IT Security News Daily Summary 2023-12-14

• New Hacker Group GambleForce Hacks Targets with Open Source Tools

• 1Password now lets you ditch the master password in favor of a passkey

• Russian APT exploiting JetBrains TeamCity vulnerability

• Unified Endpoint Management (UEM): What is it and What’s New?

• Microsoft seizes websites used to sell phony email accounts to Scattered Spider and other crims

• Facebook Quietly Introduces Feature Accused Of Censoring Content

• How To Implement Data Management Into Your AI Strategy

• How Can DSPM Prevent High-Profile Breaches?

• Randall Munroe’s XKCD ‘DateTime’

• A personal Year in Review to round out 2023

• A Practitioner’s Guide to Security-First Design

• Below the Surface Winter 2023

• Pope Francis Urges Binding Global Treaty To Regulate AI

• 9 cybersecurity trends to watch in 2024

• Ten Years Later, New Clues in the Target Breach

• Siemens Simantic S7-1500 CPU family

• Siemens OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC

• Siemens User Management Component (UMC)

• Siemens SCALANCE and RUGGEDCOM M-800/S615 Family

• Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1

• Microsoft Busts Black Market for 100s of Millions of Fraudulent Accounts

• Microsoft’s Digital Crime Unit Goes Deep on How It Disrupts Cybercrime

• Big Brands Increase Ad Spend On Instagram, Amid X Boycott

• How Sandboxes Help Security Analysts Expose Script-Based Attacks

• Understanding and protecting against DNS threats with Avast

• massive open online course (MOOC)

• Johnson Controls Kantech Gen1 ioSmart

• Cambium ePMP 5GHz Force 300-25 Radio

• FortiGuard Releases Security Updates for Multiple Products

• Wordfence Intelligence Weekly WordPress Vulnerability Report (December 4, 2023 to December 10, 2023)

• China to lock down GPS data for security concerns

• Accelerating security outcomes with a cloud-native SIEM

• Google Forms Used in Call-Back Phishing Scam

• Microsoft’s December 2023 Patch Tuesday Includes Four Critical Flaws

• Surveillance Cameras Disguised as Clothes Hooks

• New Threat Actor Uses SQL Injection Attacks to Steal Data From APAC Companies

• Bitdefender Scamio helps users verify fraudulent online schemes

• Russia-linked APT29 spotted targeting JetBrains TeamCity servers

• Microsoft Targets Threat Group Behind Fake Accounts

• Photos: CyberMarketingCon 2023

• 116 Malware Packages Found on PyPI Repository Infecting Windows and Linux Systems

• Apple To Overhaul ‘Confusing’ iPad Family – Report

• Supply chain attack targeting Ledger crypto wallet leaves users hacked

• Custom GPTs Might Coarse Users into Giving up Their Data

• China Launches Probe into Geographic Data Security

• Secure Code Warrior collaborates with Netskope to accelerate software development

• Cozy Bear Hackers Target JetBrains TeamCity Servers in Global Campaign

• Splunk: AI isn’t making spear phishing more effective

• LockBit Ransomware Targets German Energy Agency Dena

• New Surveillance Reform Bill Raises Concerns Regarding Americans Data Privacy

• DNSFilter Malicious Domain Protection identifies risky domains

• New Pierogi++ Malware by Gaza Cyber Gang Targeting Palestinian Entities

• What We’ve Learned from Media Cloud Adoption Trends

• Gaza Cybergang | Unified Front Targeting Hamas Opposition

• Best way to upload your photos to iCloud

• InsideBitcoins Review – Best Platform To Catch Up on Crypto News?

• BazarCall Attack Weaponizing Google Forms to Appear Legitimate

• Chinese Hackers Seized Outdated Routers for Covert Data Transfer

• MITRE Reveals EMB3D, a Threat Model for Embedded Devices in Critical Infrastructure

• Poisoned AI Coding, Assistant Tools Opens Application to Hack Attack

• Chinese APT Volt Typhoon Linked To Unkillable SOHO Router Botnet

• Trains Were Designed To Break Down After Third Party Repairs, Hackers Find

• Imperva Detects Undocumented 8220 Gang Activities

• Lazarus Hackers Exploit 2-Year-Old Log4j Vulnerability to Deploy New RAT Malware

• Toyota Data Breach Compromises Customer`s Financial Data

• Russia joins North Korea in sending state-sponsored cyber troops to pick on TeamCity users

• Emerging Technologies, Evolving Threats: Strategies for Future-Proofing Data Security

• GuidePoint Security introduces Identity as a Service offering

• Operational Technology Cybersecurity for Automotive Industry: Learnings From an IBM OT Security Architect

• Distributional wants to develop software to reduce AI risk

• Microsoft seized the US infrastructure of the Storm-1152 cybercrime group

• Research Shows 163% ROI with Palo Alto Networks Software Firewalls

• Harry Coker Confirmed As National Cyber Director

• Dell Urges Customers To Patch Vulns In PowerProtect Products

• The U.S. Needs a Better AI Plan

• Ivanti partners with Workato to boost operational efficiency for customers

• Approval Phishing Scams Drain $1bn of Cryptocurrency from Victims

• Unveiling the New Threats: Rhadamanthys v0.5.0 A Research Overview by Check Point Research (CPR)

• Concentric AI expands Semantic Intelligence DSPM capabilities with audio and video data protection

• Apple iPhone to offer new security mode in its new iOS 17 update

• Meta Tests Opening Threads Posts On Other Platforms

• Microsoft disrupts cybercrime operation selling fraudulent accounts to notorious hacking gang

• Meet the Cisco Security Risk Score (formerly Kenna Risk Score)

• Unveiling NKAbuse: a new multiplatform threat abusing the NKN protocol

• Sandman APT Gains Traction: Chinese Hackers Amplify Cybersecurity Risks

• Russian hackers target unpatched JetBrains TeamCity servers

• Iranian State-Sponsored OilRig Group Deploys 3 New Malware Downloaders

• Recommendations that defenders can use from Talos’ Year in Review Report

• Microsoft Patch Tuesday December Addressed 33 Vulnerabilities

• Beyond the Noise: Appreciating the Quiet Work of Effective Doers

• Reimagining Network Pentesting With Automation

• Microsoft: Storm-1283 Sent 927,000 Phishing Emails with Malicious OAuth Apps

• Money-grubbing crooks abuse OAuth – and baffling absence of MFA – to do financial crimes

• Microsoft Disrupts Cybercrime Service That Created 750 Million Fraudulent Accounts

• Silicon UK Roundtable: Tech Trends for 2024

• Ofcom Proposes Ban On ‘Inflation-Linked’ Mid-Contract Price Hikes

• Russian Cyberspies Exploiting TeamCity Vulnerability at Scale: Government Agencies

• Russian SVR-Linked APT29 Targets JetBrains TeamCity Servers in Ongoing Attacks

• Ransomware takes British Library goes offline

• Avast Threat Report  shows humans are better targets that software

• Confirm strenghtens trust and security in online marketplaces

• Attackers are trying to exploit Apache Struts vulnerability (CVE-2023-50164)

• Vulnerabilities Now Top Initial Access Route For Ransomware

• Fortifying confidential computing in Microsoft Azure

• Surprise! Email from personal.
  
  information.reveal@gmail.com is not going to contain good news

• GambleForce Group Targets Websites With SQL Injection

• The SANS Holiday Hack Challenge is back!

• Cybercrime operation that sold millions of fraudulent Microsoft accounts disrupted

• Microsoft Targets Prolific Outlook Fraudster Storm-1152

• Russian Hackers Exploiting JetBrain Vulnerability to Hack Servers

• French authorities arrested a Russian national for his role in the Hive ransomware operation

• EMB3D Threat Model: Understand threats to embedded devices in critical infrastructure

• CISA Asks Public Opinion on Google Workspace Secure Configuration Baselines

• GuardRail: Open-source tool for data analysis, AI content generation using OpenAI GPT models

• US Sanctions Sinbad Mixer: Disrupting Threats Unveiled

• New Hacker Group ‘GambleForce’ Tageting APAC Firms Using SQL Injection Attacks

• Microsoft Takes Legal Action to Crack Down on Storm-1152’s Cybercrime Network

• The Emergence of AI In the Enterprise: Know the Security Risks

• The Human Firewall: Strengthening the Weakest Link in Cybersecurity

• The Rising Tide of Cybercrime as A Service (CaaS)

• Ushering in the Next Phase of Mobile App Adoption: Bolstering Growth with Unyielding Security

• Digital ops and ops management security predictions for 2024

• Reverse, Reveal, Recover: Windows Defender Quarantine Forensics

• Staying ahead in 2024 with top cybersecurity predictions

• Our Top Takeaways from 2023 Gartner� Market Guide for Microsegmentation

• BTS #19 – A Year in Review on Offensive Security, Defensive Landscapes, and Global Implications – Tyler Robinson

• Microsoft ICSpector: A leap forward in industrial PLC metadata analysis

• Organizations prefer a combination of AI and human analysts to monitor their digital supply chain

• DIY Home Security System: Your Step-by-Step Setup

• Enhancing Home Privacy with Technology: Your Digital Shield

• China-linked APT Volt Typhoon linked to KV-Botnet

• Is This the End of Geofence Warrants?

• Our favorite recipes for the holiday season – Nudge Security

• Comrades in Arms? | North Korea Compromises Sanctioned Russian Missile Engineering Company

• IT Security News Daily Summary 2023-12-13

• Facebook Sues FTC To Block Ban On Monetizing Kids’ Data

• How to Set Up a VLAN in 12 Steps: Creation & Configuration

• Speaking Freely: Dr. Carolina Are

• FLOSS for Gophers and Crabs: Extracting Strings from Go and Rust Executables

• NIST CSF Adoption and Automation

• Scammers Weaponize Google Forms in New BazarCall Attack

• New WordPress Update Addressed A POP Chain RCE Vulnerability

• New SLAM Attack Threatens Future CPUs Security

• Ransomware review: December 2023

• OpenAI Signs Axel Springer Deal To Offer News In ChatGPT

• How to use Bitwarden Identities to secure your most sensitive data

• Without Interoperability, Apple Customers Will Never Be Secure

• At a Glance: The Year in Cybersecurity 2023

• Daniel Stori’s ‘Docker Panacea’

• 12 key cybersecurity metrics and KPIs for businesses to track

• Russian Foreign Intelligence Service (SVR) Exploiting JetBrains TeamCity CVE Globally

• CISA and Partners Release Advisory on Russian SVR-affiliated Cyber Actors Exploiting CVE-2023-42793

• (20)24 x 7 Tech Trends: AI Readiness, Adoption and Integration

• New AI Safety Initiative Aims to Set Responsible Standards for Artificial Intelligence

• Taking a Proactive Approach to Mitigating Ransomware Part 2: Avoiding Vulnerabilities in SAP Applications

• WPA vs. WPA2: Upgrading Your Wi-Fi Security

• TeamCity Intrusion Saga: APT29 Suspected Among the Attackers Exploiting CVE-2023-42793

• Microsoft patches 34 vulnerabilities, including one zero-day

• Chinese APT Volt Typhoon Linked to Unkillable SOHO Router Botnet

• Russia Hacks Ukraine, Ukraine Hacks Russia — Day#658

• Strengthening identity protection in the face of highly sophisticated attacks

• Threat actors misuse OAuth applications to automate financially driven attacks

• UK At High Risk Of ‘Catastrophic Ransomware Attack’, Warns Committee

• Dutch Watchdog Sues Adobe Over Mass Collection of Citizen Data

• Apple will no longer give police users’ push notification data without a warrant

• Building inclusive AI will accelerate innovation

• Malvertisers zoom in on cryptocurrencies and initial access

• China mulls legality of AI-generated voice used in audiobooks

• This is how to protect your computers from LogoFAIL attacks

• How to Use Google’s Titan Security Keys With Passkey Support

• Google Adds Gemini Pro API to AI Studio and Vertex AI

• Hacker Group Linked to Russian Military Claims Credit for Cyberattack on Kyivstar

• UK Home Office is ignoring the risk of ‘catastrophic ransomware attacks,’ report warns

• How are the AI-powered Robocop Keeping New York’s Busiest Subway Station Safe?

• The United States is Monitoring Vulnerabilities in Bitcoin

• Visa Provisioning Intelligence predicts probability of token fraud

• Catastrophic Ransomware cyber threat looming on UK

• Tesla ‘Recalls’ Two Million Cars As Regulator Flags Autopilot Risk

• Employee Engagement And The Psychology Of Team Dynamics

• How to Use Titan Security Keys With Passkey Support

• Google Adds Gemini API to AI Studio and Vertex AI

• 9 Best Next-Generation Firewall (NGFW) Solutions for 2024

• Nearly A Million Non-Profit Donors’ Details Left Exposed In Unsecured Database

• MITRE Unveils EMB3D Threat Model for Embedded Devices Used in Critical Infrastructure

• Apple Testing New Stolen Device Protection Feature for iPhones

• Stopping Lateral Movement Means Identifying the Small Hops That Take Attackers Far

• DNSFilter introduces new capability to filter generative AI

• BazaCall Phishing Scammers Now Leveraging Google Forms for Deception

• Ukraine’s Cyberattack Cripples Russia’s Tax System

• Best practices for cloud configuration security

• Final Patch Tuesday Of 2023 Goes Out With A Bang

• Think Tank Report Labels NSO, Lazarus As Cyber Mercenaries

• Apple Sets Trap To Catch iMessage Impersonators

• Cyberattack Cripples Ukraine’s Largest Telecom Provider

• Zscaler launches Business Insights for smarter SaaS management and office optimization

• Common Sense Privacy protects consumer privacy with AI-powered software platform

• MITRE Launches Critical Infrastructure Threat Model Framework

• CALISTO doxxing: Sekoia.io findings concurs to Reuters’ investigation on FSB-related Andrey Korinets

• Judge Overturns Centripetal Patent Fine Against Cisco

• Dashlane launches passwordless login – for new users only so far

• Tonsley Innovation District Attracting Global Attention

• OAuth apps used in cryptocurrency mining, phishing campaigns, and BEC attacks

• Are HTTP Content-Security-Policy (CSP) Headers Sufficient to Secure Your Client Side?

• How Google is Using Clang Sanitizers to Make Android More Secure

• Clang Sanitizers: Keeping Your Code Clean and Secure

• FCC Warns Carriers to Protect Customers Against SIM Swaps

• AI and Blockchain Convergence: A Game Changer in the Digital Sector

• 17 Risky Apps Threatening Your Smartphone Security

• Russia Set to Ramp Up Attacks on Ukraine’s Allies This Winter

• Quishing: New Sophisticated Phishing Attacks on the Rise

• Sophos Firewall Code Injection Flaw: Let Attackers Execute Remote Code

• Apple introduces protection to prevent thieves from getting your passwords

• What Should We Expect for State and Local Government IT Priorities in 2024?

• Why a Master’s in Cyber Security is Your Ticket to a Thriving Career

• Learning the safety language of the cloud

• CISA Seeks Public Opinion on Google Workspace Secure Configuration Baselines

• Zero Networks Raises $20 Million to Secure Access to Enterprise Assets

• Cofense Adds Vishing Simulation to its Popular PhishMe® Email Security Awareness Training

• Attack Surface Management: What is it? Why do you need it?

• Inside the Challenges of XDR Implementation and How to Overcome Them

• Cyber Security Today for Wednesday, Dec. 13, 2023 – Mystery surrounds the outage at a ransomware gang’s site, and more

• Veeam adds BaaS capabilities for Veeam Backup for Microsoft 365

• SAFE Materiality Assessment Module identifies top cyber risk scenarios

• Google Using Clang Sanitizers to Protect Android Against Cellular Baseband Vulnerabilities

• Drata unveils Third-Party Risk Management offering to help security teams identify risks

• Attackers abuse OAuth apps to initiate large-scale cryptomining and spam campaigns

• 1,450+ pfSense Servers Vulnerable to Remote Code Execution Attacks via Exploit Chain

• Microsoft’s 2023 Final Patch: 34 Vulnerabilities Including Critical 0-Day Fixed

• Cloud Engineer Sentenced for Deleting Ex-employer’s Code Repos & Logs

• Guardz collects $18M to expand its AI-based security platform for SMBs

• Cisco XDR: SLEDs “SOC in a Box”

• Cybersecurity career training for the real world

• Surveillance by the US Postal Service

• Expanding Reach and Reducing Costs: Cato Enhances Capabilities with Latest Third-Party Integrations

• Versions 14 and 13 of Android are Vulnerable to New Lock Screen Bypass Exploits

• How to Analyze Malware’s Network Traffic in A Sandbox

• UK at High Risk of Catastrophic Ransomware Attack, Government Ill-Prepared

• X Ad Sales Projected To Fall More Than 50 Percent – Report

• Harry Coker Confirmed as National Cyber Director

• Chrome 120 Update Patches High-Severity Vulnerabilities

• Superconductor Claim Labelled ‘Baseless’ By South Korea Experts

• How ransomware gangs are engaging — and using — the media

• A Critical Remote Code Execution(RCE) Vulnerability in Apache Struts2 Flaw Puts Your Web Apps at Risk

• EOL Sophos firewalls get hotfix for old but still exploited vulnerability (CVE-2022-3236)

• Microsoft Warns of Hackers Exploiting OAuth for Cryptocurrency Mining and Phishing

• Sophos backports fix for CVE-2022-3236 for EOL firewall firmware versions due to ongoing attacks

• 1-15 October 2023 Cyber Attacks Timeline

• Sophos Patches EOL Firewalls Against Exploited Vulnerability

• Nearly a million non-profit donors’ details left exposed in unsecured database

• Major Cyber Attack Paralyzes Kyivstar – Ukraine’s Largest Telecom Operator

• Microsoft Fixes 34 CVEs and One Zero-Day in December Patch Tuesday

• FakeSG campaign, Akira ransomware and AMOS macOS stealer

• Top CISOs to Follow in 2024: Germany Edition

• Which cybersecurity controls are organizations struggling with?

• UK Ministry of Defence Fined For Afghan Data Breach

• Tips for Achieving Success With a NERC CIP Audit

• Operational Resilience: What It Is and Why It’s Important

• Ukraine Claims it “Paralyzed” Russia’s Tax System

• Cyber security isn’t simple, but it could be

• December 2023 Microsoft Patch Tuesday fixed 4 critical flaws

• Python 2 EOL: Coping with Legacy System Challenges

• Rhysida Ransomware Attacking Government & IT Industries Worldwide

• Ensuring a Secure Future: Global Guidelines for AI Security

• Microsoft’s Final 2023 Patch Tuesday: 33 Flaws Fixed, Including 4 Critical

• Rhysida Ransomware targets Sony Insomniac

• Think tank report labels NSO, Lazarus, as ‘cyber mercenaries’

• Shifting data protection regulations show why businesses must put privacy at their core

• A closer look at LATMA, the open-source lateral movement detection tool

• ThreatNG open-source datasets aim to improve cybersecurity practices

• Smart Thermostats: Savings and Comfort at Your Fingertips

• Guide: Application security posture management deep dive

• Industry regulations and standards are driving OT security priorities

• American Intellectual Property Theft a $600 Billion Dollar Issue

• Home Automation for All: Enabling Independence

• How CSRD and EED are Reshaping Data Center Sustainability Reporting

• Cyberattack Cripples Ukraine’s Largest Telecom Operator

• Final Patch Tuesday of 2023 goes out with a bang

• Ukrainian military intelligence service hacked the Russian Federal Taxation Service

Generated on 2023-12-14 23:55:41.554508