IT Security News Daily Summary 2024-06-17

• Suspected underworld Empire Market bosses face possible life behind bars

• APIs: The Silent Heroes of Data Center Management

• China-linked Velvet Ant uses F5 BIG-IP malware in cyber espionage campaign

• California’s Facial Recognition Bill Is Not the Solution We Need

• Feds cuff suspected bosses of underworld Empire Market

• The Future of Pi Coin: Potential and Predictions

• The Surgeon General’s Fear-Mongering, Unconstitutional Effort to Label Social Media

• CISA Releases Guide to Enhance Election Security Through Public Communications

• The best travel VPNs of 2024: Expert tested and reviewed

• Leveraging ASNs and Pivoting to Uncover Malware Campaigns

• Truist Bank Confirms Data Breach After Information Surfaces on Hacking Forum

• SaaS tenant isolation with ABAC using AWS STS support for tags in JWT

• Blackbaud has to cough up a few million dollars more over 2020 ransomware attack

• Microsoft Recommends ‘Always On VPN’ As It Deprecates Windows DirectAccess

• Mitigating SSRF Vulnerabilities Impacting Azure Machine Learning

• Defending your ever-changing attack surface

• Critical Vulnerabilities Exposing Chinese Biometric Readers to Unauthorized Access

• (Almost) everything you always wanted to know about cybersecurity, but were too afraid to ask, with Tjitske de Vries: Lock and Code S05E13

• Malicious emails tricking users to make donations for elections

• 7 cool and useful things I do with my Flipper Zero

• Open Source Licensing 101: Everything You Need to Know

• Vulnerability Summary for the Week of June 10, 2024

• US Surgeon General Wants Social Media Warning Labels

• Microsoft Patches Zero-Click Outlook Vulnerability

• UK Man Suspected Of Being Scattered Spider Leader Arrested

• Notorious Cyber Gang UNC3944 Attacks vSphere And Azure To Run VMs Inside Victims’ Infrastructure

• Ransomware Attackers Are Weaponizing PHP Flaw to Infect Web Servers

• Los Angeles Public Health Department Discloses Large Data Breach

• Mastering Nutanix Hyperconverged Infrastructure on Cisco’s Black Belt Academy

• ASUS Patches Critical Authentication Bypass Flaw in Multiple Router Models

• Microsoft Recall delayed after privacy and security concerns

• Aim Security Raises $18M to Secure Customers’ Implementation of AI Apps

• Insurance Company Globe Life Investigating Data Breach

• Keytronic Says Personal Information Stolen in Ransomware Attack

• CISA Conducts First AI Cyber Incident Response Exercise

• Tech Leaders to Gather for AI Risk Summit at the Ritz-Carlton, Half Moon Bay June 25-26, 2024

• Metomic’s Google User Groups feature alerts users when sensitive data might be at risk

• AI Development at Risk: Critical Vulnerability Discovered in Popular Python Library

• A Deep Dive into SELinux

• Testing Banking Website Security: What You Need to Know

• Why ransomware is still important to business resilience

• LA County’s Department of Public Health (DPH) data breach impacted over 200,000 individuals

• Using LLMs to Exploit Vulnerabilities

• The Ultimate Guide to Troubleshooting Vulnerability Scan Failures

• Malware peddlers love this one social engineering trick!

• Academics Develop Testing Benchmark for LLMs in Cyber Threat Intelligence

• Why Hybrid Cloud Security is the Future

• Exclusive: Parallel Domain launches PD Replica for high-fidelity digital twins in autonomous vehicle testing

• Exclusive: Kong launches AI Gateway to help enterprises govern and scale generative AI

• Cops cuff 22-year-old Brit suspected of being Scattered Spider leader

• Stop playing games with online security, Signal president warns EU lawmakers

• Emerging Technology Review and Needs

• Operation Celestial Force Employing Android And Windows Malware To Attack Indian Users

• China-Linked Hackers Infiltrate East Asian Firm for 3 Years Using F5 Devices

• How deepfakes threaten biometric security controls

• Privacy app maker Proton transitions to non-profit foundation structure

• Co-innovating with Historically Black Colleges and Universities

• Stay Compliant: Cisco Secure Workload Introduces State-of-the-art, Persona-based Reporting

• Spotlight on Scribe Security

• Argus Cyber Security and Microsoft partner to secure automotive fleets throughout the vehicle lifecycle

• Microsoft Reconsiders Windows Recall Release Amidst Privacy Concerns

• The Role of Cybersecurity in Modern Waste Management Systems

• What is DevSecOps and Why is it Essential for Secure Software Delivery?

• Spanish police arrested an alleged member of the Scattered Spider group

• AWS is pushing ahead with MFA for privileged accounts. What that means for you …

• Hunt3r Kill3rs Group claims they Infiltrated Schneider Electric Systems in Germany

• UK’s Total Fitness exposed nearly 500k images of members and staff through unprotected database

• The Indispensable Role of the CISO in Navigating Cybersecurity Regulations

• Google Must Face Trial In Ad Tech Monopoly Case

• Zero Trust Policy

• Outpost24 Launches Exposure Management Platform To Help Organizations Reduce Attack Surface Risk

• Meta Pauses European GenAI Development Over Privacy Concerns

• How Does Generative AI Help and Hurt Cybersecurity?

• Apple, Meta Likely To Face EU Antitrust Charges

• Silicon In Focus Podcast: Feeding the Machine

• Major Data Breach at CUHK Affects Over 20,000 Students and Staff

• Cybersecurity News: CISA tabletop exercise, Keytronic confirms breach, Linux emoji malware

• Cyber Security Today, June 17, 2024 – Microsoft faces heat in Congress, alleged cybercrook arrested, and more

• Adobe Shares Jump On AI Success

• Hackers Detail How They Allegedly Stole Ticketmaster Data From Snowflake

• China Attempted Covert Military Drone Tie-Up With UK University – Report

• Winklevoss’ Gemini To Pay $50m In Crypto Fraud Settlement

• The Seven Things You Need to Know About Cyber Insurance

• London Ransomware Attack Led to 1500 Cancelled Appointments and Operations

• Meta Delays EU AI Launch After Privacy Complaints

• Online job offers, the reshipping and money mule scams

• Hackers Employing New Techniques To Attack Docker API

• New NetSupport Campaign Delivered Through MSIX Packages, (Mon, Jun 17th)

• AI Fuels Local Memory Chip Demand For China’s Sanctioned YMTC

• Hidden Backdoor in D-Link Routers Let Attacker Login as Admin

• A week in security (June 10 – June 16)

• Amazon-Powered AI Cameras Used to Detect Emotions of Unwitting UK Train Passengers

• Exploring the Three Types of Web Development

• Zadig & Voltaire – 586,895 breached accounts

• Notorious cyber gang UNC3944 attacks vSphere and Azure to run VMs inside victims’ infrastructure

• Hackers Exploit Legitimate Websites to Deliver BadSpace Windows Backdoor

• Telenor establishes Telenor Cyberdefense

• How cars can pose a cyber threat to user privacy

• FBI Arrested U.K. Hacker Linked to Scattered Spider Hacking Group

• NiceRAT Malware Targets South Korean Users via Cracked Software

• Low code, high stakes: Addressing SQL injection

• The rise of SaaS security teams

• Ghidra: Open-source software reverse engineering framework

• AI’s impact on data privacy remains unclear

• Malicious emails trick consumers into false election contributions

• ISC Stormcast For Monday, June 17th, 2024 https://isc.sans.edu/podcastdetail/9026, (Mon, Jun 17th)

• That didn’t take long: replacement for SORBS spam blacklist arises … sort of

• Can governments turn AI safety talk into action?

• Japan’s space junk cleaner hunts down major target

• USENIX Security ’23 – We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets

• How we differentiate ARMO Platform from Open Source Kubescape

• IT Security News Weekly Summary – Week 24

• IT Security News Daily Summary 2024-06-16

• Security Affairs newsletter Round 476 by Pierluigi Paganini – INTERNATIONAL EDITION

• Phishing Attack Abuses Windows Search Protocol to Deploy Malware

• Identity Verification Becomes Crucial in the Digital Age

• What is Identity Threat Detection And Response (ITDR)

• Protecting Your Business from Snowflake Platform Exploitation by UNC5537

• Confidential NHS Patient Data Discovered in Jesmond Alleyway

• Combating Cyber-attacks with Threat-Intelligence

• Ascension Breached Due to Employee Downloading Malicious File

• Researchers Find ChatGPT’s Latest Bot Behaves Like Humans

• Mastering the Art of Digital Management: Potential Risks and Business Best Practices

• Apple Briefly Overtakes Microsoft For Market Crown On AI Plans

• How to Spot a Business Email Compromise Scam

• The ROI of Doing Nothing: What to know as new demands are placed on networks

• The High Cost of Ransomware: Change Healthcare’s $22 Million Payout and Its Aftermath

• Let Slip the Robot Dogs of War

• Five Data Security Challenges CISOs Face Today

• Five Strategies for IT and Security Leaders to Defend Against AI-Powered Threats

• ASUS fixed critical remote authentication bypass bug in several routers

• Week in review: JetBrains GitHub plugin vulnerability, 20k FortiGate appliances compromised

• Inside Identity 2024

• U.K. Hacker Linked to Notorious Scattered Spider Group Arrested in Spain

• New Malware Campaign Exploits Windows Search to Spread

• Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested

Generated on 2024-06-17 23:55:07.948641