IT Security News Daily Summary 2024-01-04

• Facebook Suspends Then Reinstates Popular Conservative Account

• Ransomware gang starts leaking data stolen from Quebec university

• Survey Surfaces Lack of Confidence in Existing Cybersecurity Tools

• X-ploited: Mandiant restores hijacked Twitter account after attempted crypto heist

• 23andMe blames its users for the massive data breach

• 10 of the biggest zero-day attacks of 2023

• USENIX Security ’23 – Sathvik Prasad, Trevor Dunlap, Alexander Ross, Bradley Reaves – ‘Diving into Robocall Content With SnorCall’

• SentinelOne Acquires PingSafe to Advance CNAPP Ambitions

• The best VPN trials of 2024

• The best Bluetooth trackers of 2024

• X marks the spot: Mandiant restores hijacked Twitter account after attempted crypto heist

• 8 hybrid cloud security challenges and how to manage them

• Legendas.TV – 3,869,181 breached accounts

• Netography Fusion Expands Microsoft Integrations for Greater Context Enrichment and Faster Compromise Detection

• Intel Spins Off Enterprise Generative AI Deployment Firm Articul8

• 8 Types of Firewalls Explained & When to Use Each

• Hacker hijacked Orange Spain RIPE account causing internet outage to company customers

• EFF Asks Court to Uphold Federal Law That Protects Online Video Viewers’ Privacy and Free Expression

• Randall Munroe’s XKCD ‘2024’

• Apple Watch Credited With Saving Woman’s Life After Poisoning

• Meta tracks your Facebook link history, but now you can opt out

• Infosec experts divided over 23andMe’s ‘victim-blaming’ stance on data breach

• To Beat Russia, Ukraine Needs a Major Tech Breakthrough

• HealthEC data breach impacted more than 4.5 Million people

• Mimecast Acquires User Education Startup Elevate Security

• Ontario healthcare providers now face possible fines for ‘severe’ data privacy violations

• Mitsubishi Electric Factory Automation Products

• Rockwell Automation FactoryTalk Activation

• CISA Releases Three Industrial Control Systems Advisories

• Law firm that handles data breaches was hit by data breach

• The Biggest Tech Talent Gap Can Be Found in the SAP Ecosystem

• Cryptocurrency wallet CEO loses $125,000 in wallet-draining scam

• Software supply chain security remains a challenge for most enterprises

• Q&A: Supporting SOC Teams and Avoiding Burnout

• Enhancing Web Security: NSFOCUS WAF Integration Solutions

• Embattled LastPass Enforcing 12-Character Passwords for All

• LastPass Enforces 12-Character Master Passwords

• Biden Admin To Award $162m To Microchip Tech For US Chip Production

• Ukraine Blames Russian Sandworm Hackers for Kyivstar Attack

• SentinelOne acquires PingSafe

• Create a Registration API in 15 minutes

• Experts found 3 malicious packages hiding crypto miners in PyPi repository

• Major Data Breach at HealthEC Affects Millions

• Microsoft To Add Copilot Key To Windows PC Keyboards

• Google Chrome Use After Free Flaw Let Attacker Hijack Browser

• IT and OT cybersecurity: A holistic approach

• Airbus Offering to Buy Atos Cybersecurity Unit for Up to $2 Billion

• Google Patches Six Vulnerabilities With First Chrome Update of 2024

• Fortifying iPhone Security: Stolen Device Protection & Essential Tips Amid Rising Theft Concerns

• SaaS Challenges and How to Overcome Them

• Ahmedabad Creates History as India’s First City With AI-Linked Surveillance System

• Cyber Security Today, January 3, 2024 – Prepare for upcoming privacy legislation

• Free Decryptor Tool Released for the Black Basta Ransomware

• Black Basta Buster Utilizes Ransomware Flaw to Recover Files

• 23andMe: It’s YOUR Fault We Lost Your Data

• Using Stronger Passwords Among Top 2024 Digital Resolutions

• Unveiling the Power of NFC Technology: Transforming Connectivity in the Digital Era

• Mandiant regains control of X/Twitter account

• Avast researchers detect a surge in fake e-shops following holidays

• Estes Express Lines Says Personal Data Stolen in Ransomware Attack

• Beyond Protocols: How Team Camaraderie Fortifies Security

• 4.5 Million Individuals Affected by Data Breach at HealthEC

• With Deepfakes on Rise, Where is AI Technology Headed?

• Intellicheck announces Identity Platform advancements

• HealthEC Data Breach Impacts 4.5 Million Patients

• LastPass is enforcing some security changes to user accounts

• Apple Settles Lawsuit Concerning iTunes Gift Card Scam

• CISA Warns of Exploited Vulnerabilities in Chrome and Excel Parsing Library

• Zero Trust in API Management

• Mastering the Art of Cyber Resilience in Operational Technology

• Millions Still Haven’t Patched Terrapin SSH Protocol Vulnerability

• SRLabs Develops Black Basta Ransomware Decryptor

• Estes Express Lines Says Personal Data Stolen In Ransomware Attack

• Hacked Mandiant X Account Abused For Cryptocurrency Theft

• Infostealer malware, weak password leaves Orange Spain RIPE for plucking

• Best of 2023: Best online .apk virus scanners – Hackernet

• A Delhi Lawyer’s Encounter Exposes Hidden Perils of SIM Swap Scam

• Three Ways To Supercharge Your Software Supply Chain Security

• Resecurity Identifies AI Tool Being Used to Compromise Business Email

• Hackers turn to generative AI to commit crime

• SpaceX Illegally Fired Staff Critical Of Elon Musk, Says US Agency

• Four Cyber Criminals Convicted of Spreading ChatGPT-Assisted Ransomware

• Crooks hacked Mandiant X account to push cryptocurrency scam

• As lawmakers mull outlawing poor security, what can they really do to tackle online gangs?

• Hacked Mandiant X Account Abused for Cryptocurrency Theft

• Identity Crisis: 14 Million Individuals at Risk After Mortgage Lender’s Data Breach

• Over 1800 global banking apps targeted by 29 malware variants

• Xerox Axes 15 Percent Of Workforce, Admits ‘Cyber Incident’

• X Account of Google Cybersecurity Firm Mandiant Hacked in Crypto Scam

• Don’t get hacked! Apply the right vulnerability metrics to Kubernetes scans

• Beware: 3 Malicious PyPI Packages Found Targeting Linux with Crypto Miners

• This company says AI can help design sustainable smart home appliances

• Industrial Defender Risk Signal integrates threat intelligence and business context

• Experts Clash Over Ransomware Payment Ban

• Active Directory Infiltration Methods Employed by Cybercriminals – ASEC Report

• Three Chinese balloons float near Taiwanese airbase

• SentinelOne acquires PingSafe to expand cloud security capabilities

• Nigerian Faces $7.5m BEC Charges After Charities Are Swindled

• OpenSSL 3.1 FIPS Module Has Been Submitted for Validation

• UAC-0050 Group Using New Phishing Tactics to Distribute Remcos RAT

• Securing Gold: Assessing Cyber Threats on Paris 2024

• Wireshark 4.2.1 Released: What’s New!

• WinRAR Flaw: LONEPAGE Malware Strikes Ukrainian Firms

• Mandiant’s Twitter Account Restored After Six-Hour Crypto Scam Hack

• DriveFS Sleuth: Open-source tool for investigating Google Drive File Stream’s disk forensic artifacts

• The dynamic relationship between AI and application development

• 15 open-source cybersecurity tools you’ll wish you’d known earlier

• EdTech Evaluation: Choosing Secure Educational Software

• Five New Year Resolutions to Secure Your Data in 2024

• Consumers prepared to ditch brands after cybersecurity issues

• The state of container security: 5 key steps to locking down your releases

• Democracy 2024: Stakes vs. Horses

• Mandiant loses control of X/Twitter account

• Building a Culture of Digital Responsibility in Schools

• Microsoft kills off Windows app installation from the web, again

• USENIX Security ’23 – Bingyu Shen, Tianyi Shan, Yuanyuan Zhou – ‘Improving Logging to Reduce Permission Over-Granting Mistakes’

• How 50% of telco Orange Spain’s traffic got hijacked — a weak password

• Cybercriminals Implemented Artificial Intelligence (AI) for Invoice Fraud

• IT Security News Daily Summary 2024-01-03

• Terrapin Flaw, CVE-2023-48795, Leaves 11 million SSH Servers Vulnerable

• Facebook Introduces New Tool To Track The Websites You Visit

• Freight giant Estes refuses to deliver ransom, says personal data opened and stolen

• Crypto losses declined over 50% in 2023

• SentinelOne Snaps up Seed-Stage CNAPP Startup PingSafe

• Aqua Security Scores $60M Series E Funding

• Scammers Selling Twitter (X) Gold Accounts Fueling Disinfo, Phishing

• What is Adversary-in-the-Middle AITM Attack?

• CISA ADDS CHROME AND PERL LIBRARY FLAWS TO ITS KNOWN EXPLOITED VULNERABILITIES CATALOG

• Comprehensive Guide to Fraud Detection, Management, & Analysis

• Human Behavior In Digital Forensics

• Hacking Protected Java-Based Programs

• What the cybersecurity workforce can expect in 2024

• Why Google Settles $5B Lawsuit Over User Tracking- Analysis

• Randall Munroe’s XKCD ‘Iceland’

• Abnormal Security Shares Examples of Attacks Using Generative AI

• Victory! Police Drone Footage is Not Categorically Exempt From California’s Public Records Law

• Over 100 European Banks Face Cyber Resilience Test

• T-Mobile US Confirms SpaceX Satellite ‘Direct to Cell’ Launch

• Power of Flexible Tech: Applying Conference Room Tech to Front Lines

• Worried about online privacy and security? This browser protects you more than Firefox

• Developers, watch your code: Official Python respository spread malicious projects

• Uncertainty Is the Biggest Challenge to Australia’s Cyber Security Strategy

• 23andMe tells victims it’s their fault that their data was breached

• Massive Fallon Ambulance Data Breach Impacts Nearly One Million People

• Canadian Senator temporarily loses control of X account

• Mend’s Handy Guide to Using EPSS Scores

• CyberTalk Series: MSP Challenges: Managed Security Services with Ken Patterson

• USENIX Security ’23 – ‘Auditing Frameworks Need Resource Isolation: A Systematic Study On The Super Producer Threat To System Auditing And Its Mitigation’

• Facebook’s New Privacy Nightmare: ‘Link History’

• Flaw in Black Basta Ransomware Exploited to Create Decryptor

• Intel Spins Out AI Firm Articul8, With DigitalBridge Backing

• Cloud-native cybersecurity startup Aqua Security raises $60M and remains a unicorn

• Three New Malicious PyPI Packages Deploy CoinMiner on Linux Devices

• SonicWall Buys Banyan Security For ZTNA Technology

• Stolen Gold X accounts are increasingly being peddled on dark web, says report

• Cyber Kidnapping picks pace in the United States

• Value Of Twitter/X Falls 71 Percent Since Elon Musk Takeover – Report

• Google, Meta, TikTok Russian Debts Removed From Bailiff Database – Report

• Montana Appeals, After Judge Blocked State Ban On TikTok Use

• Vulnerability Recap – 1/2/2024 – Barracuda ESG, Apache OfBiz Vulnerabilities Persist

• Don’t trust links with known domains: BMW affected by redirect vulnerability

• The best iOS fax app to protect your privacy

• VPN to protect against DDoS attacks on Twitch

• Atos confirms talks with Airbus over cybersecurity wing sale

• Hacker Conversations: Runa Sandvik

• Several Infostealers Using Persistent Cookies to Hijack Google Accounts

• Over 900k Impacted by Data Breach at Defunct Boston Ambulance Service

• HTTP/2 Rapid Reset Mitigation With Imperva WAF

• Records of Crucial Cases May Have Been Compromised by a Cyberattack on Victoria’s Court System

• New Google Cookies Exploit Allows Access After Password Reset

• Google Settles $5B Lawsuit Over User Tracking- Analysis

• I added a hardware security key to my MacBook, and it made my logins faster and safer

• Court Hearings Become Ransomware Concern After Breach

• October 2023 Cyber Attack Statistics

• Future Health: AI’s Impact on Personalised Care in 2024

• Exploring the Security Risks of Large Language Models

• Identity as a Service (IDaaS): The Future of Secure and Convenient Authentication

• Xerox Confirms Data Breach At US Subsidiary Following Ransomware Attack

• How A Group Of Train Hackers Exposed A Right-To-Repair Nightmare

• Qualcomm Chip Vulnerability Enables Remote Attack By Voice Call

• Palestinian Hackers Hit 100 Israeli Organizations in Destructive Attacks

• Cybersecurity M&A Roundup: 25 Deals Announced in December 2023

• “Pink Drainer” Siphons $4.4 Million Chainlink Through Phishing

• Hangzhou’s Cybersecurity Breakthrough: How ChatGPT Elevated Ransomware Resolution

• Zeppelin2 Ransomware: An Emerging Menace in the Dark Web Ecosystem

• Comcast-Owned Telcom Business ‘Xfinity’ Suffers Data Breach

• The Top 6 Cybersecurity Threats Businesses Must Tackle in 2024

• New Xamalicious Backdoor Infects 25 Android Apps, Affects 327K Devices

• Is your ID badge giving away too much about you?

• Microsoft Defender for Endpoint is Integrated with Check Point Horizon XDR/XPR

• Why effective cybersecurity is important for businesses

• CISOs Take Note — Don’t Let AI Adoption Outpace Due Diligence

• The Kubernetes Cost Features You Need in 2024

• Best of 2023: Diamond Model of Intrusion Analysis: A Quick Guide

• Fake and Stolen X Gold Accounts Flood Dark Web

• SonicWall acquires Banyan to boost zero-trust, SSE offerings

• Copy that? Xerox confirms ‘security incident’ at subsidiary

• Malware Using Google MultiLogin Exploit to Maintain Access Despite Password Reset

• 21 New Mac Malware Families Emerged in 2023

• SonicWall acquires Banyan Security

• BT Misses Deadline For Huawei Equipment Removal From Core Network

• Xerox Confirms Data Breach at US Subsidiary Following Ransomware Attack

• The Importance of SOC 2 Templates

• SMTP Smuggling: New Flaw Lets Attackers Bypass Security and Spoof Emails

• 5 Ways to Reduce SaaS Security Risks

• Hackers stole more than $81 million worth of crypto assets from Orbit Chain

• Russia Spies on Kyiv Defenses via Hacked Cameras Before Missile Strikes

• Xerox Business Solutions Reveals Security Breach

• Google Kubernetes Engine Vulnerabilities Could Allow Cluster Takeover

• Is Cybercrime Only Going to Get Worse?

• CI/CD Security: Advanced Best Practices to Secure Your Pipelines

• TechRepublic Premium Editorial Calendar: Policies, Checklists, Hiring Kits and Glossaries for Download

• VoIP Firm XCast Agrees to Settle $10m Illegal Robocall Case

• Formal ban on ransomware payments? Asking orgs nicely to not cough up ain’t working

• DOJ Slams XCast with $10 Million Fine Over Massive Illegal Robocall Operation

• As Digital Payments Explode in Popularity, Cybercriminals are Taking Notice

• Why Continuous Training Must Come Before The AI-driven SDLC

• How to Secure virtual machines (VMs) in cloud computing environments

• Understanding the Escalating Threat of Web DDoS Tsunami Attacks

• Learn How to Decrypt Black Basta Ransomware Attack Without Paying Ransom

• Cybersecurity challenges emerge in the wake of API expansion

• Emerging cybersecurity trends and expectations for 2024

• Facts and misconceptions about cybersecurity budgets

• Legal, compliance and privacy leaders anxious about rapid GenAI adoption

• 29 malware families target 1,800 banking apps worldwide

• Cybersecurity Curriculum Development Tips for Schools

• New DLL Hijacking Technique Let Attackers Bypass Windows Security

• Ukraine’s SBU said that Russia’s intelligence hacked surveillance cameras to direct a missile strike on Kyiv

Generated on 2024-01-04 23:55:34.838429