IT Security News Daily Summary 2024-06-11

• The Surprising Supporter Behind the Push to Modernize GSOCs: The C-Suite

• Patch Tuesday Update – June 2024

• digital profiling

• The best security keys of 2024: Expert tested

• The best AirTag wallets of 2024: Expert tested

• Microsoft fixes RCE vulnerabilities in MSMQ, Outlook (CVE-2024-30080, CVE-2024-30103)

• Microsoft Patch Tuesday June 2024, (Tue, Jun 11th)

• AWS completes Police-Assured Secure Facilities (PASF) audit in the Europe (London) Region

• Revolutionizing API Security in the Era of GenAI: An Architect’s Perspective

• Adobe Plugs Code Execution Holes in After Effects, Illustrator

• Appian CEO Matt Calkins challenges AI industry to prioritize trust, proposes new era of responsible development

• Cylance confirms the legitimacy of data offered for sale in the dark web

• The TIDE: Threat-Informed Defense Education (Qilin, RansomHub, BlackSuit)

• Network Equipment, IoT Devices are Big Security Risks: Forescout

• Only one critical issue disclosed as part of Microsoft Patch Tuesday

• Pure Storage pwned, claims data plundered by crims who broke into Snowflake workspace

• At last, Apple’s Messages app will support RCS and scheduling texts

• Implementing a compliance and reporting strategy for NIST SP 800-53 Rev. 5

• SASE vs. SSE: Explaining the differences

• How Cynet Makes MSPs Rich & Their Clients Secure

• Finance Phantom Review – A Crypto Trading Robot that Can Be Your Guardian Too

• Is Your Business Under Attack From AI?

• Cylance clarifies data breach details, except where the data came from

• US Leaders Dodge Questions About Israel’s Influence Campaign

• Cloud Security related acquisition news trending on Google

• Elon Musk Sounds Alarm on Apple’s Deep Integration with OpenAI, Citing Security Concerns

• From “Hello World” to “Hi AI”

• Cisco Simplifies Cloud Security with AWS Cloud WAN Service Insertion

• The role of unstructured data and Large Language Models in securing data

• Microsoft, Google Come to the Aid of Rural Hospitals

• Two Arrested in UK for Smishing Campaign Powered by Homemade SMS Blaster

• Ticketmaster is Tip of Iceberg: 165+ Snowflake Customers Hacked

• CloudGuard Network Security integrates with AWS Cloud WAN Service Insertion at launch to improve the operational efficiency of cloud security teams

• AVEVA PI Web API

• Intrado 911 Emergency Gateway

• Rockwell Automation ControlLogix, GuardLogix, and CompactLogix

• CISA Releases Six Industrial Control Systems Advisories

• AVEVA PI Asset Framework Client

• Cisco Secure Connect: The Turn-Key SASE Solution for Managed Service Providers

• Verizon DBIR 2024: The rise in software supply chain attacks explained

• Tech Giant Apple Launches Its Own Password Manager App

• Ransomware Attack on Pathology Services Vendor Disrupts NHS Care in London

• Chinese Actor SecShow Conducts Massive DNS Probing on Global Scale

• Phishing Attacks Targeting US and European Organizations Double

• Passkeys enhance security and usability as AWS expands MFA requirements

• The mystery of an alleged data broker’s data breach

• Risks of poor PKI management

• How to Use 1Password: A Guide for Beginners

• Forrester Names Palo Alto Networks a Leader in OT Security

• Mandiant Links Snowflake Breaches To Infostealer Infections

• Arm Warns Of Exploited Kernel Driver Vulnerability

• VSCode Extensions With Malicious Code Installed 229M Times

• Why Passwords Still Matter In The Age Of AI

• Ransomware Gangs Are Adopting More Brutal Tactics Amidst Crackdowns

• UK and Canada’s data chiefs join forces to investigate 23andMe mega-breach

• Multiple Vulnerabilities Plague Discontinued Netgear WNR614 Routers

• Apple Patches Vision Pro Vulnerability Used in Possibly ‘First Ever Spatial Computing Hack’

• Enhancing Home Security with Advanced Technology

• Threat Actor Breaches Snowflake Customers, Victims Extorted

• Arm zero-day in Mali GPU Drivers actively exploited in the wild

• Diligent AI enables leaders to better manage and respond to risk

• Protecto improves data security and privacy for GenAI apps in Databricks environments

• Applied Human Threat Management in Cyber Industry

• BlackBerry Cylance Data Offered for Sale on Dark Web

• Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051)

• SSLoad Malware Employs MSI Installer To Kick-Start Delivery Chain

• Remcos RAT Distributed As UUEncoding (UUE) File To Steal Logins

• Supreme Court Will Take Up Meta’s Bid to End Lawsuit Over Cambridge Analytica Privacy Scandal

• Dangerous Liaisons: The Interaction Between Threat Actors and High-Risk Devices

• SAP Patches High-Severity Vulnerabilities in Financial Consolidation, NetWeaver

• Recent glibc Vulnerabilities and How to Protect Your Linux System

• 23andMe data breach under joint investigation in two countries

• Strategies to Manage and Reduce Alert Fatigue in SOCs

• Apple Launches Private Cloud Compute for Privacy-Centric AI Processing

• Top 10 Critical Pentest Findings 2024: What You Need to Know

• Chinese Hackers using New Noodle RAT to Attack Linux Servers

• Google’s Chrome changes make life harder for ad blockers

• When things go wrong: A digital sharing warning for couples

• Software Supply Chain Risks ⎪Cassie Crossley (VP Supply Chain Security, Schneider Electric)

• XONA raises $18 million to accelerate product development

• Google makes life hard for ad blockers by changes in Chrome

• Apple Integrates OpenAI’s ChatGPT into Siri for iOS, iPadOS, and macOS

• UK Police Arrest Two People for Smishing via Fake Cell Tower

• Xona Raises $18 Million for OT Remote Access Platform

• Arm Warns of Exploited Kernel Driver Vulnerability

• Apple’s AI Features Demand More Power: Not All iPhones Make the Cut

• Who You Gonna Call? LEGAL COUNSEL!

• OpenAI Appoints Sarah Friar As First Finance Chief

• Clean Desk Policy

• Rebooting Europe’s Sustainable Growth and Connectivity with Cisco’s Policy Roadmap

• Cybersecurity News: Rural hospital support, 23andMe investigation, Snowflake breach notices

• Intel Halting Construction Of Israel Plant, Says Report

• Expert released PoC exploit code for Veeam Backup Enterprise Manager flaw CVE-2024-29849. Patch it now!

• Apple announces security updates across its platforms

• NVIDIA and Arm Urge Customers to Patch Bugs

• Noodle RAT: Reviewing the New Backdoor Used by Chinese-Speaking Groups

• A CISO game plan for cloud security

• China-Linked ValleyRAT Malware Resurfaces with Advanced Data Theft Tactics

• UK and Canadian Privacy Regulators Investigate 23andMe

• Chinese Autonomous Driving Start-Up Files For HK Flotation

• US Supreme Court To Hear Facebook Shareholder Suit Appeal

• Arm Warns Of Mali GPU Kernel Driver Flaws Exploited In The Wild

• RSAC Fireside Chat: Ontinue ups the ‘MXDR’ ante — by emphasizing wider automation, collaboration

• Enterprise Browser vs Remote Browser Isolation (RBI): Key Difference

• Hackers Weaponizing MSC Files In Targeted Attack Campaign

• QR code SQL injection and other vulnerabilities in a popular biometric terminal

• Shhh. Did you hear that?

• YesWeHack raises €26 million to expand its international growth

• UK Retailers Sue Amazon For £1bn Claiming Data Misuse

• Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers

• Snowflake Breach Exposes 165 Customers’ Data in Ongoing Extortion Campaign

• Microsoft and Google pledge to offer cybersecurity support to Rural Hospitals

• Hackers Used Homemade Mobile Antenna To Send Thousands Of Smishing Text

• WeLiveSecurity wins Best Cybersecurity Vendor Blog award!

• Cloud migration expands the CISO role yet again

• Preparing for a career in cybersecurity? Check out these statistics

• GDPR turns six: Expert discusses AI impact

• Snowflake customers not using MFA are not unique – over 165 of them have been compromised

• Security providers view compliance as a high-growth opportunity

• ISC Stormcast For Tuesday, June 11th, 2024 https://isc.sans.edu/podcastdetail/9018, (Tue, Jun 11th)

• Cyber attack flattens Japanese vid-sharing site Niconico and others

• Apple’s PCC an ambitious attempt at AI privacy revolution

• Growing Cyber Threats Amid Israel-Palestine Tensions

• Cloud Penetration Testing: Tools, Methodology & Prerequisites

• What is Mobile Application Penetration Testing: Benefits & Tools

• A Comprehensive Guide to API Penetration Testing

• Japanese video-sharing platform Niconico was victim of a cyber attack

• Apple Brings ChatGPT To iPhones, Macs In AI Push

• Why Choose Bug Bounty Programs? (Benefits and Challenges Explained)

• Elon Musk threatens Apple ban over OpenAI integration, cybersecurity experts raise alarms

• Ghostwriter v4.2

• IT Security News Daily Summary 2024-06-10

• UK NHS call for O-type blood donations following ransomware attack on London hospitals

• Apple set to launch a new password management app for iPhone and Mac Users

• Quit Using EmailGPT as Vulnerability Risks Users Data

• 2024-06-10 – Malspam pushing OriginLogger (AgentTesla)

• Apple’s OpenAI partnership: A boost for Siri or a trojan horse for Microsoft?

• Breach Debrief Series: Snowflake MFA Meltdown Creates Data Leak Blizzard

• Is CVSS Alone Failing Us? Insights From Our Webinar With Verizon

• Analysis of Flubot Malware on Android OS

• communications intelligence (COMINT)

• Hackers Leak 270GB of New York Times Data and Source Code on 4Chan

• The best VPN for streaming in 2024: Expert tested and reviewed

• New Extortion Scheme Targets GitHub Repositories

• Vulnerability Recap 6/10/24 – RCE Attacks in Major Platforms

• Christie’s confirms RansomHub crooks stole data on 45K clients

• Snowflake Attacks: Mandiant Links Data Breaches to Infostealer Infections

• Mandiant says hackers stole a ‘significant volume of data’ from Snowflake customers

• News about Facebook Data Breach and FBI alert on Akira Ransomware

• NHS Calls For Blood Donations After Ransomware Attack

• Ransomware Rampage in Canada: Can New Security Laws Stop It?

• Vulnerability Summary for the Week of June 3, 2024

• More_eggs Malware Disguised as Resumes Targets Recruiters in Phishing Attack

• Want free and anonymous access to AI chatbots? DuckDuckGo’s new tool is for you

• UK and Canada privacy watchdogs investigating 23andMe data breach

• Fortinet Expands Cloud Security Portfolio with Lacework Acquisition

• Fortinet to Expand AI, Cloud Security with Lacework Acquisition

• Criminal IP Unveils Fraud Detection Data Products on Snowflake Marketplace

• Navigating the Digital Future: Cisco’s Vision for the UK’s Tech-Led Growth

• Transforming Security: Latest Innovations Driving Partner Growth

• 9 out of 10 businesses seek AI-led threat detection and vulnerability management

• Free Android VPNs Suffering Encryption Failures, New Report

• Unit 42 — A Leader in The Forrester Wave for Cybersecurity Incident Response

• A European Summer of Sports is Upon Us – What Does it Mean for Security?

• Critical PyTorch Vulnerability Can Lead to Sensitive AI Data Theft

• Microsoft Revises AI Feature After Privacy Concerns

• Club Penguin Fans Target Disney Server, Exposing 2.5 GB of Internal Data

• KELA’s TPRM module identifies software supply chain risks

• Compliance Scorecard enhances its CaaS platform to improve MSPs’ cybersecurity posture

• Ransomware Is ‘More Brutal’ Than Ever in 2024

• Elevating threat detection and response to a new level

• 1-15 March 2024 Cyber Attacks Timeline

• Tips to prevent data breaches

• Criminal IP Unveils Innovative Fraud Detection Data Products on Snowflake Marketplace

• Radare2 : UNIX-like Reverse Engineering Framework And Command-line Toolset

• New York Times Responds to Source Code Leak

• PHP Patches Critical Remote Code Execution Vulnerability

• UNC5537 Targets Snowflake Customer Instances for Data Theft and Extortion

• Apache Log4j2 Vulnerability Remains A Threat For Global Finance

• Docker Hub Services No More Available In Russia

• Cox Modem Vulnerabilities Risked Modems To Hacking

• Critical Auth Bypass Flaw Affected Progress Telerik Report Server

• May 2024’s Most Wanted Malware: Phorpiex Botnet Unleashes Phishing Frenzy While LockBit3 Dominates Once Again

• Crowdstrike vs Trellix (2024): What Are The Main Differences?

• New York Times Source Code Leaks Online Via 4chan

• Microsoft Bows To Public Pressure, Disables Controversial Windows Recall By Default

• Christie’s Says Ransomware Attack Impacts 45,000 People

• PHP Updates Urged Over Critical Vuln That Could Lead To RCE

• FCC Approves $200 Million For Cybersecurity In Schools

• Cloud Control: Strategic Insights for Securing Your Digital Infrastructure

• Nvidia Patches High-Severity GPU Driver Vulnerabilities

• DataBee EntityViews accelerates zero trust architecture deployment

• The number of known Snowflake customer data breaches is rising

• Google Takes Down Influence Campaigns Tied to China, Indonesia, and Russia

• Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers

• Cybersecurity CPEs: Unraveling the What, Why & How

• IoT Vulnerabilities Skyrocket, Becoming Key Entry Point for Attackers

• Snowflake tells customers to enable MFA as investigations continue

• Christie’s data breach impacted 45,798 individuals

• Using Electronic Health Records (EHRs) for Healthcare Data Extraction

• Malicious Node on ComfyUI Steals Data from Crypto, Browser Users

• Poc Exploit Released For Veeam Authentication Bypass Vulnerability

• Cisco Builds on the CNAPP Movement to Secure and Protect the Cloud Native Application Estate

• Two arrested in UK over fake cell tower-powered smishing campaign

• 22 Chinese Nationals Sentenced to Long Prison Terms in Zambia for Multinational Cybercrimes

• Cisco Finds 15 Vulnerabilities in AutomationDirect PLCs

• Severe blood shortage hits NHS due to ransomware attack

• Six 6 Essential Security Practices for Protecting Cloud Data

• #MIWIC2024 One To Watch: Jasmine Eskenzi, Founder and CEO of The Zensory

• DuckDuckGo Launches Anonymous Chatbot Service to Protect User Privacy

• Can someone tell if I block their number?

• Microsoft ‘Recalls’ AI Screenshots After Backlash

• LinkedIn Disables Ad Feature In Europe Over Targeting Concerns

• Sticky Werewolf targets the aviation industry in Russia and Belarus

• Colorado Privacy Act (CPA)

• RSAC Fireside Chat: Jscrambler levels-up JavaScript security, slows GenAI-fueled privacy loss

• Utah Consumer Privacy Act (UCPA)

• Identity Data Automation: The What and Why

• Does the Business Understand the Current State of Your Security Program?

• Bypassing 2FA with phishing and OTP bots

• Christie’s Says Ransomware Attack Impacts 45,000 People

• Entrust Citizen Identity Orchestration enhances citizen adoption of digital public services

• Cybersecurity News: Microsoft resets Recall, LastPass outage update, New York Times breach

• Boeing Starliner Docks With Space Station In Historic Flight

• Nio Sees EV Sales Surge Amidst Price War

• Huawei Claims AI Chip Equals Nvidia

• Google Will Not Face Jury In US Adtech Trial

• ALPHV Ransomware Deployment Started With RDP Access And ScreenConnect Installations

• Threat Actor Claims to Leak 270GB of New York Times Data

• Cyber Security Today, June 10, 2024 – Microsoft backs down on Recall

• X now allows adult content

• Duckduckgo Launches Anonymous AI Chatbots

• Mind the Gap: Strengthening Cybersecurity Through Behavioral Awareness

• How Your Business Can Benefit from a Network Security Policy

• NHS Appeals For Blood and Volunteers After Cyber-Attack

• Meta Plan To Train AI With EU, UK User Data Spurs Complaints

• A week in security (June 3 – June 9)

• Beware of Fake KMSPico Activators that Deliver Vidar Stealer Malware

• Sticky Werewolf Expands Cyber Attack Targets in Russia and Belarus

• Ticketmaster Data Breach and Rising Work from Home Scams

• Radare: Open-source reverse engineering framework

• AI’s role in accelerating vulnerability management

• Cybersecurity pros change strategies to combat AI-powered threats

• Why CISOs need to build cyber fault tolerance into their business

• Protecting identity in a world of deepfakes and social engineering

• ISC Stormcast For Monday, June 10th, 2024 https://isc.sans.edu/podcastdetail/9016, (Mon, Jun 10th)

• IcedID Brings ScreenConnect and CSharp Streamer to ALPHV Ransomware Deployment

• Frontier Communications data breach impacted over 750,000 individuals

Generated on 2024-06-11 23:55:11.392709