IT Security News Daily Summary 2024-07-04

• Amazon Prime Day 2024: Cyber criminals Are Ready – Are You?

• RSA Conference 2024: Exploring our Current Cybersecurity Realities Amidst AI Myths

• Volcano Demon Ransomware Gang Makes Phone Calls to Victim for Ransom

• Building an Effective Zero Trust Security Strategy for End-To-End Cyber Risk Management

• The Runtime Secrets’ Security Gap

• OVHcloud mitigated a record-breaking DDoS attack in April 2024

• Craig Newmark Philanthropies Matches EFF’s Monthly Donors

• Privacy-Enhanced Data Sharing: How to Drive Business Growth by Protecting Your Data

• RBI Issues Advisory to Support Cybersecurity in Banks

• RSA Conference 2024 Highlights: Cutting-Edge Cybersecurity Innovations

• Vodafone, Virgin Media O2 Extend Network Sharing Deal

• Maintaining Sanity Amidst Unnecessary CVE Reports

• California Advances Unique Safety Regulations for AI Companies Despite Tech Firm opposition

• Cyber Insurance Premiums Are Declining Worldwide as Businesses Improve Security, Howden Insurance Broker Report Finds

• New Intel CPU Vulnerability ‘Indirector’ Found

• Europol Warns of Home Routing Challenges For Lawful Interception

• IBM and Microsoft pledge to offer Cloud Data Protection

• Threads Hits 175 Million Users, One Year After Launch

• Operation Morpheus Disrupts 593 Cobalt Strike Servers Used for Ransomware

• Addressing the Challenges of Scaling GenAI

• Volcano Demon Ransomware Group Rings Its Victims To Extort Money

• Meta Faces Suspension of AI Data Training in Brazil

• Russia’s Central Bank Tells Businesses To Use Crypto To Avoid Sanctions

• Keeper Security Launches Zero-Knowledge Remote Browser Isolation in Keeper Connection Manager

• Compliance, Security and the Role of Identity

• Rethinking Cybersecurity in the Age of AI

• A World of Novel Risks: Stress-Testing Security Assumptions

• Comparitech Report Reveals Average Ransom Demands of Over $5.2 Million in Early 2024

• SEBI Circular Forces Stock Gaming Apps to Shut Down and Reevaluate

• Hackers attack HFS servers to drop malware and Monero miners

• Breach Debrief Series: Twilio’s Authy Breach is a MFA Wakeup Call

• Over $1bn in Cryptocurrency Lost to Web3 Cyber Incidents in 2024

• ShinyHunters Leak 33M Twilio Authy Phone Numbers, Neiman Marcus and Truist Bank Data

• Authy phone numbers accessed by cybercriminals, warns Twilio

• Healthcare fintech firm HealthEquity disclosed a data breach

• Gamers’ Data Exposed in RPG Platform Roll20 Breach

• Alert: French Diplomats Targeted By Russian Cyber Attacks

• Ghostscript Vulnerabilities Patched in Recent Ubuntu Updates

• New Android Spyware Steals Data from Gamers and TikTok Users

• IT Security Responsibilities for Online Start-Ups

• ASML Veldhoven Expansion Gains Dutch Court Approval

• How Apple Intelligence’s Privacy Stacks Up Against Android’s ‘Hybrid AI’

• Brazil data protection authority bans Meta from training AI models with data originating in the country

• Security vulnerability reporting: Who can you trust?

• Microsoft Uncovers Critical Flaws in Rockwell Automation PanelView Plus

• Fisker Seeks Approval For Firesale Of Remaining EVs

• OVHcloud blames record-breaking DDoS attack on MikroTik botnet

• Jeff Bezos To Sell $5 Billion Worth Of Amazon Shares

• Mekotio Banking Trojan Threatens Financial Systems in Latin America

• Splunk fixed tens of flaws in Splunk Enterprise and Cloud Platform

• New Ransomware Group Phones Execs to Extort Payment

• 384,000 sites pull code from sketchy code library recently bought by Chinese firm

• Europol nukes nearly 600 IP addresses in Cobalt Strike crackdown

• United States of America, Independence Day 2024

• Avoid malware while streaming UEFA EURO 2024 and Copa America CONMEBOL

• UK’s NCA Leads Major Cobalt Strike Takedown

• Safeguarding the Olympic Data Legacy: Sensitive Information Supply Chain Risks in the Digital Age

• Over 380,000+ Hosts Embedding Polyfill JS script Linking to Malicious Domain

• FakeBat Malware Weaponizing AnyDesk, Zoom, Teams & Chrome

• New ‘Pryx’ Ransomware Hijacked 30,000 University Applications

• Hackers obtained user data from Twilio-owned 2FA authentication app Authy

• Hackers abused API to verify millions of Authy MFA phone numbers

• Infostealer malware logs used to identify child abuse website members

• Twilio Confirms Data Breach After Hackers Leak 33M Authy User Phone Numbers

• Brazil Halts Meta’s AI Data Processing Amid Privacy Concerns

• Threat Actors Selling Shopify Commerce Platform Data on Dark Web

• The Metadata Minefield: Protecting All Your Sensitive Data

• FireTail Unveils Free Access for All to Cutting-Edge API Security Platform

• Ransomware scum who hit Indonesian government apologizes, hands over encryption key

• Ransomware news trending on Google

• Hackers steal millions of Authy 2FA phone numbers

• 4 key steps to building an incident response plan

• Global Police Operation Shuts Down 600 Cybercrime Servers Linked to Cobalt Strike

• Organizations use outdated approaches to secure APIs

• Twilio’s Authy App Breach Exposes Millions of Phone Numbers

• Only 13% of organizations are cyber mature

• Flask Web Application for Smart Honeypot Deployment Using Reinforcement Learning

• Careful with your marshmallows 🔥

• It’s Time For Lawmakers to Listen to Courts: Your Law Regulating Online Speech Will Harm Internet Users’ Free Speech Rights

• Emulating the Sabotage-Focused Russian Adversary Sandworm– Part 2

• Securing Supply Chains After Baltimore

• What’s new in the MSRC Report Abuse Portal and API

• Dissecting GootLoader With Node.js

• Careful with your marshmallows 🔥

• IT Security News Daily Summary 2024-07-03

• HealthEquity says data breach is an ‘isolated incident’

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Announcing initial services available in the AWS European Sovereign Cloud, backed by the full power of AWS

• Careful with your marshmallows 🔥

• CVE of the month, the supply chain attack hidden for 10 years CVE-2024-38368

• Roll20, an online tabletop role-playing game platform, discloses data breach

• Careful with your marshmallows 🔥

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• Careful with your marshmallows 🔥

• Europol Announces Crackdown on Cobalt Strike Servers Used by Cybercriminals

• Operation Morpheus took down 593 Cobalt Strike servers used by threat actors

• Careful with your marshmallows 🔥

• Randall Munroe’s XKCD ‘Bad Map Projection: Exterior Kansas’

• Guidance on the Critical OpenSSH Vulnerability regreSSHion

• Careful with your marshmallows 🔥

• Protecting the Mental Health of Cybersecurity Leaders

• Best 7 SOC 2 Compliance Software in 2024

• Understanding Properties of Zero Trust Networks

• The importance of compliance officers

• ISO 27001:2022 and TISAX: overlaps and differences

• Careful with your marshmallows 🔥

• CocoaPods Security Alert: Critical Bugs Expose Millions of Apps

• How to Combat Financial Crime and Achieve Business Success with KYB

• Careful with your marshmallows 🔥

• New Online Scam: Fraudsters Pose as Police Officers to Extort Money

• You’re Telling Me That Ad Was Fake? Malvertising Is Sneakier Than Ever | Avast

• The Not-So-Secret Network Access Broker x999xx

• Careful with your marshmallows 🔥

• The Scourge of Ransomware

• CISO Panel: How Security Teams Are Evolving Their Strategies in 2024

• UK law firms feeling pressure to prioritise business continuity over cybersecurity

• Careful with your marshmallows 🔥

• Traeger security bugs bad news for grillers with neighborly beef

• Australian Man Arrested for Evil Twin Wi-Fi Attacks on Domestic Flights

• The Growing Cybersecurity Concerns of Generative Artificial Intelligence

• New Rules for Quantum Encryption Unveiled by Cryptographers

• WordPress Plugins at Risk From Polyfill Library Compromise

• Ransomware gang starts threatening victims via phone

• EU Proposes Import Duties On China’s Temu, Shein, AliExpress – Report

• UN and DFINITY Partner on MSME Blockchain Project for Secure Funding

• Minister of Foreign Affairs of Latvia, Ms Baiba Braže, and a delegation of high-level cybersecurity officials from Moldova visited ENISA headquarters in Athens

• Careful with your marshmallows 🔥

• Wordfence Intelligence Weekly WordPress Vulnerability Report (June 24, 2024 to June 30, 2024)

• ASUS and NordVPN Partner to Integrate VPN Service into Routers

• Does your business have an AI blind spot? Navigating the risks of shadow AI

• Twilio says hackers identified cell phone numbers of two-factor app Authy users

• New Open SSH Vulnerability

• RegreSSHion Vulnerability Exposes Linux Systems to RCE Attacks

• RCE, DoS Exploits Found in Rockwell PanelView Plus: Patch Now

• Careful with your marshmallows 🔥

• EU Claims Meta’s Paid Ad-Free Option Violates Digital Competition Rules

• Exploring Fake-Bat Loaders: Distribution Tactics and Cybercrime Networks

• Microsoft Uncovers Major Flaws in Rockwell PanelView Plus

• Biden Administration Revoked Eight Licences For Huawei In 2024

• Millions of Apple Applications Were Vulnerable to CocoaPods Supply Chain Attack

• LockBit group claims the hack of the Fairfield Memorial Hospital in the US

• New Ransomware Group Uses Phone Calls to Pressure Victims, Researchers Say

• Vulnerabilities in CocoaPods: The Achilles’ Heel of the Apple App Ecosystem

• Secator: Open-Source Pentesting Swiss Army Knife

• Careful with your marshmallows 🔥

• Salesforce Shareholders Reject CEO Marc Benioff’s Compensation Plan

• The latest from Black Hat USA 2024

• Understanding the FakeBat Loader: Distribution Tactics and Cybercriminal Infrastructure

• Careful with your marshmallows 🔥

• RegreSSHion CVE-2024-6387: A Targeted Exploit in the Wild

• Cyber Extortion Soars: SMBs Hit Four Times Harder

• Sustainability and ESG: Understanding the Difference and Why It Matters

• Tesla Sales Fall For Second Straight Quarter

• US car dealerships are recovering from massive cyberattack: 3 things you should know

• Protecting our data in a world of rising cyber attacks

• Blurred lines: Securing the physical and digital sides of business

• Careful with your marshmallows 🔥

• Odaseva Raises $54 Million for Salesforce Enterprise Data Security Platform

• Over 380k Hosts Still Referencing Malicious Polyfill Domain: Censys

• LockBit Hits Croatia’s Biggest Hospital, Demands Ransom for Data

• TotalEnergies Cyber Attack: Data of 210,715 Customers Exposed

• Harnessing the Power of Managed CNAPP by Check Point

• Fear and Silence: 50% of Employees Hesitant to Report Security Errors

• Careful with your marshmallows 🔥

• The Growing Dichotomy of AI-Powered Code in Cloud-Native Security

• Feds Hit Health Entity With $950K Fine in Ransomware Attack

• Careful with your marshmallows 🔥

• Patelco Credit Union Scrambling to Restore Systems Following Ransomware Attack

• 300k Affected by Year-Old Data Breach at Florida Community Health Centers

• Brazil Data Regulator Bans Meta From Mining Data to Train AI Models

• Cybersecurity M&A Roundup: 29 Deals Announced in June 2024

• Survey Surfaces Growing Lack of Cybersecurity Confidence

• Half of Employees Fear Punishment for Reporting Security Mistakes

• Join Us 07-19-24 for “Hacking SOC Automation” – Super Cyber Friday

• Hiap Seng Industries Servers Attacked by Ransomware

• Gogs Vulnerabilities Let Attackers Hack Instances And Steal Source Code

• Juniper SRX Vulnerability Allows Attackers Trigger DoS Condition

• Careful with your marshmallows 🔥

• The Emerging Role of AI in Open-Source Intelligence

• Industry Groups Ask HHS for Guidance on Massive Change Breach Reports

• Careful with your marshmallows 🔥

• Dozens of Arrests Disrupt $2.7m Vishing Gang

• Careful with your marshmallows 🔥

• Affirm says Evolve Bank data breach also compromised some of its customers

• Bitwarden vs KeePass (2024): Battle of the Best – Who Wins?

• American Patelco Credit Union suffered a ransomware attack

• Supposed Grasshopper Operators Impersonate Israeli Government and Private Companies to Deploy Open-Source Malware

• Careful with your marshmallows 🔥

• Apple To Gain Observer Role On OpenAI’s Board – Report

• Proton Is Launching Encrypted Documents to Take On Google Docs

• Careful with your marshmallows 🔥

• regreSSHion OpenSSH Flaw: Potential Exploitation Attempts Seen, but Mass Attacks Unlikely

• Intel Says No New Mitigations Required for Indirector CPU Attack

• How Sekoia.io Uses the MITRE ATT&CK Framework to Enhance SOC Capabilities

• Japan’s Government Ends Use Of Floppy Disks

• Evolve Bank Data Breach Puts Affirm Cardholders Info at Risk

• How to Manage User Passwords on Linux

• In a major update, Proton adds privacy-safe document collaboration to Drive, its freemium E2EE cloud storage service

• Careful with your marshmallows 🔥

• Microsoft MSHTML Flaw Exploited to Deliver MerkSpy Spyware Tool

• Cybersecurity News: Evolve breach update, Patelco cyberattack, LockBit claims Croatian cyberattack

• IoT Security Regulations: A Compliance Checklist – Part 2

• Cybersecurity Best Practices for SOX Compliance

• Careful with your marshmallows 🔥

• Man-In-The-Middle Attacks are Still a Serious Security Threat

• APP Fraud Singled Out as Biggest Financial Crime Threat

• New RUSI Report Exposes Psychological Toll of Ransomware, Urges Action

• Cyber Security Today, July 3, 3034 – Beware of advanced attack tactics

• How Web Control and Parental Monitoring Work

• Polish government investigates Russia-linked cyberattack on state news agency

• The Impossibility of “Getting Ahead” in Cyber Defense

• Careful with your marshmallows 🔥

• How to Achieve Crypto Resilience for a Post-Quantum World

• Critical WordPress Plugin Flaw Exposes 90,000+ WordPress Sites

• One in ten Brits targeted by scammers this summer

• FCC Drafts Rules to Strengthen Cyber of Emergency Systems

• Careful with your marshmallows 🔥

• Regula Forensic Studio updates improve the accuracy of forensic examinations

• Dozens of Arrests Disrupt €2.5m Vishing Gang

• Polyglot Files Enable Cyber Attack Chains and Methods for Detection & Disarmament

• Cybersecurity is Now a Top Concern for Auto Industry, Report Finds

• Careful with your marshmallows 🔥

• The Secret Threat Hiding in Your SaaS Stack: Shadow IT

• US Supreme Court Ruling on Chevron Doctrine May Upend Future Cybersecurity Regulation

• Careful with your marshmallows 🔥

• Boardroom Blindspot: How New Frameworks for Cyber Metrics are Reshaping Boardroom Conversations

• FakeBat Loader Malware Spreads Widely Through Drive-by Download Attacks

• Hackers Claiming of Sandbox Escape RCE in 0-DAY Google Chrome

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• UK soldiers banking details leaked to China says Barings Law

• Harnessing AI to Thwart Ransomware Threats: A Strategic Approach

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Maintaining human oversight in AI-enhanced software development

• South Korean ERP Vendor’s Server Hacked to Spread Xctdoor Malware

• Israeli Entities Targeted by Cyberattack Using Donut and Sliver Frameworks

• Careful with your marshmallows 🔥

• Cybersecurity jobs available right now: July 3, 2024

• Secator: Open-source pentesting Swiss army knife

• Rafel RAT Attacking Android Devices To Gain Unauthorized Access

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• How do you assess the risk of AI within your operations?

• Companies spend more on cybersecurity but struggle to track expenses

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• USENIX Security ’23 – Efficient 3PC for Binary Circuits with Application to Maliciously-Secure DNN Inference

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

Generated on 2024-07-04 23:55:11.564088