IT Security News Daily Summary 2024-08-26

• Maximizing Enterprise Data: Unleashing the Productive Power of AI With the Right Approach

• 5 open source Mitre ATT&CK tools

• How to use the NIST CSF and AI RMF to address AI risks

• Telegram CEO Pavel Durov’s Arrest Linked to Sweeping Criminal Investigation

• Recognizing Women Driving Innovation

• Axiad Takes a Leading Role in Microsoft’s FIDO Provisioning API Upgrade

• 2024 ISO and CSA STAR certificates now available with three additional services

• PSA: These ‘Microsoft Support’ ploys may just fool you

• Why the NSA advises you to turn off your phone once a week

• Fortifying the future of Security for AI: Cisco Announces intent to acquire Robust Intelligence

• Microsoft mistake blows up admins’ inboxes with fake malware alerts

• Slack Fixes AI Security Flaw After Expert Warning

• CISA Adds One Known Exploited Vulnerability to Catalog

• Audit Finds Notable Security Gaps in FBI’s Storage Media Management

• Seattle airport ‘possible cyberattack’ snarls travel yet again

• Watchdog warns FBI is sloppy on secure data storage and destruction

• Vulnerability Summary for the Week of August 19, 2024

• SonicWall addressed an improper access control issue in its firewalls

• Marketing Data Security Threats Are Rising: Where CMOs See Gaps

• Vulnerability Prioritization is Only the Beginning

• Chinese APT Volt Typhoon Caught Exploiting Versa Networks SD-WAN Zero-Day

• Navigating PCI DSS 4.0: Insights from Industry Experts on Client-Side Security

• SonicWall patches critical flaw affecting its firewalls (CVE-2024-40766)

• Summer 2024 SOC report now available with 177 services in scope

• 1,000,000 WordPress Sites Protected Against Unique Remote Code Execution Vulnerability in WPML WordPress Plugin

• Fraud Tactics and the Growing Prevalence of AI Scams

• AMD internal data reportedly offered for sale

• DoJ Files Complaint Against Georgia Tech Under False Claims Act

• Getting Started With SPIFFE For Multi-Cloud Secure Workload Authentication

• Password creation tips for enhanced security

• Apple Targets 10 September iPhone 16 Launch Event – Report

• 2 TB of Sensitive “ServiceBridge” Records Exposed in Cloud Misconfiguration

• Over 3400 High and Critical Cyber Alerts Recorded in First Half 2024

• US Charges Alleged Member of Russian Karakurt Ransomware Group

• Georgia Tech Sued Over Alleged False Cybersecurity Reports to Win DoD Contracts

• Dutch Regulator Fines Uber €290 Million for GDPR Violations in Data Transfers to U.S.

• SonicWall Issues Critical Patch for Firewall Vulnerability Allowing Unauthorized Access

• Uber Fined $324m For Transferring European Data To US

• Move over malware: Why one teen is more worried about AI (re-air) (Lock and Code S05E18)

• How does DMARC affect email marketing?

• CrowdStrike Competitors for 2024: Top Alternatives Reviewed

• Celebrating Women’s Equality Day: Innovating for Inclusion

• WordPress Websites Used to Distribute ClearFake Trojan Malware

• Russian Laundering Millions for Lazarus Hackers Arrested in Argentina

• Fake Funeral Live Stream Scams Target Grieving Users on Facebook

• Cyber Security: A Rising Threat to Australia’s Renewable Energy Campaign

• Newly Discovered Group Offers CAPTCHA-Solving Services to Cybercriminals

• Meta Says Iranian Hackers Targetted Biden, Trump WhatsApp Accounts

• Cheana Stealer Attacking Windows & macOS VPN Users to Deploy Malware Payloads

• EDR vs NGAV: Which One Is Better For Your Organization?

• Hundreds of Online Stores Hacked in New Campaign

• CISA’s $524M headquarters slated for DHS campus in 2027

• Lessons from the CrowdStrike Falcon Sensor Defect: Enhancing Ransomware Recovery and Business Continuity

• Hitachi Vantara and Broadcom help organizations modernize their cloud infrastructure

• NSA Releases Guide to Combat Living Off the Land Attacks

• Cyber Hacktivist Campaign “FreeDurov” Emerges Following Arrest of Telegram CEO

• Pavel Durov’s Arrest Leaves Telegram Hanging in the Balance

• US Authorities Warn Healthcare Sector of Everest Ransomware Threats

• Telecom Company Hit with $1 Million Penalty Over AI-Generated Fake Robocalls

• 31.5M invoices, contracts, patient consent forms, and more exposed to the internet

• SonicWall Patches Critical SonicOS Vulnerability

• Everest Gang Poses New Cybersecurity Threat to US Healthcare

• QR Code Phishing: How Cybercriminals Exploit Trust via Quishing

• Port of Seattle Hit by Cyberattack, Services & Websites Down

• Striking a Balance Between the Risks and Rewards of AI Tools

• Microsoft To Host Cybersecurity Summit After CrowdStrike IT Outage

• Patelco Credit Union Ransomware Attack, Customers & Employees Data Stolen

• NIST Hands Off Post-Quantum Cryptography Work to Cyber Teams

• Two Remote Code Execution Vulnerabilities Discovered in Traccar GPS Tracking System

• NTLM Credential Theft Risk in Python Apps Threaten Windows Security

• Securing the Future: Defending LLM-Based Applications in the Age of AI

• Stealthy ‘sedexp’ Linux Malware Evaded Detection for Two Years

• Russian National Arrested for Laundering Crypto Payments from Lazarus Group

• CyberGhost vs NordVPN (2024): Which VPN Should You Choose?

• How to tell if your online accounts have been hacked

• US Federal Court Rules Against Geofence Warrants

• Stealthy Memory-Only Dropper Delivers PEAKLIGHT Loader on Windows Systems

• GenAI Models are Easily Compromised

• Uber to Appeal Dutch €290 Million GDPR Fine

• Miggio Uncovers AWS Load Balancer Security Flaw

• Researchers Identify Over 20 Supply Chain Vulnerabilities in MLOps Platforms

• Unpacking Slack Hacks: 6 Ways to Protect Sensitive Data with Secure Collaboration

• Halliburton, Law Enforcement Investigates Cyberattack Impact

• Hackers can Take Over Ecovacs Home Robots to Spy on Device Owners

• Kremlin Blames Widespread Website Disruptions on DDoS Attack; Digital Experts Disagree

• Telegram Founder Pavel Durov Arrested At French Airport – Report

• Industry Moves for the week of August 26, 2024 – SecurityWeek

• Patelco Credit Union Says Breach Impacts 726k After Ransomware Gang Auctions Data

• Cybersecurity News: Halliburton suffers cyberattack, Telegram CEO arrested, Georgia Tech lawsuit

• A cyberattack impacted operations at the Port of Seattle and Sea-Tac Airport

• Stealthy Linux Malware “sedexp” Exploits udev Rules for Persistence and Evasion

• CISA Adds Versa Director Bug to its Known Exploited Vulnerabilities Catalog

• C-Suite Involvement in Cybersecurity is Little More Than Lip Service

• Global Cyber Insurance Premiums Decline Despite Ransomware Surge

• Forensic Cyberpsychology: Profiling the Next-Generation Cybercriminal

• Another Critical SolarWinds Web Help Desk Bug Fixed (CVE-2024-28987)

• Why C-Suite Leaders are Prime Cyber Targets

• Telegram Founder Arrested at France Airport

• A week in security (August 19 – August 25)

• Gartner Spotlights AI, Security in 2024 Hype Cycle for Emerging Tech

• Financial Firm Fined $850K for Violating SEC Cyber Rules

• Critical Flaws in Traccar GPS System Expose Users to Remote Attacks

• Chinese Velvet Ant Uses Cisco Zero-Day to Deploy Custom Malware

• From Highly Obfuscated Batch File to XWorm and Redline, (Mon, Aug 26th)

• Nokia dumbphones make a comeback

• Telegram Founder Arrested Arrested at France Airport

• Linux malware sedexp uses udev rules for persistence and evasion

• Discovering The Importance of Cybersecurity Advisory Boards (CABs)

• FAA Proposes New Cybersecurity Rules for Airplanes

• Most Ransomware Attacks Occur Between 1 AM and 5 AM

• Guest Essay: The urgent need to improve firmware security — especially in OT and IoT routers

• Seattle port systems shut down due to possible cyber attack: Cyber Security Today for Monday August 26, 2024

• Cyber Attack disrupts operations at Seattle Tacoma International Airport

• How Chaos Engineering Makes Corporate Networks Resilient to Cyber Attacks

• New Android Malware NGate Steals NFC Data to Clone Contactless Payment Cards

• Event Logging Key to Detecting LOTL Attacks, Security Agencies Say

• Two strategies to protect your business from the next large-scale tech failure

• Ransomware Attacks, Demands, and Payments Rise in Q2

• Prism Infosec Debuts Red Team Engagement Service

• Secure Web Gateway Vulnerabilities Exposed: SquareX’s Research Stirs the Industry

• Adversaries love bots, short-lived IP addresses, out-of-band domains

• Rebrand, regroup, ransomware, repeat

• Nuclei: Open-source vulnerability scanner

• ISC Stormcast For Monday, August 26th, 2024 https://isc.sans.edu/podcastdetail/9112, (Mon, Aug 26th)

• Alleged Karakut ransomware scumbag charged in US

• GenAI buzz fading among senior executives

• BlackSuit Ransomware

• Pavel Durov’s Arrest Leaves Telegram Hanging in the Balance

• IT Security News Weekly Summary – Week 34

• IT Security News Daily Summary 2024-08-25

• Traderie – 364,898 breached accounts

• North Korea Exploited Windows Zero-Day Vulnerability to Install Fudmodule

• The Port of Seattle and Sea-Tac Airport say they’ve been hit by ‘possible cyberattack’

• Iranian Hackers Targeted WhatsApp Accounts of Staffers in Biden, Trump Administrations, Meta Says

• Worried About Cash App Breach? These Three Steps Can Keep Your Financial Data Safe

• 16 Years of Cybercrime: The Story of Greasy Opal’s CAPTCHA Solver

• New Styx Stealer Malware Targets Browsers and Instant Messaging for Data Theft

• Sheltering From the Cyberattack Storm – Part Two

• Beyond CVSS: Advanced Vulnerability Prioritization Strategies for Modern Threats

• Dell Power Manager Privilege Escalation Vulnerability

• Progress WhatsUp Gold Vulnerabilities Let Attackers Inject SQL Commands

• Chrome Zero-day Vulnerability Actively Exploited in the Wild

• SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 8

• France police arrested Telegram CEO Pavel Durov

• U.S. CISA adds Versa Director bug to its Known Exploited Vulnerabilities catalog

• Security Affairs newsletter Round 486 by Pierluigi Paganini – INTERNATIONAL EDITION

• Week in review: PostgreSQL databases under attack, new Chrome zero-day actively exploited

• New Linux Malware ‘sedexp’ Hides Credit Card Skimmers Using Udev Rules

• Telegram Founder Pavel Durov Arrested in France for Content Moderation Failures

Generated on 2024-08-26 23:55:09.258140