IT Security News Daily Summary 2024-06-26

• US charges Russian for allegedly helping GRU spies target Ukrainian government systems with data-destroying malware

• Microsoft clamps down on Windows 11 users who want local accounts – but this trick still works

• New MOVEit Transfer critical bug is actively exploited

• Chinese APT Groups Use Ransomware to Hide Spying Activities

• Pen Testing Across the Environment: External, Internal, and Wireless Assessments

• Scattered Spider: Evolving & Resilient Group Proves Need for Constant Defender Vigilance

• A Foundation for AI and ML: Cisco Intelligent Industrial IoT Network Drives Uptime, Yield, Security, and Revenue

• New “Snowblind” Android Malware Steals Logins, Bypasses Security Features

• How to become a cybersecurity architect

• MoveIt Transfer vulnerability targeted amid disclosure drama

• LockBit Claims Breaching the US Federal Reserve but Fails to Prove It

• US convicts crypto-robbing gang leader who kidnapped victims before draining their accounts

• WikiLeaks Founder Julian Assange Returns to Australia a Free Man After US Legal Battle Ends

• Episode 2: Behind the Scenes of a Tailor-Made Massive Phishing Campaign Part 2

• EFF livestream series coming to a platform near you!

• BSNL Reportedly Suffers Major Data Breach: Sensitive User Information at Risk

• Supreme Court Backs Biden In Social Media Misinformation Case

• War Crime Prosecutions Enter a New Digital Age

• Kaspersky resellers deride US government ban: ‘Complete bulls—t’

• Digital Afterlife: Are We Ready for Virtual Resurrections?

• Rivian To Gain Up To $5 Billion Investment From Volkswagen

• Hugging Face’s updated leaderboard shakes up the AI evaluation game

• The CDK Global outage: Explaining how it happened

• 5 essential programming languages for cybersecurity pros

• Google Unveils New Chrome Enterprise Core Features for IT, Security Teams

• Progress Discloses Two New Vulnerabilities in MOVEit Products

• Multiple vulnerabilities in TP-Link Omada system could lead to root access

• AI driven Google Naptime to help LLM to conduct vulnerability research

• Attackers in Profile: menuPass and ALPHV/BlackCat

• Shortened Links, Big Risks: Unveiling Security Flaws in URL Shortening Services

• 12 common types of malware attacks and how to prevent them

• LockBit Claims Breaching the US Federal Reserve but Fails Proving It

• How the Kaspersky ban will hit resellers in the US

• The AI Revolution and Critical Infrastructure

• Former Global CISO of Wells Fargo, Sunil Seshadri, Joins Board of Directors at Obsidian Security

• WordPress Plugin Supply Chain Attack Gets Worse

• New MOVEit Transfer Vulnerability Under Active Exploitation – Patch ASAP!

• Novel Banking Malware Targets Customers in Southeast Asia

• Incident Response: SOC’s Role in Managing Cyber Threats

• Tesla Issues Fourth Recall For Cybertruck

• Federal Reserve “breached” data may actually belong to Evolve Bank

• Hacker claims data breach of India’s eMigrate labor portal

• Google Disrupts More China-Linked Dragonbridge Influence Operations

• Law Enforcement is Spying on Thousands of U.S. Citizens’ Mail

• From Hype to Reality: Understanding Abandoned AI Initiatives

• CISA and Partners Release Guidance for Exploring Memory Safety in Critical Open Source Projects

• Misconfigured MFA Increasingly Targeted by Cybercriminals

• GAO Urges Action to Address Critical Cybersecurity Challenges Facing U.S.

• Cofense enhances PhishMe to identify engagement and resilience gaps across all employee levels

• Keep Your Tech Flame Alive: Trailblazer Mie Elmkvist Schneider

• Companies Optimize Cloud Costs and Deliver Superior Experiences on Akamai

• Microsoft At Risk Of EU Antitrust Charge Over Teams Bundling With Office

• The dangers of anthropomorphizing AI: An infosec perspective

• The 6 Best LastPass Alternatives for 2024

• Probllama: Ollama Remote Code Execution Vulnerability

• Top 10 NinjaOne Alternatives to Consider in 2024

• GrimResource Technique Exploits Years-Old Unpatched Windows XSS Flaw

• Batten down the hatches, it’s time to patch some more MOVEit bugs

• Prioritizing Exposures vs. Prioritizing Actions

• The XZ Utils Backdoor in Linux: A Symptom of Ailing Security in the Software Supply Chain

• Check Point SecureAcademy Launches Special Program Offering Content and Services Valued Up to $60K to Help Close the Global Cyber Security Skills Gap

• Fortinet vs Palo Alto (2024): Which NGFW Is Best for Your Team?

• Multiple Vulnerabilities in Siemens Power Automation Products

• ARMO launches behavioral-based cloud detection and response

• 6 Best LastPass Alternatives for 2024

• An Unforgettable Week at Cisco Live 2024 in Las Vegas

• Is Your Organization a Laggard or a Leader in Digital Trust?

• The EU Targets Russia’s LNG Ghost Fleet With Sanctions as Concern Mounts About Hybrid Attacks

• Gaining and Retaining Security Talent: A Cheat Sheet for CISOs

• Malware peddlers experimenting with BPL sideloading and masking malicious payloads as PGP keys

• The Crucial Role of Network Segmentation in OT Environments with DirectDefense

• Waymo Opens Autonomous Ride Hailing Taxi To All San Fran Residents

• OilRig Hackers Attacking Individuals And Organizations In The Middle East

• Securing the Foundation: Optimizing Governmental Critical Infrastructure

• P2Pinfect Worm Now Dropping Ransomware on Redis Servers

• 6 Tips for Preventing DDoS Attacks Using Rate Limits

• Cyber Attackers Turn to Cloud Services to Deploy Malware

• P2Pinfect Redis Server with New Ransomware Payload

• Ollama AI Platform Flaw Let Attackers Execute Remote Code

• NTT Data and Zebra Technologies partner on private 5G and device as a service

• Digital Forensics for Investigating the Metaverse

• New Caesar Cipher Skimmer targets popular CMS used by e-stores

• New Medusa Malware Variants Target Android Users in Seven Countries

• Cybercriminal Group UNC5537 Strikes with Major Data Breaches

• Developer errors lead to long-term exposure of sensitive data in Git repos

• Identity Crime Reports Drop 16% Annually but Job Scams Surge

• Julian Assange Freed After US Plea Deal, Returns To Australia

• P2Pinfect Botnet Now Targets Servers with Ransomware, Cryptominer

• Malwarebytes Premium stops 100% of malware during AV Lab test

• The US Is Banning Kaspersky

• Understanding Compliance and File Integrity Monitoring (FIM)

• Polyfill Supply Chain Attack Hits Over 100k Websites

• Navigating Security Challenges in Containerized Applications

• Critical ADOdb Vulnerabilities Fixed in Ubuntu

• Why Cybercriminals Keep Targeting the NHS: Insights into the Latest Attack

• New North Korean Actor Distributing Malicious npm Packages To Compromise Organizations

• Malicious JavaScript Snippets Served Due to Supply Chain Attack on Polyfills Site

• UK and US Law Enforcement Put Qilin Ransomware Criminals in the Crosshairs

• Apple Patches AirPods Bluetooth Vulnerability That Could Allow Eavesdropping

• Practical Guidance For Securing Your Software Supply Chain

• Chinese and N. Korean Hackers Target Global Infrastructure with Ransomware

• Attackers Exploiting Public Cobalt Strike Profiles

• Threat Actor Claims 0Day Sandbox Escape RCE in Chrome Browser

• Business Email Compromise Attacks Are Evolving: How Organizations Can Stay Ahead of the Curve

• Best Practices for Password Creation and Storage

• Share your feedback: ENISA public consultation bolsters EU5G Cybersecurity Certification

• Zeek: Open-Source Network Traffic Analysis, Security Monitoring

• Update: CISA Warns Chemical Facilities of Potential Data Theft

• Exploitation Attempts Target New MOVEit Transfer Vulnerability

• Siemens Sicam Vulnerabilities Could Facilitate Attacks on Energy Sector

• Kivu Consulting introduces CyberCertainty Managed XDR

• Cybersecurity News: Julian Assange plea, Latest MOVEit bug, Neiman Marcus data sale

• NSA Recommends users restart mobile devices weekly

• Defending Gold: Protecting the 2024 Olympics from Cyber Threats

• The 5 Industries Most Vulnerable to Data Breaches in 2024

• New Credit Card Skimmer Targets WordPress, Magento, and OpenCart Sites

• Cyber Security Today, June 26, 2024 – New vulnerability in MOVEit and a warning to WordPress administrators on poisoned plugins

• Russian Hackers Target Ukraine with XWorm RAT Malware Payload

• Grammarly delivers enhanced security and control features for safer AI use

• Compromised plugins found on WordPress.org

• New Medusa Android Trojan Targets Banking Users Across 7 Countries

• Authentication Bypasses in MOVEit Transfer and MOVEit Gateway

• How to boost your incident response readiness

• Fake Law Firms Con Victims of Crypto Scams, Warns FBI

• Cisco Umbrella: A Leader in the GigaOm Radar for DNS Security

• FireTail Unveils Free Access for All to Cutting-Edge API Security Platform

• Cloud Security becoming a priority for businesses in 2024

• How to safeguard oneself from sectortion attacks online

• Microsoft Announced Copilot for Security TI in Defender XDR

• EU Opens the App Store Gates: A Call to Arms for MDM Implementation

• Stepping Into the Attacker’s Shoes: The Strategic Power of Red Teaming (Insights from the Field)

• Efficiency is Key to Cybersecurity in the Post-Cloud Era

• Back-to-Back Cyberattacks Disrupt Car Dealers in the US and Canada

• Welcome to the fediverse: Your guide to Mastodon, Threads, Bluesky and more

• Yahoo! Japan to waive $189 million ad revenue after detecting fraudulent clicks

• Critical Vulnerability in MOVEit Transfer Let Hackers Gain Files Access

• Over 110,000 Websites Affected by Hijacked Polyfill Supply Chain Attack

• Cybersecurity jobs available right now: June 26, 2024

• Organized crime and domestic violence perps are big buyers of tracking devices

• Future trends in cyber warfare: Predictions for AI integration and space-based operations

• B+ security rating masks healthcare supply chain risks

• ISC Stormcast For Wednesday, June 26th, 2024 https://isc.sans.edu/podcastdetail/9036, (Wed, Jun 26th)

• What?s That Scraping Sound? How Web Scraper Bots Erode Ecommerce Profits

• Microsoft blamed for million-plus patient record theft at US hospital giant

• If you’re using Polyfill.io code on your site – like 100,000+ are – remove it immediately

• GitLab devsecops survey finds progress, new priorities

• Welcome to the fediverse: Your guide to Mastodon, Threads, Bluesky, and more

• Neiman Marcus confirms breach. Is the customer data already for sale?

• LockBit holds 33TB of stolen data and its ransom deadline is up: What’s next and is it real or hoax?

• Security Is Essential (Especially in the Cloud)

• EFF Welcomes Tarah Wheeler to Its Board of Directors

• IT Security News Daily Summary 2024-06-25

• LockBit holds 33TB of stolen data and its ransom deadline is almost up: What’s next and is it real or hoax?

• Comparing MDR vs SIEM: Which Is Better for Your Business?

• Rogue Nations: An Assessment of State-Sponsored Cyberattacks.

• The AI Arms Race Shaping Federal Cyber Resilience

• Large Issue Cleanup in OpenSSL

• U.S. Imposes Ban on Russia’s Kaspersky; Sanctions 12 Executives

• Get 10x more Visibility across APTs with Red Piranha’s SOC-as-a-Service and Crystal Eye

• Fiend touts stolen Neiman Marcus customer info for $150K

• Indonesia won’t pay $8M ransom in data center attack that disrupted major public services

• Cybersecurity Essentials for Software Developers

• SonarQube 10.6 Release Announcement

• LockBit Claims Ransomware Attack on U.S. Federal Reserve

• Crypto scammers circle back, pose as lawyers, steal an extra $10M in truly devious plan

• Best practices for protection from ransomware in cloud storage

• $50 Million in BEC Losses

• IT and Consulting Firms Leverage Generative AI for Employee Development

• Progress quietly fixes MOVEit auth bypass flaws (CVE-2024-5805, CVE-2024-5806)

• Mirai-like botnet is exploiting recently disclosed Zyxel NAS flaw

• Google Framework Helps LLMs Perform Basic Vuln Research

• Neiman Marcus Data Breach Exposed As Hacker Offers To Sell Stolen Info

• Julian Assange Pleads Guilty, Goes Home

• Meta’s VR Headset Vulnerable To Ransomware Attacks

• Deadline Looms For Alleged LockBit Extortion Over Feds Of 33TB Of Data

• Index Engines’ Cybersense Delivers Unparalleled Ransomware Detection With 99.99% Accuracy

• What is security information and event management (SIEM)?

• EFF Statement on Assange Plea Deal

• How platform engineering helps you get a good start on Secure by Design

• Hacking APIs with HTTPie

• Microsoft Privacy FAIL: Windows 11 Silently Backs Up to OneDrive

• Google’s Project Naptime Aims for AI-Based Vulnerability Research

• CDK Global faced second ransomware attack

• Ransomware attacks on obsolete Android devices

• EDR vs. antivirus: What’s the difference?

• New Medusa Trojan Variant Emerges with Enhanced Stealth Features

• WordPress 6.5.5 Security Release – What You Need to Know

• NIS2 for manufacturing organizations: 3 steps towards compliance

• Report: Cloud Breaches Impact Nearly Half of Organizations

• The Growing Threat of Malware Concealed Behind Cloud Services

• Four FIN9-linked Vietnamese Hackers Indicted in $71M U.S. Cybercrime Spree

• FBI Warns of Fake Law Firms Targeting Crypto Scam Victims

• EU Sanctions Six Russian Hackers

• Dark Web Sees 230% Rise in Singapore Identity Theft

• How Anthropic’s ‘Projects’ and new sharing features are revolutionizing AI teamwork

• ABB Ability System 800xA

• CISA Releases Two Industrial Control Systems Advisories

• PTC Creo Elements/Direct License Server

• A Week in Vegas with the Cisco Store

• Enhancing Your Network Security Growth: New Partner Offers

• Android RAT SpyMax Targets Telegram Users

• Ensuring Secure Communication in the Digital Age with VPNs and Post-Quantum Cryptography

• NTA Faces Exam Security Crisis Amid Darknet Threats

• What?s that scraping sound? How web scraper bots erode ecommerce profits

• digital signature

• P2PInfect Botnet Targets Redis Servers with New Ransomware Module

• eSentire introduces MDR for GenAI Visibility

• Create order from chaos

• Stolen Singaporean Identities Sold on Dark Web Starting at $8

• Manage AI threats with the right technology architecture

• 8 Best Enterprise Password Managers for 2024

• CISA says crooks used Ivanti bugs to snoop around high-risk chemical facilities

• Indonesia Says a Cyberattack Has Compromised Its Data Center but It Won’t Pay the $8 Million Ransom

• Recent Zyxel NAS Vulnerability Exploited by Botnet

• Top 6 Compliance Reporting Tools in 2024

• How AttackIQ Can Bolster CORA Compliance in the Federal Government

• Beware Of Shorten URLs With Word Files That Install Remcos RAT

• What Is a Secure Web Gateway? Features, Benefits & Challenges

• The Julian Assange Saga Is Finally Over

• Celebrating Authenticity at Cisco and London Pride

• SnailLoad Attack can Exploit Remote Network Latency Measurements to Infer User Activity

• Campaign Oversight Results in Leak of Senior Tories’ Private Info

• What is a Secure Web Gateway? Features, Benefits & Challenges

• Several Plugins Compromised in WordPress Supply Chain Attack

• Hackers Steal Over $2 Million in Cryptocurrency From CoinStats Wallets

• Cloud Breaches Impact Nearly Half of Organizations

• Omdia Report: Trend Disclosed 60% of Vulnerabilities

• Top 10 Best Penetration Testing Companies & Services in 2024

• Telegram says it has ‘about 30 engineers’; security experts say that’s a red flag

• Is the Cybersecurity Industry Ready for AI?

• Manufacturing Cybersecurity at Heart of New White House Guidance

• New Attack Uses MSC Files and Windows XSS Flaw to Breach Networks

• Boolka Group’s Modular Trojan BMANAGER Exposed

• Hackers Create Rogue Admin Accounts via Backdoored WordPress Plugins

• Akamai Doubles Down on API Security

• Security Measures to Look for in Online Gaming

• Tor Browser 13.5 Released With Improved Bridges, Feature Upgrades

• Hackers Use Windows XSS Flaw To Execute Arbitrary Command In MMC Console

• How adversarial AI is creating shallow trust in deepfake world

• UK and US cops band together to tackle Qilin’s ransomware shakedowns

• Meta’s Virtual Reality Headset Vulnerable to Ransomware Attacks: Researcher

• Ransomware disrupts Indonesia’s national data centre, LockBit gang claims US Federal Reserve breach

• New Attack Technique Exploits Microsoft Management Console Files

• Wikileaks founder Julian Assange is free

• Breaking the M-209

• KnowBe4 Launches Ransomware Awareness Month With IT Resource Kit at No Cost

• Sophos vs. Trend Micro: How Do They Shape Up?

• Reverse engineering eBPF programs

• From Code to Chaos: BlackSuit Ransomware and The CDK Global Cyber Crisis

• Google’s Naptime Framework to Boost Vulnerability Research with AI

• New Webkit Vulnerabilities Let Attackers Exploit PS4 And PS5 Playstations

• The Mystery of AI Gunshot-Detection Accuracy Is Finally Unraveling

• How AI Tool Marketplaces Are Revolutionising Business Efficiency

• Car Dealerships in North America Revert to Pens and Paper After Cyberattacks on Software Provider

• How to Cut Costs with a Browser Security Platform

• Malware Sandbox Any.Run Targeted in Phishing Attack

• New security loophole allows spying on internet users’ online activity

• How About This? Only Attack the Endpoints We Configured

• Hackers Exploit Multiple WordPress Plugins to Hack Websites & Create Rogue Admin Accounts

• Deepfake Creators Are Revictimizing GirlsDoPorn Sex Trafficking Survivors

• Cybersecurity in the SMB space — a growing threat

• Cybersecurity News: Indonesia battles Lockbit, DOJ charges cybercrime group, SEC reports following CDK attack

• Recording Labels Sue Start-Ups Over AI-Generated Music

• AT&T Says Tech Giants Should Fund Rural Broadband

• Zero Trust Maturity: How to Know When You’re Getting Close

• How Artificial General Intelligence Will Redefine Cybersecurity

• Ransomware thieves beware

• Suspected North Korean Attack Drains $2m from CoinStats Wallets

• Protect your network

• Neiman Marcus Data Breach Disclosed as Hacker Offers to Sell Stolen Information

• China Memory Chip Maker YMTC Sues Tech Consultancy For Libel

• White House Says Microsoft’s G42 AI Deal ‘Positive’ As It Ousted Huawei

• Credential Stuffing Attack Hits 72,000 Levi’s Accounts

• Hackers Attacking Windows IIS Server to Upload Web Shells

• Cisco NGO partner Simprints to advance ethical, inclusive AI for face recognition biometrics

• Chrome 126 Update Patches Memory Safety Bugs

• EU, China Agree To Talks Over Planned EV Tariffs

• WikiLeaks Founder Julian Assange Released in Stunning Deal with U.S.

• Intermediate vs Root Certificates

• Four Members of FIN9 Hackers Charged for Attacking U.S. Companies

• CISA confirmed that its CSAT environment was breached in January.

• Wikileaks’ Julian Assange Released from U.K. Prison, Heads to Australia

• Back to the Future: What AppSec Can Learn From 30 Years of IT Security

• BREAKING: NHS England’s Synnovis Hit by Massive Cyber Attack

• CISOs’ new ally: Qualys CyberSecurity Asset Management 3.0

• Zeek: Open-source network traffic analysis, security monitoring

• Multiple WordPress Plugins Compromised: Hackers Create Rogue Admin Accounts

• 4 FIN9-linked Vietnamese Hackers Indicted in $71M U.S. Cybercrime Spree

• Telegram says it has ‘about 30 engineers’; security experts say that’s . . . not good

• Breaking down the numbers: Q2 2024 cybersecurity funding activity recap

• 2024-06-24 – ClickFix popup leads to Lumma Stealer

• Guide to mitigating credential stuffing attacks

• Telegram says it has just ’30 engineers’; security experts say that’s . . . not good

• ISC Stormcast For Tuesday, June 25th, 2024 https://isc.sans.edu/podcastdetail/9034, (Tue, Jun 25th)

• Julian Assange to go free in guilty plea deal with US

• EFF Opposes the American Privacy Rights Act

• Julian Assange freed in UK after agreeing to plead guilty to US charges

• Julian Assange freed after agreeing to plead guilty to US charges

• America’s best chance for nationwide privacy law could do more harm than good

• WikiLeaks Founder Julian Assange Will Plead Guilty in Deal With US and Return to Australia

Generated on 2024-06-26 23:55:13.343784