IT Security News Daily Summary 2024-06-12

• Join Cisco at the SEAT Conference: A Hub for Sports Industry Innovation and Insights

• Ukraine Police arrested a hacker who developed a crypter used by Conti and LockBit ransomware operation

• The Next Generation of Cell-Site Simulators is Here. Here’s What We Know.

• Microsoft June 2024 Patch Tuesday Update Fixed ~50 Vulnerabilities

• Proactive Application Security: Learning from the Recent GitHub Extortion Campaigns

• USENIX Security ’23 – Precise and Generalized Robustness Certification for Neural Networks

• Ukraine Arrests Cryptor Specialist Aiding Conti and LockBit Ransomware

• Mandiant Report: Snowflake Users Targeted for Data Theft and Extortion

• AWS touts security culture, AI protections at re:Inforce 2024

• Tech Groups Call On US DoJ To Investigate YouTube Monopoly

• Know Your Digital Rights at the Airport | Avast

• Tern AI wants to reduce reliance on GPS with low-cost navigation alternative

• Google Warns of Pixel Firmware Zero-Day Under Limited, Targeted Exploitation

• Israeli Researchers Expose Security Flaws in Visual Studio Code Marketplace

• Port 1801 Traffic: Microsoft Message Queue, (Wed, Jun 12th)

• Black Basta Ransomware Suspected of Exploiting Windows 0-day Before Patch

• National Internet Safety Month: This June, Take 4 Easy Steps to Stay Safe Online

• Streamlining CLI Authentication: Implementing OAuth Login in Python

• Daniel Stori’s ‘Just Touch It’

• Self-replicating Morris II worm targets AI email assistants

• Cleveland Cyberattack Turns Public Services Offline for Days

• MSMQ Vulnerability Allows Hackers to Takeover Microsoft Servers

• Data Security Firm Cyberhaven Raises $88 Million at $488 Million Valuation

• Fortinet Patches Code Execution Vulnerability in FortiOS

• Ransomware Group May Have Exploited Windows Vulnerability as Zero-Day

• Microsoft Patches Zero-Click Outlook Vulnerability That Could Soon Be Exploited

• EU To Impose Tariffs Up To 38 Percent On Chinese EVs

• Phone Scammers Impersonating CISA Employees

• ANSSI-BP-028 security recommendations updated to version 2.0

• Automating secrets management with HashiCorp Vault and Red Hat Ansible Automation Platform

• Creating a Web Application Firewall in Red Hat OpenShift

• Spotlight on Riskassure

• White House report dishes deets on all 11 major government breaches from 2023

• How to achieve cloud-native endpoint management with Microsoft Intune

• Some specifics regarding Fog Ransomware and TellYouThePass Ransomware

• No AI training in newly distrusted Terms of Service, Adobe says

• Ransomware Group Jumps on PHP Vulnerability

• Introducing the 0-day Threat Hunt Bug Bounty Promo Through July 11th, 2024!

• Tesla Investor Slams Elon Musk’s $56bn Pay Deal, Amid Another Lawsuit

• Hackers Exploiting Linux SSH Services to Deploy Malware

• Critical Flaw In Apple Ecosystems Let Attackers Gain Unauthorized Access

• JetBrains Warns of GitHub Plugin that Exposes Access Tokens

• Job Seekers Aware: Phishing Attacks On The Rise

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• Couple’s ₹47.7 Lakh Loss Amid Two-Week Digital Harassment and Arrest

• AWS unveils new and improved security features

• WithSecure Reveals Mass Exploitation of Edge Software and Infrastructure Appliances

• privacy impact assessment (PIA)

• Navigating the Summer Beat: Insights from Cisco Live and our Partners

• Stay Secure: How to Prevent Zero-Click Attacks on Social Platforms

• Building Cyber Resilience in Manufacturing: Key Strategies for Success

• Chinese Threat Actors Leveraging ‘Noodle RAT’ Backdoor

• Splunk’s security innovations boost threat detection and response

• Cryptojacking Campaign Targets Misconfigured Kubernetes Clusters

• Scattered Spider Now Affiliated with RansomHub Following BlackCat Exit

• CIOs Admit AI Is Investment Priority, Just Ahead Of Security, Cloud

• Businesses’ cloud security fails are ‘concerning’ – as AI threats accelerate

• China’s FortiGate attacks more extensive than first thought

• Prevalent adds AI-powered enhancements to reduce risk assessment time

• Firefox 127 Released With patch for 15 Vulnerabilities

• Acronis XDR enhances EDR with comprehensive cybersecurity for MSPs

• The Evolution of QR Code Phishing: ASCII-Based QR Codes

• Verizon exec reveals responsible AI strategy amid ‘Wild West’ landscape

• A Closer Look at Recent Changes to New York State Department of Financial Services (NYSDFS) Cybersecurity Regulation

• CORL Companion automates the security assessment response for healthcare vendors

• 70% of Cybersecurity Pros Often Work Weekends, 64% Looking for New Jobs

• Where Can We Win Against Ransomware with Halcyon

• New backdoor BadSpace delivered by high-ranking infected websites

• GitHub Paid Out Over $4 Million via Bug Bounty Program

• When Vendors Overstep – Identifying the AI You Don’t Need

• Acronis XDR expands endpoint security capabilities for MSPs

• Cisco ISE 3.4 begins June with a bang

• Advancing Innovation and Harnessing AI to Secure the Homeland

• 2024’s Best RMM Solutions for MSPs: Top 10 Remote IT Management Tools

• Black Basta Ransomware May Have Exploited MS Windows Zero-Day Flaw

• Lessons from the Ticketmaster-Snowflake Breach

• Chinese Hackers Leveraging ‘Noodle RAT’ Backdoor

• Insights on Cyber Threats Targeting Users and Enterprises in Brazil

• Nvidia Completes Stock Split To Make Shares More Affordable

• JetBrains fixed IntelliJ IDE flaw exposing GitHub access tokens

• 20,000 FortiGate appliances compromised by Chinese hackers

• Charon Android Botnet Made a Comeback With New Weapons

• 6 Best VPNs for Australia in 2024

• Medical-Targeted Ransomware Is Breaking Records After Change Healthcare’s $22M Payout

• Using AI for Political Polling

• Elon Musk Drops OpenAI Lawsuit, Threatens Apple Ban

• Chrome 126, Firefox 127 Patch High-Severity Vulnerabilities

• Facebook, Meta, Apple, Amazon Most Impersonated in Phishing Scams

• Another step forward towards responsible vulnerability disclosure in Europe

• Microsoft launches cybersecurity program to tackle attacks, protect rural hospitals

• Major cybersecurity upgrades announced to safeguard American healthcare

• Cybersecurity News: Snowflake hack update, BreachForums down again, Cylance data for sale

• ICS Patch Tuesday: Advisories Published by Siemens, Schneider Electric, Aveva, CISA

• Ransomware Group Exploits PHP Vulnerability Days After Disclosure

• The Future of Security Compliance: How Emerging Technologies are Setting New Rules

• China-Backed Hackers Exploit Fortinet Flaw, Infecting 20,000 Systems Globally

• New Phishing Campaign Deploys WARMCOOKIE Backdoor Targeting Job Seekers

• Microsoft Patches One Critical and One Zero-Day Vulnerability

• Cyber Security Today, June 12, 2024 – More Snowflake storage victims found, Microsoft issues new Windows patches, and more

• Critical Outlook RCE Vulnerability Exploits Preview Pane – Patch Now!

• Pure Storage Data Breach Following Snowflake Hack: LDAP Usernames, Email Addresses Exposed

• Breaking Compliance into Bite-Sized Portions

• 4 Things a Good Vulnerability Management Policy Should Include

• Cisco Tees off at 2024 Championship Season

• What is Defense in Depth Security?

• How Quantum Computing Can Change the Cybersecurity Landscape

• Lacework’s visibility enhancements give businesses real time insight into resource inventory

• AuthenticID introduces deep fake and generative AI detection solution

• Chinese FortiGate Espionage Campaign Snares 20,000+ Victims

• Upgrade Your PHP Installations for A Critical RCE Flaw Patch

• UK Trails Behind Europe in Technical Skills Proficiency, Coursera Report Finds

• Splunk unveils AI tools across its product portfolio

• Unit21 automates the check investigation process for financial institutions

• SentinelOne strengthens cloud security for AWS customers

• FBI offers thousands of free LockBit decryption keys

• London Tech Week 2024

• Microsoft Urges Windows Admins to Patch Microsoft Message Queuing RCE Flaw

• Obsidian Security and Databricks collaborate to protect sensitive business data

• Cleveland City Closes Offices Following Attack on IT Systems

• Microsoft Urges Windows Admins to Patch Microsoft Message Queuing RCE flaw

• Microsoft Patch Tuesday security updates for June 2024 fixed only one critical issue

• AI integration into iPhones raises data security concerns for X

• The Risks of Sharing Business Data with AI

• PHP CGI Windows Platform Remote Code Execution Vulnerability (CVE-2024-4577) Advisory

• Open-source security in AI

• Microsoft Issues Patches for 51 Flaws, Including Critical MSMQ Vulnerability

• Security and privacy strategies for CISOs in a mobile-first world

• Six months of SEC’s cyber disclosure rules

• Cybersecurity jobs available right now: June 12, 2024

• ISC Stormcast For Wednesday, June 12th, 2024 https://isc.sans.edu/podcastdetail/9020, (Wed, Jun 12th)

• Downtime Costs World’s Largest Companies $400 Billion a Year, According to Splunk Report

• How AI and LLMs are revolutionizing cyber insurance

• Let’s kick off our summer with a pwn-me-by-Wi-Fi bug in Microsoft Windows

• What We Know So Far about the Snowflake “Breach”

• Using AI in Business Security Decision-Making: Enhancing Protection and Efficiency

• AI Brings A New Era of Cyber Threats – Are We Ready?

• Securing Online Business Transactions: Essential Tools and Practices

• Patch Tuesday, June 2024 “Recall” Edition

• Creating Secure CRM Pipelines in Construction: Best Practices and Essential Strategies

• Smart Network Onboarding: Revolutionizing Connectivity With AI and Automation

• Cisco Recognized for Global Leadership in LGBTQ+ Inclusion

• TellYouThePass Ransomware Exploits Critical PHP Flaw, Patch NOW

• VERT Threat Alert: June 2024 Patch Tuesday Analysis

• Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing

• Mastering the Art of Incident Response: From Chaos to Control

• IT Security News Daily Summary 2024-06-11

• The Surprising Supporter Behind the Push to Modernize GSOCs: The C-Suite

• Patch Tuesday Update – June 2024

• digital profiling

• The best security keys of 2024: Expert tested

• The best AirTag wallets of 2024: Expert tested

• Microsoft fixes RCE vulnerabilities in MSMQ, Outlook (CVE-2024-30080, CVE-2024-30103)

• Microsoft Patch Tuesday June 2024, (Tue, Jun 11th)

• AWS completes Police-Assured Secure Facilities (PASF) audit in the Europe (London) Region

• Revolutionizing API Security in the Era of GenAI: An Architect’s Perspective

• Adobe Plugs Code Execution Holes in After Effects, Illustrator

• Appian CEO Matt Calkins challenges AI industry to prioritize trust, proposes new era of responsible development

• Cylance confirms the legitimacy of data offered for sale in the dark web

• The TIDE: Threat-Informed Defense Education (Qilin, RansomHub, BlackSuit)

• Network Equipment, IoT Devices are Big Security Risks: Forescout

• Only one critical issue disclosed as part of Microsoft Patch Tuesday

• Pure Storage pwned, claims data plundered by crims who broke into Snowflake workspace

• At last, Apple’s Messages app will support RCS and scheduling texts

• Implementing a compliance and reporting strategy for NIST SP 800-53 Rev. 5

• SASE vs. SSE: Explaining the differences

• How Cynet Makes MSPs Rich & Their Clients Secure

• Finance Phantom Review – A Crypto Trading Robot that Can Be Your Guardian Too

• Is Your Business Under Attack From AI?

• Cylance clarifies data breach details, except where the data came from

• US Leaders Dodge Questions About Israel’s Influence Campaign

• Cloud Security related acquisition news trending on Google

• Elon Musk Sounds Alarm on Apple’s Deep Integration with OpenAI, Citing Security Concerns

• From “Hello World” to “Hi AI”

• Cisco Simplifies Cloud Security with AWS Cloud WAN Service Insertion

• The role of unstructured data and Large Language Models in securing data

• Microsoft, Google Come to the Aid of Rural Hospitals

• Two Arrested in UK for Smishing Campaign Powered by Homemade SMS Blaster

• Ticketmaster is Tip of Iceberg: 165+ Snowflake Customers Hacked

• CloudGuard Network Security integrates with AWS Cloud WAN Service Insertion at launch to improve the operational efficiency of cloud security teams

• AVEVA PI Web API

• Intrado 911 Emergency Gateway

• Rockwell Automation ControlLogix, GuardLogix, and CompactLogix

• CISA Releases Six Industrial Control Systems Advisories

• AVEVA PI Asset Framework Client

• Cisco Secure Connect: The Turn-Key SASE Solution for Managed Service Providers

• Verizon DBIR 2024: The rise in software supply chain attacks explained

• Tech Giant Apple Launches Its Own Password Manager App

• Ransomware Attack on Pathology Services Vendor Disrupts NHS Care in London

• Chinese Actor SecShow Conducts Massive DNS Probing on Global Scale

• Phishing Attacks Targeting US and European Organizations Double

• Passkeys enhance security and usability as AWS expands MFA requirements

• The mystery of an alleged data broker’s data breach

• Risks of poor PKI management

• How to Use 1Password: A Guide for Beginners

• Forrester Names Palo Alto Networks a Leader in OT Security

• Mandiant Links Snowflake Breaches To Infostealer Infections

• Arm Warns Of Exploited Kernel Driver Vulnerability

• VSCode Extensions With Malicious Code Installed 229M Times

• Why Passwords Still Matter In The Age Of AI

• Ransomware Gangs Are Adopting More Brutal Tactics Amidst Crackdowns

• UK and Canada’s data chiefs join forces to investigate 23andMe mega-breach

• Multiple Vulnerabilities Plague Discontinued Netgear WNR614 Routers

• Apple Patches Vision Pro Vulnerability Used in Possibly ‘First Ever Spatial Computing Hack’

• Enhancing Home Security with Advanced Technology

• Threat Actor Breaches Snowflake Customers, Victims Extorted

• Arm zero-day in Mali GPU Drivers actively exploited in the wild

• Diligent AI enables leaders to better manage and respond to risk

• Protecto improves data security and privacy for GenAI apps in Databricks environments

• Applied Human Threat Management in Cyber Industry

• BlackBerry Cylance Data Offered for Sale on Dark Web

• Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051)

• SSLoad Malware Employs MSI Installer To Kick-Start Delivery Chain

• Remcos RAT Distributed As UUEncoding (UUE) File To Steal Logins

• Supreme Court Will Take Up Meta’s Bid to End Lawsuit Over Cambridge Analytica Privacy Scandal

• Dangerous Liaisons: The Interaction Between Threat Actors and High-Risk Devices

• SAP Patches High-Severity Vulnerabilities in Financial Consolidation, NetWeaver

• Recent glibc Vulnerabilities and How to Protect Your Linux System

• 23andMe data breach under joint investigation in two countries

• Strategies to Manage and Reduce Alert Fatigue in SOCs

• Apple Launches Private Cloud Compute for Privacy-Centric AI Processing

• Top 10 Critical Pentest Findings 2024: What You Need to Know

• Chinese Hackers using New Noodle RAT to Attack Linux Servers

• Google’s Chrome changes make life harder for ad blockers

• When things go wrong: A digital sharing warning for couples

• Software Supply Chain Risks ⎪Cassie Crossley (VP Supply Chain Security, Schneider Electric)

• XONA raises $18 million to accelerate product development

• Google makes life hard for ad blockers by changes in Chrome

• Apple Integrates OpenAI’s ChatGPT into Siri for iOS, iPadOS, and macOS

• UK Police Arrest Two People for Smishing via Fake Cell Tower

• Xona Raises $18 Million for OT Remote Access Platform

• Arm Warns of Exploited Kernel Driver Vulnerability

• Apple’s AI Features Demand More Power: Not All iPhones Make the Cut

• Who You Gonna Call? LEGAL COUNSEL!

• OpenAI Appoints Sarah Friar As First Finance Chief

• Clean Desk Policy

• Rebooting Europe’s Sustainable Growth and Connectivity with Cisco’s Policy Roadmap

• Cybersecurity News: Rural hospital support, 23andMe investigation, Snowflake breach notices

• Intel Halting Construction Of Israel Plant, Says Report

• Expert released PoC exploit code for Veeam Backup Enterprise Manager flaw CVE-2024-29849. Patch it now!

• Apple announces security updates across its platforms

• NVIDIA and Arm Urge Customers to Patch Bugs

• Noodle RAT: Reviewing the New Backdoor Used by Chinese-Speaking Groups

• A CISO game plan for cloud security

• China-Linked ValleyRAT Malware Resurfaces with Advanced Data Theft Tactics

• UK and Canadian Privacy Regulators Investigate 23andMe

• Chinese Autonomous Driving Start-Up Files For HK Flotation

• US Supreme Court To Hear Facebook Shareholder Suit Appeal

• Arm Warns Of Mali GPU Kernel Driver Flaws Exploited In The Wild

• RSAC Fireside Chat: Ontinue ups the ‘MXDR’ ante — by emphasizing wider automation, collaboration

• Enterprise Browser vs Remote Browser Isolation (RBI): Key Difference

• Hackers Weaponizing MSC Files In Targeted Attack Campaign

• QR code SQL injection and other vulnerabilities in a popular biometric terminal

• Shhh. Did you hear that?

• YesWeHack raises €26 million to expand its international growth

• UK Retailers Sue Amazon For £1bn Claiming Data Misuse

• Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers

• Snowflake Breach Exposes 165 Customers’ Data in Ongoing Extortion Campaign

• Microsoft and Google pledge to offer cybersecurity support to Rural Hospitals

• Hackers Used Homemade Mobile Antenna To Send Thousands Of Smishing Text

• WeLiveSecurity wins Best Cybersecurity Vendor Blog award!

• Cloud migration expands the CISO role yet again

• Preparing for a career in cybersecurity? Check out these statistics

• GDPR turns six: Expert discusses AI impact

• Snowflake customers not using MFA are not unique – over 165 of them have been compromised

• Security providers view compliance as a high-growth opportunity

• ISC Stormcast For Tuesday, June 11th, 2024 https://isc.sans.edu/podcastdetail/9018, (Tue, Jun 11th)

• Cyber attack flattens Japanese vid-sharing site Niconico and others

• Apple’s PCC an ambitious attempt at AI privacy revolution

• Growing Cyber Threats Amid Israel-Palestine Tensions

• Cloud Penetration Testing: Tools, Methodology & Prerequisites

• What is Mobile Application Penetration Testing: Benefits & Tools

• A Comprehensive Guide to API Penetration Testing

Generated on 2024-06-12 23:55:11.304370