IT Security News Daily Summary 2024-04-27

• USENIX Security ’23 – Beyond Typosquatting: An In-depth Look at Package Confusion

• Godfather Banking Trojan Multiplies, Spreading to 1.2K Variants in 57 Nations

• Hackers may have accessed thousands of accounts on the California state welfare platform

• Here’s How NFTs Can Transform Asset Management

• Junk Ransomware: Getting the Job Done For Hackers

• Major phishing-as-a-service platform disrupted – Week in security with Tony Anscombe

• Breaking Down Cybersecurity: The Real Meaning Behind the Jargon

• GitGuardian Researchers Find Thousands of Leaked Secrets in PyPI (Python Package Index) Packages

• The GuptiMiner Attack: Lessons Learned from a Five-Year Security Breach

• Cryptocurrency Chaos: El Salvador’s Bitcoin Wallet Code Leaked, Privacy at Risk

• Ukraine Targeted in Cyberattack Exploiting 7-Year-Old Microsoft Office Flaw

• School Employee Allegedly Framed a Principal With Racist Deepfake Rant

• Russia Vetoed a UN Resolution to Ban Space Nukes

• What is General Data Protection Regulation Act (GDPR)?

• Thousands of Qlik Sense Servers Open to Cactus Ransomware

• Brokewell Android malware supports an extensive set of Device Takeover capabilities

• FBI: Fraudsters Using Fake Online Dating Verification Apps to Scam Lovers

• DHS Establishes AI Safety Board with Tech Titans and Experts

• Zero-Day from 2017 Used Along With Cobalt Strike Loader in Unholy Alliance

• Bogus npm Packages Used to Trick Software Developers into Installing Malware

• Cloud Monitor Automation Improves K-12 Cybersecurity Training & Awareness

• PREVIEW: CISO Series Game Show During RSA Week

• Tracking Energy Consumption at the Cisco Store

• Computer scientists unveil novel attacks on cybersecurity

• IT Security News Daily Summary 2024-04-26

• Security review for Microsoft Edge version 124

• USENIX Security ’23 – UVSCAN: Detecting Third-Party Component Usage Violations in IoT Firmware

• Facebook Blasted By Regulators For Holding Onto Sensitive User Data For Too Long

• Kaiser Permanente handed over 13.4M people’s data to Microsoft, Google, others

• 7-Year-Old 0-Day in Microsoft Office Exploited to Drop Cobalt Strike

• Risk & Repeat: Change Healthcare’s bad ransomware bet

• Cyber Security Today, Week in Review for week ending Friday, April 26, 2024

• Mitigating the biggest threats in supply chain security

• Cybersecurity in the Healthcare Sector: Best Practices for Preventing Today’s Attacks

• The best security keys of 2024: Expert tested

• BeyondTrust Report: Microsoft Security Vulnerabilities Decreased by 5% in 2023

• Kaiser Permanente shared 13.4M people’s data with Microsoft Bing, Google, others

• USENIX Security ’23 – Union Under Duress: Understanding Hazards of Duplicate Resource Mismediation in Android Software Supply Chain

• Bridging the Gap: Uniting Development and AppSec

• Understanding Cybersecurity Vulnerabilities

• Network Security Architecture: Best Practices & Tools

• Experience Eco-Friendly Data Center Efficiency with Cisco’s Unified Computing System (UCS)

• What makes Starmus unique? A Q&A with award-winning filmmaker Todd Miller

• April 2024 Web Server Survey

• How to Get into Cybersecurity: A Beginner’s Guide

• Hackers Utilize Antivirus Update Mechanism to Deploy GuptiMiner Malware

• Google Enterprise Security Program offers enhanced Malware and Phishing protection

• UK AI Security Firm Darktrace Acquired By Private Equity Group

• Second time lucky for Thoma Bravo, which scoops up Darktrace for $5.3B

• Is Online Banking Truly Safe? Understanding the Safety Loopholes in Bank Websites

• UnitedHealth Paid Ransom After Massive Change Healthcare Cyber Assault

• DPRK Hackers Compromise South Korean Defense Contractors

• Banking Malware “Brokewell” Hacks Android Devices, Steals User Data

• General Motors Under Fire for Secretly Spying on Drivers

• 750 Million Vulnerable To Snooping From Chinese Keyboard Apps

• Millions Of IPs Remain Infected By USB Worm Years After Its Creators Left It For Dead

• Over 1,400 CrushFTP Instances Vulnerable To Exploited 0-Day

• Powerful Brokewell Android Trojan Allows Device Takeover

• Severe Flaws Disclosed in Brocade SANnav SAN Management Software

• Falcon Fund in Focus: Nagomi Helps Customers Maximize Their Cybersecurity Investments

• Evolving Broadband Networks with Cisco Subscriber Edge

• Despite complaints, Apple hasn’t yet removed an obviously fake app pretending to be RockAuto

• Experts warn of an ongoing malware campaign targeting WP-Automatic plugin

• Self-Spreading PlugX USB Drive Malware Plagues Over 90k IP Addresses

• Over 1,400 CrushFTP Instances Vulnerable to Exploited Zero-Day

• Powerful ‘Brokewell’ Android Trojan Allows Attackers to Takeover Devices

• Microsoft Beats Expectations Thanks To AI Investments

• Feds Bust Privacy-Centric Samourai Wallet Over BTC Money Laundering

• CISA’s Efforts Towards Software Understanding

• Cybersecurity Insights with Contrast CISO David Lindner | 4/26/24

• Agile by Design: Cybersecurity at the Heart of Transformation

• Over 850 Vulnerable Devices Secured Through CISA Ransomware Program

• Ensuring the Security and Efficiency of Web Applications and Systems

• NETGEAR buffer Overflow Vulnerability Let Attackers Bypass Authentication

• 7 Essentials Every Data Security Posture Management (DSPM) Must Have

• APIContext’s Global Cloud API Performance Report Show A Decline In Cloud API Availability

• Enhancing Cybersecurity Defenses: The role of Voice Cloning in Penetration Testing

• Integrated Residential Security Solutions to Employ in 2024

• Thoma Bravo to take UK cybersecurity company Darktrace private in $5B deal

• Cryptocurrencies and cybercrime: A critical intermingling

• New Brokewell Malware Takes Over Android Devices, Steals Data

• Darktrace to be Taken Private in $5.3 Billion Sale to Thoma Bravo

• In Other News: China Hacked Volkswagen, DDoS Service Shutdown, Rubrik IPO

• UK’s Investigatory Powers Bill to become law despite tech world opposition

• 5000+ CrushFTP Servers Hacked Using Zero-Day Exploit

• Kaiser Permanente data breach may have impacted 13.4 million patients

• Long Article on GM Spying on Its Cars’ Drivers

• Cyber Security Today, April 26, 2024 – Patch warnings for Cisco ASA gateways and a WordPress plugin

• ByteDance Would Rather Shutter TikTok US, Than Sell – Report

• AeroNet Wireless Unveils 10Gbps Internet Plan in Puerto Rico, Revolutionising Telecom Industry

• 13,142,840 DDoS Attacks Targeted Organization Around The Globe

• The ultimate cyber spring-cleaning checklist

• Cato Networks to Showcase New Security Evasion Tactics at RSA Conference 2024

• Godfather Banking Trojan Spawns 1.2K Samples Across 57 Countries

• Palo Alto Networks Outlines Remediation for Critical PAN-OS Flaw Under Attack

• New ‘Brokewell’ Android Malware Spread Through Fake Browser Updates

• 10 Critical Endpoint Security Tips You Should Know

• Hackers outsmart smart locks

• Researchers Found 18 Vulnerabilities in Brocade SANnav

• Critical WordPress Automatic Plugin Vulnerability Exploited to Inject Backdoors

• Cyber Security Headlines: Google postpones cookies, Brocade vulnerability warning, ICICI card gaffe

• Hackers Exploit Old Microsoft Office 0-day to Deliver Cobalt Strike

• Autodesk Hosting PDF Files Used in Microsoft Phishing Attacks

• Bitwarden launches passkeys support in mobile apps for Android and iOS

• 8 Binge-Worthy Cybersecurity Podcasts in 2024

• Over 1,400 CrushFTP internet-facing servers vulnerable to CVE-2024-4040 bug

• ThreatLocker Raises $115M in Series D Funding

• Cyber Security Today, April 26, 2024 – Patch warnings for Cisco ASA gateways and a WordPress plugin

• Researchers Sinkhole PlugX Malware Server With 2.5 Million Unique IPs

• Ring to Pay Out $5.6m in Refunds After Customer Privacy Breach

• Implementing ISO 27001:2022 Annex A.18 – Compliance

• Four trends to top the CISO’s packed agenda

• Microsoft Publicly Releases MS-DOS 4.0 Source Code

• Sweden’s liquor supply severely impacted by ransomware attack on logistics company

• Google Facebook ads are deceptive and information stealing

• Navigating the Rising Tide of Cyber Attacks: Lessons from recent Cyber Incidents

• New SSLoad Malware Combined With Tools Hijacking Entire Network Domain

• Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites

• Flaws in Chinese keyboard apps leave 750 million users open to snooping, researchers claim

• What is Network Pen Testing?

• Unveiling Ubuntu Noble Numbat- A Deep Dive into Desktop 24.04 LTS

• LSA Whisperer: Open-source tools for interacting with authentication packages

• Most people still rely on memory or pen and paper for password management

• What AI can tell organizations about their M&A risk

• Piping Rock – 2,103,100 breached accounts

• Breaking down the numbers: Cybersecurity funding activity recap

• New infosec products of the week: April 26, 2024

• ISC Stormcast For Friday, April 26th, 2024 https://isc.sans.edu/podcastdetail/8956, (Fri, Apr 26th)

• How to Migrate from FedRAMP Rev 4 to FedRAMP Rev 5

• OpenAI’s GPT-4 Can Autonomously Exploit 87% of One-Day Vulnerabilities, Study Finds

• How to change your IP address, why you’d want to – and when you shouldn’t

Generated on 2024-04-27 23:55:07.799322