IT Security News Daily Summary 2024-05-21

• 5 Mitre ATT&CK framework use cases

• Cybersecurity or Cyber Resilience: Which Matters More?

• Using Open-Souce and Built-In Tools for Supply Chain Validation

• The best VPN trials of 2024: Expert tested and reviewed

• Facebook Joins New Anti-Scam Coalition To Fight Financial Fraud

• CISA adds NextGen Healthcare Mirth Connect flaw to its Known Exploited Vulnerabilities catalog

• How to remove a user from a shared Windows device

• How to remove a user from a shared Mac

• How to remove a user from a shared Android device

• Zoom adds ‘post-quantum’ encryption for video nattering

• Getting Your Copilot Pilot Out of Pilot

• How the new Microsoft Recall feature fundamentally undermines Windows security

• cloud penetration testing

• Critical Fluent Bit bug affects all major cloud providers, say researchers

• AI Safety Summit 2024: Tech Firms Agree AI Safety Pledges

• Soft skills every entrepreneur needs

• Microsoft’s new Recall feature for Copilot+PCs criticized as ‘spyware’

• Speaking Freely: Ethan Zuckerman

• Sensitive Data Detection using AI for API Hackers

• Legacy Systems: Learning From Past Mistakes

• Critical GitHub Enterprise Server Flaw Allows Authentication Bypass

• The Wordfence Affiliate Program Officially Launches Today

• Microsoft’s latest Windows 11 security features aim to make it ‘more secure out of the box’

• QNAP Rushes Patch for Code Execution Flaw in NAS Devices

• USENIX Security ’23 – Knowledge Expansion and Counterfactual Interaction for Reference-Based Phishing Detection

• Why Deleting Your Temu Account Might Be the Best Move

• Former OpenAI Executive Raises Safety Concerns

• Why Your Wi-Fi Router Doubles as an Apple AirTag

• Prowling the Wilds — Upgrade Your SOC and Hunt Down Threats

• CISA Warns Of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw

• Zoom Adding Post-Quantum End-to-End Encryption To All Products

• You Can Now Buy A 4-Foot-Tall Humanoid Robot For $16k

• Julian Assange Can Appeal Extradition To The US, London Court Rules

• OpenSSF Sings A Siren Song To Steer Developers Away From Buggy FOSS

• Russia’s DoppelGänger Campaign Manipulates Social Media

• OpenAI ChatGPT Cyber Threat to Scarlett Johansson

• 23-Year-Old Arrested for Running 100M Incognito Dark Web Market

• Memcyco Report Reveals Only 6% Of Brands Can Protect Their Customers From Digital Impersonation Fraud

• Windows System Admins Targeted by Hackers Via Fraudulent PuTTy, WinSCP Ads

• 70% of CISOs Expect Cyber-Attacks in Next Year, Report Finds

• US Warns Rising Cyberattacks Against Water Supplies

• cloud workload protection platform (CWPP)

• Conservative cell carrier Patriot Mobile hit by data breach

• Malware Delivery via Cloud Services Exploits Unicode Trick to Deceive Users

• 70% of CISOs Expect Cyberattacks in Next Year, Report Finds

• Guardz Launches Pioneering Cyber Insurance with Active Protection Exclusively for SMBs

• Working in the security clearance world: How security clearances impact jobs

• LCDS LAquis SCADA

• CISA Releases One Industrial Control Systems Advisory

• News alert: Memcyco report reveals only 6% of brands can stop digital impersonation fraud

• AI Seoul Summit: 16 AI Companies Sign Frontier AI Safety Commitments

• The Year in GenAI: Security Catches Up with Innovation

• Scarlett Johansson ‘Shocked, Angered’ Over OpenAI’s Artificial Voice

• Blackbasta group claims to have hacked Atlas, one of the largest US oil distributors

• Vulnerability Summary for the Week of May 13, 2024

• 15 QNAP NAS bugs and one PoC disclosed, update ASAP! (CVE-2024-27130)

• Ransomware and AI-Powered Hacks Drive Cyber Investment

• Holes in Your Bitbucket: Why Your CI/CD Pipeline Is Leaking Secrets

• 2024 Cloud Security Report: Unveiling the Latest Trends in Cloud Security

• CISSP or CISM: Which should you pursue?

• Zoom Adding Post-Quantum End-to-End Encryption to Products

• Slack Faces Backlash Over AI Data Policy: Users Demand Clearer Privacy Practices

• Digital Impersonation Fraud: a Growing Challenge for Brands

• SolarMarker Malware Evolves to Resist Takedown Attempts with Multi-Tiered Infrastructure

• Scanning without Scanning with NMAP (APIs FTW), (Tue, May 21st)

• Why Game Companies Are Adopting Distributed Cloud Computing

• Memcyco Report: Just 6% of Brands Guard Against Digital Impersonation Fraud

• North Korean Hackers Hijacked Military Officials Personal Email

• Microsoft Unveild New Windows 11 Features To Strengthen Security

• Critical Memory Corruption In Cloud Logging Infrastructure Enables Code Execution Attack

• DoppelGänger Attack: Malware Routed Via News Websites And Social Media

• AAPI Heritage Month Spotlight: Archana Ragothaman

• Many Stumble Into Cybersecurity, But Leadership is By Design

• Recent Healthcare Ransomware Attacks

• Ransomware Attack Leaves Michigan Hospitals in Chaos Nine Days On

• Understanding the SOC 2 Certification

• HR and IT related phishing scams still most popular according to KnowBe4’s latest Phishing Report

• New ‘Siren’ Mailing List Aims to Share Threat Intelligence for Open Source Projects

• Five Core Tenets Of Highly Effective DevSecOps Practices

• Hyperconverged Infrastructure: Your Complete Guide to HCI

• Iranian State Hackers Partner Up for Large-Scale Attacks, Report

• Empowering Growth: My Journey with the Cisco MentorMe Program

• QNAP QTS Zero-Day in Share Feature Gets Public RCE Exploit

• Productivity Increases in Sectors Exposed To AI, PwC Finds

• Detecting Malicious Trackers

• Void Manticore Launches Destructive Attacks on Albania and Israel

• EPA Issues Alert After Finding Critical Vulnerabilities in Drinking Water Systems

• CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw

• Insider Q&A: CIA’s Chief Technologist’s Cautious Embrace of Generative AI

• Critical Fluent Bit flaw affects major cloud platforms, tech companies’ offerings (CVE-2024-4323)

• Researchers Uncover Flaws in Python Package for AI Models and PDF.js Used by Firefox

• Over 60% of Network Security Appliance Flaws Exploited as Zero Days

• With ransomware whales becoming so dominant, would-be challengers ask ‘what’s the point?’

• How to Install a VPN on Your Router

• Eventbrite Promoted Illegal Opioid Sales to People Searching for Addiction Recovery Help

• Chinese Telco Gear May Get Banned in Germany

• How to Drive Down Skyrocketing Data Costs with the Only Cost-Optimized SIEM

• Ask the Analyst: Nisos Events and Ticket Fraud Expert Kirk Maguire

• Latest Ubuntu Security Updates: Fixing Linux Kernel Vulnerabilities

• What Is Risk Management in Cybersecurity | Kovrr

• TuxCare and DOSIsoft Partner to Offer Ongoing Support and Cyber Protections for Radiation Oncology and Nuclear Medicine Software

• BT Extends Deadline For PSTN Switch To Digital Landlines

• Experts warn of a flaw in Fluent Bit utility that is used by major cloud platforms and firms

• Consumers Continue to Overestimate Their Ability to Spot Deepfakes

• CISA Warns of Actively Exploited NextGen Mirth Connect Pre-Auth RCE Vulnerability

• OmniVision Says Personal Information Stolen in Ransomware Attack

• Windows 11 to Deprecate NTLM, Add AI-Powered App Controls and Security Defenses

• You Can’t Leak What You Don’t Collect

• Multiple Vulnerabilities in Honeywell VirtualUOC Let Attackers Execute Remote Code

• The Interplay of AI and Cybersecurity: Survey Results

• The UK’s Cybersecurity: Where Is it and Where Is it Going?

• ‘Linguistic Lumberjack’ Flaw in Logging Utility Fluent Bit Impacts Cloud Services

• Cybersecurity News: Military cyber service, GetCaught abuses services, chatbot jailbreaks

• North Korea-Linked Kimsuky APT Attack Targets Victims via Messenger

• The Mystery of the Targeted Ad and the Library Patron

• Authorities Arrest $100m Incognito Drugs Market Suspect

• Cybercriminals Shift Tactics to Pressure More Victims Into Paying Ransoms

• Critical Fluent Bit Bug Impacts All Major Cloud Platforms

• Grandoreiro Malware Hijacks Outlook Client to Send Phishing Emails

• Experts released PoC exploit code for RCE in QNAP QTS

• Fortinet FortiSIEM Command Injection Flaw (CVE-2023-34992) Deep-Dive

• What is ISO 42001? Structure, Responsibilities and Benefits

• Critical Memory Corruption In Cloud Logging Infrastructure Enables Code Execution Attack

• CyberArk Snaps up Venafi for $1.54B to Ramp up in Machine-to-Machine Security

• NextGen Healthcare Mirth Connect Under Attack – CISA Issues Urgent Warning

• GitCaught Campaign Leverages GitHub Repositories and Fake Profiles for Malicious Infrastructure

• Podcast Episode: Chronicling Online Communities

• Best Security Questionnaire Automation Software – Top Features To Look For

• PoC Exploit Released for QNAP QTS zero-day RCE Flaw

• “Linguistic Lumberjack” Vulnerability Discovered in Popular Logging Utility Fluent Bit

• Master of Puppets: Uncovering the DoppelGänger pro-Russian influence campaign

• USA initiates $50m incentive program to thwart ransomware threats

• Strategies for combating AI-enhanced BEC attacks

• Phishing statistics that will make you think twice before clicking

• Big Tech is not much help when fighting a junta, and FOSS doesn’t ride to the rescue

• Challenging Times Remain Among the Ever-Evolving Email Landscape

• Fighting identity fraud? Here’s why we need better tech

• YouTube has become a significant channel for cybercrime

• eBook: 10 reasons why demand for cloud security is sky-high

• ISC Stormcast For Tuesday, May 21st, 2024 https://isc.sans.edu/podcastdetail/8990, (Tue, May 21st)

• GitLab unveils GitLab 17, AI for devsecops

• Shots Fired: Congressional Letter Questions DHS Funding of ShotSpotter

• OpenSSF sings a Siren song to steer developers away from buggy FOSS

• Julian Assange can appeal extradition to the US, London High Court rules

• Shifting the Security Mindset: From Network to Application Defense

• Vulnerability Recap 5/20/24 – Patch Tuesday, Chrome & D-Link

• Get the best weatherproof Wyze Cam alternative for only $40 before Memorial Day

• CyberArk to acquire Venafi from Thoma Bravo for $1.5B

• How micro1’s AI interviewer could make tech hiring more efficient and fair

• Georgia Prosecutors Stoke Fears over Use of Encrypted Messengers and Tor

• USENIX Security ’23 – You’ve Got Report: Measurement and Security Implications of DMARC Reporting

• CISA and ONCD Award the Winners of the Fifth Annual President’s Cup Cybersecurity Competition

• What Is DRM? Understanding Digital Rights Management

• Fluent Bit Tool Vulnerability Threatens Billions of Cloud Deployments

• Are you being tracked? What new privacy features from Apple and Google can (and can’t) tell you

• iOS 17.5.1 patches cringey bug that was resurrecting old, deleted photos

• Google Cites ‘Monoculture’ Risks in Response to CSRB Report on Microsoft

• Google takes shots at Microsoft for shoddy security record with enterprise apps

• Randall Munroe’s XKCD ‘Bloom Filter’

• Hacktivist Groups Target Indian Elections, Leak Personal Data, Says Report

• Chinese Duo Indicted for Laundering $73m in Pig Butchering Case

• Sunsetting Section 230 Will Hurt Internet Users, Not Big Tech

• Apple Slashes iPhone Prices In China

• Top ITSM Certifications for 2024

• Too Many ICS Assets are Exposed to the Public Internet

• Julian Assange Granted Right To Challenge US Extradiction Order

• Bitcoin ‘Creator’ Craig Wright Repeatedly Lied, Rules UK Judge

• Reconnaissance in Cybersecurity: Types & Prevention

• The Importance of Bot Management in Your Marketing Strategy

• Can I phone a friend? How cops circumvent face recognition bans

• Vermont’s Data Privacy Law Sparks State Lawmaker Alliance Against Tech Lobbyists

• Bengaluru Man Arrested for Exploiting Woman in Online Interview

• Punjab Police Break Up Two Scam Call Centers, Arrest 155 Suspects

• Iranian MOIS-Linked Hackers Behind Destructive Attacks on Albania and Israel

• Network Outages Hit 59% of Multi-Site Businesses Monthly

• CyberArk to acquire Venafi Cybersecurity for $1.5 Billion

• YouTube, The Backdrop Of A Scammer’s Play | Avast

• US SEC Approves Wall Street Data Breach Reporting Regs

• Vulnerability Found in Fluent Bit Utility Used by Major Cloud, Tech Companies

• SMTP Error Codes Explained

• USENIX Security ’23 – “To Do This Properly, You Need More Resources”: The Hidden Costs Of Introducing Simulated Phishing Campaigns

• ATM jackpotting

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• GitCaught campaign relies on Github and Filezilla to deliver multiple malware

• BeyondTrust vs. CyberArk: Pros, Cons, and Alternatives for Privileged Access Management

• Security review for Microsoft Edge version 125

• Your vacation, reservations, and online dates, now chosen by AI: Lock and Code S05E11

• Top Cybersecurity Risks in Edge Computing : Here’s All You Need to Know

• Iran-Linked Void Manticore Intensifies Cyber-Attacks on Israel

• Another Billionaire Is Suing Facebook For Scam Ads Using His Image

• Harnessing Network and Application Performance Insights for Effective Automation

• With a startup’s assist, the UK Government publishes new AI security guidelines

• Latrodectus Malware Loader Emerges as Potential Replacement for IcedID

• Strata’s Maverics Platform Provides Zero Downtime for Cloud-based Identity

• Engineering Giant Arup Falls Victim to £20m Deepfake Video Scam

• Microsoft Patch Tuesday May 2024 Fixed 3 Zero-Days

• Critical Git Vulnerability Let Attackers Execute Remote Code : PoC Published

• SWARM – Switchable Backdoor Attack Against Pre-trained Models

• WikiLeaks’ Julian Assange Can Appeal His Extradition to the US, British Court Says

• Researchers Call Out QNAP For Dragging Its Heels On Patch Development

• 2.4 Million Affected By WebTPA Data Breach

• How I Upgraded My Water Heater And Discovered How Bad Smart Home Security Can Be

• User Outcry As Slack Scrapes Customer Data For AI Model Training

• 6k-plus AI Models May Be Affected By Critical RCE Vulnerability

• The Importance of Access Controls in Incident Response

• Eric Goldstein Leaving CISA for Private Sector Role

• CyberArk to Acquire Machine Identity Firm Venafi for $1.54 Billion

• Teaching AI Sarcasm: The Next Frontier in Human-Machine Communication

• AI Chatbots Highly Vulnerable to Jailbreaks, UK Researchers Find

• Researchers call out QNAP for dragging its heels on patch development

• The 5 Best Encryption Key Management Software for 2024

• Guide to Third Party Risk Management: Dealing with Vendor Vulnerabilities

• Unlocking the Power of Governance in Cybersecurity: NIST CSF 2.0 Introduces ‘Govern’ to Redefine CISO Leadership in 2024

• DoJ, ByteDance ask court: Hurry up and rule on TikTok ban already

• Strata Maverics Identity Continuity provides real-time IDP failover capabilities

• 5 steps to stop Ransomware as a Service in its tracks

• Tesla Layoffs Continue With Another 600 Jobs In California

• New Antidot Android Malware Poses as Google Update to Steal Funds

• Akira Ransomware Escalates Privilege To Exfiltrate Domain Controller Files

• Implement a Continuous Threat Exposure Management (CTEM) Program with Check Point IGS Consulting Services

• Unveiling Void Manticore: Structured Collaboration Between Espionage and Destruction in MOIS

• WikiLeaks’ Julian Assange Can Appeal His Extradition to the US, British Court Says

• Kinsing Hacker Group Expands its Cryptoming Botnet Network with More Vulnerability Exploits

• Strata Identity Maverics Identity Continuity provides real-time IDP failover capabilities

• How to Defend Against Relentless DNS Attacks

• Financial Organizations Need To Disclose Data Breach Within 30-Days

• Whole of State: Leveraging Security Platforms in Government

• CISA Senior Official Goldstein to Leave Agency in June

• White House Unveils AI Safety Framework for US Workers

• What is real-time protection and why do you need it?

• How to Manage IAM Compliance and Audits

• CVE-2023-34992: Fortinet FortiSIEM Command Injection Deep-Dive

• Foxit PDF Reader Flaw Exploited by Hackers to Deliver Diverse Malware Arsenal

• YouTube, the backdrop of a scammer’s play

• CyberArk snaps up Venafi for $1.54B to ramp up in machine-to-machine security

• Prevention Maintenance: Strategies To Bolster Your Organisation’s Cybersecurity

• Are All Linux Vendor Kernels Insecure? A New Study Says Yes, but There’s a Fix

• Intel Discloses Max Severity Bug in Its AI Model Compression Software

• Cybersecurity M&A Roundup for First Half of May 2024

• 2.4 Million Impacted by WebTPA Data Breach

• CyberArk to acquire Venafi for $1.54 billion

• Defending Your Commits From Known CVEs With GitGuardian SCA And Git Hooks

• Two Chinese Nationals Arrested for Stealing $73M+ Via Cryptocurrency Scams

• Strengthen Your Security Operations: MITRE ATT&CK Mapping in Cisco XDR

• Two Students Uncover Security Bug That Could Let Millions Do Their Laundry for Free

• How to Remove Your Personal Info From Google’s Search Results

• Two students uncovered a flaw that allows to use laundry machines for free

• IBM Sells Cybersecurity Group

• Financial institutions ordered to notify customers after a breach, have an incident response plan

• American Radio Relay League Hit by Cyberattack

• MediSecure Data Breach Impacts Patient and Healthcare Provider Information

• Start-Ups: 10 Tips for Navigating the Headwinds Against High-Growth

• Cyber Security Today, May 20, 2024 – A ransomware gang claims it hit a Canadian internet provider

• Analyzing MSG Files, (Mon, May 20th)

• AI Python Package Flaw ‘Llama Drama’ Threatens Software Supply Chain

• PoC exploit for Ivanti EPMM privilege escalation flaw released (CVE 2024-22026)

• Cyber Criminals Exploit GitHub and FileZilla to Deliver Cocktail Malware

• UK Regulator Declines To Investigate Microsoft’s Mistral AI Deal

• PoC Exploit Published for 0-day Vulnerability in Google Chrome

• UK Government Publishes AI Cybersecurity Guidance

• Radiant Security Gen AI SOC Co-Pilot

• Navigating Employee GPS Tracking in Ontario: What Employers Need to Know

• Mastering the Cybersecurity Tightrope: Risks and Threats in Modern Organizations

• YARA is dead, long live YARA-X

• UK AI Safety Institute To Open Office In US

• Making Data Integrity Easy: Simplifying NIST CSF with Tripwire

• Closing the Skills Gap for Women in Cybersecurity

• Antivirus Policy

• British Library’s candid ransomware comms driven by ’emotional intelligence’

• SEC requires financial institutions to notify customers of breaches within 30 days

• Cybersecurity News: Grandoreiro Trojan reappears, Kimsuky’s new backdoor, More healthcare breaches

• Silicon In Focus Podcast: Does Security Block Innovation?

• Researchers Report High-Impact Cat-Phishing Targeting Users

• New Tracker Warning Features on iPhones & Androids, 2024 Verizon Data Breach Investigations Report

• RSAC Fireside Chat: SquareX introduces security-infused browser extension to stop threats in real time

• Grandoreiro Banking Trojan is Back With Major Updates

• 12 principles for improving devsecops

• CISA Issues Guidance to Help Federal Agencies Better Encrypt DNS Traffic

• IBM’s Exit from Cybersecurity Software Shakes the Industry

• CISA Warns of Hackers Exploiting Chrome, EoL D-Link Bugs

• Chinese Duo Indicted For Laundering $73m in Pig Butchering Case

• How to make your Android phone easier to use

• Kinsing Malware Attacking Apache Tomcat Servers To Deploy Cryptominers

• Norway Recommends Replacing SSL VPN to Prevent Breaches

• Grandoreiro Banking Trojan is back and targets banks worldwide

• A week in security (May 13 – May 19)

• Sonicwall SSL-VPN exploit Advertised on the Dark web

• Strict 30 day timeline fixed for Financial Institutions on data breaches says SEC

• Achieving Resilient SASE Deployment: Strategies for Success

• Chinese telco gear may become verboten on German networks

• Latrodectus Malware Loader Emerges as IcedID’s Successor in Phishing Campaigns

• The challenges of GenAI in fintech

• Grafana: Open-source data visualization platform

• Cybercriminals shift tactics to pressure more victims into paying ransoms

• Consumers continue to overestimate their ability to spot deepfakes

• Understanding cyber risks beyond data breaches

• Nissan infosec in the spotlight again after breach affecting more than 50K US employees

• Financial Institutions Now Required to Disclose Breaches Within 30 Days

• ISC Stormcast For Monday, May 20th, 2024 https://isc.sans.edu/podcastdetail/8988, (Mon, May 20th)

Generated on 2024-05-21 23:55:10.702682