IT Security News Daily Summary 2024-06-20

• The Role of Kubernetes in Data Privacy and Protection

• Biden puts a bullet in Kaspersky: Sales, updates to be banned in America

• YouTube shuts down viral ‘hack’ for getting cheaper Premium subscription

• How AI lies, cheats, and grovels to succeed – and what we need to do about it

• Car dealer software bigshot CDK pulls systems offline twice amid ‘cyber incident’

• Cyber A.I. Group Announces the Engagement of Walter L. Hughes as Chief Executive Officer

• New Government Ban on Kaspersky Would Prevent Company from Updating Malware Signatures in U.S.

• Optimizing Your Cloud Resources, Part 1: Strategies for Effective Management

• US Bans Kaspersky Software

• US bans sale of Kaspersky software citing security risk from Russia

• If you like your Flipper Zero, then you’ll love this

• KrebsOnSecurity Threatened with Defamation Lawsuit Over Fake Radaris CEO

• Cisco API Documentations Is Now Adapted for Gen AI Technologies

• Why SMBs Don’t Deploy Single Sign On (SSO)

• Atlassian fixed six high-severity bugs in Confluence Data Center and Server

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #294 — Enabling Flow

• Hackers Exploit Snowflake Data, Targeting Major Firms

• Tabletop exercises are headed to the next frontier: Space

• 1Password unveils new sign-in experience and recovery codes feature

• UK Health Club Chain ‘Total Fitness’ Data Leak Exposes KYC and Card Data

• 7 cool and useful things I do with my Flipper Zero (and you can too)

• Flipper Zero: ‘Can you really hack Wi-Fi networks?’ and other questions answered

• Opposing a Global Surveillance Disaster | EFFector 36.8

• Crypto exchange Kraken accuses blockchain security outfit CertiK of extortion

• Decade-Long Cyber Assault on Asian Telecoms Traced to Chinese State Hackers

• Qilin Ransomware: What You Need To Know

• Worldwide 2023 Email Phishing Statistics and Examples

• MacDonald’s Ends Its AI Drive-Through Assistant Experiment

• IoT Needs To Get Serious About Security

• Water facilities warned to improve cybersecurity

• Staying Safe with Chrome Extensions

• EU Aims to Ban Math — ‘Chat Control 2.0’ Law is Paused but not Stopped

• Port scan attacks: What they are and how to prevent them

• EU Member States remain divided on controversial CSAM-scanning plan — but for how long?

• Police are Using Drones More and Spending More For Them

• The Growing Threat of Data Breaches to Australian Businesses

• Hackers Reveal Their Strategy of Stealing Snowflake’s Ticketmaster Data

• Could Brain-Like Computers Be a Game Changer in the Tech Industry?

• When Legit Downloads Go Rogue: The Oyster Backdoor Story

• Now a Doctrine for Cyberspace Operations

• Leveraging technology to empower refugees with secure and equitable access to information, resources, and opportunities

• The LA28 Games – Together

• Long-Running Chinese Espionage Campaign Targets Telecom Firms in Asian Country

• Anthropic Launches Newest AI Model, Claude 3.5 Sonnet

• Rafel RAT, Android Malware from Espionage to Ransomware Operations

• US car dealerships face ongoing outage after CDK cyberattacks

• China-linked spies target Asian Telcos since at least 2021

• A Traveler’s Guide to Cybersecurity

• How to Hunt for Volt Typhoon Malware in Critical Infrastructure

• OpenAI Co-Founder Sutskever Sets up New AI Company Devoted to ‘Safe Superintelligence’

• Cato Networks Launches SASE Platform for Partners

• Biden Administration To Ban US Sales Of Kaspersky Software – Report

• Hackers Exploit Progressive Web Apps to Steal Passwords

• Keeper vs Bitwarden (2024): Benefits & Features Compared

• CISA Releases Three Industrial Control Systems Advisories

• Yokogawa CENTUM

• Westermo L210-F2G

• CAREL Boss-Mini

• Crown Equipment cyberattack confirmed, manufacturing disrupted for weeks

• French Diplomatic Entities Targeted in Russian-Linked Cyber Attacks

• Researchers Uncover UEFI Vulnerability Affecting Multiple Intel CPUs

• LockBit Ransomware Again Most Active – Real Attack Surge or Smokescreen?

• Access Management Startup Pomerium Raises $13.75 Million

• Hill Briefing on Encryption Canceled Suddenly by FBI

• Wordfence Intelligence Weekly WordPress Vulnerability Report (June 10, 2024 to June 16, 2024)

• Anthropic’s Claude 3.5 Sonnet outperforms OpenAI and Google in enterprise AI race

• ESSER Funding: Top 3 Ways to Make it Work

• Hundreds of PC, Server Models Possibly Affected by Serious Phoenix UEFI Vulnerability

• 1inch partners with Blockaid to enhance Web3 security through the 1inch Shield

• Concentric AI’s compliance feature helps organizations identify and address compliance risks

• Internet Computer Protocol Launches Walletless Verified Credentials to Build Trust in the Public Discourse

• Writer triples revenue and expands to 250 customers as demand for enterprise AI soars

• Bitdefender vs Kaspersky (2024): Which Solution Is Better?

• New Rust infostealer Fickle Stealer spreads through various attack methods

• LockBit Most Prominent Ransomware Actor in May 2024

• CISPE Data Protection Code of Conduct Public Register now has 113 compliant AWS services

• Check Point’s 2024 Cloud Security Report: Navigating the Intersection of Cyber security

• Semperis, a specialist in Active Directory security now worth more than $1B, raises $125M

• Obsidian Security Partners with Databricks to Bolster SaaS Data Governance

• CHOROLOGY Emerges to Apply Generative AI to Data Governance

• Did ‘Terraform Destroy’ Cause the UniSuper Google Cloud Outage?

• A New Age of Threats in Online Shopping: Cybersecurity Tips

• Hacker Leaks Data of 33,000 Accenture Employees in Third-Party Breach

• Russia’s cyber spies still threatening French national security, democracy

• Highly Evasive SquidLoader Malware Targets China

• Semperis Eyes IPO With $125 Million in Growth Financing

• AI Weights: Securing the Heart and Soft Underbelly of Artificial Intelligence

• French Diplomatic Entities Targeted by Russian-Aligned Nobelium

• Up your Quality of Life with Secure MSP Hub and Secure MSP Center

• Amtrak Confirms Crooks Are Breaking Into User Accounts, Derailing Email Addresses

• INE Security: Optimizing Teams for AI and Cybersecurity

• New Fickle Stealer Exploits Software Flaws to Steal Crypto, Browser Data

• Recovering Public Keys from Signatures

• June Product Update

• Chinese Cyber Espionage Targets Telecom Operators in Asia Since 2021

• Tool Overload: Why MSPs Are Still Drowning with Countless Cybersecurity Tools in 2024

• Four Steps to Improving Your Organization’s Cyber Resilience

• Intelligent Machines: AI and Manufacturing

• OpenAI Co-Founder Ilya Sutskever To Start New AI Firm

• Post-Quantum Cryptography Firm PQShield Raises $37 Million

• Atlassian Patches High-Severity Vulnerabilities in Confluence, Crucible, Jira

• CDK Global cyberattack cripples 15,000 US auto dealerships

• Efficiency driven SOC operations

• Securing Our Water Supply: Cybersecurity Strategies for Treatment Plants

• AI, Cloud Skills Gap Is Accelerating Training, Upskilling For Firms

• TikTok facing fresh lawsuit in US over children’s privacy

• Qilin: We knew our Synnovis attack would cause a healthcare crisis at London hospitals

• Surfshark vs Norton Secure VPN (2024): Which VPN Is Better?

• Cloud Penetration Testing: A Detailed Step-by-Step Guide

• How AI Is Making Data Security Possible

• OpenAI Appoints Former Head Of US Cyber Command To Its Board

• Cyber Europe tests the EU Cyber Preparedness in the Energy Sector

• Inside the Velvet Ant’s Web: F5 BIG-IP Vulnerabilities Exposed

• Cybersecurity News: Nvidia most valuable, Markopolo’s meeting infostealer, Medibank MFA blame

• Threat Actor Claims Breach of Jollibee Fast-Food Gaint

• Crypto Firm Kraken Calls the Cops After Researchers Attempt “Extortion”

• Life in Cybersecurity: From Law Firm Librarian to Senior Cybersecurity Analyst with Tracy Z. Maleeff

• How I Hacked Zoom? The Session Takeover Exploit Chain Analysis

• Smishing Triad Is Targeting Pakistan To Defraud Banking Customers At Scale

• An unpatched bug allows anyone to impersonate Microsoft corporate email accounts

• New Rust-based Fickle Malware Uses PowerShell for UAC Bypass and Data Exfiltration

• Threat Actor Claims AMD and Apple Breaches

• RSAC Fireside Chat: Tightened budgets impose discipline on CISOs, resets security investments

• Verimatrix XTD dashboard enhancements improve mobile app security

• Threat Actors Claiming Breach of Accenture Employee Data

• PQShield secures $37M more for ‘quantum resistant’ cryptography

• Diamorphine Rootkit Exploiting Linux Systems In The Wild

• Experts Uncover New Evasive SquidLoader Malware Targeting Chinese Organizations

• Update on ransomware attacks on NHS, AMD and CDK Global

• Hacktivism is evolving – and that could be bad news for organizations everywhere

• Closing the Readiness Gap: How to Ensure a Fast Recovery From the Inevitable Cyber Attack

• 2024-06-17 – Google ad –> fake unclaimed funds site –> Matanbuchus with Danabot

• Improving OT cybersecurity remains a work in progress

• From passwords to passkeys: Enhancing security and user satisfaction

• Most cybersecurity pros took time off due to mental health issues

• eBook: CISO guide to password security

• Managing Transitive Vulnerabilities

• Obtaining Security Budgets You Need (Not Deserve): Ira Winkler’s Cybersecurity Playbook for Executives

• No Excuses, Free Tools to Help Secure Authentication in Ubuntu Linux [Guest Diary], (Thu, Jun 20th)

• Working with Community Corporate to reskill refugees through Cisco Networking Academy

• Alleged researchers stole $3 million from Kraken exchange

• From Pentesting to Remediation with NetSPI

• IT Security News Daily Summary 2024-06-19

• New Blog Moderation Policy

• Breakthrough may clear major hurdle for quantum computers

• Google Chrome 126 update addresses multiple high-severity flaws

• Transforming Modern Networking: The Unmatched Security of Secure Access Service Edge (SASE)

• Fickle Stealer Distributed via Multiple Attack Chain

• Massachusetts 911 Outage Caused by Errant Firewall

• Elon Musk Appeals To Advertisers, Backtracks Over Notorious Outburst

• ViLe Cybercrime Group Members Plead Guilty to Hacking DEA Portal

• IRONSCALES Applies Generative AI to Phishing Simulation

• Juneteenth National Independence Day 2024

• AI Technique Combines Programming and Language

• US Urges Netherlands, Japan To Increase Chip Kit Restrictions For China

• Kraken Crypto Exchange Hit by $3 Million Theft Exploiting Zero-Day Flaw

• China-Linked Hackers Breach East Asian Firm for 3 Years via F5 Devices

• Microsoft Defender Experts for XDR recognized in the latest MITRE Engenuity ATT&CK® Evaluation for Managed Services

• AI Receptionists For GPs Launched By Customer Service Firm InTouchNow

• ONNX Phishing Targets Financial Companies’ Microsoft 365 Accounts

• The Distributed Workforce: Why Flexibility and Trust are Essential in Cybersecurity

• UNC3886 Uses Fortinet, VMware 0-Days and Stealth Tactics in Long-Term Spying

• Cyborg Social Engineering: Defending against personalised attacks

• Google find my device helps secure your information stored on the phone to the core

• How to use public Wi-Fi safely: 5 things to know before you connect

• Price Drop: Block Ads for a Special Price of Just $25

• The developers’ guide to secure coding: The six steps towards secure software development

• UK Investigates HPE’s $14bn Acquisition Of Juniper Networks

• Sophon and Aethir Partner to Bring Decentralized Compute to The ZK Community

• Juneteenth: A Day of Reflection, Celebration, and Commitment

• Chinese Cyber Espionage Group Exploits Fortinet, Ivanti and VMware Zero-Days

• SME Cybersecurity Challenges and Opportunities

• Fisker Files For Chapter 11 Bankruptcy

• Broadcom Advises Urgent Patch for Severe VMware vCenter Server Vulnerabilities

• Amtrak Data Breach: Hackers Accessed User’s Email Address

• Cybersecurity as a Service Market: A Domain of Innumerable Opportunities

• Cybersecurity M&A Roundup for First Half of June 2024

• New ARM ‘TIKTAG’ Attack Affects Google Chrome and Linux Systems

• Notorious Cyber Gang UNC3944 Shifts Focus to SaaS Apps vSphere and Azure

• Chrome Security Update – Patch for 6 Vulnerabilities

• Better Protect Your Cybersecurity During Hurricane Season

• Cybersecurity Leader SonicWall Rides Wave of Momentum with Company Transformation, Acquisitions, and New Cyber Platform

• Amtrak Says Guest Rewards Accounts Hacked in Credential Stuffing Attacks

• Securing Sensitive Data: Lessons from Keytronic’s Recent Breach

• Breaking the Cycle of Traditional Vulnerability Management

• Perplexity Is a Bullshit Machine

• Chip maker giant AMD investigates a data breach

• Pure Storage enhances its platform with cyber resiliency services and capabilities

• Hackers Weaponize Windows Installer (MSI) Files to Deliver Malware

• A Wake-up Call for Cloud Security: Insights From the Recent Snowflake Data Breach

• Amtrak confirms crooks are breaking into user accounts, derailing email addresses

• European Cyber Resilience: How the EU Can Patch the Weak Spots in its Collective Armour

• How Improving EV Charging Infrastructure Can Bolster US Cybersecurity Measures

• US, Allies Publish Guidance on Securing Network Access

• Quishing Campaign Targets Chinese Citizens via Fake Official Documents

• Join Us 7-12-24 for “Hacking the Materiality of a Data Breach” – Super Cyber Friday

• From Pen Testing to Remediation with NetSPI

• Hackers Using VPNs To Exploit Restrictions & Steal Mobile Data

• Cybercrime Targeting Paris 2024 Olympic Games Gains Steam

• Cybersecurity Worker Burnout Costing Businesses Big

• Ransomware gangs testing in developing nations before striking richer countries

• Stuxnet, The Malware That Propagates To Air-Gapped Networks

• New PhaaS Platform Lets Attackers Bypass Two-Factor Authentication

• Celebrating Juneteenth: A Call to Embrace Our Shared Humanity

• AMD Investigating Breach Claims After Hacker Offers To Sell Data

• AI Makes Nvidia The World’s Most Valuable Company

• F5 Big-IP Appliances Exploited For 3 Years By China Linked Group

• VMware Fixes 2 Critical Bugs

• New Threat Actor ‘Void Arachne’ Targets Chinese Users with Malicious VPN Installers

• New Case Study: Unmanaged GTM Tags Become a Security Nightmare

• The Hacking of Culture and the Creation of Socio-Technical Debt

• Chrome 126 Update Patches Vulnerability Exploited at Hacking Competition

• The Perilous Role of the CISO: Navigating Modern Minefields

• CISA Warns of PoC Exploit for Vulnerability in RAD SecFlow-2 Industrial Switch

• Clever macOS malware delivery campaign targets cryptocurrency users

• Nvidia Overtakes Microsoft As Most Valuable Tech Firm

• IntelBroker Hacker Claims Apple Breach, Steals Source Code for Internal Tools

• Threat Actors Claiming Breach of AMD Source Code on Hacking Forums

• Warning: Markopolo’s Scam Targeting Crypto Users via Fake Meeting Software

• Void Arachne Uses Deepfakes and AI to Deliver Malicious VPNs to Chinese Users

• What Is Zero Trust Security?

• G7 to Develop Cybersecurity Framework for Energy Sector

• Cybersecurity Burnout Costing Firms $700m+ Annually

• Cybersecurity News: AMD investigates breach, Qilin demands ransom, Hackers derail Amtrak

• Apple Drops ‘Buy Now, Pay Later’ Service

• Beware of Nevermore Actor Promoting Ransomware Builder

• This Is What Would Happen if China Invaded Taiwan

• Chinese Velvet Ant Hackers Target F5 Devices in Years-Long Espionage

• How to Spot a Winning NERC CIP Project

• Where Security Starts in Your Security Projects

• Tripwire Patch Priority Index for May 2024

• AMD Investigating Breach Claims After Hacker Offers to Sell Data

• Cyber Security Today, June 19, 2024 – How an attacker hid on an IT network for three years

• Handling BOM MIME Files, (Wed, Jun 19th)

• Beware Of Fake Microsoft Teams Website That Installs Oyster Malware

• Cryptojacking campaign targets exposed Docker APIs

• What Is a Bastion Host? Types, Use Cases, and Safety Measures

• CIISec Urges Employers to Target Young Talent in Gaming Centers

• Criminals are Easily Bypassing Passkeys – How Organizations Can Stay Safe

• How can SLTTs defend against cyber threats?

• Quantum Xchange expands Phio TX platform to offer secure site-to-site and remote access VPN

• Mailcow Mail Server Flaws Expose Servers to Remote Code Execution

• Behind the Great Wall: Void Arachne Targets Chinese-Speaking Users With the Winos 4.0 C&C Framework

• That PowerShell ‘fix’ for your root cert ‘problem’ is a malware loader in disguise

• Debunking Common Myths About Catastrophic Cyber Incidents

• Understanding the Crucial Differences: Disaster Recovery vs. Ransomware Recovery

• Google Chrome users targeted by Cyber Attack

• Cybersecurity jobs available right now: June 19, 2024

• SELKS: Open-source Suricata IDS/IPS, network security monitoring, threat hunting

• Find out which cybersecurity threats organizations fear the most

• Rising exploitation in enterprise software: Key trends for CISOs

• Rogue uni IT director pleads guilty after fraudulently buying $2.1M of tech

Generated on 2024-06-20 23:55:09.994425