IT Security News Daily Summary 2024-07-29

• Progress Telerik Report Server Vulnerability Allows RCE Attacks

• ServiceNow Remote Code Execution Vulnerabilities Under Attack

• Docker Engine Vulnerability Could Allow AuthZ Bypass

• Google Chrome Password Manager Flaw Triggered Outage

• GitHub Design Flaw Retains Deleted, Private Repos

• Meta’s AI safety system defeated by the space bar

• US border cops really must get a warrant in NY before searching your phones, devices

• USENIX Security ’23 – Device Tracking via Linux’s New TCP Source Port Selection Algorithm

• Windows Security best practices for integrating and managing security tools

• Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption

• The Top 4 CrowdStrike Alternatives & Competitors in 2024

• US border cops really must get a warrant in NY before searching phones, devices

• Apple Joins Voluntary U.S. Government Commitment to AI Safety

• How to opt out of facial recognition at airports (if you’re American)

• Secure, Simple, Superior: The Advantages of Tokenized Payment Cards by Wallester

• EFF’s Concerns About the UN Draft Cybercrime Convention

• Microsoft Says Ransomware Gangs Exploiting Just-Patched VMware ESXi Flaw

• AWS revalidates its AAA Pinakes rating for Spanish financial entities

• What is SSH (Secure Shell) and How Does It Work?

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #299 — Motivation and Reality

• XSS and OAuth Combo Threatens Millions of Users Due to Hotjar Flaw

• Yes, Americans can opt out of airport facial recognition. Here’s how

• Understanding VPN Protocols: Ensuring Your Data Security

• FBCS Data Breach Affects 4.2 Million Americans

• Guarding Privacy: Cutting-Edge Technologies for Data Protection

• Vulnerability Recap 7/29/24 – Multiple Old Security Flaws Reappear

• Why You Should Hate the Proposed UN Cybercrime Treaty

• Critical Flaw in Acronis Cyber Infrastructure Exploited in the Wild

• India Cybersecurity: Key Government Initiatives for Cybersecurity

• Some good may come out of the CrowdStrike outage

• Don’t Get Hacked! Essential Cybersecurity Tips You Need To Know

• Optical fibers fit for the age of quantum computing

• HealthEquity: 4.3 Million People Affected by Data Breach

• Accelerate incident response with Amazon Security Lake – Part 2

• Ransomware attacks are inevitable on Paris Olympics 2024

• LockBit Lies Prove Another Reason to Never Pay the Ransom

• July 2024 Web Server Survey

• SIEM is not storage, with Jess Dodson (Lock and Code S05E16)

• How the Change Healthcare attack may affect cyber insurance

• What is GDPR? Compliance and conditions explained

• Acronis Cyber Infrastructure bug actively exploited in the wild

• Mandiant: North Korean Hackers Are Targeting Naval Tech

• Nine Individuals Apprehended in Cavite for Alleged Voice Phishing Activities

• Vulnerability Summary for the Week of July 22, 2024

• Mandrake Spyware Infects 32,000 Devices Via Google Play Apps

• VPN Usage Increased 5016% in Bangladesh Amidst Online Censorship

• US senators ask FTC to investigate car makers’ privacy practices

• With Open Source Artificial Intelligence, Don’t Forget the Lessons of Open Source Software

• CISA Adds Three Known Exploited Vulnerabilities to Catalog

• Security Flaws Found in Hotjar, Potentially Affecting Sensitive Data of Millions Utilising Major Global Brands

• Mitigating Data Breaches with AI-Driven Security Solutions

• Crowdstrike outage: Growing scams amid global outage

• USENIX Security ’23 – Did the Shark Eat The Watchdog In The NTP Pool? Deceiving The NTP Pool’s Monitoring System

• WTH? Google Auth Bug Lets Hackers Login as You

• Mandrake Spyware Infects 32,000 Devices via Google Play Apps

• The Aftermath of the WordPress.org Supply Chain Attack: New Malware and Techniques Emerge

• Strategies for Mitigating the Human Element of Cyber Risk

• Unlock the Potential of AI/ML Workloads with Cisco Data Center Networks

• Bitsight for Insurance Services

• UNC4393 Goes Gently into the SILENTNIGHT

• Threat Actots Leveraging ChatGPT To Craft Sophisticated Attacks

• Apple reportedly delays the first Apple Intelligence features until October

• Beware of AI ‘model collapse’: How training on synthetic data pollutes the next generation

• Top Tech Conferences & Events to Add to Your Calendar in 2024

• Taking action: how to combat the financial repercussions of a cyber incident

• Report: Russian Ransomware Gangs Account for 69% of all Ransom Proceeds

• The Dual Nature of Ransomware Attacks

• Millions of Websites Susceptible to XSS Attack via OAuth Implementation Flaw

• The NIS2 Directive: Implications for Your Organization

• Keep Your Tech Flame Alive: Akamai Trailblazer Elizabeth Padley

• Ukraine Hacked Russian Banks, Leading Major Disruption

• One of the best productivity laptops I’ve tested is not a Lenovo ThinkPad or MacBook

• Most people worry about deepfakes – and overestimate their ability to spot them

• Saboteurs Cut Internet Cables in Latest Disruption During Paris Olympics

• Effective change management practices in IT environments: a guide

• Despite Bans, AI Code Generation Tools Widely Used in Organizations

• Intruders at HealthEquity rifled through storage, stole 4.3M people’s data

• Walmart Discovers New PowerShell Backdoor Linked to Zloader Malware

• Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails

• Google apologizes for breaking password manager for millions of Windows users with iffy Chrome update

• Cato Networks Surpasses $200 Million, Doubles ARR in Under Two Years

• WhatsApp for Windows Lets Python, PHP Scripts Execute with no Warning

• Senators to FTC: Car Companies’ Data Privacy Practices Must be Investigated

• DDoS Attacks Disrupt Major Russian Banks: Ukraine Claims Responsibility

• Critical Acronis Cyber Infrastructure vulnerability exploited in the wild (CVE-2023-45249)

• Hotjar, Business Insider Vulnerabilities Expose OAuth Data Risks

• How Infostealers Pillaged the World’s Passwords

• National Vulnerability Backlog Could Surge to 30,000 by 2025

• The Other Lesson from the XZ Utils Supply-Chain Attack

• Millions of Websites Susceptible XSS Attack via OAuth Implementation Flaw

• How iOS 18 will impact your iPhone’s battery health – and what you can do about it

• The best mobile VPNs of 2024: Expert tested and reviewed

• How Searchable Encryption Changes the Data Security Game

• Acronis Warns of Cyber Infrastructure Default Password Abused in Attacks

• RaspAP Flaw Let Hackers Escalate Privileges with Raspberry Pi Devices

• New Research in Detecting AI-Generated Videos

• What Every Business Needs to Know About Ransomware

• Gh0stGambit Dropper Used to Deploy Gh0st RAT Against Chinese Users

• Data From Deleted Github Repositories May Not Actually be Deleted

• Ukraine Claims Cyber Attack Disrupted Russian ATMs and Banking System

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• US border agents must get warrant before cell phone searches, federal court rules

• AI-Generated Deepfake Attacks Force Companies To Reassess Cybersecurity

• 4.3 Million Impacted by HealthEquity Data Breach

• Amazon Faces Double Tax Fraud Probes In Italy

• How to Build an Effective Security Operations Center

• The Top 5 1Password Alternatives for 2024

• Targeted PyPI Package Steals Google Cloud Credentials from macOS Devs

• eBook: 20 tips for secure cloud migration

• How to Write a Generative AI Cybersecurity Policy

• JPMorgan Rolls Out AI Chatbot To Staff

• Malicious Python Package Attacking macOS Developers To Steal Google Cloud Logins

• Mandrake spyware sneaks onto Google Play again, flying under the radar for two years

• Most CISOs Feel Unprepared for New Compliance Regulations

• Industry Moves for the week of July 29, 2024 – SecurityWeek

• Selenium Grid Instances Exploited for Cryptomining

• Less Than Half of European Firms Have AI Controls in Place

• Cybersecurity News: PyPi package targets MacOS, Columbus, Ohio suffers cyber incident, Windows July update problems

• SK Hynix To Invest $6.8bn In Yongin Memory Chip Plant

• White House, CISA Name Key Cybersecurity Officials as National Resilience Strategy Rollout Continues

• Microsoft 365 users targeted by phishers abusing Microsoft Forms

• Russia Throttles YouTube Over ‘Anti-Russian Policy’

• North Korean Onyx Sleet Using Group Of Malware And Exploits to Gain Intelligence

• Hackers Attacking Users Searching For W2 Form

• PKfail, Critical Firmware Supply-Chain Issue Let Attackers Bypass Secure Boot

• Meta Nukes Massive Instagram Sextortion Network of 63,000 Accounts

• Russia-Backed Brute-Force Campaign Targets Microsoft Infrastructure in EU

• Why Biometrics are Key to a Safe Paris Olympics

• US Crypto Exchange Gemini Reveals Breach

• Hollywood Video Game Performers Strike Over AI Fears

• Apple Signs White House AI Safeguards

• LinkedIn To Pay $6.625m In Ad Lawsuit Settlement

• Cisco Patches the Products Impacted by RADIUS Protocol Vulnerability

• Navigating PCI DSS 4.0: Your Guide to Compliance Success

• Dazz Snaps up $50M for AI-Based, Automated Cloud Security Remediation

• French Police Push PlugX Malware Self-Destruct Payload to Clean PCs

• Hallucination Control: Benefits and Risks of Deploying LLMs as Part of Security Processes

• A week in security (July 22 – July 28)

• NVIDIA Patches Flaw in Jetson Software Used in AI-Powered Systems

• Fighting Fire with Fire: Using AI to Thwart Cybercriminals

• ‘Stargazer Goblin’ Creates 3,000 Fake GitHub Accounts for Malware Spread

• French Govt Investigating Recent Malware Attack that Compromised 3,000 Machines

• Report: 95% of Organizations Face Severe Software Supply Chain Risk

• Deepfakes, AI, and the Future of Cybersecurity: Insights from Dan DeCloss of PlexTrac

• North Korean Hackers Target USA Critical Infrastructure and Military Bases

• Microsoft admits 8.5 million CrowdStruck machines estimate was lowballed

• Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome Site

• Google’s Password Bug Hits Millions: Cybersecurity Today for Monday, July 29, 2024

• How Software Updates Can Lead to Cyber Attacks

• Belarus-linked APT Ghostwriter targeted Ukraine with PicassoLoader malware

• Fake Falcon crash reporter installer used to target German Crowdstrike users

• China ponders creating a national ‘cyberspace ID’

• Microsoft CrowdStrike Software Update leading to Phishing Attacks

• Enhancing threat detection for GenAI workloads with cloud attack emulation

• Cirrus: Open-source Google Cloud forensic collection

• The cost of cybersecurity burnout: Impact on performance and well-being

• Why a strong patch management strategy is essential for reducing business risk

• The gap between business confidence and cyber resiliency

• Whitepaper: DevSecOps Blueprint

• ISC Stormcast For Monday, July 29th, 2024 https://isc.sans.edu/podcastdetail/9072, (Mon, Jul 29th)

• Secure Boot useless on hundreds of PCs from major vendors after key leak

• 
Quickie: Password Cracking & Energy, (Sun, Jul 28th)

• CrowdStrike Outage Themed Maldoc, (Mon, Jul 29th)

• Quickie: Password Cracking & Energy, (Sun, Jul 28th)

• IT Security News Weekly Summary – Week 30

• IT Security News Daily Summary 2024-07-28

• French authorities launch disinfection operation to eradicate PlugX malware from infected hosts

• USENIX Security ’23 – Bilingual Problems: Studying the Security Risks Incurred by Native Extensions in Scripting Languages

• KnowBe4 Avoids Data Breach After Hiring North Korean Hacker

• Eliminating the Last Mile Between Security Data and Decision Making

• Security Affairs Malware Newsletter – Round 4

• Security Affairs newsletter Round 482 by Pierluigi Paganini – INTERNATIONAL EDITION

• Indian Govt Confirms BSNL User Data Breach

• Report: Spyware Maker’s Data Leak Exposes Malware Used on Windows, Mac, Android, and Chromebook Devices

• CyberCartel: Latest Banking Trojan Threat in Chrome Extensions

• Cyber Heist: Rs 40 Crore Taken from IndusInd Bank

• The best laptop docking stations in 2024: Expert tested and reviewed

• Artificial Intelligence in 2024

• Apple may be cooking something big with its new Game Mode. Here are 3 things we know

• One of the best e-readers I’ve tested is an Android phone dupe that’s full of wonder

• One of the best rugged Android phones I’ve tested is also one of the cheapest

• Week in review: CrowdStrike-triggered outage insights, recovery, and measuring cybersecurity ROI

Generated on 2024-07-29 23:55:08.578072