IT Security News Daily Summary 2024-08-17

• Cyber Attack Disrupts Housing Services Across Greater Manchester

• The SIEM Market is Ripe with Consolidation, But are We Delivering on its Intended Security Promise?

• The Growing Threat of OTP-Stealing Malware: Insights from Zimperium’s zLabs

• National Public Data confirms a data breach

• USENIX Security ’23 – PROVIDENCE: a Flexible Round-by-Round Risk-Limiting Audit

• Should Americans Share The Social Security Number? Experts Explain the Pros and Cons

• Use Cash App? You may be eligible for a settlement payout – up to $2500

• The Hidden Threat: Vulnerable App on Google Pixel Devices Puts Millions at Risk

• Was your SSN leaked to the dark web? How to check for suspicious activity (and what to do next)

• Did you get a fake McAfee or Norton invoice? How the scam works (and what not to do)

• Geofence Warrants Ruled Unconstitutional—but That’s Not the End of It

• Paris 2024 Olympics Faced Over 140 Cyberattacks, No Disruptions Reported

• How a BEC scam cost a company $60 Million – Week in security with Tony Anscombe

• How To Respond to The Rise of Banking Trojans

• How the ransomware attack at Change Healthcare went down: A timeline

• 7-Year-Old Pre-Installed Google Pixel App Flaw Puts Millions at Risk

• Vendor Reliance and M&A Surge Contribute to Heightened Ransomware Threat

• ValleyRAT malware is targeting Chinese-speaking users

• Dozens of Google Products Targeted by Scammers via Malicious Search Ads

• A Deep Dive Into a New ValleyRAT Campaign Targeting Chinese Speakers

• OpenAI Blocks Iranian Influence Operation Using ChatGPT for U.S. Election Propaganda

• Cyber Security Today – Week In Review: The challenge of Deep Fakes and more

• CISA Warns Critical Vulnerabilities in Vonets WiFi Bridge Devices, No Patch Available

• Server-Side Template Injection: Transforming Web Applications from Assets to Liabilities – Check Point Research

• PrestaShop GTAG Websocket Skimmer

• News alert: Implementing AI-powered ‘Cisco HyperShield’ requires proper cybersecurity training

• Attackers Exploit Public .env Files to Breach Cloud Accounts in Extortion Campaign

• How to Use 1Password: Guide to Getting Started

• Sophos X-Ops: Ransomware gangs escalating tactics, going to ‘chilling’ lengths

• TEST

• North Korean cyber attacks: How to educate your team on this new scam trend

• USENIX Security ’23 – Reversing, Breaking, and Fixing the French Legislative Election E-Voting Protocol

• CISA adds SolarWinds Web Help Desk bug to its Known Exploited Vulnerabilities catalog

• Assura, Inc Makes the Inc. 5000 Again for the 4th Year; Coming in at No. 2594!!

• IT Security News Daily Summary 2024-08-16

• Digital License Plates and the Deal That Never Had a Chance

• OpenAI shuts down election influence operation that used ChatGPT

• More Sustainable Mining with Cisco

• After nearly 3B personal records leak online, Florida data broker confirms it was ransacked by cyber-thieves

• OpenAI shuts down election influence operation using ChatGPT

• Secure AI Access by Design — Enabling Safe Usage of GenAI Apps

• Unicoin hints at potential data meddling after G-Suite compromise

• Using Amazon GuardDuty Malware Protection to scan uploads to Amazon S3

• The Slow-Burn Nightmare of the National Public Data Breach

• Hacking Beyond .com — Enumerating Private TLDs

• Russian national sentenced to 40 months for selling stolen data on the dark web

• Massive Data Breach at National Public Data Exposes 2.7 Billion Records

• Lawmakers Ask for Probe of Chinese Router Maker TP-Link

• Why Training is Critical to Implementing Cisco HyperShield

• Threat Actors Increasingly Target macOS, Report Finds

• User mode vs. kernel mode: OSes explained

• Doppelgänger Operation Rushes to Secure Itself Amid Ongoing Detections, German Agency Says

• Akamai?s Perspective on August?s Patch Tuesday 2024

• What Is SQL Injection and How Can It Be Avoided?

• The best security keys of 2024: Expert tested

• DigiCert Announces Acquisition of Vercara

• Ransomware Surge Exploits Cybersecurity Gaps Caused by M&A

• The Biggest Lesson From Crowdstrike’s Update Malfunction

• Critical Security Flaw Discovered in Ivanti Virtual Traffic Manager

• USENIX Security ’23 – Fact-Saboteurs: A Taxonomy of Evidence Manipulation Attacks against Fact-Verification Systems

• Survey: Senior Executives Being Held More Accountable for Cybersecurity

• Ukraine Faces New Phishing Campaign Targeting Government Computers, Warns CERT

• Attackers Exploit Public .env Files to Breach Cloud and Social Media Accounts

• Unmasking Styx Stealer: How a Hacker’s Slip Led to an Intelligence Treasure Trove and their Big Reveal

• Secure GenAI Applications by Design

• Biotech Company Hacked in 2023 Pays States $4.5 Million Over Breached Data

• Understanding Defense in Depth in IT Security

• Never store credit cards or Social Security Numbers on your phone

• What is an endpoint protection platform (EPP)?

• Report: 56% of Security Professionals Worry About AI-Powered Threats

• Cybersecurity Insights with Contrast CISO David Lindner | 8/16/24

• China To Limit Export Of Another Critical Mineral

• IT Stress Points For SMEs Identified By TalkTalk Business

• Security Experts Welcome NIST’s New Encryption Standards For Quantum Computers

• Banshee Stealer, a new macOS malware with a monthly subscription price of $3,000

• Navigating the future of cybersecurity

• Massive Data Leak Exposes Sensitive Information for Millions

• X Confronts EU Legal Action Over Alleged AI Privacy Missteps

• This Security Researcher Infiltrated the LockBit Ransomware Outfit and Exposed its Leader

• Russian Hacker Jailed 3+ Years for Selling Stolen Credentials on Dark Web

• 10,000 WordPress Sites Affected by Arbitrary File Read and Delete Vulnerability in InPost PL and InPost for WooCommerce WordPress Plugins

• Report: Ransomware Gangs Rake in More Than $450 Million in First Half of 2024

• Cloud Misconfigurations Expose 110,000 Domains to Extortion in Widespread Campaign

• ESG Survey Report Finds AI, Secrets, and Misconfigurations Plague AppSec Teams

• Modernizing Identity Security Amid an Evolving Threat Landscape

• A ‘very large percentage’ of Pixel phones have a hidden security vulnerability

• SystemBC Malware Used to Target Users by Black Basta-Linked Threat Actors

• The AI Balancing Act: Unlocking Potential, Dealing with Security Issues, Complexity

• August 2024 Patch Tuesday: Six Zero-Days and Six Critical Vulnerabilities Amid 85 CVEs

• New Windows Vulnerability CVE-2024-6768 Triggers Blue Screen of Death on All Versions of Windows 10 and 11

• US Bipartisan Committee Urges Investigation Into Chinese Wi-Fi Routers

• The Relationship Between Performance and Security

• Russian Hackers Using Fake Brand Sites to Spread DanaBot and StealC Malware

• Russian Citizen Sentenced in US for Selling Stolen Financial Data on Criminal Marketplace

• Consolidation vs. Optimization: Which Is More Cost-Effective for Improved Security?

• It’s Time to Stop Thinking of Threat Groups as Supervillains, Experts Say

• Addressing Cybersecurity Challenges in Healthcare: A Strategic Approach

• Microsoft Mandates MFA for All Azure Sign-Ins

• AI-powered cyber threats are too overpowering for over 50% of security teams

• Multi-Stage ValleyRAT Targets Chinese Users with Advanced Tactics

• Meta Warns of Troll Networks From Russia, Iran Ahead of US Elections

• New Banshee Stealer macOS Malware Priced at $3,000 Per Month

• The Hidden Security Gaps in Your SaaS Apps: Are You Doing Due Diligence?

• ArtiPACKED Flaw Exposed GitHub Actions to Token Leaks

• IBM to set up ‘full stack’ AI facility at university

• New Windows IPv6 Zero-Click Vulnerability

• DDoS Attack Volume Rises, Peak Power Reaches 1.7 Tbps

• Ransomware Attackers Introduce New EDR Killer to Disable Protection on Compromised Hosts

• Revolut Valued At $45 Billion, More Than Barclays, NatWest

• Tech support scammers impersonate Google via malicious search ads

• Florida-Based National Public Data Confirms Data Breach

• Ailurophile: New Infostealer sighted in the wild

• Google Warns of Iranian Hackers Targeting Affiliates of Both US Presidential Campaigns

• SolarWinds Web Help Desk Vulnerability Possibly Exploited as Zero-Day

• How to use the Passwords app on your iPhone with iOS 18

• Observations from Black Hat USA 2024, BSidesLV, and DEF CON 32

• Cybersecurity News: GitHub artifact warning, RansomHub’s EDR killer, SolarWinds latest hotfix

• Millions of Pixel devices can be hacked due to a pre-installed vulnerable app

• M&A Activity can Amplify Ransomware Insurance Losses, Research Finds

• Ransomware Group Behind Major Indonesian Attack Wears Many Masks

• An Analysis of Common Malware Loaders

• Pindrop Pulse Inspect analyzes and verifies whether media files contain synthetic speech

• New Banshee Stealer Targets 100+ Browser Extensions on Apple macOS Systems

• Geopolitical Tensions Drive Explosion in DDoS Attacks

• Why you should remove the hard drive from your old computers

• VirusTotal += Huorong

• Microsoft urges customers to fix zero-click Windows RCE in the TCP/IP stack

• Highly-Personalized Phishing Campaign Targets Russian Government Dissidents

• Striking a Balance Between Business Growth, Risk Management and Cybersecurity

• Holding Trust for Ransom: What’s at Stake as Business Trust Erodes

• Critical Start helps organizations reduce cyber risk from vulnerabilities

• Massive Cyberattack Hit Central Bank of Iran

• Pool your Cybersecurity Resources to Build The Perfect Security Ecosystem

• Cybersecurity in Healthcare: A New Era of Regulation, Incentives, and Patient Safety

• Google Pixel Devices Shipped with Vulnerable App, Leaving Millions at Risk

• Deepfake Technology advancements pose a real and present threat: Cyber Security Today for Friday, August 16, 2024

• List of vulnerable states in America that are vulnerable to Cyber Attacks

• Can a CIO Avoid Cyber Threats and Data Breaches?

• 2024-08-15 – Traffic analysis exercise: WarmCookie

• Authentik: Open-source identity provider

• Business and tech consolidation opens doors for cybercriminals

• AI governance and clear roadmap lacking across enterprise adoption

• New infosec products of the week: August 16, 2024

• How NoCode and LowCode free up resources for cybersecurity

• ISC Stormcast For Friday, August 16th, 2024 https://isc.sans.edu/podcastdetail/9100, (Fri, Aug 16th)

• [Guest Diary] 7 minutes and 4 steps to a quick win: A write-up on custom tools, (Fri, Aug 16th)

Generated on 2024-08-17 23:55:08.846850