IT Security News Daily Summary 2024-07-30

• Proofpoint Platform Exploited to Send Millions of Spoofed Phishing Emails

• How to Get Started in Cybersecurity: Steps, Skills & Resources

• Mandrake Android spyware found in five apps in Google Play with over 32,000 downloads since 2022

• Building A SOC: Key Considerations And Strategies

• Google Workspace Authentication Vulnerability Allowed Thousands of Emails to be Compromised

• It took some serious nerve for Wiz to walk away from Google’s $23B offer

• AI Pulse: Brazil Gets Bold with Meta, Interpol’s Red Flag & more

• AI-Powered Deepfake Tools Becoming More Accessible Than Ever

• Delta Air Lines dials up Microsoft’s legal nemesis over CrowdStrike losses

• Empowering WordPress Bug Bounty Hunters: Meet the New Wordfence Bug Bounty Program Researcher Dashboard

• Microsoft need to be transparent about customer impacting DDoS attacks

• Ransomware Attacks Are Attracting Record Payouts in Australia. Should You Pay the Ransom?

• Microsoft, SecOps pros weigh kernel access post-CrowdStrike

• Cloud Security Challenges Extend Beyond Technology

• The best Bluetooth trackers of 2024: Expert tested

• HealthEquity data breach affects 4.3M people

• Apple Patches Everything. July 2024 Edition, (Tue, Jul 30th)

• $75 Million Ransom Paid to Dark Angels Ransomware Group

• Threat actor impersonates Google via fake ad for Authenticator

• Meta’s AI Safety System Manipulated by Space Bar Characters to Enable Prompt Injection

• The KOSA Internet Censorship Bill Just Passed The Senate—It’s Our Last Chance To Stop It

• NTLM Deprecation is Giving Us XP EOL Flashbacks: Are You Protected?

• US State Department Says UN Cybercrime Treaty Must Include Human Rights Protections

• With the Olympics underway, Attendees and Spectators at Risk of Cyberattacks

• SAFECOM Releases New Resource for Cloud Adoption

• IT leaders worry the rush to adopt Gen AI may have tech infrastructure repercussions

• SideWinder Utilizes New Infrastructure to Target Ports and Maritime Facilities in the Mediterranean Sea

• Ransomware actors pivot away from major brands in Q2 2024

• Extending Resilience: Reducing Stress and Burnout for Cybersecurity Teams

• Crypto Exchange Gemini Confirms Third-Party Data Breach

• Balancing Privacy and Authenticity in the Digital Age

• Google’s New Feature to Protect Users From Fake Calls

• How to deploy an Amazon OpenSearch cluster to ingest logs from Amazon Security Lake

• Proficio Launches New ProBAS Breach and Attack Simulation Service

• Food Fraud: The Top Three Scams Impacting the Food Delivery Industry

• Apple Releases Security Updates for Multiple Products

• CISA Adds One Known Exploited Vulnerability to Catalog

• SideWinder phishing campaign targets maritime facilities in multiple countries

• New PowerShell Backdoor Linked to Zloader Malware

• Change Healthcare Begins to Notify Millions Affected by Hack

• Western Maryland Community Colleges Receive Edwards Fund Grant for Cyber Ranges

• The US States Most at Risk of Cyberattacks

• Australia wants companies disclose ransomware payments

• Microsoft: Ransomware gangs exploiting VMware ESXi flaw

• European Central Bank Concludes Banking Cyber Stress Test

• Cowbell Secures $60 Million Series C Funding From Zurich Insurance Group

• Google Cloud CISO Phil Venables: ‘I’m short-term pessimistic, long-term optimistic’

• Sophisticated Phishing Campaign Targets Microsoft OneDrive Users

• Crowdstrike preliminary report as sourced from Richard Ford

• Salvador Technologies sees growth in maritime cybersecurity

• Price Drop: This Complete Ethical Hacking Bundle is Now $40

• HealthEquity data breach affects 4.3 million people

• HealthEquity Data Breach Compromises Customer Information

• Massive Phishing Campaign Exploiting Proofpoint’s Email Protection to Dispatch Millions of Perfectly Spoofed Emails

• Crafty ClickFix-Style Phishing Campaign Targets Microsoft OneDrive Users

• ‘LockBit of phishing’ EvilProxy used in more than a million attacks every month

• Adaptive Shield Showcases New ITDR Platform for SaaS at Black Hat USA

• Why (and How) APIs and Web Applications Are Under Siege

• Google Workspace Vulnerability Allowed Hackers to Access 3rd-Party Services

• A Senate Bill Would Radically Improve Voting Machine Security

• The Unyielding Struggle of Cybersecurity and Its Paradoxical Dilemma

• Indian APT Targeting Mediterranean Ports and Maritime Facilities

• New Mandrake Spyware Found in Google Play Store Apps After Two Years

• Stolen GenAI Accounts Flood Dark Web With 400 Daily Listings

• Progress Patched New MOVEit File Transfer Flaw that Allows Privilege Escalation

• Weak Human Rights Protections: Why You Should Hate the Proposed UN Cybercrime Treaty

• Fortanix Extends Encyption Key Discovery to On-Premises IT Platforms

• Ukraine Hacks ATMs Across Russia in Massive Cyberattack

• Listening to the Voice of the Customer: Cisco’s 2024 State of Industrial Networking Report

• Accenture and SandboxAQ Expand Cybersecurity Partnership

• The Power and Peril of RMM Tools

• ubook Suffered Data Breach, 710,000 Users’ Data Exposed

• Why Do We Need to Keep Our Builds Green?

• Embracing Diversity and Growth: My Cisco Internship Experience

• Average data breach cost jumps to $4.88 million, collateral damage increased

• Critical OpenSSH “regreSSHion” Vulnerability Impacted macOS  Systems, Patch Now

• Threat Actor Allegedly Claiming Hack of Microsoft Employee’s Device

• Hackers Exploiting ESXi Hypervisor Auth Bypass Flaw For Ransomware Attacks

• Proofpoint’s Email Protection Let Attackers Send Millions Of Phishing Emails

• Microsoft Warns of Ransomware Gangs Abusing VMware ESXi Authentication Bypass in Attacks

• OCI Customers Can Now Externally Manage Encryption Keys from a Cloud-Based Service

• Adaptive Shield unveils ITDR platform for SaaS

• SocGholish Malware Attacking Windows Users Using Fake Browser Update

• Providing Security Updates to Automobile Software

• The Most Common DNS Security Risks in 2024 (And How to Mitigate Them)

• Ransomware gangs are loving this dumb but deadly make-me-admin ESXi vulnerability

• Cyber Threat Intelligence: Illuminating the Deep, Dark Cybercriminal Underground

• Cybercriminals Target Polish Businesses with Agent Tesla and Formbook Malware

• ICO Slams Electoral Commission for Basic Security Failings

• South Korea To Support Businesses Amidst E-Commerce Crisis

• China Sees Slowdown In Foreign-Branded Smartphone Growth

• Telegram-Controlled TgRat Trojan Targets Linux Servers

• Threat Actor Allegedly Claiming Breach of Cyepr

• AcidPour Malware Attacking Linux Data Storage Devices To Wipe Out Data

• IPVanish vs NordVPN (2024): Which VPN Is Better?

• 16-30 April 2024 Cyber Attacks Timeline

• VMware ESXi auth bypass zero-day exploited by ransomware operators (CVE-2024-37085)

• Hacker Attacking Bank Users With AI-powered Phishing Tools and Android Malware

• Surging data breach disruption drives costs to record highs

• What is sudo in Linux and why is it so important?

• Cyber Insurance Provider Cowbell Raises $60 Million

• Incident Response Is So Important We Might Try Getting Good At It

• 8 Daily Practices to Avoid Cybersecurity Burnout

• Re-Extortion: How Ransomware Gangs Re-Victimize Victims

• Just One in 10 Attacks Flagged By Security Tools

• Cybersecurity News: HealthEquity data breach, CrowdStrike impact grows, Proofpoint exploit

• Microsoft Expected To Report 31 Percent Azure Growth Amidst AI Pressure

• People Overconfident in Password Habits, Overwhelmed by Too Many Passwords

• Attackers Bypassed Google’s Email Verification to Create Workspace Accounts, Access Third-Party Services

• Ubuntu Fixes Two OpenVPN Vulnerabilities

• HealthEquity Breach Hits 4.3 Million Customers

• Millions of Spoofed Emails Bypass Proofpoint Security in Phishing Campaign

• SpaceX ‘In Talks’ To Recover Starship Rocket In Australia

• Silicon UK In Focus Podcast: Connecting the Machines

• A crafty phishing campaign targets Microsoft OneDrive users

• Apple Rolls Out Security Updates for iOS, macOS

• Xiaomi Buys $116m Plot To Expand Bejing EV Factory

• HPE $14bn Juniper Acquisition Set For ‘Unconditional’ EU Approval

• Microsoft 365 Users Targeted by Phishers Abusing Microsoft Forms

• New SideWinder Cyber Attacks Target Maritime Facilities in Multiple Countries

• 5 Bitwarden features that make it my favorite password manager

• Malware Campaign Lures Users With Fake W2 Form

• ZeroTier Raises $13.5 Million in Series A Funding

• Report: An 18% Increase in Ransomware Attacks Includes $75M Payment

• Hacked Blood Testing Provider Expects Autumn Recovery Date

• DigiCert to Revoke Thousands of Certificates Following Domain Validation Error

• The Critical Role of Response Time in Cybersecurity

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Detecting Externally Facing Resources

• OneDrive Phishing Scam Tricks Users into Running Malicious PowerShell Script

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Proofpoint phishing palaver plagues millions with ‘perfectly spoofed’ emails from IBM, Nike, Disney, others

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• VMware ESXi Flaw Exploited by Ransomware Groups for Admin Access

• X allows users to turn off GROK AI Training due to data concerns

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• 2024-07-30 – Traffic analysis exercise: You dirty rat!

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Review: Action1 – Simple and powerful patch management

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Coding practices: The role of secure programming languages

• Securing remote access to mission-critical OT assets

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Insecure file-sharing practices in healthcare put patient privacy at risk

• Malaysia is working on an internet ‘kill switch’, says minister

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• ISC Stormcast For Tuesday, July 30th, 2024 https://isc.sans.edu/podcastdetail/9074, (Tue, Jul 30th)

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Hacker Scrapes and Publishes 100,000-Line CrowdStrike IoC List

• This tool tests AI’s resilience to ‘poisoned’ data

• ManageEngine: Australian SMEs Aim to Reduce IT Costs Amid Growing Technology Complexity

• iOS gets an AI upgrade: Inside Apple’s new ‘Intelligence’ system

• 6 types of DNS attacks and how to prevent them

• Ransomware gangs exploit recently patched VMware ESXi bug CVE-2024-37085

• Senators Expose Car Companies’ Terrible Data Privacy Practices

• IT Security News Daily Summary 2024-07-29

• Progress Telerik Report Server Vulnerability Allows RCE Attacks

• ServiceNow Remote Code Execution Vulnerabilities Under Attack

• Docker Engine Vulnerability Could Allow AuthZ Bypass

• Google Chrome Password Manager Flaw Triggered Outage

• GitHub Design Flaw Retains Deleted, Private Repos

• Meta’s AI safety system defeated by the space bar

• US border cops really must get a warrant in NY before searching your phones, devices

• USENIX Security ’23 – Device Tracking via Linux’s New TCP Source Port Selection Algorithm

• Windows Security best practices for integrating and managing security tools

• Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption

• The Top 4 CrowdStrike Alternatives & Competitors in 2024

• US border cops really must get a warrant in NY before searching phones, devices

• Apple Joins Voluntary U.S. Government Commitment to AI Safety

• How to opt out of facial recognition at airports (if you’re American)

• Secure, Simple, Superior: The Advantages of Tokenized Payment Cards by Wallester

• EFF’s Concerns About the UN Draft Cybercrime Convention

• Microsoft Says Ransomware Gangs Exploiting Just-Patched VMware ESXi Flaw

• AWS revalidates its AAA Pinakes rating for Spanish financial entities

• What is SSH (Secure Shell) and How Does It Work?

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #299 — Motivation and Reality

• XSS and OAuth Combo Threatens Millions of Users Due to Hotjar Flaw

• Yes, Americans can opt out of airport facial recognition. Here’s how

• Understanding VPN Protocols: Ensuring Your Data Security

• FBCS Data Breach Affects 4.2 Million Americans

• Guarding Privacy: Cutting-Edge Technologies for Data Protection

• Vulnerability Recap 7/29/24 – Multiple Old Security Flaws Reappear

• Why You Should Hate the Proposed UN Cybercrime Treaty

• Critical Flaw in Acronis Cyber Infrastructure Exploited in the Wild

• India Cybersecurity: Key Government Initiatives for Cybersecurity

• Some good may come out of the CrowdStrike outage

• Don’t Get Hacked! Essential Cybersecurity Tips You Need To Know

• Optical fibers fit for the age of quantum computing

• HealthEquity: 4.3 Million People Affected by Data Breach

• Accelerate incident response with Amazon Security Lake – Part 2

• Ransomware attacks are inevitable on Paris Olympics 2024

• LockBit Lies Prove Another Reason to Never Pay the Ransom

• July 2024 Web Server Survey

• SIEM is not storage, with Jess Dodson (Lock and Code S05E16)

• How the Change Healthcare attack may affect cyber insurance

• What is GDPR? Compliance and conditions explained

• Acronis Cyber Infrastructure bug actively exploited in the wild

• Mandiant: North Korean Hackers Are Targeting Naval Tech

• Nine Individuals Apprehended in Cavite for Alleged Voice Phishing Activities

• Vulnerability Summary for the Week of July 22, 2024

• Mandrake Spyware Infects 32,000 Devices Via Google Play Apps

• VPN Usage Increased 5016% in Bangladesh Amidst Online Censorship

• US senators ask FTC to investigate car makers’ privacy practices

• With Open Source Artificial Intelligence, Don’t Forget the Lessons of Open Source Software

• CISA Adds Three Known Exploited Vulnerabilities to Catalog

• Security Flaws Found in Hotjar, Potentially Affecting Sensitive Data of Millions Utilising Major Global Brands

• Mitigating Data Breaches with AI-Driven Security Solutions

• Crowdstrike outage: Growing scams amid global outage

• USENIX Security ’23 – Did the Shark Eat The Watchdog In The NTP Pool? Deceiving The NTP Pool’s Monitoring System

• WTH? Google Auth Bug Lets Hackers Login as You

• Mandrake Spyware Infects 32,000 Devices via Google Play Apps

• The Aftermath of the WordPress.org Supply Chain Attack: New Malware and Techniques Emerge

• Strategies for Mitigating the Human Element of Cyber Risk

• Unlock the Potential of AI/ML Workloads with Cisco Data Center Networks

• Bitsight for Insurance Services

• UNC4393 Goes Gently into the SILENTNIGHT

• Threat Actots Leveraging ChatGPT To Craft Sophisticated Attacks

• Apple reportedly delays the first Apple Intelligence features until October

• Beware of AI ‘model collapse’: How training on synthetic data pollutes the next generation

• Top Tech Conferences & Events to Add to Your Calendar in 2024

• Taking action: how to combat the financial repercussions of a cyber incident

• Report: Russian Ransomware Gangs Account for 69% of all Ransom Proceeds

• The Dual Nature of Ransomware Attacks

• Millions of Websites Susceptible to XSS Attack via OAuth Implementation Flaw

• The NIS2 Directive: Implications for Your Organization

• Keep Your Tech Flame Alive: Akamai Trailblazer Elizabeth Padley

• Ukraine Hacked Russian Banks, Leading Major Disruption

• One of the best productivity laptops I’ve tested is not a Lenovo ThinkPad or MacBook

• Most people worry about deepfakes – and overestimate their ability to spot them

• Saboteurs Cut Internet Cables in Latest Disruption During Paris Olympics

• Effective change management practices in IT environments: a guide

• Despite Bans, AI Code Generation Tools Widely Used in Organizations

• Intruders at HealthEquity rifled through storage, stole 4.3M people’s data

• Walmart Discovers New PowerShell Backdoor Linked to Zloader Malware

• Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails

• Google apologizes for breaking password manager for millions of Windows users with iffy Chrome update

• Cato Networks Surpasses $200 Million, Doubles ARR in Under Two Years

• WhatsApp for Windows Lets Python, PHP Scripts Execute with no Warning

• Senators to FTC: Car Companies’ Data Privacy Practices Must be Investigated

• DDoS Attacks Disrupt Major Russian Banks: Ukraine Claims Responsibility

• Critical Acronis Cyber Infrastructure vulnerability exploited in the wild (CVE-2023-45249)

• Hotjar, Business Insider Vulnerabilities Expose OAuth Data Risks

• How Infostealers Pillaged the World’s Passwords

• National Vulnerability Backlog Could Surge to 30,000 by 2025

• The Other Lesson from the XZ Utils Supply-Chain Attack

• Millions of Websites Susceptible XSS Attack via OAuth Implementation Flaw

• How iOS 18 will impact your iPhone’s battery health – and what you can do about it

• The best mobile VPNs of 2024: Expert tested and reviewed

• How Searchable Encryption Changes the Data Security Game

• Acronis Warns of Cyber Infrastructure Default Password Abused in Attacks

• RaspAP Flaw Let Hackers Escalate Privileges with Raspberry Pi Devices

• New Research in Detecting AI-Generated Videos

• What Every Business Needs to Know About Ransomware

• Gh0stGambit Dropper Used to Deploy Gh0st RAT Against Chinese Users

• Data From Deleted Github Repositories May Not Actually be Deleted

• Ukraine Claims Cyber Attack Disrupted Russian ATMs and Banking System

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• US border agents must get warrant before cell phone searches, federal court rules

• AI-Generated Deepfake Attacks Force Companies To Reassess Cybersecurity

• 4.3 Million Impacted by HealthEquity Data Breach

• Amazon Faces Double Tax Fraud Probes In Italy

• How to Build an Effective Security Operations Center

• The Top 5 1Password Alternatives for 2024

• Targeted PyPI Package Steals Google Cloud Credentials from macOS Devs

• eBook: 20 tips for secure cloud migration

• How to Write a Generative AI Cybersecurity Policy

• JPMorgan Rolls Out AI Chatbot To Staff

• Malicious Python Package Attacking macOS Developers To Steal Google Cloud Logins

• Mandrake spyware sneaks onto Google Play again, flying under the radar for two years

• Most CISOs Feel Unprepared for New Compliance Regulations

• Industry Moves for the week of July 29, 2024 – SecurityWeek

• Selenium Grid Instances Exploited for Cryptomining

• Less Than Half of European Firms Have AI Controls in Place

• Cybersecurity News: PyPi package targets MacOS, Columbus, Ohio suffers cyber incident, Windows July update problems

• SK Hynix To Invest $6.8bn In Yongin Memory Chip Plant

• White House, CISA Name Key Cybersecurity Officials as National Resilience Strategy Rollout Continues

• Microsoft 365 users targeted by phishers abusing Microsoft Forms

• Russia Throttles YouTube Over ‘Anti-Russian Policy’

• North Korean Onyx Sleet Using Group Of Malware And Exploits to Gain Intelligence

• Hackers Attacking Users Searching For W2 Form

• PKfail, Critical Firmware Supply-Chain Issue Let Attackers Bypass Secure Boot

• Meta Nukes Massive Instagram Sextortion Network of 63,000 Accounts

• Russia-Backed Brute-Force Campaign Targets Microsoft Infrastructure in EU

• Why Biometrics are Key to a Safe Paris Olympics

• US Crypto Exchange Gemini Reveals Breach

• Hollywood Video Game Performers Strike Over AI Fears

• Apple Signs White House AI Safeguards

• LinkedIn To Pay $6.625m In Ad Lawsuit Settlement

• Cisco Patches the Products Impacted by RADIUS Protocol Vulnerability

• Navigating PCI DSS 4.0: Your Guide to Compliance Success

• Dazz Snaps up $50M for AI-Based, Automated Cloud Security Remediation

• French Police Push PlugX Malware Self-Destruct Payload to Clean PCs

• Hallucination Control: Benefits and Risks of Deploying LLMs as Part of Security Processes

• A week in security (July 22 – July 28)

• NVIDIA Patches Flaw in Jetson Software Used in AI-Powered Systems

• Fighting Fire with Fire: Using AI to Thwart Cybercriminals

• ‘Stargazer Goblin’ Creates 3,000 Fake GitHub Accounts for Malware Spread

• French Govt Investigating Recent Malware Attack that Compromised 3,000 Machines

• Report: 95% of Organizations Face Severe Software Supply Chain Risk

• Deepfakes, AI, and the Future of Cybersecurity: Insights from Dan DeCloss of PlexTrac

• North Korean Hackers Target USA Critical Infrastructure and Military Bases

• Microsoft admits 8.5 million CrowdStruck machines estimate was lowballed

• Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome Site

• Google’s Password Bug Hits Millions: Cybersecurity Today for Monday, July 29, 2024

• How Software Updates Can Lead to Cyber Attacks

• Belarus-linked APT Ghostwriter targeted Ukraine with PicassoLoader malware

• Fake Falcon crash reporter installer used to target German Crowdstrike users

• China ponders creating a national ‘cyberspace ID’

• Microsoft CrowdStrike Software Update leading to Phishing Attacks

• Enhancing threat detection for GenAI workloads with cloud attack emulation

• Cirrus: Open-source Google Cloud forensic collection

• The cost of cybersecurity burnout: Impact on performance and well-being

• Why a strong patch management strategy is essential for reducing business risk

• The gap between business confidence and cyber resiliency

• Whitepaper: DevSecOps Blueprint

• ISC Stormcast For Monday, July 29th, 2024 https://isc.sans.edu/podcastdetail/9072, (Mon, Jul 29th)

• Secure Boot useless on hundreds of PCs from major vendors after key leak

• 
Quickie: Password Cracking & Energy, (Sun, Jul 28th)

• CrowdStrike Outage Themed Maldoc, (Mon, Jul 29th)

Generated on 2024-07-30 23:55:14.403382