IT Security News Daily Summary 2024-06-01

• Ticketmaster confirms data breach impacting 560 million customers

• Ticketmaster confirms customer data breach

• Snowflake denies breach, blames data theft on poorly secured customer accounts

• Critical Apache Log4j2 flaw still threatens global finance

• Crooks stole more than $300M worth of Bitcoin from the exchange DMM Bitcoin

• USENIX Security ’23 – Intender: Fuzzing Intent-Based Networking with Intent-State Transition Guidance

• Why CVEs Reflect an Incentives Problem

• Pirated Microsoft Office Distributes a Malware Cocktail to Infiltrates Systems

• NIST Introduces ARIA Program to Enhance AI Safety and Reliability

• The Ticketmaster Data Breach May Be Just the Beginning

• Enhancing Cybersecurity: Automated Vulnerability Detection and Red Team Exercises with Validation Scans

• Unmasking Moonstone Sleet: A Deep Dive into North Korea’s Latest Cyber Threat

• Security Lapse at First American Exposes Data of 44,000 Clients

• FBI Takes Down Massive Global Army of Zombie Computer Device

• Mysterious Hack Destroyed 600,000 Internet Routers

• AI Company Hugging Face Detects Unauthorized Access to Its Spaces Platform

• What is an IS (RBI) Audit?

• AI Company Hugging Face Notifies Users of Suspected Unauthorized Access

• CISA Warns: Patch Now! Actively Exploited Linux Kernel Vulnerability Puts Systems at Risk

• What happens when facial recognition gets it wrong – Week in security with Tony Anscombe

• Understanding Credential Phishing

• Live Nation confirms Ticketmaster was hacked, says personal information stolen in data breach

• SEC Tightens Cybersecurity Regulations for Public Companies

• Twitch ditches Safety Advisory Council, relaunches with vetted ‘ambassadors’

• An interview with the most prolific jailbreaker of ChatGPT and other leading LLMs

• For the Love of Learning: We’re Here for You at Cisco Live 2024 Las Vegas!

• Impart Security: Leading the Charge in API Security with SOC 2 Type 2 Certification | Impart Security

• Risk vs. Threat vs. Vulnerability: What is the difference?

• Adaptive DDoS Defense’s Value in the Security Ecosystem

• ShinyHunters is selling data of 30 million Santander customers

• Hugging Face says it detected ‘unauthorized access’ to its AI model hosting platform

• Snowflake denies miscreants melted its security to steal data from top customers

• IT Security News Monthly Summary – June

• IT Security News Daily Summary 2024-05-31

• US senator claims UnitedHealth’s CEO, board appointed ‘unqualified’ CISO

• Hacked, leaked, exposed: Why you should never use stalkerware apps

• Friday Squid Blogging: Baby Colossal Squid

• International Malware Takedown Seized 100+ Servers

• Exposed and vulnerable: Recent attacks highlight critical need to protect internet-exposed OT devices

• Nexus Dashboard Essentials: Learn How to Manage Your Data Center Fabric Like a Pro

• Keep your iPhone super secure. This app shows you how

• Cyber cops plead for info on elusive Emotet mastermind

• Senator Calls for FTC, SEC Probe Into UnitedHealth’s ‘Negligence’ in Breach

• Snowflake compromised? Attackers exploit stolen credentials

• Cyber Security Today Week in Review for week ending May 31, 2024

• Recall: Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible.

• Proven Data Restores PowerHost’s VMware Backups After SEXi Ransomware Attack

• Immersive Labs Study Reveals AI Prompt Injection Vulnerability in Bots

• A Major Industrial Cybersecurity Threat: Living off the Land Attacks

• Mysterious Cyber Attack Took Down 600,000+ Routers in the U.S.

• Hackers steal $305M from DMM Bitcoin crypto exchange

• ‘Pumpkin Eclipse’ — 600,000+ Rural ISP Routers Bricked Beyond Repair

• How to tell if a VPN app added your Windows device to a botnet

• Hackers steal $305 million from DMM Bitcoin crypto exchange

• USENIX Security ’23 – zkSaaS: Zero-Knowledge SNARKs as a Service

• Part 13

• TrustCloud Product Updates: May 2024

• The NSA advises you to turn your phone off and back on once a week – here’s why

• Ransomware attack on Poland news agency and Seattle Public Library

• Essential Data Protection Starts with Least Privilege

• Proven Data Restores Powerhosts’ VMware Backups After SEXi Ransomware Attack

• Internet Safety Month: Keep Your Online Experience Safe and Secure

• New Nork-ish Cyberespionage Outfit Uncovered After Three Years

• CISA Warns Of Exploited Linux Kernel Vulnerability

• Mysterious Threat Actor Used Chalubo Malware To Brick 600,000 Routers

• Okta Says Customer Identity Cloud Prone To Credential Stuffing Attacks

• Information Of Hundreds Of European Politicians Found On Dark Web

• Fraudulent SMS Entities Blacklisted in Government Crackdown

• A Practical Guide to Applying Zero Trust Principles to Active Directory for Microsoft On-Premises and Hybrid Environment Protection

• New Nork-ish cyberespionage outfit uncovered after three years

• BSides Knoxville 2024: A Community Celebrating A Decade of Cybersecurity

• Facebook Account Takeovers: Can Tech Giant Stop Hijacking Scams?

• How to stop ransomware for good— and add the missing layer to ransomware resiliency

• A Data Responsibility: Leveraging the Power of Trust to Drive Growth

• Get Ready for more Cisco Software and Solutions on Google Cloud Marketplace

• CTI for M&A

• Cybersecurity Insights with Contrast CISO David Lindner | 5/31/24

• Phishing Campaigns Exploit Cloudflare Workers to Harvest User Credentials

• Edge Computing Versus Cloud Computing: Key Similarities and Differences

• Top Tech Conferences & Events to Add to Your Calendar in 2024

• Over 600,000 SOHO routers were destroyed by Chalubo malware in 72 hours

• Effective Incident Response: A Cybersecurity Playbook for Executives

• Navigating the Danger Zone: Discord’s Battle Against Malware

• Microsoft Warns of Surge in Cyber Attacks Targeting Internet-Exposed OT Devices

• The Public Sector’s Troubled Relationship to Ransomware in 2023: A Year in Review

• TikTok Developing Clone Of App’s Core Algorithm – Report

• In Other News: Apple WPS Surveillance, Canadian Gov Wants Backdoors, NIST AI Program

• ELLIO and ntop partnership to boost high-speed network traffic monitoring with real-time data on opportunistic scans, botnets, and mass attacks

• 25,000 individuals affected in BBC Pension Scheme data breach

• DDoS-as-a-Service Botnet Backed by Mirai Attacking Gaming Community

• Hackers Weaponizing MS Office-Cracked Versions to Deliver Malware

• FlyingYeti Exploits WinRAR Vulnerability For Targeted Malware Attacks

• LilacSquid Hackers Attacking IT Industries To Harvest Confidential Data

• Is Zero Trust Enough?

• Introducing the Open Supply-Chain Information Modeling (OSIM) Technical Committee

• LilacSquid APT targeted organizations in the U.S., Europe, and Asia since at least 2021

• Beyond Threat Detection – A Race to Digital Security

• New banking trojan “CarnavalHeist” targets Brazil with overlay attacks

• Data Leak Exposes Business Leaders and Top Celebrity Data

• Hackers Exploiting Stored XSS Vulnerabilities in WordPress Plugins

• OpenAI’s Altman Sidesteps Questions About Governance, Johansson at UN AI Summit

• CISA Warns of Exploited Linux Kernel Vulnerability

• Mysterious Threat Actor Used Chalubo Malware to Brick 600,000 Routers

• Information of Hundreds of European Politicians Found on Dark Web

• Google to push ahead with Chrome’s ad-blocker extension overhaul in earnest

• How AI Will Change Democracy

• Check Point VPN zero-day exploited since beginning of April (CVE-2024-24919)

• Amazon Given FAA Clearance To Expand Drone Deliveries

• 6 Best Enterprise VPN Solutions for 2024

• The Evolution of Security in Containerized Environments

• OpenAI, Meta, and TikTok Crack Down on Covert Influence Campaigns, Some AI-Powered

• Russian Hackers Target Europe with HeadLace Malware and Credential Harvesting

• BBC Pension Scheme Breached, Exposing Employee Data

• “K1w1” InfoStealer Uses gofile.io for Exfiltration, (Fri, May 31st)

• What Is Cloud Security? Definition, Best Practices & Types

• Hackers Boast Ticketmaster Breach on Relaunched BreachForums

• Cybersecurity News: UnitedHealth responsibility, Europol dropper takedown, malware bricks routers

• The 8 P’s to Mitigate Risks in Software Product Development Initiatives

• apexanalytix Cyber Risk provides instant alerts for supplier data breaches

• Terra Labs, Do Kwon Settle SEC Fraud Case

• VirusTotal Celebrates 20th Anniversary, What’s Next?

• Surge in fake pharmacy campaigns abusing Firebase link shortener

• BBC Data Breach Impacts 25,000 Employees

• #Infosec2024: Why Cybersecurity is Critical for the 2024 Paris Olympics

• OpenAI, Meta, TikTok Disrupt Multiple AI-Powered Disinformation Campaigns

• Beware of Fake Browser Updates That Deliver Bitrat & Lumma Stealer

• Check Point Releases Emergency Fix for Exploited VPN Zero-Day – Key Points

• BBC disclosed a data breach impacting its Pension Scheme members

• Over 600K routers in USA were disrupted by Cyber Attack

• The Crucial Role of Security in Accelerating 5G Adoption

• What is ISO 27701 PIMS?

• FlyingYeti phishing crew grounded after abominable Ukraine attacks

• AI in HR: Is artificial intelligence changing how we hire employees forever?

• Cyber Security Today, May 31, 2024 – Hundreds of thousands of routers are wiped, warnings to Okta and Snowflake administrators, and more

• Lack of skills and budget slow zero-trust implementation

• Operation Endgame – 16,466,858 breached accounts

• From Phishing to Fraud: How AI Can Safeguard Your Customers

• Encrypted Notepad: Open-source text editor

• New infosec products of the week: May 31, 2024

• ISC Stormcast For Friday, May 31st, 2024 https://isc.sans.edu/podcastdetail/9004, (Fri, May 31st)

• Ransomware Attack Struck This Medical Device Manufacturer

• Mystery miscreant remotely bricked 600,000 SOHO routers with malicious firmware update

• Mystery attacker remotely bricked 600,000 SOHO routers with malicious firmware update

• Hackers Use Trojanized Minesweeper Clone to Phish Financial Organizations

• In the jungle of AWS S3 Enumeration

• OpenAI is very smug after thwarting five ineffective AI covert influence ops

Generated on 2024-06-01 23:55:07.249525