IT Security News Daily Summary 2024-07-24

• NCSWIC’s Planning, Training, and Exercise Committee releases “Set Your PACE Plan” Flyer

• Buy Microsoft Project Pro or Microsoft Visio Pro for $20 right now

• U.S. CISA adds Microsoft Internet Explorer and Twilio Authy bugs to its Known Exploited Vulnerabilities catalog

• Oops. Apple relied on bad code while flaming Google Chrome’s Topics ad tech

• KnowBe4 Unknowingly Hired Fake North Korean IT Worker

• Learn a new language with a Babbel subscription for 76% off right now

• Are You Configured for Failure?

• KnowBe4 Unknowingly Hires Fake North Korean IT Worker

• How Behavioral Biometrics Enhances Fraud Prevention

• The future of work: How Salesforce and Workday’s AI alliance will transform your office

• Meta Quest 3 is getting AI before Apple’s Vision Pro does – here’s how to enable it

• The best external hard drives of 2024: Expert tested

• How my 4 favorite AI tools help me get more done at work

• Zero Trust in the Age of AI: Join our online event to learn how to strengthen your security posture

• Telcos given extra time to retire 3G networks

• Sign up for a Costco membership and get a $40 gift card, free. Here’s how

• Congratulations to the Top MSRC 2024 Q2 Security Researchers!

• I tested the 3 best VPNs for streaming ahead of the Summer Olympics

• How to watch the 2024 Summer Olympics: Every streaming option

• Upgrade to Windows 11 Pro for $25 right now

• Meet Stability AI’s Stable Video 4D, a nuanced take on AI video generation

• AT&T data breach: What’s next for affected customers?

• KnowBe4 catches North Korean hacker posing as IT employee

• Zest Security Aims to Resolve, Not Just Mitigate Cloud Risks

• NHS Staff Say New Tech Will Treat Extra 18.6 Million Patients A Year

• SAFECOM and NCSWIC Publish Fall 2023 Joint SAFECOM-NCSWIC Bi-Annual Meeting Executive Summaries

• The best MagSafe battery packs of 2024: Expert tested and reviewed

• How to enable Slack notifications on your Apple Watch

• Building cyber-resilience: Lessons learned from the CrowdStrike incident

• TracFone will pay $16 million to settle FCC data breach investigation

• One of the best E Ink tablets I’ve tested is not a ReMarkable or Kindle Paperwhite

• The best portable jump starters of 2024: Expert recommended

• 10 social media scams and how to avoid them

• LA County Superior Court Hit by Ransomware Attack

• Alphabet Q2 Beats Expectations, But Shares Dip

• This versatile Dell laptop surprised me with 3 standout features

• The best headphones for working out: Expert tested and reviewed

• OpenAI’s budget GPT-4o mini model is now cheaper to fine-tune, too

• F5: AI Applications Will Complicate ‘Unsustainable’ Hybrid Multicloud Sprawl in Australia

• Uncle Sam opens probe into CrowdStrike turbulence at Delta Air Lines

• ASP.NET Core Web Apps

• This AI-powered Linux terminal app can help you learn how to use commands

• Summer Olympics: What IT Teams Need to Do Before & During the Event for Their Businesses

• Is GhostEmperor Back? Sygnia Finds Clues in Recent Cyber Incident

• State-Sponsored Cyber Threats: Daggerfly’s Upgraded Malware Toolkit

• Canada’s Oil and Gas Sector Faces Rising Cybersecurity Threats Amid Digital Transformation

• KnowBe4 targeted by North Korea with Insider Threat

• How Amazon can turn around its failing Alexa business in 4 steps

• One of the best work laptops I’ve tested is not a Lenovo ThinkPad or MacBook

• The best Kindle readers of 2024: Expert tested and reviewed

• 7 Best Business Antivirus Software Solutions in 2024

• ISC Releases Security Advisories for BIND 9

• CrowdStrike offers a $10 apology gift card to say sorry for outage

• OT/ICS and IoT Incident Response Plan

• AI Surveillance at Paris Olympics Raise Privacy Concerns

• Smishing Exposed How to Recognize Report and Prevent Text Message Scams

• Google Cancels Plan To Axe Third Party Cookies For Chrome Browser

• I can’t travel without this Anker GaN wall charger. Here’s why you shouldn’t either

• CrowdStrike: Buggy Validator Started Massive Outage

• Robot Dog Internet Jammer

• The best radar detectors: Expert recommended

• The sub-$50 earbuds I recommend most aren’t by Bose or Sony

• The best drones of 2024: Expert tested and reviewed

• Windows Patch Tuesday update might send a user to the BitLocker recovery screen

• 12 top contact center platforms of 2024

• Organizations Warned of Exploited Twilio Authy Vulnerability

• Meta Releases Open Source Llama 3.1 AI Model

• ShadowRoot Ransomware Attacking Organizations With Weaponized PDF Documents

• This Sony Bravia is my No. 1 most recommended TV right now – and it would be great to watch the Olympics

• The best self-cleaning litter boxes of 2024: Expert tested

• The best large tablets of 2024: Expert tested and reviewed

• Slack now offers four iPhone widgets – here’s how you can use them

• One of Samsung’s best TVs of all time is on sale and would be a great TV for the Olympics

• Mimecast Announces Acquisition of Code42, Expands Human Risk Management Platform with Visibility into Insider Threats

• Network of ghost GitHub accounts successfully distributes malware

• Indian Firm Linked to Fake DMCA Notices Silencing Journalists

• BlueStacks Emulator For Windows Flaw Exposes Millions Of Gamers To Attack

• Chinese Hackers Using Shared Framework To Create Multi-Platform Malware

• Beware Of Malicious Python Packages That Steal Users Sensitive Data

• 250 Million Hamster Kombat Players Targeted Via Android And Windows Malware

• BreachForumsV1 Database Leaked: Private messages, Emails & IP Exposed

• The best iPad keyboard cases of 2024: Expert tested and reviewed

• 7 password rules to live by in 2024, according to security experts

• The best digital notebooks you can buy in 2024: Expert tested and reviewed

• Risk & Repeat: Faulty CrowdStrike update causes global outage

• Two Vulnerabilities Discovered in LangChain GenAI Framework

• CISOs, CIOs Struggle with Data Protection Challenges in AI, Cloud Era

• Vanta raises $150 million accelerate its AI product innovation

• Crisis communication: What NOT to do

• Data pilfered from Pentagon IT supplier Leidos

• Cybersecurity Startup Protexxa Closes $10M Series A Round

• U.S. Government Escalates Sanctions to Combat Rising Cybersecurity Threats

• CrowdStrike Shares How a Rapid Response Content Update Caused Global Outage

• Google Chrome 127 Released with a fix for 24 Security Vulnerabilities

• Check Point Research Reveals Q2 2024 Brand Phishing Trends: Microsoft Tops List While New Entries Signal Shifting Threat Landscape

• 3 ways Meta’s Llama 3.1 is an advance for Gen AI

• Credit Karma unveils updated AI tools to help you better understand your finances

• Philippines to End Online Casinos, Maybe Scams Too

• Malware Campaigns Target Hamster Kombat Players

• Verizon Subsidiary Settles With FCC for $16M Over Three Data Breaches

• CrowdStrike Admits it Doesn’t ‘Canary’ Test all Updates

• Optimizing Security Operations with DirectDefense

• Russia-Linked Brute-Force Campaign Targets EU via Microsoft Infrastructure

• DeFi Crypto Exchange dYdX v3 Website Hacked in DNS Hijacking Attack

• How the Newest Tech Changes Cybersecurity Needs in the Legal Industry

• Microsoft Account Security Alert Email: Recognize the Scam

• CrowdStrike blames buggy testing software for disastrous update

• Wiz Rejects $23 Billion Acquisition Bid From Google – Report

• The best electric screwdrivers of 2024: Expert tested and reviewed

• A Hacker ‘Ghost’ Network Is Quietly Spreading Malware on GitHub

• Dazz snaps up $50M for AI-based, automated cloud security remediation

• How a Trust Center Solves Your Security Questionnaire Problem

• Researchers Detail on How Defenders Eliminate Detection Gaps in AWS Environments

• Report: HHS Needs to Beef up Cloud Security and Skills

• Fake CrowdStrike Repair Manual Pushes New Infostealer Malware

• CrowdStrike Explains Why Bad Update Was Not Properly Tested

• Coalfire announces Cyber Security On-Demand portfolio

• Extracting Value from Your Investment in AI

• Microsoft Blames 2009 EU Agreement For World’s Biggest IT Outage

• Windows SmartScreen Flaw Enabling Data Theft in Major Stealer Attack

• The Hidden Menace of Phantom Attackers on GitHub by Stargazers Ghost Network

• Private Internet Access (PIA) vs NordVPN: Which VPN Is Better?

• This Machine Exposes Privacy Violations

• China-linked APT group uses new Macma macOS backdoor version

• Chinese Espionage Group Upgrades Malware Arsenal to Target All Major Operating Systems

• Patchwork Hackers Target Bhutan with Advanced Brute Ratel C4 Tool

• How to Reduce SaaS Spend and Risk Without Impacting Productivity

• Accelerating Analysis When It Matters

• 10 Ways AI Can Help Organizations Tackle Cyberattacks

• Drone Usage Policy

• Alphabet’s Reported $23B Bet on Wiz Fizzles Out

• Critical Exim Vulnerability Threatens Millions of Email Servers

• North Korean Hackers Targeted Cybersecurity Firm KnowBe4 with Fake IT Worker

• Cybersecurity News: Wiz deal crumbles, CrowdStrike aftermath, dYdX exchange hack

• A (somewhat) complete timeline of Talos’ history

• The Power and Peril of RMM Tools

• Infostealer Campaign Exploits Microsoft Windows SmartScreen Flaw to Spread Payloads

• Craxel Black Forest Reaper boosts cyber defense for organizations

• British politicians show exactly what NOT to do online

• Possible APT28-linked Hackers Target Ukraine’s Scientific Institutions

• Permit Share-If enables developers to implement secure collaboration features into their apps

• CrowdStrike Explains Friday Incident Crashing Millions of Windows Devices

• Pentagon IT Service Provider Hacked: U.S. Government Secrets Exposed

• The Dual Impact of AI on Power Grids: Efficiency and Vulnerability

• Chinese ‘Cybercrime Syndicate’ Behind Gambling Sites Advertised at European Sporting Events

• Google Abandons Plan to Drop Third-Party Cookies in Chrome

• School gets an F for using facial recognition on kids in canteen

• Cyber Insurance Market Evolves as Threat Landscape Changes

• Emulating and Detecting Scattered Spider-like Attacks

• SocGholish: Fake update puts visitors at risk

• Verizon to Pay $16 Million in TracFone Data Breach Settlement

• Why SPRS Matters and 4 Steps to Improve Your Security Posture

• GitGuardian’s tool helps companies discover developer leaks on GitHub

• Google Criticized for Abandoning Cookie Phase-Out

• The Value in Root Cause Analysis for Vulnerability Management

• BreachForums v1 database leak is an OPSEC test for hackers

• Spanish Police Arrest Three Suspects Linked to Pro-Moscow NoName057(16) Hackers

• “Mouse Logger” Malicious Python Script, (Wed, Jul 24th)

• CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List

• Microsoft Defender Flaw Exploited to Deliver ACR, Lumma, and Meduza Stealers

• Forget security – Google’s reCAPTCHA v2 is exploiting users for profit

• Ransomware attack shuts down Superior Court of Los Angeles County

• How a business can attain Cyber Resilience in digital era

• CrowdStrike CEO is summoned before the Homeland Security committee. Cyber Security Today for Wednesday, July 24, 2023

• Chinese Hackers Target Taiwan and U.S. NGO with MgBot and MACMA Malware

• CrowdStrike blames a test software bug for that giant global mess it made

• Security biz KnowBe4 hired fake North Korean techie, who got straight to work … on evil

• Cybersecurity ROI: Top metrics and KPIs

• Cybersecurity jobs available right now: July 24, 2024

• Infisical: Open-source secret management platform

• AI accelerates code development faster than security teams can keep up

• Most Airlines Except One Are Recovering From the CrowdStrike Tech Outage. The Feds Have Noticed

• ISC Stormcast For Wednesday, July 24th, 2024 https://isc.sans.edu/podcastdetail/9066, (Wed, Jul 24th)

• Philippines wipes out its legit online gambling industry to take down scammers

• AI arms race escalates: OpenAI offers free GPT-4o Mini fine-tuning to counter Meta’s Llama 3.1 release

• How did a CrowdStrike config file crash millions of Windows computers? We take a closer look at the code

• How Disney and Marvel designed a Vision Pro multiverse with you as its hero

• FrostyGoop ICS malware targets Ukraine

• Vendor Risk Management from the Inside Out

• Eclypsium @ Black Hat

• Eclypsium for Data Centers

• IT Security News Daily Summary 2024-07-23

• Yann LeCun says Meta AI ‘quickly becoming most used’ assistant, challenging OpenAI’s dominance

• How Pearson’s AI assistant can help teachers save time

• Intro: How to use BlackArch Linux for pen testing

• Get a Microsoft Visual Studio Pro license for 90% off

• The best 50-inch TVs of 2024: Expert recommended

• Buy a one-year subscription to Microsoft 365 for $45 right now

• The best sleep trackers of 2024: Expert tested and reviewed

• Cisco and social justice: A commitment with deep roots and a bold future

• How did a CrowdStrike config file crash millions of Windows computers? We take a closer look

• The Ninja Creami Ice Cream Maker is still $32 off after Prime Day

• Microsoft Copilot vs. Copilot Pro: Is the subscription fee worth it?

• The best robot mops for 2024: Expert tested and reviewed

• Buy Microsoft Office 2021 for Windows for $60

• The best rugged phones of 2024: Expert tested and reviewed

• You can still buy an iPhone 15 for one cent after Prime Day – here’s how the deal works

• Phish-Friendly Domain Registry “.top” Put on Notice

• Empower Your Developers with Software Supply Chain Security

• Deep Sea Phishing Pt. 1

• What You Need to Know About SEC Compliance Requirements

• MFA Failures and Surging Ransomware Losses: What’s Going On?

• The best robot mowers of 2024: Expert tested and reviewed

• Motorola’s $399 Razr is the cheapest foldable phone deal right now (and it’s surprisingly good)

• Samsung Galaxy Z Fold 6 vs. OnePlus Open: I’ve tested both and the winner is not so obvious

• The best robot vacuums for pet hair of 2024: Expert tested and reviewed

• Become a Sam’s Club member for $25 – that’s 50% off

• I replaced my Samsung Galaxy S24 Ultra with the Z Fold 6 for a week – and can’t go back

• The best Roborock vacuums of 2024: Expert tested and reviewed

• Mass layoffs and data breaches could be connected

• Canadian Startup Protexxa Attracts $10 Million Series A Financing

• OpenAI shares safety updates after whistleblower complaints, lawmaker demands

• Change this Android setting to instantly give your phone twice the speed

• The best robot vacuum mops of 2024: Expert tested and reviewed

• QR Codes: Convenience or Cyberthreat?

• Play Ransomware Variant Targeting Linux ESXi Environments

• Copilot Pro vs. ChatGPT Plus: Which AI chatbot is worth your $20 a month?

• The best iPhone power banks of 2024: Expert tested and reviewed

• Linux Mint 22 is official! Here’s what’s new and how to try it for yourself

• This stereo amp made me feel like I was hearing my favorite songs for the first time

• Meta inches toward open source AI with new LLaMA 3.1

• Hackers abused swap files in e-skimming attacks on Magento sites

• Protecting AI systems from cyber threats

• Administrators have update lessons to learn from the CrowdStrike outage

• IRS Warns Car Dealers of New Phishing and Smishing Threats

• Whose Voice Is It Anyway? AI-Powered Voice Spoofing for Next-Gen Vishing Attacks

• Why NDR is Key to Cyber ‘Pest Control’

• Amazon revamps Prime Video to help you navigate your content and subscriptions

• Leaked Google TV Streamer photos show a device nothing like the Chromecast

• The best NAS devices of 2024: Expert tested

• The best power banks of 2024: Expert tested

• Cyber Security Public-Private Partnerships Are Taking Off in APAC

• Introducing Identity Continuity™: Uninterrupted access and security in an always-on world

• Strata Identity Announces General Availability of Identity Continuity for Zero Application Downtime During IDP Outages

• AppViewX AVX ONE CLM – Managing Java TrustStore with Google Cloud Platform

• H1 SCA Roundup – Defending Users Against Constantly Evolving Cyber Threats

• EFF Angry as Google Keeps 3rd-Party Cookies in Chrome

• New Exploit Variation Against D-Link NAS Devices (CVE-2024-3273), (Tue, Jul 23rd)

• Statement from CISA Director Easterly on Leadership Changes at CISA

• Play Ransomware targets VMware ESXi Servers

• Strengthening Cybersecurity in Healthcare

• Italy Investigates Google for Unfair Practices in Obtaining User Consent for Ad Profiling

• Google admits it can’t quite quit third-party cookies

• CISA Releases Four Industrial Control Systems Advisories

• National Instruments IO Trace

• National Instruments LabVIEW

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• Hitachi Energy AFS/AFR Series Products

• Imperva Customers Protected Against Critical ServiceNow Vulnerability

• Heimdal Integrates with Autotask PSA to Elevate MSP Operations and Drive Market Expansion

• How Cyber Risks Have Become Business Risks

• Cybercrooks spell trouble with typosquatting domains amid CrowdStrike crisis

• Google Will Keep Third-Party Cookies in Chrome

• Pro-Houthi Group Deploys Android Spyware to Target Yemeni Humanitarian Orgs

• How an IT Team Used Windows 3.1 to Mitigate a Massive CrowdStrike Outage

• Sensitive Health Data of 12.9 Million Individuals Stolen in Cyberattack

• iRobot just launched the most feature-packed Roomba ever – and it costs less than you think

• Microsoft scraps Copilot Pro GPT Builder and removes all user data

• Alphabet’s reported $23B bet on Wiz fizzles out

• LOKKER introduces web privacy risk summary for insurers

• Russia Shifts Cyber Focus to Battlefield Intelligence in Ukraine

• Chinese Espionage Group Upgrades Malware Arsenal to Target All Major OS

• How To Manage Alert Overload and Build the Skills of Your Security Team

• Study: TikTok Lite is a ‘safety hazard’ for millions of users around the world

• Standalone Service Mesh Solution or Lightweight Option: Which is Right for You?

• Mexico’s Largest ERP Provider ClickBalance Exposes 769 Million Records

• The best AI image generators of 2024: Tested and reviewed

• Ketch No-Code Rights Automation empowers non-technical teams to manage DSR requests

• Strata Identity Continuity prevents mission-critical applications from going offline

• Why MSSPs Should Transition from Fear-Based Sales Strategies to a Value-Centric Approach

• Switzerland now requires all government software to be open source

• SCW Trust Agent measures developers’ security competencies for code commits

• Chinese Hackers Target Taiwan and US NGO with MgBot Malware

• Hackers Abusing Google Cloud For Phishing

• Beware Of Dating Apps Exposing Your Personal And Location Details To Cyber Criminals

• Google backpedals on plan to eliminate third-party cookies in Chrome

• User Protection Suite Secures Against Talos Top Ransomware Attack Trends

• Striking a Chord Between My Passions and Career at Cisco

• Wiz Walks Away From $23 Billion Google Bid

• Supply Chain Cyberattacks are on the Rise – Here’s How U.S. Businesses can Fortify Their Defenses

• Shadow IT: The Unavoidable Reality and How To Embrace It Safely

• Security Challenges in AI-Powered Applications

• 5 Reasons IGA Programs Fail

• CrowdStrike Speeding Up Remediation of Systems Hit by Blue Screen of Death

• Navigating the Cyber Landscape: Understanding Threat Intelligence

• Popular Ukrainian Telegram Channels Hacked to Spread Russian Propaganda

• New ICS Malware ‘FrostyGoop’ Targeting Critical Infrastructure

• Price Drop: Get on CompTIA Certification Track With These $25 Study Guides

• Bitwarden vs Dashlane (2024): Which Password Manager Is Best?

• WPA2 vs. WPA3

• 2017 ODNI Memo on Kaspersky Labs

• CISOs and CIOs confront growing data protection challenges in the era of AI and cloud

• The changes in the cyber threat landscape in the last 12 months

• Privilege escalation: unravelling a novel cyber-attack technique

• Enhancing the cybersecurity talent pool is key to securing our digital future

• FrostyGoop Malware Used to Shut down Heat in Ukraine Attack

• Two Russian Nationals Charged for Cyber Attacks against U.S. Critical Infrastructure

• Law Enforcement Disrupts DDoS-for-Hire Service DigitalStress

• Ukrainian Institutions Targeted Using HATVIBE and CHERRYSPY Malware

• Meta Given Deadline to Address E.U. Concerns Over ‘Pay or Consent’ Model

• Magento Sites Targeted with Sneaky Credit Card Skimmer via Swap Files

• How to Securely Onboard New Employees Without Sharing Temporary Passwords

• Everyone Has a Zero-Trust Plan Until They Get Punched in the Face

• Vulnerabilities in LangChain Gen AI

• Hiring Kit: Security Architect

• How Russia-Linked Malware Cut Heat to 600 Ukrainian Buildings in Deep Winter

• 1-15 April 2024 Cyber Attacks Timeline

• Ransomware Takedowns Leave Criminals Scrambling for Stability

• Cybersecurity News: CrowdStrike update, Russian criminals sanctioned, ransomware shuts down courts

• Nvidia Said To Develop ‘Blackwell’ AI Chip For China

• Xiaomi Entered EV Market ‘Due To US Sanctions’

• Double-Digit Growth For Google Expected Amidst AI Push

• US Cracks Down On Tech Shipments To Russia

• Wisk Plans Autonomous Air Taxi Flights By Decade’s End

• Securing Diverse Environments: Security Configuration Management

• The Importance of Ethics in Cybersecurity

• Cursed tapes: Exploiting the EvilVideo vulnerability on Telegram for Android

• UK: NCA Infiltrates DDoS-for-Hire Site as Suspected Controller Arrested in Northern Ireland

• Vulnerability in Telegram app for Android allows sending malicious files disguised as videos

• How to Enhance Your System’s Security with Master Data Governance

• Dragos: New ICS malware FrostyGoop abuses Modbus

• Hackers shut down heating in Ukrainian city with malware, researchers say

• US Gov sanctioned key members of the Cyber Army of Russia Reborn hacktivists group

• Securing AI around the world

• Global Outage: What Went Wrong with Microsoft?

• Rezonate Streamlines Identity Security Across IT Environments

• Gcore raises $60 million to drive AI innovation

• Prolific DDoS Marketplace Shut Down by UK Law Enforcement

• Threat Actors Taking Advantage of CrowdStrike BSOD Bug to Deliver Malware

• Wiz to Pursue IPO as It Walks Away From $23 Billion Google Deal

• Solving the 7777 Botnet enigma: A cybersecurity quest

• NCA Shut’s Down the Most Popular “digitalstress” DDoS-for-hire Service

• From Smartphones to State Security: The Reach of China’s New Surveillance Laws

• 4 Ways BYOI and Social Login Enhance User Experience

• Play Ransomware’s Linux Variant Attacking VMware ESXi Servers

• Major Cyber Threats lurking at Paris Olympic Games 2024

• In Response to the Microsoft-CrowdStrike Incident: July 2024

• 5 Ways Generative AI is Revolutionizing Cybersecurity Defense

• The CISO’s approach to AI: Balancing transformation with trust

• Google Abandons Plan to Phase Out Third-Party Cookies in Chrome

• 10 fintech companies to watch in 2024

• Wiz walks away from Google’s $23B acquisition offer: Read the CEO’s note to employees

• Despite economic uncertainty, organizations are prioritizing SaaS security investments

• Confidential AI: Enabling secure processing of sensitive data

• Firmware, Supply Chain, and Frameworks – NIST SP 800-53

• ISC Stormcast For Tuesday, July 23rd, 2024 https://isc.sans.edu/podcastdetail/9064, (Tue, Jul 23rd)

• Google’s plan to drop third-party cookies in Chrome crumbles

Generated on 2024-07-24 23:55:12.806333