IT Security News Daily Summary 2024-08-27

• Election Security Partners Host 7th Annual Tabletop the Vote Exercise for 2024

• CVE-2024-38063 – Remotely Exploiting The Kernel Via IPv6

• How to use Tor — and whether you should — in your enterprise

• China-linked APT Volt Typhoon exploited a zero-day in Versa Director

• Intel’s Software Guard Extensions broken? Don’t panic

• Windows Downdate Attacks, Quick Share Vulnerability Exploit, and More: Hacker’s Playbook Threat Coverage Round-up: August 2024

• Innovator Spotlight: Cyversity

• The Urgent Need to Get MOVING for PCI DSS v4.0 Compliance

• How fernao magellan Customized 140 Automation Use Cases

• The US military’s latest psyop? Advertising on Tinder

• Report: A Third of Organizations Suffer SaaS Data Breaches Last Year

• What Is the Dark Web? + 6 Tips to Access It Safely

• LibreOffice now removes personal data from documents. Why that matters

• Vulnerability Recap 8/27/24 – Wide Range of Vulnerabilities This Week

• Lateral Movement: Clearest Sign of Unfolding Ransomware Attack

• Volt Typhoon suspected of exploiting Versa SD-WAN bug since June

• Scammers Exploit Messaging Apps and Social Media in Singapore

• CMMC vs DFARS vs NIST: What Are the Differences?

• Beyond the Campaign Trail: Strengthening Your Business’s Cyber Defenses for Election Season

• Chip Veteran Resigns From Intel’s Board, Amid Turnaround Plan Clash

• Klarna Says AI Chatbots Helped Remove 1,200 Positions

• New Unicode QR Code Phishing Scam Bypasses Traditional Security

• The U.S. military’s latest psyop? Advertising on Tinder

• Google Tags a Tenth Chrome Zero-Day as Exploited This Year

• India’s Critical Infrastructure Suffers Spike in Cyberattacks

• New Cheana Stealer Threat Targets VPN Users Across Multiple Operating Systems

• Backyard Privacy in the Age of Drones

• 5 Key Takeaways: Ransomware Attacks on Healthcare, Education, and Public Sector

• What is RBAC (Role-Based Access Control) and Why is it Important?

• Ghostwriter ❤ Tool Integration

• One-Third Of Companies Suffered SaaS Breach This Year

• ‘Terrorgram’ Telegram Terrorists Trash Transformers — Grid in Peril

• Cybersecurity boost by AI based Firewalls

• Meta To Use Geothermal Power In US Data Centres

• Beyond the Obvious: Uncovering the Hidden Challenges in Cybersecurity

• macOS Version of HZ RAT Backdoor Targets Chinese Messaging App Users

• Chinese government hackers targeted US internet providers with zero-day exploit, researchers say

• MSSPs: Why You Need a SOC And How to Choose the Right One for Your Business

• Two Strategies to Protect Your Business From the Next Large-Scale Tech Failure

• SonicWall Patches Critical Flaw Affecting its Firewalls (CVE-2024-40766)

• Top Universities to Battle in Cybersecurity at UNSW’s Upcoming Australian Cybersecurity Games

• DigitalOcean unveils enhanced role-based access control

• Versa Director zero-day exploited to compromise ISPs, MSPs (CVE-2024-39717)

• Microsoft 365 Copilot Vulnerability Exposes User Data Risks

• Complete Guide to Protecting Seven Attack Vectors

• 2024-08-26 – GuLoader for Remcos RAT

• Cisco Support Services Enters its GenAI Era

• The Future of Data Center Operations Is Here: Work Smarter, Not Harder

• Chemical Solutions Org Reduces the Time to Integrate Acquired Companies by 80% with Cato SASE Cloud Platform

• Cribl Raises $319 Million at $3.5 Billion Valuation

• Beyond Prioritization: Security Journey for Organizations

• MOVEit Hack Exposed Personal Data of Half Million TDECU Users

• Biden Administration Pressured Meta To Censor Covid-19 Content, Admits Zuck

• Cybersecurity Career Paths: Bridging the Gap Between Red and Blue Team Roles

• Cost of data breaches: The business case for security AI and automation

• New 0-Day Attacks Linked to China’s ‘Volt Typhoon’

• NordLayer Review: Pricing, Features & Specs

• Chinese government hackers targeted U.S. internet providers with zero-day exploit, researchers say

• NASA IV&V Facility Expands Cybersecurity Work and Educational Outreach

• Microsoft security tools questioned for treating employees as threats

• FBI Director Christopher Wray Highlights Unprecedented Threat Landscape and Importance of Law Enforcement Partnerships

• DMM Bitcoin Hack: 500 BTC Transfer Linked to $305 Million Theft Raises New Concerns

• US Authorities Charge Alleged Key Member of Russian Karakurt Ransomware Outfit

• Hillstone Networks unveils StoneOS 5.5R11 to enhance threat protection

• CTEM in the Spotlight: How Gartner’s New Categories Help to Manage Exposures

• Chinese Volt Typhoon Exploits Versa Director Flaw, Targets U.S. and Global IT Sectors

• FBI Flawed Data Handling Raises Security Concerns

• Telegram’s Pavel Durov Remains In Custody Amid Investigation

• Microsoft 365 Flags Emails with Images as Malware: A Growing Concern for Users

• Join SASE Converge — Where the Future of SASE Comes Together

• TDECU data breach affects half a million people

• SMS scammers use toll fees as a lure

• How Does a VPN Work? A Comprehensive Beginner’s Overview

• Unleashing the Power of AI in the Enterprise

• EDR vs NGAV: Which Works Better for Your Organization?

• Cybersecurity Solutions for Small and Medium Businesses (SMBs)

• Uber Hit With $324m GDPR Fine

• Nuclei: Open-Source Vulnerability Scanner

• Encryption of Data at Rest: The Cybersecurity Last Line of Defense

• When Convenience Costs: CISOs Struggle With SaaS Security Oversight

• LockBit, RansomHub Lead Ransomware Attacks in July

• RSA Authenticator App improves cybersecurity for federal agencies

• Suspected Cyber-Attack Causes Travel Chaos at Seattle Airport

• TDECU Data Breach: 500,000+ Members Affected by MOVEit Exploit

• Microsoft Copilot Prompt Injection Vulnerability Let Hackers Exfiltrate Sensitive Data

• AI Unveiled: Decoding the Future with Cisco

• Researchers unmasked the notorious threat actor USDoD

• Zimbabwe Government Places Priority on Cybersecurity Training for Public Servants

• Update: Researcher Publishes PoC Exploit for Zero-Click Windows RCE Threat

• Researchers Warn of Text Scams That Send Drivers Fake Bills for Highway Tolls

• Cisco to Acquire AI Security Firm Robust Intelligence

• Critical wpa_supplicant Vulnerability Addressed

• Canada Imposes 100 Percent Tariffs On Chinese EVs

• PythonAnywhere Cloud Platform Abused for Hosting Ransomware

• The 5 Best Free Endpoint Protection Platforms for 2024

• Contact center outsourcing: What businesses need to know

• The Present and Future of TV Surveillance

• Researchers Discover Over 20 Supply Chain Vulnerabilities in MLOps Platforms

• The Changing Dynamics of Ransomware as Law Enforcement Strikes

• McDonald’s Instagram Hacked by Crypto Scammers to Steal $700,000

• Fake macOS Apps Infect Devices, Steal Sensitive Data in the Latest Malware Attack

• Why Is Python so Popular to Infect Windows Hosts?, (Tue, Aug 27th)

• HZ Rat backdoor for macOS attacks users of China’s DingTalk and WeChat

• Pidgin Users Beware! Malicious Plugin Discovered with Keylogger

• Seattle Airport Blames Outages on Possible Cyberattack

• Well, I Think My Relationship With the CIO Improved When I Took Their Job

• Researchers Discover Several Potential Attack Vectors in Bicycles With Shimano Di2 Wireless Gear-Shifting System

• Cybersecurity News: SonicWall access flaw, Microsoft security summit, Telegram details

• 16-31 May 2024 Cyber Attacks Timeline

• Tech Support Scam Found Hijacking Microsoft Search Queries Through Google Ads

• 5 Key Findings from the 2024 State of Bot Mitigation Survey

• Uber Hit With €290m GDPR Fine

• News Chrome 0-Day Vulnerability (CVE-2024-7965) Actively Exploited in the Wild

• Life in Cybersecurity: Expert Tips and Insights from a Cybersecurity Recruiter

• How Automation and AI are Transforming GRC Management

• Why Companies Need Real-Time Compliance

• Centreon Issues Critical Security Update to Fix SQL Injection Vulnerabilities That Threaten IT Monitoring

• Critical SSTI Flaw in WPML Plugin Exposes Millions of WordPress Sites to RCE Attacks

• A Third of Organizations Suffer SaaS Data Breaches

• Vesra File Type Upload Vulnerability Lets Attackers Gain Sys-Admin Access from MSP

• Exploiting the Windows Kernel via Malicious IPv6 Packets (CVE-2024-38063)

• Global Field Service Management Provider Exposes Nearly 32 Million Documents Online

• Gafgyt Botnet: Weak SSH Passwords Targeted For GPU Mining

• Ransomware news headlines trending on Google

• Google Warns of CVE-2024-7965 Chrome Security Flaw Under Active Exploitation

• Microsoft Fixes ASCII Smuggling Flaw That Enabled Data Theft from Microsoft 365 Copilot

• How to prioritize data privacy in core customer-facing systems

• The Dutch Data Protection Authority (DPA) has fined Uber a record €290M

• Flights Disrupted at Seattle-Tacoma Airport Due to Possible Cyberattack

• Evolving Cybersecurity: Aligning Strategy with Business Growth

• Half of enterprises suffer breaches despite heavy security investments

• Behind the scenes of Serious Cryptography

• Lateral movement: Clearest sign of unfolding ransomware attack

• ISC Stormcast For Tuesday, August 27th, 2024 https://isc.sans.edu/podcastdetail/9114, (Tue, Aug 27th)

• Stop paying for antivirus software. Here’s why you don’t need it

• How AI is helping cut the risks of breaches with patch management

• Slack AI Vulnerability Exposed Data From Private Channels

• Google Patched A Chrome Zero-Day With Multiple Vulnerabilities

• FAA Proposed New Cybersecurity Rules Addressing Threats To Airplanes

• Digital Wallets Found Vulnerable To Fraudulent Payments

• LiteSpeed Cache Plugin Vulnerability Risked 5+ Million WordPress Websites

• Google addressed the tenth actively exploited Chrome zero-day this year

• Telegram CEO Pavel Durov’s Arrest Linked to Sweeping Criminal Investigation

• IT Security News Daily Summary 2024-08-26

• Maximizing Enterprise Data: Unleashing the Productive Power of AI With the Right Approach

• 5 open source Mitre ATT&CK tools

• How to use the NIST CSF and AI RMF to address AI risks

• Telegram CEO Pavel Durov’s Arrest Linked to Sweeping Criminal Investigation

• Recognizing Women Driving Innovation

• Axiad Takes a Leading Role in Microsoft’s FIDO Provisioning API Upgrade

• 2024 ISO and CSA STAR certificates now available with three additional services

• PSA: These ‘Microsoft Support’ ploys may just fool you

• Why the NSA advises you to turn off your phone once a week

• Fortifying the future of Security for AI: Cisco Announces intent to acquire Robust Intelligence

• Microsoft mistake blows up admins’ inboxes with fake malware alerts

• Slack Fixes AI Security Flaw After Expert Warning

• CISA Adds One Known Exploited Vulnerability to Catalog

• Audit Finds Notable Security Gaps in FBI’s Storage Media Management

• Seattle airport ‘possible cyberattack’ snarls travel yet again

• Watchdog warns FBI is sloppy on secure data storage and destruction

• Vulnerability Summary for the Week of August 19, 2024

• SonicWall addressed an improper access control issue in its firewalls

• Marketing Data Security Threats Are Rising: Where CMOs See Gaps

• Vulnerability Prioritization is Only the Beginning

• Chinese APT Volt Typhoon Caught Exploiting Versa Networks SD-WAN Zero-Day

• Navigating PCI DSS 4.0: Insights from Industry Experts on Client-Side Security

• SonicWall patches critical flaw affecting its firewalls (CVE-2024-40766)

• Summer 2024 SOC report now available with 177 services in scope

• 1,000,000 WordPress Sites Protected Against Unique Remote Code Execution Vulnerability in WPML WordPress Plugin

• Fraud Tactics and the Growing Prevalence of AI Scams

• AMD internal data reportedly offered for sale

• DoJ Files Complaint Against Georgia Tech Under False Claims Act

• Getting Started With SPIFFE For Multi-Cloud Secure Workload Authentication

• Password creation tips for enhanced security

• Apple Targets 10 September iPhone 16 Launch Event – Report

• 2 TB of Sensitive “ServiceBridge” Records Exposed in Cloud Misconfiguration

• Over 3400 High and Critical Cyber Alerts Recorded in First Half 2024

• US Charges Alleged Member of Russian Karakurt Ransomware Group

• Georgia Tech Sued Over Alleged False Cybersecurity Reports to Win DoD Contracts

• Dutch Regulator Fines Uber €290 Million for GDPR Violations in Data Transfers to U.S.

• SonicWall Issues Critical Patch for Firewall Vulnerability Allowing Unauthorized Access

• Uber Fined $324m For Transferring European Data To US

• Move over malware: Why one teen is more worried about AI (re-air) (Lock and Code S05E18)

• How does DMARC affect email marketing?

• CrowdStrike Competitors for 2024: Top Alternatives Reviewed

• Celebrating Women’s Equality Day: Innovating for Inclusion

• WordPress Websites Used to Distribute ClearFake Trojan Malware

• Russian Laundering Millions for Lazarus Hackers Arrested in Argentina

• Fake Funeral Live Stream Scams Target Grieving Users on Facebook

• Cyber Security: A Rising Threat to Australia’s Renewable Energy Campaign

• Newly Discovered Group Offers CAPTCHA-Solving Services to Cybercriminals

• Meta Says Iranian Hackers Targetted Biden, Trump WhatsApp Accounts

• Cheana Stealer Attacking Windows & macOS VPN Users to Deploy Malware Payloads

• EDR vs NGAV: Which One Is Better For Your Organization?

• Hundreds of Online Stores Hacked in New Campaign

• CISA’s $524M headquarters slated for DHS campus in 2027

• Lessons from the CrowdStrike Falcon Sensor Defect: Enhancing Ransomware Recovery and Business Continuity

• Hitachi Vantara and Broadcom help organizations modernize their cloud infrastructure

• NSA Releases Guide to Combat Living Off the Land Attacks

• Cyber Hacktivist Campaign “FreeDurov” Emerges Following Arrest of Telegram CEO

• Pavel Durov’s Arrest Leaves Telegram Hanging in the Balance

• US Authorities Warn Healthcare Sector of Everest Ransomware Threats

• Telecom Company Hit with $1 Million Penalty Over AI-Generated Fake Robocalls

• 31.5M invoices, contracts, patient consent forms, and more exposed to the internet

• SonicWall Patches Critical SonicOS Vulnerability

• Everest Gang Poses New Cybersecurity Threat to US Healthcare

• QR Code Phishing: How Cybercriminals Exploit Trust via Quishing

• Port of Seattle Hit by Cyberattack, Services & Websites Down

• Striking a Balance Between the Risks and Rewards of AI Tools

• Microsoft To Host Cybersecurity Summit After CrowdStrike IT Outage

• Patelco Credit Union Ransomware Attack, Customers & Employees Data Stolen

• NIST Hands Off Post-Quantum Cryptography Work to Cyber Teams

• Two Remote Code Execution Vulnerabilities Discovered in Traccar GPS Tracking System

• NTLM Credential Theft Risk in Python Apps Threaten Windows Security

• Securing the Future: Defending LLM-Based Applications in the Age of AI

• Stealthy ‘sedexp’ Linux Malware Evaded Detection for Two Years

• Russian National Arrested for Laundering Crypto Payments from Lazarus Group

• CyberGhost vs NordVPN (2024): Which VPN Should You Choose?

• How to tell if your online accounts have been hacked

• US Federal Court Rules Against Geofence Warrants

• Stealthy Memory-Only Dropper Delivers PEAKLIGHT Loader on Windows Systems

• GenAI Models are Easily Compromised

• Uber to Appeal Dutch €290 Million GDPR Fine

• Miggio Uncovers AWS Load Balancer Security Flaw

• Researchers Identify Over 20 Supply Chain Vulnerabilities in MLOps Platforms

• Unpacking Slack Hacks: 6 Ways to Protect Sensitive Data with Secure Collaboration

• Halliburton, Law Enforcement Investigates Cyberattack Impact

• Hackers can Take Over Ecovacs Home Robots to Spy on Device Owners

• Kremlin Blames Widespread Website Disruptions on DDoS Attack; Digital Experts Disagree

• Telegram Founder Pavel Durov Arrested At French Airport – Report

• Industry Moves for the week of August 26, 2024 – SecurityWeek

• Patelco Credit Union Says Breach Impacts 726k After Ransomware Gang Auctions Data

• Cybersecurity News: Halliburton suffers cyberattack, Telegram CEO arrested, Georgia Tech lawsuit

• A cyberattack impacted operations at the Port of Seattle and Sea-Tac Airport

• Stealthy Linux Malware “sedexp” Exploits udev Rules for Persistence and Evasion

• CISA Adds Versa Director Bug to its Known Exploited Vulnerabilities Catalog

• C-Suite Involvement in Cybersecurity is Little More Than Lip Service

• Global Cyber Insurance Premiums Decline Despite Ransomware Surge

• Forensic Cyberpsychology: Profiling the Next-Generation Cybercriminal

• Another Critical SolarWinds Web Help Desk Bug Fixed (CVE-2024-28987)

• Why C-Suite Leaders are Prime Cyber Targets

• Telegram Founder Arrested at France Airport

• A week in security (August 19 – August 25)

• Gartner Spotlights AI, Security in 2024 Hype Cycle for Emerging Tech

• Financial Firm Fined $850K for Violating SEC Cyber Rules

• Critical Flaws in Traccar GPS System Expose Users to Remote Attacks

• Chinese Velvet Ant Uses Cisco Zero-Day to Deploy Custom Malware

• From Highly Obfuscated Batch File to XWorm and Redline, (Mon, Aug 26th)

• Nokia dumbphones make a comeback

• Telegram Founder Arrested Arrested at France Airport

• Linux malware sedexp uses udev rules for persistence and evasion

• Discovering The Importance of Cybersecurity Advisory Boards (CABs)

• FAA Proposes New Cybersecurity Rules for Airplanes

• Most Ransomware Attacks Occur Between 1 AM and 5 AM

• Guest Essay: The urgent need to improve firmware security — especially in OT and IoT routers

• Seattle port systems shut down due to possible cyber attack: Cyber Security Today for Monday August 26, 2024

• Cyber Attack disrupts operations at Seattle Tacoma International Airport

• How Chaos Engineering Makes Corporate Networks Resilient to Cyber Attacks

• New Android Malware NGate Steals NFC Data to Clone Contactless Payment Cards

• Event Logging Key to Detecting LOTL Attacks, Security Agencies Say

• Two strategies to protect your business from the next large-scale tech failure

• Ransomware Attacks, Demands, and Payments Rise in Q2

• Prism Infosec Debuts Red Team Engagement Service

• Secure Web Gateway Vulnerabilities Exposed: SquareX’s Research Stirs the Industry

• Adversaries love bots, short-lived IP addresses, out-of-band domains

• Rebrand, regroup, ransomware, repeat

• Nuclei: Open-source vulnerability scanner

• ISC Stormcast For Monday, August 26th, 2024 https://isc.sans.edu/podcastdetail/9112, (Mon, Aug 26th)

• Alleged Karakut ransomware scumbag charged in US

• GenAI buzz fading among senior executives

• BlackSuit Ransomware

Generated on 2024-08-27 23:55:10.072173