IT Security News Daily Summary 2024-04-26

• Security review for Microsoft Edge version 124

• USENIX Security ’23 – UVSCAN: Detecting Third-Party Component Usage Violations in IoT Firmware

• Facebook Blasted By Regulators For Holding Onto Sensitive User Data For Too Long

• Kaiser Permanente handed over 13.4M people’s data to Microsoft, Google, others

• 7-Year-Old 0-Day in Microsoft Office Exploited to Drop Cobalt Strike

• Risk & Repeat: Change Healthcare’s bad ransomware bet

• Cyber Security Today, Week in Review for week ending Friday, April 26, 2024

• Mitigating the biggest threats in supply chain security

• Cybersecurity in the Healthcare Sector: Best Practices for Preventing Today’s Attacks

• The best security keys of 2024: Expert tested

• BeyondTrust Report: Microsoft Security Vulnerabilities Decreased by 5% in 2023

• Kaiser Permanente shared 13.4M people’s data with Microsoft Bing, Google, others

• USENIX Security ’23 – Union Under Duress: Understanding Hazards of Duplicate Resource Mismediation in Android Software Supply Chain

• Bridging the Gap: Uniting Development and AppSec

• Understanding Cybersecurity Vulnerabilities

• Network Security Architecture: Best Practices & Tools

• Experience Eco-Friendly Data Center Efficiency with Cisco’s Unified Computing System (UCS)

• What makes Starmus unique? A Q&A with award-winning filmmaker Todd Miller

• April 2024 Web Server Survey

• How to Get into Cybersecurity: A Beginner’s Guide

• Hackers Utilize Antivirus Update Mechanism to Deploy GuptiMiner Malware

• Google Enterprise Security Program offers enhanced Malware and Phishing protection

• UK AI Security Firm Darktrace Acquired By Private Equity Group

• Second time lucky for Thoma Bravo, which scoops up Darktrace for $5.3B

• Is Online Banking Truly Safe? Understanding the Safety Loopholes in Bank Websites

• UnitedHealth Paid Ransom After Massive Change Healthcare Cyber Assault

• DPRK Hackers Compromise South Korean Defense Contractors

• Banking Malware “Brokewell” Hacks Android Devices, Steals User Data

• General Motors Under Fire for Secretly Spying on Drivers

• 750 Million Vulnerable To Snooping From Chinese Keyboard Apps

• Millions Of IPs Remain Infected By USB Worm Years After Its Creators Left It For Dead

• Over 1,400 CrushFTP Instances Vulnerable To Exploited 0-Day

• Powerful Brokewell Android Trojan Allows Device Takeover

• Severe Flaws Disclosed in Brocade SANnav SAN Management Software

• Falcon Fund in Focus: Nagomi Helps Customers Maximize Their Cybersecurity Investments

• Evolving Broadband Networks with Cisco Subscriber Edge

• Despite complaints, Apple hasn’t yet removed an obviously fake app pretending to be RockAuto

• Experts warn of an ongoing malware campaign targeting WP-Automatic plugin

• Self-Spreading PlugX USB Drive Malware Plagues Over 90k IP Addresses

• Over 1,400 CrushFTP Instances Vulnerable to Exploited Zero-Day

• Powerful ‘Brokewell’ Android Trojan Allows Attackers to Takeover Devices

• Microsoft Beats Expectations Thanks To AI Investments

• Feds Bust Privacy-Centric Samourai Wallet Over BTC Money Laundering

• CISA’s Efforts Towards Software Understanding

• Cybersecurity Insights with Contrast CISO David Lindner | 4/26/24

• Agile by Design: Cybersecurity at the Heart of Transformation

• Over 850 Vulnerable Devices Secured Through CISA Ransomware Program

• Ensuring the Security and Efficiency of Web Applications and Systems

• NETGEAR buffer Overflow Vulnerability Let Attackers Bypass Authentication

• 7 Essentials Every Data Security Posture Management (DSPM) Must Have

• APIContext’s Global Cloud API Performance Report Show A Decline In Cloud API Availability

• Enhancing Cybersecurity Defenses: The role of Voice Cloning in Penetration Testing

• Integrated Residential Security Solutions to Employ in 2024

• Thoma Bravo to take UK cybersecurity company Darktrace private in $5B deal

• Cryptocurrencies and cybercrime: A critical intermingling

• New Brokewell Malware Takes Over Android Devices, Steals Data

• Darktrace to be Taken Private in $5.3 Billion Sale to Thoma Bravo

• In Other News: China Hacked Volkswagen, DDoS Service Shutdown, Rubrik IPO

• UK’s Investigatory Powers Bill to become law despite tech world opposition

• 5000+ CrushFTP Servers Hacked Using Zero-Day Exploit

• Kaiser Permanente data breach may have impacted 13.4 million patients

• Long Article on GM Spying on Its Cars’ Drivers

• Cyber Security Today, April 26, 2024 – Patch warnings for Cisco ASA gateways and a WordPress plugin

• ByteDance Would Rather Shutter TikTok US, Than Sell – Report

• AeroNet Wireless Unveils 10Gbps Internet Plan in Puerto Rico, Revolutionising Telecom Industry

• 13,142,840 DDoS Attacks Targeted Organization Around The Globe

• The ultimate cyber spring-cleaning checklist

• Cato Networks to Showcase New Security Evasion Tactics at RSA Conference 2024

• Godfather Banking Trojan Spawns 1.2K Samples Across 57 Countries

• Palo Alto Networks Outlines Remediation for Critical PAN-OS Flaw Under Attack

• New ‘Brokewell’ Android Malware Spread Through Fake Browser Updates

• 10 Critical Endpoint Security Tips You Should Know

• Hackers outsmart smart locks

• Researchers Found 18 Vulnerabilities in Brocade SANnav

• Critical WordPress Automatic Plugin Vulnerability Exploited to Inject Backdoors

• Cyber Security Headlines: Google postpones cookies, Brocade vulnerability warning, ICICI card gaffe

• Hackers Exploit Old Microsoft Office 0-day to Deliver Cobalt Strike

• Autodesk Hosting PDF Files Used in Microsoft Phishing Attacks

• Bitwarden launches passkeys support in mobile apps for Android and iOS

• 8 Binge-Worthy Cybersecurity Podcasts in 2024

• Over 1,400 CrushFTP internet-facing servers vulnerable to CVE-2024-4040 bug

• ThreatLocker Raises $115M in Series D Funding

• Cyber Security Today, April 26, 2024 – Patch warnings for Cisco ASA gateways and a WordPress plugin

• Researchers Sinkhole PlugX Malware Server With 2.5 Million Unique IPs

• Ring to Pay Out $5.6m in Refunds After Customer Privacy Breach

• Implementing ISO 27001:2022 Annex A.18 – Compliance

• Four trends to top the CISO’s packed agenda

• Microsoft Publicly Releases MS-DOS 4.0 Source Code

• Sweden’s liquor supply severely impacted by ransomware attack on logistics company

• Google Facebook ads are deceptive and information stealing

• Navigating the Rising Tide of Cyber Attacks: Lessons from recent Cyber Incidents

• New SSLoad Malware Combined With Tools Hijacking Entire Network Domain

• Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites

• Flaws in Chinese keyboard apps leave 750 million users open to snooping, researchers claim

• What is Network Pen Testing?

• Unveiling Ubuntu Noble Numbat- A Deep Dive into Desktop 24.04 LTS

• LSA Whisperer: Open-source tools for interacting with authentication packages

• Most people still rely on memory or pen and paper for password management

• What AI can tell organizations about their M&A risk

• Piping Rock – 2,103,100 breached accounts

• Breaking down the numbers: Cybersecurity funding activity recap

• New infosec products of the week: April 26, 2024

• ISC Stormcast For Friday, April 26th, 2024 https://isc.sans.edu/podcastdetail/8956, (Fri, Apr 26th)

• How to Migrate from FedRAMP Rev 4 to FedRAMP Rev 5

• OpenAI’s GPT-4 Can Autonomously Exploit 87% of One-Day Vulnerabilities, Study Finds

• How to change your IP address, why you’d want to – and when you shouldn’t

• NodeZero: Testing for Exploitability of Palo Alto Networks CVE-2024-3400

• Cops cuff man for allegedly framing colleague with AI-generated hate speech clip

• North American Developers Optimistic About Generative AI and Code Security

• IT Security News Daily Summary 2024-04-25

• Ring dinged for $5.6M after, among other claims, rogue insider spied on ‘pretty girls’

• AeroNet Wireless Launches 10Gbps Internet Plan: A Landmark Moment in Puerto Rico’s Telecommunications Industry

• Rubrik’s shares end trading up almost 16% on the company’s public debut

• Health insurance giant Kaiser will notify millions of a data breach after sharing patients’ data with advertisers

• CISA adds Cisco ASA and FTD and CrushFTP VFS flaws to its Known Exploited Vulnerabilities catalog

• What makes Starmus unique? – A Q&A with award-winning filmmaker Todd Miller

• Health insurance giant Kaiser notifies millions of a data breach

• Oracle Plans To Relocate HQ To Nashville

• USENIX Security ’23 – LibScan: Towards More Precise Third-Party Library Identification for Android Applications

• These SMBs are hot threat targets but they’re shrugging off security help

• AI Adoption Prompts Security Advisory from NSA

• N.A. Developers Optimistic About Generative AI and Code Security

• Net neutrality has been restored

• The Role of Threat Intelligence in Financial Data Protection

• The private sector probably isn’t coming to save the NVD

• disaster recovery (DR)

• North Korea’s Lazarus Group Deploys New Kaolin RAT via Fake Job Lures

• Cyber Hygiene Helps Organizations Mitigate Ransomware-Related Vulnerabilities

• Rubrik’s shares climb 20% in its public debut

• Two cuffed in Samourai Wallet crypto dirty money sting

• Meta Declines On Heavy AI Spending Plans, Despite Strong Q1

• Analyze Malicious Powershell Scripts by Running Malware in ANY.RUN Sandbox

• Women in Cybersecurity: ISC2 Survey Shows Pay Gap and Benefits of Inclusive Teams

• Is Your VPN Safe? Or Can It be Hacked?

• Wordfence Intelligence Weekly WordPress Vulnerability Report (April 15, 2024 to April 21, 2024)

• Facebook end to end encryption a Boon or a Bane

• Google Delays Removal Of Third-Party Cookies, Again

• “Junk gun” ransomware: the cheap new threat to small businesses

• A Five-Phase Strategy for Embracing Industry 4.0 with Cisco

• The CISO’s Top Priority: Elevating Data-Centric Security

• Predictive Security Startup BforeAI Raises $15 Million

• It’s All About Data: How to Drive Secure Use of AI

• ToddyCat APT Is Siphoning Data on ‘Industrial Scale’

• Discord Users’ Privacy at Risk as Billions of Messages Sold Online

• The P25 Steering Committee, the Compliance Assessment Process and Procedures Task Group (CAPPTG), and the Joint SAFECOM-NCSWIC P25 User Needs Working Group (UNWG) release Project 25 Link Layer Encryption Informational Session

• The best VPN routers of 2024

• CISA Releases Eight Industrial Control Systems Advisories

• Hitachi Energy MACH SCM

• Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC

• Multiple Vulnerabilities in Hitachi Energy RTU500 Series

• Siemens RUGGEDCOM APE1808 Devices Configured with Palo Alto Networks Virtual NGFW

• Salt Security Enhances API Security Platform with OAuth Protection Package

• Ransomware Roundup – KageNoHitobito and DoNex

• How HTTP/2 Persistent Connections Help Improve Performance and User Experience

• Phishing Campaigns Targeting USPS See as Much Web Traffic as the USPS Itself

• Tesla Posts Biggest Revenue Drop Since 2012

• Navigating the Evolving Threat Landscape: Addressing 2024 CISO and Security Team Goals with MixMode

• Check Point Awarded AI Security Innovator of the Year at GISEC

• 3 ways AI is transforming cloud security, according to experts

• CISA adds Microsoft Windows Print Spooler flaw to its Known Exploited Vulnerabilities catalog

• Russia, Iran Pose Most Aggressive Threat To 2024 Election

• Palo Alto Networks Shares Remediation Advice

• FTC Sending $5.6 Million To Ring Customers Over Security Failures

• Nation-State Hackers Exploit Cisco Firewall Zero Days To Backdoor Government Networks

• Ring agrees to pay $5.6 million after cameras were used to spy on customers

• Autodesk Drive Abused in Phishing Attacks

• Palo Alto Networks Shares Remediation Advice for Hacked Firewalls

• US Takes Down Illegal Cryptocurrency Mixing Service Samourai Wallet

• NDR in the Modern Cybersecurity Landscape

• NIST’s role in the global tech race against AI

• How to turn on Private DNS Mode on Android (and why you should)

• Russia, Iran pose most aggressive threat to 2024 elections, say infoseccers

• Cyberattack Fallout: UnitedHealth Reveals Personal Data Breach Impact

• Unveiling Vulnerabilities in Microsoft PlayReady DRM: Impact on Streaming Platforms

• Stellar Cyber and Acronis team up to provide optimized threat detection solutions for MSPs

• Google Patches Critical Chrome Vulnerability and Additional Flaws

• Beware! Zero-click RCE Exploit for iMessage Circulating on Hacker Forums

• DOJ arrested the founders of crypto mixer Samourai for facilitating $2 Billion in illegal transactions

• Interview: Cydea’s Risk Management Platform, Understanding Not Eliminating Risk

• Female Tech Duo take Flight to Dubai to Launch the future of Cyber Leadership

• State-Sponsored Espionage Campaign Exploits Cisco Vulnerabilities

• The Importance of Data Hygiene with OpenText

• Mastering VirusTotal: Certification Course

• New DragonForce Ransomware Emerged From The Leaked LOCKBIT Builder

• Ex-NSA hacker and ex-Apple researcher launch startup to protect Apple devices

• The Student-Centric Experience: Technologies

• Data Breach Search Engines

• IBM to buy HashiCorp in $6.4 billion cash deal, expanding cloud portfolio

• Edgio Client-Side Protection enables organizations to secure critical customer data

• Endpoint Security Firm ThreatLocker Raises $115 Million in Series D Funding

• Vulnerabilities Expose Brocade SAN Appliances, Switches to Hacking

• FTC Sending $5.6 Million in Refunds to Ring Customers Over Security Failures

• WhyLabs AI Control Center offers teams real-time control over their AI applications

• Dropzone AI raises $16.85 million to combat advanced AI attacks

• Talos IR trends: BEC attacks surge, while weaknesses in MFA persist

• Popular File Transfer Software CrushFTP Hit by Zero-Day Exploit

• India’s ICICI Bank exposed thousands of credit cards to ‘wrong’ users

• Coalition Finds More Than Half of Cyber Insurance Claims Originate in the Email Inbox

• AI-driven cyber attacks to be the norm within a year, say security leaders

• How a YouTube Content Filter Can Give Your District More Control

• ESET integrates with Arctic Wolf to provide greater security visibility

• Network Threats: A Step-by-Step Attack Demonstration

• Apple iPhone Q1 Sales In China Fall 19 Percent, Says Counterpoint

• JudgeO Online Code Editor Flaw Let Attackers Execute Code as Root User

• The Rise of Large-Language-Model Optimization

• Sublime Security secures $20 million to strengthen cloud email security and visibility

• DOJ Arrests Founders of Crypto Mixer Samourai for $2 Billion in Illegal Transactions

• DragonForce Ransomware Group Uses LockBit’s Leaked Builder

• Attackers Leverage Black Hat SEO Techniques to Distribute Info-Stealer Malware

• IBM Acquiring HashiCorp for $6.4 Billion

• 56% of cyber insurance claims originate in the email inbox

• 11% of Cybersecurity Teams Have Zero Women

• Cyber Security Headlines: Chinese keyboard flaws, hacked news story, TikTok on the clock

• Should CISOs Be More Empathetic Towards Salespeople?

• Dropbox announces a number of security and data protection features

• Anatomy IT’s new Security Suite targets healthcare cybersecurity threats, improves incident response

• President Biden Signs TikTok Ban Or Divest Bill Into Law

• Vulnerabilities in Microsoft’s PlayReady DRM Could Enable Illegal Movie Downloads From Streaming Services

• Ring Customers Get $5.6 Million in Privacy Breach Settlement

• What to do in the age of the critical breach

• Appdome upgrades MOBILEBot Defense for tailored WAF integration

• AuditBoard AI automates important tasks for security teams

• Online Banking Security Still Not Up to Par, Says Which?

• Cyber Attack Defenders Up For Battle: Huge Uptick In Timely Detections

• Get a Lifetime Subscription of FastestVPN for just $40

• Cyber Attack Defenders Up For Battle: Huge Uptick In Timely Attack Detections

• Google fixed critical Chrome vulnerability CVE-2024-4058

• A System Administrator’s Challenges in Patch Management

• MITRE Breached – Hackers Chained 2 Ivanti Zero-days to Compromise VPN

• Patch Now! CrushFTP Zero-day Lets Attackers Download System Files

• Report: Security Leaders Braced for Daily AI-Driven Attacks by Year-End

• ArcaneDoor Hackers Exploit Cisco Zero-Days to Breach Government Networks

• Nagomi Security raises $30 million to help security teams improve their level of protection

• Fireblocks expands DeFi suite with threat detection features

• BEC and Fund Transfer Fraud Top Insurance Claims

• Alert! Cisco Releases Critical Security Updates to Fix 2 ASA Firewall 0-Days

• Feds Accuse Founders of Cryptocurrency Mixer of ‘Large-Scale Money Laundering’

• BforeAI raises $15 million to prevent attacks before they occur

• Pakistani APT Hackers Attacking Indian Govt Entities With Weaponized Shortcut Files

• Maping NIS2 requirements to the ISO 27001:2022 framework

• “You Can’t Protect What You Can’t See” Still Rings True. Why Observability Now.

• ITDR vs ISPM: Which Identity-first Product Should You Explore?

• New Microsoft Incident Response guide helps simplify cyberthreat investigations

• 5 ways a CNAPP can strengthen your multicloud security environment

• High Performance Podcast Duo to Unveil Secrets of Success at Infosecurity Europe 2024

• Unplugging PlugX: Sinkholing the PlugX USB worm botnet

• Indian bank’s IT is so shabby it’s been banned from opening new accounts

• State-Sponsored Hackers Exploit Two Cisco Zero-Day Vulnerabilities for Espionage

• Google Postpones Third-Party Cookie Deprecation Amid U.K. Regulatory Scrutiny

• Authorities Warned that Hackers Are Exploiting Flaws in CISCO ASA VPNs

• Maximum Severity Flowmon Bug has a Public Exploit, Patch Now

• Hackers Exploit Cisco Firewall Zero-Days to Hack Government Networks

• CISA Warns of Cisco and CrushFTP Vulnerabilities Being Actively Exploited

• Ransomware Attacks Shake Automotive and Beverage Industries

• Google Meet opens client-side encrypted calls to non Google users

• Applying DevSecOps principles to machine learning workloads

• Chinese, Russian Espionage Campaigns Increasingly Targeting Edge Devices

• Sifting through the spines: identifying (potential) Cactus ransomware victims

• 25 cybersecurity AI stats you should know

• Overcoming GenAI challenges in healthcare cybersecurity

• What is Penetration Testing: A comprehensive business guide

• 73% of SME security pros missed or ignored critical alerts

• Cisco Systems Joins Microsoft, IBM in Vatican Pledge to Ensure Ethical Use and Development of AI

• ISC Stormcast For Thursday, April 25th, 2024 https://isc.sans.edu/podcastdetail/8954, (Thu, Apr 25th)

• Facebook Has Repeatedly “Interfered” With US Elections Since 2008

• Australia’s spies and cops want ‘accountable encryption’ – aka access to backdoors

• Australia’s spies and cops want ‘accountable encryption’ – aka backdoors

• Does it matter if iptables isn’t running on my honeypot?, (Thu, Apr 25th)

• Transforming Tech: Why Leadership Must Start with Our Girls in STEM

Generated on 2024-04-26 23:55:09.714868