IT Security News Daily Summary 2024-07-12

• This robot and handheld vacuum combo is $249 off this Prime Day

• The waterproof Blink Mini 2 hit its lowest price for Prime Day at just $20

• Friday Squid Blogging: 1994 Lair of Squid Game

• DeFi Hack Alert: Squarespace Domains Vulnerable to DNS Hijacking

• Get an Echo Pop smart speaker for just $18 with this Prime Day deal

• The 30+ best early anti-Prime Day deals: Best Buy, Walmart, Costco, and more

• The 30 best early Prime Day 2024 deals

• One of the best robot vacuums I’ve tested is $340 with this Prime Day deal

• Buy a Microsoft Office 2021 license for Windows for $40 – lowest price of the year

• White House urged to double check Microsoft isn’t funneling AI to China via G42 deal

• USENIX Security ’23 – One Size Does not Fit All: Quantifying the Risk of Malicious App Encounters for Different Android User Profiles

• Advanced Auto Parts: Data of 2.3 Million People Stolen in Breach

• The best VPN services of 2024: Expert tested and reviewed

• The best Chromebooks for students in 2024: Expert tested and reviewed

• The best travel VPNs of 2024: Expert tested and reviewed

• Apple M2 MacBook Air is still a record-low $849 on Amazon right now

• The best mobile VPNs of 2024: Expert tested and reviewed

• Critical flaw in Exim MTA could allow to deliver malware to users’ inboxes

• The 10 best early Prime Day 2024 kitchen appliance deals

• The 50+ best early Prime Day 2024 gaming deals

• I can’t travel without this Anker charger, and its 29% off ahead of Prime Day

• AT&T breach affects ‘nearly all’ customers’ call, text records

• Overcome AI-Oriented Phishing Attacks with These Sure-Fire Strategies

• AT&T suffers another major data breach, this one affecting ‘nearly all’ wireless customers

• Crooks Steal Phone, SMS Records for Nearly All AT&T Customers

• The Sweeping Danger of the AT&T Phone Records Breach

• Samsung isn’t worried that the Galaxy Buds look like AirPods, and you probably shouldn’t too

• Hackers Steal Phone, SMS Records for Nearly All AT&T Customers

• Poland Pushes for Shorter Drug Data Protection in EU

• CISA broke into a US federal agency, and no one noticed for a full 5 months

• What to Know About CISA’s New Cyber Reporting Rules

• Wake up gently with this sunrise alarm clock that’s $30 off ahead of Prime Day

• Get Prime Day deals, even if you don’t pay for Prime. Here’s how

• Grab Apple’s iPad 10th Gen on sale ahead of Prime Day – here’s where to save

• Massive AT&T Hack Exposed ‘Nearly All’ Customer Phone Numbers

• USENIX Security ’23 – Problematic Advertising and its Disparate Exposure on Facebook

• Randall Munroe’s XKCD ‘Pole Vault’

• Future-proofing Cybersecurity at the Speed of Threats with Automation

• How to defend against zero-click attacks

• AT&T Data Breach: Hackers Steal Call and Text Records for “Nearly All” Customers

• Fake Microsoft Teams for Mac delivers Atomic Stealer

• The best early Amazon Prime Day laptop deals we’ve found

• The best bone conduction headphones of 2024: Expert tested and reviewed

• The 25 best Prime Day 2024 robot vacuum deals

• The 10 best early Amazon Prime Day Kindle deals

• AT&T Admits Data Breach Impacted “Nearly All” Customers

• The 19 best early Amazon Prime Day deals under $100

• The 19 best early Prime Day 2024 Amazon Echo device deals

• This air purifier is a must for pet parents, and it’s $60 off ahead of Prime Day sales

• The best AirPods of 2024: Expert tested and reviewed

• How open source attracts some of the world’s top innovators

• What the AT&T phone records data breach means for you

• Attacks against the “Nette” PHP framework CVE-2020-15227, (Fri, Jul 12th)

• mSpy Faces Major Data Breach Following Cyber Attack

• The Fundamentals to API Security Success

• Dangerous monitoring tool mSpy suffers data breach, exposes customer details

• Forget Prime Day: Get the Apple AirPods Max headphones for $151 off at Walmart

• The 5 best early Prime Day 2024 security camera deals

• FCC to Provide $200 Million to Schools and Libraries Cybersecurity

• Singapore Banks Phasing Out OTPs in Favor of Digital Tokens

• The 22 best early Prime Day 2024 Fire TV deals

• The 30 best Prime Day 2024 deals under $25

• Forget Prime Day: These 50 Walmart deals are even better

• CDK reportedly paid $25 million to end US car dealership cyberattack: 3 things you should know

• This eye massager helps my migraines, and it’s on sale ahead of Prime Day

• AT&T Discloses Breach of Customer Data

• In Other News: Apple’s Spyware Warning, CDK Global Ransom Payment, Sibanye Cyberattack

• DarkGate Malware Exploits Samba File Shares in Short-Lived Campaign

• The most rugged Android I’ve tested also has a battery that lasts for weeks

• This Shure podcast kit has everything you need to up your mic game

• What Is Cloud Database Security? Types, Best Practices & Tools

• Palo Alto Networks fixed a critical bug in the Expedition tool

• Addressing Financial Organizations’ Digital Demands While Avoiding Cyberthreats

• Chinese APT40 Can Exploit Flaws Within Hours of Public Release

• Decrypting DoNex: The Flaw That Brought Down a Ransomware Empire

• Significant Drop in Cyber-Insurance Premiums Makes Coverage More Affordable

• The best early Prime Day 2024 headphone deals

• The 20+ best early Prime Day deals under $50

• The 25 best early Prime Day 2024 tablet deals

• Break-in at ‘third-party cloud platform’ leaked 110M customer records, says AT&T

• Identity: the new security perimeter

• Millions Impacted by Breach at Advance Auto Parts Linked to Snowflake Incident

• Zero-Trust Strategies: Paving the Way for a Secure Future & Sustainable Enterprise Growth

• Brands are changing cybersecurity strategies due to AI threats

• “Nearly all” AT&T customers had phone records stolen in new data breach disclosure

• Red Hat VEX files for CVEs are now generally available

• Hackers Downloaded Call Logs from Cloud Platform in AT&T Breach

• GigaOm names CloudGuard WAF as leader and fast mover for a second year in a row

• AT&T Says 110M Customers’ Data Leaked — Yep, it’s Snowflake Again

• Amazon Prime Day 2024 is days away: Everything to know, plus deals to shop now

• Bluetti is offering fantastic deals on its power stations – but not for long

• AT&T Data Breach: ‘Nearly All’ Wireless Customers Exposed in Massive Hack

• P2PInfect Botnet Using Miner And Ransomware Payload

• 6 Steps to Build an Incident Response Workflow for Your Business

• Musk’s Voice, Likeness Used in Deepfake Scam Targeting the Olympics

• Q-Day Prepping: What Businesses Can Do Now to Address Quantum Security Risks

• Australian Defence Force Private and Husband Charged with Espionage for Russia

• Indiana County Files Disaster Declaration Following Ransomware Attack

• Ticketmaster Breach: Hackers Leak 10M ‘Unrefreshable’ Ticket Barcodes

• There’s now 26% off the price of the most durable power stations I’ve tested, and it’s not made by Anker or Jackery

• One of the most versatile power stations I’ve tested is $450 off right now on Amazon

• Japanese Space Agency Spots Unspecified Zero-Day Attacks

• Year-Old Veeam Vulnerability Exploited in Fresh Ransomware Attacks

• Hackers stole call, text records of “nearly all” of AT&T’s cellular customers

• Elon Musk’s X Breached DSA Rules, EU Finds

• The Jackery Explorer 1000 is one of the best portable power stations you can buy, and it’s now $840

• Macau Government Websites Hit with Cyberattack by Suspected Foreign Hackers

• Lessons from the Ivanti VPN Cyberattack: Security Breaches and Mitigation Strategies

• Info of 2,3+ million individuals stolen in Advance Auto Parts data breach

• mSpy Data Breach: Millions of Customers’ Data Exposed

• The NSA Has a Long-Lost Lecture by Adm. Grace Hopper

• The hidden pitfalls of AI: why implementing AI without a strategic vision could harm your business

• 20 of the best early Prime Day deals on the weirdest tech we could find

• Japan Warns of Attacks Linked to North Korean Kimsuky Hackers

• Ever Wonder How Hackers Really Steal Passwords? Discover Their Tactics in This Webinar

• Japan’s SoftBank Acquires AI Chip Start-up Graphcore

• AT&T says criminals stole phone records of ‘nearly all’ customers in new data breach

• The Stark Truth Behind the Resurgence of Russia’s FIN7

• Cybersecurity News: PHP vulnerability exploit, Auto Parts breach, dark patterns report

• How to Protect Children From Online Predators? | Avast

• What is Online Grooming and How Can I Protect My Kids? | Avast

• How to make the Xfce desktop more user-friendly

• How to log in to the Bitwarden password manager with a passkey

• Snowflake Breach at Advance Auto Parts Hits 2.3 Million People

• Social media platforms that harvest the most personal data

• The Top 4 Forms of AI-Enabled Cyber Threats

• Advance Auto Parts Cyber Attack: Over 2 Million Users Data Exposed

• iPhone users in 98 countries warned about spyware by Apple

• RansomHub Ransomware – What You Need To Know

• Ransomware Gangs Invest in Custom Data Stealing Malware

• Multiple Threat Actors Exploit PHP Flaw CVE-2024-4577 to Deliver Malware

• Gathid identity governance platform enhancements help identify access changes

• How do financial lenders avoid cyber threats?

• Human Risk Management: The Next Step in Mature Security Awareness Programs

• U.S. Seizes Domains Used by AI-Powered Russian Bot Farm for Disinformation

• Simplified Zero Trust security with the Microsoft Entra Suite and unified security operations platform, now generally available

• NATO Set to Build New Cyber Defense Center

• How to use ChatGPT to digitize your handwritten notes for free

• Cytactic Raises $16M in Seed Funding

• Veeam Flaw Becomes Ransomware Vector a Year After Patching

• Forcepoint promotes Ryan Windham to CEO

• Hackers Using ClickFix Social Engineering Tactics to Deploy Malware

• NSFOCUS Recognized as a Leading Innovator in AI-driven Cybersecurity Solutions at WAIC 2024

• Enable Two-Factor Authentication (2FA) with Email Verification on NTA

• October ransomware attack on Dallas County impacted over 200,000 people

• Smishing Triad Is Targeting India To Steal Personal and Payment Data at Scale

• Exploring Compiled V8 JavaScript Usage in Malware

• Tips to defend against Cyberstalking

• What is AI based Cyber Crime

• Coyote Banking Trojan Attacking Windows Users To Steal Login Details

• How to design a third-party risk management framework

• Managing cyberattack fallout: Financial and operational damage

• Singapore’s banks to ditch texted one-time passwords

• Top priorities for compliance leaders this year

• New infosec products of the week: July 12, 2024

• ISC Stormcast For Friday, July 12th, 2024 https://isc.sans.edu/podcastdetail/9050, (Fri, Jul 12th)

• China’s APT41 crew adds a stealthy malware loader and fresh backdoor to its toolbox

• ‘Gay furry hackers’ say they’ve disbanded after raiding Project 2025’s Heritage Foundation

• An In-Depth Look at Crypto-Crime in 2023 Part 2

• CDK breach compromises customer data from 15,000 car dealers

• CrystalRay operations have scaled 10x to over 1,500 victims

• IT Security News Daily Summary 2024-07-11

• How to use Google’s AI-powered NotebookLM to organize your research

• The 45+ best Walmart deals right now

• The best cheap tablets of 2024: Expert tested and reviewed

• The best Apple Watches of 2024: Expert tested and reviewed

• The best earbuds of 2024: Expert tested and reviewed

• Pressure Grows in Congress to Treat Crypto Investigator Tigran Gambaryan, Jailed in Nigeria, as a Hostage

• Most Websites and Apps Use Dark Patterns to Cheat Consumers: FTC

• Akamai?s Perspective on July?s Patch Tuesday 2024

• BlastRADIUS Vulnerability Discovered in RADIUS Protocol Used in Corporate Networks and Cloud

• USENIX Security ’23 – How Library IT Staff Navigate Privacy, Security Challenges and Responsibilities

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #297 – Line Management Deadlock

• Emulating the Long-Term Extortionist Nefilim Ransomware

• Data breach exposes millions of mSpy spyware customers

• OpenSSH bug leaves RHEL 9 and the RHELatives vulnerable

• New FishXProxy Phishing Kit Making Phishing Accessible to Script Kiddies

• Microsoft drops ‘MInference’ demo, challenges status quo of AI processing

• AI stack attack: Navigating the generative tech maze

• The best early Amazon Prime Day Apple deals

• This Sony Bravia is the best TV you’ve never heard of – and it’s on sale for Prime Day

• How to write better ChatGPT prompts in 5 steps

• Join Sam’s Club for $25 – half off the usual price

• How to clear the cache on your TV (and why you should do it)

• What is “Events Ripper”?

• Understanding SSH Honeypot Logs: Attackers Fingerprinting Honeypots, (Thu, Jul 11th)

• Samsung AI-Upgraded Bixby Voice Assistant Coming This Year

• This LG TV has one of the best displays I’ve seen, and it’s not even the newest model

• How to set up read receipts for your iPhone’s text messages

• New Heimdal-HaloPSA Integration Boosts Efficiency for Managed Service Providers

• A Comprehensive Guide to the Digital Operational Resilience Act (DORA)

• Hyperproof Sweeps G2 Summer Awards (Again)

• Microsoft’s Breach Notification Emails Wind Up in Spam Folder

• Ransomware Attack on Patelco Credit Union Disrupts Services for Nearly Half a Million Members

• Yemeni Hackers Unmasked Spying on Middle Eastern Military Phones

• Checking in on the state of cybersecurity and the Olympics

• The best VPN routers of 2024

• The best early Prime Day Samsung deals

• The best early Amazon Prime Day monitor deals

• This Anker MagSafe charger beats Apple’s, and it’s a third of the price right now

• The best laptops for video editing in 2024: Expert tested and reviewed

• Notorious Hacker Kingpin ‘Tank’ Is Finally Going to Prison

• Announcing the CVRF API 3.0 upgrade

• If you’re ready to leave Windows 11 behind, this is the distro for new Linux users

• This Nespresso machine brews barista-quality coffee at home, and it’s 34% off ahead of Amazon Prime Day

• How 5 simple tab tricks make your Firefox browser so much more productive

• How to install Linux on an old laptop to give it new life and purpose

• The Apple Watch SE (2nd Gen) is $60 off right now ahead of Amazon Prime Day

• Next Neuralink Brain Implant Coming Soon, Says Musk

• SiegedSec Hacks Heritage Foundation; Leaks Data Over “Project 2025”

• Get your pup the smart Halo Collar 3 that’s $100 off ahead of Prime Day

• You can now easily move your photos from Google Photos to iCloud Photos. Here’s how

• USENIX Security ’23 – “Millions of people are watching you”: Understanding the Digital-Safety Needs and Practices of Creators

• Buy a Windows 11 Pro license for just $23 – an all-time low price

• Do you need antivirus on Linux?

• Tracebit Raises $5 Million for Threat Deception Solution

• Obsolete Software and Hardware making NHS an easy target to Cyber Attacks

• Create JWT Using DataWeave JWT Library

• Harnessing the Power of Advanced MDR for SIEM Platforms

• Your business is going to rely on hundreds of AI models. Here’s why

• ServiceNow’s 4 key AI principles and why they matter to your business

• Apple sends new warning about mercenary spyware attacks to iPhone users. Should you worry now?

• CASB vs. SASE: What’s the difference?

• Ransomware gangs increasingly exploiting vulnerabilities

• Exein raised $15M Series B to stop robotic arms going haywire

• 60 New Malicious Packages Uncovered in NuGet Supply Chain Attack

• Palo Alto Networks Patches Critical Flaw in Expedition Migration Tool

• Wordfence Intelligence Weekly WordPress Vulnerability Report (July 1, 2024 to July 7, 2024)

• EU Accepts Apple’s Legal Commitments To Open NFC Access

• Prime Day may be a few days away, but the Echo Show 8 already hit an all-time low price

• HMS Industrial Networks Anybus-CompactCom 30

• How to Optimize Remote Work

• Apple Is Alerting iPhone Users of Spyware Attacks

• MixMode: Revolutionizing Threat Detection and Prioritization in Cybersecurity

• The 47 best early Prime Day 2024 gaming deals

• Baseus power banks recalled due to fire hazard – check your model number

• Multiple threat actors exploit PHP flaw CVE-2024-4577 to deliver malware

• ‘CrystalRay’ Expands Arsenal, Hits 1,500 Targets with SSH-Snake and Open Source Tools

• You can now get SpaceX’s Starlink Mini internet antenna that can fit in your backpack

• CISA Releases Advisory Detailing Red Team Activity During Assessment of US FCEB Organization, Highlighting Necessity of Defense-in-Depth

• Siemens Simcenter Femap

• Siemens Remote Connect Server

• Siemens RUGGEDCOM

• Siemens Teamcenter Visualization and JT2Go

• BunkerWeb: Open-Source Web Application Firewall (WAF)

• Decoding the Courts’ Digital Decisions | EFFector 36.9

• 6 Tips for a Successful Security Vendor Consolidation

• The best portable power stations of 2024: Expert tested and reviewed

• The 30 best early Prime Day 2024 TV deals

• ViperSoftX Info-Stealing Malware Being Distributed Through Fake Ebooks

• New Phishing Campaign Using AI generated Emails, Human Live Chat to Target Social Media Business Accounts

• Survey Finds Confidence in Data Security Despite Ransomware Scourge

• 39% of MSPs report major setbacks when adapting to advanced security technologies

• Authy breach exposes data of millions – what to look out for if you use it

• Critical GitLab Bug Lets Attackers Run Pipelines as Other Users

• Risk Escalates as Communication Channels Proliferate

• Advance Auto Parts: 2.3M people’s data accessed when crims broke into our Snowflake account

• Examining the Decrease in Cyber Insurance Rates

• Kanguru’s hardware-based internal SEDs secure data on laptops, tablets, and computers

• CISA Urges Software Makers to Eliminate OS Command Injection Vulnerabilities

• Alphabet Walks Away From HubSpot Deal

• AI-Driven Scam Ads: Deepfake Tech Used to Peddle Bogus Health Products

• Report reveals that three quarters of UK businesses have been impacted by AI-powered cyber threats

• Russian Researchers Identify Alleged Ukrainian Developer of Malicious Remote Access Tool

• Investing in AI? Don’t Forget the Cyber Locks! VCs Advice.

• ScienceLogic enhances AIOps platform to improve security and third-party industry interoperability

• Using Authy? Beware of impending phishing attempts

• Chinese APT41 Upgrades Malware Arsenal with DodgeBox and MoonWalk

• Germany Agrees Deal To Phase Out Huawei, Chinese 5G Kit – Report

• Hackers Created 700+ Fake Domains to Sell Olympic Games Tickets

• Major Security Flaw in WhatsApp and Signal MacOS Apps Puts User Data at Risk

• Unsecured Authy MFA API Exploited For Malicious Phone Number Verification

• Microsoft July 2024 Patch Tuesday Fixed 140+ Vulnerabilities

• The best AirTag wallets of 2024: Expert tested

• Over 16,400 Private and State-Owned Businesses Exposed to RegreSSHion Vulnerability

• Huione Guarantee Exposed as a $11 Billion Marketplace for Cybercrime

• Singapore to Phase Out One-Time Passwords in Banking

• CISA, FBI Urge Immediate Action on OS Command Injection Vulnerabilities in Network Devices

• Adaptive Shield Partners with Deloitte to DeliverHolistic, Comprehensive SaaS Security for Global Organizations

• Fraud Campaign Targets Russians with Fake Olympics Tickets

• Musk Defeats $500m Mass Twitter Layoff Lawsuit

• Google Advanced Protection Program gets passkeys for high-risk users

• Streamlined Security Solutions: PAM for Small to Medium-sized Businesses

• Apple Inc issues warning against Mercenary Spyware Cyber Attacks

• Diversifying Cyber Teams to Tackle Complex Threats

• New Malware Campaign Targeting Spanish Language Victims and the Mining Sector

• Privacy expert put away for 9 years after ‘grotesque’ cyberstalking campaign

• Palo Alto Networks Addresses BlastRADIUS Vulnerability, Fixes Critical Bug in Expedition Tool

• New Poco RAT Targets Spanish-Speaking Victims in Phishing Campaign

• Apple needs to fix this crazy iPhone annoyance

• Universal Code Execution by Chaining Messages in Browser Extensions

• Citrix Fixed Critical and High-Severity Bugs in NetScaler Product

• Telling Stories with Security Metrics

• Impact of data breaches is fueling scam campaigns

• When spear phishing met mass phishing

• Ransomware Surges Annually Despite Law Enforcement Takedowns

• Cybersecurity News: Australia targets foreign tech, banks sunset OTP, Veeam vulnerability exploited

• VMware Fixed Critical SQL Injection Flaw in Aria Automation Platform

• Hard Truths about Remote Access Hardware VPNs

• Japanese Space Agency Spotted zero-day via Microsoft 365 Services

• Train for Entry-Level or Advanced IT Positions for Just $50

• AI-Powered Russia’s bot farm operates on X, US and its allies warn

• Top 10 Active Directory Management Tools – 2024

• 3 ways to interact with Gemini from the MacOS desktop

• Prompt Security introduces GenAI security solution for MSSPs

• Huione Guarantee Marketplace Exposed as Front for Cybercrime

• You had a year to patch this Veeam flaw and now it’s going to hurt

• The Team Sport of Cloud Security: Breaking Down the Rules of the Game

• Samsung Galaxy Watch Ultra hands-on: Key specs, features, and everything you should know

• Every product Samsung unveiled at Unpacked July 2024: Galaxy Z Fold 6, Watch Ultra, Ring, more

• Samsung’s new Galaxy Buds 3 look nearly identical to Apple AirPods – and that’s a good thing

• Survey Sees Modern CISOs Becoming More Comfortable With Risk

• How to recover deleted files on a Mac

• Understanding IoT security risks and how to mitigate them | Cybersecurity podcast

• Japanese space agency spotted zero-day attacks while cleaning up attack on M365

• Why the Ticketmaster Breach is More Dangerous Than You Think

• PHP Vulnerability Exploited to Spread Malware and Launch DDoS Attacks

• Apple warns iPhone users in 98 countries of spyware attacks

• How AI helps decode cybercriminal strategies

• Strengthening cybersecurity preparedness with defense in depth

• GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Jobs

• Amazon updates AI enterprise solutions with guardrails at AWS Summit

• How to clear your Google search cache on Android (and why you should)

• Travel scams exposed: How to recognize and avoid them

• Apple alerts iPhone users in 98 countries to mercenary spyware attacks

• Valuable insights for making the right cybersecurity decisions

• A “Meta” Facebook Phish

• ISC Stormcast For Thursday, July 11th, 2024 https://isc.sans.edu/podcastdetail/9048, (Thu, Jul 11th)

• VMware fixed critical SQL-Injection in Aria Automation product

Generated on 2024-07-12 23:55:11.707860