows organizations to oversee data from inception to deployment

• Qlik Sense flaws exploited in Cactus ransomware campaign

• Insider Risk Digest: Week 47-48

• Critical Zyxel NAS vulnerabilities patched, update quickly!

• Chinese Hackers Using SugarGh0st RAT to Target South Korea and Uzbekistan

• Qakbot Takedown Aftermath: Mitigations and Protecting Against Future Threats

• Pipidae – the latest malware to take over the Mac ecosystem

• Google bins inactive accounts

• Simple Attack Allowed Extraction of ChatGPT Training Data

• WhatsApp’s New Secret Code Feature Lets Users Protect Private Chats with Password

• Discover How Gcore Thwarted Powerful 1.1Tbps and 1.6Tbps DDoS Attacks

• NCSC Urges UK Water Companies to Secure Control Systems

• Customers of online travel agency Booking.com are under attack

• Opening Critical Infrastructure: The Current State of Open RAN Security

• Silicon UK Pulse: Your Tech News Update: Episode 28

• Critical Zoom Vulnerability Let Attackers Take Over Meetings

• Hotel’s Booking.com Hacked Logins Let Attacker Steal Guest Credit Cards

• Cobalt Strike: Looking for the Beacon

• IT threat evolution in Q3 2023. Mobile statistics

• Regulator says stranger entered hospital, treated a patient, took a document … then vanished

• Apple Patches Actively Exploited iOS Zero-Days

• IT threat evolution in Q3 2023. Non-mobile statistics

• IT threat evolution Q3 2023

• Make Life Safer and Easier With This Password Manager for Just $15

• U.S. Treasury Sanctions North Korean Kimsuky Hackers and 8 Foreign-Based Agents

• Apple patches two zero-days used to target iOS users (CVE-2023-42916 CVE-2023-42917)

• UK Celebrates “World-First” Anti-Fraud Deal With Big Tech

• TechRepublic Premium Editorial Calendar: Policies, Checklists, Hiring Kits and Glossaries for Download

• U.S. Treasury Sanctions North Korean Kimsuky Hackers and 8 Foreign Agents

• How can Cloud Security Prevent Exposure of Credentials via File Sharing App?

• Internet Safety for Kids: A Parent’s Guide

• Interpol makes first border arrest using Biometric Hub to ID suspect

• Zyxel Releases Patches to Fix 15 Flaws in NAS, Firewall, and AP Devices

• Improving FLARE’s Malware Analysis Tools at Google Summer of Code 2023

• Google and Meta complain about China’s misbehavior online

• Exploring Secure Alternatives to Traditional Passwords

• Prepare, Prevent, and Response: A Comprehensive Ransomware Protection Guide

• New infosec products of the week: December 1, 2023

• Anduril’s New Drone Killer Is Locked on to AI-Powered Warfare

• Robotics and Automation: Shaping Industries for Efficiency

• Bridging the gap between cloud vs on-premise security

• Zero-Day Alert: Apple Rolls Out iOS, macOS, and Safari Patches for 2 Actively Exploited Flaws

• How mobile network automation will drive success for operators

• Key drivers of software security for financial services

• Unhappy network professionals juggling more with less

• Today’s ‘China is misbehaving online’ allegations come from Google, Meta

• The Intelligence Committees’ Proposals for a 702 Reauthorization Bill are Beyond Bad

• privacy policy

• Apple Issues Urgent Security Patches for Zero-Day Vulnerabilities

• Exploring a Critical Risk in Google Workspace’s Domain-Wide Delegation Feature

• Facebook Takes Down Thousands Of Fake Chinese Profiles Attempting To Influence Election

• Apple addressed 2 new iOS zero-day vulnerabilities

• IT Security News Daily Summary 2023-11-30

• DEF CON 31 – Maxime Clementz’ ‘Defeating VPN Always On’

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Unlocking the Full Potential of Unified SASE: An Interview with HPE’s Chris Hines

• 2023-11-30 – DarkGate activity

• Google Workspace Security: DeleFriend Vulnerability Could Allow Unwanted Access to APIs

• From Network Perimeters to Cloud Access Security Brokers to APIs: The Evolution of DLP Strategies

• How to Avoid Common Security Incidents in the Public Cloud

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Tips to Get Certified in Cybersecurity in 30 Days

• Enumeration in Cyber Security

• Uh-oh, update Google Chrome – exploit already out there for one of these 6 security holes

• Holiday Season Cyberattacks: What to Watch Out For

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• UK’s CMA Wins Appeal To Investigate Apple

• Methods of Source Code Management and Data Protection

• Critical Zoom Room bug allowed to gain access to Zoom Tenants

• Will ChatGPT write ransomware? Yes.

• Apple Patches WebKit Flaws Exploited on Older iPhones

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• $19 Stanely cups, fake Amazon Prime memberships all part of holiday shopping scams circulating

• WEBINAR: Vulnerability Risk Management – The Lynchpin of Proactive Security

• Android Banking Malware FjordPhantom Steals Funds Via Virtualization

• The Government Shouldn’t Prosecute People With Unreliable “Black Box” Technology

• Admin of $19M marketplace that sold social security numbers gets 8 years in jail

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• UK Government, Tech Giants Agree To Tackle Online Fraud

• Records vs. document management: What’s the difference?

• Trend Micro Adds AI Tool While Extending CNAPP Reach

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Simplifying SPIFFE: Accessible Workload Identity

• CISA: Threat Groups are Targeting Unitroncis PLCs in Water Systems

• Data Breach leaks employee data of Dollar Tree and Family Dollar

• Microsoft To Invest £2.5 Billion To Bolster UK AI, Data Centres

• Meta will enforce ban on AI-powered political ads in every nation, no exceptions

• Security flaws in court record systems used in five US states exposed sensitive legal documents

• Cisco Co-Selling Acceleration Made Simple

• Navigating the Complexities of Red Team and Blue Team Cybersecurity Collaboration

• Major Security Flaws in Zyxel Firewalls, Access Points, NAS Devices

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• 68% of US Websites Exposed to Bot Attacks

• Hackers Using Weaponized Invoice to Deliver LUMMA Malware

• After a week-long outage, Fidelity National Financial confirms cyberattack is now ‘contained’

• IoT Transportation Leadership Summit: Innovation on the Move

• Extracting GPT’s Training Data

• Failure of technology to detect attacks is a prime cause of breaches: Survey

• All Okta customer support users had their email addresses copied

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Why it’s time for biometric payment cards to hit the mainstream

• Broadcom To Axe 1,200 Staff After $69 Billion VMware Acquisition

• CISA Resources to Help Schools Strengthen Security and Build Resilience

• Google issues an emergency update to fix yet another zero-day exploit for Chrome. Here’s what to know

• Ex-worker phished former employer to illegally hack network and steal data

• Google Fixes a Seventh Zero-Day Flaw in Chrome—Update Now

• Good news, startups: Q3 software results are changing the tech narrative

• Three Keys to Secure-by-Design Implementation

• Associated Press, ESPN, CBS among top sites serving fake virus alerts

• Black Basta Extortion Group Racks Up $107 Million in Ransom Payments

• Generative AI’s Impact on Payments: Exploring its Significance

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Flow Security unveils GenAI DLP module to prevent data leaks in real-time

• North Korean Hackers Amass $3bn in Cryptocurrency Heists

• Yokogawa STARDOM

• Mitsubishi Electric FA Engineering Software Products

• Delta Electronics DOPSoft

• PTC KEPServerEx

• Announcing Our 2023 Partner Award Winners

• Imperva Successfully Mitigates Record-Breaking DDoS Attack in Retail Industry

• The Elephant in AppSec Podcast⎥Lack of effective DAST tools⎥Aleksandr Krasnov (Meta, Thinkific, Dropbox)

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• SDO Introduces cryptographic proximity validation for mobile push

• Dremio introduces GenAI-powered data documentation and labeling to reduce manual work

• Google Agrees To Pay Canadian News Publishers

• 2023-11-29 – email –> JinxLoader –> Formbook/XLoader

• Fortifying the Future: Safeguarding Generative AI Across the Tech Spectrum

• Canadian group gets $2.2 million to research AI threat detection for wireless networks

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• CISA urges water facilities to secure their Unitronics PLCs

• Manufacturing Top Targeted Industry in Record-Breaking Cyber Extortion Surge

• Data Management and Blockchain Technology

• Empowering Secure Access: Unleashing the Potential of Microsoft Entra ID Application Proxy

• New Cisco and Microsoft Partnership is Redefining Hybrid Work and Learning in Universities

• Black Basta Ransomware Group Received Over $100 Million From 90 Victims

• Qlik Sense Vulnerabilities Exploited in Ransomware Attacks

• Meta Takes Action Against Multiple Foreign Influence Campaigns

• What Is The Cyber Kill Chain? Process & Model

• Medical Firm Data Breach Impacts Nearly 4 million New Yorkers

• The Menace of GPS Spoofing in Aviation

• Henry Schein Data Breach: Healthcare Giant Reports Second Attack in Two Months

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Healthy forests: Tribal forestry and science innovations for disaster reduction

• Cisco expands support to Tribal Colleges and Universities

• Egress unveils graymail detection capability to improve employee productivity

• FjordPhantom Android Malware Targets Banks With Virtualization

• API World 2023: Bringing Together API, AI, and Secrets Security

• Critical ownCloud Bug Actively Exploited After Disclosure

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• RedLine Stealer Malware Deployed Via ScrubCrypt Evasion Tool

• New SugarGh0st RAT targets Uzbekistan government and South Korea

• Information is power, but misinformation is just as powerful

• Unlocking the Power of MITRE ATT&CK: A Comprehensive Blog Series on Implementation Strategies for Incident Response Teams

• Sharing the Cisco Networking Academy Vision

• Film To Tell Story Of Gary McKinnon’s Fight Against US Extradition

• 2 Municipal Water Facilities Report Falling To Hackers In Separate Breaches

• Dollar Tree Impacted By Data Breach Affecting 2 Million

• US Lawmakers Have Chinese LiDAR On Their Threat Detection Radar

• Black Basta ransomware operation nets over $100M from victims in less than two years

• Dollar Tree Impacted by ZeroedIn Data Breach Affecting 2 Million Individuals

• Palo Alto Networks Unveils New Rugged Firewall for Industrial Environments

• US Sanctions Cryptocurrency Mixer Sinbad for Aiding North Korean Hackers

• Different Types of CISOs, Diverse Missions

• ThreatNG empowers organizations to identify and mitigate their ransomware risk

• Nitrokey releases NetHSM, a fully open-source hardware security module

• Google Unveils RETVec – Gmail’s New Defense Against Spam and Malicious Emails

• US-Seized Crypto Currency Mixer Used by North Korean Lazarus Hackers

• Meta sued over forcing users to pay to stop tracking

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• SAS collaborates with AWS to help customers unlock more value from their data

• North Korea’s Lazarus Group Rakes in $3 Billion from Cryptocurrency Hacks

• This Free Solution Provides Essential Third-Party Risk Management for SaaS

• Booking.com Customers Scammed in Novel Social Engineering Campaign

• Elon Musk Tells Fleeing Advertisers To Go F*** Themselves

• The CDC’s Gun Violence Research Is in Danger

• Hundreds of Malicious Android Apps Target Iranian Mobile Banking Users

• CISA Debuts ‘Secure by Design’ Alert Series

• Google’s RETVec Open Source Text Vectorizer Bolsters Malicious Email Detection

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• CACTUS Ransomware Exploits Qlik Sense Vulnerabilities in Targeted Attacks

• 7 Uses for Generative AI to Enhance Security Operations

• CISA Warns Hackers Exploiting Wastewater Systems Logic Controllers

• Zyxel Command Injection Flaws Let Attackers Run OS Commands

• Okta Admits All Customer Support Users Impacted by Breach

• Thousands of Dollar Tree Staff Hit by Supplier Breach

• Most Popular Websites Still Allow Users To Have Weak Passwords

• North Korean Hackers Attacking macOS Using Weaponized Documents

• Go Ninja – 4,999,001 breached accounts

• Okta Admits All Customer Support Users Impacted By Breach

• Black Basta Ransomware Group Makes $100m Since 2022

• How to avoid being scammed in the run up to Christmas

• Locking down Industrial Control Systems

• DarkCasino WinRAR Exploit: A New APT Threat Emerges

• AlmaLinux Under the Hood: Key Features Every System Administrator Should Know

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• September 2023 Cyber Attacks Statistics

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• BLUFFS: new Bluetooth vulnerability discovered that affects most devices

• Weak session keys let snoops take a byte out of your Bluetooth traffic

• Very precisely lost – GPS jamming

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Rhysida ransomware group hacked King Edward VII’s Hospital in London

• U.S. Treasury Sanctions Sinbad Cryptocurrency Mixer Used by North Korean Hackers

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• What custom GPTs mean for the future of phishing

• Mosint: Open-source automated email OSINT tool

• Ethical Tech: Navigating Emerging Technologies with Integrity

• CrowdStrike CEO suggests to use AI to curb ransomware spread

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Bridging the risk exposure gap with strategies for internal auditors

• Infosec products of the month: November 2023

• Organizations can’t ignore the surge in malicious web links

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Text Message Scams: How to Recognize, Report and Restrict Them

• US lawmakers have Chinese LiDAR on their threat-detection radar

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• What is Advanced Threat Protection in Office 365 and How Does it Work?

• Rogue ex-Motorola techie admits cyberattack on former employer, passport fraud

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Reflecting on Generative AI One-Year Post ChatGPT Launch

• Privacy Group Blasts Facebook’s Paid Ad-Free Version

• Navigating the DevOps Roadmap

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

Generated on 2023-12-01 23:55:51.145393