IT Security News Daily Summary 2024-05-13

• Vulnerability Summary for the Week of May 6, 2024

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Facebook Users Complain About Mass Tagging Attacks

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• City of Helsinki suffered a data breach

• Future of eCommerce: Emerging Technologies Shaping Online Retail in 2024

• Vulnerability Recap 5/13/24 – F5, Citrix & Chrome

• ‘Cyberattack’ shutters Christie’s website days before $840M art mega-auction

• China and US Envoys Will Hold First Top-Level Dialogue on Artificial Intelligence

• Apple Patch Day: Code Execution Flaws in iPhones, iPads, macOS

• USENIX Security ’23 – Duoram: A Bandwidth-Efficient Distributed ORAM for 2- and 3-Party Computation

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Delivering Software Securely: Techniques for Building a Resilient and Secure Code Pipeline

• Report: Organisations Have Endpoint Security Tools But Are Still Falling Short on the Basics

• How to create a cloud security policy, step by step

• Uncle Sam urges action after Black Basta ransomware infects Ascension

• Cinterion Modem Vulnerabilities Leave IoT and Industrial Networks Exposed

• Novel LLMjacking Attacks Target Cloud-Based AI Models

• Google and Apple deliver support for unwanted tracking alerts in Android and iOS

• Unlocking the Mystery: Key Fob Vulnerabilities Exposed

• Internal Emails Show How a Controversial Gun-Detection AI System Found Its Way to NYC

• ‘Got that boomer!’: How cybercriminals steal one-time passcodes for SIM swap attacks and raiding bank accounts

• Europol Confirms Incident Following Alleged Auction Of Staff Data

• Ascension Making Progress After Ransomware Attack

• Dell Says Info Leaked After Hacker Claims Access To 49M Records

• NATO Draws A Cyber Red Line In Tensions With Russia

• Victory! FCC Closes Loopholes and Restores Net Neutrality

• Big Tech to EU: “Drop Dead”

• FBI/CISA Warning: ‘Black Basta’ Ransomware Gang vs. Ascension Health

• New Ransomware Threat Hits Hundreds of Organisations Worldwide

• Police Accessed Proton Mail User Data in Terrorism Probe

• Categorically Unsafe Software

• New alert: Logicalis enhances global security services with the launch of Intelligent Security

• The best travel VPNs of 2024: Expert tested and reviewed

• Australia Firstmac hit by ransomware and info on Europol Data Breach

• SoftBank-Owned ARM To Develop AI Chips

• The 6 Best Encryption Software Choices for 2024

• Network Protection: How to Secure a Network in 13 Steps

• CISA Adds One Known Exploited Vulnerability to Catalog

• Europol Investigating Breach After Hacker Offers to Sell Classified Data

• Critical Vulnerabilities in Cinterion Modems Exposed

• Best Encryption Software and Tools

• Russian hackers defaced local British news sites

• US and China to Hold Discussions on AI Risks and Security

• News alert: Criminal IP and Quad9 collaborate to exchange domain and IP threat intelligence

• Logicalis enhances global security services with the launch of Intelligent Security

• Predictive AI: What Do We Need to Understand?

• MITRE Unveils EMB3D: A Threat-Modeling Framework for Embedded Devices

• Mallox Ransomware Deployed Via MS-SQL Honeypot Attack

• MGM Hackers Launch New Campaign Targeting Financial Sector

• Cyberthreat Landscape Permanently Altered by Chinese Operations, US Officials Say

• Cinterion Modem Flaws Pose Risk to Millions of Devices in Industrial, Other Sectors

• NATO Draws a Cyber Red Line in Tensions With Russia

• Emphasizing Post-Breach Strategies in Cybersecurity

• Cybercriminals Are Becoming More Proficient at Exploiting Vulnerabilities

• Dell API Exploitation Led to Breach Affecting 49M Customers

• Tycoon 2FA Attacking Microsoft 365 AND Google Users To Bypass MFA

• Scattered Spider Attacking Finance & Insurance Industries WorldWide

• The $2.3 Billion Tornado Cash Case Is a Pivotal Moment for Crypto Privacy

• Cisco’s Women of the Channel: Empowering Innovation, Leadership, and Success in 2024

• Optimizing business velocity with Cisco Full-Stack Observability

• ‘Russian’ Hackers Deface Potentially Hundreds of Local British News Sites

• Criminal IP and Quad9 Collaborate to Exchange Domain and IP Threat Intelligence

• CRN Recognizes three Check Point Channel Stars in its 2024 Women of the Channel list

• AI red-teaming tools helped X-Force break into a major tech manufacturer ‘in 8 hours’

• How Secure is the “Password Protection” on Your Files and Drives?

• Europol Confirms Web Portal Breach: No Operational Data Stolen

• MITRE EMB3D improves security for embedded devices

• Critical Cacti Vulnerability Let Attackers Execute Remote Code

• Russian Hackers Hijack Ukrainian TV to Broadcast Victory Day Parade

• UK’s AI Safety Institute Unveils Platform to Accelerate Safe AI Develo

• Black Basta Ransomware Group’s Worldwide Victim Count Tops 500

• Wiz

• PRISMA CLOUD

• Veriti Extends Exposure Assessment & Remediation to the Cloud

• CISOs Reconsider Their Roles in Response to GenAI Integration

• Understanding Vishing and Quishing: Protecting Yourself Against Telephone and QR Code Scams

• How Did Authorities Identify the Alleged Lockbit Boss?

• Untangling IT-OT Security Knots with a Zero Trust Platform Approach

• GoTo Meeting Software Abused to Deploy Remcos RAT via Rust Shellcode Loader

• The Next Generation of Endpoint Security Is Being Reimagined Today

• Palo Alto Networks and Accenture help organizations accelerate AI adoption

• Black Basta target orgs with new social engineering campaign

• Ascension Ransomware Attack Diverts Ambulances, Delays Appointments

• Surfshark VPN Brings Data Breach Awareness with See-Through Toilet Campaign

• ‘Got that boomer!’: How cyber-criminals steal one-time passcodes for SIM swap attacks and raiding bank accounts

• Researchers Use MITM Attack to Bypass FIDO2 Phishing-Resistant Protection

• Nmap 7.95 Released With New OS and Service Detection Signatures

• The 2024 Browser Security Report Uncovers How Every Web Session Could be a Security Minefield

• Nmap 7.95 released – What’s New!

• Europol confirms incident following alleged auction of staff data

• Black Basta Ransomware Hit Over 500 Organizations

• Judge Dismisses X Lawsuit Against Data-Scraping Firm

• Musk: Tesla ‘To Spend $500m’ On Charger Expansion This Year

• X Accused Of Overruling Australian Law On Knife Attack Posts

• MGM Hackers Launch New Campaign Targeting Banks, Insurance

• Microsoft Edge Zero-Day Vulnerability Exploited in the Wild

• LLMs’ Data-Control Path Insecurity

• Why car location tracking needs an overhaul

• State Attorneys General Implore Congress Not to Preempt Their Privacy Laws

• $2.5 Million Offered at Upcoming ‘Matrix Cup’ Chinese Hacking Contest

• FBCS Collection Agency Data Breach Impacts 2.7 Million

• Leveraging DNS Tunneling for Tracking and Scanning

• GenAI Enables Cybersecurity Leaders to Hire More Entry-Level Talent

• Live at RSA: AI Hype, Enhanced Security, and the Future of Cybersecurity Tools

• Identity Security in M&A: Gain Visibility into Consolidated Environments with Silverfort

• HPE Aruba Vulnerabilities: Prevent Systems From RCE Attacks

• Hardware Level Vulnerabilities, Revisited

• CISA and FBI Issue Alert on Path Traversal Vulnerabilities

• Black Basta Ransomware Strikes 500+ Entities Across North America, Europe, and Australia

• Severe Vulnerabilities in Cinterion Cellular Modems Pose Risks to Various Industries

• SHQ Response Platform and Risk Centre to Enable Management and Analysts Alike

• Cybersecurity News: Boeing confirms ransomware, Dell announces breach, Ascension Healthcare attacked

• The Importance of Passive Asset Discovery

• Passwordless Authentication Standard FIDO2 Flaw Let Attackers Launch MITM Attacks

• Facing down the triple threat

• Black Basta Ransomware Victim Count Tops 500

• Cyber Security Today, May 13, 2024 – Europol police portal hacked, report on Black Basta ransomware gang is released, and more

• Grype- A Vulnerability Scanner For Container Images And Filesystems

• Welcome to the Laser Wars

• Selfie Spoofing Becomes Popular Identity Document Fraud Technique

• Feds, Military Personnel Compete in President’s Cyber Cup Challenge

• Malicious Go Binary Delivered via Steganography in PyPI

• You want us to think of the children? Couldn’t agree more

• Threat Actor Claims Major Europol Data Breach

• Mallox affiliate leverages PureCrypter in MS-SQL exploitation campaigns

• Apache OFBiz RCE Flaw Let Attackers Execute Malicious Code Remotely

• The World Cybercrime Index: What is it and why is it important?

• Australian Firstmac Limited disclosed a data breach after cyber attack

• FIN7 Uses Trusted Brands and Sponsored Google Ads to Distribute MSIX Payloads

• Baidu Head Of PR Loses Job Over Controversial Posts

• A week in security (May 6 – May 12)

• EU vs. UK – A tale of two approaches

• Apple Scraps TV Plans For ‘Crush’ Advert After Criticism

• Ohio Lottery Hacked: 500,000+ Customers Data Exposed

• Malicious Python Package Hides Sliver C2 Framework in Fake Requests Library Logo

• GoTo Meeting loads Remcos RAT via Rust Shellcode Loader

• Demystifying Infrastructure as Code (IaC) Scanning: Enhancing Security in DevOps

• Hackers Exploiting Vulnerabilities 50% Faster, Within 4.76 Days

• BlackBasta Ransomware targeted nearly 500 firms till May 2024

• Red teaming: The key ingredient for responsible AI

• Establishing a security baseline for open source projects

• How AI affects vulnerability management in open-source software

• AI’s rapid growth puts pressure on CISOs to adapt to new security risks

• Critical vulnerabilities take 4.5 months on average to remediate

• Securing the future through cybersecurity education

• ISC Stormcast For Monday, May 13th, 2024 https://isc.sans.edu/podcastdetail/8978, (Mon, May 13th)

• ASEAN organizations dealing with growing cyber menace

• Download: The Ultimate Guide to the CISSP

• Encrypted mail service Proton confirmed handing PII to cops again

• The Importance of Data Categorization In A Threat-Filled Landscape

• IT Security News Weekly Summary – Week 19

• IT Security News Daily Summary 2024-05-12

• Ransomware negotiator weighs in on the extortion payment debate with El Reg

• Dell API Abused to Steal 49 Million Customer Records in Data Breach

• Pro-Russia hackers targeted Kosovo’s government websites

• USENIX Security ’23 – GigaDORAM: Breaking the Billion Address Barrier

• Key Takeaways from RSA Conference 2024: AI and Data Security in Focus | Eureka Security

• Understanding the Complexities of VPNs: Balancing Privacy and Security in the Digital Age

• Stemming the Tide: Solving the Challenge of Password Reuse and Password-Stealing Malware

• WordPress Vulnerabilities, Exploiting LiteSpeed Cache and Email Subscribers Plugins

• Cyber Crime Wave: Chinese Scammers Target Europe with Fake Designer Brands

• Security Affairs newsletter Round 471 by Pierluigi Paganini – INTERNATIONAL EDITION

• Invoke AI Introduces Refined Control Features for Image Generation

• DNS Suffixes on Windows, (Sun, May 12th)

• Hackers Moving To AI But Lacking Behind The Defenders In Adoption Rates

• As of May 2024, Black Basta ransomware affiliates hacked over 500 organizations worldwide

• Dell Data Breach Exposes Personal Information Of 49 Million

• Side-by-Side with HelloJackHunter: Unveiling the Mysteries of WinSxS

• Week in review: Veeam fixes RCE flaw in backup management platform, Patch Tuesday forecast

• Critical infrastructure security will stay poor until everyone pulls together

Generated on 2024-05-13 23:55:09.002916