IT Security News Daily Summary 2024-06-19

• New Blog Moderation Policy

• Breakthrough may clear major hurdle for quantum computers

• Google Chrome 126 update addresses multiple high-severity flaws

• Transforming Modern Networking: The Unmatched Security of Secure Access Service Edge (SASE)

• Fickle Stealer Distributed via Multiple Attack Chain

• Massachusetts 911 Outage Caused by Errant Firewall

• Elon Musk Appeals To Advertisers, Backtracks Over Notorious Outburst

• ViLe Cybercrime Group Members Plead Guilty to Hacking DEA Portal

• IRONSCALES Applies Generative AI to Phishing Simulation

• Juneteenth National Independence Day 2024

• AI Technique Combines Programming and Language

• US Urges Netherlands, Japan To Increase Chip Kit Restrictions For China

• Kraken Crypto Exchange Hit by $3 Million Theft Exploiting Zero-Day Flaw

• China-Linked Hackers Breach East Asian Firm for 3 Years via F5 Devices

• Microsoft Defender Experts for XDR recognized in the latest MITRE Engenuity ATT&CK® Evaluation for Managed Services

• AI Receptionists For GPs Launched By Customer Service Firm InTouchNow

• ONNX Phishing Targets Financial Companies’ Microsoft 365 Accounts

• The Distributed Workforce: Why Flexibility and Trust are Essential in Cybersecurity

• UNC3886 Uses Fortinet, VMware 0-Days and Stealth Tactics in Long-Term Spying

• Cyborg Social Engineering: Defending against personalised attacks

• Google find my device helps secure your information stored on the phone to the core

• How to use public Wi-Fi safely: 5 things to know before you connect

• Price Drop: Block Ads for a Special Price of Just $25

• The developers’ guide to secure coding: The six steps towards secure software development

• UK Investigates HPE’s $14bn Acquisition Of Juniper Networks

• Sophon and Aethir Partner to Bring Decentralized Compute to The ZK Community

• Juneteenth: A Day of Reflection, Celebration, and Commitment

• Chinese Cyber Espionage Group Exploits Fortinet, Ivanti and VMware Zero-Days

• SME Cybersecurity Challenges and Opportunities

• Fisker Files For Chapter 11 Bankruptcy

• Broadcom Advises Urgent Patch for Severe VMware vCenter Server Vulnerabilities

• Amtrak Data Breach: Hackers Accessed User’s Email Address

• Cybersecurity as a Service Market: A Domain of Innumerable Opportunities

• Cybersecurity M&A Roundup for First Half of June 2024

• New ARM ‘TIKTAG’ Attack Affects Google Chrome and Linux Systems

• Notorious Cyber Gang UNC3944 Shifts Focus to SaaS Apps vSphere and Azure

• Chrome Security Update – Patch for 6 Vulnerabilities

• Better Protect Your Cybersecurity During Hurricane Season

• Cybersecurity Leader SonicWall Rides Wave of Momentum with Company Transformation, Acquisitions, and New Cyber Platform

• Amtrak Says Guest Rewards Accounts Hacked in Credential Stuffing Attacks

• Securing Sensitive Data: Lessons from Keytronic’s Recent Breach

• Breaking the Cycle of Traditional Vulnerability Management

• Perplexity Is a Bullshit Machine

• Chip maker giant AMD investigates a data breach

• Pure Storage enhances its platform with cyber resiliency services and capabilities

• Hackers Weaponize Windows Installer (MSI) Files to Deliver Malware

• A Wake-up Call for Cloud Security: Insights From the Recent Snowflake Data Breach

• Amtrak confirms crooks are breaking into user accounts, derailing email addresses

• European Cyber Resilience: How the EU Can Patch the Weak Spots in its Collective Armour

• How Improving EV Charging Infrastructure Can Bolster US Cybersecurity Measures

• US, Allies Publish Guidance on Securing Network Access

• Quishing Campaign Targets Chinese Citizens via Fake Official Documents

• Join Us 7-12-24 for “Hacking the Materiality of a Data Breach” – Super Cyber Friday

• From Pen Testing to Remediation with NetSPI

• Hackers Using VPNs To Exploit Restrictions & Steal Mobile Data

• Cybercrime Targeting Paris 2024 Olympic Games Gains Steam

• Cybersecurity Worker Burnout Costing Businesses Big

• Ransomware gangs testing in developing nations before striking richer countries

• Stuxnet, The Malware That Propagates To Air-Gapped Networks

• New PhaaS Platform Lets Attackers Bypass Two-Factor Authentication

• Celebrating Juneteenth: A Call to Embrace Our Shared Humanity

• AMD Investigating Breach Claims After Hacker Offers To Sell Data

• AI Makes Nvidia The World’s Most Valuable Company

• F5 Big-IP Appliances Exploited For 3 Years By China Linked Group

• VMware Fixes 2 Critical Bugs

• New Threat Actor ‘Void Arachne’ Targets Chinese Users with Malicious VPN Installers

• New Case Study: Unmanaged GTM Tags Become a Security Nightmare

• The Hacking of Culture and the Creation of Socio-Technical Debt

• Chrome 126 Update Patches Vulnerability Exploited at Hacking Competition

• The Perilous Role of the CISO: Navigating Modern Minefields

• CISA Warns of PoC Exploit for Vulnerability in RAD SecFlow-2 Industrial Switch

• Clever macOS malware delivery campaign targets cryptocurrency users

• Nvidia Overtakes Microsoft As Most Valuable Tech Firm

• IntelBroker Hacker Claims Apple Breach, Steals Source Code for Internal Tools

• Threat Actors Claiming Breach of AMD Source Code on Hacking Forums

• Warning: Markopolo’s Scam Targeting Crypto Users via Fake Meeting Software

• Void Arachne Uses Deepfakes and AI to Deliver Malicious VPNs to Chinese Users

• What Is Zero Trust Security?

• G7 to Develop Cybersecurity Framework for Energy Sector

• Cybersecurity Burnout Costing Firms $700m+ Annually

• Cybersecurity News: AMD investigates breach, Qilin demands ransom, Hackers derail Amtrak

• Apple Drops ‘Buy Now, Pay Later’ Service

• Beware of Nevermore Actor Promoting Ransomware Builder

• This Is What Would Happen if China Invaded Taiwan

• Chinese Velvet Ant Hackers Target F5 Devices in Years-Long Espionage

• How to Spot a Winning NERC CIP Project

• Where Security Starts in Your Security Projects

• Tripwire Patch Priority Index for May 2024

• AMD Investigating Breach Claims After Hacker Offers to Sell Data

• Cyber Security Today, June 19, 2024 – How an attacker hid on an IT network for three years

• Handling BOM MIME Files, (Wed, Jun 19th)

• Beware Of Fake Microsoft Teams Website That Installs Oyster Malware

• Cryptojacking campaign targets exposed Docker APIs

• What Is a Bastion Host? Types, Use Cases, and Safety Measures

• CIISec Urges Employers to Target Young Talent in Gaming Centers

• Criminals are Easily Bypassing Passkeys – How Organizations Can Stay Safe

• How can SLTTs defend against cyber threats?

• Quantum Xchange expands Phio TX platform to offer secure site-to-site and remote access VPN

• Mailcow Mail Server Flaws Expose Servers to Remote Code Execution

• Behind the Great Wall: Void Arachne Targets Chinese-Speaking Users With the Winos 4.0 C&C Framework

• That PowerShell ‘fix’ for your root cert ‘problem’ is a malware loader in disguise

• Debunking Common Myths About Catastrophic Cyber Incidents

• Understanding the Crucial Differences: Disaster Recovery vs. Ransomware Recovery

• Google Chrome users targeted by Cyber Attack

• Cybersecurity jobs available right now: June 19, 2024

• SELKS: Open-source Suricata IDS/IPS, network security monitoring, threat hunting

• Find out which cybersecurity threats organizations fear the most

• Rising exploitation in enterprise software: Key trends for CISOs

• Rogue uni IT director pleads guilty after fraudulently buying $2.1M of tech

• EU attempt to sneak through new encryption-eroding law slammed by Signal, politicians

• Dark-web kingpin puts ‘stolen’ internal AMD databases, source code up for sale

• EU attempt to sneak through new encryption-busting law slammed by Signal, politicians

• 2024-06-12 – Google ad –> fake unclaimed funds site –> Matanbuchus with Danabot

• Cybercriminals Target Trump Supporters with Donation Scams

• IT Security News Daily Summary 2024-06-18

• Palo Alto Networks Excels in MITRE Managed Services Evaluation

• New ALPR Vulnerabilities Prove Mass Surveillance Is a Public Safety Threat

• Building Resilient Security Systems: Composable Security

• Recently Patched PHP Flaw Under Attack By TellYouThePass Ransomware

• Breadth vs. Depth in SaaS Security

• Understanding SOC Models: A 5-Minute Guide to Staffing, Technology, and Operations

• Top cybersecurity Substacks to follow

• malware

• Why Enterprise Editions of Open Source Databases Are Essential for Large Organizations

• Video Meta Data: DJI Drones, (Sun, Jun 16th)

• Security bug allows anyone to spoof Microsoft employee emails

• Designing a More Inclusive Web: DataDome’s Response Page Accessibility Upgrades

• BlackSuit Ransomware Leaks Kansas City Police Data in Failed Ransom Plot

• Explained: Android overlays and how they are used to trick people

• VMware fixed RCE and privilege escalation bugs in vCenter Server

• California Lawmakers Should Reject Mandatory Internet ID Checks

• Non-human Identity Lifecycle Firm Entro Security Raises $18 Million

• New BadSpace Backdoor Deployed in Drive-By Attacks

• Two Men Plead Guilty to Hacking Law Enforcement Database for Doxing

• Not Just Another 100% Score: MITRE ENGENIUTY ATT&CK

• Internet Computer Protocol Launches Walletless Verified Credentials for Public Trust

• CISA, SAFECOM and NCSWIC Publish SAFECOM Guidance on Emergency Communications Grants

• Deeper Service-centric Visibility Drives New Revenue and Simplifies Operations

• Ah, Steamboat Willie. It’s been too long. 🐭

• How to Clean Up Your Bluesky Feed

• Survey Surfaces Lack of Confidence in Security Tools

• Signal Foundation Warns Against EU’s Plan to Scan Private Messages for CSAM

• Los Angeles County suffers data breach impacting 200000 individuals

• CISA Releases the FY 2024 Rural Emergency Medical Communications Demonstration Project (REMCDP) Notice of Funding Opportunity

• Salt Security Survey Reveals 95% of Respondents Experienced API Security Problems in Past Year

• CHERI Alliance formed to promote memory security tech … but where’s Arm?

• Atsign NoPorts establishes an encrypted IP tunnel directly between devices

• 92% of Organizations Hit by Credential Compromise from Social Engineering Attacks

• The Difference Between API Gateway and WAAP ? and Why You Need Both

• Unmasking the Danger: 10 Ways AI Can Go Rogue (And How to Spot Them)

• RAD Data Communications SecFlow-2

• CISA and Partners Release Guidance for Modern Approaches to Network Access Security

• CISA Releases One Industrial Control Systems Advisory

• Campaign Spotlight: Driving Demand with Marketing Velocity Central and User Protection Campaign

• Navigating the Perilous Waters of Supply Chain Cybersecurity

• The TIDE: UNC5537, SCARLETEEL, new Threat Object Stubs, and now 303 defensive solution mappings (our biggest release yet!)

• Under Attack: How UHC and Kaiser Are Tackling Their Cybersecurity Ordeals

• Threat Actors Use Obscure or Self-Made Link Shortener Services for Credential Harvesting

• ASUS Router User? Patch ASAP!

• How Anthropic’s comprehensive red team methods close AI security gaps

• UK national accused of hacking dozens of US companies arrested in Spain

• Here’s How Technology is Enhancing the Immersive Learning Experience

• Medibank breach: Security failures revealed (lack of MFA among them)

• Cloaked and Covert: Uncovering UNC3886 Espionage Operations

• Vulnerability Recap 6/18/24 – Patch Tuesday, Plus More Ivanti Issues

• Microsoft & Google Offer Discounted Cybersecurity Solutions to Rural Hospitals

• New BadSpace Backdoor Deployed In Drive-By Attacks

• New TikTag Attack Targets Arm CPU Security Feature

• Encryption Is Deeply Threatening To Power

• Change Healthcare Attack Financial Support Ends

• Astronomers Witness A Supermassive Black Hole Roaring To Life

• Apple’s Private Cloud Compute: Enhancing AI with Unparalleled Privacy and Security

• Next DLP Secure Data Flow prevents data theft

• NinjaOne MDM provides visibility and control over mobile devices

• Cybercriminals Exploit Free Software Lures to Deploy Hijack Loader and Vidar Stealer

• Fake Meeting Software Spreads macOS Infostealer

• AMD Data Breach: IntelBroker Claims Theft of Employee and Product Info

• 43% of couples experience pressure to share logins and locations, Malwarebytes finds

• CrowdStrike vs Sophos (2024): Which Solution Is Better for Your Business?

• Keeper vs LastPass (2024): Which Password Manager Is Better for Your Business?

• Meta delays training its AI using public content shared by EU users

• Reducing the significant risk of known exploitable vulnerabilities in Red Hat software

• Palo Alto Networks Hits the Mark in MITRE Managed Services Evaluation

• NHS boss says Scottish trust wouldn’t give cyberattackers what they wanted

• Uncle Sam ends financial support to orgs hurt by Change Healthcare attack

• Fraudely empowers SMBs to protect their employees against phishing attacks

• AWS HITRUST Shared Responsibility Matrix v1.4.3 for HITRUST CSF v11.3 now available

• Insurance Giant ‘Globe Life’ Data Breach Impacting Consumers and Policyholders

• 7 Best Penetration Testing Service Providers in 2024 Compared

• The Challenge of Combatting Threats Against Autonomous Vehicles

• Veritas Data Insight classifies and controls unstructured data

• VMware Discloses Critical Vulnerabilities, Urges Immediate Remediation

• How are attackers trying to bypass MFA?

• Exploring malicious Windows drivers (Part 2): the I/O system, IRPs, stack locations, IOCTLs and more

• How to Monitor Network Traffic: Findings from the Cisco Cyber Threat Trends Report

• The State of Cloud Security Platforms and DevSecOps

• Embracing Authenticity Beyond June: A Decade of Pride and Progress at Cisco

• Analysis of user password strength

• Rethinking Democracy for the Age of AI

• NHS boss says Scottish trust didn’t meet attackers’ demands

• Cyber Materiality Reporting for Smaller Companies | Kovrr

• Sysdig Bids to Bolster Brittle Cloud Infrastructure Layers

• Entro Security raises $18 million to scale its global operations

• The Annual SaaS Security Report: 2025 CISO Plans and Priorities

• Quarter of Firms Suffer an API-Related Breach

• The 5 Best VPNs With Free Trials in 2024

• YouTube Test Community ‘Notes’ Feature For Added Context

• Microsoft Xbox Marketing Chief Leaves For Roblox

• Singapore Police Arrested Two Individuals Involved in Hacking Android Devices

• Cybersecurity Checklist: 9 Ways to Stay Safe on Your Summer Travels

• Integrity and FIM: It’s More than Just Data Security

• Blackbaud Settles With California for $6.75 Million Over 2020 Data Breach

• Sandton Police Raid Uncovers Massive Counterfeit SIM Card Operation

• New Malware Targets Exposed Docker APIs for Cryptocurrency Mining

• The Post-it Note Clearly Says “Don’t Share” Right Under My Password

• Attack Paths Into VMs in the Cloud

• Managing Cloud Security Posture: Continuous Monitoring and Hardening for Visibility and Compliance

• Report Reveals Record Exploitation Rate For Load Balancers

• Cybersecurity News: Snowflake breach escalates, MITRE has a memo for the president, Velvet Ant persists

• Tencent To Ban AI Avatars From Livestream Commerce

• FTC Sues Adobe Over Hidden Fees, Termination ‘Resistance’

• Keytronic confirms data breach after ransomware attack

• Google Critical Security Alert Email

• Top 5 Ways To Protect Your Logistics Company From Fraud

• Critical RCE flaws in vCenter Server fixed (CVE-2024-37079, CVE-2024-37080)

• eBook: The Art & Science of Secure Software Development

• SUSE announces Liberty Linux Lite for CentOS 7

• TikTok US Ban Appeal Gets 16 September Court Date

• CISA Conducts First-Ever Tabletop Exercise Focused on AI Cyber Incident Response

• Datadog App Builder helps accelerate issue remediation

• VMware Issues Patches for Cloud Foundation, vCenter Server, and vSphere ESXi

• Trumped Up Crypto Scams – Criminals Deploy Trump Donation Scams

• Singapore Police Extradites Malaysians Linked to Android Malware Fraud

• US Surgeon General Calls For Warning Labels On Social Media

• The Financial Dynamics Behind Ransomware Attacks

• Podcast Episode: AI in Kitopia

• Are We Turning the Corner in the Fight Against Cybercrime? It’s Complicated.

• Ransomware related news headlines trending on Google

• Europol Taken Down 13 Websites Linked to Terrorist Operations

• VMware by Broadcom warns of two critical vCenter flaws, plus a nasty sudo bug

• Runtime Enforcement: Software Security After the Supply Chain Ends

• New ARM ‘TIKTAG’ Attack Impacts Google Chrome, Linux Systems

• Anthropic’s red team methods are a needed step to close AI security gaps

• How to create your cybersecurity “Google Maps”: A step-by-step guide for security teams

• Enhancing security through collaboration with the open-source community

• Mass exploitation is the new primary attack vector for ransomware

• Preparing for a post-quantum future

• Key Takeaways From Horizon3.ai’s Analysis of an Entra ID Compromise

• 42% plan to use API security for AI data protection

• ISC Stormcast For Tuesday, June 18th, 2024 https://isc.sans.edu/podcastdetail/9028, (Tue, Jun 18th)

• Arm security defense shattered by speculative execution 95% of the time

• Enhancing Enterprise Browser Security

• Generative AI Not Replacing UK Jobs, Study Finds

• Suspected bosses of $430M dark-web Empire Market charged in US

• Shoddy infosec costs PwC spinoff and NMA $11.3M in settlement with Uncle Sam

Generated on 2024-06-19 23:55:10.678166