IT Security News Daily Summary 2024-08-24

• USENIX Security ’23 – TRust: A Compilation Framework For In-Process Isolation To Protect Safe Rust Against Untrusted Code

• Living with trust issues: The human side of zero trust architecture

• Hackers can take over Ecovacs home robots to spy on their owners

• PWA phishing on Android and iOS – Week in security with Tony Anscombe

• Misconfigured Access Controls in NetSuite Stores Cause Major Data Breach

• Cybercriminals Place 85-Year-Old Woman Under ‘Digital Arrest’ in Hyderabad, Cheat Her of ₹5.9 Crore

• Oil Giant Halliburton Hit by Cyberattack, Certain Systems Affected

• Cyble Research Reveals Near-Daily Surge in Supply Chain Attacks

• Unicoin’s Four-Day Cyberattack: Disruption, Recovery, and Ongoing Investigation

• The Limitations of Traditional Network-Based Vulnerability Scanning – And the Systematic Underestimation of Software Risks

• Cybersecurity Strategy: Understanding the Benefits of Continuous Threat Exposure Management

• Data Security Posture Management (DSPM) is an Important First Step in Deploying Gen AI and Copilot Tools

• Iranian Threat Actor TA453 Targets Jewish Figure with Fake Podcast Invite in Malicious Campaign

• Massive Data Breach Worsens as New Details Emerge Across US, UK, and Canada

• Protecting Your Wallet: Understanding NGate Android Malware

• Strategizing Compliance and Security In AI: A Hands-On Guide for IT Leaders

• Qilin Ransomware Upgrades and Now Steals Google Chrome Credentials

• The US Navy Has Run Out of Pants

• NSA Issues Guidance for Better Logging, Threat Detection to Prevent LotL Incidents

• CISA Adds Dahua IP Camera, Linux Kernel, and Microsoft Exchange Server Bugs to its KEV Catalog

• Greasy Opal’s CAPTCHA Solver Still Serving Cybercrime After 16 Years

• August 2024 Web Server Survey

• Slack Patches AI Bug That Exposed Private Channels

• Urgent Edge Security Update: Microsoft Patches Zero-day & RCE Vulnerabilities

• PEAKLIGHT Downloader Deployed in Attacks Targeting Windows with Malicious Movie Downloads

• Meta Exposes Iranian Hacker Group Targeting Global Political Figures on WhatsApp

• CISA Urges Federal Agencies to Patch Versa Director Vulnerability by September

• China-linked APT Velvet Ant Exploited Zero-Day to Compromise Cisco Nexus Switches

• Russian national arrested in Argentina for laundering money of crooks and Lazarus APT

• Exploit for CVE-2024-38054 Released: Elevation of Privilege Flaw in Windows Kernel Streaming WOW Thunk

• Hackers Now Use AppDomain Injection to Drop Cobalt Strike Beacons

• Cyber Security Today Week In Review: Saturday, August 24th, 2024

• Scammers are increasingly using messaging and social media apps to attack

• CISA Adds One Known Exploited Vulnerability to Catalog for Versa Networks Director

• Qilin ransomware steals credentials stored in Google Chrome

• Enhancing School Safety with Cloud Monitor: A Powerful Cyber Safety Protection Tool

• IT Security News Daily Summary 2024-08-23

• Friday Squid Blogging: Self-Healing Materials from Squid Teeth

• Cybercriminals Deploy New Malware to Steal Data via Android’s Near Field Communication (NFC)

• # OffSec 500 – Community Update 1

• Innovator Spotlight: ArmorCode

• Audit: FBI is Losing Track of Storage Devices Holding Sensitive Data

• Identities Aren’t for Sale: TSA Biometrics Technology and the Need for Consumer Consent

• Fake funeral “live stream” scams target grieving users on Facebook

• CrowdStrike 2024 report exposes North Korea’s covert workforce in U.S. tech firms

• Phishing attacks target mobile users via progressive web applications (PWA)

• NGate Android Malware Relays NFC Traffic to Steal Credit Card Data

• Florida Medical Lab Data Breach Exposes 300,000 Individuals’ Sensitive Information

• AI Revolutionizing Accounting: Experts Urge Accountants to Embrace Technology for Future Success

• Google Assures Privacy with Gemini AI: No Data Sharing with Third Parties

• Learn with Region 8’s Webinar Program

• Halliburton shuts down systems after cyberattack

• Member of cybercrime group Karakurt charged in the US

• Toward a code-breaking quantum computer

• Pig Butchering at Heart of Bank Failure — CEO Gets 24 Years in Jail

• Pool Your Cybersecurity Resources to Build the Perfect Security Ecosystem

• YouTube offers AI Chatbot assistance for hacked accounts

• The Role of Data Governance in Data Strategy: Part 3

• The best travel VPNs of 2024: Expert tested and reviewed

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• How Immigration Can Solve America’s Cybersecurity Shortage

• SonicWall Issues Urgent Patch for Critical Firewall Vulnerability

• Qilin Ransomware Caught Stealing Credentials Stored in Google Chrome

• New PEAKLIGHT Dropper Deployed in Attacks Targeting Windows with Malicious Movie Downloads

• GM’s Cruise To Offer Robotaxis On Uber Platform

• The best VPN routers of 2024

• Myth-Busting Assurance: Device-Centric vs. Service-Centric and Why Both Are Key

• MoonPeak Malware From North Korean Actors Unveils New Details on Attacker Infrastructure

• Kanister Vulnerability Opens Door to Cluster-Level Privilege Escalation

• PG_MEM Malware Targets PostgreSQL Databases for Crypto Mining

• US sues Georgia Tech over alleged cybersecurity failings as a Pentagon contractor

• Ransomware Actors Extorted More Than $450 Million in First Half of 2024

• USDoD Hacker Behind $3 Billion SSN Leak Reveals Himself as Brazilian Citizen

• How Paris Olympic authorities battled cyberattacks, and won gold

• Local Networks Go Global When Domain Names Collide

• In Other News: FAA Improving Cyber Rules, Android Malware Enables ATM Withdrawals, Data Theft via Slack AI

• Mac Users Targeted by Hackers Through Microsoft App Security Flaw

• When Cybersecurity Fails: The Impact of the Microchip Technology Hack

• Body Of Mike Lynch’s Daughter Recovered, Amid Allegations Of Crew Mistakes

• The latest from Black Hat USA 2024

• Georgia Tech Sued Over Cybersecurity Violations

• Cyber-Informed Engineering – A New Perspective on OT Security

• Escape vs Rapid7

• Pandas Errors: What encoding are my logs in?, (Fri, Aug 23rd)

• Webinar: Experience the Power of a Must-Have All-in-One Cybersecurity Platform

• Firm That Sent Fake AI Robocalls Of Joe Biden Is To Pay $1m Fine

• New Phishing Campaign Targets US Government Organizations

• Hacker Tried to Dodge Child Support by Breaking Into Registry to Fake His Death, Prosecutors Say

• Take a Selfie Using a NY Surveillance Camera

• Leveraging Ancient Tactics for Modern Malware

• Focus on What Matters Most: Exposure Management and Your Attack Surface

• Best SEO Experts to Follow on Twitter (X) in 2025

• Cybereason Unveils SDR Data Ramp Program: Analyse and Detect Threats in 1TB of Log Data for 90 Days

• Qilin Caught Red-Handed Stealing Credentials in Google Chrome

• Bling Libra’s Tactical Evolution: The Threat Actor Group Behind ShinyHunters Ransomware

• New Qilin Ransomware Attack Uses VPN Credentials, Steals Chrome Data

• BlackSuit Ransomware Threat Actors Demand Up To $500 Million

• The Risks of Running an End Of Life OS – And How To Manage It

• Another critical SolarWinds Web Help Desk bug fixed (CVE-2024-28987)

• Cybersecurity News: Russia’s questionable DDoS, FAA’s cybersecurity proposal, Windows Recall reappears

• PoC Exploit Released for RCE 0-day CVE-2024-41992 in Arcadyan FMIMG51AX000J Model

• Publisher’s Spotlight: Checkmarx

• FBI Exposing Sensitive Data via Improper Handling of Storage Devices: Audit

• YouTube Launches AI Tool to Recover Hacked Accounts

• When War Came to Their Country, They Built a Map

• New malware Cthulhu Stealer targets Apple macOS users

• Fraudulent Slack Ad Shows Malvertiser’s Patience and Skills

• Innovator Spotlight: DataBee™

• Publisher’s Spotlight: Horizon3.ai

• Innovator Spotlight: DataBee™

• New Opportunistic Campaign Exploit Log4j Vulnerability for Cryptomining and System Compromise

• China-linked APT Velvet Ant exploited zero-day to compromise Cisco switches

• The Evolving Landscape of Identity and Access Management in 2024

• Hardware Backdoor in Millions of Shanghai Fudan Microelectronics RFID Cards Allows Cloning

• SolarWinds Leaks Credentials in Hotfix for Exploited Web Help Desk Flaw

• Drawbridge expands cyber risk assessment service

• Report Finds 50% of Organizations Experienced Major Breaches in the Past Year

• Critical GitHub Enterprise Server Flaw Patched, Admin Access at Risk

• Cybercriminals Exploit File Sharing Services to Advance Phishing Attacks

• Cyber Resilience Lacking, Organizations Overconfident

• Liverpool Fans Lose Big in Premier League Ticket Scams

• Popular search terms are leveraged in cyber attacks: Cyber Security Today for Friday, August 23, 2024

• Ransomware hits in these specific timings and steals data from Google Chrome

• Essential Topics to Study for a Career in Artificial Intelligence

• FIDO Alliance Releases Authenticate 2024 Agenda

• Latvian Hacker Extradited to U.S. for Role in Karakurt Cybercrime Group

• New macOS Malware “Cthulhu Stealer” Targets Apple Users’ Data

• Qilin Targets Chrome-Stored Credentials in “Troubling” New Attack

• Millions of Office and Hotel RFID Smart Cards Vulnerable to Instant Cloning Through Hidden Backdoor

• The changing dynamics of ransomware as law enforcement strikes

• Fraud tactics and the growing prevalence of AI scams

• Vulnerability prioritization is only the beginning

• Is your organisation at risk?

• Innovator Spotlight: Reach Security

• Innovator Spotlight: SecPod

• Uniting the brightest minds in security, network and cloud

• New infosec products of the week: August 23, 2024

• ISC Stormcast For Friday, August 23rd, 2024 https://isc.sans.edu/podcastdetail/9110, (Fri, Aug 23rd)

• Surveillance Watch

• A cyberattack hit US oil giant Halliburton

Generated on 2024-08-24 23:55:08.622479