IT Security News Daily Summary 2024-06-04

• A SANS’s 2024 Threat-Hunting Survey Review

• Utility scams update

• SecOps Teams Shift Strategy as AI-Powered Threats, Deepfakes Evolve

• Cogility Launches TacitRed – Tactical Attack Surface Management

• Command senior chief busted for secretly setting up Wi-Fi on US Navy combat ship

• RelationalAI launches powerful Knowledge Graph Coprocessor for Snowflake users

• 5 ways to save your Windows 10 PC in 2025 – and most are free

• Former OpenAI Employees Lead Push to Protect Whistleblowers Flagging Artificial Intelligence Risks

• Russian Threat Groups Turn Eyes to the Paris Olympic Games

• TikTok acknowledges exploit targeting high-profile accounts

• Car Makers Shouldn’t Be Selling Our Driving History to Data Brokers and Insurance Companies

• Pentagon ‘doubling down’ on Microsoft despite ‘massive hack,’ senators complain

• NIST 2.0: Securing Workload Identities and Access

• Life in the Swimlane with Emily Spector, Senior SDR

• The Role of DevSecOps in Enhancing CNAPP Efficiency

• TikTok Hack Targets ‘High-Profile’ Users via DMs

• Best of the Best: Cisco Customer Advocate Awards: Americas 2024 Winners

• RansomHub gang claims the hack of the telecommunications giant Frontier Communications

• Security challenges in the financial sector⎪Max Imbiel (CISO, Bitpanda)

• The best secure browsers for privacy in 2024: Expert tested

• London NHS Crippled by Ransomware, Several Hospitals Targeted edit

• Industry Innovation: Solving Business Challenges in Retail

• Cybercriminals attack banking customers in EU with V3B phishing kit – PhotoTAN and SmartID supported.

• Security Considerations When Building SaaS

• Was the Ticketmaster Leak Snowflake’s Fault?

• UAE Takes Measures to Strengthen Cybersecurity in the META Region

• London Hospitals Cancel Operations Following Ransomware Incident

• Ransomware attack on NHS and Google Data Breach 2024 details

• Paris Olympics 2024: Cyber Attackers are Targeting Companies Associated With Games, Report Finds

• Cisco Live 2024: Cisco Unveils AI Deployment Solution With NVIDIA

• #Infosec2024 Ransomware: The Key Updates You Need to Know

• New OpenSSL Patch Releases Available

• Ukraine Hit by Cobalt Strike Campaign Using Malicious Excel Files

• Developers Beware Of Malicious npm Package That Delivers Sophisticated RAT

• Secure Web Gateway vs Firewall: Learn the Difference

• Russian Power Companies, IT Firms, and Govt Agencies Hit by Decoy Dog Trojan

• London hospitals declare critical incident after service partner ransomware attack

• CISOs and Senior Leadership at Odds Over Security

• 5G and SASE: Reimagining WAN Infrastructure

• Check Point Warns Of Zero-Day In Network Security Gateway Products

• Europol Puts An End To Major Botnets With ‘Operation Endgame’

• XSS Flaws In Multiple WordPress Plugins Exploited To Deploy Malware

• Cracked Microsoft Office Version Delivers Multiple Pronged Malware

• This Hacker Tool Extracts All the Data Collected by Windows’ New Recall AI

• AI Takes Center Stage in the Data Center

• Cisco Live 2024: Ensure Digital Resilience, Pervasive Security, and Simpler Operations

• Entering the New Era of Digital Experience Assurance Across Every Network

• Cisco Security at Cisco Live 2024: Innovating at Scale

• Cisco Live 2024: Enhancing Network Simplicity and Efficiency While Facilitating Superior Digital Experiences

• Fraudulent Browser Updates Are Propagating BitRAT and Lumma Stealer Malware

• RedTail Cryptominer Exploits Critical Zero-Day in PAN-OS

• Why Mid-Sized Businesses Are Attractive Targets for Cyber Criminals

• Veeam Data Cloud Vault enables users to securely store backup data

• LOKKER Consent Verification identifies potential compliance issues

• Account Takeovers Outpace Ransomware as Top Security Concern

• Help Desk Personnel are the Side Door for Cybercriminals

• Decoding Router Vulnerabilities Exploited by Mirai: Insights from Honeypot Data

• The Year in GenAI: Security Catches Up with Innovation

• Telerik Report Server Flaw Could Let Attackers Create Rogue Admin Accounts

• Cisco Enhances Zero Trust Access with Google

• The Cybersecurity Conundrum: Navigating the Challenges with Fewer Resources and Rising Threats

• Christie’s stolen data sold to highest bidder rather than leaked, RansomHub claims

• PoC for Progress Telerik RCE chain released (CVE-2024-4358, CVE-2024-1800)

• Embracing the benefits of LLM securely

• How to ensure the security of your SaaS platform

• Extend & Strengthen DDoS Security Across the Entire Network with Infinity Playblocks

• Details of Atlassian Confluence RCE Vulnerability Disclosed

• AI’s Impact on the Job Market: 12 Million Occupational Transitions by 2030

• ManageEngine unveils passwordless, phishing-resistant FIDO2 authentication

• #Infosec2024: How to Develop Your Future Team

• New Ways for CNAPP to Shift Left and Shield Right: The Technology Trends That Will Allow CNAPP to Address More Extensive Threat Models

• Microsoft accused of tracking kids with education software

• Uniview NVR301-04S2-P4

• CISA Releases Four Industrial Control Systems Advisories

• Cybercrooks Get Cozy With BoxedApp To Dodge Detection

• NIST Turns To IT Consultants To Clear National Vulnerability Database

• Google Accidentally Published Internal Search Docs To GitHub

• Vulnerabilities Exposed Millions Of Cox Modems To Remote Hacking

• Tightening Water Cybersecurity is Now Imperative as Biden Administration Issues Urgent Warning to State Leaders

• Microsoft is again named the overall leader in the Forrester Wave for XDR

• SailPoint Risk Connectors helps organizations identify and act on risks

• New Multi-Stage Malware Targets Windows Users in Ukraine

• No-Defender, Yes-Defender, (Tue, Jun 4th)

• Mastering the Art of Least Privilege Access Implementation: A Comprehensive Guide

• The Importance of Crypto Agility in Preventing Certificate-Related Outages

• Consolidation is Coming to Corporate Security Technology

• eBook: Breaking bad actors

• #Infosec24: Enterprise Browser Touted as Solution to GenAI Privacy Risks

• Relying on the Unreliable

• Ransomware Group Claims Cyberattack on Frontier Communications

• CISA Warns of Attacks Exploiting Old Oracle WebLogic Vulnerability

• Progress Patches Critical Vulnerability in Telerik Report Server

• Wipro Cyber X-Ray empowers CXOs to make optimized security investment decisions

• Combining Sekoia Intelligence and OpenCTI

• Transforming SOC Operations: How TacitRed Curated Threat Intelligence Boosts Analyst Efficiency and Delivers Tactical Attack Surface Intelligence

• ShinyHunters Resurrect BreachForums Shortly After FBI Takedown

• CISA Adds A Linux Vulnerability To Its Known Exploits Catalog

• Replicate AI Vulnerability Could Expose Sensitive Data

• Dessky Snippets WordPress Plugin Exploited For Card Skimming Attacks

• ChatGPT plugin flaws introduce enterprise security risks

• February 2024 Cyber Attacks Statistics

• 361 million account credentials leaked on Telegram: Are yours among them?

• Hackers Use MS Excel Macro to Launch Multi-Stage Malware Attack in Ukraine

• The Next Generation of RBI (Remote Browser Isolation)

• Debt collection agency FBCS leaks information of 3 million US citizens

• Cybercrooks get cozy with BoxedApp to dodge detection

• Ransomware Group Creation Touched Yearly All Time High

• Russian Hackers In Attempt To Distrupt The 2024 Paris Olympic Games

• Experts released PoC exploit code for a critical bug in Progress Telerik Report Servers

• Unlocking HIPAA Compliance: Navigating Access Control and MFA Guidelines

• #Infosec24: Deepfake Expert Warns of “AI Tax Havens”

• The Value of Data

• 6 Best VPNs for the UK in 2024

• AI Is Your Coworker Now. Can You Trust It?

• Snowflake Warns: Targeted Credential Theft Campaign Hits Cloud Customers

• From Text to Action: Chatbots in Their Stone Age

• Tech Titans Adopt Post-Quantum Encryption to Safeguard User Data

• How to Start a Career in Cybersecurity

• Vulnerabilities Exposed Millions of Cox Modems to Remote Hacking

• Cybersecurity M&A Roundup: 28 Deals Announced in May 2024

• I’m Rewarding Your Successful Use of the Security Budget by Giving You Less of It

• Prosecutors Say Lynch Behind Autonomy Fraud

• Inside the Biggest FBI Sting Operation in History

• What is DKIM Vulnerability? DKIM l= tag Limitation Explained

• Cybersecurity News: Russian criminals unmasked, Background check firm breach, Creds added to HIBP

• Microsoft ‘Cuts Hundreds Of Cloud Jobs’

• Spotify Raises US Prices In Profit Drive

• Zyxel NAS Devices Vulnerability Let Attackers Execute Code Remotely

• 37 Vulnerabilities Patched in Android

• Soliciting Input Regarding a Potential Hardening Effort

• Russians Love YouTube. That’s a Problem for the Kremlin

• Nvidia, AMD Hawk AI Chips As Computex Opens

• Computex: Qualcomm Promotes Windows AI Chips With ‘I’m A Mac’ Actor

• Plainsea cybersecurity platform to launch at Infosecurity Europe

• Data Defense: Leveraging SaaS Security Tools

• Trend Micro Inline NDR enhances threat detection and response

• #Infosec2024: UK Businesses Faced with Month-Long Recoveries from Supply Chain Attacks

• Google To Scale Back AI Searches In Latest Controversy

• Multiple flaws in Cox modems could have impacted millions of devices

• Podcast Episode: AI on the Artist’s Palette

• It?s Getting Hot in Here: EMEA SOTI

• Underground Ransomware Continues to Attack Industries Of Various Sizes

• DarkGate Malware Replaces AutoIt with AutoHotkey in Latest Cyber Attacks

• #Infosec2024: Conflicts Drive DDoS Attack Surge in EMEA

• Android and iPhone users are vulnerable to Zero Click hacks

• 20 free cybersecurity tools you might have missed

• Third-party vendors pose serious cybersecurity threat to national security

• Oracle WebLogic Server OS Command Injection Flaw Under Active Attack

• Security challenges mount as as companies handle thousands of APIs

• 50 CISOs & Cybersecurity Leaders Shaping the Future

• Hudson Rock yanks report fingering Snowflake employee creds snafu for mega-leak

• ISC Stormcast For Tuesday, June 4th, 2024 https://isc.sans.edu/podcastdetail/9008, (Tue, Jun 4th)

• The NIST Finally Hires a Contractor to Manage CVEs

• Vulnerability Recap 6/3/24 – Check Point, Okta & Fortinet Issues

• NIST turns to IT consultants to clear National Vulnerability Database backlog

• IT Security News Daily Summary 2024-06-03

• Telegram Combolists – 361,468,099 breached accounts

• Is Your Phone Vulnerable? NSA Recommends a Simple Fix: Restart

• Cybersecurity Automation in Healthcare Program Launched by HHS Agency

• Enhancing Vehicle Routing Problems With Deep Reinforcement Learning and Metaheuristics

• Zero-Click Attacks: The Silent Assassins of the Digital World

• Mandiant: Ransomware investigations up 20% in 2023

• Crooks threaten to leak 3B personal records ‘stolen from background check firm’

• CISA adds Oracle WebLogic Server flaw to its Known Exploited Vulnerabilities catalog

• Cyberattack Risks Keep Small Business Security Teams on Edge

• Google Hates Ad Blockers: Manifest V3 Push Starts Today

• EFF Appeals Order Denying Public Access to Patent Filings

• Randall Munroe’s XKCD ‘Modes of Transportation’

• The Myth of “Fileless” Malware

• Popular WordPress Plugins Leave Millions Open to Backdoor Attacks

• The best Bluetooth trackers of 2024: Expert tested

• Kaspersky released a free Linux virus removal tool – but is it necessary?

• Using ChatGPT as a SAST tool to find coding errors

• Donald Trump Joins TikTok After Trying To Ban It

• New security superpowers to help IT with OT security

• Forrester Names Palo Alto Networks a Leader in XDR

• Santander Bank Faces Major Data Breach Affecting 30 Millions

• Snowflake cloud customers warned against data theft and extortion attacks

• 800 arrests, 40 tons of drugs, and one backdoor, or what a phone startup gave the FBI, with Joseph Cox: Lock and Code S05E12

• CISA Adds One Known Exploited Vulnerability to Catalog

• Menace Unleashed: Excel File Deploys Cobalt Strike at Ukraine

• A Practical Guide for Handling Unauthorized Access to Snowflake

• Securing Your Snowflake Environments

• USENIX Security ’23 – Automated Exploitable Heap Layout Generation for Heap Overflows Through Manipulation Distance-Guided Fuzzing

• Ransomware Rises Despite Law Enforcement Takedowns

• It’s Time to Up-Level Your EDR Solution

• The Giro Effect: Transforming Partnerships in the Ecosystem Era

• Russia takes gold for disinformation as Olympics approach

• Insikt Group Tracks GRU’s BlueDelta Cyber-Espionage Campaigns Across Europe

• Ransomware Attacks on the Rise! Nearly 2900 Assaults Reported in the First Quarter of 2024

• Google Confirms Leak of 2,500 Internal Documents on Search Algorithm

• Vulnerability Summary for the Week of May 27, 2024

• Ransomware Rises Amid Law Enforcement Takedowns

• Authorities Ramp Up Efforts to Capture the Mastermind Behind Emotet

• Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users

• WhatsApp cryptocurrency scam goes for the cash prize

• go-secdump Tool Remotely Dump Secrets From Windows registry

• Identities of Cybercriminals Linked to Malware Loaders Revealed

• Meta to Train AI with Public Facebook and Instagram Posts

• Running CloudTest on Akamai Cloud Computing

• CarnavalHeist Weaponizing Word Documents To Steal Login Credentials

• Spanish police shut down illegal TV streaming network

• Less Is More: Why MSPs Are Moving to the Cybersecurity Platform Model

• Improved Guidance for Azure Network Service Tags

• 5 Reasons Why You Should Use a Password Manager

• How Do Password Managers Work and Why Do You Need One?

• Funding a Whole of State Approach for your Community

• PoC Published for Exploited Check Point VPN Vulnerability

• Online Banking Frauds: The Silent Threat to India’s Financial Stability

• Live Nation Confirms Massive Ticketmaster Data Breach

• CVE-2024-24919 Exploitation, Veriti Proactive Remediation

• Seeing Like a Data Structure

• NYDFS Cybersecurity Regulation: Automated Blocking of Commonly Used Passwords

• 8220 Gang Exploiting Oracle WebLogic Server Flaw To Deploy Cryptominer

• Check Point warns customers to patch VPN vulnerability under active exploitation

• XDR means so much more than some may realize

• Snowflake Data Breach Impacts Ticketmaster, Other Organizations

• Zyxel Networks USG LITE 60AX improves network security

• Shining the Light on Shadow IT: Top Five SaaS Security Tips for Third-Party Risk Management

• SASE Threat Report: 8 Key Findings for Enterprise Security

• A Wireshark Lua Dissector for Fixed Field Length Protocols, (Mon, Jun 3rd)

• Ransomware Rebounds: Extortion Threat Surges in 2023, Attackers Rely on Publicly Available and Legitimate Tools

• Facebook Sees Most Young Adult Users In Three Years

• Saudi Fund Invests In China’s Biggest AI Start-Up

• New V3B Phishing Kit Steals Logins and OTPs from EU Banking Users

• Price Drop: Learn Cybersecurity Skills From Scratch for Just $35

• How Donald Trump Could Weaponize US Surveillance in a Second Term

• APT28 targets key networks in Europe with HeadLace malware

• Researcher Uncovers Flaws in Cox Modems, Potentially Impacting Millions

• UK School Forced to Close Following Cyber-Attack

• Demystifying SOC 2 and ISO 27001

• Hugging Face Hack: Spaces Secrets Exposed

• Important Security Reminder – Install the Fix to Stay Protected

• IT threat evolution in Q1 2024. Non-mobile statistics

• IT threat evolution Q1 2024

• IT threat evolution in Q1 2024. Mobile statistics

• Task Force Triumphs in Shutting Down Six Notorious Malware Droppers

• Cybersecurity News: Ticketmaster breached, Ticketek Australia breached, HHS notification change

• South Korea Chip Stockpiles Drop Amidst Surge In AI Chip Demand

• US Regulator Asks For More Data In Zoox Self-Driving Probe

• What Is SOAR? Definition, Benefits & Use Cases

• High-risk Atlassian Confluence RCE fixed, PoC available (CVE-2024-21683)

• #Infosec2024: Nearly All of FTSE 100 Exposed to Third and Fourth-Party Breaches

• Cyber Security Today, June 3, 2024 – Four cloud-related data breaches

• PikaBot: a Guide to its Deep Secrets and Operations

• Advanced CI/CD: 6 steps to better CI/CD pipelines

• Understanding Vulnerability Management and Patch Management

• How Can FIM Protect Against Insider Threats

• Derisking your CNI

• Int’l Police Target Botnets In ‘Operation Endgame’

• Hackers Offer To Sell Hacked Data On Santander Customers, Staff

• Sanctioned Huawei Takes Global Top Spot For Foldable Smartphones

• TechRepublic Premium Editorial Calendar: Policies, Checklists, Hiring Kits and Glossaries for Download

• Secrets Exposed in Hugging Face Hack

• Andariel Hackers Target South Korean Institutes with New Dora RAT Malware

• Ticketmaster Confirms Breach Potentially Impacting 560 Million Users

• Critical wpDataTables Vulnerability Let Attackers Perform SQL Injection

• Insider Risk Digest: May

• Experts found information of European politicians on the dark web

• A week in security (May 27 – June 2)

• Threat Actors Claiming Breach Of Heineken Employees Data

• Exploring the Most Common Types of Cyber Attacks: Understanding the Threat Landscape

• Researchers crash Baidu robo-cars with tinfoil and paint daubed on cardboard

• NSA suggests these 11 mobile security tips to Android and iPhone users

• NethSecurity: Open-source Linux firewall

• Businesses must prioritize digital trust to avoid major problems

• Beware: Fake Browser Updates Deliver BitRAT and Lumma Stealer Malware

• Infosec products of the month: May 2024

• Organizations are moving from experimenting with AI to adopting it

• ISC Stormcast For Monday, June 3rd, 2024 https://isc.sans.edu/podcastdetail/9006, (Mon, Jun 3rd)

Generated on 2024-06-04 23:55:11.008835