IT Security News Daily Summary 2023-12-04

• Int’l Dog Breeding Org WALA Exposes 25GB of Pet Owners Data

• Navigating API Governance: Best Practices for Product Managers

• Fancy Bear hackers still exploiting Microsoft Exchange flaw

• Disinformation Researcher Says She Was Fired After Pressure From Facebook

• How to Secure Your Kid’s Android Device

• The Momentum, the Margin and the “Magic” with Cisco MSP Partners

• DEF CON 31 War Stories – Paz Hameiri’s ‘CON Trolling The Weather’

• Integrated Industrial Edge Compute

• Hershey phishes! – Crooks snarf chocolate lovers’ creds

• Vulnerability Summary for the Week of November 27, 2023

• Microsoft Outlook Vulnerability Exploited by Russian Forest Blizzard Group

• Randall Munroe’s XKCD ‘Typical Seating Chart’

• Exposed Hugging Face APIs Opened AI Models to Cyberattacks

• Top 13 ransomware targets in 2024 and beyond

• Tor University Challenge: First Semester Report Card

• President Biden signs Executive Order 14111

• 23andMe confirms hackers stole ancestry data on 6.9 million users

• Why a ransomware gang tattled on its victim, with Allan Liska: Lock and Code S04E24

• Sophisticated Booking.com Scam Targeting Guests with Vidar Infostealer

• Supply-chain ransomware attack causes outages at over 60 credit unions

• These 6 Ways Will Help in Improving Your Organization’s Security Culture

• Multiple Vulnerabilities Found In Ray Compute Framework

• Google Workspace Marketplace: 4 Tips for Choosing the Best Apps

• Top Guns: Defending Corporate Clouds from Malicious Mavericks

• Ransomware Surge: 2023 Cyber Threats

• Hackers Use This New Malware to Backdoor Targets in Middle East, Africa and U.S

• Bridging the Gap Between Cloud vs On-premise Security

• Cybercriminals Escalate Microsoft Office Attacks By 53% in 2023

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• Two new versions of OpenZFS fix long-hidden corruption bug

• P2PInfect Botnet Is Now Targeting MIPS-Based IoT Devices

• Rust-Based Botnet P2Pinfect Targets MIPS Architecture

• Hackers Use Weaponized Documents to Attack U.S. Aerospace Industry

• Harnessing the Power of APIs: Shaping Product Roadmaps and Elevating User Experiences through Authentication

• Hugging Face dodged a cyber-bullet with Lasso Security’s help

• Malvertising attacks rely on DanaBot Trojan to spread CACTUS Ransomware

• Russian Pleads Guilty to Role in Developing TrickBot Malware

• Dozens of Credit Unions Experiencing Disruptions Due to Ransomware Attack on Popular Tech Provider

• Britain Nuclear site Sellafield experiences malware cyber attack

• Nvidia Promises Japan AI Support Amidst Heavy Demand

• Data Privacy and Security

• How the Denver Broncos Intercepts Cyber Threats with Check Point

• US Lawmakers Want to Use a Powerful Spy Tool on Immigrants and Their Families

• North Korean Hackers Have Stolen Over $3 Billion in Cryptocurrency: Report

• Building a Collaborative Approach to Secure the Connected World

• Update your iPhones! Apple fixes two zero-days in iOS

• ArmorCode raises $40M to consolidate security data in one place

• Accelerating Your Journey to the 128-bit Universe

• Club Cisco: Profile of 2023 CX Winners

• Exposed Hugging Face API tokens offered full access to Meta’s Llama 2

• Limiting Remote Access Exposure in Hybrid Work Environments

• OpenAI Turmoil Sparks an Urgent Debate: Can AI Developers Effectively Self-Regulate?

• ArmorCode raises $40 million to help companies ship secure software

• MPs Warn Over Digital Pound Plan Stability Risks

• Stellar Cyber Bridges Cybersecurity Skills Gap with First-of-Its-Kind University Program

• Master the Art of Data Security: A Complete Guide To Securing Data at Rest on Amazon S3

• CyberAv3ngers hit Unitronics PLCs at multiple US-based water facilities

• New BLUFFS Bluetooth Attack Expose Devices to Adversary-in-the-Middle Attacks

• 9 online scams to watch out for this holiday season

• Check Point Secures Broncos Country

• UEFI Flaws Allow Bootkits To Pwn Devices Using Images

• EU Lawmakers Finalize Cyber Security Rules That Panicked Devs

• SugarGh0st RAT Use Targets South Korea And Uzbekistan

• PSA: Fake CVE-2023-45124 Phishing Scam Tricks Users Into Installing Backdoor Plugin

• New Relic Says Hackers Accessed Internal Environment Using Stolen Credentials

• ICS at Multiple US Water Facilities Targeted by Hackers Affiliated With Iranian Government

• SQL Brute Force Leads to BlueSky Ransomware

• Project PowerUp – Helping to keep the lights on in Ukraine in the face of electronic warfare

• Kubernetes DaemonSet: Practical Guide to Monitoring in Kubernetes

• Check Point Research Report: Iranian Hacktivist Proxies Escalate Activities Beyond Israel

• UAE CISOs Highlights their Rampant Gaps in Cybersecurity

• Cyber Security Today, Dec. 4, 2023 – A warning to water treatment utilities, a boot vulnerability could affect millions of PCs, and more.

• EU Council and Parliament Reach Agreement on Cyber Resilience Act

• Sekoia.io achieves PCI-DSS compliance

• AI and Trust

• What are ‘Credential Stuffing’ Attacks and 2-Step Verification?

• US Officials To Visit Taiwan To ‘Explain’ China Chip Controls

• New P2PInfect Botnet MIPS Variant Targeting Routers and IoT Devices

• Make a Fresh Start for 2024: Clean Out Your User Inventory to Reduce SaaS Risk

• US Commerce Chief: China ‘Not Our Friend’

• Inside America’s School Internet Censorship Machine

• Social media giants to testify over failing to protect kids

• Check Point Research Report: Shift in Cyber Warfare Tactics – Iranian Hacktivist Proxies Extend Activities Beyond Israel

• Understanding Mobile Payment Security

• Tripwire Patch Priority Index for November 2023

• IT Professionals in ASEAN Confronting Rising Cyber Security Risks

• LockBit on a Roll – ICBC Ransomware Attack Strikes at the Heart of the Global Financial Order

• Kaspersky Security Bulletin 2023. Statistics

• 3 security best practices for all DevSecOps teams

• Booking.com customers targeted in hotel booking scam

• Staples Hit With Disruption After Cyber-Attack

• Spotify To Axe 1,500 Jobs In Cost-Cutting Drive

• Russian Developer Pleads Guilty to Trickbot Conspiracy

• New Employee Checklist and Default Access Policy

• A week in security (November 27 – December 3)

• US Confirms Iranian Attacks on Water Companies

• Three Apologises After Outage Affects Tens Of Thousands

• LogoFAIL: UEFI Vulnerabilities Expose Devices to Stealth Malware Attacks

• Flying Blind: Is your Vulnerability Management program working?

• Application Security Trends & Challenges with Tanya Janca

• Zyxel fixed tens of flaws in Firewalls, Access Points, and NAS devices

• Imperva & Thales: Pioneering a New Era in Cybersecurity

• EU lawmakers finalize cyber security rules that panicked open source devs

• Ransomware news currently trending on Google

• Understanding Mobile Network Hacking: Risks, Methods, and Safeguarding Measures

• 2023 Gartner® Market Guide for Security, Orchestration, Automation and Response Solutions

• Put guardrails around AI use to protect your org, but be open to changes

• Entertainment Transformed: The Impact of Technology

• The AI readiness race and where global companies stand

• Microsoft Warns of Malvertising Scheme Spreading CACTUS Ransomware

• New Relic’s cyber-something revealed as attack on staging systems, some users

• 2024 cybersecurity outlook: The rise of AI voice chatbots and prompt engineering innovations

• Maximizing cybersecurity on a budget

• SQL Brute Force leads to Bluesky Ransomware

• What it means — CitrixBleed ransom group woes grow as over 60 credit unions, hospitals…

• IT Security News Daily Summary 2023-12-03

• Identifying Insider Threats: Addressing the Top Five Insider Threat Indicators

• New Agent Raccoon malware targets the Middle East, Africa and the US

• US Man Jailed 8 Years for SIM Swapping and Apple Support Impersonation

• Breaches happen: It’s time to stop playing the blame game and start learning together

• DEF CON 31 – Daniel Avinoam’s ‘Staying Undetected Using The Windows Container Isolation Framework’

• How to Do a Risk Analysis Service in a Software Project

• Employee Stress Puts Data in Danger

• 23andMe Reports Hackers Accessed “Significant Number” of Ancestry Files

• US Govt’s OFAC Sanctions North Korea-based Kimsuky Hacking Group

• Reminder: Google Has Started to Purge Inactive Accounts

• U.S. Seizes Sinbad Crypto Mixer Tied to North Korean Hackers

• Rising Tide of Cyber Threats: Booking.com Faces Surge in Customer Hacking Incidents

• 2023’s Dark Horse Cyber Story: Critical Infrastructure Attacks

• How to Not Get Hacked by a QR Code

• Week in review: PoC for Splunk Enterprise RCE flaw released, scope of Okta breach widens

• SoarGames – 4,774,445 breached accounts

• DEF CON 31 – War Stories – Taiiwo’s, Artorias’, Puck’s, TheClockworkBird’s ‘Cracking Cicada 3301’

• Security Affairs newsletter Round 448 by Pierluigi Paganini – INTERNATIONAL EDITION

• Breaches by Iran-Affiliated Hackers Spanned Multiple U.S. States, Federal Agencies Say

Generated on 2023-12-04 23:55:41.100719