IT Security News Daily Summary 2024-07-02

• 5 ChromeOS settings you should change for a more secure Chromebook – here’s how

• Newsletter writer covering Evolve Bank’s data breach says the bank sent him a cease and desist letter

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Evolve Bank data breach impacted fintech firms Wise and Affirm

• Careful with your marshmallows 🔥

• Affirm fears customer info pilfered during ransomware raid at Evolve Bank

• Threat Brief: CVE-2024-6387 OpenSSH RegreSSHion Vulnerability

• How to secure Azure Functions with Entra ID

• Careful with your marshmallows 🔥

• Affirm admits customer info pilfered during ransomware raid at Evolve Bank

• Vulnerabilities in PanelView Plus devices could lead to remote code execution

• Yieldstreet says some of its customers were affected by the Evolve Bank data breach

• Careful with your marshmallows 🔥

• Latest OpenSSH Vulnerability Might Impact 14M Linux Systems

• Tech Giants Face Backlash Over AI Privacy Concerns

• Rapid7 To Acquire Attack Surface Management Startup Noetic Cyber

• Careful with your marshmallows 🔥

• Outsmarting Cyber Threats: How Large Language Models Can Revolutionize Email Security

• The CDK Global outage: Explaining how it happened

• Careful with your marshmallows 🔥

• ‘Perfect 10’ Apple Supply Chain Bug — Millions of Apps at Risk of CocoaPods RCE

• Careful with your marshmallows 🔥

• The Future of Cybersecurity Jobs in an AI-Driven World

• Mobile Political Spam Surges Threefold For 2024 Election

• US Renewable Energy Sector vulnerable to cyber threats says FBI

• Careful with your marshmallows 🔥

• How Patch Management Software Solves the Update Problem

• Life at Fortinet: Product Marketing Innovation

• Strengthening Cybersecurity – Transforming in the Age of Healthcare Digitalization

• RansomHub and RansomHouse: Unmasking the Culprits Behind Italy’s Attacks

• Chrome Update Will Block Entrust Certificates by November 2024

• CISA Releases the Marine Transportation System Resilience Assessment Guide

• Almost Every Apple Device Vulnerable To CocoaPods Supply Chain Attack

• TeamViewer Hack Officially Attributed To Russian Cyberspies

• Splunk Patches High-Severity Vulnerabilities In Enterprise Product

• Google Patches 25 Android Flaws, Including Critical Privilege Escalation Bug

• Australia Warns Of Rogue Wi-Fi At Airports

• A Deep Dive into the EU Cybersecurity Certification Scheme on Common Criteria (EUCC)

• mySCADA myPRO

• CISA Releases Seven Industrial Control Systems Advisories

• Johnson Controls Kantech Door Controllers

• ICONICS and Mitsubishi Electric Products

• CDK Cyberattack Traced to BlackSuit Hackers: U.S. Auto Industry Under Siege

• LockBit Ransomware Attack on Infosys McCamish Systems Exposes Sensitive Data of Over Six Million Individuals

• Deepwatch appoints John DiLullo as CEO

• Ransomware Attack Demands Reach a Staggering $5.2m in 2024

• Google Launches $250,000 kvmCTF Bug Bounty Program for KVM Exploits

• It all adds up: Pretexting in executive compromise

• DeepBrand Clustering – an Evolution in Brand Spoofing Prevention

• Over 14M servers may be vulnerable to OpenSSH’s regreSSHion RCE flaw. Here’s what you need to do

• Best Parental Control App for Parents in 2024

• It’s World UFO Day! Defend Against Unidentified File Objects (UFOs) with Votiro

• Five Challenges to Adoption of Liquid Cooling in Data Centers

• Zero Trust Is Revolutionizing API Security in Financial Services

• Hackers Using Polyglot Files In the Wild, Here Comes PolyConv For Detection

• Prudential Financial data breach impacts 2.5 million people, not 36,000 as first thought

• New Orcinius Trojan Uses VBA Stomping to Mask Infection

• Preparing for Q-Day as NIST Nears Approval of PQC Standards

• Affirm admits customer info pwned in ransomware raid at Evolve Bank

• Critical CocoaPods Flaws Exposed Many iOS, macOS Apps to Supply Chain Attacks

• Splunk Patches High-Severity Vulnerabilities in Enterprise Product

• Evolve Bank Shares Data Breach Details as Fintech Firms Report Being Hit

• Google to offer $250,000 for Full VM Escape Zero-day Vulnerability

• CapraRAT Spyware Variant Disguised as Popular Apps to Target Android Users

• How Hacked YouTube Channels Spread Scams and Malware

• Building Resilience in the Chip Supply Chain

• Dev Rejects CVE Severity, Makes his GitHub Repository Read-Only

• Meme Stock GameStop Sinks On Lawsuit News

• US Supreme Court Sidesteps Decision On Social Media Laws

• Google Adds AI Disclosure Requirements For Political Ads

• The Tech Crash Course That Trains US Diplomats to Spot Threats

• Public Surveillance of Bars

• Report: Cyber Workforce Grows 15% at Large Organizations

• From the SOC to Everyday Success: Data-Driven Life Lessons from a Security Analyst

• Cyberinsurance Premiums are Going Down: Here’s Why and What to Expect

• New Intel CPU Vulnerability ‘Indirector’ Exposes Sensitive Data

• How MFA Failures are Fueling a 500% Surge in Ransomware Losses

• Prudential Financial data breach impacted over 2.5 million individuals

• March 2024 Cyber Attacks Statistics

• Latest Intel CPUs Impacted by New Indirector Side-Channel Attack

• Is Your Cloud Security a Mess? Five Problems CNAPP Can Cure

• Critical Vulnerabilities Found in Emerson Gas Chromographs Expose Systems

• CapraRAT Mimics As Popular Android Apps Attacking Android Users

• Surfshark vs IPVanish (2024): Which VPN Should You Choose?

• Deepfakes: Distorted Reality and the Growing Threat

• Indonesia Arrests Over 100 Foreigners in Bali Suspected of Participating in Cybercrime

• How Mobile ID Verification is Shaping the Future of Digital Payments

• Who Owns AI Risk? NOT IT!

• Hackers Using Dropbox And Google Docs To Deliver Orcinius Malware

• Superior Integrity Monitoring: Getting Beyond Checkbox FIM

• Tripwire Patch Priority Index for June 2024

• Australian man charged for Evil Twin Wi-Fi attacks on domestic flights

• CISOs Becoming More Comfortable With Risk Levels

• Cybersecurity News: 14 million Linux systems threatened, critical patch for Juniper routers, millions impacted by Prudential breach

• Critical Flaw in PTC License Server Can Allow Lateral Movement in Industrial Organizations

• Cisco Patches NX-OS Zero-Day Exploited by Chinese Cyberspies

• NordVPN File Checker protects users from infected files

• Health Tech Execs Get Jail Time For $1bn Fraud Scheme

• Rapid7 to Acquire Noetic Cyber to Enhance Attack Surface Visibility

• How evolving AI regulations impact cybersecurity

• China’s ‘Velvet Ant’ Hackers Caught Exploiting New Zero-Day in Cisco Devices

• Industrial cyberattacks fuel surge in OT cybersecurity spending

• National Australia Bank Raises Alarm About Cyber Threats to Major Banks

• 7 Steps To Secure Critical Infrastructure

• LogRhythm’s enhancements boost analyst efficiency

• China’s Premium EV Makers See Deliveries Surge In June

• Microsoft Shutters China Retail Stores

• France Prepares Formal Nvidia Antitrust Charges

• Grasshopper Hackers Mimic As Penetration Testing Service To Deploy Malware

• Water Sigbin Exploiting Oracle WebLogic Server Flaw

• Sanctioned and Exposed, Predator Spyware Maker Group Has Gone Awfully Quiet

• Brighton Park Capital Invests $112 Million in PortSwigger to Fuel Innovation and Product Development

• Cisco Patches Zero-Day Bug Used by Chinese Velvet Ant Group

• Exposing FakeBat loader: distribution methods and adversary infrastructure

• Cisco NX-OS Zero-Day Command Injection Vulnerability Let Hackers Gain Root Access

• regreSSHion – OpenSSH RCE Vulnerability Impacts 700K Linux Systems

• China-linked APT exploited Cisco NX-OS zero-day to deploy custom malware

• Korean ERP Vendor’s Update Systems Subverted to Spew Malware

• Poland to Probe Russia-Linked Cyberattack on State News Agency

• ‘Almost every Apple device’ vulnerable to CocoaPods supply chain attack

• SEC Disclosure Inconsistencies Amid Snowflake Breach | Kovrr

• IBM Consulting partners with Microsoft to help clients modernize security operations

• Podcast Episode: Fighting Enshittification

• TeamViewer Confirms that Russian Actors Behind the Recent Hack

• AuthZed Raises $12 Million to Accelerate Permissions Systems in Series A Funding

• Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware

• Meta’s ‘Pay or Consent’ Approach Faces E.U. Competition Rules Scrutiny

• Australia looses $3 billion every year to Cyber Crime

• Baddies hijack Korean ERP vendor’s update systems to spew malware

• OpenSSH Remote Code Execution Vulnerability (CVE-2024-6387) Notification

• Leveraging no-code automation for efficient network operations

• Australian Man Charged for Fake Wi-Fi Scam on Domestic Flights

• An Identity Love Story: Hardware vs Software Security Tokens

• The impossibility of “getting ahead” in cyber defense

• Deepfakes and voice clones are undermining election integrity

• Inside the minds of CISOs

• Imperva Client-Side Protection Mitigates the Polyfill Supply Chain Attack

• Infostealers on the Rise: A New Wave of Major Data Breaches?

• Deepfakes will cost $40 billion by 2027 as adversarial AI gains momentum

• The Evolution of Phishing Attacks: Beyond Email and How to Protect Your Organization

• A Playbook for Detecting the OpenSSH Vulnerability – CVE-2024-6387 – regreSSHion

• CISA Report Finds Most Open-Source Projects Contain Memory-Unsafe Code

• Nasty regreSSHion bug in OpenSSH puts roughly 700K Linux boxes at risk

• IT Security News Daily Summary 2024-07-01

• Top Tech Conferences & Events to Add to Your Calendar in 2024

• Keep The Momentum Going for The Right to Repair

• regreSSHion: Critical Vulnerability in OpenSSH Exposes Millions of Servers

• Integration Testing With Keycloak, Spring Security, Spring Boot, and Spock Framework

• Vulnerability Recap 7/1/24 – Apple, GitLab, AI Platforms at Risk

• Critical OpenSSH vulnerability could affect millions of servers

• Upcoming Book on AI and Democracy

• 3 New State-Backed Gangs Target Govt Sectors with HEAT Attack Methods

• Victory! Supreme Court Rules Platforms Have First Amendment Right to Decide What Speech to Carry, Free of State Mandates

• PortSwigger Scores Hefty $112 Million Investment

• Cyber A.I. Group Announces Substantial Expansion of Acquisition Pipeline

• 5G Vulnerabilities Expose Mobile Devices to Serious Threats

• Inside the Espionage: How Nobelium Targets French Diplomatic Staff

• Brain Cipher Ransomware Targets Indonesia’s National Data Center in Major Cyberattack

• Vulnerability Summary for the Week of June 24, 2024

• Patch These Compromised WordPress Plugins Asap To Avoid Attacks

• New Snowblind Android Malware Emerges As A Potent Datastealer

• The biggest data breaches in 2024: 1 billion stolen records and rising

• Fintech company Wise says some customers affected by Evolve Bank data breach

• Cyberattack by BlackSuit Targets Kadokawa and CDK Global

• Critical Flaws in CocoaPods Expose iOS and macOS Apps to Supply Chain Attacks

• SSH “regreSSHion” Remote Code Execution Vulnerability in OpenSSH., (Mon, Jul 1st)

• Australian Man Arrested for “Evil Twin” Wi-Fi Scam Targeting Travelers

• OpenID Connect Flows: From Implicit to Authorization Code With PKCE and BFF

• Personal data stolen from unsuspecting airport visitors and plane passengers in “evil twin” attacks, man charged

• Top 10 cybersecurity interview questions and answers

• Kasada’s Reflections on the Q3 2024 Forrester Wave™ – Bot Management Evaluation

• ‘Russia’ Breaches TeamViewer — ‘No Evidence’ Billions of Devices at Risk

• WordPress Security Research Series: WordPress Request Architecture and Hooks

• WordPress Security Research: A Beginner’s Series

• Personal data stolen from unsuspecting airport visitors and plane passengers in “evil twin” attacks, man arrested

• Hacker Conversations: Chris Evans, Hacker and CISO

• HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts

• Kasada’s Reflections on the Q3 2024 Forrester Wave™ – Bot Management Evaluation

• HubSpot data breach and Twitter X new data security concerns

• EU Finds Meta Subscription Plan Violates DMA Rules

• The SFPD’s Intended Purchase of a Robot Dog Triggers Board of Supervisors’ Oversight Obligations

• EFF’s Statement on the Netchoice Decisions

• Kasada’s Reflections on the Q3 2024 Forrester Wave™ – Bot Management Evaluation

• Juniper Issues Emergency Patches For Perfect 10 Router Vuln

• regreSSHion: Remote Unauthenticated Code Execution Vulnerability In OpenSSH Server

• Google Offering $250k For Full VM Escape In New KVM Bug Bounty Program

• Landmark Admin Discloses Data Breach Of Medical Info

• Apple CocoaPods Bugs Expose Millions of Apps to Code Injection

• Now The EU Council Should Finally Understand: No One Wants “Chat Control”

• Kasada’s Reflections on the Q3 2024 Forrester Wave™ – Bot Management Evaluation

• Microsoft Announces New Deadlines for Windows Updates

• Top Data Breaches and Cyber Attacks in 2024

• Meta’s ‘Pay or Consent’ Data Model Breaches EU Law

• Busted for book club? Why cops want to see what you’re reading, with Sarah Lamdan (Lock and Code S05E14)

• Do you still need to pay for antivirus software in 2024?

• Critical unauthenticated remote code execution flaw in OpenSSH server

• Startup Odaseva Raises $54M to Bolster Global Expansion, R&D

• Nasty regreSSHion bug in OpenSSH puts around 700K Linux boxes at risk

• Google Offering $250,000 for Full VM Escape in New KVM Bug Bounty Program

• Landmark Admin Discloses Data Breach Impacting Personal, Medical Information

• Social Media Monitoring and Rogue App Detection in Akamai Brand Protector

• ChatGPT 4 can exploit 87% of one-day vulnerabilities

• Looking Ahead to Better Prepare Today

• SCYTHE 4.3 enables organizations to test and validate their defenses

• Russian Hacker Wanted for Crippling Cyberattacks on Ukraine, $10M Reward

• TeamViewer Says Russia’s ‘Cozy Bear’ Hackers Attacked Corporate IT System

• Indian Software Firm’s Products Hacked to Spread Data-Stealing Malware

• CapraRAT Spyware Disguised as Popular Apps Threatens Android Users

• Report: 75% of New Vulnerabilities Exploited Within 19 Days

• Korean ISP Accused of Installing Malware to Block Torrent Traffic

• Critical OpenSSH Flaw Enables Full System Compromise

• Meta Considers Facebook News Ban In Australia

• Renault-Backed EV Start-Up BeyonCa Sets Up In Hong Kong

• EU Focuses On Microsoft-OpenAI Deal In New Probe

• SEC Files Lawsuit Against Crypto Firm Consensys

• Multiple Vulnerabilities Found in Gas Chromatographs

• Millions of OpenSSH Servers Potentially Vulnerable to Remote regreSSHion Attack

• Hackers Target Vulnerability Found Recently in Long-Discontinued D-Link Routers

• What is the Role of Explainable AI (XAI) In Security?

• AI Transcript, Fake School Website: Student’s US Scholarship Scam Exposed on Reddit

• Monti gang claims the hack of the Wayne Memorial Hospital in Pennsylvania

• New ‘regreSSHion’ Remote Unauthenticated Code Execution Vulnerability Discovered in OpenSSH Server

• Web Scraping is Not Just a Security or Fraud Problem

• Juniper Networks flings out emergency patches for perfect 10 router vuln

• New OpenSSH Vulnerability Could Lead to RCE as Root on Linux Systems

• End-to-End Secrets Security: Making a Plan to Secure Your Machine Identities

• Fake IT Support Sites Push Malicious PowerShell Scripts as Windows Fixes

• Police Allege ‘Evil Twin’ In-Flight Wi-Fi Used to Steal Information

• Prudential Financial Data Breach Impacts 2.5 Million

• Juniper Networks Warns of Critical Authentication Bypass Vulnerability

• Cyber Trust Mark: The Impacts and Incentives of Early Adoption

• Threat Actor IntelBroker Claims Leak of Cognizant OIPA Database

• The Problem the US TikTok Crackdown and Kaspersky Ban Have in Common

• Poyfill.io claims reveal new cracks in supply chain, but how deep do they go?

• A Look at Container Security Through the Lens of DevOps

• Get a Lifetime of 1TB Cloud Storage for Only $80 With FolderFort

• AVG Secure VPN vs Surfshark (2024): Which VPN Is Better?

• Update: Polyfill.io, BootCDN, Bootcss, Staticfile Attack Traced to one Operator

• CISA director: US is ‘not afraid’ to shout about Big Tech’s security failings

• Cybersecurity Workforce Sustainability has a Problem. DEI Could be the Solution.

• Australian Police Arrest Suspect in Fake Wi-Fi Scam Targeting Airport Passengers

• Cybersecurity News: TeamViewer breach update, HubSpot customer attacks, Cyber insurance problems

• Meet Brain Cipher — The New Ransomware Behind Indonesia’s Data Center Attack

• Cyber-Insurance Premiums Decline as Firms Build Resilience

• Cyber Security Today, July 1, 2024 – A critical patch for GitLab

• New Hacker Group Attacking Systems With 10 Malware At Same Time

• Microsoft Alerts More Users in Update to Midnight Blizzard Hack

• Hackers Using Google Ads To Deliver ‘Poseidon’ Mac Stealer

• Cybersecurity Frameworks: What Do the Experts Have to Say?

• TechRepublic Premium Editorial Calendar: Policies, Checklists, Hiring Kits and Glossaries for Download

• Juniper Networks fixed a critical authentication bypass flaw in some of its routers

• TeamViewer Hack Officially Attributed to Russian Cyberspies

• Over Six Million Hit by Ransomware Breach at Infosys McCamish Systems

• Silicon UK In Focus Podcast: The Age of Additive Manufacturing

• Threat Actors Actively Exploit D-Link DIR-859 Router Flaw

• Troubled EV Maker Rivian Lays Out Path To Profitability

• Alibaba Cloud To Shut Down Australia, India Data Centres

• A week in security (June 24 – June 30)

• Threat actors actively exploit D-Link DIR-859 router flaw CVE-2024-0769

• Juniper Releases Out-of-Cycle Fix for Max Severity Authentication Bypass Flaw

• India Investigates After Report Claims Apple Supplier ‘Excluded Married Women’

• Juniper Releases Out-Of-Cycle Critical Update for Smart Routers

• Remote Rigor: Safeguarding Data in the Age of Digital Nomads

• Juniper Networks Releases Critical Security Update for Routers

• How to protect data at rest and in transit

• Sony Enters Crypto Exchange Arena with Acquisition of Amber

• Cyber Insurance demand fall as businesses bolster their cybersecurity infrastructure

• Police allege ‘evil twin’ of in-flight Wi-Fi used to steal passenger’s credentials

• Indonesian government didn’t have backups of ransomwared data, because DR was only an option

• Product showcase: Protect digital identities with Swissbit’s iShield Key Pro

• Portainer: Open-source Docker and Kubernetes management

• Why every company needs a DDoS response plan

• Microsoft tells yet more customers their emails have been stolen

• Preparing for Q-Day as NIST nears approval of PQC standards

• Infosec products of the month: June 2024

Generated on 2024-07-02 23:55:11.242093