IT Security News Daily Summary 2024-08-23

• Friday Squid Blogging: Self-Healing Materials from Squid Teeth

• Cybercriminals Deploy New Malware to Steal Data via Android’s Near Field Communication (NFC)

• # OffSec 500 – Community Update 1

• Innovator Spotlight: ArmorCode

• Audit: FBI is Losing Track of Storage Devices Holding Sensitive Data

• Identities Aren’t for Sale: TSA Biometrics Technology and the Need for Consumer Consent

• Fake funeral “live stream” scams target grieving users on Facebook

• CrowdStrike 2024 report exposes North Korea’s covert workforce in U.S. tech firms

• Phishing attacks target mobile users via progressive web applications (PWA)

• NGate Android Malware Relays NFC Traffic to Steal Credit Card Data

• Florida Medical Lab Data Breach Exposes 300,000 Individuals’ Sensitive Information

• AI Revolutionizing Accounting: Experts Urge Accountants to Embrace Technology for Future Success

• Google Assures Privacy with Gemini AI: No Data Sharing with Third Parties

• Learn with Region 8’s Webinar Program

• Halliburton shuts down systems after cyberattack

• Member of cybercrime group Karakurt charged in the US

• Toward a code-breaking quantum computer

• Pig Butchering at Heart of Bank Failure — CEO Gets 24 Years in Jail

• Pool Your Cybersecurity Resources to Build the Perfect Security Ecosystem

• YouTube offers AI Chatbot assistance for hacked accounts

• The Role of Data Governance in Data Strategy: Part 3

• The best travel VPNs of 2024: Expert tested and reviewed

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• How Immigration Can Solve America’s Cybersecurity Shortage

• SonicWall Issues Urgent Patch for Critical Firewall Vulnerability

• Qilin Ransomware Caught Stealing Credentials Stored in Google Chrome

• New PEAKLIGHT Dropper Deployed in Attacks Targeting Windows with Malicious Movie Downloads

• GM’s Cruise To Offer Robotaxis On Uber Platform

• The best VPN routers of 2024

• Myth-Busting Assurance: Device-Centric vs. Service-Centric and Why Both Are Key

• MoonPeak Malware From North Korean Actors Unveils New Details on Attacker Infrastructure

• Kanister Vulnerability Opens Door to Cluster-Level Privilege Escalation

• PG_MEM Malware Targets PostgreSQL Databases for Crypto Mining

• US sues Georgia Tech over alleged cybersecurity failings as a Pentagon contractor

• Ransomware Actors Extorted More Than $450 Million in First Half of 2024

• USDoD Hacker Behind $3 Billion SSN Leak Reveals Himself as Brazilian Citizen

• How Paris Olympic authorities battled cyberattacks, and won gold

• Local Networks Go Global When Domain Names Collide

• In Other News: FAA Improving Cyber Rules, Android Malware Enables ATM Withdrawals, Data Theft via Slack AI

• Mac Users Targeted by Hackers Through Microsoft App Security Flaw

• When Cybersecurity Fails: The Impact of the Microchip Technology Hack

• Body Of Mike Lynch’s Daughter Recovered, Amid Allegations Of Crew Mistakes

• The latest from Black Hat USA 2024

• Georgia Tech Sued Over Cybersecurity Violations

• Cyber-Informed Engineering – A New Perspective on OT Security

• Escape vs Rapid7

• Pandas Errors: What encoding are my logs in?, (Fri, Aug 23rd)

• Webinar: Experience the Power of a Must-Have All-in-One Cybersecurity Platform

• Firm That Sent Fake AI Robocalls Of Joe Biden Is To Pay $1m Fine

• New Phishing Campaign Targets US Government Organizations

• Hacker Tried to Dodge Child Support by Breaking Into Registry to Fake His Death, Prosecutors Say

• Take a Selfie Using a NY Surveillance Camera

• Leveraging Ancient Tactics for Modern Malware

• Focus on What Matters Most: Exposure Management and Your Attack Surface

• Best SEO Experts to Follow on Twitter (X) in 2025

• Cybereason Unveils SDR Data Ramp Program: Analyse and Detect Threats in 1TB of Log Data for 90 Days

• Qilin Caught Red-Handed Stealing Credentials in Google Chrome

• Bling Libra’s Tactical Evolution: The Threat Actor Group Behind ShinyHunters Ransomware

• New Qilin Ransomware Attack Uses VPN Credentials, Steals Chrome Data

• BlackSuit Ransomware Threat Actors Demand Up To $500 Million

• The Risks of Running an End Of Life OS – And How To Manage It

• Another critical SolarWinds Web Help Desk bug fixed (CVE-2024-28987)

• Cybersecurity News: Russia’s questionable DDoS, FAA’s cybersecurity proposal, Windows Recall reappears

• PoC Exploit Released for RCE 0-day CVE-2024-41992 in Arcadyan FMIMG51AX000J Model

• Publisher’s Spotlight: Checkmarx

• FBI Exposing Sensitive Data via Improper Handling of Storage Devices: Audit

• YouTube Launches AI Tool to Recover Hacked Accounts

• When War Came to Their Country, They Built a Map

• New malware Cthulhu Stealer targets Apple macOS users

• Fraudulent Slack Ad Shows Malvertiser’s Patience and Skills

• Innovator Spotlight: DataBee™

• Publisher’s Spotlight: Horizon3.ai

• Innovator Spotlight: DataBee™

• New Opportunistic Campaign Exploit Log4j Vulnerability for Cryptomining and System Compromise

• China-linked APT Velvet Ant exploited zero-day to compromise Cisco switches

• The Evolving Landscape of Identity and Access Management in 2024

• Hardware Backdoor in Millions of Shanghai Fudan Microelectronics RFID Cards Allows Cloning

• SolarWinds Leaks Credentials in Hotfix for Exploited Web Help Desk Flaw

• Drawbridge expands cyber risk assessment service

• Report Finds 50% of Organizations Experienced Major Breaches in the Past Year

• Critical GitHub Enterprise Server Flaw Patched, Admin Access at Risk

• Cybercriminals Exploit File Sharing Services to Advance Phishing Attacks

• Cyber Resilience Lacking, Organizations Overconfident

• Liverpool Fans Lose Big in Premier League Ticket Scams

• Popular search terms are leveraged in cyber attacks: Cyber Security Today for Friday, August 23, 2024

• Ransomware hits in these specific timings and steals data from Google Chrome

• Essential Topics to Study for a Career in Artificial Intelligence

• FIDO Alliance Releases Authenticate 2024 Agenda

• Latvian Hacker Extradited to U.S. for Role in Karakurt Cybercrime Group

• New macOS Malware “Cthulhu Stealer” Targets Apple Users’ Data

• Qilin Targets Chrome-Stored Credentials in “Troubling” New Attack

• Millions of Office and Hotel RFID Smart Cards Vulnerable to Instant Cloning Through Hidden Backdoor

• The changing dynamics of ransomware as law enforcement strikes

• Fraud tactics and the growing prevalence of AI scams

• Vulnerability prioritization is only the beginning

• Is your organisation at risk?

• Innovator Spotlight: Reach Security

• Innovator Spotlight: SecPod

• Uniting the brightest minds in security, network and cloud

• New infosec products of the week: August 23, 2024

• ISC Stormcast For Friday, August 23rd, 2024 https://isc.sans.edu/podcastdetail/9110, (Fri, Aug 23rd)

• Surveillance Watch

• A cyberattack hit US oil giant Halliburton

• How regulatory standards and cyber insurance inform each other

• SolarWinds left critical hardcoded credentials in its Web Help Desk product

• GuidePoint talks ransomware negotiations, payment bans

• USENIX Security ’23 – ZBCAN: A Zero-Byte CAN Defense System

• How Swimlane Can Help SOC Management

• IT Security News Daily Summary 2024-08-22

• Innovator Spotlight: Cigent

• Innovator Spotlight: ExtraHop

• Innovator Spotlight: Upwind

• Innovator Spotlight: Normalyze

• Innovator Spotlight: Harmonic Security

• Inside the CCNA v1.1 exam update: AI, machine learning, and more

• Innovator Spotlight: AppSOC

• Setting Up CORS and Integration on AWS API Gateway Using CloudFormation

• U.S. CISA adds Dahua IP Camera, Linux Kernel and Microsoft Exchange Server bugs to its Known Exploited Vulnerabilities catalog

• Report: Manufacturing Remains Atop Cyberattack Leader Board

• No, not every Social Security number in the U.S. was stolen

• Tesla Gigafactory Near Berlin Saw 500,000 Trees Felled – Report

• Microsoft Delays Recall Launch for Windows Insider Members Until October

• Cyber Security and IT Leadership: A Growing Threat to Australia’s Renewable Energy Efforts

• CrowdStrike exec refutes Action1 acquisition reports

• Are virtual machines safe for end users?

• SolarWinds fixed a hardcoded credential issue in Web Help Desk

• CrowdStrike deja vu as ‘performance issue’ leaves systems sluggish

• Oil Giant Halliburton Confirms Cyber Incident, Details Scarce

• Hardcoded Credential Vulnerability Found in SolarWinds Web Help Desk

• Hardware Backdoor Discovered in RFID Cards Used in Hotels and Offices Worldwide

• OpenAI Scans for Honeypots. Artificially Malicious? Action Abuse?, (Thu, Aug 22nd)

• California Reaches Deal With Google Over Journalism Legislation

• Fur Affinity Website Hacked in DNS Hijacking Attack

• Ecovacs says it will fix bugs that can be abused to spy on robot owners

• Halliburton probes ‘an issue’ disrupting business ops

• China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches

• CISA Warns of Critical SolarWinds RCE Vulnerability Exploited in Attacks

• INE Security Launches Initiatives to Invest in the Education of Aspiring Cybersecurity Professionals

• Wordfence Intelligence Weekly WordPress Vulnerability Report (August 12, 2024 to August 18, 2024)

• Ransomware attack on Halliburton America

• Waymo Doubles Weekly Paid Robotaxi Trips Since May

• Protect Your Alerts: The Importance of Independent Incident Alert Management

• Hundreds of online stores hacked in new campaign

• I crashed my iPhone with these four characters so you don’t have to

• Incident Response by the Numbers

• Two Years On, Log4Shell Vulnerability Still Being Exploited to Deploy Malware

• CNAPP and ASPM — Friends or Foes?

• Hackers Spread Disinformation to undermine Taiwan’s Military

• Chinese Hackers Exploit Zero-Day Cisco Switch Flaw to Gain System Control

• How Securing APIs Factors into DORA Compliance

• Google patches actively exploited zero-day in Chrome. Update now!

• How to avoid common mistakes when adopting AI

• Understanding the ‘Morphology’ of Ransomware: A Deeper Dive

• Lawsuits Pile Up Against Florida-Based Data Firm After Security Breach

• QNAP releases QTS 5.2 to prevent data loss from ransomware threats

• New ‘ALBeast’ Vulnerability Exposes Weakness in AWS Application Load Balancer

• Cthulhu Stealer Malware Targets macOS With Deceptive Tactics

• PEAKLIGHT: Decoding the Stealthy Memory-Only Malware

• FlightAware Confirmed Data Breach Happened Due To Configuration Error

• Hackers Distribute FakeBat Loader Via Fake Software Installers

• Unpatched Vulnerabilities In Microsoft macOS Apps Pose Significant Threat

• Dr Mike Lynch Confirmed Dead, As Search For Daughter Continues

• As Microsoft breaks awkward silence around its controversial Recall feature, privacy questions remain

• The Linux security team issues 60 CVEs a week, but don’t stress. Do this instead

• How frictionless authentication works in online payments

• Cookie Theft: What Is It & How to Prevent It

• Rockwell Automation Emulate3D

• MOBOTIX P3 and Mx6 Cameras

• Rockwell Automation 5015 – AENFTXT

• Post-quantum Cryptography in 2024

• When Compliance Fails: Eye-Opening Incidents in GRC You Need to Know

• How AI and Machine Learning Are Revolutionizing Cybersecurity

• Critical LiteSpeed Cache Plugin Flaw CVE-2024-28000 Sparks a Surge in Cyberattacks

• Costa Rican Authorities Issue Warning as Social Media Identity Theft Cases Double

• Navigating Without GPS: Quantum Breakthroughs and Their Impact

• Enzoic for Active Directory enhancements help teams identify and remediate unsafe credentials

• FAA Admits Gaps in Aircraft Cybersecurity Rules: New Regulation Proposed

• Enhancing Phishing and Malware Detection with ssdeep Fuzzy Hashing

• The Skills Gap Leaves Organizations Open to New Threats and Vulnerabilities

• Prism Infosec PULSE bridges the gap between penetration testing and red teaming

• Anomali announces expanded capabilities for Copilot

• Over 3400 High and Critical Cyber Alerts Recorded in First Half of 2024

• From Crisis to Catalyst: A CEO’s Lessons Learned from A Cybersecurity Incident

• Typing just four characters could crash your iPhone

• Low Media Literacy: A Risk to Australia’s Cybersecurity Landscape

• Atlassian Patches Vulnerabilities in Bamboo, Confluence, Crowd, Jira

• Microsoft again ranked number one in modern endpoint security market share

• US Microchip Giant Hit by Cyberattack, Disrupting Operations

• The best free antivirus software of 2024: Expert tested

• Australian Digital ID: TEx System Poised to Boost Security By Sharing Less Data With Businesses

• Ransomware batters critical industries, but takedowns hint at relief

• How Multifactor Authentication (MFA) Can Reduce Your Cyber Attacks Risk?

• Critical GitHub Enterprise Server auth bypass flaw fixed (CVE-2024-6800)

• Company Fined $1m for Fake Joe Biden AI Calls

• US Oilfield Firm Halliburton Hit By Cyberattack

• Wallarm API Attack Surface Management mitigates API leaks

• US Safety Probe Into GM’s Cruise Shut Down

• Transform Your CAD Workflow with Parametric Modeling

• Get Advanced Ad Blocking and Superior Data Privacy Tools for Just $11

• Entrepreneurs Must Be Value-Focussed, Tech-Positive, and People-Oriented

• Bridging the UK Skills Gap in the Tech Sector

• Ingress-NGINX Annotation Validation Bypass Flaw (CVE-2024-7646) Allows Command Injection

• This uni thought it would be a good idea to do a phishing test with a fake Ebola scare

• The Facts About Continuous Penetration Testing and Why It’s Important

• The Chiplet’s Path to Victory

• From The Ground Up – Addressing Core Inefficiencies in The UK Public Sector

• Memory corruption vulnerabilities in Suricata and FreeRDP

• Critical Flaw in LiteSpeed Cache Plugin Actively Exploited: Over 30,000 Attacks Blocked in 24 Hours

• Google Fixes Ninth Chrome Zero-Day Exploited in Attacks This Year

• Kick off early Octoberfest with an EUC-fest

• Exploitation Expected for Flaw in Caching Plugin Installed on 5M WordPress Sites

• Novel Android Malware Steals Card NFC Data For ATM Withdrawals

• Security Flaws in UK Political Party Donation Platforms Exposed

• What Triggers a CISO?

• Navigating the Challenges of AI in Software Development: A Call to Action to Comply with the EU AI Act

• The 8 Most Common Website Design Mistakes According to Pros

• MegaMedusa, RipperSec’s Public Web DDoS Attack Tool

• Securing the Future: FIPS 140-3 Validation and the DISA STIG for AlmaLinux OS

• Critical SLUBStick Exploitation Technique Threatens Linux Security

• Cybersecurity News: Japanese auto security, Feds tap encrypted messages, Microsoft breaks Linux dual-booting

• Google addressed the ninth actively exploited Chrome zero-day this year

• A cyberattack disrupted operations of US chipmaker Microchip Technology

• Android malware uses NFC to steal money at ATMs

• New Chrome zero-day actively exploited, patch quickly! (CVE-2024-7971)

• Backdoor in Mifare Smart Cards Could Open Doors Around the World

• GitHub fixed a new critical flaw in the GitHub Enterprise Server

• The Surge of Identity and Access Management (IAM): Unveiling the Catalysts

• LibreOffice 24.8: More privacy, interoperability improvements

• How to recover deleted files on your Windows PC

• NCC Group: Ransomware down in June, July YoY

• Extortion Campaign Targets 110,000 Domains Using Exposed AWS Files

• Innovative Phishing Campaign Targets Mobile Users with PWAs

• Cisco calls for United Nations to revisit cyber crime Convention

• Google Cloud to offer enhanced security with Simplicity and Convergence

• 3 Cybersecurity Trends for 2025

• The Golden Age of Impersonation: The Dual Role of AI in Cyber Attacks & Cyber Defense

• GitHub Patches Critical Security Flaw in Enterprise Server Granting Admin Privileges

• Critical Flaw in WordPress LiteSpeed Cache Plugin Allows Hackers Admin Access

• Google Fixes High-Severity Chrome Flaw Actively Exploited in the Wild

• Palo Alto Networks Shines Light on Application Services Security Challenge

• A survival guide for data privacy in the age of federal inaction

• New Malware PG_MEM Targets PostgreSQL Databases for Crypto Mining

• WAF Cloud Authentication Issue Troubleshooting

• Why C-suite leaders are prime cyber targets

• Most ransomware attacks occur between 1 a.m. and 5 a.m.

• Foiling bot attacks with AI-powered telemetry

• The Great Cloud Security Debate: CSP vs. Third-Party Security Tools

• GenAI models are easily compromised

• ISC Stormcast For Thursday, August 22nd, 2024 https://isc.sans.edu/podcastdetail/9108, (Thu, Aug 22nd)

Generated on 2024-08-23 23:55:10.911945