IT Security News Daily Summary 2024-08-19

• SOCI Act 2024: Thales Report Reveals Critical Infrastructure Breaches in Australia

• Guide to data detection and response (DDR)

• The Windows BitLocker recovery bug is fixed, according to Microsoft

• Announcing new EDR capabilities for Webroot Endpoint Protection

• CISA adds Jenkins Command Line Interface (CLI) bug to its Known Exploited Vulnerabilities catalog

• OpenAI kills Iranian accounts using ChatGPT to write US election disinfo

• test

• Your Android phone is getting an anti-theft upgrade, thanks to AI. How it works

• Too many cloud security tools? Time for consolidation

• MSPs: The Cisco Meraki Approach to Addressing MDU Deployments

• Court to California: Try a Privacy Law, Not Online Censorship

• NO FAKES – A Dream for Lawyers, a Nightmare for Everyone Else

• Multiple flaws in Microsoft macOS apps unpatched despite potential risks

• Extortion Group Exploits Cloud Misconfigurations, Targets 110,000 Domains

• Mike Lynch, Five Others Missing After Yacht Sinks Off Sicily

• SAFECOM and NCSWIC Develop Global Positioning System (GPS) for Public Safety Location Services: Use Cases and Best Practices

• Social Security number data breach: What you need to know

• Researchers uncovered new infrastructure linked to the cybercrime group FIN7

• Daniel Stori’s ‘The War For Port 80’

• Here’s What Businesses Can Learn From a $2 Million Ransomware Attack SEC Settlement

• Zero-Trust Security: The Critical Role of Trust And Human Integrity

• Stolen, locked payment cards can be used with digital wallet apps

• Making sense of secrets management on Amazon EKS for regulated institutions

• CISA Warns Of Active Exploitation Of SolarWinds Web Help Desk Vulnerability

• FlightAware warns that some customers’ info has been ‘exposed,’ including Social Security numbers

• Vulnerability Summary for the Week of August 12, 2024

• How We Transformed Akamai from a CDN to a Cloud and Security Company

• AWS cyber attack exposes over 230 million unique cloud environments

• CrowdStrike outage lessons learned: Questions to ask vendors

• National Public Data Published Its Own Passwords

• Windows Zero-Day Attack Linked to North Korea’s Lazarus APT

• FBI and CISA Assure Public on Election Ransomware Security

• $4,998 Bounty Awarded and 100,000 WordPress Sites Protected Against Unauthenticated Remote Code Execution Vulnerability Patched in GiveWP WordPress Plugin

• Data Security Solution for US Federal Customers

• Hacked GPS tracker reveals location data of customers

• Dodging the Cyber Bullet: Early Signs of a Ransomware Attack

• Cyber Stressed! Top 3 MSP Cybersecurity Challenges [And How to Fix Them]

• Heimdal and ViroSafe Partner to Strengthen Nordic Cybersecurity

• Mandatory MFA is Coming to Microsoft Azure

• USENIX Security ’23 – Cipherfix: Mitigating Ciphertext Side-Channel Attacks in Software

• The Rise of Manual Techniques in Ransomware Attacks: A Growing Threat

• New Tool Xeon Sender Enables Large-Scale SMS Spam Attacks

• “WireServing” Up Credentials: Escalating Privileges in Azure Kubernetes Services

• AI SPERA and Hackers Central Partner to Expand Mexico’s Security Market with ‘Criminal IP ASM’

• If your SSN was leaked online, you should freeze your credit: Here’s how to do that

• Cyber insurance claims fall as businesses refuse ransom payments and recover themselves

• National Public Data Says Breach Impacts 1.3 Million People

• Massive Data Breach Exposes Social Security Numbers of 2.9 Billion People

• Major Data Breach at FlightAware Exposes Pilots and Users’ Information

• Own proactively detects and stores data changes in Salesforce

• Appian helps organizations prepare for current and forthcoming AI regulations

• Microsoft Apps for macOS Exposed to Library Injection Attacks

• Announcing AWS KMS Elliptic Curve Diffie-Hellman (ECDH) support

• Lazarus Hacker Group Exploited Microsoft Windows Zero-day

• Getting to Know Katrin Bauer

• Azure Domains and Google Abused to Spread Disinformation and Malware

• EFF and Partners to EU Commissioner: Prioritize User Rights, Avoid Politicized Enforcement of DSA Rules

• National Public Data tells officials ‘only’ 1.3M people affected by intrusion

• Cybercriminals Exploit Popular Software Searches to Spread FakeBat Malware

• New UULoader Malware Distributes Gh0st RAT and Mimikatz in East Asia

• API Security: The Cornerstone of AI and LLM Protection

• Internal And External Threat Intelligence

• Crypto Firm Says Hacker Locked All Employees Out of Google Products for Four Days

• Mad Liberator Gang Uses Fake Windows Update Screen to Hide Data Theft

• Oregon Zoo Ticketing Service Hack Impacts 118,000

• How to Automate the Hardest Parts of Employee Offboarding

• Microsoft Users Rush To Patch Zero-Click TCP/IP RCE Flaw

• Ransomware Resilience Drives Down Cyber Insurance Claims

• Linux Kernal Vulnerability Let Attackers Bypass CPU & Gain Read/Write Access

• Unfixed Microsoft Entra ID Authentication Bypass Threatens Hybrid IDs

• The Essential Guide to Evaluating Competitive Identity Verification Solutions

• Xeon Sender Tool Exploits Cloud APIs for Large-Scale SMS Phishing Attacks

• How can you check if your SSN was leaked on the dark web after the NPD breach?

• OpenAI Deactivates Accounts Used By Iran Election Influence Group

• Court Narrows Injunction On California Social Media Law

• Millennials’ sense of privacy uniquely tested in romantic relationships

• Supply Chain Security Policy

• CyberGhost vs ExpressVPN (2024): Which VPN Is Better?

• The Pentagon Is Planning a Drone ‘Hellscape’ to Defend Taiwan

• Experts warn of exploit attempt for Ivanti vTM bug

• BlindEagle flying high in Latin America

• Industry Moves for the week of August 19, 2024 – SecurityWeek

• 100,000 Impacted by Jewish Home Lifecare Data Breach

• Combining Continuous Pentesting with Attack Surface Management

• How multiple vulnerabilities in Microsoft apps for macOS pave the way to stealing permissions

• Tracki – 372,557 breached accounts

• Thousands of Oracle NetSuite E-Commerce Sites Expose Sensitive Customer Data

• Update: Windows Zero-Day Flaw was Exploited by North Korea-linked Lazarus APT

• Cybersecurity News: Entra forces MFA, another AnyDesk heist, Google Pixel vulnerability

• TikTok Says US Data Not Linked To China

• Texas Instruments Receives $1.6bn In US Gov’t Chip Funding

• Duke of Sussex Speaks Against Online Misinformation

• Shares In EV Maker Ola Spike After Motorcycle Launch

• Microsoft Zero-Day CVE-2024-38193 was exploited by North Korea-linked Lazarus APT

• Rewriting Hysteria: Rising Abuse of URL Rewriting in Phishing

• Mandatory MFA for Azure sign-ins is coming

• NCSC Opens Cyber Resilience Audit Scheme to Applicants

• Enhancing Internal Controls: Correlation, Mapping, and Risk Mitigation

• 10 Authentication Trends in 2024 and Beyond

• Fast Forward or Freefall? Navigating the Rise of AI in Cybersecurity

• Group-IB partners with SecurityHQ to enhance SOC capabilities

• AMD Patched The Newly Disclosed SinkClose CPU Vulnerability

• ProtonVPN Opens Up Browser Extension Feature To Free Users

• A week in security (August 12 – August 18)

• Unicoin Staff Locked Out of G-Suite in Mystery Attack

• OpenAI takes action against Iranian disinformation campaigns using ChatGPT: Cyber Security Today for Monday, August 19th, 2024

• Epic Games’s Fortnite Returns To Smartphones After Four Years

• Explore Talent (August 2024) – 8,929,384 breached accounts

• The Inefficiency of People-Search Removal Tools, Massive Data Breach Impacting U.S. Citizens

• Microsoft Patches Zero-Day Flaw Exploited by North Korea’s Lazarus Group

• Do you Like Donuts? Here is a Donut Shellcode Delivered Through PowerShell/Python, (Mon, Aug 19th)

• National Public Data Leaks Social Security Numbers of about 2.7 billion populaces

• Top Paying Countries for Cybersecurity Experts

• Researchers Found a New Technique to Defend Cache Side Channel Attacks

• Ransomware Gangs Introduce New EDR-Killing Tool

• National Public Data Admits to Breach Leaking Millions of Social Security Numbers

• Researchers Uncover New Infrastructure Tied to FIN7 Cybercrime Group

• BeaverTail Malware Attacking Windows Users Via Weaponized Games

• Was your Social Security number leaked to the dark web? Use this tool to find out

• Protecting academic assets: How higher education can enhance cybersecurity

• x64dbg: Open-source binary debugger for Windows

• To improve your cybersecurity posture, focus on the data

• Common API security issues: From exposed secrets to unauthorized access

• ISC Stormcast For Monday, August 19th, 2024 https://isc.sans.edu/podcastdetail/9102, (Mon, Aug 19th)

• Was your SSN leaked to the dark web? Use this tool to find out

• RansomHub-linked EDR-killing malware spotted in the wild

• The Mad Liberator ransomware group uses social-engineering techniques

• IT Security News Weekly Summary – Week 33

• IT Security News Daily Summary 2024-08-18

• USENIX Security ’23 – NVLeak: Off-Chip Side-Channel Attacks via Non-Volatile Memory Systems

• How to freeze your credit – and how it can help protect you after data breaches

• From 2018: DeepMasterPrints: deceive fingerprint recognition systems with MasterPrints generated with GANs

• The Rise of Malvertising: How Scammers Target Google Products with Malicious Search Ads

• Russian Disinformation Network Struggles to Survive Crackdown

• Pro-Palestine Outfit Takes Responsibility for Hacking Donald Trump-Elon Musk Interview

• Ransomware Attack on the Washington Times Leads to a Dark Web Data Auction

• Navigating AI and GenAI: Balancing Opportunities, Risks, and Organizational Readiness

• National Public Data Breach Exposes Millions: Threat of Identity Theft Looms

• CVE-2024-7646: Ingress-NGINX Annotation Validation Bypass – A Deep Dive

• Getting Wins for Security Leaders: Strategies and Considerations for Success

• Security Affairs newsletter Round 485 by Pierluigi Paganini – INTERNATIONAL EDITION

• SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 7

• Large-scale extortion campaign targets publicly accessible environment variable files (.env)

• Week in review: MS Office flaw may leak NTLM hashes, malicious Chrome, Edge browser extensions

Generated on 2024-08-19 23:55:08.089693