IT Security News Daily Summary 2024-07-05

• Simplifying Infrastructure Management with Imperva’s Terraform Module for Cloud WAF

• USENIX Security ’23 – Eye-Shield: Real-Time Protection of Mobile Device Screen Information from Shoulder Surfing

• Ticketmaster hackers release stolen ticket barcodes for Taylor Swift Eras Tour

• OpenAI breach is a reminder that AI companies are treasure troves for hackers

• Enhance IaC Security With Mend Scans

• Chrome to Block Entrust Certificates in November 2024

• CISA Releases Guide to Operational Security for Election Officials

• YouTube: A Prime Target for Cybercriminals

• Strengthening Web Application Security With Predictive Threat Analysis in Node.js

• How do cybercriminals steal credit card information?

• 15 Alarming Cyberbullying Statistics and Facts for 2024

• 16 common types of cyberattacks and how to prevent them

• cyber attack

• Randall Munroe’s XKCD ‘Routine Maintenance’

• Cancer patient forced to make terrible decision after Qilin attack on London hospitals

• Hacker Stole Secrets From OpenAI

• ‘Polyfill’ Supply Chain Threat: 4x Worse Than We Thought

• Cisco Patches NX-OS Zero-Day Exploited by Chinese Attackers

• Ticketmaster Breach: ShinyHunters Leak 440K Taylor Swift Eras Tour Ticket Data

• OpenAI Kept Mum About Hack of Sensitive AI Research

• Airtel India denies 370 million user data breach

• Cybersecurity in Healthcare: An In-Depth Guide by Heimdal®

• Best Automated Patch Management Software in 2024

• HealthEquity Hit by Data Breach: Protected Information Exposed

• Gen Z’s Payment Preferences are Transforming Retail and Dining

• Step-By-Step Guide: Configuring IPsec Over SD-WAN on FortiGate and Unveiling Its Benefits

• What Is a Man-in-the-Middle (MITM) Attack? Prevention + 7 Types

• Mastering YouTube Visibility: Essential Hacks for Success

• EU Tariffs On Chinese EVs Come Into Force

• Meet Brex, Google Cloud, Aerospace and more at Disrupt 2024

• Wise and Evolve Data Breach Highlights Risks of Third-Party Partnerships

• Singapore is working on technical guidelines for securing AI systems

• Hackers leak 170k Taylor Swift’s ERAS Tour Barcodes

• Inside the Ticketmaster Hack: 440,000 Taylor Swift Fans at Risk

• OVHcloud Hit with Record 840 Million PPS DDoS Attack Using MikroTik Routers

• Webinar Alert: Learn How ITDR Solutions Stop Sophisticated Identity Attacks

• The World’s Most Popular 3D-Printed Gun Was Designed by an Aspiring Terrorist

• Latest Ghostscript vulnerability haunts experts as the next big breach enabler

• Overlooked Domain Name Resiliency Issues: Registrar Communications, (Fri, Jul 5th)

• AI and Cybersecurity: Mitigating Risks and Safeguarding Digital Assets

• Cloudflare Details 1.1.1.1 Service Outage Incident

• Polyfill.io Supply Chain Attack: 384,773 hosts still embedding a polyfill JS script linking to the malicious domain

• OVHcloud Sees Record 840 Mpps DDoS Attack

• In Other News: Microsoft Details ICS Flaws, Smart Grill Hacking, Predator Spyware Activity

• How Intelligence Sharing Can Help Keep Major Worldwide Sporting Events on Track

• This New Ransomware Group Uses Phone Calls to Pressure Victims

• Blueprint for Success: Implementing a CTEM Operation

• Vinted Fined €2.3m Over Data Protection Failure

• Hacker Stole OpenAI Internal Documents – Report

• Editorial: Labour Wins: A New Tech Strategy for Britain?

• Mekotio Banking Trojan Attacking American Users To Steal Financial Data

• Get Advanced Ad Blocking and Superior Data Privacy Tools for Just $11 Until 7/21

• New Golang Zergeca Botnet appeared in the threat landscape

• Amazon To Discontinue Astro Security Robot

• Kimusk’s HappyDoor Executed Via regsvr32 File To Evade Detection

• New Golang-based Zergeca Botnet appeared in the threat landscape

• Some Data Is ‘Breached’ During a Hacking Attack on the Alabama Education Department

• EU Opens Applications for Cybersecurity and Digital Skills Funding

• Hackers Compromised Ethereum’s Mailing List to Drain Their Crypto Funds

• CVE-2024-6387 – regreSSHion Remote Code Execution vulnerability seen in OpenSSH

• GootLoader Malware Still Active, Deploys New Versions for Enhanced Attacks

• Cybersecurity News: Senator pressures CISA, Velvet Ant exploits Cisco, Europol crushes Cobalt

• Cyber Security Today, July 5, 2024 – Prepare for business email compromise attacks

• Turning Jenkins Into a Cryptomining Machine From an Attacker’s Perspective

• Microsoft discloses 2 flaws in Rockwell Automation PanelView Plus

• Malicious QR Reader App in Google Play Delivers Anatsa Banking Malware

• Turla: A Master of Deception

• The Pros and Cons of Secure Access Service Edge (SASE)

• India’s Airtel dismisses data breach reports amid customer concerns

• Turla: A Master’s Art of Evasion

• Europol says mobile roaming tech is making its job too hard

• HubSpot Investigates Limited Security Breach Affecting Customer Accounts

• Hackers compromised Ethereum mailing list and launched a crypto draining attack

• Understanding API Key Verification

• Extending the Reach and Capabilities of Digital Signing With Standards

• Twilio data breach exposes millions of contact numbers

• Understanding the Risks to SaaS Data Security

• Threat Actor Claiming 2FA Bypass Vulnerability in HackerOne Bug Bounty Platform

• Smashing Silos With a Vulnerability Operations Center (VOC)

• Social media and teen mental health – Week in security with Tony Anscombe

• Infostealing malware masquerading as generative AI tools

• Polyfill[.]io Attack Impacts Over 380,000 Hosts, Including Major Companies

• 47% of corporate data stored in the cloud is sensitive

• 99% of IoT exploitation attempts rely on previously known CVEs

• New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks

• Organizations weigh the risks and rewards of using AI

• Hackers Abused Twilio API To Verify Phone Numbers used For MFA

• New infosec products of the week: July 5, 2024

• Ticketmaster Breach: ShinyHunters Leak 440,000 Taylor Swift Eras Tour Tickets

• IT Security News Daily Summary 2024-07-04

• Amazon Prime Day 2024: Cyber criminals Are Ready – Are You?

• RSA Conference 2024: Exploring our Current Cybersecurity Realities Amidst AI Myths

• Volcano Demon Ransomware Gang Makes Phone Calls to Victim for Ransom

• Building an Effective Zero Trust Security Strategy for End-To-End Cyber Risk Management

• The Runtime Secrets’ Security Gap

• OVHcloud mitigated a record-breaking DDoS attack in April 2024

• Craig Newmark Philanthropies Matches EFF’s Monthly Donors

• Privacy-Enhanced Data Sharing: How to Drive Business Growth by Protecting Your Data

• RBI Issues Advisory to Support Cybersecurity in Banks

• RSA Conference 2024 Highlights: Cutting-Edge Cybersecurity Innovations

• Vodafone, Virgin Media O2 Extend Network Sharing Deal

• Maintaining Sanity Amidst Unnecessary CVE Reports

• California Advances Unique Safety Regulations for AI Companies Despite Tech Firm opposition

• Cyber Insurance Premiums Are Declining Worldwide as Businesses Improve Security, Howden Insurance Broker Report Finds

• New Intel CPU Vulnerability ‘Indirector’ Found

• Europol Warns of Home Routing Challenges For Lawful Interception

• IBM and Microsoft pledge to offer Cloud Data Protection

• Threads Hits 175 Million Users, One Year After Launch

• Operation Morpheus Disrupts 593 Cobalt Strike Servers Used for Ransomware

• Addressing the Challenges of Scaling GenAI

• Volcano Demon Ransomware Group Rings Its Victims To Extort Money

• Meta Faces Suspension of AI Data Training in Brazil

• Russia’s Central Bank Tells Businesses To Use Crypto To Avoid Sanctions

• Keeper Security Launches Zero-Knowledge Remote Browser Isolation in Keeper Connection Manager

• Compliance, Security and the Role of Identity

• Rethinking Cybersecurity in the Age of AI

• A World of Novel Risks: Stress-Testing Security Assumptions

• Comparitech Report Reveals Average Ransom Demands of Over $5.2 Million in Early 2024

• SEBI Circular Forces Stock Gaming Apps to Shut Down and Reevaluate

• Hackers attack HFS servers to drop malware and Monero miners

• Breach Debrief Series: Twilio’s Authy Breach is a MFA Wakeup Call

• Over $1bn in Cryptocurrency Lost to Web3 Cyber Incidents in 2024

• ShinyHunters Leak 33M Twilio Authy Phone Numbers, Neiman Marcus and Truist Bank Data

• Authy phone numbers accessed by cybercriminals, warns Twilio

• Healthcare fintech firm HealthEquity disclosed a data breach

• Gamers’ Data Exposed in RPG Platform Roll20 Breach

• Alert: French Diplomats Targeted By Russian Cyber Attacks

• Ghostscript Vulnerabilities Patched in Recent Ubuntu Updates

• New Android Spyware Steals Data from Gamers and TikTok Users

• IT Security Responsibilities for Online Start-Ups

• ASML Veldhoven Expansion Gains Dutch Court Approval

• How Apple Intelligence’s Privacy Stacks Up Against Android’s ‘Hybrid AI’

• Brazil data protection authority bans Meta from training AI models with data originating in the country

• Security vulnerability reporting: Who can you trust?

• Microsoft Uncovers Critical Flaws in Rockwell Automation PanelView Plus

• Fisker Seeks Approval For Firesale Of Remaining EVs

• OVHcloud blames record-breaking DDoS attack on MikroTik botnet

• Jeff Bezos To Sell $5 Billion Worth Of Amazon Shares

• Mekotio Banking Trojan Threatens Financial Systems in Latin America

• Splunk fixed tens of flaws in Splunk Enterprise and Cloud Platform

• New Ransomware Group Phones Execs to Extort Payment

• 384,000 sites pull code from sketchy code library recently bought by Chinese firm

• Europol nukes nearly 600 IP addresses in Cobalt Strike crackdown

• United States of America, Independence Day 2024

• Avoid malware while streaming UEFA EURO 2024 and Copa America CONMEBOL

• UK’s NCA Leads Major Cobalt Strike Takedown

• Safeguarding the Olympic Data Legacy: Sensitive Information Supply Chain Risks in the Digital Age

• Over 380,000+ Hosts Embedding Polyfill JS script Linking to Malicious Domain

• FakeBat Malware Weaponizing AnyDesk, Zoom, Teams & Chrome

• New ‘Pryx’ Ransomware Hijacked 30,000 University Applications

• Hackers obtained user data from Twilio-owned 2FA authentication app Authy

• Hackers abused API to verify millions of Authy MFA phone numbers

• Infostealer malware logs used to identify child abuse website members

• Twilio Confirms Data Breach After Hackers Leak 33M Authy User Phone Numbers

• Brazil Halts Meta’s AI Data Processing Amid Privacy Concerns

• Threat Actors Selling Shopify Commerce Platform Data on Dark Web

• The Metadata Minefield: Protecting All Your Sensitive Data

• FireTail Unveils Free Access for All to Cutting-Edge API Security Platform

• Ransomware scum who hit Indonesian government apologizes, hands over encryption key

• Ransomware news trending on Google

• Hackers steal millions of Authy 2FA phone numbers

• 4 key steps to building an incident response plan

• Global Police Operation Shuts Down 600 Cybercrime Servers Linked to Cobalt Strike

• Organizations use outdated approaches to secure APIs

• Twilio’s Authy App Breach Exposes Millions of Phone Numbers

• Only 13% of organizations are cyber mature

• Flask Web Application for Smart Honeypot Deployment Using Reinforcement Learning

Generated on 2024-07-05 23:55:06.933295