IT Security News Daily Summary 2024-06-28

• Friday Squid Blogging: New Squid Species

• Unfurling Hemlock Tossing ‘Cluster Bombs’ of Malware

• CISA looked at C/C++ projects and found a lot of C/C++ code. Wanna redo any of it in Rust?

• TeamViewer Confirms Security Breach by Russian Midnight Blizzard

• How the FTC Can Make the Internet Safe for Chatbots

• USENIX Security ’23 – PCAT: Functionality and Data Stealing from Split Learning by Pseudo-Client Attack

• How To Plan a (Successful) MuleSoft VPN Migration (Part II)

• TeamViewer says Russia broke into its corp IT network

• How to use Social-Engineer Toolkit

• TeamViewer breached by Russian state actor Midnight Blizzard

• HubSpot says it’s investigating customer account hacks

• Quora’s Chatbot Platform Poe Allows Users to Download Paywalled Articles on Demand

• Hubspot says it’s investigating customer account hacks

• Microsoft Alerts More Customers to Email Theft in Expanding Midnight Blizzard Hack

• Temu is Malware — It Sells Your Info, Accuses Ark. AG

• Hacker Claims Data Breach of India’s Blue-Collar Worker Database

• Jack Dorsey Warns: The Blurring Line Between Real and Fake

• The Role of Immutable Data Storage in Strengthening Cybersecurity

• Fresh MOVEit Vulnerability Under Active Exploitation: Urgent Updates Needed

• TEMU sued for being “dangerous malware” by Arkansas Attorney General

• LMSYS launches ‘Multimodal Arena’: GPT-4 tops leaderboard, but AI still can’t out-see humans

• Mississippi Can’t Wall Off Everyone’s Social Media Access to Protect Children

• The Eureka Moment: Discovering Application Traffic Observability

• Skeleton Key the Latest Jailbreak Threat to AI Models: Microsoft

• Kimsuky Using TRANSLATEXT Chrome Extension to Steal Sensitive Data

• Progress Software Releases Security Bulletin for MOVEit Transfer

• New Unfurling Hemlock Threat Actor Floods Systems with Malware

• Cybersecurity breach of TeamViewer Corporate environment by APT29

• Chrome to Distrust Entrust Certificates by November 2024

• SandboxAQ Joins the FIDO Alliance to Further Drive the Use of Secure Protocols instead of Passwords

• Cross-Platform Product Release: Heimdal Integrates with HaloPSA

• Elevating Cloud Security: Highlights from CloudNativeSecurityCon 2024

• What Is Application Security Posture Management (ASPM): A Comprehensive Guide

• 3 More Plugins Infected in WordPress.org Supply Chain Attack Due to Compromised Developer Passwords

• What Is Cloud Workload Security? Ultimate Guide

• Review: Top 5 For Outsourced Customer Service Solutions UK and Abroad

• Remote Access Giant TeamViewer Says Russian Spies Hacked Its Corporate Network

• CISA and Fauquier County Hold K-12 Active Shooter Exercise

• Nyobolt Reveals EV Battery That Recharges In Just Five Minutes

• Falcon Cloud Security Supports Google Cloud Run to Strengthen Serverless Application Security

• Exposure Management – Browser Extension Inventory

• Seeing the Unseen: Preventing Breaches by Spotting Malicious Browser Extensions

• Unlock the future of security

• AuthZed Raises $12 Million for Permissions Management Technology

• GetReal Labs Emerges From Stealth to Tackle Deepfakes

• GitLab Releases Patch for Critical CI/CD Pipeline Vulnerability and 13 Others

• Google cuts ties with Entrust in Chrome over trust issues

• 5 WordPress Plugins Compromised; Millions of Websites at Risk

• Kimsuky Deploys TRANSLATEXT to Target South Korean Academia

• TeamViewer Cyber-Attack Attributed to Russian APT Midnight Blizzard

• How TrafficPeak Helped Provide a Superior Football Viewing Experience

• Vulnerability management empowered by AI

• Remote access giant TeamViewer says Russian spies hacked its corporate network

• Malware Peddlers Experimenting with BPL Sideloading and Masking Malicious Payloads as PGP Keys

• Microsoft hits snooze again on security certificate renewal

• Microsoft Details ‘Skeleton Key’ AI Jailbreak Technique

• In Other News: Malware Delivered by ISP, Temu Spying, Critical Dataverse Vulnerability

• Cyber Workforce Grows 15% at Large Organizations as Security is Prioritized

• Data: The Final(?) Security Frontier

• Fairness and Safety of LLMs

• Gitleaks: Open-Source Solution for Detecting Secrets in Your Code

• Tesla Argues Elon Musk Won Battle Over $56 Billion Pay Package

• Crypto-Gang Leader Convicted of Vicious Kidnaps, Robbery

• ‘Poseidon’ Mac stealer Distributed via Malicious Google Ads

• Combatting the Evolving SaaS Kill Chain: How to Stay Ahead of Threat Actors

• 8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency Mining

• Stopping Supply Chain Attacks with Cisco’s User Protection Suite

• New MOVEit Transfer Critical Vulnerability Targeted by Threat Actors

• US Federal Agencies Warn Healthcare Sector of Payment Diversion Schemes

• James Bamford on Section 702 Extension

• Nuance Ex-Employee Indicted for Breach Affecting 1 Million

• Chicago Children’s Hospital Says 791,000 Impacted by Ransomware Attack

• Fortra Patches Critical SQL Injection in FileCatalyst Workflow

• New Ransomware, Infostealers Pose Growing Risk in 2024

• CISA Report Finds Critical Open-Source Memory Safety Risks

• How to Enhance Security Without Affecting the Customer Experience

• Working with a cybersecurity committee of the board

• Mitigating Skeleton Key, a new type of generative AI jailbreak technique

• New SnailLoad Attack Exploits Network Latency to Spy on Users’ Web Activities

• OpenAI Signs Content Agreement With Time

• Inside a Violent Gang’s Ruthless Crypto-Stealing Home Invasion Spree

• CISA Adds GeoServer, Linux Kernel, and Roundcube Webmail Bugs to its Known Exploited Vulnerabilities Catalog

• WhisperGate Data-Wiping Malware Suspect Indicted

• Google Thwarts Over 10,000 Attempts by Chinese Influence Operator

• Support of SSL 2.0 on web servers in 2024, (Fri, Jun 28th)

• The Contrastive Credibility Propagation Algorithm in Action: Improving ML-powered Data Loss Prevention

• TeamViewer Internal Systems Accessed by APT Hackers

• Snowblind Abuses Android seccomp Sandbox To Bypass Security Mechanisms

• Cyber Insurance Terms Drive Companies To Invest More in Security, Report Finds

• Russian APT Reportedly Behind New TeamViewer Hack

• Polyfill Domain Shut Down as Owner Disputes Accusations of Malicious Activity

• The Urgency to Uplevel AppSec: Securing Your Organization’s Vulnerable Building Blocks

• Cybersecurity News: Gas chromatograph vulnerabilities, Cloudflare rebukes Polyfill, Evolve Bank breach

• How to check how much RAM my computer has?

• 16-31 March 2024 Cyber Attacks Timeline

• B+ Security Rating Masks Healthcare Supply Chain Risks

• Cyber Security Today, June 28, 2024 – Cyber authorities remind developers to switch to memory-safe coding languages

• Elevate Your Career in AI & ML with Leading Academia and Industry Insights

• California Privacy Regulator to Partner With French Data Authority

• Xeno RAT Spread via .gg Domains and GitHub

• U.S. Department of Justice Announced $10 Million Reward For Russian Hacker

• Better Resilience Sees More Extorted Companies Refuse To Pay Their Ransomware Attackers

• Researchers Warn of Flaws in Widely Used Industrial Gas Analysis Equipment

• Mitigating Skeleton Key, a New Type of Generative AI Jailbreak Technique

• Cyberattack Rate Surges as Novel Malware Growth Accelerates

• USX Cyber GUARDIENT helps MSPs protect their clients

• Hackers Slip Backdoor into WordPress Plugins in Latest Supply-Chain Attack

• Chinese Hacker Groups Using Off-The-Shelf Tools To Deploy Ransomware

• No Patches for Hospital Temperature Monitors’ Critical Flaws

• Vanna AI Prompt Injection Vulnerability Enables RCE

• Former IT Employee Stolen 1 Million Geisinger Patient’s Personal Data

• US announces a $10M reward for Russia’s GRU hacker behind attacks on Ukraine

• ‘Skeleton Key’ attack unlocks the worst of AI, says Microsoft

• TeamViewer Detects Security Breach in Corporate IT Environment

• Apple Safari Browser Data Security ad against Google Chrome

• How Sanctions Can Help in Fighting State-Sponsored Ransomware Actors

• Examining Water Sigbin’s Infection Routine Leading to an XMRig Cryptominer

• Web3 in Healthcare: Privacy, Consent, and Equity

• CISOs becoming more comfortable with risk levels

• Leveraging AI and automation for enhanced security operations

• Polyfill.io owner punches back at ‘malicious defamation’ amid domain shutdown

• News Alert: Infinidat introduces advanced cyber resiliency and recovery solution for enterprises

• Web scraping is not just a security or fraud problem

• New infosec products of the week: June 28, 2024

• ISC Stormcast For Friday, June 28th, 2024 https://isc.sans.edu/podcastdetail/9040, (Fri, Jun 28th)

• GitHub Artifact Attestations now generally available

• Ticketek – 17,643,173 breached accounts

• Mechanical computer relies on kirigami cubes, not electronics

• TeamViewer can’t bring itself to say someone broke into its network – but it happened

• Webinar: How to secure Microsoft Copilot & Gen AI

• Amazon Is Investigating Perplexity Over Claims of Scraping Abuse

• LockBit group falsely claimed the hack of the Federal Reserve

• Victory! Grand Jury Finds Sacramento Cops Illegally Shared Driver Data

• IT Security News Daily Summary 2024-06-27

• How To Plan a (Successful) MuleSoft VPN Migration (Part I)

• LockBit group wrongly claimed the hack of the Federal Reserve

• New Relic CEO sets observability strategy for the AI age

• ACM will no longer cross sign certificates with Starfield Class 2 starting August 2024

• An Inside Look at The Malware and Techniques Used in the WordPress.org Supply Chain Attack

• GitHub Artifact Attestions now generally available

• AI Is Changing the Way Enterprises Look at Trust: Deloitte & SAP Weigh In

• Container Security Scanning: Vulnerabilities, Risks and Tooling

• An Artificially Intelligent Peer Reviewer Arrives

• US Announces Charges, Reward for Russian National Behind Wiper Attacks on Ukraine

• Drone As First Responder Programs Are Swarming Across the United States

• 14 Types of Malware and How to Prevent Them

• Thousands of UEFA Customer Credentials Sold on Dark Web

• Third-Party Trust Issues: AppSec Learns from Polyfill

• Rethinking the Cloud: Why Companies Are Returning to Private Solutions

• We’re not talking about cryptocurrency as much as we used to, but there are still plenty of scammers out there

• A new MOVEit vulnerability is igniting hacking attempts. Companies should patch ASAP

• What to do if you’re using Kaspersky security software that is now banned in the U.S.

• VMware vCenter RCE Vulnerability: What You Need to Know

• FBI Offers $5 Million Bounty For Fugitive ‘CryptoQueen’ Ruja Ignatova

• Precision AI — Revolutionizing Cybersecurity with Our Latest Campaign

• Toward greater transparency: Unveiling Cloud Service CVEs

• Polyfill Library Injected with Malware Impacting 100,000 Websites

• 2024-06-25 – Latrodectus infection with BackConnect and Keyhole VNC

• Smart Infrastructure Gets Lit Up!

• The Evolving SSL/TLS Certificate Lifecycle & How to Manage the Changes

• Driving licences and other official documents leaked by authentication service used by Uber, TikTok, X, and more

• Surprise! The Latest ‘Comprehensive’ US Privacy Bill Is Doomed

• Startups scramble to assess fallout from Evolve Bank data breach

• CISOs Reveal Firms Prioritize Savings Over Long-Term Security

• Lack Of Clarity On AI Regulation Hindering UK Projects

• Datadog DASH updates push into fresh IT automation turf

• CISA adds GeoSolutionsGroup JAI-EXT, Linux Kernel, and Roundcube Webmail bugs to its Known Exploited Vulnerabilities catalog

• Access AWS services programmatically using trusted identity propagation

• LockBit ransomware attack on Evolve Bank via US Federal Reserve

• Data Governance: Data Integration (Part 4)

• MerkSpy: Exploiting CVE-2021-40444 to Infiltrate Systems

• Operation First Light Seizes $257m in Global Scam Bust

• Wordfence Intelligence Weekly WordPress Vulnerability Report (June 17, 2024 to June 23, 2024)

• VinFast Touts Cheap And Tiny EV, Amid Sales Concerns

• TELSAT marKoni FM Transmitter

• Johnson Controls Illustra Essentials Gen 4

• Yokogawa FAST/TOOLS and CI Server

• LogRhythm Partners with The National Museum of Computing to Preserve Technological Heritage and Promote Inclusion in the Cybersecurity Industry

• Ransomware Strikes Auto Dealerships: The CDK Global Incident

• Rust-Based P2PInfect Botnet Evolves with Miner and Ransomware Payloads

• Global Revival of Hacktivism Requires Increased Vigilance from Defenders

• 12 Common Concerns of the Permeable IoT Attack Surface

• Check Point vs Palo Alto (2024): Which NGFW Is Better?

• What Is Cloud Data Security? Definition, Benefits & Best Practices

• PoC Exploit for Critical Fortra FileCatalyst Flaw Published

• Government Has Extremely Heavy Burden to Justify TikTok Ban, EFF Tells Appeals Court

• Elevating Disaster Recovery in Cybersecurity With AI-Driven Hyperautomation

• US lawmakers wave red flags over Chinese drone dominance

• Inside the Mind of a CISO: Survey and Analysis

• US, Allies Warn of Memory Unsafety Risks in Open Source Software

• GitLab Security Updates Patch 14 Vulnerabilities

• Designed Receivable Solutions Data Breach Impacts 585,000 People

• P2Pinfect Worm Now Delivering Ransomware on Redis Servers

• The Blockchain Revolution: Transforming Industries Beyond Finance

• Celebrating a Year of Innovation with Akamai Brand Protector

• SpaceX Wins Contract For International Space Station Disposal

• ‘Poseidon’ Mac stealer distributed via Google ads

• Strengthening Digital Defenses: Cyber Security Challenges and Top Tips for MSMEs

• Majority of Critical Open Source Projects Contain Memory Unsafe Code

• Infinidat Introduces Cyber Storage Protection to Reduce Ransomware and Malware Threats

• What is the Fediverse and the Social Network Platforms It Powers

• Exclusive: Zip’s AI procurement platform drives $4.4 billion in savings, reshaping enterprise spending

• Palo Alto Networks Cybersecurity Academy Supports Future Cyber Leaders

• Third of Organisations Have Suffered Three or More Data Breaches in the Last 24 Months

• Poc Exploit Released for Fortra Filecatalyst SQL Injection Vulnerability

• Malicious NPM Package Targets AWS Users to Deploy Backdoor

• CISA Warns of Exploited GeoServer, Linux Kernel, and Roundcube Vulnerabilities

• Gas Chromatograph Hacking Could Have Serious Impact: Security Firm

• The Secrets of Hidden AI Training on Your Data

• Snowflake isn’t an outlier, it’s the canary in the coal mine

• PortSwigger, the company behind the Burp Suite of security testing tools, swallows $112M

• Korean Telco Allegedly Infected Around 600,000 P2P Users with Malware

• Software composition analysis (SCA): A beginner’s guide

• Infinidat Revolutionizes Enterprise Cyber Storage Protection to Reduce Ransomware and Malware Threat Windows

• Bluesky Offers Starter Packs For Friends, Feeds To Follow

• Xeno RAT Attacking Users Via GitHub Repository And .gg Domains

• Ransomware Cheat Sheet: Everything You Need To Know In 2024

• Security Analysis of the EU’s Digital Wallet

• Largest Croatian hospital under cyberattack

• Top Tips to Keep Data Safe During the 2024 Paris Olympics

• Maryland Association of Community Colleges Receives Funding for the Cyber Workforce Accelerator

• ICO Scams Leverage 2024 Olympics to Lure Victims, Use AI for Fake Sites

• Odaseva raises $54M to secure Salesforce users

• Novel Snowblind Malware Targets Banking Customers in Southeast Asia

• Evolve Bank Data Leaked After LockBit’s ‘Federal Reserve Hack’

• Cloud Security Tops Priority List for Organizations Globally

• US Charges Russian Individual for Pre-Invasion Ukraine Hack

• 1-Click Exploit In Kakaotalk’s Android App Allows Arbitrary Code Execution

• Lastwall Quantum Shield delivers protection against Q-Day threats

• How to Use Python to Build Secure Blockchain Applications

• Securing Identities in the Cloud

• Amazon Finally Breaches $2 Trillion Valuation

• New Medusa RAT Attacking Android Devices to Steal SMS & Screen Controls

• Hackers Attacking Linux Cloud Servers To Gain Complete Control

• Too good to be true: Beware the temptation of recovery scams

• ‘Phantom’ Source Code Secrets Haunt Major Organizations

• Security Budgets Grow, but Inefficiencies Persist

• IT Leaders Split on Using GenAI For Cybersecurity

• Cybersecurity News: Snowblind Android, identity services leaks data, Polyfill.io supply chain attack

• The State of Kubernetes Security in 2024

• Phantom Secrets: Undetected Secrets Expose Major Corporations

• Datadog LLM Observability secures generative AI applications

• PoC exploit for critical Fortra FileCatalyst flaw published (CVE-2024-5276)

• Prompt Injection Flaw in Vanna AI Exposes Databases to RCE Attacks

• Russian National Indicted for Cyber Attacks on Ukraine Before 2022 Invasion

• Google Announced Chrome Enterprise Core Features for IT, Security Teams

• Heimdal and Escom Bulgaria Partner to Strengthen Cybersecurity in Bulgaria

• Update: MOVEit Transfer Vulnerability Targeted Amid Disclosure Drama

• Chinese State Actors Use Ransomware to Conceal Real Intent

• Multiple TP-Link Omada Vulnerabilities Let Attackers Execute Remote Code

• Chinese Cyberspies Employ Ransomware in Attacks for Diversion

• Strong Authentication: What It Is and Why You Need It

• Lattice launches two solutions to help users stay ahead of cyberthreats

• Critical SQLi Vulnerability Found in Fortra FileCatalyst Workflow Application

• US offers $10 million for information on indicted WhisperGate malware suspect

• New P2Pinfect version delivers miners and ransomware on Redis servers

• Adversaries Seek to Take Advantage of Global Events – How To Prepare for the 2024 Paris Olympics

• Ransomware attacks launched on the world by China and North Korea

• Cyber insurance as part of the cyber threat mitigation strategy

• Gitleaks: Open-source solution for detecting secrets in your code

• New ransomware, infostealers pose growing risk in 2024

• 75% of new vulnerabilities exploited within 19 days

• Exploit Attempts Recorded Against New MOVEit Transfer Vulnerability – Patch ASAP!

• Google Chrome Users at Risk: Study Reveals Dangerous Extensions Affecting 280 Million

• Enterprises increasingly turn to cloud and AI for database management

• ISC Stormcast For Thursday, June 27th, 2024 https://isc.sans.edu/podcastdetail/9038, (Thu, Jun 27th)

• BSNL Data Breach Exposes Millions of Users to Fraud and Security Risks

• Korean telco allegedly infected its P2P users with malware

• WhisperGate suspect indicted as US offers a $10M bounty for his capture

Generated on 2024-06-28 23:55:08.559837