IT Security News Daily Summary 2024-08-15

• A group linked to RansomHub operation employs EDR-killing tool EDRKillShifter

• 2 Fast 2 Legal: How EFF Helped a Security Researcher During DEF CON 32

• FBI and CISA Release Joint PSA, Just So You Know:  Ransomware Disruptions During Voting Periods Will Not Impact the Security and Resilience of Vote Casting or Counting

• The 5 different types of firewalls explained

• Hacking Beyond.com — Enumerating Private TLDs

• EFF Honored as DEF CON 32 Uber Contributor

• DARPA, ARPA-H award $14m to 7 AIxCC semifinalists, with a catch

• USENIX Security ’23 – TRIDENT: Towards Detecting and Mitigating Web-based Social Engineering Attacks

• Dozens of Google products targeted by scammers via malicious search ads

• July ransomware attacks slam public sector organizations

• CISA Adds One Known Exploited Vulnerability to Catalog

• PTC Kepware ThingWorx Kepware Server

• Siemens COMOS

• Siemens LOGO! V8.3 BM Devices

• Siemens INTRALOG WMS

• Google disrupted hacking campaigns carried out by Iran-linked APT42

• Here’s How Users Can Safeguard Themselves From E-Challan Scams

• North Miami Mayor’s Gmail Hacked; Ransomware Attack Disrupts City Services

• AI, election security headline discussions at Black Hat and DEF CON

• Google Confirms Iranian Hackers Behind US Presidential Hacks

• Region 10 Team Provides Vital Election Security Training for Idaho

• ReliaQuest: Watch Out for Info-Stealers and RATs

• Wordfence Intelligence Weekly WordPress Vulnerability Report (August 5, 2024 to August 11, 2024)

• Voting Machine Company Involved in Bribing Scandal Has Long History of Controversy

• New ValleyRAT Malware Targets Chinese Windows Users in Multi-Stage Attack

• How to select an MDR security service

• National Public Data confirms breach, scope unknown

• Tusk: unraveling a complex infostealer campaign

• Amazon To Test Prime Air Drone Delivery In UK, Again

• Zero-Click Exploit Concerns Drive Urgent Patching of Windows TCP/IP Flaw

• Windows TCP/IP RCE Impacts all Systems with IPv6 Enabled, Patch Now

• Google raps Iran’s APT42 for raining down spear-phishing attacks

• Cisco Confirms Second Round Of Major Job Cuts In 2024

• Wiping a Windows laptop? Here’s the safest free way to erase your personal data

• NIST Releases First Post-Quantum Encryption Algorithms

• USENIX Security ’23 – Strategies and Vulnerabilities of Participants in Venezuelan Influence Operations

• Don’t Mess With Texas Privacy: AG Sues GM for $18 BILLION

• Cyber-criminals Exploited Paris Olympics With Fake Domains

• Rhysida Ransomware selling The Washington Times data for $304,500

• Iranian APT42 Group Launch A Massive Phishing Campaign To Attack U.S. Presidential Election

• Benefits of a More Sustainable Learning Environment in Schools and Universities

• Ransomware Attacks on Industrial Firms Surged in Q2 2024

• FBI and Allies Dismantle Dispossessor Ransomware Network

• Microsoft Patches Critical SmartScreen Vulnerability Exploited by Attackers

• When Data Security Fails: The National Public Data Breach Explained

• The Noname Security 3.34 Update Includes Major Enhancements

• BT Details Plan To Launch First Symmetric Ultrafast FTTP Broadband

• Siemens SINEC Traffic Analyzer

• Siemens SCALANCE M-800, RUGGEDCOM RM1224

• Siemens NX

• Siemens SINEC NMS

• Siemens Teamcenter Visualization and JT2Go

• Comprehensive Hacker Toolkit Uncovered: A Deep Dive into Advanced Cyberattack Tools

• SolarWinds Releases Patch for Critical Flaw in Web Help Desk Software

• Advanced ValleyRAT Campaign Hits Windows Users in China

• Benefits of a Sustainable Learning Environment in Schools and Universities

• Hide yo environment files! Or risk getting your cloud-stored data stolen and held for ransom

• Cryptography: A Forgotten Part of Software Supply Chain Security

• Ransomware Group Added a New EDR Killer Tool to their arsenal

• CISOs list human error as their top cybersecurity risk

• The best AirTag wallets of 2024: Expert tested

• How to Maximize Network Security With AI and ML

• Hackers Exploit Dark Skippy Attacks to Steal Secret Keys from Secure Devices

• Earn Up to $31,200 Per Vulnerability: Introducing the WordPress Bug Bounty Superhero Challenge!

• Transforming Network Security for the Digital Age with SASE

• Rogue AI is the Future of Cyber Threats

• News Malspam Attacks AnyDesk and Microsoft Teams

• Simplify Your Data Center Security with Check Point’s Managed Firewall-as-a-Service (MFaaS)

• Nearly All Google Pixel Phones Exposed by Unpatched Flaw in Hidden Android App

• How AI Innovation Will Elevate SMB Business Outcomes

• A Deep Dive into a New ValleyRAT Campaign Targeting Chinese Speakers

• SolarWinds Issues Hotfix for Critical Web Help Desk Vulnerability

• DEF CON Calls for Cybersecurity Volunteers to Defend Critical Infrastructure

• Russia’s FSB Behind Massive Phishing Espionage Campaign

• Enabling the Safe Use of GenAI Applications

• Choosing Security: Why Companies Should Reject Ransom Payments

• Google: Iranian Group APT42 Behind Trump, Biden Hack Attempts

• Russian-Linked Hackers Target Eastern European NGOs and Media

• Another Record Year For Ransomware Beckons as Crypto Profits Hit $460m

• Kim Dotcom “Has A Plan”, After NZ Signs Extradition Warrant

• Russian man who sold logins to nearly 3,000 accounts gets 40 months in jail

• Enabling Cybersecurity Incident Response

• Palo Alto Networks Patches Unauthenticated Command Execution Flaw in Cortex XSOAR

• Critical RCE bug in SolarWinds Web Help Desk fixed (CVE-2024-28986)

• South Korea Says DPRK Hackers Stole Spy Plane Technical Data

• RansomHub Group Deploys New EDR-Killing Tool in Latest Cyber Attacks

• Identity Threat Detection and Response Solution Guide

• Google Warns of Iranian Cyber-Attacks on Presidential Campaigns

• Google Shows Off Pixel 9 Lineup, Plus AI Upgrades

• Microsoft patches bug that could have allowed an attacker to revert your computer back to an older, vulnerable version

• Ongoing Social Engineering Campaign Refreshes Payloads

• AutoCanada Hit by Cyberattack

• Leaked Environment Variables Allow Large-Scale Extortion Operation of Cloud Environments

• Private Internet Access (PIA) vs ExpressVPN (2024): Which VPN Is Better?

• Mad Liberator extortion crew emerges on the cyber-crook scene

• Beyond Zero-Trust: The Impact of Adaptive Micro-Segmentation on Network Security

• Information Security vs. Cybersecurity

• CryptoCore: Unmasking the Sophisticated Cryptocurrency Scam Operations

• FBI Says it is Investigating Purported Trump Campaign Hack

• Human Error – An Overlooked Aspect of Cyber Risk

• Cybersecurity News: Gemini AI privacy, AI Risk Repository, Russian phishing

• NIST Finalizes 3 Algorithms to Combat Future Quantum Cyber Threats

• Black Basta ransomware gang linked to a SystemBC malware campaign

• GitHub Makes Copilot Autofix Generally Available

• Hackers Use BingoMod Android RAT For Fraudulent Transactions

• Patching Recent Linux Kernel Vulnerabilities with KernelCare

• Exploring the Impact of NIST SP 800-53 on Federal IT Systems

• SolarWinds Urges Upgrade After Revealing Critical RCE Bug

• Wireshark 4.4.0rc1’s Custom Columns, (Thu, Aug 15th)

• Was your Social Security number leaked to the dark web? Here’s how to know and what to do

• Opinion: More layers in malware campaigns are not a sign of sophistication

• New Cyber Threat Targets Azerbaijan and Israel Diplomats, Stealing Sensitive Data

• GitHub Vulnerability ‘ArtiPACKED’ Exposes Repositories to Potential Takeover

• Critical Vulnerabilities in IBM QRadar Allow Attackers to Execute Arbitrary Code Remotely

• Taming Identity Sprawl With a Least Privilege Approach

• Over 40 million Kakao Pay users’ data somehow ended up with Alipay

• CMIYC 2024: RAdmin3 Challenge

• New Gafgyt Botnet Variant Targets Weak SSH Passwords for GPU Crypto Mining

• Now espionage through HDMI Cables say experts

• China-linked Attackers Target Russian Govt Entities

• Russian Sentenced to 40 Months for Selling Stolen Data on Dark Web

• 74% of IT professionals worry AI tools will replace them

• How passkeys eliminate password management headaches

• Log in to the ADSM Portal using Region User

• The AI balancing act: Unlocking potential, dealing with security issues, complexity

• China-linked cyber-spies infect Russian govt, IT sector

• Cisco Cuts Thousands of Jobs, 7% of Workforce, As It Shifts Focus to AI, Cybersecurity

• DDoS attack volume rises, peak power reaches 1.7 Tbps

• ISC Stormcast For Thursday, August 15th, 2024 https://isc.sans.edu/podcastdetail/9098, (Thu, Aug 15th)

• A massive cyber attack hit Central Bank of Iran and other Iranian banks

• Going Passwordless: 6 Tips to Navigate Passkey Adoption

• Publishers Spotlight: F5

• Risk Management Strategies: Incorporating Cloud WAFs into Your Plan

• A Single Iranian Hacker Group Targeted Both Presidential Campaigns, Google Says

• The Future of Search: AI-Powered Transformation

• BTS #36 – Supply Chain Policies – Stewart Scott, Trey Herr

• IT Security News Daily Summary 2024-08-14

• Microsoft Discovers Critical OpenVPN Vulnerabilities

• USENIX Security ’23 – Are You Spying on Me? Large-Scale Analysis on IoT Data Exposure through Companion Apps

• CrowdStrike’s Recovery Efforts in Focus After Global IT Outage

• Top Data Strategies to Better Protect Your Information from Hackers

• CBA’s x15ventures Set to Lead in Fintech AI Innovation

• Bringing Our Portfolio Together

• Safeguarding Democracy in the Digital Age: Insights from Day 1 at Black Hat 2024 and Las Vegas Officials

• Lessons learned from CrowdStrike’s automation errors

• Trump campaign hack-and-leak appears like a rerun of 2016. This time, media outlets are responding differently

• In These Five Social Media Speech Cases, Supreme Court Set Foundational Rules for the Future

• Microsoft Patched 6 Actively Exploited Zero-Day Flaws

• Google Pixel 9 is first Android phone to get satellite SOS messaging

• Russian cyber snoops linked to massive credential-stealing campaign

• Five Gartner Reports. Four Categories. What Does OX Security Do Anyway?

• Spotify To Add EU Pricing Info To iOS App

• Your Gym Locker May Be Hackable

• China-linked APT Earth Baku targets Europe, the Middle East, and Africa

• Texas sues GM for selling driver data to analytics, insurance companies

• Black Basta-Linked Attackers Target Users with SystemBC Malware

• August Patch Pileup: Microsoft’s Zero-Day Doozy Dump

• SolarWinds addressed a critical RCE in all Web Help Desk versions

• Enzo Biochem ordered to cough up $4.5 million over lousy security that led to ransomware disaster

• How to centrally manage secrets with AWS Secrets Manager

• California Permits Passenger Testing For Chinese Robotaxi Firm WeRide

• Texas Sues GM for Collecting Driving Data without Consent

• EFF Presses Federal Circuit To Make Patent Case Filings Public

• Talos discovers 11 vulnerabilities between Microsoft, Adobe software disclosed on Patch Tuesday

• PRODUCT REVIEW: TREND VISION ONE CLOUD SECURITY

• Upcoming Speaking Engagements

• Publishers Spotlight: Endace

• Cyber Attack Sparks Phishing Scam Across Greater Manchester

• Bluesky Signups Surge In UK After Musk Clash With British Government

• The best VPN for streaming in 2024: Expert tested and reviewed

• Tesserent Offers Mental Health Tips for Australian CISOs

• GitHub Copilot Autofix tackles vulnerabilities with AI

• Xapo Bank Aims To Boost Bitcoin Safety With Tech And Bunkers

• New Phishing Attack Uses Sophisticated Infostealer Malware

• Akamai Guardicore Platform: Microsegmentation Just Got a Whole Lot Better

• India’s Bharti Global To Acquire 24.5 Percent Of BT

• Ransomware Kingpin Who Called Himself “J P Morgan” Extradited to the United States

• Adobe Releases Security Updates for Multiple Products

• Texas firm says it lost $60M in a bank wire transfer scam

• 2.7 billion Leaked Data Records Expose Personal Information of US People

• Unconfirmed Hack of 2.9 Billion Records at National Public Data Sparks Media Frenzy Amid Lawsuits

• How Audit Procedures and Internal Controls Improve Your Compliance Posture

• GPS Spoofing Incidents Spike 400%: Here’s What You Should Know

• Manufacturing Firm Loses $60m in BEC Scam

• The Evolution of Secure Access: The Shift from VPNs to Zero Trust Network Access

• Creating Effective Exceptions in Java Code [Video]

• Research Uncovers New Microsoft Outlook Vulnerability

• Watch Out For The ‘0.0.0.0 Day’ Zero-Day Flaw Affecting Web Browsers

• CIRCIA feedback update: Critical infrastructure providers weigh in on NPRM

• Have you ever used Cash App? You might be eligible for a $2,500 settlement payout

• Palo Alto Networks execs apologize for ‘hostesses’ dressed as lamps at Black Hat booth

• Dark Web Revealed: The Hidden Internet’s Role in Cybercrime and Digital Privacy

• Cloud Security Report Highlights Misconfiguration and IAM as Top Threats

• CISA’s Shields Up and Shields Ready Programs: A Proactive Approach to Cybersecurity for Critical Infrastructure

• Enabling Cyber Resiliency with NIST, Cisco Security, and Splunk

• New Threat Report from Cato Networks Uncovers Threat Actor Selling Data and Source Code from Major Brands

• Prolific Malvertising Scammer Arrested and Extradited to US to Face Charges

• Update: New Windows SmartScreen Bypass Exploited as Zero-Day Since March

• Unit 42 Attack Surface Threat Research: Over 23% of Internet-Connected Exposures Involve Critical IT and Security Infrastructure

• X accused of unlawfully using personal data of 60 million+ users to train its AI

• We’re making it easier for you to protect your identity

• Server-Side Template Injection: A Critical Vulnerability Threatening Web Applications

• Defense in Diversity: A Strategy for Robust Cybersecurity

• Strobes Integrates with Azure Repos: Enhancing Code Security

• DigiCert Acquires Vercara to Extend Cybersecurity Services

• ClearSale introduces three solutions to protect businesses from fraud

• AI risks are everywhere – and now MIT is adding them all to one database

• ‘SinkClose’ AMD CPU vulnerability explained: How dangerous is it really?

• White House Post-Quantum Announcement: What It Means for Cybersecurity

• Microsoft Patched SmartScreen Zero-Day Without Announcing

• Secure Data Sharing Company Kiteworks Raises $456 Million

• How to Augment Your Password Security with EASM

• Belarusian-Ukrainian Hacker Extradited to U.S. for Ransomware and Cybercrime Charges

• Understanding AI Bias and Security with NetSPI

• Face Check With Microsoft Entra Verified ID Is Now Generally Available, Microsoft

• Earth Baku Using Customized Tools To Maintain Persistence And Steal Data

• Iranian APT42 Actors Conducting World Wide Surveillance Operations

• BYOVDLL – A New Exploit That Is Bypassing LSASS Protection

• EastWind campaign: new CloudSorcerer attacks on government organizations in Russia

• Intel Sells Stake In British Chip Designer ARM

• Hackers Exploited by GraphQL Vulnerabilities to Compromise Organizations

• Vulnerability Recap 8/13/24 – Old Vulnerabilities Unexpectedly Emerge

• Seamless Secure Work on a Plane

• How CIOs, CTOs, and CISOs View Cyber Risks Differently

• Phishing Campaign Poses as Ukraine’s Security Service to Spread ANONVNC Malware

• Microsoft August Patch Tuesday Fixed 10 Zero-Day Vulnerabilities

• Proton has a plan to boost your online privacy. And your friend can benefit, too

• Want to Win a Bike Race? Hack Your Rival’s Wireless Shifters

• Improved vulnerability reporting on Quay.io

• test post for author

• Critical Vulnerability Found in Microsoft’s AI Healthcare Chatbot

• DoJ Considers Google Breakup After Landmark Monopoly Ruling

• iProov: 70% of organizations will be greatly impacted by gen AI deepfakes

• Kiteworks captures $456M at a $1B+ valuation to help secure sensitive data

• Microsoft Discloses 10 Zero-Day Bugs in Patch Tuesday Update

• Biden Administration Pledges $11 Million to Open Source Security Initiative

• Feds Seize Radar/Dispossessor Ransomware Gang Servers in US and Europe

• Chipmaker Patch Tuesday: Intel, AMD Address Over 110 Vulnerabilities

• NIST Releases Post Quantum Cryptography Standards

• Putting Threat Modeling Into Practice: A Guide for Business Leaders

• Cyber-Attack Spreads Phishing Scam Across Greater Manchester Areas

• 0-Click Outlook RCE Vulnerability Triggered When Email is Clicked – Technical Analysis

• The AMD SinkClose security hole is dangerous. Here’s how to protect your systems

• Report: 35% of Exposed API Keys Still Active, Posing Major Security Risks

• Critical SAP Flaw Allows Remote Attackers to Bypass Authentication

• Cybercriminal Duo Attracts FBI Notice by Spending Big & Living Large

• Is Lenovo a blind spot in US anti-China security measures?

• How LLMs are Revolutionizing Data Loss Prevention

• Cybersecurity News: FBI shutters Radar, NIST post-quantum standards, 2.7B record leaked

• Dark Web Marketplace Admins Busted Following Luxury Life

• Kootenai Health data breach impacted 464,000 patients

• NCSC Calls on UK Firms to Join Mass Cyber-Deception Initiative

• Updates and Evolution of the NIST Cybersecurity Framework: What’s New?

• Train for Entry-Level or Advanced IT Positions for Just $50

• Manufacturer Orion SA says scammers conned it out of $60M

• DeathGrip: Emergence of a new Ransomware-as-a-Service

• ICS Patch Tuesday: Advisories Released by Siemens, Schneider, Rockwell, Aveva

• Will GitOps Solve Configuration Security Issues?

• 2.7 Billion Data Records Leaked Including Social Security Numbers

• Microsoft Fixes Nine Zero-Days on Patch Tuesday

• Multiple Malware Dropped Through MSI Package, (Wed, Aug 14th)

• Clickbait PDFs, An Entry point For Multiple Web Based Attacks

• Microsoft Patch Tuesday security updates for August 2024 addressed six actively exploited bugs

• GraphQL Vulnerabilities and Common Attacks: Seen in the Wild

• Ivanti Neurons for Patch Management enhancements automate patching process

• Hackers Toolkit Unveiled, Comprehensive Tools For Various Cyber Attacks

• Exploiting pfsense Flaw for Remote Code Execution

• New Banshee MacOS Stealer Attacking Users to Steal Keychain Data

• DDoS Attacks Surge 46% in First Half of 2024, Gcore Report Reveals

• Indian telcos to cut off scammy, spammy, telemarketers for two whole years

• Elon Musk’s claim of DDoS attack greeted with skepticism: Cyber Security Today for Wednesday, August 14th, 2024

• Zoom Fixes Critical Vulnerabilities Allowing Privilege Escalation

• Malware Loaders Dominate Cybersecurity Threats in 2024

• Mobile security settings useful to block thieves in extracting data and money

• Can Hackers Track Down a User Based on Google Maps Usage?

• When Disinformation Floods the Internet, Preserving Truth Requires Proper Equipment

• China-Backed Earth Baku Expands Cyber Attacks to Europe, Middle East, and Africa

• Critical Flaw in Ivanti Virtual Traffic Manager Could Allow Rogue Admin Access

• Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Day Exploits

• Email Breach Report 2024: The Most Vulnerable Names and Providers Exposed

• IntelOwl: Open-source threat intelligence management

• Delta vs. CrowdStrike: The duties vendors owe to customers – or do they?

• NIST Debuts First Set of Finalized Post-Quantum Encryption Standards

• Cybersecurity jobs available right now: August 14, 2024

• Current attacks, targets, and other threat landscape trends

• What We Know About Suspected Iranian Cyber Intrusion in the US Presidential Race

• NIST releases finalized post-quantum encryption standards

• A Letter From Our CEO

• ISC Stormcast For Wednesday, August 14th, 2024 https://isc.sans.edu/podcastdetail/9096, (Wed, Aug 14th)

• NIST finalizes trio of post-quantum encryption standards

• Patch Tuesday brings 90 new Microsoft CVEs, six already under exploit

• Transform Your MSP’s Financial Future

• VERT Threat Alert: August 2024 Patch Tuesday Analysis

Generated on 2024-08-15 23:55:11.425319