IT Security News Daily Summary 2024-06-13

• Unlock Advanced Threat Correlation

• Apple iOS 18 Cheat Sheet: Release Date, RCS Integration and More

• USENIX Security ’23 – ACORN: Input Validation for Secure Aggregati

• Intel 471 Sets New Standard in Intelligence-Driven Threat Hunting

• Oracle Ads have had it: $2B operation shuts down after dwindling to $300M

• How Sigma Is Empowering Devs, Engineers, and Architects With Cloud-Native Analytics

• 5 cybersecurity risks and challenges in supply chain

• Japan Passes Law To Allow Third Party App Stores, Payments

• How Singapore is creating more inclusive AI

• Top Takeaways from the Cisco Live 2024 DevNet Zone: AI, Programmability, and More

• Top Developer Takeaways from Cisco Live 2024: AI, Programmability, and More

• Netcraft Uses Its AI Platform to Trick and Track Online Scammers

• How we can separate botnets from the malware operations that rely on them

• X (Twitter) Now Hides Posts Liked By Users

• Securing the Future: The Role of Post-Quantum Cryptography

• Q1 2024: A Wake-up Call for Insider Threats

• Tile/Life360 Breach: ‘Millions’ of Users’ Data at Risk

• Navigating the API Threat Landscape in Finance

• Chinese ‘Smishing Triad’ Group Targets Pakistanis with SMS Phishing

• secure access service edge (SASE)

• Excellence in the essentials of cybersecurity – below the ‘poverty line’

• Ukrainian cops collar Kyiv programmer believed to be Conti, LockBit linchpin

• The Road to CTEM, Part 2: The Role of Continuous Validation

• USENIX Security ’23 – DiffSmooth: Certifiably Robust Learning via Diffusion Models and Local Smoothing

• AI-Powered Transformation: Optimizing B2B SaaS for Efficiency and Growth (Without Sacrificing Your Team)

• Wordfence Intelligence Weekly WordPress Vulnerability Report (June 3, 2024 to June 9, 2024)

• Switzerland government websites hit by DDoS Cyber Attack

• The Rise of Universal ZTNA

• Expert comment: Apple AI safety & security

• US Mulls Additional AI Chip Restrictions For China – Report

• Top 4 use cases of non-human identity security: Live event recap

• Effortless Credential Management in Azure: The Power of Managed Identities

• Motorola Solutions Vigilant License Plate Readers

• Guest Blog: Ox Security on learning from the Recent GitHub Extortion Campaigns

• Here’s How to Solve Top Challenges in Data Storage

• SpaceX, Elon Musk Sued By Engineers For Unfair Firings, Sex Bias

• Siemens Mendix Applications

• Siemens TIA Administrator

• Siemens SIMATIC S7-200 SMART Devices

• Revelations from Cisco Live: The Future of AI and Integrated Security

• Ascension Attack Caused by Employee Downloading Malicious File

• Exploring the Role of Data Analytics in SOC Alert Tuning

• Google fixed an actively exploited zero-day in the Pixel Firmware

• How Fear Tactics Led to a Pune Woman’s Financial Ruin: Insights into Cyber Fraud

• From Civilians to Cyber Warriors: China’s MCF Program Ignites a Western Typhoon

• Signs Your Home Network Has Been Hacked and How to Protect Yourself

• Arid Viper Launches Mobile Espionage Campaign with AridSpy Malware

• New Attack Technique ‘Sleepy Pickle’ Targets Machine Learning Models

• Arid Viper Hackers Spy in Egypt and Palestine Using Android Spyware

• UNC3944 Targets SaaS Applications

• Why Security Awareness Training is Your Best Defense

• Update now! Google Pixel vulnerability is under active exploitation

• Men’s Mental Health Week: Resource Guide

• How ThreatCloud AI’s Threat Emulation Engine Prevents DLL Sideloading (Trojan) Attacks

• Google’s Privacy Sandbox more like a privacy mirage, campaigners claim

• VMware Carbon Black vs CrowdStrike Falcon (2024): Which Tool Is Best For Your Business?

• Eclypsium Joins the Joint Cyber Defense Collaborative

• Connecticut Has Highest Rate of Health Care Data Breaches: Study

• Tech Giants Aid Rural Hospitals in Cybersecurity Battle

• SailPoint introduces AI-powered application onboarding capability

• Beware WARMCOOKIE Backdoor Knocking Your Inbox

• 0-day Vulnerability In 10,000 Web Apps Exploited Using XSS Payloads

• Hackers Exploiting MS Office Editor Vulnerability to Deploy Keylogger

• Keeper vs 1Password: 2024 Password Manager Comparison

• Education 4.0: The Role of AI in Transforming Education

• White House Report Dishes Deet On All 11 Major Government Breaches From 2023

• Apple Patches Possibly The First Ever Spatial Computing Hack

• Prevalence And Impact Of Password Exposure Vulns In ICS/OT

• Kaspersky Researchers Punch Holes In Biometrics Hardware Security

• Black Basta Exploits Patched Windows Privilege Escalation Bug

• The “Non-Trend” of “Full Automation” Workflows in Cybersecurity: A Reality Check

• Indian Ex-Employee Jailed for Wiping 180 Virtual Servers in Singapore

• cloud security

• NetSPI acquires Hubble to address asset and exposure management challenges

• Operationalizing our custom “SOC in a Box” at the RSA Conference 2024

• Bolster SaaS Security Posture Management with Zero Trust Architecture

• Embracing New Additions With Cisco’s Child Bonding Leave

• Strength in Unity: The Power of Cybersecurity Partnerships

• PHP command injection flaw exploited to deliver ransomware (CVE-2024-4577)

• Why SaaS Security is Suddenly Hot: Racing to Defend and Comply

• JetBrains GitHub Plugin Vulnerability Affects IntelliJ IDEs

• SEC Reaches $4.5bn Settlement With Bankrupt Terraform Labs

• Ivanti EPM SQL Injection Flaw Let Attackers Execute Remote Code

• Student’s flimsy bin bags blamed for latest NHS data breach

• Fortinet: CVE 2024-21754: Passwords on a Silver Platter

• Kaspersky Finds 24 Flaws in Chinese Biometric Hardware Provider

• The Security Step Too Many Companies Ignore: Tips for Micro-Segmenting into Your Network

• AI and the Indian Election

• Cybercriminals Employ PhantomLoader to Distribute SSLoad Malware

• Pakistan-linked Malware Campaign Evolves to Target Windows, Android, and macOS

• WeWork Emerges From Bankruptcy Protection

• Cyber Insurance Claims Hit Record High in North America

• Cybersecurity News: Life360 faces extortion attempt, White House reports increase in federal attacks, Black Basta exploits zero-day flaw in windows

• What Makes a Successful CISO?

• Operation Celestial Force employs mobile and desktop malware to target Indian entities

• The future of online document signing in the era of digital transformation

• CISA Warns of Scammers Impersonating as CISA Employees

• Flipping the script on pig butchering – $45 million is just the tip of the iceberg

• Cinterion EHS5 3G UMTS/HSPA Module Research

• Elevating SaaS App Security in an AI-Driven Era

• Multiple flaws in Fortinet FortiOS fixed

• Netskope extends security and data protection for Google Workspace users

• Urgently needed: AI governance in cyber warfare

• Ukrainian Cyber Police Identify Suspected LockBit and Conti Member

• UK Strengthens Cybersecurity with New Law Targeting Default Passwords

• Microsoft Windows Ntqueryinformationtoken Flaw Let Attackers Escalate Privileges

• The Team Sport of Cloud Security: Breaking Down the Rules of the Game

• Ukraine Police Arrest Suspect Linked to LockBit and Conti Ransomware Groups

• 5 Ways to Thwart Ransomware With an Identity-First Zero Trust Model

• Prosimo and Palo Alto Networks join forces to improve cloud infrastructure security

• CISA Warns Phone Scammers Are Impersonating its Staff

• Don’t fall for the trap: The sneaky tactics of business email scammers revealed

• Google Warns of Pixel Firmware Security Flaw Exploited as Zero-Day

• How to Analyze Malware in 5 Steps

• Hand me the flashlight. I’ll be right back…

• New Surge in Risky Business Email Compromise Phishing Attacks

• 256,000+ Publicly Exposed Windows Servers Vulnerable to MSMQ RCE Flaw

• New Cross-Platform Malware ‘Noodle RAT’ Targets Windows and Linux Systems

• Indian National Jailed For Hacked Servers Of Company That Fired Him

• Ascension Ransomware attack occurred due to employee mistake

• Microsoft Incident Response tips for managing a mass password reset

• How businesses can integrate token technology into existing payment systems

• Time to zero in on Zero Trust?

• GenAI keeps cybersecurity pros on high alert

• Maximizing productivity with Copilot for Microsoft 365: A security perspective

• The Next Big Thing in Identity Security: Identity Fabrics

• The Art of JQ and Command-line Fu [Guest Diary], (Thu, Jun 13th)

• ISC Stormcast For Thursday, June 13th, 2024 https://isc.sans.edu/podcastdetail/9022, (Thu, Jun 13th)

• Crooks crack customer info at tracking device vendor Tile, issue ‘extortion’ demands

• What is Continuous Authority to Operate (cATO)?

• What is ISO 27001 Compliance?

• 2024-06-11 – Traffic example of a CVE-2024-4577 probe

• 2024-06-12 – KoiLoader/KoiStealer infection

• Financial Institutions Must Reexamine Their Technology Setup

• CISA adds Arm Mali GPU Kernel Driver, PHP bugs to its Known Exploited Vulnerabilities catalog

• EFF to Ninth Circuit: Abandoning a Phone Should Not Mean Abandoning Its Contents

• Ransomware crew may have exploited Windows make-me-admin bug as a zero-day

• Encode Justice NC – the Movement for a Safe, Equitable AI

• IT Security News Daily Summary 2024-06-12

• Join Cisco at the SEAT Conference: A Hub for Sports Industry Innovation and Insights

• Ukraine Police arrested a hacker who developed a crypter used by Conti and LockBit ransomware operation

• The Next Generation of Cell-Site Simulators is Here. Here’s What We Know.

• Microsoft June 2024 Patch Tuesday Update Fixed ~50 Vulnerabilities

• Proactive Application Security: Learning from the Recent GitHub Extortion Campaigns

• USENIX Security ’23 – Precise and Generalized Robustness Certification for Neural Networks

• Ukraine Arrests Cryptor Specialist Aiding Conti and LockBit Ransomware

• Mandiant Report: Snowflake Users Targeted for Data Theft and Extortion

• AWS touts security culture, AI protections at re:Inforce 2024

• Tech Groups Call On US DoJ To Investigate YouTube Monopoly

• Know Your Digital Rights at the Airport | Avast

• Tern AI wants to reduce reliance on GPS with low-cost navigation alternative

• Google Warns of Pixel Firmware Zero-Day Under Limited, Targeted Exploitation

• Israeli Researchers Expose Security Flaws in Visual Studio Code Marketplace

• Port 1801 Traffic: Microsoft Message Queue, (Wed, Jun 12th)

• Black Basta Ransomware Suspected of Exploiting Windows 0-day Before Patch

• National Internet Safety Month: This June, Take 4 Easy Steps to Stay Safe Online

• Streamlining CLI Authentication: Implementing OAuth Login in Python

• Daniel Stori’s ‘Just Touch It’

• Self-replicating Morris II worm targets AI email assistants

• Cleveland Cyberattack Turns Public Services Offline for Days

• MSMQ Vulnerability Allows Hackers to Takeover Microsoft Servers

• Data Security Firm Cyberhaven Raises $88 Million at $488 Million Valuation

• Fortinet Patches Code Execution Vulnerability in FortiOS

• Ransomware Group May Have Exploited Windows Vulnerability as Zero-Day

• Microsoft Patches Zero-Click Outlook Vulnerability That Could Soon Be Exploited

• EU To Impose Tariffs Up To 38 Percent On Chinese EVs

• Phone Scammers Impersonating CISA Employees

• ANSSI-BP-028 security recommendations updated to version 2.0

• Automating secrets management with HashiCorp Vault and Red Hat Ansible Automation Platform

• Creating a Web Application Firewall in Red Hat OpenShift

• Spotlight on Riskassure

• White House report dishes deets on all 11 major government breaches from 2023

• How to achieve cloud-native endpoint management with Microsoft Intune

• Some specifics regarding Fog Ransomware and TellYouThePass Ransomware

• No AI training in newly distrusted Terms of Service, Adobe says

• Ransomware Group Jumps on PHP Vulnerability

• Introducing the 0-day Threat Hunt Bug Bounty Promo Through July 11th, 2024!

• Tesla Investor Slams Elon Musk’s $56bn Pay Deal, Amid Another Lawsuit

• Hackers Exploiting Linux SSH Services to Deploy Malware

• Critical Flaw In Apple Ecosystems Let Attackers Gain Unauthorized Access

• JetBrains Warns of GitHub Plugin that Exposes Access Tokens

• Job Seekers Aware: Phishing Attacks On The Rise

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• Couple’s ₹47.7 Lakh Loss Amid Two-Week Digital Harassment and Arrest

• AWS unveils new and improved security features

• WithSecure Reveals Mass Exploitation of Edge Software and Infrastructure Appliances

• privacy impact assessment (PIA)

• Navigating the Summer Beat: Insights from Cisco Live and our Partners

• Stay Secure: How to Prevent Zero-Click Attacks on Social Platforms

• Building Cyber Resilience in Manufacturing: Key Strategies for Success

• Chinese Threat Actors Leveraging ‘Noodle RAT’ Backdoor

• Splunk’s security innovations boost threat detection and response

• Cryptojacking Campaign Targets Misconfigured Kubernetes Clusters

• Scattered Spider Now Affiliated with RansomHub Following BlackCat Exit

• CIOs Admit AI Is Investment Priority, Just Ahead Of Security, Cloud

• Businesses’ cloud security fails are ‘concerning’ – as AI threats accelerate

• China’s FortiGate attacks more extensive than first thought

• Prevalent adds AI-powered enhancements to reduce risk assessment time

• Firefox 127 Released With patch for 15 Vulnerabilities

• Acronis XDR enhances EDR with comprehensive cybersecurity for MSPs

• The Evolution of QR Code Phishing: ASCII-Based QR Codes

• Verizon exec reveals responsible AI strategy amid ‘Wild West’ landscape

• A Closer Look at Recent Changes to New York State Department of Financial Services (NYSDFS) Cybersecurity Regulation

• CORL Companion automates the security assessment response for healthcare vendors

• 70% of Cybersecurity Pros Often Work Weekends, 64% Looking for New Jobs

• Where Can We Win Against Ransomware with Halcyon

• New backdoor BadSpace delivered by high-ranking infected websites

• GitHub Paid Out Over $4 Million via Bug Bounty Program

• When Vendors Overstep – Identifying the AI You Don’t Need

• Acronis XDR expands endpoint security capabilities for MSPs

• Cisco ISE 3.4 begins June with a bang

• Advancing Innovation and Harnessing AI to Secure the Homeland

• 2024’s Best RMM Solutions for MSPs: Top 10 Remote IT Management Tools

• Black Basta Ransomware May Have Exploited MS Windows Zero-Day Flaw

• Lessons from the Ticketmaster-Snowflake Breach

• Chinese Hackers Leveraging ‘Noodle RAT’ Backdoor

• Insights on Cyber Threats Targeting Users and Enterprises in Brazil

• Nvidia Completes Stock Split To Make Shares More Affordable

• JetBrains fixed IntelliJ IDE flaw exposing GitHub access tokens

• 20,000 FortiGate appliances compromised by Chinese hackers

• Charon Android Botnet Made a Comeback With New Weapons

• 6 Best VPNs for Australia in 2024

• Medical-Targeted Ransomware Is Breaking Records After Change Healthcare’s $22M Payout

• Using AI for Political Polling

• Elon Musk Drops OpenAI Lawsuit, Threatens Apple Ban

• Chrome 126, Firefox 127 Patch High-Severity Vulnerabilities

• Facebook, Meta, Apple, Amazon Most Impersonated in Phishing Scams

• Another step forward towards responsible vulnerability disclosure in Europe

• Microsoft launches cybersecurity program to tackle attacks, protect rural hospitals

• Major cybersecurity upgrades announced to safeguard American healthcare

• Cybersecurity News: Snowflake hack update, BreachForums down again, Cylance data for sale

• ICS Patch Tuesday: Advisories Published by Siemens, Schneider Electric, Aveva, CISA

• Ransomware Group Exploits PHP Vulnerability Days After Disclosure

• The Future of Security Compliance: How Emerging Technologies are Setting New Rules

• China-Backed Hackers Exploit Fortinet Flaw, Infecting 20,000 Systems Globally

• New Phishing Campaign Deploys WARMCOOKIE Backdoor Targeting Job Seekers

• Microsoft Patches One Critical and One Zero-Day Vulnerability

• Cyber Security Today, June 12, 2024 – More Snowflake storage victims found, Microsoft issues new Windows patches, and more

• Critical Outlook RCE Vulnerability Exploits Preview Pane – Patch Now!

• Pure Storage Data Breach Following Snowflake Hack: LDAP Usernames, Email Addresses Exposed

• Breaking Compliance into Bite-Sized Portions

• 4 Things a Good Vulnerability Management Policy Should Include

• Cisco Tees off at 2024 Championship Season

• What is Defense in Depth Security?

• How Quantum Computing Can Change the Cybersecurity Landscape

• Lacework’s visibility enhancements give businesses real time insight into resource inventory

• AuthenticID introduces deep fake and generative AI detection solution

• Chinese FortiGate Espionage Campaign Snares 20,000+ Victims

• Upgrade Your PHP Installations for A Critical RCE Flaw Patch

• UK Trails Behind Europe in Technical Skills Proficiency, Coursera Report Finds

• Splunk unveils AI tools across its product portfolio

• Unit21 automates the check investigation process for financial institutions

• SentinelOne strengthens cloud security for AWS customers

• FBI offers thousands of free LockBit decryption keys

• London Tech Week 2024

• Microsoft Urges Windows Admins to Patch Microsoft Message Queuing RCE Flaw

• Obsidian Security and Databricks collaborate to protect sensitive business data

• Cleveland City Closes Offices Following Attack on IT Systems

• Microsoft Urges Windows Admins to Patch Microsoft Message Queuing RCE flaw

• Microsoft Patch Tuesday security updates for June 2024 fixed only one critical issue

• AI integration into iPhones raises data security concerns for X

• The Risks of Sharing Business Data with AI

• PHP CGI Windows Platform Remote Code Execution Vulnerability (CVE-2024-4577) Advisory

• Open-source security in AI

• Microsoft Issues Patches for 51 Flaws, Including Critical MSMQ Vulnerability

• Security and privacy strategies for CISOs in a mobile-first world

• Six months of SEC’s cyber disclosure rules

• Cybersecurity jobs available right now: June 12, 2024

• ISC Stormcast For Wednesday, June 12th, 2024 https://isc.sans.edu/podcastdetail/9020, (Wed, Jun 12th)

• Downtime Costs World’s Largest Companies $400 Billion a Year, According to Splunk Report

• How AI and LLMs are revolutionizing cyber insurance

• Let’s kick off our summer with a pwn-me-by-Wi-Fi bug in Microsoft Windows

• What We Know So Far about the Snowflake “Breach”

Generated on 2024-06-13 23:55:11.622049