IT Security News Daily Summary 2024-06-06

• ChatGPT privacy tips: Two important ways to limit the data you share with OpenAI

• Google and Microsoft confirm Cyber Threat to 2024 Paris Olympics

• New EmailGPT Flaw Puts User Data at Risk: Remove the Extension NOW

• EU Council Presidency’s Last-Ditch Effort For Mass Scanning Must Be Rejected

• Why Do Hackers Love Cryptocurrency?

• Narrowing the Stubborn Cybersecurity Worker Gap

• Galileo’s Luna redefines GenAI evaluation, boasting 97% lower costs and 11x faster speeds

• The Snowflake Attack May Be Turning Into One of the Largest Data Breaches Ever

• Cisco AI Assistant for Managing Firewall Policies Is Now Available

• Security, Surveillance, and Government Overreach – the United States Set the Path but Canada Shouldn’t Follow It

• FBI encourages LockBit victims to step right up for free encryption keys

• How DataDome Protects AI Apps from Prompt Injection & Denial of Wallet Attacks

• Alphabet Names Anat Ashkenazi As CFO

• Microsoft Shows Venerable And Vulnerable NTLM Security Protocol The Door

• US Proposes To Boost Internet Security, Citing Chinese Carrier Action

• data splitting

• Singapore, US expand AI partnership to focus on upskilling youth and women

• The best travel VPNs of 2024: Expert tested and reviewed

• A new Linux version of TargetCompany ransomware targets VMware ESXi environments

• Insights from RSA Conference 2024: Transformative Innovations in Cybersecurity

• The sliding doors of misinformation that come with AI-generated search results

• Amazon’s Zoox Begins Testing In Austin, Miami

• Crimson Palace: Chinese Hackers Steal Military Secrets Over 2 Years

• Mocking Dependencies and AI Is the Next Frontier in Vue.js Testing

• Ethical hacker releases tool to exploit Microsoft’s Recall AI, says it’s not ‘rocket science’

• You’ll soon be able to text 911 via RCS on your Android phone. Here’s how it works

• Chinese Hackers Exploit Old ThinkPHP Vulnerabilities in New Attacks

• Microsoft Recall is a Privacy Disaster

• SpaceX Completes Fourth Starship Test Flight

• #Infosec2024: Ransomware Ecosystem Transformed, New Groups “Changing the Rules”

• #Infosec2024: CISOs Need to Move Beyond Passwords to Keep Up With Security Threats

• Why SAST + DAST can’t be enough

• Prompt Injection Vulnerability in EmailGPT Discovered

• Navigating Meta’s AI Data Training: Opt-Out Challenges and Privacy Considerations

• Google Faces Scrutiny Over Internal Database Leak Exposing Privacy Incidents

• Google n Microsoft confirm Cyber Threat to 2024 Paris Olympics

• The hidden pitfalls of travel apps

• Hit by LockBit? The FBI is waiting to help you with over 7,000 decryption keys

• Espionage with a Drone

• USENIX Security ’23 – Near-Ultrasound Inaudible Trojan (Nuit): Exploiting Your Speaker to Attack Your Microphone

• Automation Takes Off: A New Dawn for Enterprises to Guard Against the Cyberattack Barrage

• #Infosec2024: AI Red Teaming Provider Mindgard Named UK’s Most Innovative Cyber SME

• US Regulators To Open Antitrust Probes Into Microsoft, OpenAI, Nvidia

• Wordfence Intelligence Weekly WordPress Vulnerability Report (May 27, 2024 to June 2, 2024)

• Ransomware ravaged schools and cities in May

• Emerson Ovation

• Cryptographic Protocol Challenges

• Why Hackers Love Logs

• US Authorities Attempting to Recover $5.3 Million Stolen in BEC Scam

• First American Reveals Impact of December Cyberattack

• Some Generative AI Company Employees Pen Letter Wanting ‘Right to Warn’ About Risks

• Leveraging Escalation Attacks in Penetration Testing Environments – Part 2

• Leveraging Escalation Attacks in Penetration Testing Environments – Part 1

• TargetCompany’s Linux Variant is Targeting ESXi Environments

• Strengthening Healthcare Cybersecurity: A Collaborative Imperative

• Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS Attacks

• Nvidia Overtakes Apple As Second Most Valuable Tech Firm

• AI-driven compliance: The key to cloud security

• What Are the Benefits of Choosing an AI Trading Bot?

• Cybersecurity Concerns Facing the 2024 U.S. Elections

• Exploitation of Recent Check Point VPN Zero-Day Soars

• A Russian Cyber Gang Is Thought to Be Behind a Ransomware Attack That Hit London Hospitals

• Google, Microsoft: Russian Threat Actors Pose High Risk to 2024 Paris Olympics

• Darktrace MDR service improves cyber resilience for organizations

• 9 Malware Types Enterprise Professionals Need to Know

• Kali Linux 2024.2: A Security Powerhouse Unbound with t64 Transition and New Tools

• Getting to Know Natalia Vezhevatova

• Uncle Sam seeks to claw back $5M+ stolen from trade union through spoofed email

• #Infosec2024: Experts Share How CISOs Can Manage Change as the Only Constant

• Crypto Kaleidoscope: Investing in Colorful Coins, Living a Vibrant Life

• Advance Auto Parts customer data posted for sale

• 1Password Review (2024): Is It a Safe Password Manager?

• Mastering Cyber Risk Quantification Methods: A Strategic Approach

• Listen up: 10 cybersecurity podcasts you can learn from

• #Infosec2024: How to Change Security Behaviors Beyond Awareness Training

• #Infosec2024: Third of Web Traffic Comes from Malicious Bots, Veracity Says

• Cybersecurity Jobs: The Demand Grows, but Supply Falls Short, Report

• Husband stalked ex-wife with seven AirTags, indictment says

• Vulnerabilities Patched in Kiuwan Code Security Products After Long Disclosure Process

• Third-Party Cyber Attacks: The Threat No One Sees Coming – Here’s How to Stop Them

• #Infosec2024: Mandatory Ransomware Reporting Would Be Positive Move, Say Experts

• Microsoft Recall snapshots can be easily grabbed with TotalRecall tool

• Microsoft shows venerable and vulnerable NTLM security protocol the door

• Securing Meraki Networks with Cisco XDR

• Multiple Chinese APTs Targeted Southeast Asian Government for Two Years

• Upleveling the State of SMB Cybersecurity

• Interpol and FBI Break Up a Cyber Scheme in Moldova to Get Asylum for Wanted Criminals

• Zyxel patches critical flaws in EOL NAS devices

• Digital natives are not cybersecurity natives

• Windows AI’s Screenshot Feature Labeled a ‘Disaster’ for Security

• FORTIGATE CLOUD NATIVE FIREWALL (FORTIGATE CNF)

• 1Password Review: Features, Pricing & Security

• 7-year-old Oracle WebLogic bug under active exploitation

• #Infosec2024: Supply Chains Remain Hidden Threat to Business

• The Lords of Silicon Valley Are Thrilled to Present a ‘Handheld Iron Dome’

• FBI obtained 7,000 LockBit decryption keys, victims should contact the feds to get support

• Hackers Exploit Legitimate Packer Software to Spread Malware Undetected

• Prevent Account Takeover with Better Password Security

• We Want a Solution to Remediate, Not Just Detect Problems

• Salesforce Opens First AI Centre In London

• Fog Ransomware Attacking Windows Servers Administrators To Steal RDP Logins

• UNC1151 Hackers Weaponizing Excel Documents To Attack Windows Machine

• FBI Says It Has 7,000 LockBit Ransomware Decryption Keys

• Cybersecurity News: Psychology vs. threat actors, AI leveling up, Qilin hit Synnovis

• Malicious Python Script with a “Best Before” Date, (Thu, Jun 6th)

• Hackers Attacking Banking Customers Using Phishing-As-A-Service V3B Toolkit

• Python Developers Beware! Russian Hackers Targeting You With Malicious Packages

• Pester Power – How Hackers Wear Down Your Defences

• Parrot Security OS 6.1 Released – What’s New

• What is the Standard of Good Practice for Information Security?

• What Is the Difference between FIM and DLP?

• RansomHub operation is a rebranded version of the Knight RaaS

• Tenable partners with Deloitte to help organizations reduce cyber risk

• Google Maps Timeline Data to be Stored Locally on Your Device for Privacy

• Commando Cat: A Novel Cryptojacking Attack Abusing Docker Remote API Servers

• Apple Refused to Pay $1 Million Bounty to Kaspersky Lab for iOS Zero-days

• How to Lead an Army of Digital Sleuths in the Age of AI

• Microsoft Research chief scientist has no issue with Windows Recall

• Symmetry Systems Recognized as a Strong Performer in the 2024 Gartner® Peer Insights™ Voice of the Customer for Data Security Posture Management report

• GHOSTENGINE Exploit: Vulnerable Drivers Facing Attack

• HYPR raises $30 million to combat threats posed by generative AI

• Webinar: Exposure management and your attack surface

• #Infosec2024: Small Firms Need to Work Smarter to Stretch Security Budgets

• Buffalo Man Pleads Guilty To Buying Stolen Data From Genesis Market

• IoT Security Means Remediation Not Mitigation

• Hackers Target Python Developers with Fake “Crytic-Compilers” Package on PyPI

• Spain defense company servers hacked

• Bitcoin Heist Hits Japanese Exchange DMM Bitcoin

• Kali Linux 2024.2 Released With New Hacking Tools

• Sniffnet: Free, open-source network monitoring

• 90% of threats are social engineering

• Chinese attackers leverage previously unseen malware for espionage

• 78% of SMBs fear cyberattacks could shut down their business

• ISC Stormcast For Thursday, June 6th, 2024 https://isc.sans.edu/podcastdetail/9012, (Thu, Jun 6th)

• BTS #31 – Managing Complex Digital Supply Chains – Cassie Crossley

• Windows Recall Demands An Extraordinary Level Of Trust That Microsoft Hasn’t Earned

• TikTok Hackers Target Paris Hilton, CNN, And Other High Profile Users

• Emergency Patches Released For Critical Vulns Impacting EOL Zyxel NAS Boxes

• Ransomware Attack Disrupting London Hospitals

• Webex Bugs Patched Post Exposure Of German Govt Meetings

• Hundreds of Snowflake customer passwords found online are linked to info-stealing malware

• TikTok confirms CNN, other high-profile accounts hijacked via zero-day vulnerability

• Safeguarding AWS AI Services: Protecting Sensitive Permissions

• IT Security News Daily Summary 2024-06-05

• Malware can steal data collected by the Windows Recall tool, experts warn

• Dependency Injection

• Win for Free Speech! Australia Drops Global Takedown Order Case

• What is RansomHub? Looks like a Knight ransomware reboot

• Who are these RansomHub cyber-thieves? Looks like a Knight ransomware reboot

• Database Mess Up: Aussie Food Giant Patties Foods Leaks Trove of Data

• Cybersecurity Training Reduces Phishing Threats – With Numbers to Prove It

• Marketing Vs. Reality—What We Can Learn From The Ashley Madison Hack | Avast

• Cisco Talos: LilacSquid Threat Actor Targets Multiple Sectors Worldwide With PurpleInk Malware

• RansomHub Rides High on Knight Ransomware Source Code

• Vulnerability in Cisco Webex cloud service exposed government authorities, companies

• What is a cloud security framework? A complete guide

• Kali Linux 2024.2 released: 18 new tools, countless updates

• Few But High-Profile TikTok Accounts Hacked Via Zero-Click Attack in DM

• Emergency patches released for critical vulns impacting EOL Zyxel NAS boxes

• SUSE Linux Enterprise Server (SLES)

• How Proactive Responsible Radical Transparency Benefits Customers

• Bridging the gap between legacy tools and modern threats: Securing the cloud today

• Cisco Live 2024: New Unified Observability Experience Packages Cisco & Splunk Insight Tools

• Unseen Challenges in OT Security with DirectDefense

• How Proactive Responsible Transparency Benefits Customers

• Polish State Media Targeted in Alleged Russian-Backed Cyberattack

• Chinese State-Sponsored Operation “Crimson Palace” Revealed

• #Infosec 2024: Small Firms Need to Work Smarter to Stretch Security Budgets

• NHS Ransomware Attack 2024 launched by Russia

• Google Must Face $17 Billion Adtech Lawsuit, Tribunal Rules

• CEO Corner: Preparing for the Unavoidable – Why Incident Response Readiness is Non-Negotiable

• USENIX Security ’23 – HOMESPY: The Invisible Sniffer of Infrared Remote Control of Smart TVs

• Global Resurgence of Grandoreiro Banking Trojan Hitting High

• CISA Hosts First Annual Information and Communications Technology Supply Chain Risk Management Task Force Conference

• Outshift by Cisco Releases Motific’s AI Capabilities with the Power of Mistral AI Behind It

• Cisco Continues Elevating Partner AI Capabilities to Meet Customer Demand

• WhatsApp Bans 7.1 Million Indian Users, Warns of More Bans for Rule Violations

• #Infosec2024 Spyware: A Threat to Civil Society and a Threat to Business

• FBI Warns of Rise in Work-From-Home Scams

• Join Us 06-21-24 for “Hacking Generative AI Anxiety” – Super Cyber Friday

• 40,000 WordPress Sites affected by Vulnerability That Leads to Privilege Escalation in Login/Signup Popup WordPress Plugin

• Russian Hackers Blamed As Ransomware Impacts London Hospitals

• Reporting ransomware attacks: Steps to take

• Bringing the Cisco AppDynamics + Splunk Better Together story to Cisco Live

• CES: AI at the Forefront of Cybersecurity’s Future

• How Poor Cryptographic Practices Endanger Banking Software Security

• Zoho’s security stack improves businesses’ protections against breaches and attacks

• #Infosec24: 104 EU Laws Have Different Definitions of Cybersecurity

• Brute Force Attacks Against Watchguard VPN Endpoints, (Wed, Jun 5th)

• Akamai Celebrates Earth Day with a Cleanup of Rio Agres

• 2024: Old CVEs, New Targets ? Active Exploitation of ThinkPHP

• Cisco addressed Webex flaws used to compromise German government meetings

• What Are the Benefits of Choosing an AI Trading Bots?

• Tines’ AI features enhance workflow automation for security and IT teams

• Financial sextortion scams on the rise

• Why Millions of Pcs Aren’t Ready for Evolving Cyber Threats

• #Infosec24: Go Back to Basics With Risk Management to Tackle AI Risk

• Amazon’s First Trade Union Seeks Association With Largest US Union

• Researchers Show How Malware Could Steal Windows Recall Data

• Hypr Raises $30 Million for Passwordless Authentication

• Why Digital Threats are the New Frontier in Executive Protection

• Rise of Cybercrime in India: Reasons, Impacts & Safety Measures

• Securing India’s Infrastructure: Key Takeaways from the Colonial Pipeline Hack

• Globl Cybercrime Ring Dismantled in Landmark Operation by Thai and US Authorities

• Netskope introduces SaaS security enhancements to Netskope One for GenAI and SaaS collaboration

• Infosec24: Go Back to Basics With Risk Management to Tackle AI Risk

• Chinese Hackers Attacking Government Organization In Southeast Asia

• Say hello to the fifth generation of Malwarebytes

• Attention TikTok Users: Celebrities Accounts Targeted Including Paris Hilton

• The 4 Biggest Challenges for the Hybrid Enterprise and What CISOs Need to Solve Them

• What Individuals Get Wrong About Business Email Compromise

• Photos: Infosecurity Europe 2024

• Protecting PII Data With JWT

• Are Password Managers Safe to Use? (Benefits, Risks & Best Practices)

• 4 cuffed following probe into holiday scheme for cybercrooks

• Thales Passwordless 360° enables organizations to improve their identity management practices

• Intel 471 launches 471 Attack Surface Protection to enhance external threat visibility

• DarkGate switches up its tactics with new payload, email templates

• Understanding HyperCycle’s HyperShare Smart Contract Feature

• Beware Of Phishing Emails Prompting Execution Via Paste (CTRL+V)

• Resurgence of Ransomware: Mandiant Observes Sharp Rise in Criminal Extortion Tactics

• ‘NsaRescueAngel’ Backdoor Account Again Discovered in Zyxel Products

• Unpacking 2024’s SaaS Threat Predictions

• Chinese State-Backed Cyber Espionage Targets Southeast Asian Government

• CNN, Paris Hilton, and Sony TikTok accounts hacked via DMs

• MSPs Look to Streamline Cybersecurity Partnerships, Skills Shortage Persists

• Phishing for Gold: Cyber Threats Facing the 2024 Paris Olympics

• OpenAI, DeepMind Workers Warn Of AI Risks In Open Letter

• 361 Million Unique Email Credentials Leaked On Telegram Channels

• Online Privacy and Overfishing

• 225,000 More Cybersecurity Workers Needed in US: CyberSeek

• Rebranded Knight Ransomware Targeting Healthcare and Businesses Worldwide

• What’s up with the new kids?

• Hackers Leak 230,000 Users’ Data in “Tech in Asia” News Outlet Breach

• Big name TikTok accounts hijacked after opening DM

• The Age of the Drone Police Is Here

• TotalRecall shows how easily data collected by Windows Recall can be stolen

• TargetCompany’s Linux Variant Targets ESXi Environments

• TikTok Warns Cyberattack Targetted High Profile Accounts

• London Hospitals Cancel Operations and Appointments After Being Hit in Ransomware Attack

• Cisco Patches Webex Bugs Following Exposure of German Government Meetings

• Certificate Lifecycle Management The Key to Robust Digital Security in Healthcare

• Verimatrix XTD Accessibility Abuse Detector identifies Android mobile app threats

• #Infosec2024: Organizations Urged to Adopt Safeguards Before AI Adoption

• #Infosec2024: Data Security Needs to Catch Up With Growing Threats

• Cybersecurity News: London hospitals hit by ransomware, Christie’s stolen data sold, RansomHub claims Frontier breach

• Australia Drops Knife Attack Case Against X

• A Brief Look at AI in the Workplace: Risks, Uses and the Job Market

• Life in Cybersecurity: From the Classroom to the Next Generation of Cybersecurity Professional

• AI Autonomy and the Future of Cybersecurity

• An American Company Enabled a North Korean Scam That Raised Money for WMDs

• Ransomware Gang Leaks Data From Australian Mining Company

• Cyber Security Today, June 5, 2024 – New threat actor going after American IT firms, Canada’s Auditor General slams federal cybercrime-fighting agencies

• Threat Actors Weaponize Excel Files To Attack Windows Machines

• Microsoft Details AI Jailbreaks And How They Can Be Mitigated

• ESAs and ENISA sign a Memorandum of Understanding to strengthen cooperation and information exchange

• Appdome SDKProtect reduces third-party mobile supply chain risk

• How Hackers Using Packers To Hide Malware & Bypass Defenses

• Darkcrystal RAT Malware Attacking Government Officials Via Signal Messenger

• Zyxel addressed three RCEs in end-of-life NAS devices

• N2WS launches cross-cloud volume restore for AWS and Azure

• #Infosec2024: Tackling Cyber Challenges of AI-Generated Code

• Zyxel Releases Patches for Firmware Vulnerabilities in EoL NAS Models

• Celebrity TikTok Accounts Compromised Using Zero-Click Attack via DMs

• TikTok faces cyber attack but only few celebrities and brands impacted

• Unveiling the Mechanics of Offline Data Theft: How Your Information Can Be Compromised Beyond the Digital Realm

• Microsoft paid Tenable a bug bounty for an Azure flaw it says doesn’t need a fix, just better documentation

• Command Senior Chief Convicted For Setting Up Wi-Fi On US Navy Combat Ship

• Breaking a Password Manager

• Developers Beware Of Malicious npm Package Delivers Sophisticated RAT

• No summer break for cybercrime: Why educational institutions need better cyber resilience

• How AI-powered attacks are accelerating the shift to zero trust strategies

• Find out which cyber threats you should be concerned about

• Cybersecurity jobs available right now: June 5, 2024

• ISC Stormcast For Wednesday, June 5th, 2024 https://isc.sans.edu/podcastdetail/9010, (Wed, Jun 5th)

• 8 Takeaways from Apple 2023 Threat Research

• Congratulations to the 2024 Americas CX Customer Hero Award Winners

Generated on 2024-06-06 23:55:10.768554