IT Security News Daily Summary 2024-08-01

• The One-Pixel Threat: How Minuscule Changes Can Fool Deep Learning Systems

• The cyberthreat that drives businesses towards cyber risk insurance

• Over 20,000 internet-exposed VMware ESXi instances vulnerable to CVE-2024-37085

• How to assess SOC-as-a-service benefits and challenges

• InfoSec community sounds off on CrowdStrike outage, next steps

• Widespread OTP-Stealing Campaign Targets Android Users

• Federated access to Amazon Athena using AWS IAM Identity Center

• I tested the 3 best VPNs for streaming the Summer Olympics

• Convicted Cybercriminals Included in Russian Prisoner Swap

• Security Risk Advisors Announces Launch of VECTR Enterprise Edition

• CISA Releases Software Acquisition Guide for Government Enterprise Consumers: Software Assurance in the Cyber-Supply Chain Risk Management (C-SCRM) Lifecycle

• What Is OAuth? Meaning + How It Works

• SENIX Security ’23 – Hot Pixels: Frequency, Power, and Temperature Attacks on GPUs and Arm SoCs

• Fraud in the Travel Industry & How to Prevent It

• Too late now for canary updates, says pension fund suing CrowdStrike

• EU Approves Hewlett Packard Enterprise’s $14bn Juniper Acquisition

• What is dynamic application security testing (DAST)?

• The Cisco Store Retail Roundup, Volume 2

• There is no real fix to the security issues recently found in GitHub and other similar software

• HealthEquity Data Breach Exposes Personal Information

• Tracking Proxy Scans with IPv4.Games, (Thu, Aug 1st)

• Google Using Enhanced Encryption to Protect Cookies

• An Analysis of the Rising Cyber Crime Levels Across the Globe

• Elon Musk Sued By Former CNN Anchor Over Cancelled X Deal

• New BingoMod Android Malware Posing as Security Apps, Wipes Data

• The best VPN for streaming in 2024: Expert tested and reviewed

• Microsoft Confirms Global Azure Outage Caused by DDoS Attack

• CrowdStrike, Antitrust, and the Digital Monoculture

• 8 Essential Considerations for Post-Quantum Cryptography Migration

• OAuth and XSS Bugs: Exposing Data of Millions of Users

• Progress Introduces Chef Courier for Simplified Job Management Across Corporate Software Ecosystems

• Top 6 Cloud Computing Certifications Worth Taking

• 8 EDR Best Practices You Need to Pay Attention to in 2024

• Inaugural Pentagon Cyber Policy Chief Nominee Sails Through Senate Armed Services Committee

• Alex Stamos Named CISO at SentinelOne

• Ransomware news trending on Google for this day

• Synchron Embeds Apple Vision Pro With Brain Interface

• Cyber A.I. Group Announces LOI to Acquire Prominent North American Cybersecurity Firm

• Top 39 Cybersecurity Companies You Need to Know 2024

• Pharma Giant Cencora confirmed the theft of personal and health information

• Innovative Approach Promises Faster Bug Fixes

• Scam Platform Shut Down by UK Authorities After 1.8 Million Fraudulent Calls

• Cyber A.I. Group Announces LOI to Acquire Prominent North American Cyber Security Company

• Navigating BNPL Integration: Key Steps and Best Practices for Developers

• $75 Million Record-Breaking Ransom Paid To Cybercriminals, Say Researchers

• Vonets WiFi Bridges

• Johnson Controls exacqVision Web Service

• Johnson Controls exacqVision Server Web Service

• Fortinet’s Progress on its Secure by Design Pledge Commitments

• RansomEXX Group Targets Indian Banking With New Tactics

• CISA Names First Chief Artificial Intelligence Officer

• How to counter adversarial AI

• FBI, CISA remind US voters that DDoS attacks can’t touch election systems

• He Was an FBI Informant—and Inspired a Generation of Violent Extremists

• A Commander’s-Intent-driven Network – Enabling Cyberspace Operations from the Tactical Edge and Beyond

• India’s Digital Sovereignty: Balancing Control and Freedom in the Internet Age

• Here’s How to Safeguard Your Smart Home Connected Devices

• Cicada3301’s Cyberattack on Tri-Star Display Exposes 95GB of Sensitive Data

• Over 1 Million Domains at Risk of ‘Sitting Ducks’ Domain Hijacking Technique

• Wordfence Intelligence Weekly WordPress Vulnerability Report (July 22, 2024 to July 28, 2024)

• Akamai?s Strategic and Transparent Implementation of AI

• Meta Posts Strong Q2 Amid Heavy AI Spending

• How Smart Tech is Teaching Us About Our Oceans, One Catch at a Time

• How Cyberthreats Could Disrupt the Olypmics

• DigiCert Mass-Revoking TLS Certificates Due to Domain Validation Bug

• Hackers Distributing Malicious Python Packages via Popular Developer Q&A Platform

• TgRAT Malware Attacking Linux Servers with New Variant

• Over 20,000 Ubiquiti Cameras and Routers are Vulnerable to Amplification Attacks and Privacy Risks

• US Senate Passes Landmark Bill Protecting Children’s Online Safety and Privacy

• Exploited Vulnerability Could Impact 20k Internet-Exposed VMware ESXi Instances

• Strata Identity to Demonstrate How to Modernize Legacy Identity Systems to Microsoft Entra ID at Black Hat 2024

• New Android Banking Trojan BingoMod Steals Money, Wipes Devices

• AWS completes the first GDV joint audit with participant insurers in Germany

• Insecure File-Sharing Practices in Healthcare Put Patient Privacy at Risk

• The Kaiser Data Breach Should Be a Wake-Up Call for Cybersecurity in Healthcare

• Why geographical diversity is critical to build effective and safe AI tools

• Cisco Innovating a New Era of Security at Black Hat 2024

• Ransomware Attack On Service Provider Hits 300 Small Banks Across India

• Mozilla follows Google in losing trust in Entrust’s TLS certificates

• BingoMod Android RAT Wipes Devices After Stealing Money

• kvmCTF: Google’s $250K Bounty for KVM Zero-Day Vulnerabilities

• Applying Vulnerability Management to Zero Trust: Insights from Fortra’s Tyler Reguly

• APT41 likely compromised Taiwanese government-affiliated research institute with ShadowPad and Cobalt Strike

• AI Plans Hampered By Lack Of Skills, Governance Challenges

• CrowdStrike Sued By Shareholders After Huge IT Outage

• New “Sitting Ducks” DNS Attack Lets Hackers Easy Domain Takeover

• Bitdefender Flaw Let Attackers Trigger Server-Side Request Forgery Attacks

• How To Fix the OWASP Top 10 Vulnerability in Angular 18.1.1v

• The Top 7 NordVPN Alternatives for 2024

• A $500 Open-Source Tool Lets Anyone Hack Computer Chips With Lasers

• Obfuscation: There Are Two Sides To Everything

• How “professional” ransomware variants boost cybercrime groups

• Education in Secure Software Development

• Some Companies Pay Ransomware Attackers Multiple Times, Survey Finds

• Multiplayer.it – 503,957 breached accounts

• SMS Stealer Targeting Several Countries with Over 100,000 Malicious Android Apps

• Cado platform enhances SOC efficiency with AI-driven workflow automation

• Detecting evolving threats: NetSupport RAT campaign

• Beware Of Malicious Crypto Management App That Drains Your Wallet

• April 2024 Cyber Attacks Statistics

• Secretive: Open-Source App for Storing and Managing SSH Keys in the Secure Enclave

• Microsoft Confirms Azure, 365 Outage Linked to DDoS Attack

• Security Flaws at UK Elections Agency Left Door Open for Chinese Hackers, Privacy Watchdog Finds

• DigiCert Revoking 83,000 Certificates of 6,800 Customers

• Best 5 SOC 2 Compliance Software in 2024

• Google Chrome Adds App-Bound Encryption to Protect Cookies from Malware

• Cencora Confirms Patient Data Stolen in Cyber-Attack

• Cybersecurity News: Elections and DDoS, dating apps leak locations, Germany blames China

• What Is a Field CISO?

• Social Media Malvertising Campaign Promotes Fake AI Editor Website for Credential Theft

• Get an Extensive Education in Cybersecurity for Just $40

• Apple Extends Zero-Day Patch to Older Macs, Urges Immediate Update

• E-Commerce Fraud Campaign Uses 600+ Fake Sites

• Where to find Talos at BlackHat 2024

• CrowdStrike & Microsoft to Face Lawsuit from Delta Air Lines Following System Crash

• Voice Over Wi-Fi Vulnerability Let Attackers Eavesdrop Calls And SMS

• EvilProxy Phishing Kit Used in Over One Million Attacks Monthly

• Lineaje Secures $20 Million in Funding To Address Software Supply Chain Issues

• Synack PTaaS platform offers complete security testing suite

• New Microsoft whitepaper shares how to prepare your data for secure AI adoption

• BEC Attacks Surge 20% Annually Thanks to AI Tooling

• Beware of Fake AI Tools Masking a Very Real Malware Threat

• Threat Actor Impersonates Google via Fake Ads for Authenticator

• How SquareX is Redefining Web Security: An In-Depth Discussion with Chief Architect Jeswin Mathai

• Wing Security unveils custom SaaS Threat Intelligence for direct dashboard integration

• Tycoon 2FA Phishing Kit Exploits Amazon SES to Steal User Credentials

• How to spot signs of ransomware in your school district

• Nucleus Vulnerability Intelligence Platform enhances threat assessment and remediation speed

• Facebook Ads Lead to Fake Websites Stealing Credit Card Information

• Germany has accused China of Attack on Critical Infrastructure Since 2021

• BingoMod Android RAT steals money from victims’ bank accounts and wipes data

• Stealer Logs Posted to Telegram – 26,105,473 breached accounts

• Android Mobile Security alert against SMS Stealer Malware

• Germany names China as source of attack on government geospatial agency

• Why CISOs face greater personal liability

• Threat intelligence: A blessing and a curse?

• Practical strategies to mitigate risk and secure SAP environments

• Maritime Cybersecurity: Avoiding the Next DALI

• Airlines are flying blind on third-party risks

• OAuth Vulnerability Exposes 1 Million Websites To XSS Attacks

• Join the Fight: Calling Fintech Leaders to Unite With Federated Learning for Superior Fraud Detection

• Infosec products of the month: July 2024

• ISC Stormcast For Thursday, August 1st, 2024 https://isc.sans.edu/podcastdetail/9078, (Thu, Aug 1st)

• Ransomware infection cuts off blood supply to 250+ hospitals

• Cosmic Bomber is like Bomberman multiplayer meets Web3

• Ransomware infection cuts off blood supply to 250 hospitals

• The Procurement and Operational Benefits of a Cybersecurity Platform

• Understanding the Impact of the CrowdStrike Event

• EDR vs EPP vs Antivirus: Comparing Endpoint Protection Solutions

• A ransomware attack disrupted operations at OneBlood blood bank

• New Jack Henry Banno Integration from Allure Security Strengthens Security Against Phishing and Online Impersonations

• IT Security News Monthly Summary – August

• IT Security News Daily Summary 2024-07-31

• An In-Depth Look at the Cisco CCDE-AI Infrastructure Certification

• More than 83K certs from nearly 7K DigiCert customers must be swapped out now

• Russia takes aim at Sitting Ducks domains, bags 30,000+

• Security review for Microsoft Edge version 127

• USENIX Security ’23 – Oops..! I Glitched It Again! How to Multi-Glitch the Glitching-Protections on ARM TrustZone-M

• Identifying a BOLA Vulnerability in Harbor, a Cloud-Native Container Registry

• What is CrowdStrike? Everything You Need to Know

• The Cisco Store Patching Station

• Introducing the MSRC Researcher Resource Center

• Microsoft: DDoS Attack on Azure Services Exacerbated by Defense Error

• WhatsApp Allows Python, PHP Script Execution on Windows Without Warnings

• Mandrake Android Malware Creeps Up On Google Play Store Again

• Recent SideWinder Campaign Targets Ports And Maritime Facilities

• The big cybersecurity themes at Black Hat 2024 — and why they matter

• State of SaaS Security Report 2024: Key Findings & Tips from Deployments at Scale

• Why You Should Clear Your Android Browser’s Cache and Cookies

• Increased Activity Against Apache OFBiz CVE-2024-32113, (Wed, Jul 31st)

• Microsoft Says Ransomware Groups Are Exploiting the Newly-Patched VMware ESXi Flaw

• Ransomware Attack Hits OneBlood Blood Bank, Disrupts Medical Operations

• US To Exempt Allies From Expanded China Chip Equipment Export Rules

• Global SMS Stealer Targeting Android Users via Malicious Apps and Ads

• Australian Organisations Experiencing Highest Rate of Data Breaches, Reports Rubrik

• Microsoft confirms DDoS attack disrupted cloud services

• Cost of Data Breach in 2024: $4.88 Million, Says Latest IBM Study

• Urgent Email Alert from Amazon UK Customers Must Act Now

• Over 8,000 Exploit Attempts Already Blocked For Recently Patched Unauthenticated Arbitrary File Upload Vulnerability in 简数采集器 (Keydatas) WordPress Plugin

• CISA and FBI Release Joint PSA: Putting Potential DDoS Attacks During the 2024 Election Cycle in Context

• X Leverages Users’ Posts For Training Its Grok AI

• 6 Best Vulnerability Management Software & Systems in 2024

• Texas Wins $1.4 Billion Biometric Settlement Against Meta. It Would Have Happened Sooner With Consumer Enforcement

• Chrome adopts app-bound encryption to stymie cookie-stealing malware

• Report: Amount of Data Being Analyzed by Cybersecurity Teams Rises

• Analysis of Top Infostealers: Redline, Vidar and Formbook

• Meta to pay $1.4 billion over unauthorized facial recognition image capture

• Five takeaways from Forrester’s 2024 state of application security

• Hackers Exploit Vmware ESXi Vulnerability in Ransomware Attacks

• Source Code of Phorpiex Botnet with Anti-AV Capabilities on Sale

• Navigating the Evolving Landscape of Cybersecurity

• CrowdStrike Sued? — Delta Dials David Boies

• Out-of-bounds read vulnerability in NVIDIA driver; Open-source flashcard software contains multiple security issues

• Microsoft Slowdown In Cloud Growth Worries Wall Street

• Oracle challenges cloud giants with new Nvidia AI hardware offerings

• Nearly 7% of Internet Traffic Is Malicious

• Multiple SMTP Servers Vulnerable to Spoofing Attacks, Let Hackers Bypass Authentication

• Our Last Chance to Stop KOSA | EFFector 36.10

• The CISO: A Cornerstone of Private Equity Success

• Urgent Blood Appeal Issued in US After Ransomware Attack

• VMware vulnerability leads ransomware to encrypt mass virtual machines

• Microsoft 365 subscriptions now include a free VPN – here’s how to use it

• What is cyber attribution?

• Unlocking the Future of MSSP Operations with Cisco CDO APIs

• Security Researchers and Journalists at Risk: Why You Should Hate the Proposed UN Cybercrime Treaty

• Embedding AI security from the get go

• Black Hat Preview: CrowdStrike, Disinformation Lead The Narrative

• Passwords Vanish for 15 Million Windows Users, Google Says “Sorry”

• New SMS Stealer Malware Targets Over 600 Global Brands

• UK Investigates Alphabet Partnership With AI Firm Anthropic

• Vulnerabilities Enable Attackers to Spoof Emails From 20 Million Domains

• The Concerning Rise of AI “Undressing” Apps: A Violation of Privacy and Ethics

• SMS Stealer malware targeting Android users: Over 105,000 samples identified

• Take Cover: Securing Games Truly Is a Battle Royale

• Bridging the skills gap to build a secure future for the cloud

• Five months after takedown, LockBit is a shadow of its former self

• Cyberse and the Marketplace Era of Cybersecurity Purchasing

• DigiCert to Revoke 83,000+ SSL Certificates Due to Domain Validation Oversight

• CrowdStrike Shares Plunge Amid Delta Compensation Report

• PR vs cybersecurity teams: Handling disagreements in a crisis

• California digitizes car titles, putting 42 million vehicles on the blockchain

• Malwarebytes vs Bitdefender: Best Cybersecurity Software of 2024

• Addressing communication roadblocks to overcome cybersecurity threats

• Malicious Packages Hidden in PyPI

• Data Breaches for the Month July 2024

• Google Backs Messaging Layer Security for Enhanced Privacy and Interoperability

• North Korea-Linked Malware Targets Developers on Windows, Linux, and macOS

• Meta to Pay Texas $1.4bn for Unlawful Biometric Data Capture

• World Wide Web Consortium Opposed Google’s Decision on Third-party cookies

• Vulnerability Management in DevOps Environments

• Apple fixes Siri vulnerabilities that could have allowed sensitive data theft from locked device. Update now!

• Are You Getting the Most Value from Your Existing CNAPP Solution?

• City of Columbus Says Data Compromised in Ransomware Attack

• New PyPI Package Zlibxjson Steals Discord, Browser Data

• ‘Error’ in Microsoft’s DDoS defenses amplified 8-hour Azure outage

• Can GPT-4o Be Trusted With Your Private Data?

• Apple fixed dozens of vulnerabilities in iOS and macOS

• How to Best Secure Banking Applications – Top Tips from a Mobile Security Expert

• The Challenges and Responsibilities of CISOs with Halcyon

• New Specula Tool Turning Outlook as a C2 Server by Leveraging Registry

• The best travel VPNs of 2024: Expert tested and reviewed

• Don’t Let Your Domain Name Become a “Sitting Duck”

• Tenable Considering a Potential Sale: Report

• “There is no business school class that would ever sit down and design Talos”

• Protect Against Adversary-in-the-Middle with Cisco’s User Protection Suite

• The Transformational Opportunity of AI on ICT Jobs

• DigiCert Revokes 83,267 TLS Certificates Due to DNS Check Problem

• Top CVEs of July 2024: Key Vulnerabilities and Mitigations

• How To Get the Most From Your Security Team’s Email Alert Budget

• Chinese Hackers Target Japanese Firms with LODEINFO and NOOPDOOR Malware

• Tesla Using Full Self Driving In Crash Kills Biker, Amid Another Recall

• Phishing Attack Steals Donations from Trump Voters Using Fake Websites

• Meta paid a $1.4 Billion Settlement for the Unauthorized Capture of Personal Biometric Data

• Cybercriminals Target Polish Businesses with Agent Tesla and Formbook Malware Delivered by ModiLoader

• DigiCert Revoking Many Certificates Due to Verification Issue

• Microsoft: DDoS defense error amplified attack on Azure, leading to outage

• Clutch Security launches to transform management of NHIs

• GDPR Consent Request Forms: Sample Text

• Can ChatGPT-4o Be Trusted With Your Private Data?

• New Specula Tool Uses Outlook for Remote Code Execution in Windows

• Report: 40% of Environments Exposed to Full Take Over

• How Bots and AI are Fueling Disinformation

• Fortanix expands Key Insight to enhance cryptographic security across hybrid environments

• Cyber Espionage Group XDSpy Targets Companies in Russia and Moldova

• Cybercriminals Deploy 100K+ Malware Android Apps to Steal OTP Codes

• Join Us 08-16-24 for “Hacking the Demo” – Super Cyber Friday

• Intel To Cut Thousands Of Jobs – Report

• AI-powered ‘narrative attacks’ a growing threat: 3 defense strategies for business leaders

• Phishing campaigns target SMBs in Poland, Romania, and Italy with multiple malware families

• How AI is Shaping Fraud: VIPRE Reveals 40% of BEC Emails Are Now AI-Generated

• Cost of a Data Breach Surges 10% on Shadow Data Challenge

• DDoS Attack Triggers New Microsoft Global Outage

• Cybersecurity News: Delta’s legal maneuver, Record-breaking ransom, Meta $1.4B settlement

• 6% of All Published CVEs Have Been Exploited in the Wild, Report Finds

• AnimeLeague – 192,134 breached accounts

• From Geopolitics to Boardrooms: The Impact of the Kaspersky Ban

• Cycode unveils Cycode AI to enhance ASPM platform with advanced security features

• #TripwireBookClub – From its Origins to its Future: How AI Works

• IBM: Cost of a Breach Reaches Nearly $5 Million, With Healthcare Being Hit the Hardest

• UK Electoral Commission slapped for basic cybersecurity fails

• Innovative approach promises faster bug fixes

• Researchers Uncover Largest Ever Ransomware Payment of $75m

• Lineaje secures $20 million in funding to address software supply chain issues

• Enabling new service models with SSDP

• Chrome Security Update: Patch for Critical Flaw that Leads to Exploitation

• Bumble and Hinge allowed stalkers to pinpoint users’ locations down to 2 meters, researchers say

• Building bridges, feeding people and empowering students: How new technologies are changing lives

• A Fortune 50 company paid a record-breaking $75 million ransom

• Email Attacks Surge, Ransomware Threat Remains Elevated

• Meta Agrees to $1.4B Settlement With Texas in Privacy Lawsuit Over Facial Recognition

• Can Negotiations Yield Success in Ransomware Attacks

• Devo Technology launches data orchestration and SOC enhancements

• DDoS Attack on Microsoft Azure Cloud leads to another global IT Outage

• Cohesity unveils enhanced GenAI capabilities for faster threat detection and recovery

• Microsoft world wide outage: Cybersecurity Today for Wednesday, July 31, 2024

• How AI is Shaping Fraud: Vipre Reveals 40% of BEC Emails Are Now AI-Generated

• IBM: Cost of Data Breach on Average Reaches $4.9 Million

• If You are Reachable, You Are Breachable, and Firewalls & VPNs are the Front Door

• NSFOCUS RSAS New Features Unleashed

• Proficio launches ProBAS service to help organizations better prepare and respond to cyber attacks

• Meta Settles for $1.4 Billion with Texas Over Illegal Biometric Data Collection

• Dark Angels gang scores a record-breaking $75 million ransom

• What CISOs need to keep CEOs (and themselves) out of jail

• Leveraging dynamic configuration for seamless and compliant software changes

• Cybersecurity jobs available right now: July 31, 2024

• Secretive: Open-source app for storing and managing SSH keys in the Secure Enclave

• ISC Stormcast For Wednesday, July 31st, 2024 https://isc.sans.edu/podcastdetail/9076, (Wed, Jul 31st)

• DigiCert gives unlucky folks 24 hours to replace doomed certificates after code blunder

• Ubook – 699,908 breached accounts

• Lineaje raises $20M to help organizations combat software supply chain threats

• ThreatLabz Ransomware Report: Unveiling a $75M Ransom Payout Amid Rising Attacks

Generated on 2024-08-01 23:55:12.936930