IT Security News Daily Summary 2024-06-29

• The biggest data breaches in 2024: 1B stolen records and rising

• Infosys McCamish Systems data breach impacted over 6 million people

• GitHub Artifact Attestations sign and verify software artifacts

• Why You Should Mask Your Email Address

• Apology Accepted: Ken Griffin’s Tax Records and the IRS

• Virtual Escape; Real Reward: Introducing Google’s kvmCTF

• Sustaining Digital Certificate Security – Entrust Certificate Distrust

• How Data Inference Could Expose Customer Information: The Case of UnitedHealth Breach

• Symmetric vs. Asymmetric Encryption in the Cloud: Choosing the Right Approach

• Addressing Financial Organizations’ Digital Demands while Avoiding Cyber Threats

• Mirai-like Botnet Targets Zyxel NAS Devices in Europe for DDoS Attacks

• Google to Block Entrust Certificates in Chrome Starting November 2024

• AI-Generated Exam Answers Outperform Real Students, Study Finds

• Hyperscaling and On-Chain Confidentiality: The Cornerstones of Web3’s Future

• China’s Backdoor Data Infiltration: A Growing Concern For Indian Government

• Google Is Piloting Face Recognition for Office Security

• The US Wants to Integrate the Commercial Space Industry With Its Military to Prevent Cyber Attacks

• AI Accelerates Healthcare’s Digital Transformation

• Security News This Week: Google Is Piloting Face Recognition for Office Security

• What Are the Cybersecurity Threats When Allowing Third-Party Cookies on Mac?

• Embracing automated policy as code in financial services

• Post-quantum cryptography: Code-based cryptography

• API security: The importance of rate limiting policies in safeguarding your APIs

• Generative AI vs. Predictive AI: A Cybersecurity Perspective

• Your Phone’s 5G Connection Is Vulnerable to Bypass, DoS Attacks

• Key trends shaping the threat landscape in H1 2024 – Week in security with Tony Anscombe

• Critical GitLab Bug Lets Attackers Run Pipelines as Any User

• China-Sponsored Attackers Target 40K Corporate Users in 90 Days

• DAST Vs. Penetration Testing: Comprehensive Guide to Application Security Testing

• HubSpot Investigating Cyber Attack Following Customer Account Hacks

• Betting on Your Digital Rights: EFF Benefit Poker Tournament at DEF CON 32

• A cyberattack shut down the University Hospital Centre Zagreb in Croatia

• June 2024 Web Server Survey

• IT Security News Daily Summary 2024-06-28

• Friday Squid Blogging: New Squid Species

• Unfurling Hemlock Tossing ‘Cluster Bombs’ of Malware

• CISA looked at C/C++ projects and found a lot of C/C++ code. Wanna redo any of it in Rust?

• TeamViewer Confirms Security Breach by Russian Midnight Blizzard

• How the FTC Can Make the Internet Safe for Chatbots

• USENIX Security ’23 – PCAT: Functionality and Data Stealing from Split Learning by Pseudo-Client Attack

• How To Plan a (Successful) MuleSoft VPN Migration (Part II)

• TeamViewer says Russia broke into its corp IT network

• How to use Social-Engineer Toolkit

• TeamViewer breached by Russian state actor Midnight Blizzard

• HubSpot says it’s investigating customer account hacks

• Quora’s Chatbot Platform Poe Allows Users to Download Paywalled Articles on Demand

• Hubspot says it’s investigating customer account hacks

• Microsoft Alerts More Customers to Email Theft in Expanding Midnight Blizzard Hack

• Temu is Malware — It Sells Your Info, Accuses Ark. AG

• Hacker Claims Data Breach of India’s Blue-Collar Worker Database

• Jack Dorsey Warns: The Blurring Line Between Real and Fake

• The Role of Immutable Data Storage in Strengthening Cybersecurity

• Fresh MOVEit Vulnerability Under Active Exploitation: Urgent Updates Needed

• TEMU sued for being “dangerous malware” by Arkansas Attorney General

• LMSYS launches ‘Multimodal Arena’: GPT-4 tops leaderboard, but AI still can’t out-see humans

• Mississippi Can’t Wall Off Everyone’s Social Media Access to Protect Children

• The Eureka Moment: Discovering Application Traffic Observability

• Skeleton Key the Latest Jailbreak Threat to AI Models: Microsoft

• Kimsuky Using TRANSLATEXT Chrome Extension to Steal Sensitive Data

• Progress Software Releases Security Bulletin for MOVEit Transfer

• New Unfurling Hemlock Threat Actor Floods Systems with Malware

• Cybersecurity breach of TeamViewer Corporate environment by APT29

• Chrome to Distrust Entrust Certificates by November 2024

• SandboxAQ Joins the FIDO Alliance to Further Drive the Use of Secure Protocols instead of Passwords

• Cross-Platform Product Release: Heimdal Integrates with HaloPSA

• Elevating Cloud Security: Highlights from CloudNativeSecurityCon 2024

• What Is Application Security Posture Management (ASPM): A Comprehensive Guide

• 3 More Plugins Infected in WordPress.org Supply Chain Attack Due to Compromised Developer Passwords

• What Is Cloud Workload Security? Ultimate Guide

• Review: Top 5 For Outsourced Customer Service Solutions UK and Abroad

• Remote Access Giant TeamViewer Says Russian Spies Hacked Its Corporate Network

• CISA and Fauquier County Hold K-12 Active Shooter Exercise

• Nyobolt Reveals EV Battery That Recharges In Just Five Minutes

• Falcon Cloud Security Supports Google Cloud Run to Strengthen Serverless Application Security

• Exposure Management – Browser Extension Inventory

• Seeing the Unseen: Preventing Breaches by Spotting Malicious Browser Extensions

• Unlock the future of security

• AuthZed Raises $12 Million for Permissions Management Technology

• GetReal Labs Emerges From Stealth to Tackle Deepfakes

• GitLab Releases Patch for Critical CI/CD Pipeline Vulnerability and 13 Others

• Google cuts ties with Entrust in Chrome over trust issues

• 5 WordPress Plugins Compromised; Millions of Websites at Risk

• Kimsuky Deploys TRANSLATEXT to Target South Korean Academia

• TeamViewer Cyber-Attack Attributed to Russian APT Midnight Blizzard

• How TrafficPeak Helped Provide a Superior Football Viewing Experience

• Vulnerability management empowered by AI

• Remote access giant TeamViewer says Russian spies hacked its corporate network

• Malware Peddlers Experimenting with BPL Sideloading and Masking Malicious Payloads as PGP Keys

• Microsoft hits snooze again on security certificate renewal

• Microsoft Details ‘Skeleton Key’ AI Jailbreak Technique

• In Other News: Malware Delivered by ISP, Temu Spying, Critical Dataverse Vulnerability

• Cyber Workforce Grows 15% at Large Organizations as Security is Prioritized

• Data: The Final(?) Security Frontier

• Fairness and Safety of LLMs

• Gitleaks: Open-Source Solution for Detecting Secrets in Your Code

• Tesla Argues Elon Musk Won Battle Over $56 Billion Pay Package

• Crypto-Gang Leader Convicted of Vicious Kidnaps, Robbery

• ‘Poseidon’ Mac stealer Distributed via Malicious Google Ads

• Combatting the Evolving SaaS Kill Chain: How to Stay Ahead of Threat Actors

• 8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency Mining

• Stopping Supply Chain Attacks with Cisco’s User Protection Suite

• New MOVEit Transfer Critical Vulnerability Targeted by Threat Actors

• US Federal Agencies Warn Healthcare Sector of Payment Diversion Schemes

• James Bamford on Section 702 Extension

• Nuance Ex-Employee Indicted for Breach Affecting 1 Million

• Chicago Children’s Hospital Says 791,000 Impacted by Ransomware Attack

• Fortra Patches Critical SQL Injection in FileCatalyst Workflow

• New Ransomware, Infostealers Pose Growing Risk in 2024

• CISA Report Finds Critical Open-Source Memory Safety Risks

• How to Enhance Security Without Affecting the Customer Experience

• Working with a cybersecurity committee of the board

• Mitigating Skeleton Key, a new type of generative AI jailbreak technique

• New SnailLoad Attack Exploits Network Latency to Spy on Users’ Web Activities

• OpenAI Signs Content Agreement With Time

• Inside a Violent Gang’s Ruthless Crypto-Stealing Home Invasion Spree

• CISA Adds GeoServer, Linux Kernel, and Roundcube Webmail Bugs to its Known Exploited Vulnerabilities Catalog

• WhisperGate Data-Wiping Malware Suspect Indicted

• Google Thwarts Over 10,000 Attempts by Chinese Influence Operator

• Support of SSL 2.0 on web servers in 2024, (Fri, Jun 28th)

• The Contrastive Credibility Propagation Algorithm in Action: Improving ML-powered Data Loss Prevention

• TeamViewer Internal Systems Accessed by APT Hackers

• Snowblind Abuses Android seccomp Sandbox To Bypass Security Mechanisms

• Cyber Insurance Terms Drive Companies To Invest More in Security, Report Finds

• Russian APT Reportedly Behind New TeamViewer Hack

• Polyfill Domain Shut Down as Owner Disputes Accusations of Malicious Activity

• The Urgency to Uplevel AppSec: Securing Your Organization’s Vulnerable Building Blocks

• Cybersecurity News: Gas chromatograph vulnerabilities, Cloudflare rebukes Polyfill, Evolve Bank breach

• How to check how much RAM my computer has?

• 16-31 March 2024 Cyber Attacks Timeline

• B+ Security Rating Masks Healthcare Supply Chain Risks

• Cyber Security Today, June 28, 2024 – Cyber authorities remind developers to switch to memory-safe coding languages

• Elevate Your Career in AI & ML with Leading Academia and Industry Insights

• California Privacy Regulator to Partner With French Data Authority

• Xeno RAT Spread via .gg Domains and GitHub

• U.S. Department of Justice Announced $10 Million Reward For Russian Hacker

• Better Resilience Sees More Extorted Companies Refuse To Pay Their Ransomware Attackers

• Researchers Warn of Flaws in Widely Used Industrial Gas Analysis Equipment

• Mitigating Skeleton Key, a New Type of Generative AI Jailbreak Technique

• Cyberattack Rate Surges as Novel Malware Growth Accelerates

• USX Cyber GUARDIENT helps MSPs protect their clients

• Hackers Slip Backdoor into WordPress Plugins in Latest Supply-Chain Attack

• Chinese Hacker Groups Using Off-The-Shelf Tools To Deploy Ransomware

• No Patches for Hospital Temperature Monitors’ Critical Flaws

• Vanna AI Prompt Injection Vulnerability Enables RCE

• Former IT Employee Stolen 1 Million Geisinger Patient’s Personal Data

• US announces a $10M reward for Russia’s GRU hacker behind attacks on Ukraine

• ‘Skeleton Key’ attack unlocks the worst of AI, says Microsoft

• TeamViewer Detects Security Breach in Corporate IT Environment

• Apple Safari Browser Data Security ad against Google Chrome

• How Sanctions Can Help in Fighting State-Sponsored Ransomware Actors

• Examining Water Sigbin’s Infection Routine Leading to an XMRig Cryptominer

• Web3 in Healthcare: Privacy, Consent, and Equity

• CISOs becoming more comfortable with risk levels

• Leveraging AI and automation for enhanced security operations

• Polyfill.io owner punches back at ‘malicious defamation’ amid domain shutdown

• News Alert: Infinidat introduces advanced cyber resiliency and recovery solution for enterprises

• Web scraping is not just a security or fraud problem

• New infosec products of the week: June 28, 2024

• ISC Stormcast For Friday, June 28th, 2024 https://isc.sans.edu/podcastdetail/9040, (Fri, Jun 28th)

• GitHub Artifact Attestations now generally available

• Ticketek – 17,643,173 breached accounts

• Mechanical computer relies on kirigami cubes, not electronics

• TeamViewer can’t bring itself to say someone broke into its network – but it happened

Generated on 2024-06-29 23:55:07.698684