IT Security News Daily Summary 2024-08-05

• US Judge Finds Google ‘Is Monopolist’ In Landmark Ruling

• Cisco IOS XE Automation from Cisco Live AMEA 2024

• How Using a VPN May Benefit Your Privacy

• USENIX Security ’23 – Gradient Obfuscation Gives a False Sense of Security in Federated Learning

• AWS Deploying ‘Mithra’ Neural Network to Predict and Block Malicious Domains

• StormBamboo APT Targets ISPs, Spreads Malware via Software Updates

• Schools will remove app from students’ Chromebooks and iPads following security breach

• Low-Drama ‘Dark Angels’ Reap Record Ransoms

• Vulnerability Recap 8/5/24 – Already-Fixed Flaws Are Still Targeted

• Vulnerability Summary for the Week of July 29, 2024

• Reimagining AI: Ensuring Trust, Security, and Ethical Use

• US Senate Confirms First DOD Cyber Policy Chief

• Why Did Turkey Suddenly Ban Instagram? The Shocking Reason Revealed

• Microsoft Bounty Program Year in Review: $16.6M in Rewards

• Bitcoin Plummets As Investors Dump Risky Assets

• More Legal Records Stolen in 2023 Than Previous 5 Years Combined

• That cyber-heist of 2.9B personal records? There’s a class-action lawsuit looming for that

• Randall Munroe’s XKCD ‘Exam Numbers’

• Generative AI Set To Transform Automotive Industry

• IBM Consulting Cybersecurity Assistant helps clients accelerate alert investigation

• It?s a New World: APIs Protected by the Power of N

• TryCloudflare Exploited In Malicious Campaigns Spreading Malware

• Google Chrome 127 Stable Release Addressed Multiple Security Bugs

• Google Chrome To Block Infostealers With App-Bound Encryption

• Government Takes Social Media To Task Over Violence

• How To Setup OAuth JWT in the Salesforce Connector

• Researchers warn of a new critical Apache OFBiz flaw

• Israeli Hacktivist Group Claims it Took Down Iran’s Internet

• Organizations Fail to Log 44% of Cyberattacks, Major Exposure Gaps Remain

• AppOmni unveils SaaS-aware ITDR capabilities

• Cisco takes a quantum leap ahead to build a more inclusive future

• 10 Best Fortinet Competitors and Alternatives

• US Sues TikTok for Violating Children Privacy Protection Laws

• National Public Data Sued for Hack that Exposed Data of 2.9 Billion People

• Black Hat Fireside Chat: Token’s wearable MFA solution combines PKI, biometrics — in a ring

• TikTok Abuses Kids, say DoJ and FTC

• #BHUSA: Nation-State Attacks Target Hardware Supply Chains

• SaaS authentication: Identity management with Amazon Cognito user pools

• Malware induction into Windows and MacOS devices via ISP

• 332 Million Email Addresses Scraped from SOCRadar.io Published Online

• Tips to provide network support for remote workers

• CrowdStrike fires back at Delta over outage allegations

• CISA Adds One Known Exploited Vulnerability to Catalog

• Surge in Magniber Ransomware Attacks Impact Home Users Worldwide

• Hackers Exploit Bytecode Interpreters to Inject Malicious Code

• Getting to Know Check Point Olympian: Ron Darmon

• Top Tech Conferences & Events to Add to Your Calendar in 2024

• CrowdStrike Outage Renews Supply Chain Concerns, Federal Officials Say

• Your copilot for improved cyber protection

• Black Basta Unleashes Custom Malware Following Qakbot Takedown

• Dark Web Actor Claims Responsibility of ADT Data Breach

• Critical Vulnerability in Apache OFBiz Requires Immediate Patching

• AWS unveils Mithra to identify and mitigate malicious domains across its massive system

• White House Officials Meet with Allies, Industry on Connected Car Risks

• Leveraging CRQ to Comply With DORA Regulations | Kovrr

• Novel SLUBStick Linux Exploit Gives Attackers Full System Control

• Sneaky SnakeKeylogger slithers into Windows inboxes to steal sensitive secrets

• Linux Kernel Impacted by New SLUBStick Cross-Cache Attack

• Cisco Umbrella for Government Achieves FedRAMP® “Authority to Operate”

• Mozilla Follows Google in Distrusting Entrust’s TLS Certificates

• AI in the Enterprise: Cutting Through the Hype and Assessing Real Risks

• Critical Apache OFBiz pre-auth RCE flaw fixed, update ASAP! (CVE-2024-38856)

• Apple Unveils Homomorphic Encryption Package for Secure Cloud Computing

• Cryptonator Seized for Laundering Ransom Payments, Stolen Crypto

• Salt Security Provides Free Scans for XXS Vulnerabilities Involving OAuth Protocol

• Kazakh Organizations Targeted by ‘Bloody Wolf’ Cyber Attacks

• Researchers Uncover Flaws in Windows Smart App Control and SmartScreen

• 86% of Firms Identify Unknown Cyber-Risks as Top Concern

• How AWS tracks the cloud’s biggest security threats and helps shut them down

• Threat Actor Claiming Breach of Gregory’s Foods 400Gb Database

• New LianSpy Attacking Android Users to Steal Sensitive Data

• Threat Actor Allegedly Claims Leak of SisaCloud Database

• AWS launches Mithra to identify and mitigate malicious domains across its massive system

• Keytronic incurred approximately $17 million of expenses following ransomware attack

• Who’s Minding the Store? Why Operational Technology Security Has Become a Top Priority for Federal Security Leaders

• CrowdStrike unhappy about Delta’s ‘litigation threat,’ claims airline refused ‘free on-site help’

• 7 features to look for in a PII Data Discovery Software: A guide for infosec and devops Professionals

• Cyber Threat Intelligence Capability Maturity Model (CTI-CMM) released

• CrowdStrike trying to use legal threats to suppress criticism and parody of global IT outage

• The Pros and Cons of Bitcoin

• Beware Of Fake AI Editor Website That Steals Your Login Credentials

• Cisco XDR: Open Ecosystem Accelerated at Black Hat Events

• Protect AI Raises $60M in Series B Financing

• Abuse of Cloudflare Tunnel Service for Malware Campaigns Delivering RATs

• Rapid7 releases Command Platform, unified attack defense and response

• Ryan Pentney reflects on 10 years of Talos and his many roles from the Sourcefire days

• New BlankBot Android Malware Targets Users’ Banking Data

• Australian Companies Will Soon Need to Report Ransom Payments

• Apache OFBiz Users Warned of New and Exploited Vulnerabilities

• The Loper Bright Decision: How it Impacts Cybersecurity Law

• TikTok Withdraws Lite Rewards Program from EU Over Child Safety Fears

• Hackers Abused StackExchange Platform To Deliuver Malicious Python Package

• Mirai Botnet Attacking Apache OFBiz Directory Traversal Vulnerability

• Hackers Infect Windows With Backdoor Malware Via “Car For Sale” Ad

• Exodus Underground Market Place Emerging As A Heaven For Cybercriminals

• Mint-stealer Targeting web browsers, VPN clients & messaging apps to Steal Logins

• How Project 2025 Would Put US Elections at Risk

• US Releases Russian Hackers and Spies as Part of Prisoner Swap

• Chinese hackers compromised an ISP to deliver malicious software updates

• Amazon Shares Plummet On Slowing Sales

• Google Hires Character.AI Staff, Licenses Tech

• Coinbase Chief Executive Sees Political ‘Shift’ On Crypto

• Customers Flock To Shein South Africa Pop-Up Store

• The Top 6 Urban VPN Alternatives for 2024

• Newly Identified BITSLOTH Backdoor Uses Novel C2 Communication Channel

• FBI Warns of Scammers Posing as Crypto Exchange Employees

• Airlines are Flying Blind on Third-Party Risks

• Tech Support Scam Ring Leader Gets Seven Years in Prison, $6M Fine

• Security Bypass Vulnerability Exposed in Rockwell Automation Logix Controllers

• Enhancing Incident Response Readiness with Wazuh

• White House and EC-Council Launch $15m Cybersecurity Scholarship Program

• Hackers Hijacked ISP Service Provider To Poison Software Updates

• A flaw in Rockwell Automation ControlLogix 1756 could expose critical control systems to unauthorized access

• LianSpy: new Android spyware targeting Russian users

• Justice Department Sues TikTok, Accusing the Company of Illegally Collecting Children’s Data

• Cybersecurity Headlines: Software update malware, investors sue CrowdStrike, cybercriminals in prisoner swap

• Beware Of New BingoMod Android Malware Steals Money & Formats Device

• 5 Amazon Alexa privacy settings you should change right away

• US Sues TikTok For Children’s Law Violations

• Researchers Details How Hackers Can Steal Passwords via HDMI Cables

• 3 Types of Bot Attacks to Guard Against

• Cybersecurity: The Unsung Hero of SOX Compliance

• New Discord DDoS Campaign Called Panamorfi Targets Vulnerable Jupyter Notebooks

• US Senate Panel Advances Cyber Regulatory Harmonization Bill

• Germany Summons Chinese Ambassador Over Cyberattack on Cartography Agency

• APT Group StormBamboo Attacks ISP Customers Via DNS Poisoning

• US Sues TikTok Over ‘Massive’ Children’s Privacy Breach

• Google Project Astra: The AI Assistant We Have Been Waiting for?

• Is Australia’s Public Sector Ready for a Major Cyber Security Incident?

• Strategies for Mitigating LLM Risks in Cybersecurity

• DSPM: A Cybersecurity Approach Tailor-Made for This AI Era

• SEC Charges IRL Founder With Investor Fraud

• Intel, Nvidia Stocks Slide Amidst Chip Turmoil

• Leaked Wallpaper Vulnerability Exposes Windows Users to Privilege Escalation Attacks

• A week in security (July 29 – August 4)

• HP Wolf: Not just software attacks; hackers are coming for enterprise hardware, too

• Effective Third-Party Risk Management Under PCI DSS 4.0

• Industry Moves for the week of August 5, 2024 – SecurityWeek

• Ransomware Attack Cost Keytronic Over $17 Million

• Google Dark Web Monitoring goes free – so what?

• Authorities Seized Cryptonator Site & Charged the Admin

• China-linked APT41 breached Taiwanese research institute

• Wristband Releases Public Beta of its B2B Authentication Platform

• Critical Flaw in Rockwell Automation Devices Allows Unauthorized Access

• Script obfuscation using multiple instances of the same function, (Mon, Aug 5th)

• Threat Actor offers Car Selling Phishing lure

• Safeguarding Data in Container Security Environments

• Evasive Panda Compromises ISP to Distribute Malicious Software Updates

• China starts testing national cyber-ID before consultation on the idea closes

• The Great CrowdStrike Crash, AI’s Role in Employee Smiles

• The role of AI in cybersecurity operations

• China-Linked Hackers Compromise ISP to Deploy Malicious Software Updates

• New Android Trojan “BlankBot” Targets Turkish Users’ Financial Data

• How to start your cybersecurity career: Expert tips and guidance

• MISP: Open-source threat intelligence and sharing platform

• AI expected to improve IT/OT network management

• How life sciences companies use AI to fill the cybersecurity skills gap

• Google gamed into advertising a malicious version of Authenticator

• ISC Stormcast For Monday, August 5th, 2024 https://isc.sans.edu/podcastdetail/9082, (Mon, Aug 5th)

• IT Security News Weekly Summary – Week 31

• IT Security News Daily Summary 2024-08-04

• Google Delays Plan to Replace Cookies, Leaving Users and Industry in Limbo

• USENIX Security ’23 – NeuroPots: Realtime Proactive Defense against Bit-Flip Attacks in Neural Networks

• World’s First AI Law: A Tough Blow for Tech Giants

• Why Automated Incident Response is Essential for Your SOC

• Chinese StormBamboo APT compromised ISP to deliver malware

• Generative AI is Closing The Tech Gap Between Security Teams And Threat Actors

• New Android Malware BingoMod Targets Financial Data and Wipes Devices

• Basta Ransomware Culprits Revealed by Mandiant Investigation

• DoJ and FTC Sue TikTok for Violating Children’s Privacy Laws

• The Value of Trust: How Companies Can Harness Data Responsibly to Drive Growth

• Hackers attempt to sell the personal data of 3 billion people resulting from an April data breach

• Security Affairs newsletter Round 483 by Pierluigi Paganini – INTERNATIONAL EDITION

• Security Affairs Malware Newsletter – Round 5

• New Veeam Data Cloud release delivers Microsoft 365 backup and recovery

• Votiro introduces enhanced data privacy features and integrations

• Binary Defense releases MDR Plus managed security solution

• OOXML Spreadsheets Protected By Verifier Hashes, (Sat, Aug 3rd)

• Week in review: VMware ESXi zero-day exploited, SMS Stealer malware targeting Android users

• Bringing Security Back into Balance

• Top 10 Red Sift OnDMARC Alternatives & Competitors in 2024

• Top 10 Mimecast DMARC Analyzer Alternatives and Competitors in 2024

• Top 10 PowerDMARC Alternatives and Competitors in 2024

• Top 10 Proofpoint Alternatives and Competitors in 2024

Generated on 2024-08-05 23:55:08.593305