IT Security News Daily Summary 2024-08-21

• From Offices to Hotels: Backdoor in Contactless Key Cards Enables Mass Cloning

• My child had her data stolen—here’s how to protect your kids from identity theft

• Publisher’s Spotlight: Cyera

• What Gartner’s 2024 hype cycle forecast tells us about the future of AI (and other tech)

• Stadiums Are Embracing Face Recognition. Privacy Advocates Say They Should Stick to Sports

• Experts disclosed a critical information-disclosure flaw in Microsoft Copilot Studio

• New PG_MEM Malware Targets PostgreSQL Databases to Mine Cryptocurrency

• An explanation of cybersecurity

• The ultimate contact center security checklist

• Geofence Warrants Are ‘Categorically’ Unconstitutional | EFFector 36.11

• Gartner Report: Implement a Continuous Threat Exposure Management (CTEM) Program

• Backdoor in RFID Cards for Offices, Hotels Can Lead to Instant Cloning

• CMA Drops Apple, Google App Store Investigations

• Ford Pulls Back On EV Spending

• Securing Federal Systems

• Typing these four characters could crash your iPhone

• North Korea-linked APT used a new RAT called MoonPeak

• Publisher’s Spotlight: Cranium

• What’s New in CodeSonar 8.2

• Randall Munroe’s XKCD ‘Ferris Wheels’

• The best identity theft protection and credit monitoring services of 2024

• CISA Adds Four Known Exploited Vulnerabilities to Catalog

• 110K domains targeted in ‘sophisticated’ AWS cloud extortion campaign

• Critical Authentication Flaw Haunts GitHub Enterprise Server

• Fintechs Encouraged to Join National Cyber Fraud Reporting System

• North Korean Hackers Deploy New MoonPeak Trojan in Cyber Campaign

• Microsoft Patches Critical Copilot Studio Vulnerability Exposing Sensitive Data

• Telegram and WhatsApp suffer downtime in Russia due to DDoS

• Four Bodies Found In Yacht Wreck Amid Search For Mike Lynch

• More than 3 in 4 Tech Leaders Worry About SaaS Security Threats, New Survey Reveals

• AI in OT Security — Balancing Industrial Innovation and Cyber Risk

• Cyberattack Disrupts Microchip Technology’s Activity

• How Should Your MSP Deal With the ‘Small Client Problem’?

• Critical LiteSpeed Cache Plugin Flaw Exposes WordPress Sites

• New MoonPeak RAT Linked to North Korean Threat Group UAT-5394

• Shaping the legacy of partnership between government and private sector globally: JCDC

• The US Government Wants You—Yes, You—to Hunt Down Generative AI Flaws

• Translating Cybersecurity Jargon into Business Speak

• Publishers Spotlight: Cranium

• Russia tells citizens to switch off home surveillance because the Ukrainians are coming

• Arden Claims Service Reports Data Breach, 139,000 Affected

• Patch Tuesday not Done ’til LINUX Won’t Run?

• How Pen Testing is Evolving and Where it’s Headed Next

• Flight Aware User Data Leaked Following Misconfiguration

• Chemical Giant Orion Loses $60 Million in Email Scam

• Encryption in transit over external networks: AWS guidance for NYDFS and beyond

• Over 5,000,000 Site Owners Affected by Critical Privilege Escalation Vulnerability Patched in LiteSpeed Cache Plugin

• Anthropic Sued For Copyright Infringement By Authors

• Man certifies his own (fake) death after hacking into registry system using stolen identity

• Don’t panic! It’s only 60 Linux CVE security bulletins a week

• How to Use LastPass: Complete Guide for Beginners

• Why the UN Convention Against Cybercrime Requires a Second Look

• Story of an Undercover CIA Agent who Penetrated Al Qaeda

• Rethinking Cyber-Physical Systems Security in the Age of Industry 4.0

• T-Mobile Customers Alarmed by Unfamiliar Support Links, But They Are Legitimate

• Bangladeshi SIM Box Fraud Uncovered in Major Odisha Operation

• Critical Jenkins RCE Vulnerability: A New Target for Ransomware Attacks

• Entrust KeyControl as a Service provides organizations with control of their cryptographic keys

• HITRUST unveils AI Risk Management Assessment solution

• Oregon Zoo Warns Over 100,000 Customers of Payment Card Compromise

• Australia Calls Off Clearview AI Investigation Despite Lack of Compliance

• Embed API Security into Regulatory Compliance: Six Examples to Watch

• Introducing Automatic URL Categorization: Enhanced Security and Efficiency

• The AI Revolution: Transforming Technology and Reshaping Cybersecurity

• Critical Remote Code Execution Vulnerability Addressed in GiveWP Plugin

• PostgreSQL databases under attack

• National Public Data leaked passwords online

• McAfee unleashes AI deepfake audio detector – but how reliable can it be?

• TA453 Targets Religious Figure with Fake Podcast Invite Delivering New BlackSmith Malware Toolset

• Thousands of Apps Using AWS ALB Exposed to Attacks Due to Configuration Issue

• Survey Surfaces Growing SaaS Application Security Concerns

• CISA to Get New Headquarters as $524M Contract Awarded

• 1-15 May 2024 Cyber Attacks Timeline

• Researcher Details Microsoft Outlook Zero-Click Vulnerability (CVE-2024-38021)

• Four Essential Tips for Building a Robust REST API in Java

• Critical Heap Overflow Vulnerability Discovered in FFmpeg, PoC Published

• TLS Bootstrap Attack on Azure Kubernetes Services can Leak Sensitive Credentials

• Google Cloud Unveils New Security Services and Capabilities

• Tesla To Receive Lower EU Tariff For Chinese-Made EVs

• ALBeast: Misconfiguration Flaw Exposes 15,000 AWS Load Balancers to Risk

• CISA Adds One Known Exploited Vulnerability to Catalog

• RightCrowd introduces Mobile Credential Management feature

• New macOS Malware TodoSwift Linked to North Korean Hacking Groups

• Styx Stealer Creator’s OPSEC Fail Leaks Client List and Profit Details

• It’s Time To Untangle the SaaS Ball of Yarn

• Microchip Technology apparently impacted by ransomware attack

• The Rise of Kerberoasting: A New Cyber Threat on the Horizon

• Exploits and vulnerabilities in Q2 2024

• New Msupedge Backdoor Targeting Taiwan Employs Stealthy Communications

• Healthcare Hit by a Fifth of Ransomware Incidents

• Sky Signs Full Fibre Broadband Partnership With CityFibre

• Toyota confirms customer and employee data stolen, says breach at third party to blame

• The 6 Best Malware Removal Software Providers for 2024

• RCE Vulnerability in Atlassian Bamboo Data Center and Server

• Mastering Data Visibility for Secure AI Adoption with Cyera

• MoonPeak malware from North Korean actors unveils new details on attacker infrastructure

• Autoencoder Is All You Need: Profiling and Detecting Malicious DNS Traffic

• Microchip Technology manufacturing facilities impacted by cyberattack

• Cybersecurity News: Toyota third-party breach, Hawaii registry hack, Iran disrupting campaigns

• Pro-Russia group Vermin targets Ukraine with a new malware family

• Spring Security Flaw Leaves Applications Open to Unauthorized Access

• Cyberattack Disrupts Microchip Technology Manufacturing Facilities

• Most Ransomware Attacks Now Happen at Night

• Tips to Help Leaders Improve Cyber Hygiene

• Understanding Managed Service Providers (MSPs): Choosing the Right Provider

• Rising Abuse of URL Rewriting in Phishing

• Unmasking Styx Stealer: How a Hacker’s Slip Led to an Intelligence Treasure Trove

• Microchip Technology Says IT Incident Impacted Operations

• Over 10,000 WordPress Sites at Risk: Critical File Deletion Flaw Found in InPost Plugins

• Deadbeat dad faked his own death by hacking government databases

• McAfee Deepfake Detector combats AI scams and misinformation

• How to Use BitDefender VPN on Any Device: 2024 Tutorial

• Transforming underserved communities and fostering sustainable growth through entrepreneurial endeavors

• A backdoor in millions of Shanghai Fudan Microelectronics RFID cards allows cloning

• McAfee Unveils Tool to Identify Potential Deep Fakes

• CERT-UA Warns of New Vermin-Linked Phishing Attacks with PoW Bait

• Ransomware hits record high amounts: Cyber Security Today for Tuesday, August 21, 2024

• US Intelligence Agencies Warn of Iranian Election Influence Efforts

• FlightAware Notifies Users of Data Security Incident

• Cyberattack Forces Microchip Technology to Scale Back Amid Global Chip Race

• Publishers Spotlight: Bedrock Security

• OpenCTI: Open-source cyber threat intelligence platform

• GiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk

• Experts Weigh In on the NPD Breach and Its Implications

• The Hidden Threat of Shadow AI

• Food security: Accelerating national protections around critical infrastructure

• Cybersecurity jobs available right now: August 21, 2024

• Why I Joined Balbix: Embracing the AI-Powered Future of Cybersecurity

• Average DDoS attack costs $6,000 per minute

• ISC Stormcast For Wednesday, August 21st, 2024 https://isc.sans.edu/podcastdetail/9106, (Wed, Aug 21st)

• Singapore updates OT security blueprint to focus on data sharing and cyber resilience

• Chipmaker Microchip reveals cyber attack whacked manufacturing capacity

• Mapping Threats with DNSTwist and the Internet Storm Center [Guest Diary], (Tue, Aug 20th)

• New Phishing Attacks Target Eastern European Bank Users on iOS and Android

• An AWS Configuration Issue Could Expose Thousands of Web Apps

• Black Hat USA 2024: Key Takeaways from the Premier Cybersecurity Event

• IT Security News Daily Summary 2024-08-20

• What is cloud detection and response (CDR)?

• Building a Semantic Web Search App Using Resource Description Framework and Flask for Cyber Resilience

• Czech Mobile Users Targeted in New Banking Credential Theft Scheme

• Detecting AWS Account Compromise: Key Indicators in CloudTrail Logs for Stolen API Keys

• Why you need to know about ransomware

• Can someone tell if I block their number?

• Darktrace Co-founder Mike Lynch Presumed Dead After Superyacht Sinks

• Black Hat 2024, Day 2: Charting the Future of Cybersecurity

• Cisco employees face a month of silence ahead of second layoff in 2024

• Ransomware payments rose from $449.1 million to $459.8 million

• U.S. agencies attribute Trump campaign hack to Iran

• Should small businesses worry about the NIS2 Directive in Europe?

• Previously unseen Msupedge backdoor targeted a university in Taiwan

• Africa’s Economies Feel Pain of Cybersecurity Deficit

• Major Backdoor in Millions of RFID Cards Allows Instant Cloning

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #304 – Fail Fast

• Agentless is a DAM Better Option for Securing Cloud Data

• To Improve Your Cybersecurity Posture, Focus on the Data

• AI-Enhanced Crypto Scams: A New Challenge for ASIC

• Lessons for Banks from the Recent CrowdStrike Outage

• Novel Phishing Method Used in Android/iOS Financial Fraud Campaigns

• Germany offers Cybersecurity Labels for mobile devices

• TodoSwift Malware Targets macOS, Disguised as Bitcoin PDF App

• How Data Encryption Can Simplify Infrastructure Architecture

• Strengthening Your Cyber Defenses: The Critical Role of Defensive Training

• Hackers Linked to $14M Holograph Crypto Heist Arrested in Italy

• Publishers Spotlight: ForAllSecure

• Plane tracker FlightAware admits user passwords, SSNs exposed for years

• New DNS-Based Backdoor Threat Discovered at Taiwanese University

• Edge Computing and 5G: Emerging Technology Shaping the Future of IT

• National Public Data Breach: Only 134 Million Unique Emails Leaked and Company Acknowledges Incident

• How to Get a VPN on Any Device (+ Installation Tips)

• US government accuses Iran of Trump campaign hack; Iran scoffs

• Your Journey to Mastery with Black Belt Training: A Comprehensive Guide for Cisco Partners

• Russia-linked Vermin Hackers Target Ukraine With new Malware Strain

• UK: NCSC Opens Cyber Resilience Audit Scheme to Applicants

• Plane-tracking app admits user passwords, SSNs exposed for over 3 years

• Critical Flaw in Donation Plugin Exposed 100,000 WordPress Sites to Takeover

• USENIX Security ’23 – Pspray: Timing Side-Channel Based Linux Kernel Heap Exploitation Technique

• INE Security Alert: The Steep Cost of Neglecting Cybersecurity Training

• New Report Reveals Rising Attacks on macOS Systems

• Here’s Why Ransomware Actors Have a Upper Hand Against Organisations

• Timeline of the Ransomware Attack on Change Healthcare: How It Unfolded

• Iranian Group TA453 Launches Phishing Attacks with BlackSmith

• Where are we with CVE-2024-38063: Microsoft IPv6 Vulnerability, (Tue, Aug 20th)

• Cost of a data breach: The industrial sector

• Securing Catalyst Center: ISO Certified

• OpenAI Kills Iranian Accounts Spreading Us Election Disinformation

• Common API Security Issues: From Exposed Secrets To Unauthorized Access

• Fortanix protects individual file systems on specified hosts

• New phishing method targets Android and iPhone users

• New Styx Stealer Attacking Users to Steal Login Passwords

• “We will hold them accountable”: General Motors sued for selling customer driving data to third parties

• Most Ransomware Attacks Occur When Security Staff Are Asleep, Study Finds

• Three-Quarters of Companies Retain An Increasing Amount of Sensitive Data, Report Finds

• Bitdefender vs Kaspersky: Comparing Top EDR Solutions in 2024

• Digital Wallets can Allow Purchases With Stolen Credit Cards

• Publishers Spotlight: Endari

• Your Company Culture Can Become A Powerful Cybersecurity Resource

• Hackers Could Exploit Microsoft Teams on macOS to Steal Data

• MegaMedusa, Highly Scalable Web DDoS Attack Tool Used By Hacker Groups

• Backdoor MIFARE Smart Cards Exposes User-Defined Keys On Cards

• Digital Wallets Bypassed To Allow Purchase With Stolen Cards

• x64dbg: Open-Source Binary Debugger for Windows

• All-in-One: How Cynet is Revolutionizing Cybersecurity for MSPs

• Survey Surfaces Widespread Mishandling of Sensitive Data

• 0-day in Windows driver exploited by North Korean hackers to deliver rootkit (CVE-2024-38193)

• Approach to mainframe penetration testing on z/OS

• Chrome Will Redact Credit Cards, Passwords When You Share Android Screen

• Xeon Sender Enables Large-Scale SMS Spam Attacks Using Legitimate SaaS Providers

• Fabric Cryptography Raises $33 Million for VPU Chip

• RansomHub Deploys EDRKillShifter Malware to Disable Endpoint Detection Using BYOVD Attacks

• Hacking Wireless Bicycle Shifters

• How Exceptional CISOs Are Igniting the Security Fire in Their Development Team

• Multi-Domain vs Wildcard SSL Certificates: Differences & Uses

• Overturning of Chevron Deference’s Impact on Cybersecurity Regulation

• Vermin Cyber-Attacks Target Ukraine, Exploiting Kursk Battle

• Comprehensive Threat Protection Strategies for Microsoft 365 Environments

• 2GB variant of Raspberry Pi Launched for Just $50

• Authentik: Open-Source Identity Provider

• Multiple Microsoft Apps for macOS Vulnerable to Library Injection Attacks

• Vulnerabilities in Microsoft macOS apps may give attackers access to microphone, camera

• Iranian Cyber Group TA453 Targets Jewish Leader with New AnvilEcho Malware

• Researchers Uncover TLS Bootstrap Attack on Azure Kubernetes Clusters

• Anatomy of an Attack

• Hackers Exploit PHP Vulnerability to Deploy Stealthy Msupedge Backdoor

• Iran Behind Trump Campaign Hack, US Government Confirms

• The Metaverse Won’t Die: Embracing the Future of Work and Connection

• Artificial intelligence, real anxiety: Why we can’t stop worrying and love AI

• Update: Ransomware Attack on Indian Payment System Traced Back to Jenkins Bug

• GuidePoint Security releases Phishing as a Service

• I Said I Was Technically a CISO, Not a Technical CISO

• Palo Alto Networks Forecasts Strong Security Demand

• South Korean AI Chip Makers Sapeon, Rebellions To Merge

• Update: US Agencies Attribute Presidential Campaign Cyberattacks to Iran

• Ubuntu Addresses Multiple OpenJDK 8 Vulnerabilities

• Cybersecurity News: National Public Data breach update, Flaws in macOS apps, FlightTracker configuration issue

• UK Businesses Face New Cyber-Attacks Every 44 Seconds in Q2 2024

• Securing Infrastructure as Code: Best Practices for State Management

• Vulnerability Recap 8/20/24 – Microsoft Has the Spotlight This Week

• Oracle NetSuite misconfiguration could lead to data exposure

• Microsoft Mandates MFA for all Azure Sign-Ins

• CISA Adds Jenkins CLI Bug to its Known Exploited Vulnerabilities Catalog

• Jewish Home Lifecare Notifies 100,000 Victims of Ransomware Breach

• Former Congressman Santos Admits Identity Theft and Fraud

• Mike Lynch Co-Defendant Dies In Car Accident

• 2.9 Billion Records Exposed in NPD Breach: How to Stay Safe

• Cybercriminals Exploit Paris Olympics With Fake Domains

• Ukrainian Bank’s Service for Military Donations Targeted by ‘Massive’ DDoS Attack

• Google Pixel Devices Found Vulnerable Due To Pre-Installed App

• Google Pledges To Strengthen Privacy With Gemini AI

• Shanghai Doubles Size Of Chip Investment Fund

• AMD To Buy Server Maker ZT Systems Amidst AI Battle

• Unauthenticated RCE in WordPress Plugin Exposes 100,000 WordPress Sites

• Toyota disclosed a data breach after ZeroSevenGroup leaked stolen data on a cybercrime forum

• 10 Strategies for Safely Migrating a Data Center on a Limited Budget

• NEWS ANALYSIS Q&A: The early going of Generative AI and LLMs impacting cybersecurity

• X Closes Brazil Office Due To ‘Censorship’

• Autodesk AutoCAD Vulnerability Let Attackers Execute Arbitrary Code

• Iran named as source of Trump campaign phish, leaks

• Google to launch threat detection AI powered feature to all Android phones

• 5 Emerging Malware Variants You Must Be Aware Of

• CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware Attacks

• Thousands of Oracle NetSuite Sites at Risk of Exposing Customer Information

• Blind Eagle Hackers Exploit Spear-Phishing to Deploy RATs in Latin America

• Ransom Denied: Cyber Insurance Claims Shrink as Businesses Opt for DIY Recovery

• Why a Savvy Security Strategy is Essential | Grip

• Ransomware’s Record Year: 2024 Earnings Soar Amid Overall Cybercrime Dip

• Organizations turn to biometrics to counter deepfakes

• AI for application security: Balancing automation with human oversight

• Strategies for security leaders: Building a positive cybersecurity culture

• Cybercriminals exploit file sharing services to advance phishing attacks

• ISC Stormcast For Tuesday, August 20th, 2024 https://isc.sans.edu/podcastdetail/9104, (Tue, Aug 20th)

• Digital wallets can allow purchases with stolen credit cards

• US Intelligence Officials Say Iran is to Blame for Hacks Targeting Trump, Biden-Harris Campaigns

• Identity Protection That Spans the Entire Attack Lifecycle

Generated on 2024-08-21 23:55:10.505733