IT Security News Daily Summary 2024-08-10

• Black Hat USA 2024: All eyes on election security

• Black Hat USA 2024 recap – Week in security with Tony Anscombe

• Apple Prototypes and Corporate Secrets Are for Sale Online—If You Know Where to Look

• Is the INC ransomware gang behind the attack on McLaren hospitals?

• Researchers Uncover 10 Flaws in Google’s File Transfer Tool Quick Share

• USENIX Security ’23 – V1SCAN: Discovering 1-day Vulnerabilities in Reused C/C++ Open-Source Software Components Using Code Classification Techniques

• Illinois Amends Biometric Privacy Law to Limit Corporate Liability

• Ransomware and Extortionware: The Two Cybersecurity Dangers

• Global Breach of Mobile Guardian Wipes Data from 13,000 Students’ Devices in Singapore

• Need Intel’s Raptor Lake bug patch? You’ll have to download and install it yourself

• New Malware Hits 300,000 Users with Rogue Chrome and Edge Extensions

• Proton VPN Doubles Down on its Fight Against Online Censorship

• South Korea on High Alert as North Korean Hackers Eye Construction Sector Data

• Massive Email Address Exposure: SOCRadar.io Data Scraping Incident

• How North Korean Attackers Deployed Malware Via VPN Bug Exploit

• CSC ServiceWorks reveals 2023 data breach affecting thousands of people

• The Undeniable but Often Overlooked Human Element of Cybersecurity

• Russian Midnight Blizzard Breached UK Home Office via Microsoft

• After global IT meltdown, CrowdStrike courts hackers with action figures and gratitude

• Git-Syncing into Trouble: Exploring Command Injection Flaws in Kubernetes

• Crooks took control of a cow milking robot causing the death of a cow

• ‘0.0.0.0 Day’ Flaw Puts Chrome, Firefox, Mozilla Browsers at RCE Risk

• Cisco Warns of Critical RCE Zero-Days in End of Life IP Phones

• CISA Warns of Hackers Abusing Cisco Smart Install Feature

• Move From FedRAMP to DoD with Impact Level Assessment

• Hazy Issue in Entra ID Allows Privileged Users to Become Global Admins

• Russian Spies Hacked UK Government Systems Earlier This Year, Stole Data and Emails

• Microsoft Warns of Unpatched Office Vulnerability Leading to Data Exposure

• Cyber Security Today – Week In Review: August 10, 2024

• Microsoft Warns of Unpatched Office Vulnerability Leading to Data Breaches

• Student raised security concerns in Mobile Guardian MDM weeks before cyberattack

• Sonos smart speakers flaw allowed to eavesdrop on users

• Google Researchers Found Nearly a Dozen Flaws in Popular Qualcomm Software for Mobile GPUs

• Experts Uncover Severe AWS Flaws Leading to RCE, Data Theft, and Full-Service Takeovers

• Cyber attacks 2024: The biggest attacks of the first half of 2024

• IT Security News Daily Summary 2024-08-09

• Intel has news – good, bad and ugly – about Raptor Lake bug patch. Here’s what to know

• How to ask Google to remove deepfake porn results from Google Search

• 6 VPN Security Best Practices for Secure Connection

• Australian Enterprises Coming 4th in 2024 Global Survey of Generative AI Usage

• Ecovacs home robots can be hacked to spy on their owners, researchers say

• USENIX Security ’23 – Cheesecloth: Zero-Knowledge Proofs of Real World Vulnerabilities

• ATM Software Flaws Left Piles of Cash for Anyone Who Knew to Look

• Friday Squid Blogging: SQUID Is a New Computational Tool for Analyzing Genomic AI

• Raptor Lake microcode limits Intel chips to a mere 1.55 volts to prevent CPU destruction

• Flaws in Ubiquitous ATM Software Could Have Let Attackers Take Over Cash Machines

• Microsoft Reveals Four OpenVPN Flaws Leading to Potential RCE and LPE

• 5 Types of IVR Testing Tools and When To Use Each

• Louvre and Top French Museums Fall Victim to Ransomware Attack, Including Olympic Sites

• Five zero-days impacts EoL Cisco Small Business IP Phones. Replace them with newer models asap!

• HPE Infuses AI Into Network Detection and Response Platform

• Have you used Cash App in the last 6 years? You might be eligible for $2,500

• How a cybersecurity researcher befriended, then doxed, the leader of LockBit ransomware gang

• Aqua Security Researchers Disclose Series of AWS Flaws

• Security company ADT announces security breach of customer data

• Microsoft Update Alert: 70% Of Windows Users Are Now At Risk

• #BHUSA: CISA Encourages Organizations to Adopt a ‘Secure by Demand’ Strategy

• Ransomware attack leads to death and Cow and Calf

• The Role of Microsegmentation in Kubernetes Environments

• Federal Watchdog Calls on EPA to Formulate Comprehensive Cybersecurity Plan for Water Systems

• Reddit CEO Hints At Subreddit Paywalls

• Evolving threat landscape influencing cyber insurance market

• MDR vs MSSP: Key Differences and Full Guide

• 0.0.0.0 Day Vulnerability: An 18-Year-Old Flaw Actively Exploited by Threat Actors

• Understanding escalating cyber threats

• Content Detection Technologies in Data Loss Prevention (DLP) Products

• Partnership in Action: Creating Connection through Community Impact

• Ransomware Attack on OneBlood Disrupts Florida Blood Supply Chain, Urgent Call for Donations

• New Ransomware Threat: Hunters International Deploys SharpRhino RAT

• Cryptojacking Attacks Soar 409% in India Amid a Global Shift in Cybersecurity Tactics

• New Flaws in Sonos Smart Speakers Allow Hackers to Eavesdrop on Users

• Ransomware Recovery: Steps to Take After an Attack

• StormBamboo Compromises ISP, Spreads Malware

• Applications are open: ENISA Cybersecurity Support Action Programme tender procedure

• Threat Actors Exploiting Windows Systems To Deploy Multiple Malwares

• How MSSPs Can Navigate the Regulatory Landscape: Ensuring Compliance

• People-Search Site Removal Services Largely Ineffective

• ADT Breached: Customer Data Leaked on a Hacking Forum

• How to Weaponize Microsoft Copilot for Cyberattackers

• Pro-Iran groups lay groundwork for ‘chaos and violence’ as US election meddling intensifies

• In Other News: KnowBe4 Product Flaws, SEC Ends MOVEit Probe, SOCRadar Responds to Hacking Claims

• Cybersecurity Insights with Contrast CISO David Lindner | 8/9/24

• North Korean Kimusky Group Attacking University Professors

• Iranian Hackers Targeting 2024 US Election Campaigns

• Confusion Attacks Vulnerability In Apache HTTP Server Allow Attackers To Gain Root Access Remotely

• 0.0.0.0 Day – 18 Yr Old Vulnerability Allow Attackers to Bypass All Browser Security

• Cisco Networking Academy honors International Day of the World’s Indigenous People

• US Offers $10 Million for Information on Iranian Hackers Behind CyberAv3ngers Water Utility Attacks

• Automated vs Manual: Web Penetration Testing

• Dell Begins Fresh Round Of Job Losses, Amid AI Move – Report

• New APT Actor240524 Weaponizing Official Documents To Deliver Malware

• Leaked MDM Credentials Exposes Commonly Laptops And Smartphones For Hacking

• ‘Sinkclose’ Flaw in Hundreds of Millions of AMD Chips Allows Deep, Virtually Unfixable Infections

• Transparency in Cybersecurity: The Importance of Accurate Vulnerability Disclosures

• Critical 1Password flaws may allow hackers to snatch your passwords (CVE-2024-42219, CVE-2024-42218)

• Critical Jenkins Vulnerabilities Expose Servers To RCE Attack

• Number of Incidents Affecting GitHub, Bitbucket, GitLab, and Jira Continues to Rise

• Warnings Issued Over Cisco Device Hacking, Unpatched Vulnerabilities

• Elon Musk Shares Fake News Of UK Rioters Being Deported To Falklands

• How Hackers Extracted the ‘Keys to the Kingdom’ to Clone HID Keycards

• Consumer Reports Study Finds Data Removal Services are Often Ineffective

• New Ransomware Groups Emerge Despite Crackdowns

• #BHUSA: CoSAI, Combating AI Risks Through Industry Collaboration

• CISA Warns of Cisco Smart Install Feature Actively Exploited by Hackers

• Ransomware Review: First Half of 2024

• Not SOCRadar – 282,478,425 breached accounts

• Russia’s Kursk Region Suffers ‘Massive’ DDoS Attack Amid Ukraine Offensive

• Ransomware Drill Targets Healthcare in Operation 911

• Entrust distrust: How to move to a new Certificate Authority

• OpenAI Leadership Split Over In-House AI Watermarking Technology

• RustScan: Open-Source Port Scanner

• August 2024 Patch Tuesday forecast: Looking for a calm August release

• “0.0.0.0-Day” vulnerability affects Chrome, Safari and Firefox

• Cybersecurity Headlines: Chameleon malware reappears, Rhysida hospital attack, Blacksuit’s $500m tally

• OpenWrt Dominates, but Vulnerabilities Persist in OT/IoT Router Firmware

• Vulnerability Allowed Eavesdropping via Sonos Smart Speakers

• PowerDMARC Integrates with SecLytics for Predictive Threat Intelligence Analysis

• Threat Actors Favor Rclone, WinSCP and cURL as Data Exfiltration Tools

• Windows Zero-day Flaw Let Hackers Downgrade Fully Updated Systems To Old Vulnerabilities

• GhostWrite Vulnerability Let Hackers Read And Write Any Part Of The Computer’s Memory

• DISPOSSESSOR And RADAR Ransomware Emerging With RaaS Model

• Hackers Exploit iOS Settings to Trigger Fake iOS Updates on Hijacked Devices

• DOJ Charges Nashville Man for Helping North Koreans Get U.S. Tech Jobs

• MongoDB Vulnerabilities Let Attackers Escalate Privileges

• Russian cyber spies stole data and emails from UK government systems

• CISA adds Apache OFBiz and Android kernel bugs to its Known Exploited Vulnerabilities catalog

• Next-Gen Vehicle Technologies Present New Challenges for Cybersecurity Professionals

• One of the largest data breaches in history? Cyber Security Today for Friday, August 9th, 2024

• Security vulnerability in IT infrastructure of Ransomware gang saves six victimized companies

• Key Cloud Security Tools for 2024: A Comprehensive Overview

• Authorities Dismantled North Korean Remote IT Worker Laptop Farm

• CISA Warns of Hackers Exploiting Legacy Cisco Smart Install Feature

• Proxmox Backup by NAKIVO: Powerful VM Data Protection

• The Olympic Games have been protected from cyber-attacks so far

• It’s 2024 and we’re just getting round to stopping browsers insecurely accessing 0.0.0.0

• Passwordless Prescription: The Cure for Healthcare Cybersecurity

• Vectra AI Expands XDR Platform

• Overcoming the 5 Biggest Challenges to Implementing Just-in-Time, Just Enough Privilege

• NIS2: A catalyst for cybersecurity innovation or just another box-ticking exercise?

• How Situational Awareness Enhances the Security of Your Facility

• Malware-as-a-Service and Ransomware-as-a-Service lower barriers for cybercriminals

• A Dive into Earth Baku’s Latest Campaign

• Shorter TLS certificate lifespans expected to complicate management efforts

• Improving Apache httpd Protections Proactively with Orange Tsai of DEVCORE

• New infosec products of the week: August 9, 2024

• Where internal audit teams are spending most of their time

• ISC Stormcast For Friday, August 9th, 2024 https://isc.sans.edu/podcastdetail/9090, (Fri, Aug 9th)

• Black Hat USA 2024: How cyber insurance is shaping cybersecurity strategies

• Hello? Are you talking on a Cisco SPA300 or SPA500 IP phone? Now’s the time to junk ’em

• Chained for attack: OpenVPN vulnerabilities discovered leading to RCE and LPE

Generated on 2024-08-10 23:55:08.092633