IT Security News Daily Summary 2024-07-01

• Top Tech Conferences & Events to Add to Your Calendar in 2024

• Keep The Momentum Going for The Right to Repair

• regreSSHion: Critical Vulnerability in OpenSSH Exposes Millions of Servers

• Integration Testing With Keycloak, Spring Security, Spring Boot, and Spock Framework

• Vulnerability Recap 7/1/24 – Apple, GitLab, AI Platforms at Risk

• Critical OpenSSH vulnerability could affect millions of servers

• Upcoming Book on AI and Democracy

• 3 New State-Backed Gangs Target Govt Sectors with HEAT Attack Methods

• Victory! Supreme Court Rules Platforms Have First Amendment Right to Decide What Speech to Carry, Free of State Mandates

• PortSwigger Scores Hefty $112 Million Investment

• Cyber A.I. Group Announces Substantial Expansion of Acquisition Pipeline

• 5G Vulnerabilities Expose Mobile Devices to Serious Threats

• Inside the Espionage: How Nobelium Targets French Diplomatic Staff

• Brain Cipher Ransomware Targets Indonesia’s National Data Center in Major Cyberattack

• Vulnerability Summary for the Week of June 24, 2024

• Patch These Compromised WordPress Plugins Asap To Avoid Attacks

• New Snowblind Android Malware Emerges As A Potent Datastealer

• The biggest data breaches in 2024: 1 billion stolen records and rising

• Fintech company Wise says some customers affected by Evolve Bank data breach

• Cyberattack by BlackSuit Targets Kadokawa and CDK Global

• Critical Flaws in CocoaPods Expose iOS and macOS Apps to Supply Chain Attacks

• SSH “regreSSHion” Remote Code Execution Vulnerability in OpenSSH., (Mon, Jul 1st)

• Australian Man Arrested for “Evil Twin” Wi-Fi Scam Targeting Travelers

• OpenID Connect Flows: From Implicit to Authorization Code With PKCE and BFF

• Personal data stolen from unsuspecting airport visitors and plane passengers in “evil twin” attacks, man charged

• Top 10 cybersecurity interview questions and answers

• Kasada’s Reflections on the Q3 2024 Forrester Wave™ – Bot Management Evaluation

• ‘Russia’ Breaches TeamViewer — ‘No Evidence’ Billions of Devices at Risk

• WordPress Security Research Series: WordPress Request Architecture and Hooks

• WordPress Security Research: A Beginner’s Series

• Personal data stolen from unsuspecting airport visitors and plane passengers in “evil twin” attacks, man arrested

• Hacker Conversations: Chris Evans, Hacker and CISO

• HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts

• Kasada’s Reflections on the Q3 2024 Forrester Wave™ – Bot Management Evaluation

• HubSpot data breach and Twitter X new data security concerns

• EU Finds Meta Subscription Plan Violates DMA Rules

• The SFPD’s Intended Purchase of a Robot Dog Triggers Board of Supervisors’ Oversight Obligations

• EFF’s Statement on the Netchoice Decisions

• Kasada’s Reflections on the Q3 2024 Forrester Wave™ – Bot Management Evaluation

• Juniper Issues Emergency Patches For Perfect 10 Router Vuln

• regreSSHion: Remote Unauthenticated Code Execution Vulnerability In OpenSSH Server

• Google Offering $250k For Full VM Escape In New KVM Bug Bounty Program

• Landmark Admin Discloses Data Breach Of Medical Info

• Apple CocoaPods Bugs Expose Millions of Apps to Code Injection

• Now The EU Council Should Finally Understand: No One Wants “Chat Control”

• Kasada’s Reflections on the Q3 2024 Forrester Wave™ – Bot Management Evaluation

• Microsoft Announces New Deadlines for Windows Updates

• Top Data Breaches and Cyber Attacks in 2024

• Meta’s ‘Pay or Consent’ Data Model Breaches EU Law

• Busted for book club? Why cops want to see what you’re reading, with Sarah Lamdan (Lock and Code S05E14)

• Do you still need to pay for antivirus software in 2024?

• Critical unauthenticated remote code execution flaw in OpenSSH server

• Startup Odaseva Raises $54M to Bolster Global Expansion, R&D

• Nasty regreSSHion bug in OpenSSH puts around 700K Linux boxes at risk

• Google Offering $250,000 for Full VM Escape in New KVM Bug Bounty Program

• Landmark Admin Discloses Data Breach Impacting Personal, Medical Information

• Social Media Monitoring and Rogue App Detection in Akamai Brand Protector

• ChatGPT 4 can exploit 87% of one-day vulnerabilities

• Looking Ahead to Better Prepare Today

• SCYTHE 4.3 enables organizations to test and validate their defenses

• Russian Hacker Wanted for Crippling Cyberattacks on Ukraine, $10M Reward

• TeamViewer Says Russia’s ‘Cozy Bear’ Hackers Attacked Corporate IT System

• Indian Software Firm’s Products Hacked to Spread Data-Stealing Malware

• CapraRAT Spyware Disguised as Popular Apps Threatens Android Users

• Report: 75% of New Vulnerabilities Exploited Within 19 Days

• Korean ISP Accused of Installing Malware to Block Torrent Traffic

• Critical OpenSSH Flaw Enables Full System Compromise

• Meta Considers Facebook News Ban In Australia

• Renault-Backed EV Start-Up BeyonCa Sets Up In Hong Kong

• EU Focuses On Microsoft-OpenAI Deal In New Probe

• SEC Files Lawsuit Against Crypto Firm Consensys

• Multiple Vulnerabilities Found in Gas Chromatographs

• Millions of OpenSSH Servers Potentially Vulnerable to Remote regreSSHion Attack

• Hackers Target Vulnerability Found Recently in Long-Discontinued D-Link Routers

• What is the Role of Explainable AI (XAI) In Security?

• AI Transcript, Fake School Website: Student’s US Scholarship Scam Exposed on Reddit

• Monti gang claims the hack of the Wayne Memorial Hospital in Pennsylvania

• New ‘regreSSHion’ Remote Unauthenticated Code Execution Vulnerability Discovered in OpenSSH Server

• Web Scraping is Not Just a Security or Fraud Problem

• Juniper Networks flings out emergency patches for perfect 10 router vuln

• New OpenSSH Vulnerability Could Lead to RCE as Root on Linux Systems

• End-to-End Secrets Security: Making a Plan to Secure Your Machine Identities

• Fake IT Support Sites Push Malicious PowerShell Scripts as Windows Fixes

• Police Allege ‘Evil Twin’ In-Flight Wi-Fi Used to Steal Information

• Prudential Financial Data Breach Impacts 2.5 Million

• Juniper Networks Warns of Critical Authentication Bypass Vulnerability

• Cyber Trust Mark: The Impacts and Incentives of Early Adoption

• Threat Actor IntelBroker Claims Leak of Cognizant OIPA Database

• The Problem the US TikTok Crackdown and Kaspersky Ban Have in Common

• Poyfill.io claims reveal new cracks in supply chain, but how deep do they go?

• A Look at Container Security Through the Lens of DevOps

• Get a Lifetime of 1TB Cloud Storage for Only $80 With FolderFort

• AVG Secure VPN vs Surfshark (2024): Which VPN Is Better?

• Update: Polyfill.io, BootCDN, Bootcss, Staticfile Attack Traced to one Operator

• CISA director: US is ‘not afraid’ to shout about Big Tech’s security failings

• Cybersecurity Workforce Sustainability has a Problem. DEI Could be the Solution.

• Australian Police Arrest Suspect in Fake Wi-Fi Scam Targeting Airport Passengers

• Cybersecurity News: TeamViewer breach update, HubSpot customer attacks, Cyber insurance problems

• Meet Brain Cipher — The New Ransomware Behind Indonesia’s Data Center Attack

• Cyber-Insurance Premiums Decline as Firms Build Resilience

• Cyber Security Today, July 1, 2024 – A critical patch for GitLab

• New Hacker Group Attacking Systems With 10 Malware At Same Time

• Microsoft Alerts More Users in Update to Midnight Blizzard Hack

• Hackers Using Google Ads To Deliver ‘Poseidon’ Mac Stealer

• Cybersecurity Frameworks: What Do the Experts Have to Say?

• TechRepublic Premium Editorial Calendar: Policies, Checklists, Hiring Kits and Glossaries for Download

• Juniper Networks fixed a critical authentication bypass flaw in some of its routers

• TeamViewer Hack Officially Attributed to Russian Cyberspies

• Over Six Million Hit by Ransomware Breach at Infosys McCamish Systems

• Silicon UK In Focus Podcast: The Age of Additive Manufacturing

• Threat Actors Actively Exploit D-Link DIR-859 Router Flaw

• Troubled EV Maker Rivian Lays Out Path To Profitability

• Alibaba Cloud To Shut Down Australia, India Data Centres

• A week in security (June 24 – June 30)

• Threat actors actively exploit D-Link DIR-859 router flaw CVE-2024-0769

• Juniper Releases Out-of-Cycle Fix for Max Severity Authentication Bypass Flaw

• India Investigates After Report Claims Apple Supplier ‘Excluded Married Women’

• Juniper Releases Out-Of-Cycle Critical Update for Smart Routers

• Remote Rigor: Safeguarding Data in the Age of Digital Nomads

• Juniper Networks Releases Critical Security Update for Routers

• How to protect data at rest and in transit

• Sony Enters Crypto Exchange Arena with Acquisition of Amber

• Cyber Insurance demand fall as businesses bolster their cybersecurity infrastructure

• Police allege ‘evil twin’ of in-flight Wi-Fi used to steal passenger’s credentials

• Indonesian government didn’t have backups of ransomwared data, because DR was only an option

• Product showcase: Protect digital identities with Swissbit’s iShield Key Pro

• Portainer: Open-source Docker and Kubernetes management

• Why every company needs a DDoS response plan

• Microsoft tells yet more customers their emails have been stolen

• Preparing for Q-Day as NIST nears approval of PQC standards

• Infosec products of the month: June 2024

• Generative AI is new attack vector endangering enterprises, says CrowdStrike CTO

• Cyber Security Today, Week in Review for week ending Friday, June 28, 2024

• IT Security News Monthly Summary – July

• IT Security News Weekly Summary – Week 26

• IT Security News Daily Summary 2024-06-30

• The dangers of voice fraud: We can’t detect what we can’t see

• USENIX Security ’23 – Beyond The Gates: An Empirical Analysis of HTTP-Managed Password Stealers and Operators

• Russia-linked Midnight Blizzard stole email of more Microsoft customers

• Kadokawa Group Hit by Major Ransomware Attack

• Pipeline Hijacking: GitLab’s Security Wake-Up Call

• Phishing And The Threats of QR Codes

• Montgomery County, Md.’s Chatbot Shows GenAI in Action

• Kimsuky Unleashes TRANSLATEXT Malware on South Korean Academic Institutions

• TeamViewer’s Corporate Network Compromised in Suspected APT Hack

• 37signals Boosts Profits by Over $1 Million by Exiting Cloud Computing

• Russia-linked group APT29 likely breached TeamViewer’s corporate network

• Security Affairs newsletter Round 478 by Pierluigi Paganini – INTERNATIONAL EDITION

• Week in review: MOVEit auth bypass flaws quitely fixed, open-source Rafel RAT targets Androids

• USENIX Security ’23 – A Plot is Worth a Thousand Words: Model Information Stealing Attacks via Scientific Plots

• Staying Ahead of Adversarial AI with Incident Response Automation

Generated on 2024-07-01 23:55:07.662343