IT Security News Daily Summary 2024-08-28

• Akamai Named a Leader in The Forrester Wave?: Microsegmentation Solutions, Q3 2024

• I Spy With My Little Eye: Uncovering an Iranian Counterintelligence Operation

• Types of hackers: Black hat, white hat, red hat and more

• Chrome bug hunters can earn up to $250,000 for serious vulnerabilities now – how’s how

• Bitdefender vs. McAfee: Comparing Features, Pricing, Pros & Cons

• Young Consulting data breach impacts 954,177 individuals

• U.S. CISA adds Google Chromium V8 bug to its Known Exploited Vulnerabilities catalog

• Proof-of-concept code released for zero-click critical Windows vuln

• GiveWP Plugin Vulnerability Risked 100,000+ Websites To RCE Attacks

• WPML WP Plugin Vulnerability Risked 1M+ WordPress Websites

• Microsoft Copilot Studio Vulnerability Could Expose Sensitive Data

• Infosec experts applaud DOJ lawsuit against Georgia Tech

• Simplifying the policy experience for today’s IT teams

• Americans Are Uncomfortable with Automated Decision-Making

• DataDome Releases Fastly Compute Server-Side Integration

• Beware the Unpatchable: Corona Mirai Botnet Spreads via Zero-Day

• Google Restarts Gemini AI’s Image Generation Of People

• CODAC Behavioral Healthcare, US Marshalls are latest ransomware targets

• Copyright Is Not a Tool to Silence Critics of Religious Education

• Iran’s Pioneer Kitten hits US networks via buggy Check Point, Palo Alto gear

• Google Now Offering Up to $250,000 for Chrome Vulnerabilities

• Mike Lynch: Captain Of Bayesian Yacht Declines To Talk

• Advanced Techniques in Automated Threat Detection

• Google’s Gemini AI gets major upgrade with ‘Gems’ assistants and Imagen 3

• Halliburton cyberattack explained: What happened?

• Ex-Twitter CISO Lea Kissner appointed as LinkedIn security chief

• Porsche – Executive & Security Ratings Snapshot Request

• SOC 2 vs. SAS 70: A Comprehensive Comparison

• China Cyberwar Coming? Versa’s Vice: Volt Typhoon’s Target

• Bitcoin and Nostr: What Lies Beyond Decentralization and Freedom

• Why AI-Driven Cybercrime Could Be Your Business’s Biggest Risk

• Ransomware on the Rise: Key Steps to Safeguard Your Business from Cyber Threats

• Pioneer Kitten: Iranian hackers partnering with ransomware affiliates

• Fortra Issues Patch for High-Risk FileCatalyst Workflow Security Vulnerability

• Fuzzing µC/OS protocol stacks, Part 3: TCP/IP server fuzzing, implementing a TAP driver

• Fuzzing µC/OS protocol stacks, Part 1: HTTP server fuzzing

• Fuzzing µCOS protocol stacks, Part 2: Handling multiple requests per test case

• The vulnerabilities we uncovered by fuzzing µC/OS protocol stacks

• Hacktivists turning to ransomware spread

• Cybersecurity Companies Join Microsoft to Discuss Safe Deployment Practices following CrowdStrike Outage

• Innovator Spotlight: Gurucul

• Dick’s Sporting Goods discloses cyberattack

• LinkedIn Hires Former Twitter Security Chief Lea Kissner as New CISO

• Top 10 Lessons Learned from Managing Kubernetes from the Trenches

• LummaC2 Infostealer Resurfaces With Obfuscated PowerShell Tactics

• HMD Launches ‘Barbie’ Flip Phone To Tackle Smartphone Addiction

• Notorious Iranian Hackers Have Been Targeting the Space Industry With a New Backdoor

• Cisco Smart Bonding for MSPs: Enhance Customer Experience and Streamline Support Workflows

• BlackByte Ransomware group targets recently patched VMware ESXi flaw CVE-2024-37085

• WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies

• Georgia Tech Faces DOJ Lawsuit Over Alleged Lapses in Cybersecurity for Defense Contracts

• Ukrainian Hackers Launch Coordinated Cyber Offensive on Russian Networks

• Here’s How to Safeguard Yourself Against Phone Scams

• AuthenticID enhances Smart ReAuth to combat AI-based attacks and account takeovers

• Veeam Data Platform 12.2 extends data resilience to more platforms and applications

• Iran-Backed Peach Sandstorm Hackers Deploy New Tickler Backdoor

• New LummaC2 Malware Variant Uses PowerShell, Obfuscation to Steal Data

• Now available on Microsoft Azure: Cisco AppDynamics provides more flexibility

• BlackByte Blends Known Tactics With New Encryptor Variant and Vulnerability Exploits to Support Ongoing Attacks

• Quantum Computing and the Risk to Classical Cryptography

• APT-C-60 Group Exploit WPS Office Flaw to Deploy SpyGlace Backdoor

• The Advantages of Runtime Application Self-Protection

• 32 Million Sensitive Records Exposed From Service Management Provider

• TDECU MOVEit Data Breach, 500,000+ members’ Personal Data Exposed

• Overcoming Challenges in Defensive Cybersecurity Teams with an Offensive Mindset

• Microsoft’s Sway Serves as Launchpad for ‘Quishing’ Campaign

• Rezonate’s mid-market solution reduces the cloud identity attack surface

• Diligent NIS2 Compliance Toolkit helps organizations bolster their cybersecurity resilience

• Research Unveils Eight Android And iOS That Leaks Users Sensitive Data

• The Jedi of Code: May CloudGuard Be with You

• Deep Analysis of Snake Keylogger’s New Variant

• From Copilot to Copirate: How data thieves could hijack Microsoft’s chatbot

• Dragos Platform updates streamline OT threat and vulnerability workflows

• Regardless of Market Fluctuation, Web3 Infrastructure Is Booming

• Pootry EDR Killer Malware Wipes Out Security Tools From Windows Machine

• Versa Director Zero-day Vulnerability Let Attackers Upload Malicious Files

• Price Drop: This Complete Ethical Hacking Bundle is Now $40

• Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations

• New Phishing Campaign Steals VPN Credentials Using Social Engineering Methods

• The End of the Tunnel Vision: Why Companies Are Ditching VPNs for Zero Trust

• Malware Delivered via Malicious Pidgin Plugin, Signal Fork

• Beating MFA Fatigue and AI-Driven Attacks with DirectDefense

• US offers $2.5M reward for Belarusian man involved in mass malware distribution

• Check Point Acquires Cybersecurity Startup Cyberint

• China’s Volt Typhoon Exploits Zero-Day Flaw in Versa’s SD-WAN Director Servers

• Fortinet Debuts Sovereign SASE, Updates Unified SASE With FortiAI

• F5 and Intel join forces to push the boundaries of AI deployment

• Rising Tides: Runa Sandvik on Creating Work that Makes a Difference

• The Risks Lurking in Publicly Exposed GenAI Development Services

• Optimizing SBOM sharing for compliance and transparency

• A misuse of Spamhaus blocklists: PART 2 – How to limit outbound spam

• BlackByte Ransomware Exploits VMware ESXi Flaw in Latest Attack Wave

• IDC Raises Smartphone Shipment Forecast Amid GenAI Optimism

• CoinSwitch sues WazirX to recover trapped funds

• FBI’s Internet Crime Complaint Center reports $1.6 billion in losses for Americans due to scams and fraud

• Airtags Locator Device used to Grab the Stolen Parcel

• Matthew Green on Telegram’s Encryption

• South Korean APT Group Exploits WPS Office Zero-Day for Espionage

• US Offering $2.5 Million Reward for Belarusian Malware Distributor

• Apple Axes Jobs In Digital Services Group – Report

• What Is Cybersecurity Awareness Training? Why Your Business Needs it

• GDPR Data Breach Notification Letter (Free Download)

• Park’N Fly Data Breach Compromised Sensitive Data of 1 Million Customers

• BlackByte affiliates use new encryptor and new TTPs

• Join Us 09-13-24 for “Hacking Leadership Skills” – Super Cyber Friday

• Join Us 09-06-24 for “Hacking Tabletop Exercises” – Super Cyber Friday

• BlackByte blends tried-and-true tradecraft with newly disclosed vulnerabilities to support ongoing attacks

• Nasdaq Seeks Permission For Bitcoin Index Listing Option

• A Guide on 5 Common LinkedIn Scams

• The Invisible Shield: Exploring the Silent Guardians of IoT Security

• Fortinet introduces sovereign SASE and GenAI capabilities

• Money Laundering Dominates UK Fraud Cases

• Cybersecurity News: Another MOVEit incident, U.S. Marshals disputes breach, Park’N Fly data swiped

• The ultimate dual-use tool for cybersecurity

• Patchwork Actors Using Weaponized Encrypted Zip Files to Attack Orgs

• Researchers Disclosed 20 Vulnerabilities Exploited To Attack ML Used In Orgs

• Broadcom Extends VMware Cybersecurity Portfolio

• Critical Fortra FileCatalyst Workflow vulnerability patched (CVE-2024-6633)

• APT group exploits WPS Office for Windows RCE vulnerability (CVE-2024-7262)

• HYCU for Microsoft Entra ID provides organizations with automated, policy-driven backups

• South Korean Spies Exploit WPS Office Zero-Day

• Three Reasons for Cisco Umbrella for Government

• U.S. CISA adds Apache OFBiz bug to its Known Exploited Vulnerabilities catalog

• Sport 2000 – 3,189,643 breached accounts

• Woman uses AirTags to nab alleged parcel-pinching scum

• Microsoft Security Update: 90 Critical Vulnerabilities Fixed

• What is binary compatibility, and what does it mean for Linux distributions?

• Expel partners with Wiz to enhance security for cloud environments

• Top 7 Questions to Ask Cybersecurity Service Providers

• BlackSuit Ransomware targets software firm and steals data of about 950k individuals

• Largest Healthcare Data Breaches of 2023

• Rockwell Automation ThinManager Flaw Let Attackers Execute Remote Code

• MacOS Version of HZ Rat Backdoor Discovered Targeting DingTalk and WeChat Users

• Watchdog Criticizes FBI for Inadequate Digital Storage and Destruction Practices

• CISA Flags Critical Apache OFBiz Flaw Amid Active Exploitation Reports

• Four Internet Service Providers are breached by sophisticated cyber attack. Cyber Security Today for Wednesday, August 28, 2024

• Cryptojacking via CVE-2023-22527: Dissecting a Full-Scale Cryptomining Ecosystem

• Cyberattacks on UK Law Firms Surge by 77% Amid Rising Ransomware Threat

• Cryptomator: Open-source cloud storage encryption

• MFP security: How Can Resellers Ensure Customers Have The Proper Protection?

• Cybercriminals capitalize on travel industry’s peak season

• Cybersecurity jobs available right now: August 28, 2024

• Critical WPML Plugin Flaw Exposes WordPress Sites to Remote Code Execution

• Old methods, new technologies drive fraud losses

• ISC Stormcast For Wednesday, August 28th, 2024 https://isc.sans.edu/podcastdetail/9116, (Wed, Aug 28th)

• Chinese broadband satellites may be Beijing’s flying spying censors, think tank warns

• Not a SOC FAQ! This is SOC FMD!

• Scott Kannry on the What’s Up with Tech? Podcast

• Vega-Lite with Kibana to Parse and Display IP Activity over Time, (Tue, Aug 27th)

• Critical flaw in WPML WordPress plugin impacts 1M websites

• Facebook Whistleblower Fears Election Abuse

• IT Security News Daily Summary 2024-08-27

• Election Security Partners Host 7th Annual Tabletop the Vote Exercise for 2024

• CVE-2024-38063 – Remotely Exploiting The Kernel Via IPv6

• How to use Tor — and whether you should — in your enterprise

• China-linked APT Volt Typhoon exploited a zero-day in Versa Director

• Intel’s Software Guard Extensions broken? Don’t panic

• Windows Downdate Attacks, Quick Share Vulnerability Exploit, and More: Hacker’s Playbook Threat Coverage Round-up: August 2024

• Innovator Spotlight: Cyversity

• The Urgent Need to Get MOVING for PCI DSS v4.0 Compliance

• How fernao magellan Customized 140 Automation Use Cases

• The US military’s latest psyop? Advertising on Tinder

• Report: A Third of Organizations Suffer SaaS Data Breaches Last Year

• What Is the Dark Web? + 6 Tips to Access It Safely

• LibreOffice now removes personal data from documents. Why that matters

• Vulnerability Recap 8/27/24 – Wide Range of Vulnerabilities This Week

• Lateral Movement: Clearest Sign of Unfolding Ransomware Attack

• Volt Typhoon suspected of exploiting Versa SD-WAN bug since June

• Scammers Exploit Messaging Apps and Social Media in Singapore

• CMMC vs DFARS vs NIST: What Are the Differences?

• Beyond the Campaign Trail: Strengthening Your Business’s Cyber Defenses for Election Season

• Chip Veteran Resigns From Intel’s Board, Amid Turnaround Plan Clash

• Klarna Says AI Chatbots Helped Remove 1,200 Positions

• New Unicode QR Code Phishing Scam Bypasses Traditional Security

• The U.S. military’s latest psyop? Advertising on Tinder

• Google Tags a Tenth Chrome Zero-Day as Exploited This Year

• India’s Critical Infrastructure Suffers Spike in Cyberattacks

• New Cheana Stealer Threat Targets VPN Users Across Multiple Operating Systems

• Backyard Privacy in the Age of Drones

• 5 Key Takeaways: Ransomware Attacks on Healthcare, Education, and Public Sector

• What is RBAC (Role-Based Access Control) and Why is it Important?

• Ghostwriter ❤ Tool Integration

• One-Third Of Companies Suffered SaaS Breach This Year

• ‘Terrorgram’ Telegram Terrorists Trash Transformers — Grid in Peril

• Cybersecurity boost by AI based Firewalls

• Meta To Use Geothermal Power In US Data Centres

• Beyond the Obvious: Uncovering the Hidden Challenges in Cybersecurity

• macOS Version of HZ RAT Backdoor Targets Chinese Messaging App Users

• Chinese government hackers targeted US internet providers with zero-day exploit, researchers say

• MSSPs: Why You Need a SOC And How to Choose the Right One for Your Business

• Two Strategies to Protect Your Business From the Next Large-Scale Tech Failure

• SonicWall Patches Critical Flaw Affecting its Firewalls (CVE-2024-40766)

• Top Universities to Battle in Cybersecurity at UNSW’s Upcoming Australian Cybersecurity Games

• DigitalOcean unveils enhanced role-based access control

• Versa Director zero-day exploited to compromise ISPs, MSPs (CVE-2024-39717)

• Microsoft 365 Copilot Vulnerability Exposes User Data Risks

• Complete Guide to Protecting Seven Attack Vectors

• 2024-08-26 – GuLoader for Remcos RAT

• Cisco Support Services Enters its GenAI Era

• The Future of Data Center Operations Is Here: Work Smarter, Not Harder

• Chemical Solutions Org Reduces the Time to Integrate Acquired Companies by 80% with Cato SASE Cloud Platform

• Cribl Raises $319 Million at $3.5 Billion Valuation

• Beyond Prioritization: Security Journey for Organizations

• MOVEit Hack Exposed Personal Data of Half Million TDECU Users

• Biden Administration Pressured Meta To Censor Covid-19 Content, Admits Zuck

• Cybersecurity Career Paths: Bridging the Gap Between Red and Blue Team Roles

• Cost of data breaches: The business case for security AI and automation

• New 0-Day Attacks Linked to China’s ‘Volt Typhoon’

• NordLayer Review: Pricing, Features & Specs

• Chinese government hackers targeted U.S. internet providers with zero-day exploit, researchers say

• NASA IV&V Facility Expands Cybersecurity Work and Educational Outreach

• Microsoft security tools questioned for treating employees as threats

• FBI Director Christopher Wray Highlights Unprecedented Threat Landscape and Importance of Law Enforcement Partnerships

• DMM Bitcoin Hack: 500 BTC Transfer Linked to $305 Million Theft Raises New Concerns

• US Authorities Charge Alleged Key Member of Russian Karakurt Ransomware Outfit

• Hillstone Networks unveils StoneOS 5.5R11 to enhance threat protection

• CTEM in the Spotlight: How Gartner’s New Categories Help to Manage Exposures

• Chinese Volt Typhoon Exploits Versa Director Flaw, Targets U.S. and Global IT Sectors

• FBI Flawed Data Handling Raises Security Concerns

• Telegram’s Pavel Durov Remains In Custody Amid Investigation

• Microsoft 365 Flags Emails with Images as Malware: A Growing Concern for Users

• Join SASE Converge — Where the Future of SASE Comes Together

• TDECU data breach affects half a million people

• SMS scammers use toll fees as a lure

• How Does a VPN Work? A Comprehensive Beginner’s Overview

• Unleashing the Power of AI in the Enterprise

• EDR vs NGAV: Which Works Better for Your Organization?

• Cybersecurity Solutions for Small and Medium Businesses (SMBs)

• Uber Hit With $324m GDPR Fine

• Nuclei: Open-Source Vulnerability Scanner

• Encryption of Data at Rest: The Cybersecurity Last Line of Defense

• When Convenience Costs: CISOs Struggle With SaaS Security Oversight

• LockBit, RansomHub Lead Ransomware Attacks in July

• RSA Authenticator App improves cybersecurity for federal agencies

• Suspected Cyber-Attack Causes Travel Chaos at Seattle Airport

• TDECU Data Breach: 500,000+ Members Affected by MOVEit Exploit

• Microsoft Copilot Prompt Injection Vulnerability Let Hackers Exfiltrate Sensitive Data

• AI Unveiled: Decoding the Future with Cisco

• Researchers unmasked the notorious threat actor USDoD

• Zimbabwe Government Places Priority on Cybersecurity Training for Public Servants

• Update: Researcher Publishes PoC Exploit for Zero-Click Windows RCE Threat

• Researchers Warn of Text Scams That Send Drivers Fake Bills for Highway Tolls

• Cisco to Acquire AI Security Firm Robust Intelligence

• Critical wpa_supplicant Vulnerability Addressed

• Canada Imposes 100 Percent Tariffs On Chinese EVs

• PythonAnywhere Cloud Platform Abused for Hosting Ransomware

• The 5 Best Free Endpoint Protection Platforms for 2024

• Contact center outsourcing: What businesses need to know

• The Present and Future of TV Surveillance

• Researchers Discover Over 20 Supply Chain Vulnerabilities in MLOps Platforms

• The Changing Dynamics of Ransomware as Law Enforcement Strikes

• McDonald’s Instagram Hacked by Crypto Scammers to Steal $700,000

• Fake macOS Apps Infect Devices, Steal Sensitive Data in the Latest Malware Attack

• Why Is Python so Popular to Infect Windows Hosts?, (Tue, Aug 27th)

• HZ Rat backdoor for macOS attacks users of China’s DingTalk and WeChat

• Pidgin Users Beware! Malicious Plugin Discovered with Keylogger

• Seattle Airport Blames Outages on Possible Cyberattack

• Well, I Think My Relationship With the CIO Improved When I Took Their Job

• Researchers Discover Several Potential Attack Vectors in Bicycles With Shimano Di2 Wireless Gear-Shifting System

• Cybersecurity News: SonicWall access flaw, Microsoft security summit, Telegram details

• 16-31 May 2024 Cyber Attacks Timeline

• Tech Support Scam Found Hijacking Microsoft Search Queries Through Google Ads

• 5 Key Findings from the 2024 State of Bot Mitigation Survey

• Uber Hit With €290m GDPR Fine

• News Chrome 0-Day Vulnerability (CVE-2024-7965) Actively Exploited in the Wild

• Life in Cybersecurity: Expert Tips and Insights from a Cybersecurity Recruiter

• How Automation and AI are Transforming GRC Management

• Why Companies Need Real-Time Compliance

• Centreon Issues Critical Security Update to Fix SQL Injection Vulnerabilities That Threaten IT Monitoring

• Critical SSTI Flaw in WPML Plugin Exposes Millions of WordPress Sites to RCE Attacks

• A Third of Organizations Suffer SaaS Data Breaches

• Vesra File Type Upload Vulnerability Lets Attackers Gain Sys-Admin Access from MSP

• Exploiting the Windows Kernel via Malicious IPv6 Packets (CVE-2024-38063)

• Global Field Service Management Provider Exposes Nearly 32 Million Documents Online

• Gafgyt Botnet: Weak SSH Passwords Targeted For GPU Mining

• Ransomware news headlines trending on Google

• Google Warns of CVE-2024-7965 Chrome Security Flaw Under Active Exploitation

• Microsoft Fixes ASCII Smuggling Flaw That Enabled Data Theft from Microsoft 365 Copilot

• How to prioritize data privacy in core customer-facing systems

• The Dutch Data Protection Authority (DPA) has fined Uber a record €290M

• Flights Disrupted at Seattle-Tacoma Airport Due to Possible Cyberattack

• Evolving Cybersecurity: Aligning Strategy with Business Growth

• Half of enterprises suffer breaches despite heavy security investments

• Behind the scenes of Serious Cryptography

• Lateral movement: Clearest sign of unfolding ransomware attack

• ISC Stormcast For Tuesday, August 27th, 2024 https://isc.sans.edu/podcastdetail/9114, (Tue, Aug 27th)

• Stop paying for antivirus software. Here’s why you don’t need it

• How AI is helping cut the risks of breaches with patch management

Generated on 2024-08-28 23:55:10.317304