IT Security News Daily Summary 2024-07-26

• Friday Squid Blogging: Sunscreen from Squid Pigments

• The best Alexa devices of 2024: Expert tested and recommended

• These transparent earbuds by Nothing made my AirPods look and sound boring

• This Asus Copilot+ PC has one of the best displays I’ve seen on a laptop (and it exudes premium)

• How to calibrate your TV for the best picture quality – 2 easy and simple methods

• Apple reports iCloud Private Relay global outages for some users

• Negotiate Your Next Cyber Insurance Policy With This 6-Step Playbook

• 5 Innovative Cybersecurity Measures App Developers Should Incorporate in the Digital Transformation Race

• CrowdStrike meets Murphy’s Law: Anything that can go wrong will

• AI and Vulnerability Management: Industry Leaders Show Positive Signs

• EvilVideo Exploit: Telegram Zero-Day Vulnerability Allows Disguised APK Attacks

• Google Backtracks on Cookie Phaseout: What It Means for Users and Advertisers

• Researcher says deleted GitHub data can be accessed ‘forever’

• Chainguard Raises $140M to Drive AI Support, Global Growth

• Researchers Warn of Increased Cyberterrorism Activity Targeting Paris Olympics

• Scams to steer clear of as a college student, from a college student

• Effortless certificate management with automated CNAME validation

• National Defense University Cyber Professor Tapped as ONCD Deputy Director

• PKfail: 800+ Major PC Models have Insecure ‘Secure Boot’

• Ledger Flex: Secure self-custody with E Ink touchscreen display

• Your industrial network is not a commodity: it is strategic to your success

• Compromising the Secure Boot Process

• The Most Urgent Security Risks for GenAI Users are all Data-Related

• How to build a CA hierarchy across multiple AWS accounts and Regions for global organization

• Crowdstrike Threat Intelligence data leaked by hackers

• What is a computer exploit?

• 8 Benefits of Endpoint Detection & Response (EDR) You Should Know [2024]

• Software Maker MCG Health Settles Data Breach Suit for $8.8M

• How To Secure Your Angular Apps: End-To-End Encryption of API Calls

• Learn a new language with a Babbel subscription for 76% off

• The best TVs for PS5 of 2024: Expert tested

• One of the best budget Android tablets I’ve tested is not made by Samsung or Google

• Fortinet Training Institute Expands Cyber Education Opportunities for Veterans

• How Cyber Insurance Coverage is Evolving

• Meta takes down 63,000 sextortion-related accounts on Instagram

• Are We Ready For The Next Major Global IT Outage? Here’s All You Need to Know

• ERP Firm Data Breach Exposes Over 750 Million Records

• California’s Major Trial Court Falls Victim to Ransomware Attack

• Planting Trees in India: Green Team #GenerationRestoration

• Google Chrome Modifies Privacy Sandbox To Allow Cookies

• OpenAI Tests Search Engine Prototype Called ‘SearchGPT’

• My favorite accessory for DIY projects has a useful LED screen – and it’s game-changing

• Elon Musk’s X now trains Grok on your data by default – here’s how to opt out

• Belarus-linked Hackers Target Ukrainian Organizations with PicassoLoader Malware

• Digital Apartheid in Gaza: Unjust Content Moderation at the Request of Israel’s Cyber Unit

• IAM for MSPs Provider Evo Security Raises $6 Million

• CrowdStrike CEO: 97 Percent Of Windows Sensors Back Online

• The best bone conduction headphones of 2024: Expert tested and reviewed

• I replaced my Nest with this Arlo 2K video doorbell, and it’s perfect for smart home beginners

• Synnovis Restores Systems After Cyber-Attack, But Blood Shortages Remain

• What to expect from Made by Google 2024: Pixel 9 Pro Fold, Watch, Android 15, AI, and more

• We’ve entered the era of the smart ring. Here’s why it will shake up the wearables market

• BitLocker workaround may offer aid for CrowdStrike customers

• ServiceNow RCE Flaws Actively Exploited by Threat Actors to Steal Credentials

• How CISOs Enable ITDR Approach Through the Principle of Least Privilege

• Malicious Inauthentic CrowdStrike Falcon Crash Reporter Installer Distributed to German Entity

• Progress discloses second critical flaw in Telerik Report Server in as many months

• This AI-Powered Cybercrime Service Bundles Phishing Kits with Malicious Android Apps

• Hacktivists Claim Leak of CrowdStrike Threat Intelligence

• SeleniumGreed Cryptomining Campaign Exploiting Publicly Exposed Grid Services

• Buy a Costco membership and get a $40 gift card, free. Here’s how

• US Indicts Alleged North Korean State Hacker for Ransomware Attacks on Hospitals

• Suspect Indicted in North Korea Group’s Expansive Spying Operation

• Sheltering from the Cyberattack Storm

• A North Korean Hacker Tricked a US Security Vendor Into Hiring Him—and Immediately Tried to Hack Them

• Threat Actors Exploit Fresh ServiceNow Vulnerabilities in Attacks

• ExelaStealer Delivered “From Russia With Love”, (Fri, Jul 26th)

• I’ve tried a zillion desktop distros – it doesn’t get any better than Linux Mint 22

• The best humidifiers of 2024: Expert tested and reviewed

• The best iPads for college students in 2024: Expert tested and reviewed

• BIND updates fix four high-severity DoS bugs in the DNS software suite

• Thread Name-Calling: Using Thread Name for Offense

• Senator: Top Banks Only Reimburse 38% of Unauthorized Claims

• Elon Musk To Discuss $5 Billion xAI Investment With Tesla Board

• Europe Is Pumping Billions Into New Military Tech

• ZeroTier raises $13.5M to help avert CrowdStrike-like network problems

• Critical ServiceNow RCE Flaws Actively Exploited to Steal Credentials

• CrowdStrike Disruption Direct Losses to Reach $5.4B for Fortune 500, Study Finds

• Offensive AI: The Sine Qua Non of Cybersecurity

• US Charges North Korean Hacker for Ransomware Attacks on Hospitals

• OpenAI Launches SearchGPT Prototype

• Buy a Windows 11 Pro license for $25 right now

• DTX + UCX London is back: Global brands, cutting-edge technology and world-renowned speakers take centre stage

• In Other News: FBI Cyber Action Team, Pentagon IT Firm Leak, Nigerian Gets 12 Years in Prison

• Despite Bans, AI Code Tools Widespread in Organizations

• Scam Attacks Taking Advantage of the Popularity of the Generative AI Wave

• North Korean Hackers Targeted KnowBe4 with Fake IT Worker

• North Korean Hackers Target Critical Infrastructure for Military Gain

• Progress Software Fixed Critical Flaw in Telerik Report Server

• Google Chrome Now Asks for Passwords To Scan Protected Archives

• PKfail Vulnerability Allows Secure Boot Bypass on Hundreds of Computer Models

• Cybersecurity News: Microsoft Defender exploited, assassin’s encryption frustration, NK elite hackers

• Security Serious Unsung Heroes Awards 2024 open for nominations

• SocGholish: Fake Update Puts Visitors at Risk

• Happy System Administrator Appreciation Day 2024

• Master Cybersecurity With The Complete CompTIA Security+ SY0-701 Certification Kit by IDUNOVA

• Email Gateway Security Gaps Enable New Malware Tactics

• Patchwork Group Found Using Brute Ratel C4 and an Enhanced Version of PGoShell Backdoor

• Mimecast Acquires Veteran Data Security Firm Code42

• Onyx Sleet uses array of malware to gather intelligence for North Korea

• U.S. DoJ Indicts North Korean Hacker for Ransomware Attacks on Hospitals

• 97% of Devices Disrupted by CrowdStrike Restored as Insurer Estimates Billions in Losses

• Deepfake Attacks Prompt Change in Security Strategy

• Networking Equipment Riddled With Software Supply Chain Risks

• North Korean chap charged for attacks on US hospitals, military, NASA – and even China

• Terrorist Activity is Accelerating in Cyberspace – Risk Precursor to Summer Olympics and Elections

• The Role of DDoS Stress Testing in DDoS Protection

• Bridging the Expertise Gap: Enhancing Cybersecurity Skills in Compliance Professionals

• Play & LockBit Ransomware Join Hands to Launch Cyber Attacks

• Progress fixes critical RCE flaw in Telerik Report Server, upgrade ASAP! (CVE-2024-6327)

• North Korean state hacker infiltrates US security firm; Cybersecurity Today for Friday, July 26, 2024

• NHS Ransomware Attack leads to extreme blood shortage

• Harnessing Defensive AI: Safeguarding the Digital Realm

• CrowdStrike Warns of New Phishing Scam Targeting German Customers

• Ongoing Cyberattack Targets Exposed Selenium Grid Services for Crypto Mining

• North Korean chap charged for attacks on US hospitals, miiltary, NASA – and even China

• Critical Flaw in Telerik Report Server Poses Remote Code Execution Risk

• AI-generated deepfake attacks force companies to reassess cybersecurity

• 16% of organizations experience disruptions due to insufficient AI maturity

• Most CISOs feel unprepared for new compliance regulations

• Changing the Passive to Active: Updating SaaS Cybersecurity Strategy with Threat Management

• North Korean chap charged for attacks on US hospitals, NASA – and even China

• New infosec products of the week: July 26, 2024

• ISC Stormcast For Friday, July 26th, 2024 https://isc.sans.edu/podcastdetail/9070, (Fri, Jul 26th)

• Malware crew Stargazers Goblin used 3,000 GitHub accounts to make bank

• CrowdStrike update blunder may cost world billions – and insurance ain’t covering it all

• Beware of fake CrowdStrike domains pumping out Lumma infostealing malware

• A Guide to Open Source Software

• How To Implement a Gateway With Spring Cloud

• IT Security News Daily Summary 2024-07-25

• Microsoft’s generative search engine weds something new, something old

• Join Our Webinar: Zero Trust and IAM – Building a Secure Future

• Learning from CrowdStrike’s Quality Assurance Failures

• Progress Software fixed critical RCE CVE-2024-6327 in the Telerik Report Server

• Google’s DeepMind AI takes home silver medal in complex math competition

• The best smartwatch for kids that I’ve tested is not an Apple Watch or Garmin

• OpenAI’s newly released GPT-4o mini dominates the Chatbot Arena. Here’s why.

• The best silent mouse of 2024: Expert tested and reviewed

• FYI: Data from deleted GitHub repos may not actually be deleted

• North Korean Charged in Ransomware Attacks on American Hospitals

• CCNA: What It Means to Me, What Awaits in Cisco U.

• Emulating the Prickly Cactus Ransomware

• Google, Microsoft, Others Support U.S.-Based Spyware Lawsuits

• OpenAI launches SearchGPT – here’s what it can do and how to access it

• An explanation of Flipper Zero

• The CrowdStrike Outage and Market-Driven Brittleness

• One of the most versatile video doorbells I’ve tested is not made by Ring or Nest

• Cyber travel scams: The biggest scams to be aware of when planning your next trip

• AI’s Rapid Code Development Outpaces Security Efforts

• The massive computer outage over the weekend was not a cyber attack, and I’m not sure why we have to keep saying that

• Amazon Developing Cheaper AI Chips – Report

• 5 reasons to work with the competition, according to business leaders

• Disney+, Hulu and Max streaming bundle is now available for almost 40% off

• Apple Smartphone Sales In China Drop 6.7 Percent, Canalys Finds

• 5 Linux commands for group management and how to use them

• How to install Windows 11 the way you want (and sneak by Microsoft’s restrictions)

• North Korean Hacker Group Targeting Healthcare, Energy Sectors

• ConfusedFunction: A Privilege Escalation Vulnerability Impacting GCP Cloud Functions

• Uncle Sam accuses telco IT pro of decade-long spying campaign for China

• Researchers Claim Anyone Can Access Deleted, Private GitHub Repository Data

• Chainguard Raises $140 Million, Expands Tech to Secure AI Workloads

• LangChain Gen AI Under Scrutiny Experts Discover Significant Flaws

• Meta Ordered To Clean Up AI-Generated Porn By Oversight Board

• Windows update may present users with a BitLocker recovery screen

• SEXi / APT Inc Ransomware – What You Need To Know

• Play Ransomware Group is Targeting VMWare ESXi Environments

• India’s Digital Rise Sees Alarming Surge in Online Scams Targeting the Elderly

• The best MP3 players of 2024

• I’m a diehard Pixel user, but I’m considering switching for 2 reasons (and I’m not alone)

• Skip the Apple Watch: Google’s Fitbit Ace LTE is the best smartwatch for your kids

• Google’s Gemini chatbot gets highly anticipated updates. Here’s what it means for you

• Critical bug in Docker Engine allowed attackers to bypass authorization plugins

• Comparative Analysis of Password Hashing Algorithms: Argon2, bcrypt, scrypt, and PBKDF2

• Ransomware shift from Cyber Espionage for North Korea

• One of the best foldable phones I’ve tested is not a OnePlus or Motorola

• Improving Data Center Energy Efficiency to Power the AI Revolution

• Cisco Partner Conversations: Delivering for our clients with NTT DATA

• [2024] 10 Qualys Alternatives That Should Be on Your Shortlist

• Life at Fortinet: The Various Career Pathways in Cybersecurity

• Critical Microsoft Zero-Day Vulnerability Exploited in the Wild for Over a Year

• Wordfence Intelligence Weekly WordPress Vulnerability Report (July 15, 2024 to July 21, 2024)

• The Essential Guide to Total Protection in Microsoft 365

• The Importance of Ethical Hacking in Cybersecurity

• Chinese SMS Phishing Group Hits iPhone Users in India Post Scam

• The best tablets of 2024: Expert tested and reviewed

• The best iPads of 2024: Expert tested and reviewed

• Join BJ’s Wholesale Club for $20 (reg. $55)

• Sophos XG vs Fortinet Fortigate: 2024 Firewall Comparison

• Siemens SICAM Products

• Positron Broadcast Signal Processor

• CISA Releases Two Industrial Control Systems Advisories

• Hacked, leaked, exposed: Why you should never use stalkerware apps

• Electronic Frontier Foundation to Present Annual EFF Awards to Carolina Botero, Connecting Humanity, and 404 Media

• North Korean Hackers Shift from Cyber Espionage to Ransomware Attacks

• What I learned from the ‘Microsoft global IT outage’

• Pilot VPC and Advanced NAT: Securely Connect Overlapping Networks to AWS VPC

• Forget Dyson: I tested Roborock’s wet-dry hand vacuum and it left my floors spotless

• This $45 mini screwdriver kit has a useful LED screen – and I highly recommend it

• Spotify wants you to get Deluxe, a more expensive version with lossless audio and other perks

• How technology is being used to help support environmental conservation

• E-rate Program Expanded, Plus Cisco Knowledge Hub Updates

• The Road to CTEM, Part 3: BAS vs. Other Validation Technologies

• Navigating Cybersecurity Legal Liabilities

• CrowdStrike Blames ‘Undetected Error’ For World’s Largest IT Outage

• Nexo Cements User Data Security with SOC 3 Assessment and SOC 2 Audit Renewal

• Threat Actors Claiming Leak of IOC list with 250M Data, CrowdStrike Responded

• Unveiling the latest banking trojan threats in LATAM

• How to turn on Private DNS Mode on Android – and what it can do for you

• Buy a 5-year subscription to AdGuard VPN for $40

• The best iPad Air cases of 2024: Expert tested

• We’ve entered the era of the smart ring. Here are 3 reasons why I couldn’t be more excited

• At the Olympics, AI Is Watching You

• TransparentTribe’s Spear-Phishing Targeting Indian Government Departments

• You should probably fix this 5-year-old critical Docker vuln fairly sharpish

• Ransomware and BEC Make Up 60% of Cyber Incidents

• Navigating Legal and Ethical Challenges in Web Scraping

• Google Chrome Warns of Malicious Files While Downloading

• Protecting Your Cloud Application Against Unknown Risks

• CrowdStrike outage explained: What caused it and what’s next

• AI Accelerates Code Development Faster Than Security Teams can Keep up

• BIND Updates Resolve High-Severity DoS Vulnerabilities

• Chainguard raises $140 million to strengthen open source software security

• Alphabet To Invest $5 Billion In Waymo Self-Driving Unit

• Data breach exposes US spyware maker behind Windows, Mac, Android and Chromebook malware

• Phishing Campaign Targeting Mobile Users in India Using India Post Lures

• Report: Malware Attacks Surge 30% in First Half of 2024

• Deep Dive: Unveiling the Untold Challenges of Single Sign-On (SSO) Management

• Faulty Software Update Shuts Down Critical Infrastructure, Highlighting Major Risks

• The best noise-canceling earbuds of 2024: Expert tested and reviewed

• Get Microsoft Office for Windows or Mac for $25 right now

• The best foldable phones of 2024: Expert tested and reviewed

• Apple Maps is now on the web – here’s how you can use it, and not just for directions

• ‘Stargazer Goblin’ Amasses Thousands of Rogue GitHub Accounts to Spread Malware

• 5 Echo Show settings to change to make your smart display less annoying

• Kaspersky says Uncle Sam snubbed proposal to open up its code for third-party review

• At The 2024 Summer Olympics, AI Is Watching You

• Pro-Palestinian Actor Levels Six-Day DDoS Attack on UAE Bank

• Vanta Raises $150M Series C, Now Valued at $2.45B

• Docker fixes critical auth bypass flaw, again (CVE-2024-41110)

• Microsoft’s Windows Hello for Business Flaw Let Attackers Bypass Authentication

• Data Wallets Using the Solid Protocol

• Major Russian Banks Hit with DDoS Attacks as Ukraine Claims Responsibility

• Lakera Raises $20 Million to Secure GenAI Applications

• Network of 3,000 GitHub Accounts Used for Malware Distribution

• Thawing Your Email Security Strategy with Frost’s 2024 Radar Report: A Dynamic Cyber Threat Landscape

• Meta Removes 63,000 Instagram Accounts Linked to Nigerian Sextortion Scams

• 6 Types of Applications Security Testing You Must Know About

• I spent a week with Samsung’s Galaxy Z Flip 6. Here’s what you should know before buying one

• EDR vs. SIEM: What’s the difference?

• Hackers exploit Microsoft Defender SmartScreen bug CVE-2024-21412 to deliver ACR, Lumma, and Meduza Stealers

• Infisical: Open-source secret management platform – Help Net Security

• APT45: North Korea’s Digital Military Machine

• Akira Ransomware Gang targets Split Airport of Croatia

• Revolut Gains UK Banking Licence

• Buy a Microsoft Visual Studio Pro license for 90% off

• Echoes of Braodo Tales from the Cyber Underworld

• Researchers Reveal ConfusedFunction Vulnerability in Google Cloud Platform

• Webinar: Securing the Modern Workspace: What Enterprises MUST Know about Enterprise Browser Security

• Cybersecurity Is a Communications Problem

• IR Trends: Ransomware on the rise, while technology becomes most targeted sector

• AI Tool Identifies BOLA Vulnerabilities in Easy!Appointments

• LummaC2 Malware Using Steam Gaming Platform as C2 Server

• Over Half of UK Workers Haven’t Received Training on Avoiding Phishing Scams

• Learning from CrowdStrike’s quality assurance failures

• Cybersecurity News: CrowdStrike details, Chrome keeps cookies, BreachForums leaked

• Google Boosts Chrome Protections Against Malicious Files

• Third-Party Cookies Stay: Google’s New Plan for Web Browsing Privacy

• CAST SBOM Manager automates creation and handling of SBOMs

• Malware Attacks Surge 30% in First Half of 2024

• Okta Browser Plugin Reflected Cross-Site Scripting CVE-2024-0981

• A Guide to Select the Best Operating System for NAS Data Recovery

• Most IT Leaders Say Severity of Cyber-Attacks has Increased

• Lakera raises $20 million to secure GenAI applications

• XWorm Hidden With Process Hollowing, (Thu, Jul 25th)

• Patch management still seemingly abysmal because no one wants the job

• BIND 9.20 released: Enhanced DNSSEC support, application infrastructure improvements

• Ukraine Hackers Hit Major Russian banks with DDoS attacks

• Condo.com – 1,481,555 breached accounts

• Hacker claims theft of Piramal Group’s employee data

• New Chrome Feature Scans Password-Protected Files for Malicious Content

• Critical Docker Engine Flaw Allows Attackers to Bypass Authorization Plugins

• How CISOs enable ITDR approach through the principle of least privilege

• Explore Talent – 5,371,574 breached accounts

• Cloud security threats CISOs need to know about

• Researchers expose GitHub Actions workflows as risky and exploitable

• The most urgent security risks for GenAI users are all data-related

• Briefing: Negotiating States Must Address Human Rights Risks in the Proposed UN Surveillance Treaty

• How a cheap barcode scanner helped fix CrowdStrike’d Windows PCs in a flash

• ISC Stormcast For Thursday, July 25th, 2024 https://isc.sans.edu/podcastdetail/9068, (Thu, Jul 25th)

• The months and days before and after CrowdStrike’s fatal Friday

• Cybersecurity Firm KnowBe4 Tricked into Hiring North Korean Hacker as IT Pro

• Michigan Medicine data breach impacted 56953 patients

• Journalists Sue Massachusetts TV Corporation Over Bogus YouTube Takedown Demands

• Fatal timeline of CrowdStrike’s week from hell – Feb to now

Generated on 2024-07-26 23:55:10.297629