IT Security News Daily Summary 2024-05-14

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• UnitedHealth, Ascension Attacks Feed Debate Over Health Care Security

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Patch Tuesday, May 2024 Edition

• One (Busy) Day in the Life of EFF’s Activism Team

• Coalition to Calexico: Think Twice About Reapproving Border Surveillance Tower Next to a Public Park

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Why SaaS Companies Are Adopting Distributed Cloud Computing

• What we learned over coffee at the year’s biggest healthcare event

• Microsoft Warns of Active Zero-Day Exploitation, Patches 60 Windows Vulnerabilities

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• VERT Threat Alert: May 2024 Patch Tuesday Analysis

• CAPTCHA Farms Can’t Sneak Past DataDome

• Easily Guessed Passwords for New Accounts Include “User”, “Temp”, “Welcome”

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• How Material Security Protects Your Email Beyond Phishing Attacks

• Scammers are getting creative using malvertising, deepfakes, and YouTube

• Threat intelligence to protect vulnerable communities

• Meet Hackbat: An open-source, more powerful Flipper Zero alternative

• NHS Digital Hints at Exploit Sightings of Arcserve UDP Vulnerabilities

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• May 2024 Patch Tuesday: Microsoft fixes exploited zero-days (CVE-2024-30051, CVE-2024-30040)

• Apple touts stopping $1.8B in App Store fraud last year in latest pitch to developers

• MITRE released EMB3D Threat Model for embedded devices

• VMware fixed zero-day flaws demonstrated at Pwn2Own Vancouver 2024

• Speaking Freely: Mohamed El Gohary

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Only one critical vulnerability included in May’s Microsoft Patch Tuesday; One other zero-day in DWN Core

• 7 Best Cloud Security Posture Management (CSPM) Tools for 2024

• ransomware recovery

• Google discloses 2 zero-day vulnerabilities in less than a week

• Vermont Passes Data Privacy Law Allowing Consumers to Sue Companies

• Adobe Patches Critical Flaws in Reader, Acrobat

• Reverse Engineering Electron Apps to Discover APIs

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Microsoft May 2024 Patch Tuesday, (Tue, May 14th)

• QakBot attacks with Windows zero-day (CVE-2024-30051)

• Apple Backports Fix for Zero-Day Exploited in Attacks to Older iPhones

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Threat actor scraped Dell support tickets, including customer phone numbers

• Apple touts stopping $1.8BN in App Store fraud last year in latest pitch to developers

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Android Malware Poses as WhatsApp, Instagram, Snapchat to Steal Data

• Secrecy Concerns Mount Over Spy Powers Targeting US Data Centers

• Upcoming Speaking Engagements

• Cybersec chiefs team up with insurers to say ‘no’ to ransomware bullies

• Student Hijacking: Cyberattack Exposes 8,000 Students’ Data in Hong Kong

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• VMware Patches Severe Security Flaws in Workstation and Fusion Products

• Data Breaches in US Schools Exposed 37.6M Records

• Cyber attack on Christies halts auction services to a certain extent

• CISA Updates Toolkit with Nine New Resources to Promote Public Safety Communications and Cyber Resiliency

• RSAC panel debates confidence in post-quantum cryptography

• RSAC 2024 Highlights — Connecting on API Security and Bot Management

• Agent-Based vs Agentless File Integrity Monitoring: Which is Best?

• USENIX Security ’23 – A Peek Into The Metaverse: Detecting 3D Model Clones In Mobile Games

• Can Legal Measures Slow Down Cybercrimes?

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Ebury Botnet Operators Diversify with Financial and Crypto Theft

• Google, Apple Gear To Raise Tracking Tag Stalker Alarm

• NHS Digital Hints At Exploit Sightings Of Arcserve UDP Vulnerabilities

• Black Basta Ransomware Group Is Imperiling Critical Infrastructure

• Christie’s Art Auctions Hit By A Cyber Attack

• Malicious PyPi Requests Fork Hides Backdoor In PNG File

• SAP Patches Critical Vulnerabilities in CX Commerce, NetWeaver

• Cyber Criminals Exploiting MS-SQL Severs To Deploy Mallox Ransomware

• Ransomware Attacks Now Targeting Corporate Executives’ Children

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• NIST Confusion Continues as Cyber Pros Complain CVE Uploads Stalled

• CISA and Partners Unveil Cybersecurity Guide For Civil Society Groups

• Revolutionizing WordPress Bug Bounty and Security: Latest Enhancements to the Wordfence Bug Bounty Program

• CISA, DHS, FBI and International Partners Publish Guide for Protecting High-Risk Communities

• bug bounty program

• SonicWall CEO talks transformation, security transparency

• Infrastructure Hardening and Proactive Defense: The System Administrator’s Toolkit

• Telegram CEO calls out rival Signal, claiming it has ties to US government

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• DNS Tunneling Used for Stealthy Scans and Email Tracking

• New Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation

• Southeast Asian Scam Syndicates Stealing $64 Billion Annually, Researchers Find

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• 44% of Cybersecurity Professionals Struggle with Regulatory Compliance

• China Presents Defining Challenge to Global Cybersecurity, Says GCHQ

• Zcaler ThreatLabz 2024 VPN Risk Report

• Overheard at RSA Conference 2024: Top trends cybersecurity experts are talking about

• Cyber Insurers Pledge to Help Reduce Ransom Payments

• Google, Apple gear to raise tracking tag stalker alarm

• Hacker Conversations: Ron Reiter, and the Making of a Professional Hacker

• VMware Patches Vulnerabilities Exploited at Pwn2Own 2024

• ReversingLabs Search Extension for Splunk Enterprise

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Russian Actors Weaponize Legitimate Services in Multi-Malware Attack

• Free Workshop from Security Risk Advisors Empowers Organizations to Select Optimal OT Security Tools

• Hunters Announces Full Adoption of OCSF and Introduces OCSF-Native Search

• AeroNet Wireless Launches 10Gbps Internet Plan: A Landmark Moment in Puerto Rico’s Telecommunications Industry

• Foxit PDF Reader “Flawed Design” : Hidden Dangers Lurking in Common Tools

• Google Chrome Emergency Update Fixes Sixth Zero-Day Exploited in 2024

• Why Tokens are Like Gold for Opportunistic Threat Actors

• Update Chrome now! Google releases emergency security patch

• Simplify Certificate Lifecycle Management And Build Security Into OpenShift Kubernetes Engine With AppViewX KUBE+

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Apple backports iOS zero-day patch, adds Bluetooth tracker alert

• Talos joins CISA to counter cyber threats against non-profits, activists and other at-risk communities

• Three Rules of Crisis Management: Lessons from the War in Israel

• iOS and Android owners will now be alerted if an unknown tracker is moving with them

• Millions of Messages Distribute LockBit Black Ransomware

• Attackers Use DNS Tunneling to Track Victim Activity, Scan Networks

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Kaspersky Reveals Global Rise in APTs, Hacktivism and Targeted Attacks

• Sectrio and DigiGlass inaugurate State-of-the-Art OT/ICS SOC with Device Testing Lab in the UAE

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Critical Flaws in Cacti Framework Could Let Attackers Execute Malicious Code

• 8 Questions To Ask Yourself Before Sending That Sexy Photo | Avast

• Scammer are getting creative using malvertising, deepfakes, and YouTube

• Using Cisco’s Benefits To Ease Difficult Times: The Bridge To Giving Yourself Grace

• Mallox Ransomware Deployed via MS-SQL Honeypot Attack

• Google Patches Second Chrome Zero-Day in One Week

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• How Security Service Edge is Revolutionizing Network Security

• Thinking about a Career in Security Operations? Follow this Path

• 3 recommendations for adopting generative AI for cyber defense

• Check Point Infinity ThreatCloud AI Featured on Fast Company’s 2024 World Changing Ideas List

• Google is planning on a fix to prevent accidental password deletion in Chrome

• CISA and Partners Release Guidance for Civil Society Organizations on Mitigating Cyber Threats with Limited Resources

• Google fixes sixth actively exploited Chrome zero-day this year

• Incident response analyst report 2023

• Another Chrome Vulnerability

• #MIWIC2024: Jan Carroll, Managing Director at Fortify Institute

• Expert Insight: What’s the key to bringing more diversity into the tech sector?

• FCC Reveals Royal Tiger, its First Tagged Robocall Threat Actor

• FCC Warns of ‘Royal Tiger’ Robocall Scammers

• MITRE EMB3D Threat Model Officially Released

• Student, Personnel Information Stolen in City of Helsinki Cyberattack

• 26 Million Records Leaked: The Post-Millennial Hack Raises Privacy Concerns

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Ongoing Campaign Bombarded Enterprises with Spam Emails and Phone Calls

• 6 Mistakes Organizations Make When Deploying Advanced Authentication

• UK Insurance and NCSC Join Forces to Fight Ransomware Payments

• How Security Service Edge is Revolutionizing Network Security

• Thinking about a Career in Security Operations? Follow this Path

• 3 recommendations for adopting generative AI for cyber defense

• Check Point Infinity ThreatCloud AI Featured on Fast Company’s 2024 World Changing Ideas List

• Google is planning on a fix to prevent accidental password deletion in Chrome

• CISA and Partners Release Guidance for Civil Society Organizations on Mitigating Cyber Threats with Limited Resources

• Ongoing Campaign Bombarded Enterprises with Spam Emails and Phone Calls

• 6 Mistakes Organizations Make When Deploying Advanced Authentication

• Google fixes sixth actively exploited Chrome zero-day this year

• Incident response analyst report 2023

• Another Chrome Vulnerability

• #MIWIC2024: Jan Carroll, Managing Director at Fortify Institute

• Expert Insight: What’s the key to bringing more diversity into the tech sector?

• FCC Reveals Royal Tiger, its First Tagged Robocall Threat Actor

• FCC Warns of ‘Royal Tiger’ Robocall Scammers

• MITRE EMB3D Threat Model Officially Released

• Student, Personnel Information Stolen in City of Helsinki Cyberattack

• 26 Million Records Leaked: The Post-Millennial Hack Raises Privacy Concerns

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• UK Insurance and NCSC Join Forces to Fight Ransomware Payments

• SpaceX Contractors In Texas Remain Unpaid

• SpaceX Prepares Fourth Starship Test

• OpenAI Adds Voice Conversation To New ChatGPT Model

• New Jersey Apple Store Workers Vote Against Unionisation

• Microsoft Faces EU Antitrust Charges Over Teams

• New Botnet Sending Millions of Weaponized Emails with LockBit Black Ransomware

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Our Help Desk Plaque Reads “Over 100,000 Threat Actors Served”

• What Is the Dark Web?

• Quick Glossary: DevSecOps

• Cybercriminals Steal One-Time Passcodes for SIM Swap Attacks and Raiding Bank Accounts

• Visualize your critical cyber risks

• What are OAuth Tokens, and why are they important to Secure?

• What are Service Accounts, and why are they Important to Secure?

• What are Machine Credentials, And Why Are They Important to Secure in Your Organization?

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Cybersecurity News: FCC implements new classification, MITRE releases embedded devices framework, World renowned auction house attacked

• NHS Digital hints at exploit sightings of Arcserve UDP vulnerabilities

• AI’s Rapid Growth Puts Pressure on CISOs to Adapt to New Security Risks

• Researchers Identify New Campaigns from Scattered Spider

• Hackers Use DNS Tunneling to Scan and Track Victims

• Hackers Abuse DNS Tunneling For Covert Communication & Firewall Bypass

• Threat Actor Selling INC Ransomware Code for $300,000

• Zscaler Concludes Investigation: Only Test Servers Compromised

• 7 application security startups at RSAC 2024

• Red Teaming: The Key Ingredient for Responsible AI

• Zscaler Confirms Only Isolated Test Server Was Hacked

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• FCC Names and Shames First Robocall Threat Actor

• Google Admits Active Exploitation For Chrome Browser Zero-Day

• Hackers Abuse GoTo Meeting Tool to Deploy Remcos RAT

• Apple iTunes for Windows Flaw Let Attackers Execute Malicious Code

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Insider Threats Maintain a Rising Trend

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• GPT-4o Released: Faster Model Available for Free to All Users

• Phorpiex botnet sent millions of phishing emails to deliver LockBit Black ransomware

• In The Shadow Of Venus: Trinity Ransomware’s Covert Ties

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Apple Patches Code Execution Flaws in macOS, iPads, and iPhones

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• LockBit using botnets to send 9 million emails

• How Financial Institutions Can Protect Themselves from Modern DDoS Attacks

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Apple and Google Launch Cross-Platform Feature to Detect Unwanted Bluetooth Tracking Devices

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• How a GRC consultant passed the CISSP exam in six weeks

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Tailoring responsible AI: Defining ethical guidelines for industry-specific use

• BLint: Open-source tool to check the security properties of your executables

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Are you meeting your cyber insurance requirements?

• Rise of the Cyber Supervillain

• Cyber resilience: Safeguarding your enterprise in a rapidly changing world

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Log4J shows no sign of fading, spotted in 30% of CVE exploits

• ISC Stormcast For Tuesday, May 14th, 2024 https://isc.sans.edu/podcastdetail/8980, (Tue, May 14th)

• MITRE Releases EMB3D Cybersecurity Threat Model for Embedded Devices

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Understanding CUI: What It Is and Guidelines for Its Management

• Verizon 2024 DBIR: Key Takeaways

• Apple Patches Everything: macOS, iOS, iPadOS, watchOS, tvOS updated., (Tue, May 14th)

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Enhancing Security with AI: Revolutionizing Protection in the Digital Era

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Threat actors may have exploited a zero-day in older iPhones, Apple warns

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• The best VPN deals right now

• Internal Emails Reveal How a Controversial Gun-Detection AI System Found Its Way to NYC

• Getting started with Red Hat Insights and FedRAMP

• IT Security News Daily Summary 2024-05-13

• Vulnerability Summary for the Week of May 6, 2024

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Facebook Users Complain About Mass Tagging Attacks

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• City of Helsinki suffered a data breach

• Future of eCommerce: Emerging Technologies Shaping Online Retail in 2024

• Vulnerability Recap 5/13/24 – F5, Citrix & Chrome

• ‘Cyberattack’ shutters Christie’s website days before $840M art mega-auction

• China and US Envoys Will Hold First Top-Level Dialogue on Artificial Intelligence

• Apple Patch Day: Code Execution Flaws in iPhones, iPads, macOS

• USENIX Security ’23 – Duoram: A Bandwidth-Efficient Distributed ORAM for 2- and 3-Party Computation

• Microsoft is again named a Leader in the 2024 Gartner® Magic Quadrant™ for Security Information and Event Management​​

• Delivering Software Securely: Techniques for Building a Resilient and Secure Code Pipeline

• Report: Organisations Have Endpoint Security Tools But Are Still Falling Short on the Basics

• How to create a cloud security policy, step by step

• Uncle Sam urges action after Black Basta ransomware infects Ascension

• Cinterion Modem Vulnerabilities Leave IoT and Industrial Networks Exposed

• Novel LLMjacking Attacks Target Cloud-Based AI Models

• Google and Apple deliver support for unwanted tracking alerts in Android and iOS

• Unlocking the Mystery: Key Fob Vulnerabilities Exposed

• Internal Emails Show How a Controversial Gun-Detection AI System Found Its Way to NYC

• ‘Got that boomer!’: How cybercriminals steal one-time passcodes for SIM swap attacks and raiding bank accounts

• Europol Confirms Incident Following Alleged Auction Of Staff Data

• Ascension Making Progress After Ransomware Attack

• Dell Says Info Leaked After Hacker Claims Access To 49M Records

• NATO Draws A Cyber Red Line In Tensions With Russia

• Victory! FCC Closes Loopholes and Restores Net Neutrality

• Big Tech to EU: “Drop Dead”

• FBI/CISA Warning: ‘Black Basta’ Ransomware Gang vs. Ascension Health

• New Ransomware Threat Hits Hundreds of Organisations Worldwide

• Police Accessed Proton Mail User Data in Terrorism Probe

• Categorically Unsafe Software

• New alert: Logicalis enhances global security services with the launch of Intelligent Security

• The best travel VPNs of 2024: Expert tested and reviewed

• Australia Firstmac hit by ransomware and info on Europol Data Breach

• SoftBank-Owned ARM To Develop AI Chips

• The 6 Best Encryption Software Choices for 2024

• Network Protection: How to Secure a Network in 13 Steps

• CISA Adds One Known Exploited Vulnerability to Catalog

• Europol Investigating Breach After Hacker Offers to Sell Classified Data

• Critical Vulnerabilities in Cinterion Modems Exposed

• Best Encryption Software and Tools

• Russian hackers defaced local British news sites

• US and China to Hold Discussions on AI Risks and Security

• News alert: Criminal IP and Quad9 collaborate to exchange domain and IP threat intelligence

• Logicalis enhances global security services with the launch of Intelligent Security

• Predictive AI: What Do We Need to Understand?

• MITRE Unveils EMB3D: A Threat-Modeling Framework for Embedded Devices

• Mallox Ransomware Deployed Via MS-SQL Honeypot Attack

• MGM Hackers Launch New Campaign Targeting Financial Sector

• Cyberthreat Landscape Permanently Altered by Chinese Operations, US Officials Say

• Cinterion Modem Flaws Pose Risk to Millions of Devices in Industrial, Other Sectors

• NATO Draws a Cyber Red Line in Tensions With Russia

• Emphasizing Post-Breach Strategies in Cybersecurity

• Cybercriminals Are Becoming More Proficient at Exploiting Vulnerabilities

• Dell API Exploitation Led to Breach Affecting 49M Customers

• Tycoon 2FA Attacking Microsoft 365 AND Google Users To Bypass MFA

• Scattered Spider Attacking Finance & Insurance Industries WorldWide

• The $2.3 Billion Tornado Cash Case Is a Pivotal Moment for Crypto Privacy

• Cisco’s Women of the Channel: Empowering Innovation, Leadership, and Success in 2024

• Optimizing business velocity with Cisco Full-Stack Observability

• ‘Russian’ Hackers Deface Potentially Hundreds of Local British News Sites

• Criminal IP and Quad9 Collaborate to Exchange Domain and IP Threat Intelligence

• CRN Recognizes three Check Point Channel Stars in its 2024 Women of the Channel list

• AI red-teaming tools helped X-Force break into a major tech manufacturer ‘in 8 hours’

• How Secure is the “Password Protection” on Your Files and Drives?

• Europol Confirms Web Portal Breach: No Operational Data Stolen

• MITRE EMB3D improves security for embedded devices

• Critical Cacti Vulnerability Let Attackers Execute Remote Code

• Russian Hackers Hijack Ukrainian TV to Broadcast Victory Day Parade

• UK’s AI Safety Institute Unveils Platform to Accelerate Safe AI Develo

• Black Basta Ransomware Group’s Worldwide Victim Count Tops 500

• Wiz

• PRISMA CLOUD

• Veriti Extends Exposure Assessment & Remediation to the Cloud

• CISOs Reconsider Their Roles in Response to GenAI Integration

• Understanding Vishing and Quishing: Protecting Yourself Against Telephone and QR Code Scams

• How Did Authorities Identify the Alleged Lockbit Boss?

• Untangling IT-OT Security Knots with a Zero Trust Platform Approach

• GoTo Meeting Software Abused to Deploy Remcos RAT via Rust Shellcode Loader

• The Next Generation of Endpoint Security Is Being Reimagined Today

• Palo Alto Networks and Accenture help organizations accelerate AI adoption

• Black Basta target orgs with new social engineering campaign

• Ascension Ransomware Attack Diverts Ambulances, Delays Appointments

• Surfshark VPN Brings Data Breach Awareness with See-Through Toilet Campaign

• ‘Got that boomer!’: How cyber-criminals steal one-time passcodes for SIM swap attacks and raiding bank accounts

• Researchers Use MITM Attack to Bypass FIDO2 Phishing-Resistant Protection

• Nmap 7.95 Released With New OS and Service Detection Signatures

• The 2024 Browser Security Report Uncovers How Every Web Session Could be a Security Minefield

• Nmap 7.95 released – What’s New!

• Europol confirms incident following alleged auction of staff data

• Black Basta Ransomware Hit Over 500 Organizations

• Judge Dismisses X Lawsuit Against Data-Scraping Firm

• Musk: Tesla ‘To Spend $500m’ On Charger Expansion This Year

• X Accused Of Overruling Australian Law On Knife Attack Posts

• MGM Hackers Launch New Campaign Targeting Banks, Insurance

• Microsoft Edge Zero-Day Vulnerability Exploited in the Wild

• LLMs’ Data-Control Path Insecurity

• Why car location tracking needs an overhaul

• State Attorneys General Implore Congress Not to Preempt Their Privacy Laws

• $2.5 Million Offered at Upcoming ‘Matrix Cup’ Chinese Hacking Contest

• FBCS Collection Agency Data Breach Impacts 2.7 Million

• Leveraging DNS Tunneling for Tracking and Scanning

• GenAI Enables Cybersecurity Leaders to Hire More Entry-Level Talent

• Live at RSA: AI Hype, Enhanced Security, and the Future of Cybersecurity Tools

• Identity Security in M&A: Gain Visibility into Consolidated Environments with Silverfort

• HPE Aruba Vulnerabilities: Prevent Systems From RCE Attacks

• Hardware Level Vulnerabilities, Revisited

• CISA and FBI Issue Alert on Path Traversal Vulnerabilities

• Black Basta Ransomware Strikes 500+ Entities Across North America, Europe, and Australia

• Severe Vulnerabilities in Cinterion Cellular Modems Pose Risks to Various Industries

• SHQ Response Platform and Risk Centre to Enable Management and Analysts Alike

• Cybersecurity News: Boeing confirms ransomware, Dell announces breach, Ascension Healthcare attacked

• The Importance of Passive Asset Discovery

• Passwordless Authentication Standard FIDO2 Flaw Let Attackers Launch MITM Attacks

• Facing down the triple threat

• Black Basta Ransomware Victim Count Tops 500

• Cyber Security Today, May 13, 2024 – Europol police portal hacked, report on Black Basta ransomware gang is released, and more

• Grype- A Vulnerability Scanner For Container Images And Filesystems

• Welcome to the Laser Wars

• Selfie Spoofing Becomes Popular Identity Document Fraud Technique

• Feds, Military Personnel Compete in President’s Cyber Cup Challenge

• Malicious Go Binary Delivered via Steganography in PyPI

• You want us to think of the children? Couldn’t agree more

• Threat Actor Claims Major Europol Data Breach

• Mallox affiliate leverages PureCrypter in MS-SQL exploitation campaigns

• Apache OFBiz RCE Flaw Let Attackers Execute Malicious Code Remotely

• The World Cybercrime Index: What is it and why is it important?

• Australian Firstmac Limited disclosed a data breach after cyber attack

• FIN7 Uses Trusted Brands and Sponsored Google Ads to Distribute MSIX Payloads

• Baidu Head Of PR Loses Job Over Controversial Posts

• A week in security (May 6 – May 12)

• EU vs. UK – A tale of two approaches

• Apple Scraps TV Plans For ‘Crush’ Advert After Criticism

• Ohio Lottery Hacked: 500,000+ Customers Data Exposed

• Malicious Python Package Hides Sliver C2 Framework in Fake Requests Library Logo

• GoTo Meeting loads Remcos RAT via Rust Shellcode Loader

• Demystifying Infrastructure as Code (IaC) Scanning: Enhancing Security in DevOps

• Hackers Exploiting Vulnerabilities 50% Faster, Within 4.76 Days

• BlackBasta Ransomware targeted nearly 500 firms till May 2024

• Red teaming: The key ingredient for responsible AI

• Establishing a security baseline for open source projects

• How AI affects vulnerability management in open-source software

• AI’s rapid growth puts pressure on CISOs to adapt to new security risks

• Critical vulnerabilities take 4.5 months on average to remediate

• Securing the future through cybersecurity education

• ISC Stormcast For Monday, May 13th, 2024 https://isc.sans.edu/podcastdetail/8978, (Mon, May 13th)

• ASEAN organizations dealing with growing cyber menace

• Download: The Ultimate Guide to the CISSP

• Encrypted mail service Proton confirmed handing PII to cops again

• The Importance of Data Categorization In A Threat-Filled Landscape

Generated on 2024-05-14 23:55:12.772990