IT Security News Daily Summary 2024-07-15

• Hackers Claim to Have Leaked 1.1 TB of Disney Slack Messages

• USENIX Security ’23 – FABRID: Flexible Attestation-Based Routing for Inter-Domain Networks

• MuddyWater replaces Atera by custom MuddyRot implant in a recent campaign

• Amazon Prime Day 2024: Live updates on the 99 hottest Prime Day deals

• Caught in the Act: StealC, the Cyber Thief in C

• Apple just released the iOS 18 public beta. Here’s how to get it on your iPhone right now

• Best Buy’s Black Friday in July sale is here. These are the best deals competing with Prime Day

• Dashlane Review 2024: Pricing, Features & Specs

• EFF to FCC: SS7 is Vulnerable, and Telecoms Must Acknowledge That

• NuGet Packages Exploited to Target Developers with Malware

• AT&T paid a $370,000 ransom to prevent stolen data from being leaked

• SBOMs in Action: Securing Your Golden AMIs From Build to Runtime

• The 20 best Prime Day 2024 phone deals

• The 38 best Prime Day 2024 deals under $25

• Get Apple’s latest MacBook Air M3 for its lowest price yet for Prime Day

• Ditch Prime Day: Apple’s AirTag 4-Pack is $24 off at Walmart right now

• Experts weigh in on Snowflake database MFA features

• Vulnerability Recap 7/15/24 – Industry Patches vs Flaw Exploits

• Google’s Kurian approached Wiz, $23B deal could take a week to land, source says

• US Senators Secretly Work to Block Safeguards Against Surveillance Abuse

• Kaspersky Lab Closing U.S. Division; Laying Off Workers

• With Security Teams Understaffed, Here’s How to Maintain a Solid Posture

• This gadget can help you drive safer and save money, and now its 20% off

• Amazon Prime Day 2024: Live updates on 90+ hottest Prime Day deals

• The RayNeo Air 2 XR glasses are 31% off with this Prime Day deal

• DJI made a rugged power station that I can’t recommend enough to drone users, and now get $400 off

• The 35+ best Prime Day deals under $50

• Over 4000 Domains Used By FIN7 Actors Mimic Popular Brands

• USENIX Security ’23 – Back to School: On the (In)Security of Academic VPNs

• What Happens When Scammers Get Their Hands on Artificial Intelligence?

• Randall Munroe’s XKCD ‘Number Line Branch’

• The 35+ best Prime Day 2024 Nintendo deals

• Maintaining Digital Compliance with the PCI DSS 4.0

• Hacking Scientific Citations

• Malvertising Campaign Lures Mac Users with Fake Microsoft Teams Ad

• New Hacking Method: Akami DNS Data Exfiltration

• Vulnerability Summary for the Week of July 8, 2024

• GitHub Token Leak Exposes Python’s Core Repositories to Potential Attacks

• CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth

• Trump Media Shares Rally After Assassination Attempt

• The 30+ best Prime Day 2024 tablet deals

• My EcoFlow go-to home backup system is $1,300 off for Prime Day

• The 12 best Amazon Prime Day laptop deals we’ve found

• Get Apple’s latest MacBook Air M3 for its lowest price yet ahead of Prime Day

• CRYSTALRAY Cyber-Attacks Grow Tenfold Using OSS Tools

• Google Alphabet to acquire Cybersecurity business Wiz for $23 billion

• How an AI “artist” stole a woman’s face, with Ali Diamond (Lock and Code S05E15)

• Linux kernel 6.10 officially rolls out: Here’s what’s new and improved

• Sign up for a Costco membership and get a free $40 gift card – here’s how

• The 22 best Prime Day 2024 Fire TV deals

• Why Apple’s $17 EarPods with USB-C are my impulse purchase on Prime Day

• Amazon Prime Day 2024: Live updates on 85+ hottest Prime Day deals

• Healthcare Industry Under Siege: Latest String of Ransomware Attacks Renews Emphasis on Cybersecurity Defenses

• Patterns for consuming custom log sources in Amazon Security Lake

• This awesome DeWalt cordless drill and impact driver set is 42% off for Prime Day

• Researchers: Weak Security Defaults Enabled Squarespace Domains Hijacks

• CISA Adds One Known Exploited Vulnerability to Catalog

• WP Time Capsule Plugin Update Urged After Critical Security Flaw

• CVE-2024-38112: Void Banshee Targets Windows Users Through Zombie Internet Explorer in Zero-Day Attacks

• New Data-Stealing Poco RAT Campaign Targeting Spanish Speakers

• Disney “breached”, data dumped online

• The 31 best Amazon Prime Day Apple deals

• The 30+ best Prime Day 2024 deals under $25

• Amazon Prime Day 2024: Live updates on the 85+ hottest Prime Day deals so far

• One of the best podcasting microphones I’ve tested is not made by Yeti or Rode

• Forget Prime Day: These 50+ Walmart deals are even better

• ZDI shames Microsoft for – yet another – coordinated vulnerability disclosure snafu

• Unveiling the Mule Accounts Menace in Modern Money Laundering

• Raman Research Institute’s Breakthrough in Quantum Cybersecurity

• AI Minefield: Risks of Gen AI in Your Personal Sphere

• Penetration Testing for Beginners: A Step-By-Step Guide

• How can enterprises enhance object storage security?

• Data of Millions of mSpy Customers Leaked Online

• Phishing Kit FishXProxy Equips Online Criminals for Success

• Microsoft Faces Criticism Over Data Breach Notification Emails

• Scaling Up Malware Analysis with Gemini 1.5 Flash

• Cybersecurity crisis communication: What to do

• The 35 best Prime Day 2024 deals we’ve found

• The 10 best Prime Day 2024 kitchen appliance deals

• Sick of Windows or MacOS? You should check out this free, easy-to-use alternative

• Amazon Prime Day 2024: Live updates on the 80+ hottest Prime Day deals so far

• The 25+ best Prime Day deals under $50

• Infoseccers claim Squarespace migration linked to DNS hijackings at Web3 firms

• AuditBoard’s self-assessment tools allow audit teams to maintain focus on their critical work

• Securing APIs While Navigating Today?s Booming API Economy

• The Critical Intersection Between AI and Identity Management

• Crypto Scammer Returns $9.27 Million Out of $24M Crypto Theft

• Celebrating World Youth Skills Day: The Vital Role of Cyber Security in Early Career Development

• Yubico and Straxis enable secure access to protected DOD websites and services

• AWS renews TISAX certification (Information with Very High Protection Needs (AL3)) across 19 regions

• Best Practices for Managing and Scaling Generative AI

• Olympic Gold at Risk: AI Cybercriminals Target 2024 Games.

• Vulnerability In Modern Events Calendar WordPress Plugin Actively Exploited

• HardBit ransomware version 4.0 supports new obfuscation techniques

• Attackers Exploit URL Protections to Disguise Phishing Links

• Critical Cellopoint Secure Email Gateway Flaw Let Attackers Execute Arbitrary Code

• The best Prime Day Samsung phone deals

• Global tech innovation initiative unlocks Singapore as key growth market for international startups

• Zeus Banking Malware Player Gets Nine-Year Prison Term

• Ukrainian Sentenced to Prison in US for Role in Zeus, IcedID Malware Operations

• Industry Moves for the week of July 15, 2024 – SecurityWeek

• Microsoft Says Windows Not Impacted by regreSSHion as Second OpenSSH Bug Is Found

• 600 Cybercrime Servers Linked To Cobalt Strike Shutdown

• Debian 12.6 Released with 84 Security Updates and 162 Bug Fixes

• BlueVoyant Cyber Defense Platform helps organizations reduce cyber risk

• Critical Exim vulnerability facilitates malware delivery (CVE-2024-39929)

• CRYSTALRAY Hackers Infect Over 1,500 Victims Using Network Mapping Tool

• 10,000 Victims a Day: Infostealer Garden of Low-Hanging Fruit

• Match Systems’ CEO Andrei Kutin Provides Insight on DMM Bitcoin Breach

• What Is Cloud Penetration Testing & Why Is It Important?

• Netgear Warns Users to Patch Auth Bypass, XSS Router Flaws

• Apple Vision Pro Launches In Europe Amidst Sluggish Sales

• MuddyWater Threat Group Deploys New BugSleep Backdoor

• How to Spot a Phishing Email Attempt

• Encryption Policy

• How to Become an Expert at SELinux

• Palo Alto Networks Fixed a Critical Bug in the Expedition Tool

• Google Reportedly in Talks to Acquire Cloud Security Company Wiz for $23B

• Revolutionizing SOC Automation with Large Language Models

• 5 Tips for Spotting and Avoiding Pig Butchering Scams

• Cybersecurity News: Rite Aid breach, AT&T breach implications, CDK paid ransom

• AT&T Cloud Hack Part Of Ongoing Campaign, Experts Say

• X Plans To Challenge EU DSA Breach Findings

• India Regulator Finds Apple App Store Breaches Competition Law

• The 28 best Amazon Prime Day Apple deals

• The Cybersecurity Maelstrom of 2024: A Dizzying Dance of Threats and Defenses

• White House Calls for Defending Critical Infrastructure

• Signal Downplays Encryption Key Flaw, Fixes it After X Drama

• Pharmacy Giant Rite Aid Hit By Ransomware

• Latest CapraRAT Android Spyware Campaign Targets Gamers, TikTokers

• ProfileGrid WordPress Plugin Vulnerability Could Allow Admin Access

• Google Announced 5x Raise In Its Bug Bounty Program Rewards

• Hackers Exploited Windows MSHTML Vulnerability For Over A Year

• Addressing Client-Side Risks in PCI DSS 4.0

• CISA Urges Software Makers to Eliminate OS Command Injection Flaws

• Authy Breach: What It Means for You, RockYou 2024 Password Leak

• Honor Launches ‘World’s Slimmest’ Foldable AI Smartphone

• Tesla Delays Robotaxi Event To October

• SpaceX Falcon 9 Rocket Explodes In Orbit

• GuardZoo Android Malware Attacking military personnel via WhatsApp To Steal Sensitive Data

• Singapore Banks to Phase out OTPs for Bank Account Logins Within 3 Months

• A week in security (July 8 – July 14)

• Several DOD IT Programs Still Don’t Have a Cyber Strategy, Watchdog Finds

• Singapore Banks to Phase Out OTPs for Online Logins Within 3 Months

• Google Lines Up $23bn Swoop For Startup Wiz Security

• Malicious NuGet Campaign Tricking Developers To Inject Malicious Code

• ViperSoftX Weaponizing AutoIt & CLR For Stealthy PowerShell Execution

• Akira Ransomware Attacking Airline Industry With Legitimate Tools

• ClickFix Deception: A Social Engineering Tactic to Deploy Malware

• Exein Raised $16.3 Million Series B to Stop Robotic Arms Going Haywire

• Threat Actor Claiming Breach of Coingecko Database, 1.9M Email Address

• Beware Of Weaponized EBooks That Deliver AsyncRAT

• DarkGate Malware Exploiting Excel Files And SMB File Shares

• Credential-Stealing OSS ‘Crystalray’ Attacks Jump 10X

• White House to Require Increased Cybersecurity Protocols for R&D Institutions

• Details of AT&T data breach and 1TB data steal belonging to Disney

• The Growing Cyber Threat to Weather Predictions

• New HardBit Ransomware 4.0 Uses Passphrase Protection to Evade Detection

• Protected OOXML Spreadsheets, (Mon, Jul 15th)

• Dark Gate malware campaign uses Samba file shares

• Google reportedly in talks to buy infosec outfit Wiz for $23 billion

• Risk related to non-human identities: Believe the hype, reject the FUD

• Realm: Open-source adversary emulation framework

• Discover the growing threats to data security

• Pressure mounts for C-Suite executives to implement GenAI solutions

• Encrypted traffic: A double-edged sword for network defenders

• How to clear the cache on your TV (and why you should)

• ISC Stormcast For Monday, July 15th, 2024 https://isc.sans.edu/podcastdetail/9052, (Mon, Jul 15th)

• I spy another mSpy breach: Millions more stalkerware buyers exposed

• Platforms Have First Amendment Right to Curate Speech, As We’ve Long Argued, Supreme Court Said, But Sends Laws Back to Lower Court To Decide If That Applies To Other Functions Like Messaging

• UK cyber-boss slams China’s bug-hoarding laws

• Platforms Have First Amendment Right to Curate Speech, As We’ve Long Argued, Supreme Court Said Without Addressing Whether That Applies to Other Services Like Messaging

• Google Nears $23 Billion Purchase Of Wiz: Reports

• The best early Prime Day 2024 deals so far

• This luxury ‘smart’ nugget ice maker is on sale for $464 for Prime Day – and it’s worth it

• IT Security News Weekly Summary – Week 28

• IT Security News Daily Summary 2024-07-14

• Amazon Prime Day 2024: Live updates on the 50+ hottest Prime Day deals so far

• How to tell if your online accounts have been hacked

• Google in Advanced Talks to Buy Wiz for $23B: WSJ Report

• AT&T Paid a Hacker $370,000 to Delete Stolen Phone Records

• Data Breach Exposes Millions of mSpy Spyware Customers

• Debunking Common Myths About VPNs

• Google reportedly in talks to acquire cloud security company Wiz for $23B

• Security Affairs Malware Newsletter – Round 2

• USENIX Security ’23 – Bypassing Tunnels: Leaking VPN Client Traffic by Abusing Routing Tables

• Security Affairs newsletter Round 480 by Pierluigi Paganini – INTERNATIONAL EDITION

• Upcoming Speaking Engagements

• Apple Alerts Pegasus-like Attack on Indian Activists and Leaders

• Akira Ransomware: The Need for Rapid Response

• Cyber Criminals Siphoned ‘Almost All’ of AT&T’s Call Logs Over Six Months

• Major Ransomware Attack Targets Evolve Bank, Impacting Millions

• Amazon Prime Day 2024: Live updates on the hottest Prime Day deals so far

• This awesome DeWalt cordless drill and impact driver set is over 42% off on Amazon right now

• Learn a new language with 76% off a Babbel subscription right now

• Guarding Gold: Cybersecurity Challenges Ahead of the Paris Olympics

• Tech leaders offer support, well wishes for Trump following shock assassination attempt

• A Costco membership comes with a free $40 gift card right now – here’s how to sign up

• The Role of Human Error in Data Spillage Incidents

• Get Microsoft Office 2021 for Windows for $40 – lowest price of the year

• Wireshark 4.2.6 Released, (Sun, Jul 14th)

• Samsung Galaxy Z Flip 6 hands-on: The foldable most people should buy gets one key upgrade

• 22 of the best early Prime Day deals on the weirdest tech we could find

• Get a 5-year subscription to AdGuard VPN for $35

• Week in review: RADIUS protocol critical vuln, Microsoft 0-day exploited for a year, AT&T breach

• This Sony Bravia is one of the best-kept secrets in TVs – and it’s on sale for Prime Day

• My favorite Dyson cordless vacuum is $150 off with this Walmart deal – better than Prime Day

Generated on 2024-07-15 23:55:11.645558