IT Security News Daily Summary 2024-06-08

• New York Times source code compromised via exposed GitHub token

• USENIX Security ’23 – “If Sighted People Know, I Should Be Able To Know:” Privacy Perceptions Of Bystanders With Visual Impairments Around Camera-Based Technology

• Upcoming June 11th CISA Deadline Exposes Widespread Unpreparedness in Software Security Compliance

• GoldPickaxe iOS Malware Harvests Facial Recognition Data & Bank Accounts

• Sticky Werewolf Weaponizing LNK Files Group Attacking To Attack Organizations

• Employees Claim OpenAI and Google DeepMind Are Hiding Dangers From the Public

• The Underestimated Cyber Threat: Anticipating and Combatting Supply Chain Attacks

• Uber ex-CSO Joe Sullivan: We need security leaders running to work, not giving up

• The Hidden Cost of Connected Cars: Your Driving Data and Insurance

• Cyber Resiliency in The Age Of AI: Securing the Digital Perimeter

• Security researcher says Azure Tags are security threat but Microsoft disagrees

• Nvidia Climbs to Second Place in Global Market Value, Surpassing Apple

• Experts Warn: AI Chatbots a ‘Treasure Trove’ for Criminals, Avoid ‘Free Accounts

• Apple Is Coming for Your Password Manager

• Snowflake Security Incident: A Wake-Up Call for CISOs | Grip

• New PHP Vulnerability Exposes Windows Servers to Remote Code Execution

• Microsoft Revamps Controversial AI-Powered Recall Feature Amid Privacy Concerns

• StateRAMP vs FedRAMP: What’s The Difference Between Them?

• 560 million Ticketmaster customer data for sale? – Week in security with Tony Anscombe

• 2024-06-08: Three days of server scans and probes

• Behind the Breach: How ARRL Fought Back Against Cyber Intruders

• What Snowflake isn’t saying about its customer data breaches

• Discovery highlights ‘critical oversight’ in perceived security of wireless networks

• Harvard, MIT, and Wharton research reveals pitfalls of relying on junior staff for AI training

• ‘New York Times source code’ leaks online via 4chan

• FCC takes some action against notorious BGP

• The Dark Side of Free VPNs: Hidden Dangers and Privacy Risks

• SolarWinds fixed multiple flaws in Serv-U and SolarWinds Platform

• New Phishing Campaign Uses Stealthy JPGs to Drop Agent Tesla

• OpenAI, Anthropic Research Reveals More About How LLMs Affect Security and Bias

• IT Security News Daily Summary 2024-06-07

• Microsoft’s Recall feature will now be opt-in and double encrypted after privacy outcry

• Cultivating a Secure Business-Led IT Environment | Grip

• Microsoft temporarily disables Recall on Copilot+ PCs amid security and privacy concerns

• Security and Human Behavior (SHB) 2024

• How AI-driven identity attacks are defining the new threatscape

• Senator: HHS Needs to Require Security Measures for Health Sector

• Snowflake’s customer breaches make 2024 the year of the identity siege

• Defiant Microsoft pushes ahead with controversial Recall – tho as an opt-in

• Windows Recall will be opt-in and the data more secure, Microsoft says

• Cyber Security Today, Week in Review for week ending June 7, 2024

• AI-Enabled ICT Workforce Consortium Expands to G7 Countries

• FCC Pushes Ahead with Internet Routing Security Requirements

• How to back up (and restore) your saved MacOS passwords

• After brutal critiques, Microsoft Recall will get these major privacy and security changes

• EFF Covers Secrets in Your Data on NOVA

• Frontier Communications: 750k people’s data stolen in April attack on systems

• Newfoundland TV Station Hit by Ransomware Attack

• electronic intelligence (ELINT)

• EFF Covers Secrets in Your Data on NOVΛ

• Organizations Move to Establish Dedicated SaaS Security Teams

• Microsoft Bows to Public Pressure, Disables Controversial Windows Recall by Default

• Google will start deleting location history

• NCSWIC releases the NCSWIC Video Series

• How to backup (and restore) your saved MacOS passwords

• After brutal privacy critiques, Microsoft Recall will get major privacy and security changes

• Imperva Protects Against Critical PHP Vulnerability CVE-2024-4577

• The UN Cybercrime Draft Convention Remains Too Flawed to Adopt

• LockBit Victim? Ask FBI for Your Ransomware Key

• Cisco Extends Cybersecurity Portfolio with Help from AI

• SolarWinds fixes severe Serv-U vulnerability (CVE-2024-28995)

• Microsoft Will Switch Off Recall by Default After Security Backlash

• Surveillance Defense for Campus Protests

• Lockbit ransomware targets data of 400000 patients at Panorama Eyecare

• Industry Veterans and New Talent Recognised at European Cybersecurity Blogger Awards 2024

• In Other News: TikTok Zero-Day, DMM Bitcoin Hack, Free VPN App Analysis

• Tenable to Acquire Eureka Security to Boost DSPM Capabilities

• USENIX Security ’23 – Othered, Silenced and Scapegoated: Understanding the Situated Security of Marginalised Populations in Lebanon

• A Salt Security Perspective on the 2024 Gartner® Market Guide for API Protection

• CDW Survey Surfaces Cybersecurity Tool Sprawl Challenges

• SASE Threat Report:Evolving Threat Actors and the Need for Comprehensive Cyber Threat Intelligence

• LightSpy Spyware’s macOS Variant Found with Advanced Surveillance Capabilities

• Ultimate Cyber Hygiene Guide: Learn How to Simplify Your Security Efforts

• Elon Musk May Retreat From Tesla If Not Granted $56Bn Pay Package

• New Agent Tesla Campaign Targeting Spanish-Speaking People

• Meta Addresses AI Chatbot’s YouTube Training Data Assertion

• Embracing Responsible AI: Principles and Practices

• Cisco fixes WebEx flaw that allowed government, military meetings to be spied on

• How to navigate NIS2 and secure your vulnerabilities

• Securely Connect Everything Everywhere with a Unified SASE Platform

• It’s Not the Customer’s Job to Know What They Want

• Rising Ransomware Attacks Highlight Persistent Cybersecurity Challenges

• EU Accuses Microsoft of Secretly Harvesting Children’s Data

• Not a Science Fiction: What NVIDIA CEO Thinks About AI

• Open source, open risks: The growing dangers of unregulated generative AI

• Get 2 Lifetime Password Manager Subscriptions for Only $50

• proof of concept (PoC) exploit

• Pandabuy was extorted twice by the same threat actor

• Limits of Automation

• Finding End of Support Dates: UK PTSI Regulation, (Fri, Jun 7th)

• Emergency Response: A Harmony SASE Rapid Deployment Story

• Mozilla Launches 0Din Gen-AI Bug Bounty Program

• Insider Threat Detection: What You Need to Know

• Hotel Kiosks Vulnerability Exposed Guest Data, Room Access

• Muhstik Malware Attacking Apache RocketMQ To Execute Remote Code

• EmailGPT Exposed to Prompt Injection Attacks

• Summer Seasonal Businesses Can’t Afford to Ignore Ransomware Resilience

• North Korean Kimsuky Attacking Arms Manufacturer In Europe

• Hacktivist Groups Attacking Industrial Control Systems To Disrupt Services

• The Myth of “Fileless” Malware

• AirMDR Raises $5 Million for AI-Powered Managed Detection and Response

• FCC Proposes BGP Security Reporting for Broadband Providers

• Security, the cloud, and AI: building powerful outcomes while simplifying your experience

• The AI Debate: Google’s Guidelines, Meta’s GDPR Dispute, Microsoft’s Recall Backlash

• Cyber Landscape is Evolving – So Should Your SCA

• Staff At Samsung Stage First Ever Walk Out

• UAC-0020 threat actor used the SPECTR Malware to target Ukraine’s defense forces

• The Justice Department Took Down the 911 S5 Botnet

• Cybersecurity for Schools: Challenges, Threats, and Solutions

• Mike Lynch Cleared In HP Autonomy Fraud Trial

• SPECTR Malware Attacking Defense Forces of Ukraine With a batch script

• 750k Impacted by Frontier Communications Data Breach

• SolarWinds Patches High-Severity Vulnerability Reported by NATO Pentester

• Russian hacktivists vow mass attacks against EU elections

• Apple Says iPhones Will Get Security Updates for at Least 5 Years

• #Infosec2024: Cyber Resilience Means Being Willing to Learn From a Crisis

• Security Flaws Found in Popular WooCommerce Plugin

• Cybersecurity News: FCC moves forward with BGP security, LockBit victims get lifeline, Gitloker attacks target GitHub

• 5 Tips for Improving Your Business Security

• Cyber Security Today, June 7, 2024 – More news about Snowflake attacks, and a warning to better protect Docker containers

• Everything You Need to Know About Cross-Site Scripting

• Medical Software: Advancements and Security Concerns in 2024

• 5 Ways to Strengthen the Weak Link in Cybersecurity

• FBI Distributes 7,000 LockBit Ransomware Decryption Keys to Help Victims

• In Bad Company: JScript RAT and CobaltStrike

• Chinese threat actor exploits old ThinkPHP flaws since October 2023

• #Infosec2024: Collaboration is Key to an Effective Security Culture

• 300+ Times Downloaded Package from PyPI Contains Wiper Components

• Easily integrate Secrets Management System with Ansible Automation Platform to update systems passwords

• Exploring security by design and loosening guides

• SPECTR Malware Targets Ukraine Defense Forces in SickSync Campaign

• Top Computer Security Risks and How to Stay Safe

• How to securely transfer files with presigned URLs

• Tenable Acquires Eureka Security To Provide Data Security Across Infrastructure

• Apple to launch app that will have ability to generate and store passwords

• Safeguarding the Fortress: Google’s Battle Against Cyber Attacks

• Microsoft Details On Using KQL To Hunt For MFA Manipulations

• Spam blocklist SORBS closed by its owner, Proofpoint

• Google Leak Reveals Concerning Privacy Practices

• Commando Cat Cryptojacking Attacks Target Misconfigured Docker Instances

• June 2024 Patch Tuesday forecast: Multiple announcements from Microsoft

• The job hunter’s guide: Separating genuine offers from scams

• NVD Update: Help Has Arrived

• Cyber insurance isn’t the answer for ransom payments

• Unpacking CISA’s AI guidelines

• My thoughts and experiences at Infosec EU 2024

• 26% of organizations lack any form of IT security training

• New infosec products of the week: June 7, 2024

• Microsoft’s Recall Feature Is Even More Hackable Than You Thought

• ISC Stormcast For Friday, June 7th, 2024 https://isc.sans.edu/podcastdetail/9014, (Fri, Jun 7th)

• Bangladeshi police agents accused of selling citizens’ personal information on Telegram

• Microsoft’s Recall Feature Is Even More Hackable Than You Thought

• POC exploit code published for 9.8-rated Apache HugeGraph RCE flaw

• Highlights from the ConnectWise IT Nation Secure Event 2024

• Critical Progress Telerik vulnerability under attack

Generated on 2024-06-08 23:55:09.187761