IT Security News Daily Summary 2024-07-25

• Microsoft’s generative search engine weds something new, something old

• Join Our Webinar: Zero Trust and IAM – Building a Secure Future

• Learning from CrowdStrike’s Quality Assurance Failures

• Progress Software fixed critical RCE CVE-2024-6327 in the Telerik Report Server

• Google’s DeepMind AI takes home silver medal in complex math competition

• The best smartwatch for kids that I’ve tested is not an Apple Watch or Garmin

• OpenAI’s newly released GPT-4o mini dominates the Chatbot Arena. Here’s why.

• The best silent mouse of 2024: Expert tested and reviewed

• FYI: Data from deleted GitHub repos may not actually be deleted

• North Korean Charged in Ransomware Attacks on American Hospitals

• CCNA: What It Means to Me, What Awaits in Cisco U.

• Emulating the Prickly Cactus Ransomware

• Google, Microsoft, Others Support U.S.-Based Spyware Lawsuits

• OpenAI launches SearchGPT – here’s what it can do and how to access it

• An explanation of Flipper Zero

• The CrowdStrike Outage and Market-Driven Brittleness

• One of the most versatile video doorbells I’ve tested is not made by Ring or Nest

• Cyber travel scams: The biggest scams to be aware of when planning your next trip

• AI’s Rapid Code Development Outpaces Security Efforts

• The massive computer outage over the weekend was not a cyber attack, and I’m not sure why we have to keep saying that

• Amazon Developing Cheaper AI Chips – Report

• 5 reasons to work with the competition, according to business leaders

• Disney+, Hulu and Max streaming bundle is now available for almost 40% off

• Apple Smartphone Sales In China Drop 6.7 Percent, Canalys Finds

• 5 Linux commands for group management and how to use them

• How to install Windows 11 the way you want (and sneak by Microsoft’s restrictions)

• North Korean Hacker Group Targeting Healthcare, Energy Sectors

• ConfusedFunction: A Privilege Escalation Vulnerability Impacting GCP Cloud Functions

• Uncle Sam accuses telco IT pro of decade-long spying campaign for China

• Researchers Claim Anyone Can Access Deleted, Private GitHub Repository Data

• Chainguard Raises $140 Million, Expands Tech to Secure AI Workloads

• LangChain Gen AI Under Scrutiny Experts Discover Significant Flaws

• Meta Ordered To Clean Up AI-Generated Porn By Oversight Board

• Windows update may present users with a BitLocker recovery screen

• SEXi / APT Inc Ransomware – What You Need To Know

• Play Ransomware Group is Targeting VMWare ESXi Environments

• India’s Digital Rise Sees Alarming Surge in Online Scams Targeting the Elderly

• The best MP3 players of 2024

• I’m a diehard Pixel user, but I’m considering switching for 2 reasons (and I’m not alone)

• Skip the Apple Watch: Google’s Fitbit Ace LTE is the best smartwatch for your kids

• Google’s Gemini chatbot gets highly anticipated updates. Here’s what it means for you

• Critical bug in Docker Engine allowed attackers to bypass authorization plugins

• Comparative Analysis of Password Hashing Algorithms: Argon2, bcrypt, scrypt, and PBKDF2

• Ransomware shift from Cyber Espionage for North Korea

• One of the best foldable phones I’ve tested is not a OnePlus or Motorola

• Improving Data Center Energy Efficiency to Power the AI Revolution

• Cisco Partner Conversations: Delivering for our clients with NTT DATA

• [2024] 10 Qualys Alternatives That Should Be on Your Shortlist

• Life at Fortinet: The Various Career Pathways in Cybersecurity

• Critical Microsoft Zero-Day Vulnerability Exploited in the Wild for Over a Year

• Wordfence Intelligence Weekly WordPress Vulnerability Report (July 15, 2024 to July 21, 2024)

• The Essential Guide to Total Protection in Microsoft 365

• The Importance of Ethical Hacking in Cybersecurity

• Chinese SMS Phishing Group Hits iPhone Users in India Post Scam

• The best tablets of 2024: Expert tested and reviewed

• The best iPads of 2024: Expert tested and reviewed

• Join BJ’s Wholesale Club for $20 (reg. $55)

• Sophos XG vs Fortinet Fortigate: 2024 Firewall Comparison

• Siemens SICAM Products

• Positron Broadcast Signal Processor

• CISA Releases Two Industrial Control Systems Advisories

• Hacked, leaked, exposed: Why you should never use stalkerware apps

• Electronic Frontier Foundation to Present Annual EFF Awards to Carolina Botero, Connecting Humanity, and 404 Media

• North Korean Hackers Shift from Cyber Espionage to Ransomware Attacks

• What I learned from the ‘Microsoft global IT outage’

• Pilot VPC and Advanced NAT: Securely Connect Overlapping Networks to AWS VPC

• Forget Dyson: I tested Roborock’s wet-dry hand vacuum and it left my floors spotless

• This $45 mini screwdriver kit has a useful LED screen – and I highly recommend it

• Spotify wants you to get Deluxe, a more expensive version with lossless audio and other perks

• How technology is being used to help support environmental conservation

• E-rate Program Expanded, Plus Cisco Knowledge Hub Updates

• The Road to CTEM, Part 3: BAS vs. Other Validation Technologies

• Navigating Cybersecurity Legal Liabilities

• CrowdStrike Blames ‘Undetected Error’ For World’s Largest IT Outage

• Nexo Cements User Data Security with SOC 3 Assessment and SOC 2 Audit Renewal

• Threat Actors Claiming Leak of IOC list with 250M Data, CrowdStrike Responded

• Unveiling the latest banking trojan threats in LATAM

• How to turn on Private DNS Mode on Android – and what it can do for you

• Buy a 5-year subscription to AdGuard VPN for $40

• The best iPad Air cases of 2024: Expert tested

• We’ve entered the era of the smart ring. Here are 3 reasons why I couldn’t be more excited

• At the Olympics, AI Is Watching You

• TransparentTribe’s Spear-Phishing Targeting Indian Government Departments

• You should probably fix this 5-year-old critical Docker vuln fairly sharpish

• Ransomware and BEC Make Up 60% of Cyber Incidents

• Navigating Legal and Ethical Challenges in Web Scraping

• Google Chrome Warns of Malicious Files While Downloading

• Protecting Your Cloud Application Against Unknown Risks

• CrowdStrike outage explained: What caused it and what’s next

• AI Accelerates Code Development Faster Than Security Teams can Keep up

• BIND Updates Resolve High-Severity DoS Vulnerabilities

• Chainguard raises $140 million to strengthen open source software security

• Alphabet To Invest $5 Billion In Waymo Self-Driving Unit

• Data breach exposes US spyware maker behind Windows, Mac, Android and Chromebook malware

• Phishing Campaign Targeting Mobile Users in India Using India Post Lures

• Report: Malware Attacks Surge 30% in First Half of 2024

• Deep Dive: Unveiling the Untold Challenges of Single Sign-On (SSO) Management

• Faulty Software Update Shuts Down Critical Infrastructure, Highlighting Major Risks

• The best noise-canceling earbuds of 2024: Expert tested and reviewed

• Get Microsoft Office for Windows or Mac for $25 right now

• The best foldable phones of 2024: Expert tested and reviewed

• Apple Maps is now on the web – here’s how you can use it, and not just for directions

• ‘Stargazer Goblin’ Amasses Thousands of Rogue GitHub Accounts to Spread Malware

• 5 Echo Show settings to change to make your smart display less annoying

• Kaspersky says Uncle Sam snubbed proposal to open up its code for third-party review

• At The 2024 Summer Olympics, AI Is Watching You

• Pro-Palestinian Actor Levels Six-Day DDoS Attack on UAE Bank

• Vanta Raises $150M Series C, Now Valued at $2.45B

• Docker fixes critical auth bypass flaw, again (CVE-2024-41110)

• Microsoft’s Windows Hello for Business Flaw Let Attackers Bypass Authentication

• Data Wallets Using the Solid Protocol

• Major Russian Banks Hit with DDoS Attacks as Ukraine Claims Responsibility

• Lakera Raises $20 Million to Secure GenAI Applications

• Network of 3,000 GitHub Accounts Used for Malware Distribution

• Thawing Your Email Security Strategy with Frost’s 2024 Radar Report: A Dynamic Cyber Threat Landscape

• Meta Removes 63,000 Instagram Accounts Linked to Nigerian Sextortion Scams

• 6 Types of Applications Security Testing You Must Know About

• I spent a week with Samsung’s Galaxy Z Flip 6. Here’s what you should know before buying one

• EDR vs. SIEM: What’s the difference?

• Hackers exploit Microsoft Defender SmartScreen bug CVE-2024-21412 to deliver ACR, Lumma, and Meduza Stealers

• Infisical: Open-source secret management platform – Help Net Security

• APT45: North Korea’s Digital Military Machine

• Akira Ransomware Gang targets Split Airport of Croatia

• Revolut Gains UK Banking Licence

• Buy a Microsoft Visual Studio Pro license for 90% off

• Echoes of Braodo Tales from the Cyber Underworld

• Researchers Reveal ConfusedFunction Vulnerability in Google Cloud Platform

• Webinar: Securing the Modern Workspace: What Enterprises MUST Know about Enterprise Browser Security

• Cybersecurity Is a Communications Problem

• IR Trends: Ransomware on the rise, while technology becomes most targeted sector

• AI Tool Identifies BOLA Vulnerabilities in Easy!Appointments

• LummaC2 Malware Using Steam Gaming Platform as C2 Server

• Over Half of UK Workers Haven’t Received Training on Avoiding Phishing Scams

• Learning from CrowdStrike’s quality assurance failures

• Cybersecurity News: CrowdStrike details, Chrome keeps cookies, BreachForums leaked

• Google Boosts Chrome Protections Against Malicious Files

• Third-Party Cookies Stay: Google’s New Plan for Web Browsing Privacy

• CAST SBOM Manager automates creation and handling of SBOMs

• Malware Attacks Surge 30% in First Half of 2024

• Okta Browser Plugin Reflected Cross-Site Scripting CVE-2024-0981

• A Guide to Select the Best Operating System for NAS Data Recovery

• Most IT Leaders Say Severity of Cyber-Attacks has Increased

• Lakera raises $20 million to secure GenAI applications

• XWorm Hidden With Process Hollowing, (Thu, Jul 25th)

• Patch management still seemingly abysmal because no one wants the job

• BIND 9.20 released: Enhanced DNSSEC support, application infrastructure improvements

• Ukraine Hackers Hit Major Russian banks with DDoS attacks

• Condo.com – 1,481,555 breached accounts

• Hacker claims theft of Piramal Group’s employee data

• New Chrome Feature Scans Password-Protected Files for Malicious Content

• Critical Docker Engine Flaw Allows Attackers to Bypass Authorization Plugins

• How CISOs enable ITDR approach through the principle of least privilege

• Explore Talent – 5,371,574 breached accounts

• Cloud security threats CISOs need to know about

• Researchers expose GitHub Actions workflows as risky and exploitable

• The most urgent security risks for GenAI users are all data-related

• Briefing: Negotiating States Must Address Human Rights Risks in the Proposed UN Surveillance Treaty

• How a cheap barcode scanner helped fix CrowdStrike’d Windows PCs in a flash

• ISC Stormcast For Thursday, July 25th, 2024 https://isc.sans.edu/podcastdetail/9068, (Thu, Jul 25th)

• The months and days before and after CrowdStrike’s fatal Friday

• Cybersecurity Firm KnowBe4 Tricked into Hiring North Korean Hacker as IT Pro

• Michigan Medicine data breach impacted 56953 patients

• Journalists Sue Massachusetts TV Corporation Over Bogus YouTube Takedown Demands

• Fatal timeline of CrowdStrike’s week from hell – Feb to now

• Docker Patches Critical AuthZ Plugin Bypass Vulnerability Dating Back to 2018

• Nvidia’s latest AI offering could spark a custom model gold rush

• IT Security News Daily Summary 2024-07-24

• NCSWIC’s Planning, Training, and Exercise Committee releases “Set Your PACE Plan” Flyer

• Buy Microsoft Project Pro or Microsoft Visio Pro for $20 right now

• U.S. CISA adds Microsoft Internet Explorer and Twilio Authy bugs to its Known Exploited Vulnerabilities catalog

• Oops. Apple relied on bad code while flaming Google Chrome’s Topics ad tech

• KnowBe4 Unknowingly Hired Fake North Korean IT Worker

• Learn a new language with a Babbel subscription for 76% off right now

• Are You Configured for Failure?

• KnowBe4 Unknowingly Hires Fake North Korean IT Worker

• How Behavioral Biometrics Enhances Fraud Prevention

• The future of work: How Salesforce and Workday’s AI alliance will transform your office

• Meta Quest 3 is getting AI before Apple’s Vision Pro does – here’s how to enable it

• The best external hard drives of 2024: Expert tested

• How my 4 favorite AI tools help me get more done at work

• Zero Trust in the Age of AI: Join our online event to learn how to strengthen your security posture

• Telcos given extra time to retire 3G networks

• Sign up for a Costco membership and get a $40 gift card, free. Here’s how

• Congratulations to the Top MSRC 2024 Q2 Security Researchers!

• I tested the 3 best VPNs for streaming ahead of the Summer Olympics

• How to watch the 2024 Summer Olympics: Every streaming option

• Upgrade to Windows 11 Pro for $25 right now

• Meet Stability AI’s Stable Video 4D, a nuanced take on AI video generation

• AT&T data breach: What’s next for affected customers?

• KnowBe4 catches North Korean hacker posing as IT employee

• Zest Security Aims to Resolve, Not Just Mitigate Cloud Risks

• NHS Staff Say New Tech Will Treat Extra 18.6 Million Patients A Year

• SAFECOM and NCSWIC Publish Fall 2023 Joint SAFECOM-NCSWIC Bi-Annual Meeting Executive Summaries

• The best MagSafe battery packs of 2024: Expert tested and reviewed

• How to enable Slack notifications on your Apple Watch

• Building cyber-resilience: Lessons learned from the CrowdStrike incident

• TracFone will pay $16 million to settle FCC data breach investigation

• One of the best E Ink tablets I’ve tested is not a ReMarkable or Kindle Paperwhite

• The best portable jump starters of 2024: Expert recommended

• 10 social media scams and how to avoid them

• LA County Superior Court Hit by Ransomware Attack

• Alphabet Q2 Beats Expectations, But Shares Dip

• This versatile Dell laptop surprised me with 3 standout features

• The best headphones for working out: Expert tested and reviewed

• OpenAI’s budget GPT-4o mini model is now cheaper to fine-tune, too

• F5: AI Applications Will Complicate ‘Unsustainable’ Hybrid Multicloud Sprawl in Australia

• Uncle Sam opens probe into CrowdStrike turbulence at Delta Air Lines

• ASP.NET Core Web Apps

• This AI-powered Linux terminal app can help you learn how to use commands

• Summer Olympics: What IT Teams Need to Do Before & During the Event for Their Businesses

• Is GhostEmperor Back? Sygnia Finds Clues in Recent Cyber Incident

• State-Sponsored Cyber Threats: Daggerfly’s Upgraded Malware Toolkit

• Canada’s Oil and Gas Sector Faces Rising Cybersecurity Threats Amid Digital Transformation

• KnowBe4 targeted by North Korea with Insider Threat

• How Amazon can turn around its failing Alexa business in 4 steps

• One of the best work laptops I’ve tested is not a Lenovo ThinkPad or MacBook

• The best Kindle readers of 2024: Expert tested and reviewed

• 7 Best Business Antivirus Software Solutions in 2024

• ISC Releases Security Advisories for BIND 9

• CrowdStrike offers a $10 apology gift card to say sorry for outage

• OT/ICS and IoT Incident Response Plan

• AI Surveillance at Paris Olympics Raise Privacy Concerns

• Smishing Exposed How to Recognize Report and Prevent Text Message Scams

• Google Cancels Plan To Axe Third Party Cookies For Chrome Browser

• I can’t travel without this Anker GaN wall charger. Here’s why you shouldn’t either

• CrowdStrike: Buggy Validator Started Massive Outage

• Robot Dog Internet Jammer

• The best radar detectors: Expert recommended

• The sub-$50 earbuds I recommend most aren’t by Bose or Sony

• The best drones of 2024: Expert tested and reviewed

• Windows Patch Tuesday update might send a user to the BitLocker recovery screen

• 12 top contact center platforms of 2024

• Organizations Warned of Exploited Twilio Authy Vulnerability

• Meta Releases Open Source Llama 3.1 AI Model

• ShadowRoot Ransomware Attacking Organizations With Weaponized PDF Documents

• This Sony Bravia is my No. 1 most recommended TV right now – and it would be great to watch the Olympics

• The best self-cleaning litter boxes of 2024: Expert tested

• The best large tablets of 2024: Expert tested and reviewed

• Slack now offers four iPhone widgets – here’s how you can use them

• One of Samsung’s best TVs of all time is on sale and would be a great TV for the Olympics

• Mimecast Announces Acquisition of Code42, Expands Human Risk Management Platform with Visibility into Insider Threats

• Network of ghost GitHub accounts successfully distributes malware

• Indian Firm Linked to Fake DMCA Notices Silencing Journalists

• BlueStacks Emulator For Windows Flaw Exposes Millions Of Gamers To Attack

• Chinese Hackers Using Shared Framework To Create Multi-Platform Malware

• Beware Of Malicious Python Packages That Steal Users Sensitive Data

• 250 Million Hamster Kombat Players Targeted Via Android And Windows Malware

• BreachForumsV1 Database Leaked: Private messages, Emails & IP Exposed

• The best iPad keyboard cases of 2024: Expert tested and reviewed

• 7 password rules to live by in 2024, according to security experts

• The best digital notebooks you can buy in 2024: Expert tested and reviewed

• Risk & Repeat: Faulty CrowdStrike update causes global outage

• Two Vulnerabilities Discovered in LangChain GenAI Framework

• CISOs, CIOs Struggle with Data Protection Challenges in AI, Cloud Era

• Vanta raises $150 million accelerate its AI product innovation

• Crisis communication: What NOT to do

• Data pilfered from Pentagon IT supplier Leidos

• Cybersecurity Startup Protexxa Closes $10M Series A Round

• U.S. Government Escalates Sanctions to Combat Rising Cybersecurity Threats

• CrowdStrike Shares How a Rapid Response Content Update Caused Global Outage

• Google Chrome 127 Released with a fix for 24 Security Vulnerabilities

• Check Point Research Reveals Q2 2024 Brand Phishing Trends: Microsoft Tops List While New Entries Signal Shifting Threat Landscape

• 3 ways Meta’s Llama 3.1 is an advance for Gen AI

• Credit Karma unveils updated AI tools to help you better understand your finances

• Philippines to End Online Casinos, Maybe Scams Too

• Malware Campaigns Target Hamster Kombat Players

• Verizon Subsidiary Settles With FCC for $16M Over Three Data Breaches

• CrowdStrike Admits it Doesn’t ‘Canary’ Test all Updates

• Optimizing Security Operations with DirectDefense

• Russia-Linked Brute-Force Campaign Targets EU via Microsoft Infrastructure

• DeFi Crypto Exchange dYdX v3 Website Hacked in DNS Hijacking Attack

• How the Newest Tech Changes Cybersecurity Needs in the Legal Industry

• Microsoft Account Security Alert Email: Recognize the Scam

• CrowdStrike blames buggy testing software for disastrous update

• Wiz Rejects $23 Billion Acquisition Bid From Google – Report

• The best electric screwdrivers of 2024: Expert tested and reviewed

• A Hacker ‘Ghost’ Network Is Quietly Spreading Malware on GitHub

• Dazz snaps up $50M for AI-based, automated cloud security remediation

• How a Trust Center Solves Your Security Questionnaire Problem

• Researchers Detail on How Defenders Eliminate Detection Gaps in AWS Environments

• Report: HHS Needs to Beef up Cloud Security and Skills

• Fake CrowdStrike Repair Manual Pushes New Infostealer Malware

• CrowdStrike Explains Why Bad Update Was Not Properly Tested

• Coalfire announces Cyber Security On-Demand portfolio

• Extracting Value from Your Investment in AI

• Microsoft Blames 2009 EU Agreement For World’s Biggest IT Outage

• Windows SmartScreen Flaw Enabling Data Theft in Major Stealer Attack

• The Hidden Menace of Phantom Attackers on GitHub by Stargazers Ghost Network

• Private Internet Access (PIA) vs NordVPN: Which VPN Is Better?

• This Machine Exposes Privacy Violations

• China-linked APT group uses new Macma macOS backdoor version

• Chinese Espionage Group Upgrades Malware Arsenal to Target All Major Operating Systems

• Patchwork Hackers Target Bhutan with Advanced Brute Ratel C4 Tool

• How to Reduce SaaS Spend and Risk Without Impacting Productivity

• Accelerating Analysis When It Matters

• 10 Ways AI Can Help Organizations Tackle Cyberattacks

• Drone Usage Policy

• Alphabet’s Reported $23B Bet on Wiz Fizzles Out

• Critical Exim Vulnerability Threatens Millions of Email Servers

• North Korean Hackers Targeted Cybersecurity Firm KnowBe4 with Fake IT Worker

• Cybersecurity News: Wiz deal crumbles, CrowdStrike aftermath, dYdX exchange hack

• A (somewhat) complete timeline of Talos’ history

• The Power and Peril of RMM Tools

• Infostealer Campaign Exploits Microsoft Windows SmartScreen Flaw to Spread Payloads

• Craxel Black Forest Reaper boosts cyber defense for organizations

• British politicians show exactly what NOT to do online

• Possible APT28-linked Hackers Target Ukraine’s Scientific Institutions

• Permit Share-If enables developers to implement secure collaboration features into their apps

• CrowdStrike Explains Friday Incident Crashing Millions of Windows Devices

• Pentagon IT Service Provider Hacked: U.S. Government Secrets Exposed

• The Dual Impact of AI on Power Grids: Efficiency and Vulnerability

• Chinese ‘Cybercrime Syndicate’ Behind Gambling Sites Advertised at European Sporting Events

• Google Abandons Plan to Drop Third-Party Cookies in Chrome

• School gets an F for using facial recognition on kids in canteen

• Cyber Insurance Market Evolves as Threat Landscape Changes

• Emulating and Detecting Scattered Spider-like Attacks

• SocGholish: Fake update puts visitors at risk

• Verizon to Pay $16 Million in TracFone Data Breach Settlement

• Why SPRS Matters and 4 Steps to Improve Your Security Posture

• GitGuardian’s tool helps companies discover developer leaks on GitHub

• Google Criticized for Abandoning Cookie Phase-Out

• The Value in Root Cause Analysis for Vulnerability Management

• BreachForums v1 database leak is an OPSEC test for hackers

• Spanish Police Arrest Three Suspects Linked to Pro-Moscow NoName057(16) Hackers

• “Mouse Logger” Malicious Python Script, (Wed, Jul 24th)

• CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List

• Microsoft Defender Flaw Exploited to Deliver ACR, Lumma, and Meduza Stealers

• Forget security – Google’s reCAPTCHA v2 is exploiting users for profit

• Ransomware attack shuts down Superior Court of Los Angeles County

• How a business can attain Cyber Resilience in digital era

• CrowdStrike CEO is summoned before the Homeland Security committee. Cyber Security Today for Wednesday, July 24, 2023

• Chinese Hackers Target Taiwan and U.S. NGO with MgBot and MACMA Malware

• CrowdStrike blames a test software bug for that giant global mess it made

• Security biz KnowBe4 hired fake North Korean techie, who got straight to work … on evil

• Cybersecurity ROI: Top metrics and KPIs

• Cybersecurity jobs available right now: July 24, 2024

• Infisical: Open-source secret management platform

• AI accelerates code development faster than security teams can keep up

• Most Airlines Except One Are Recovering From the CrowdStrike Tech Outage. The Feds Have Noticed

• ISC Stormcast For Wednesday, July 24th, 2024 https://isc.sans.edu/podcastdetail/9066, (Wed, Jul 24th)

• Philippines wipes out its legit online gambling industry to take down scammers

• AI arms race escalates: OpenAI offers free GPT-4o Mini fine-tuning to counter Meta’s Llama 3.1 release

Generated on 2024-07-25 23:55:12.812645