IT Security News Daily Summary 2024-06-21

• Why Anthropic’s Artifacts may be this year’s most important AI feature: Unveiling the interface battle

• Friday Squid Blogging: Squid Nebula

• 🌜 A voice cries out under the crescent moon…

• Gartner: 3 Actions to Achieve Cybersecurity Consolidation

• US Pledges ‘Most Powerful’ Security Deal: Can It Fortify Ukraine’s Cyber Defenses?

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• Uncle Sam sanctions Kaspersky’s top bosses – but not Mr K himself

• USENIX Security ’23 – Uncontained: Uncovering Container Confusion in the Linux Kernel

• Hacker claims to have 30 million customer records from Australian ticket seller giant TEG

• 🌜 A voice cries out under the crescent moon…

• Simplifying Azure Key Vault Updates With AppViewX Automation

• 🌜 A voice cries out under the crescent moon…

• Zero-Day Exploits Cheat Sheet: Definition, Examples & How It Works

• 🌜 A voice cries out under the crescent moon…

• Randall Munroe’s XKCD ‘Pascal’s Wager Triangle’

• Benefits of dark web monitoring

• 🌜 A voice cries out under the crescent moon…

• For The Bragging Rights: EFF’s 16th Annual Cyberlaw Trivia Night

• 🌜 A voice cries out under the crescent moon…

• Perplexity Plagiarized Our Story About How Perplexity Is a Bullshit Machine

• Biden administration bans Kaspersky software sales in US over national security concerns

• AdsExhaust Adware Distributed in Fake Oculus Installer via Google Search

• Keeper vs Dashlane: Which Should You Use in 2024?

• Young Hacker Linked to Scattered Spider Group Detained

• First million breached Ticketmaster records released for free

• Phoenix UEFI flaw puts long list of Intel chips in hot seat

• EU Proposes New Law to Allow Bulk Scanning of Chat Messages

• CISA warns chemical facilities in America about possible data breach

• U.S. government sanctions Kaspersky executives

• 30,000 Dealerships Down — ‘Ransomware’ Outage Outrage no. 2 at CDK Global

• Juniper Networks Releases Security Bulletin for Juniper Secure Analytics

• New Cato Networks MSASE Framework Gives Vendor-Like Powers to Channel Partners

• Amazon Mulls $5 Monthly Charge For AI Alexa – Report

• The US bans Kaspersky products, citing security risks – what this means for you

• Biden administration bans Kaspersky Lab products in US

• Understanding the Dark Web: What You Need to Know

• Why attack surfaces are expanding

• Hunting for Credential Theft – Identify When an InfoStealer May be Stealing Sensitive Access

• Chinese Hackers Deploy SpiceRAT and SugarGh0st in Global Espionage Campaign

• Understanding Access Control Models: RBAC, ABAC, and DAC

• Crafty Criminals Use Fake Error Messages to Deploy Malware via PowerShell

• Russian Hackers Of London Hospitals Publish Patient Data

• OpenID (OpenID Connect)

• Military-themed Email Scam Spreads Malware to Infect Pakistani Users

• How generative AI Is expanding the insider threat attack surface

• Change Healthcare confirms ransomware hackers stole medical records on a ‘substantial proportion’ of Americans

• UEFICANHAZBUFFEROVERFLOW flaw in Phoenix SecureCore UEFI firmware potentially impacts hundreds of PC and server models

• Recent SolarWinds Serv-U Vulnerability Exploited in the Wild

• In Other News: Microsoft Email Spoofing, Snowflake Hack Ransoms, LogoFail Follow-Up

• Spatial Computing Hack Exploits Apple Vision Pro Flaw to Fill Room With Spiders, Bats

• Santander Employee Data Breach Linked to Snowflake Attack

• Securing Corporate Data: The Crucial Role of Third-Party Access Audits

• Defending Hospitals and Clinics: Strategies Against Ransomware

• Chemical Facilities Warned of Possible Data Exfiltration Following CISA Breach

• A Step-by-Step Guide to Spotting and Preventing Frame Injections

• What Are Network Firewalls? Benefits, Types & Best Practices

• Special Cybersecurity Considerations for Medical and Legal Practices

• Coding Error In Forgotten API Blamed For Massive Data Breach

• Sweden Claims Russia Has Been Borking Nordic Satellites

• President Biden Bans Kaspersky Antivirus Software Over Russia Ties

• Car Dealerships Disrupted As CDK Hack Worsens

• US Bans Kaspersky Over Alleged Kremlin Links

• SneakyChef espionage group targets government agencies with SugarGh0st and more infection techniques

• Unveiling SpiceRAT: SneakyChef’s latest tool targeting EMEA and Asia

• Qilin Ransomware Leaks 400GB of NHS and Patient Data on Telegram

• Enhancing AI Security Incident Response Through Collaborative Exercises

• Security Cloud Control: Pioneering the Future of Security Management

• Intel-powered computers affected by serious firmware flaw (CVE-2024-0762)

• How to Use Tines’s SOC Automation Capability Matrix

• Ross Anderson’s Memorial Service

• Qilin cyber scum leak data they claim belongs to London hospitals’ pathology provider

• Kaspersky Denies It Is Security Risk, After US Sales Banned By Biden

• Personal and Chemical Facility Information Potentially Accessed in CISA Hack

• Oyster Backdoor Spreading via Trojanized Popular Software Downloads

• Can AI detectors save us from ChatGPT? I tried 6 online tools to find out

• How to Study Ethical Hacking as a Beginner

• New body IMCSO to elevate standards and streamline provisioning of cybersecurity services in Maritime

• US bans Kaspersky antivirus software due to national security risks

• Synnovis Attackers Publish NHS Patient Data Online

• Cybersecurity News: CDK Global hacked again, LockBit activity, Kraken extorted for bug bounty

• Russia-linked APT Nobelium targets French diplomatic entities

• Community Corner: CybAid

• SolarWinds Serv-U Vulnerability Under Active Attack – Patch Immediately

• Cyber Security Today, June 21, 2024 – US to ban Kaspersky for consumers and businesses

• PrestaShop Website Under Injection Attack Via Facebook Module

• US bans Kaspersky, warns: “Immediately stop using that software”

• Beware Of Zergeca Botnet with Advanced Scanning & Persistence Features

• Beware Of Illegal OTT Platforms That Exposes Sensitive Personal Information

• Telcos Hit Hardest by Cloud Malware, Report Finds

• Hackers Attacking Vaults, Buckets, And Secrets To Steal Data

• Mailcow Mail Server Vulnerability Let Attackers Execute Remote Code

• Was T-Mobile compromised by a zero-day in Jira?

• How to find Kaspersky products with runZero

• It’s a Hard Time to Be a CISO. Transformational Leadership is More Important Than Ever.

• Chinese UNC3886 Actors Exploiting VMware, Fortinet 0-days For Spying

• New Highly Evasive SquidLoader Attacking Employees Mimic As Word Document

• Hackers Weaponizing Windows Shortcut Files for Phishing

• Since joining NATO, Sweden claims Russia has been borking Nordic satellites

• Defending Against Business Email Compromise: A Comprehensive Guide

• With Kaspersky banned in the US, what should customers do?

• Kaspersky banned in the United States

• My health information has been stolen. Now what?

• Coding error in forgotten API blamed for massive data breach

• A College Student’s Guide To Help Avoid Dating App Scams | Avast

• U.S. Bans Kaspersky Software, Citing National Security Risks

• Cilium: Open-source eBPF-based networking, security, observability

• New infosec products of the week: June 21, 2024

• Pressure mounts on CISOs as SEC bares teeth with legal action

• ISC Stormcast For Friday, June 21st, 2024 https://isc.sans.edu/podcastdetail/9030, (Fri, Jun 21st)

• Change Healthcare to Start Notifying Customers Who Had Data Exposed in Cyberattack

• PCI DSS 4.0.1: New Clarifications on Client-Side Security – What You Need to Know

• Report Details Reemergence of Lockbit 3.0 Ransomware Syndicate

• Haize Labs is using algorithms to jailbreak leading AI models

• US bans sale of Kaspersky products due to risks to national security

• A College Student’s Guide To Avoiding Dating App Scams | Avast

• Crooks get their hands on 500K+ radiology patients’ records in cyber-attack

• IT Security News Daily Summary 2024-06-20

• The Role of Kubernetes in Data Privacy and Protection

• Biden puts a bullet in Kaspersky: Sales, updates to be banned in America

• YouTube shuts down viral ‘hack’ for getting cheaper Premium subscription

• How AI lies, cheats, and grovels to succeed – and what we need to do about it

• Car dealer software bigshot CDK pulls systems offline twice amid ‘cyber incident’

• Cyber A.I. Group Announces the Engagement of Walter L. Hughes as Chief Executive Officer

• New Government Ban on Kaspersky Would Prevent Company from Updating Malware Signatures in U.S.

• Optimizing Your Cloud Resources, Part 1: Strategies for Effective Management

• US Bans Kaspersky Software

• US bans sale of Kaspersky software citing security risk from Russia

• If you like your Flipper Zero, then you’ll love this

• KrebsOnSecurity Threatened with Defamation Lawsuit Over Fake Radaris CEO

• Cisco API Documentations Is Now Adapted for Gen AI Technologies

• Why SMBs Don’t Deploy Single Sign On (SSO)

• Atlassian fixed six high-severity bugs in Confluence Data Center and Server

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #294 — Enabling Flow

• Hackers Exploit Snowflake Data, Targeting Major Firms

• Tabletop exercises are headed to the next frontier: Space

• 1Password unveils new sign-in experience and recovery codes feature

• UK Health Club Chain ‘Total Fitness’ Data Leak Exposes KYC and Card Data

• 7 cool and useful things I do with my Flipper Zero (and you can too)

• Flipper Zero: ‘Can you really hack Wi-Fi networks?’ and other questions answered

• Opposing a Global Surveillance Disaster | EFFector 36.8

• Crypto exchange Kraken accuses blockchain security outfit CertiK of extortion

• Decade-Long Cyber Assault on Asian Telecoms Traced to Chinese State Hackers

• Qilin Ransomware: What You Need To Know

• Worldwide 2023 Email Phishing Statistics and Examples

• MacDonald’s Ends Its AI Drive-Through Assistant Experiment

• IoT Needs To Get Serious About Security

• Water facilities warned to improve cybersecurity

• Staying Safe with Chrome Extensions

• EU Aims to Ban Math — ‘Chat Control 2.0’ Law is Paused but not Stopped

• Port scan attacks: What they are and how to prevent them

• EU Member States remain divided on controversial CSAM-scanning plan — but for how long?

• Police are Using Drones More and Spending More For Them

• The Growing Threat of Data Breaches to Australian Businesses

• Hackers Reveal Their Strategy of Stealing Snowflake’s Ticketmaster Data

• Could Brain-Like Computers Be a Game Changer in the Tech Industry?

• When Legit Downloads Go Rogue: The Oyster Backdoor Story

• Now a Doctrine for Cyberspace Operations

• Leveraging technology to empower refugees with secure and equitable access to information, resources, and opportunities

• The LA28 Games – Together

• Long-Running Chinese Espionage Campaign Targets Telecom Firms in Asian Country

• Anthropic Launches Newest AI Model, Claude 3.5 Sonnet

• Rafel RAT, Android Malware from Espionage to Ransomware Operations

• US car dealerships face ongoing outage after CDK cyberattacks

• China-linked spies target Asian Telcos since at least 2021

• A Traveler’s Guide to Cybersecurity

• How to Hunt for Volt Typhoon Malware in Critical Infrastructure

• OpenAI Co-Founder Sutskever Sets up New AI Company Devoted to ‘Safe Superintelligence’

• Cato Networks Launches SASE Platform for Partners

• Biden Administration To Ban US Sales Of Kaspersky Software – Report

• Hackers Exploit Progressive Web Apps to Steal Passwords

• Keeper vs Bitwarden (2024): Benefits & Features Compared

• CISA Releases Three Industrial Control Systems Advisories

• Yokogawa CENTUM

• Westermo L210-F2G

• CAREL Boss-Mini

• Crown Equipment cyberattack confirmed, manufacturing disrupted for weeks

• French Diplomatic Entities Targeted in Russian-Linked Cyber Attacks

• Researchers Uncover UEFI Vulnerability Affecting Multiple Intel CPUs

• LockBit Ransomware Again Most Active – Real Attack Surge or Smokescreen?

• Access Management Startup Pomerium Raises $13.75 Million

• Hill Briefing on Encryption Canceled Suddenly by FBI

• Wordfence Intelligence Weekly WordPress Vulnerability Report (June 10, 2024 to June 16, 2024)

• Anthropic’s Claude 3.5 Sonnet outperforms OpenAI and Google in enterprise AI race

• ESSER Funding: Top 3 Ways to Make it Work

• Hundreds of PC, Server Models Possibly Affected by Serious Phoenix UEFI Vulnerability

• 1inch partners with Blockaid to enhance Web3 security through the 1inch Shield

• Concentric AI’s compliance feature helps organizations identify and address compliance risks

• Internet Computer Protocol Launches Walletless Verified Credentials to Build Trust in the Public Discourse

• Writer triples revenue and expands to 250 customers as demand for enterprise AI soars

• Bitdefender vs Kaspersky (2024): Which Solution Is Better?

• New Rust infostealer Fickle Stealer spreads through various attack methods

• LockBit Most Prominent Ransomware Actor in May 2024

• CISPE Data Protection Code of Conduct Public Register now has 113 compliant AWS services

• Check Point’s 2024 Cloud Security Report: Navigating the Intersection of Cyber security

• Semperis, a specialist in Active Directory security now worth more than $1B, raises $125M

• Obsidian Security Partners with Databricks to Bolster SaaS Data Governance

• CHOROLOGY Emerges to Apply Generative AI to Data Governance

• Did ‘Terraform Destroy’ Cause the UniSuper Google Cloud Outage?

• A New Age of Threats in Online Shopping: Cybersecurity Tips

• Hacker Leaks Data of 33,000 Accenture Employees in Third-Party Breach

• Russia’s cyber spies still threatening French national security, democracy

• Highly Evasive SquidLoader Malware Targets China

• Semperis Eyes IPO With $125 Million in Growth Financing

• AI Weights: Securing the Heart and Soft Underbelly of Artificial Intelligence

• French Diplomatic Entities Targeted by Russian-Aligned Nobelium

• Up your Quality of Life with Secure MSP Hub and Secure MSP Center

• Amtrak Confirms Crooks Are Breaking Into User Accounts, Derailing Email Addresses

• INE Security: Optimizing Teams for AI and Cybersecurity

• New Fickle Stealer Exploits Software Flaws to Steal Crypto, Browser Data

• Recovering Public Keys from Signatures

• June Product Update

• Chinese Cyber Espionage Targets Telecom Operators in Asia Since 2021

• Tool Overload: Why MSPs Are Still Drowning with Countless Cybersecurity Tools in 2024

• Four Steps to Improving Your Organization’s Cyber Resilience

• Intelligent Machines: AI and Manufacturing

• OpenAI Co-Founder Ilya Sutskever To Start New AI Firm

• Post-Quantum Cryptography Firm PQShield Raises $37 Million

• Atlassian Patches High-Severity Vulnerabilities in Confluence, Crucible, Jira

• CDK Global cyberattack cripples 15,000 US auto dealerships

• Efficiency driven SOC operations

• Securing Our Water Supply: Cybersecurity Strategies for Treatment Plants

• AI, Cloud Skills Gap Is Accelerating Training, Upskilling For Firms

• TikTok facing fresh lawsuit in US over children’s privacy

• Qilin: We knew our Synnovis attack would cause a healthcare crisis at London hospitals

• Surfshark vs Norton Secure VPN (2024): Which VPN Is Better?

• Cloud Penetration Testing: A Detailed Step-by-Step Guide

• How AI Is Making Data Security Possible

• OpenAI Appoints Former Head Of US Cyber Command To Its Board

• Cyber Europe tests the EU Cyber Preparedness in the Energy Sector

• Inside the Velvet Ant’s Web: F5 BIG-IP Vulnerabilities Exposed

• Cybersecurity News: Nvidia most valuable, Markopolo’s meeting infostealer, Medibank MFA blame

• Threat Actor Claims Breach of Jollibee Fast-Food Gaint

• Crypto Firm Kraken Calls the Cops After Researchers Attempt “Extortion”

• Life in Cybersecurity: From Law Firm Librarian to Senior Cybersecurity Analyst with Tracy Z. Maleeff

• How I Hacked Zoom? The Session Takeover Exploit Chain Analysis

• Smishing Triad Is Targeting Pakistan To Defraud Banking Customers At Scale

• An unpatched bug allows anyone to impersonate Microsoft corporate email accounts

• New Rust-based Fickle Malware Uses PowerShell for UAC Bypass and Data Exfiltration

• Threat Actor Claims AMD and Apple Breaches

• RSAC Fireside Chat: Tightened budgets impose discipline on CISOs, resets security investments

• Verimatrix XTD dashboard enhancements improve mobile app security

• Threat Actors Claiming Breach of Accenture Employee Data

• PQShield secures $37M more for ‘quantum resistant’ cryptography

• Diamorphine Rootkit Exploiting Linux Systems In The Wild

• Experts Uncover New Evasive SquidLoader Malware Targeting Chinese Organizations

• Update on ransomware attacks on NHS, AMD and CDK Global

• Hacktivism is evolving – and that could be bad news for organizations everywhere

• Closing the Readiness Gap: How to Ensure a Fast Recovery From the Inevitable Cyber Attack

• 2024-06-17 – Google ad –> fake unclaimed funds site –> Matanbuchus with Danabot

• Improving OT cybersecurity remains a work in progress

• From passwords to passkeys: Enhancing security and user satisfaction

• Most cybersecurity pros took time off due to mental health issues

• eBook: CISO guide to password security

• Managing Transitive Vulnerabilities

• Obtaining Security Budgets You Need (Not Deserve): Ira Winkler’s Cybersecurity Playbook for Executives

• No Excuses, Free Tools to Help Secure Authentication in Ubuntu Linux [Guest Diary], (Thu, Jun 20th)

• Working with Community Corporate to reskill refugees through Cisco Networking Academy

Generated on 2024-06-21 23:55:09.281107