IT Security News Daily Summary 2024-08-07

• Nexera DeFi Protocol Hacked: $1.8M Stolen in Major Smart Contract Exploit

• From Cybersecurity Practitioner to Advocacy: My Journey Back to Cisco

• Veracode highlights security risks of GenAI coding tools

• Atari Asteroids Hack Sparks Debate on Blockchain Gaming Transparency

• Cybercrime Rapper Sues Bank over Fraud Investigation

• Democracy’s Challenge: Secure Elections Worldwide

• Over 40,000 Internet-Exposed ICS Devices Found in US: Censys

• #BHUSA: CrowdStrike Outage Serves as Dress Rehearsal for China-Led Cyber-Attacks

• AI PCs bring new security protections and risks. Here’s what users need to know

• D3 Introduces Program to Help SOC Teams Migrate Successfully from Legacy SOAR

• Living off the VPN ? Exploring VPN Post-Exploitation Techniques

• Elon Musk Says “No Choice” But To Close X’s San Francisco HQ

• Jumpstart Your Meraki Auto-VPN Journey in the Multi-Cloud Environment

• Student Devices Wiped — Mobile Guardian Hacked AGAIN

• Docker vs. Podman: Exploring Container Technologies for Modern Web Development

• Nvidia AI security architect discusses top threats to LLMs

• Researchers unveil AWS vulnerabilities, ‘shadow resource’ vector

• Announcing BlueHat 2024: Call for Papers now open

• Waymo Expands Ride-Hailing Service, Amid Growing Demand

• A Flaw in Windows Update Opens the Door to Zombie Exploits

• EFF Tells Yet Another Court to Ensure Everyone Has Access to the Law and Reject Private Gatekeepers

• Faulty instructions in Alibaba’s T-Head C910 RISC-V CPUs blow away all security

• Randall Munroe’s XKCD ‘Matter’

• OpenAI’s Tool Can Detect Chat-GPT Written Texts

• Increase in Magniber Ransomware Attacks Affects Home Users Globally

• #BHUSA: New Ransomware Groups Emerge Despite Crackdowns

• Ireland’s DPC Takes Twitter to Court Over AI User Data Concerns

• Recent ProtonVPN Update Brings Discreet Icons, Stealth Protocol

• Can Deaf and Hard of Hearing People Thrive in IT and Tech Careers?

• How To Check and Update Newer Versions for Dependencies in Maven Projects

• Hackers could spy on cell phone users by abusing 5G baseband flaws, researchers say

• UK ICO Fines NHS Supplier For Medical Records Breach

• 12 types of endpoint security

• Cloud Security Strategy: Building a Robust Policy in 2024

• RaaS Group Targets Corporate Networks with SharpRhino RAT

• Windows Update Flaws Allow Undetectable Downgrade Attacks

• Tenable Adds Ability to Prioritize Vulnerabilities by Threat Level

• What Is Encryption and How Does It Work?

• Critical Solar Power Grid Vulnerabilities Risk Global Blackouts

• How You Can Avoid a CrowdStrike Fiasco

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• Microsoft 365 Phishing Alert Can Be Hidden with CSS

• Fortinet acquires Next DLP

• Musk Hits Out At UK Justice System, Amid War Of Words

• Data Breaches Are Costing Australian Organisations, IBM Report Reveals

• Black Hat and DEF CON Roundup 2024: What to Expect From This Week’s Security Events

• Hackers could spy on cellphone users by abusing 5G baseband flaws, researchers say

• New and Emerging Cybersecurity Threats and Attacker Tactics

• Report: Email Attacks Skyrocket 293%

• Fighting AI fire with AI fire

• Researcher Sounds Alarm on Windows Update Flaws Allowing Undetectable Downgrade Attacks

• USENIX Security ’23 – Squirrel: A Scalable Secure Two-Party Computation Framework for Training Gradient Boosting Decision Tree

• Hackers are Employing Real Estate Fraud to Target North Dakota Citizens

• Hackers Breach ISP to Poison Software Updates With Malware

• Akamai Blocked 419 TB of Malicious Traffic in a 24-Hour DDoS Attack

• Examine a captured packet using Wireshark

• European IT Professionals Want Training on AI, Poll Finds

• Roundcube Webmail Flaws Allow Hackers to Steal Emails and Passwords

• New Linux Kernel Exploit Technique ‘SLUBStick’ Discovered by Researchers

• CISA Releases Guide to Enhance Software Security Evaluations

• Attack Vectors at a Glance

• The Best MSSP Software You Should Consider Looking At in 2024

• Federal Watchdog Urges EPA to Develop Comprehensive Cyber Strategy to Protect Water Systems

• Sysdig Adds Ability to Correlate Identities to Cloud Computing Breaches

• This Caller Does Not Exist: Using AI to Conduct Vishing Attacks

• #BHUSA: The Board Needs to Understand AI Deployment Risks

• Phishing Attacks Can Bypass Microsoft 365 Email Safety Warnings

• How CIRCIA is changing crisis communication

• Expert Insight: Cyber Security Resilience Act: A game-changer for industry standards

• Women in CyberSecurity (WiCyS) Announces 5th Annual Security Training Scholarship

• NHS Software Supplier Advanced Faces $7.6 Million Fine Over Ransomware Attack Failings

• Network perimeter security protections for generative AI

• Unlock the Power of GenAI with Check Point Software Technologies

• Black Hat Roundup 2024: What to Expect From This Week’s Security Events

• Small CSS tweaks can help nasty emails slip through Outlook’s anti-phishing net

• Rubrik Allies With Mandiant to Increase Cyber Resiliency Capability

• Google Ads Glitch Exposes Sensitive Competitor Data, Causes Reporting Disruption

• #BHUSA: DARPA’s AI Cyber Challenge Heats Up as Healthcare Sector Watches

• How NetSPI Built a Proactive Security Platform

• What is Captcha?

• Threat Actors Announced Doubleface Ransomware, Claims Fully Undetectable

• Ransomware Swells Despite Collective Push to Curb Attacks

• Scamnetic Emerges From Stealth With AI-Based Scam Detection Solution

• CrowdStrike engages external experts, details causes of massive outage

• AWS Launches Mithra To Detect Malicious Domains Across Systems

• Researchers Proposed MME Framework To Enhance API Sequence-Based Malware Detection

• Cyber Training Organization Pledges $15 Million in Education Programs

• The Art of Possible: Redefining Cybersecurity in the Age of Data as the New Perimeter

• Microsoft, CrowdStrike Hit Back At Delta’s Compensation Bid

• Microsoft 365 Vulnerability Let Hackers Bypass Anti-phishing Feature

• Cisco ISE 3.4 – Here and Now!

• Abnormal Security Raises $250M on $5.1B Valuation to Enhance AI-Driven Cyber Protection

• North Korean Hackers Leverage Malicious NPM Packages for Initial Access

• Police take just 2 days to recover $40M stolen in business email scam

• Hunters International RaaS Group Points SharpRhino at IT Workers

• Problems with Georgia’s Voter Registration Portal

• Chameleon Malware Now Targeting Employees Masquerading as a CRM app

• Cyberattack On Mobile Guardian MDM Wiped Connected Devices

• Apple Tightens macOS Gatekeeper Controls in macOS Sequoia

• Replacement for Action Fraud, UK’s Cybercrime Reporting Service, Delayed Again Until 2025

• The Role of AI in Cybersecurity Operations

• CrowdStrike Reveals Root Cause of Global System Outages

• New Go-based Backdoor GoGra Targets South Asian Media Organization

• Elon Musk’s X Sues Advertisers Over “Massive Advertiser Boycott”

• Have You Heard About the New PCI 4.0 Section 1.2 Spec? Tripwire Makes Compliance Easy

• Reliable Baseline Management with Fortra’s Tripwire Enterprise

• StormCloud Hacks ISP to Spread Malware Posing as Software Updates

• EQT buys majority share in Swiss cybersecurity biz Acronis

• Ransomware Attack Cost LoanDepot $27 Million

• Join Us 08-23-24 for “Hacking the Future of Pentesting” – Super Cyber Friday

• New Zola Ransomware Using Multiple Tools to Disable Windows Defender

• New Android spyware LianSpy relies on Yandex Cloud to avoid detection

• UK Managers Improve Cyber Knowledge but Staff Lack Training

• Cybersecurity Headlines: Google kernel zero-day, voter portal flaw, ransomware as terrorism

• Microsoft’s Security Efforts Leave Much To Be Desired, Especially For Email Security

• Contrast Security Introduces ADR to Help Organisations Combat Zero Days and Secure Applications from Within

• CISA Adds Microsoft COM for Windows Bug to its Known Exploited Vulnerabilities Catalog

• Veza introduces Access AI to streamline risk management and access control

• ICO Prepares £6m Fine for NHS Supplier Advanced

• What Does the EU AI Act Mean for Cybersecurity?

• Masterclass in CIAM for Insurance: Balancing Security, Experience, and Consent

• Attackers Use Multiple Techniques to Bypass Reputation-Based Security

• Police Shield Communications from Public Scrutiny with Encryption

• Elastic automates SIEM data onboarding with Automatic Import

• Cequence Unified API Protection defends against attacks targeting AI applications

• AppSOC launches new AI security capabilities for enhanced governance and protection

• Roundcube flaws allow easy email account compromise (CVE-2024-42009, CVE-2024-42008)

• Tech Contractor Exposes Data of 4.6 Million US Voters

• UK health services call-handling vendor faces $7.7M fine over 2022 ransomware attack

• Chrome, Firefox Updates Patch Serious Vulnerabilities

• Flashpoint Ignite and Echosec deliver threat intelligence for enhanced protection

• D3 enhances Smart SOAR Platform with Ace AI

• EQT takes a majority stake in cybersecurity firm Acronis at $3.5B+ valuation

• Cymulate AI Copilot validates security against real-time threats

• Contrast Security ADR enables teams to identify vulnerabilities, detect threats, and stop attacks

• XDSpy Hackers Attacking Users to Steal Sensitive Data

• EQT takes a majority stake in cybersecurity firm Acronis at a $3.5B+ valuation

• Chameleon Android Banking Trojan Targets Users Through Fake CRM App

• Britain NHS Software provider to face Ransomware penalty of £ 6 million

• Can a Bitcoin Ban Help Stop Ransomware Attacks

• Chrome Security Update: Patch for Multiple Vulnerabilities

• The C-Suite Conundrum: Are Senior Executives the Achilles’ Heel of Cybersecurity?

• OpenWrt dominates, but vulnerabilities persist in OT/IoT router firmware

• Apple’s New macOS Sequoia Tightens Gatekeeper Controls to Block Unauthorized Software

• SharpRhino malware targets IT admins – Hunters International gang suspected

• Securing Data in the AI Era: Introducing Check Point Harmony Endpoint DLP

• Georgia’s voter portal gets a crash course in client versus backend input validation

• RustScan: Open-source port scanner

• Sports venues must vet their vendors to maintain security

• AWS’ Mithra Neural Network Detects, Ranks Malicious Domains

• Breaking down FCC’s proposal to strengthen BGP security

• Microsoft punches back at Delta Air Lines and its legal threats

• Hackers breached MDM firm Mobile Guardian and wiped thousands of devices

• Number of incidents affecting GitHub, Bitbucket, GitLab, and Jira continues to rise

• Is shadow IT being brought in to organizations by security professionals? Cyber Security Today for Wednesday, August 7th, 2024

• CrowdStrike hires outside security outfits to review troubled Falcon code

• Microsoft Hits Back at Delta After the Airline Said Last Month’s Tech Outage Cost It $500 Million

• ISC Stormcast For Wednesday, August 7th, 2024 https://isc.sans.edu/podcastdetail/9086, (Wed, Aug 7th)

• How AHEAD Enhanced SecOps Efficiency with Low-code Security Automation

• CrowdStrike hires outside security outfits to review Falcon code

• Same Scripts, Different Day: What My DShield Honeypot Taught Me About the Importance of Security Fundamentals [Guest Diary], (Wed, Aug 7th)

• CrowdStrike hires outside security firms to review Falcon code

• UK data watchdog to fine NHS vendor Advanced for security failures prior to LockBit ransomware attack

• UK data watchdog fines NHS vendor Advanced for security failures prior to LockBit ransomware attack

• Lasso Security sets new standard in LLM safety with Context-Based Access Controls

• What is torrenting? BitTorrent, legal issues, how it works, and more

• Proton VPN rolls out anti-censorship protocol to Windows, plus other updates

• IT Security News Daily Summary 2024-08-06

• Why You Should Use Buildpacks Over Docker

• OpenAI’s meltdown: Inside the summer that could redefine artificial intelligence

• Spring 2024 SOC 2 report now available in Japanese, Korean, and Spanish

• Daniel Stori’s ‘The chroot Case’

• USENIX Security ’23 – Prime Match: A Privacy-Preserving Inventory Matching System

• The best travel VPNs of 2024: Expert tested and reviewed

• CISA Releases Secure by Demand Guidance

• A ransomware attack hit French museum network

• Fortigate Cloud Native Firewall (FORTIGATE CNF)

• How ‘Shifting Left’ speeds compliance processes

• Google splats device-hijacking exploited-in-the-wild Android kernel bug among others

• CrowdStrike Releases Root Cause Analysis of Falcon Sensor BSOD Crash

• Massive Exposure of Illinois Voter Data Raises Security Concerns

• CISA Releases Secure by Demand Guide

• Security framework to determine whether defenders are winning

• Palo Alto Networks Zero Trust Platform Featured in New NIST Guidance

• Breach Debrief Series: EchoSpoofing Phishing Campaign Exploiting Proofpoint’s Email Protection

• The rise of RaaS; how Copilot can safeguard SMEs from the growing storm of AI-boosted cyberattacks

• How cybersecurity training can break the cyber impact chain

• Data Breach: 3 Billion National Public Data Records with SSNs Dumped Online

• Not All MFA Is Equal: Lessons From MFA Bypass Attacks

• A New Plan to Break the Cycle of Destructive Critical Infrastructure Hacks

• On the Cyber Safety Review Board

• Congratulations to the MSRC 2024 Most Valuable Security Researchers!

• New Study Shows GenAI Apps Are Vulnerable To PromptWare Threats

• Top Technology Sector Breaches and Threats

• Sonic Automotive says ransomware-linked CDK software outage cost it $30M

• Stop Using AI for Medical Diagnosis: Experts

• Sitting Ducks DNS Attack Hijack 35,000 Domains

• INTERPOL Recovers $41 Million in Largest Ever BEC Scam in Singapore

• What if a cyber attack takes place on a human body

• Cyberattack Wipes 13,000 School Devices in Mobile Guardian Breach

• Harnessing DevOps Potential: Why Backup Is a Missing Piece

• Cyberattack knocks Mobile Guardian MDM offline and wipes thousands of student devices

• French Museum Network Hit by Ransomware Attack, but No Disruptions Are Reported at Olympic Events

• The Prevalence of DarkComet in Dynamic DNS

• Indonesia Bans Search Engine DuckDuckGo

• #BHUSA: 17.8m Phishing Emails Detected in First Half of 2024

• Hardening the RAG chatbot architecture powered by Amazon Bedrock: Blueprint for secure design and anti-pattern mitigation

• 9 AI-proof IT jobs, plus how to be irreplaceable

• AI in Education: Balancing Innovation with Security

• MSPs: Capitalize on the Expanding Opportunities in the Booming MDU Market

• International Cyber Expo Announces Global Cyber Summit Theme: Resilience

• Bloody Wolf Strikes Organizations in Kazakhstan with STRRAT Commercial Malware

• Bad apps bypass Windows security alerts for six years using newly unveiled trick

• Meet BIX: Your New AI Ally in Cyber Risk and Exposure Management

• A Survey of Scans for GeoServer Vulnerabilities, (Tue, Aug 6th)

• Cost of a data breach: The healthcare industry

• Android vulnerability used in targeted attacks patched by Google

• CISA Releases One Industrial Control Systems Advisory

• Delta Electronics DIAScreen

• Sneaky SnakeKeylogger Slithers Into Windows Email Inboxes

• China’s National Digital ID System Trials Begin Across 80 Internet Service Applications

• NPCI Announces Full Recovery of Banking Services After Ransomware Incident

• Cryptonator Seized for Laundering Ransom Payments and Stolen Cryptocurrency

• What Is an Event-Driven Microservices Architecture?

• Panamorfi TCP flood DDoS Attack Targeting Jupyter Notebooks

• North Korean Hackers Exploit VPN Update Flaw To Breach Networks

• Chameleon Device-Takeover Malware Attacking IT Employees

• CISA adds Microsoft COM for Windows bug to its Known Exploited Vulnerabilities catalog

• Salt Security Enhances API Platform with AI-Powered Insights

• EDR Implementation: Essential Features, Considerations, And Best Practices

• Fighting Back Against Multi-Staged Ransomware Attacks Crippling Businesses

• Ransomware gang targets IT workers with new RAT masquerading as IP scanner

• Men report more pressure and threats to share location and accounts with partners, research shows

• New Generative AI-Powered Solutions to Secure the Workspace

• Securing Data in the AI Era: Introducing Check Point Harmony DLP

• Cyberattack Cost More Than $17 Million, Key Tronic Tells Regulators

• North Korean Hackers Exploit VPN Update Flaw to Install Malware

• Navigating the DORA Landscape with AttackIQ’s Automated Assessment

• Ransomware gang targets IT workers with new RAT maquerading as IP scanner

• CVEs Surge 30% in 2024, Only 0.91% Weaponized

• #BHUSA: Ransom Payments Surge, Organizations Pay Average of $2.5m

• Hardening the RAG chatbot architecture powered by Amazon Bedrock: Blueprint for secure design and anti-pattern migration

• KnowBe4 establishes 6th August as National Social Engineering Day to honour late Kevin Mitnick

• Ransomware Gang Targets IT Workers With New SharpRhino Malware

• Orca Security Extends Visibility Into the Cloud Security

• Building a Resilient Network and Workload Security Architecture from the Ground Up

• My Journey of Conservation and Fulfillment: Time2Give with Sea Turtles

• Cyberattacks Still Ravage Schools, Defying White House Efforts Launched Last Year

• Safeguarding The Backbone: The Critical Imperative to Protect Operational Technology (OT) Devices

• Users call on Microsoft to update Outlook’s friendly name feature

• Abnormal Security Raises $250 Million at $5.1 Billion Valuation

• Minimizing the Impact of Ransomware in the Cloud

• North Korean Hackers Moonstone Sleet Push Malicious JS Packages to npm Registry

• Suspicious Minds: Insider Threats in The SaaS World

• Google warns of an actively exploited Android kernel flaw

• 5 Best Practices for Managing Endpoints On a Global Scale

• France Olympics venue hit by a ransomware attack

• 40 French Museums IT Systems Hit by Ransomware Attack

• Stellar Cyber launches Multi-Layer AI platform to enhance threat detection

• Researchers unearth MotW bypass technique used by threat actors for years

• Hero AI by Swimlane enhances security with context-aware recommendations

• More Developers are Learning to Code Using AI tools – But That Doesn’t Mean They Trust Them

• Non-Profit Blood Center OneBlood Recovering from Cripping Ransomware Attack

• Magniber ransomware targets home users

• #BHUSA: 99% of Global 2000 Firms Have Recently Breached Vendors

• UK Needs to Chart its Own Course Towards AI legislation

• Internet Resource Access Policy

• Mullvad vs NordVPN (2024): Which VPN Should You Choose?

• Around 20K Ubiquiti IoT Cameras & Routers are Sitting Ducks for Hackers

• Microsoft Bug Bounty Payouts Increased to $16.6 Million in Past Year

• SentinelOne unveils AI and cloud innovations on Singularity Platform

• New Android Spyware LianSpy Evades Detection Using Yandex Cloud

• Mobile Guardian Hack Leads to 13,000 Student Devices Wiped in Singapore

• Cybersecurity Headlines: CrowdStrike strikes back against Delta, Keytronic loses millions to ransomware, Flaw in Apache OFBiz

• We Make Threat Actors Read Our Resiliency Policy Before Attacking Us

• French Museums Hit By Ransomware Attack

• TikTok Asks Court To Reject Secret Court Filings In Ban Challenge

• Tripwire Patch Priority Index for July 2024

• Hurricane Season Scams: What you need to know

• Google Fixes Android Kernel Zero-Day Exploited in Targeted Attacks

• APIs, Web Applications Under Siege as Attack Surface Expands

• Police Recover Over $40m Headed to BEC Scammers

• Mercedes-Benz To Test Fully Autonomous Vehicles In Beijing

• Musk Files New Lawsuit Against Altman, OpenAI

• TikTok Withdraws Rewards Programme From EU After DSA Probe

• Researchers Warn of a New Critical Apache OFBiz Flaw

• Mint Stealer: New MaaS Malware Threatens Confidential Data

• North Korea-linked hackers target construction and machinery sectors with watering hole and supply chain attacks

• Should Organizations Pay Ransom Demands?

• Google Patches Android Zero-Day Exploited in Targeted Attacks

• Mobile Device Management Vendor Mobile Guardian Hacked

• EFF at the Las Vegas Hacker Conferences

• Support Justice for Digital Creators and Tech Users

• How to Secure Your Organization from Shadow IT?

• Authorities have Uncovered USD 40 Million from Hackers

• The Illusion of Reputational Damage

• Billion-dollar bust as international op shutters Cryptonator wallet

• 7 Data Security Systems & Products Driving Value

• Resecurity to introduce Context AI, a specialized generative AI framework

• MDM vendor Mobile Guardian attacked, leading to remote wiping of 13,000 devices

• Google Patches New Android Kernel Vulnerability Exploited in the Wild

• Proficio Unveils ProBAS Breach and Attack Simulation Service

• New Zero-Day Flaw in Apache OFBiz ERP Allows Remote Code Execution

• LianSpy Spyware ‘LianSpy’ Targets Android Users

• Mobile Guardian attacked, leading to remote wiping of 13,000 devices

• ITSM concerns when integrating new AI services

• Scaling data security solutions: What you need to know

• Email attacks skyrocket 293%

• Illinois relaxes biometric privacy law so snafus won’t cost businesses billions

• Whitepaper: Tools to tackle the multicloud environment

• AI-fueled phishing scams raise alarm ahead of U.S. presidential election

• ISC Stormcast For Tuesday, August 6th, 2024 https://isc.sans.edu/podcastdetail/9084, (Tue, Aug 6th)

• Protecting Your Digital Footprint: A Guide to Data Protection and Privacy Consulting

• NFL to begin using face scanning tech across all of its stadiums

• Shoe Zone – 46,140 breached accounts

Generated on 2024-08-07 23:55:13.000283