IT Security News Daily Summary 2024-07-20

• USENIX Security ’23 – Hash Gone Bad: Automated Discovery Of Protocol Attacks That Exploit Hash Function Weaknesses

• Unpacking how Alphabet’s rumored Wiz acquisition could affect VC

• Threat actors attempted to capitalize CrowdStrike incident

• Cybercriminals Exploit CrowdStrike Update Mishap to Distribute Remcos RAT Malware

• Microsoft says 8.5M Windows devices were affected by CrowdStrike outage

• Lazarus Hacking Group is Using Asian Firms to Launder Stolen Crypto

• The Financial Fallout of UnitedHealth’s Ransomware Attack

• AI for Identity Security: 5 Ways AI Augments SecOps and IAM Teams Today

• I tested the world’s smallest projector with Google TV, and it blew me away

• Upgrade to Windows 11 Pro for $23: Last chance for this all-time-low price

• Why Passkeys Are the Future of Digital Authentication

• Buy Microsoft Office for Windows or Mac for $40 right now

• CrowdStrike Provides Remediation Guidance After Software Update Causes Worldwide IT Chaos

• FIN7 Hacking Group Sells Custom Tool “AvNeutralizer” to Evade Endpoint Protectiono

• I love this DeWalt cordless drill and impact driver set, and you can get it for 30% off

• Why this versatile air pump is my new must-have for traveling (and it’s only $42)

• One of the most versatile power stations I’ve tested, and you can get a massive $450 off

• I can’t recommend this rugged power station enough to drone users, and it’s now $400 off

• Stop Chasing the AI Squirrel and Patch… Just Patch

• These 32 Prime Day impulse deals that are still available

• Finally, new Android update gives Gemini the lock screen feature we’ve all been hoping for

• The Feds Say These Are the Russian Hackers Who Attacked US Water Utilities

• Google Pixel Watch 3: Key specs, features, price, and everything else we know so far

• Get a Babbel subscription for 78% off – the lowest price of the year

• How Apple can rescue miserable Sonos users

• One of the best budget foldable phones I’ve tested is not a OnePlus or Samsung

• I tested JBL’s newest earbuds, and their best feature is also the most understated

• I torture-tested this $4,000 rugged laptop, and it gives the Dell Latitude a run for its money

• The Galaxy Watch Ultra convinced me to replace my Apple Watch in less than a week. Here’s why

• Several Linux Kernel Azure Vulnerabilities Fixed in Ubuntu

• Alarm Bells Ring in Germany Over Chinese Tech Advancements

• I tested Samsung’s new Copilot+ PC, and it stands out from the crowd in 3 major ways

• Update: Worldwide IT outage due to buggy Crowdstrike sensor configuration update

• The complexities of cybersecurity update processes

• Beyond the blue screen of death: Why software updates matter

• New Play Ransomware Linux Variant Targets ESXi Shows Ties With Prolific Puma

• OilAlpha Malicious Applications Target Humanitarian Aid Groups Operating in Yemen

• North Korean Hackers May Have Attacked Indian Crypto Exchange WazirX

• 17-Year-Old Linked to Scattered Spider Cybercrime Syndicate Arrested in U.K.

• CrowdStrike Says Logic Error Caused Windows BSOD Chaos

• Russian nationals plead guilty to participating in the LockBit ransomware group

• CrowdStrike’s IT outage makes it clear why cyber resilience matters

• Don’t Fall for CrowdStrike Outage Scams

• Judge Dismisses Most SEC Charges Against SolarWinds

• Don’t Fall for CrowdStrike Outage Scams

• UK cops arrest teen suspect in MGM Resorts cyberattack probe

• Understanding Your IT Dependencies: Unpacking the Crowdstrike Windows Outage

• UK cops arrest teen suspect in MGM cyberattack probe

• Researcher detects what could have been one of the largest supply chain vulnerabilities to date. Cyber Security Today Weekend for July 20th

• IT Security News Daily Summary 2024-07-19

• CrowdStrike outage: How your plane, train and automobile travel may be affected

• IDC Snapshot: Cloud Services Adoption Impacting Cybersecurity Strategy for European Leaders

• Judge Dismisses Major SEC Charges Against SolarWinds and CISO

• MediSecure data breach impacted 12.9 million individuals

• Microsoft Windows outage not a cyber attack says Crowdstrike

• The 15+ best Prime Day kitchen appliance deals still live: KitchenAid, Ninja, Cosori, and more

• The 40+ best Walmart anti-Prime day deals still available: Your final chance on sweet tech discounts

• CrowdStrike update at center of Windows “Blue Screen of Death” outage

• CISA Releases Playbook for Infrastructure Resilience Planning

• CISA Announces Key Leadership Appointments in Cybersecurity and Stakeholder Engagement

• How to protect port 139 from SMB attacks

• The 40+ best Prime Day 2024 deals under $25 still live

• Boardroom Focus: Communications Compliance

• CrowdStrike’s rivals stand to benefit from its debacle

• EFF Tells Minnesota Supreme Court to Strike Down Geofence Warrant As Fourth Circuit Court of Appeals Takes the Wrong Turn

• HUMAN Team Shuts Down Major Mobile Ad Fraud Scheme

• Number of data breach victims goes up 1,000%

• CrowdStrike file update bricks Windows machines around the world

• CrowdStrike Windows patchpocalypse could take weeks to fix, IT admins fear

• A Guide to Security Controls for Risk-Based API Protection

• Grab a portable LG speaker for up to 40% off right now

• How to find out if an AirTag is tracking you

• Why mobile security audits are important in the enterprise

• Major Outages Worldwide Caused by CrowdStrike Update

• The 50+ best Prime Day robot vacuum deals still around: Save on Roomba, Roborock, and more

• Samsung halts sales of Galaxy Buds 3 Pro because of quality problems

• The 25+ best Prime Day Fire TV deals still live: Save on Fire TV Stick, TCL, Insignia, and more

• Final hours: The Ninja Creami Ice Cream Maker is still $30 off after Prime Day

• The 15+ best Prime Day kitchen appliance deals still active: KitchenAid, Ninja, Cosori, & more

• Dark Web Shows Cybercriminals Ready for Olympics. Are You?

• Update: Worldwide IT outage due to buggy Crowdstrike update

• Apple’s iOS 18 beta and Amazon’s AI assistant top the Innovation Index

• Top 29 deals from Best Buy’s Black Friday in July sale to compete with Prime Day

• Widespread IT Outage Due to CrowdStrike Update

• Brett Solomon on Digital Rights

• 60 Million Users Exposed: The Pinterest Data Breach Explained

• Join Our Exclusive Webinar on Performance Tuning With OpenSSL

• Deal alert: You can still get the Apple AirPods Max headphones for $155 off after Prime Day

• The Apple 10th Gen iPad is just $299 as a post-Prime Day deal

• The 12 best Prime Day 2024 fitness tracker deals still available

• This $129 pen has spoiled every other writing utensil for me – and it’s still on sale after Prime Day

• Motorola’s $399 Razr is still the cheapest foldable phone deal after Prime Day

• CrowdStrike update epic fail crashed Windows systems worldwide

• Microsoft outage Windows not a cyber attack says Crowdstrike

• One of the best budget Android phones I’ve tested is not made by Motorola or Samsung

• One of Samsung’s best TVs of all time is still on sale after Prime Day

• How One Bad CrowdStrike Update Crashed the World’s Computers

• What we know about CrowdStrike’s update fail that’s causing global outages and travel chaos

• Here’s how the CrowdStrike outage is affecting planes, trains and automobiles

• From the Sphere to false cyberattack claims, misinformation runs rampant amid CrowdStrike outage

• Worldwide IT Outages: Cybersecurity Experts Weigh In

• Google Threat Horizon Analysis

• Learn a new language with over 50% off a lifetime subscription to Rosetta Stone

• The best anti-Prime Day deals still around: Best Buy, Walmart, Costco, and more

• The 65+ best Prime Day TV deals still live

• 9 settings I changed on my Windows 11 PC to maximize the battery life

• The 30+ best Prime Day phone deals still available for last-minute shoppers

• Defective CrowdStrike update triggers mass IT outage

• Global Microsoft Meltdown Tied to Bad Crowdstrike Update

• Dashlane vs 1Password (2024): Features & Pricing Compared

• Recent Splunk Enterprise Vulnerability Easy to Exploit: Security Firm

• SEXi Ransomware Rebrands to APT INC, Continues VMware ESXi Attacks

• New EDR Bypass Tool Advertised by FIN7 Hacking Group

• Sunburst: US Judge Dismisses Most SEC Charges Against SolarWinds

• Crowdstrike CEO ‘Deeply Sorry’ For Global IT Outage

• CrowdStrike Update Causes Havoc, Grounding Flights and Disrupting Businesses

• I can’t travel without this Anker charger, and its still 37% off after Prime Day

• The 40+ best Prime Day 2024 deals under $25 still available

• This Anker MagSafe charger beats Apple’s, and it’s a third of the price right now after Prime Day

• 96 hours with the Samsung Galaxy Watch Ultra later: Four things I like (and what can be better)

• CrowdStrike Outage Disrupts Microsoft Systems Worldwide

• Global Microsoft Meltdown Tied to Bad Crowstrike Update

• CoSAI: Tech Giants Form Coalition for Secure AI

• Vietnamese Hackers Target Indian Users with Fake WhatsApp E-Challan Messages

• Hackers Claiming Dettol Data Breach: 453,646 users Impacted

• Best DNS Software in 2024

• Larger Deals Propel Cybersecurity Funding to Two-Year High in Q2 2024

• CrowdStrike Software Update Sparks Microsoft Outage, Global Chaos

• Two Russian Nationals Plead Guilty in LockBit Ransomware Attacks

• Faulty CrowdStrike Update Crashes Windows Systems, Impacting Businesses Worldwide

• Akamai Early Hints: A New Way for Improving User Experience and Core Web Vitals

• OpenAI, Broadcom In Talks Over Development Of AI Chip – Report

• Empowering Women Through Mentoring: Meet Laura Hidalgo

• What is data privacy?

• Operation Spincaster Targets Crypto Pig-Butchering Scams

• Critical TE.0 HTTP Request Smuggling Vulnerability Impacts Thousands of Google Cloud-hosted Websites

• Critical Splunk Flaw can be Exploited to Grab Passwords

• Buy a Microsoft Visual Studio Pro license for 92% off

• Crowdstrike causes Windows outage chaos for airports, banks, and more. Here’s what you can do

• New Hacker Group Uses Open-Source Tools to Spy on Entities in Asia-Pacific Region

• Guardians of the Grid: Cyber-Secure Microgrids and the Future of Energy Resilience

• Faulty CrowdStrike update causes major global IT outage, taking out banks, airlines and businesses globally

• Majority of SEC Civil Fraud Case Against SolarWinds Dismissed, but Core Remains

• This 3-in-1 MagSafe dock will charge your Apple devices while keeping them cool

• This $28 ‘magic arm’ makes taking pictures so much easier

• My favorite Android phone can do things your iPhone 15 Pro Max can’t

• This rugged Blackview phone truly has it all

• 23 Prime Day impulse buys that are still available

• CrowdStrike update causes major IT outage, taking out banks, airlines and businesses globally

• Grype: Open-Source Vulnerability Scanner for Container Images, Filesystems

• Revolver Rabbit Gang Registers 500,000 Domains for Malware Campaigns

• MediSecure Data Breach Impacts 12.9 Million Individuals

• Cybersecurity News: Worldwide Windows outage, Fin7 sells malware, Synnovis blood shortage

• Microsoft’s Bug Reporting Criticized, Disney Hacked, and Kaspersky Exits US. Cyber Security Today Special Edition from Hashtag Trending

• Shokz OpenRun Pro are the best bone conduction headphones – and they’re on sale for Prime Day

• This Bluetooth dongle will diagnose your check engine light

• A handy thermal camera for your phone

• This is my favorite power bank for my MacBook Pro

• Safeguard Personal and Corporate Identities with Identity Intelligence

• Widespread Windows Crashes Due to Crowdstrike Updates, (Fri, Jul 19th)

• Microsoft Outage Impacts Airlines, Media, Banks & Businesses Globally

• Give your iPhone 15 thermal camera superpowers with this gadget

• Grab Microsoft Office 2021 for Windows for $40 – the lowest price of the year

• CrowdStrike update causes major IT outage, taking out banks, airlines and businesses across the world

• CISA Appoints New Cybersecurity, Stakeholder Group Leaders

• SolarWinds Patches Critical Vulnerabilities in Access Rights Manager

• Pro-Houthi Group Targets Yemen Aid Organizations with Android Spyware

• I love this DeWalt cordless drill and impact driver set, and it’s still 30% off after Prime Day

• Bluetti is still offering fantastic deals on its power stations – but not for long

• Exchange Online Adds Inbound DANE with DNSSEC for Security Boost

• New Malware Campaign Exploiting RDPWrapper and Tailscale Targets Cryptocurrency Users

• Juniper Networks Critical Security Update Released

• Streamline User Management with LDAP Integration for Linux

• Global Outage Outrage: CrowdStrike Security Tool Blamed

• CrowdStrike Update Triggers Widespread Windows BSOD Crashes

• CrowdStrike Disruptions – Ensuring Business Continuity

• Crowdstrike’s faulty update triggers global Windows blackout, disrupting critical operations

• $300,000 Offered for WhatsApp Exploit at Pwn2Own Ireland

• Worldwide Outages Caused by CrowdStrike Security Tool

• CrowdStrike Fault Causes Global IT Outages

• Cybersecurity News: Fin7 sells malware, Synnovis blood shortage, SAP AI flaws

• Huge Microsoft Outage Linked to CrowdStrike Takes Down Computers Around the World

• New Cyware Survey Reveals Critical Gaps in Cybersecurity Threat Intelligence Sharing and Collaboration

• Attacks on Israeli Orgs ‘More Than Doubled’ Since October 7, Cyber Researcher Says

• Importance of Vulnerability Assessment: Types and Methodology

• Forcepoint GenAI Security prevents unauthorized data sharing

• CrowdStrike Update Triggers Widespread Windows Crashes

• Major IT outage takes out banks, airlines and businesses across the world

• Cisco fixed a critical flaw in Security Email Gateway that could allow attackers to add root users

• Critical Cisco Bug Lets Hackers Add Root Users on SEG Devices

• Netskope extends risk management to OpenAI’s ChatGPT Enterprise

• Summary of “AI Leaders Spill Their Secrets” Webinar

• SolarWinds Fixes Eight Critical Bugs in Access Rights Audit Software

• Faulty CrowdStrike update takes out Windows machines worldwide

• SolarWinds Patches 11 Critical Flaws in Access Rights Manager Software

• APT41 Infiltrates Networks in Italy, Spain, Taiwan, Turkey, and the U.K.

• Instagram unveiled a new feature. Here’s how you can use it (and why you’ll want to)

• Play Ransomware Group’s New Linux Variant Targets ESXi, Shows Ties With Prolific Puma

• Operation Spincaster Disrupts Approval Phishing Technique that Drains Victim’s Wallets

• CrowdStrike code update bricking Windows machines around the world

• What Are the Benefits of Data Pseudonymization and Data Anonymization?

• France Ransomware warning to Paris Olympics 2024 and Brazil ban on Meta AI data usage

• North Korea likely behind takedown of Indian crypto exchange WazirX

• Beijing’s attack gang Volt Typhoon was a false flag inside job conspiracy: China

• Connect with Microsoft Security at Black Hat USA 2024​​

• WazirX Cryptocurrency Exchange Loses $230 Million in Major Security Breach

• One-third of dev professionals unfamiliar with secure coding practices

• GenAI network acceleration requires prior WAN optimization

• AT&T Data Breach: Understanding the Fallout

• CISOs must shift from tactical defense to strategic leadership

• New infosec products of the week: July 19, 2024

• ISC Stormcast For Friday, July 19th, 2024 https://isc.sans.edu/podcastdetail/9060, (Fri, Jul 19th)

• Capturing Exposed AWS Keys During Dynamic Web Application Tests

• Nation-States and Zero-days Cranking Up the Heat

• Google Cloud Security Threat Horizons Report #10 Is Out!

Generated on 2024-07-20 23:55:09.860719