IT Security News Daily Summary 2024-08-31

• North Korea-linked APT Citrine Sleet exploit Chrome zero-day to deliver FudModule rootkit

• Check your IP cameras: There’s a new Mirai botnet on the rise

• Espionage Concerns Arise from Newly Discovered Voldemort Malware

• Happy United States Labor Day Weekend 2024 / Feliz Fin de Semana del Día del Trabajo de Estados Unidos 2024 / Joyeux Fin de Semaine de la Fête du Travail aux États-Unis 2024

• North Korean Hackers Deploy FudModule Rootkit via Chrome Zero-Day Exploit

• Three Major Issues Family Offices Face With Private Market Data

• Choosing the Right Browser: Privacy Tips from Apple and Google

• New Voldemort Malware Uses Google Sheets to Target Key Sectors Globally

• Black Basta Cybersecurity Advisory: Endpoint Protection for Healthcare

• 4 Tips for Optimizing Your GRC Strategy

• Modern Strategies for IoT Device Fingerprinting

• Project Strawberry: Advancing AI with Q-learning, A* Algorithms, and Dual-Process Theory

• Full-Stack Security Guide: Best Practices and Challenges of Securing Modern Applications

• Taylor Swift Concert Terror Plot Was Thwarted by Key CIA Tip

• Missing Guardrails, a Troubling Trend in Data Protection

• Rocinante: The Trojan Horse That Wanted to Fly

• FBI: RansomHub Ransomware Breached 210 Victims Since February 2024

• New Snake Keylogger Variant Slithers Into Phishing Campaigns

• Mastering AI & Cybersecurity: Navigating the Future – A Special Panel Discussion

• Wireshark 4.4.0 is now available, (Sat, Aug 31st)

• Godzilla Fileless Backdoors Targeting Atlassian Confluence

• Suspected Espionage Campaign Delivers New Voldemort Malware

• Operation DevilTiger: APT-Q-12’s Shadowy Tactics and Zero-Day Exploits Unveiled

• Key Takeaways from SiRAcon ’24: An Axio Perspective

• RansomHub hits 210 victims in just 6 months

• ASPM and Modern Application Security

• The French Detention: Why We’re Watching the Telegram Situation Closely

• IT Security News Daily Summary 2024-08-30

• AI is growing faster than companies can secure it, warn industry leaders

• Green Berets storm building after hacking its Wi-Fi

• Microsoft Says North Korean Cryptocurrency Thieves Behind Chrome Zero-Day

• 5 Key Cybersecurity Trends to Know in 2024

• Fortra fixed two severe issues in FileCatalyst Workflow, including a critical flaw

• Governments need to beef up cyberdefense for the AI era – and get back to the basics

• US-China relationship remains ‘competitive’, as steps towards diplomacy strengthen

• US CERT Alert AA24-242A (RansomHub Ransomware)

• Twitch’s Drop Ins Feature Turned On VTubers’ Cameras Without Consent

• Governments need to beef up cyberdefense for the AI era – and go back to the basics

• USENIX Security ’23 – Pool-Party: Exploiting Browser Resource Pools For Web Tracking

• Randall Munroe’s XKCD ‘Stranded’

• Chinese Hackers Exploit Serious Flaw in Versa SD-WAN Systems

• Bling Libra Shifts Focus to Extortion in Cloud-Based Attacks

• Check Point Celebrates International Women in Cyber Day 2024

• North Korean hackers exploited Chrome zero-day to steal crypto

• US Offers $2.5 Million Reward for Hacker Linked to Angler Exploit Kit

• The California Supreme Court Should Help Protect Your Stored Communications

• Making Progress and Losing Ground

• Automatically replicate your card payment keys across AWS Regions

• Seven Deadly Myths of DDoS Protection

• Durex data breach leaks sensitive details of customers

• Iranian cybercriminals are targeting WhatsApp users in spear phishing campaign

• Governments need to beef up cyberdefense for the AI era – which means going back to the basics

• Simplify identity management with Red Hat IdM

• Use cases and ecosystem for OpenShift confidential containers

• Exploring the OpenShift confidential containers solution

• RansomHub Breached Over 200 Victims, the FBI Says

• What Is XDR Threat Hunting?

• ‘Store Now, Decrypt Later’: US Leaders Prep for Quantum Cryptography Concerns

• Cybercriminals Capitalize on Travel Industry’s Peak Season

• GitHub Copilot Security and Privacy Concerns: Understanding the Risks and Best Practices

• Best Practices to Help Meet PCI DSS v4.0 API Security Compliance

• FAA Grounds SpaceX Falcon 9 Rocket After Landing Failure

• The Enterprise Guide to Cloud Security Posture Management

• How Cisco AACPC Partner IP Consulting Transformed IT for Lowell Light and Power

• Employee Arrested for Locking Windows Admins Out of 254 Servers in Extortion Plot

• Innovator Spotlight: SNYK

• Publishers Spotlight: Blumira

• The Dual Nature of Telegram: From Protest Tool to Platform for Criminal Activity

• Private Data of 950K Users Stolen in BlackSuit Ransomware Attack

• Enhancing EU Cybersecurity: Key Takeaways from the NIS2 Directive

• Cyberattackers Exploit Google Sheets for Malware Control in Likely Espionage Campaign

• Apple, Nvidia In Talks To Join OpenAI Funding Round – Report

• 4 AI cybersecurity jobs to consider now and in the future

• Third-Party Risk Management is Under the Spotlight

• Top Travel Scams to Watch Out For: Protect Your Vacation from Common Fraud Schemes

• Cyberattackers Exploit Google Sheets for Malware Control in Global Espionage Campaign

• Russian APT29 Using NSO Group-Style Exploits in Attacks, Google

• 7 Smart Steps to Run Serverless Containers on Kubernetes

• Ransomware Roundup – Underground

• UK Labour Party Reprimanded Over Cyberattack Backlog by Privacy Regulator

• Tired of airport security queues? SQL inject yourself into the cockpit, claim researchers

• Report: Ransomware Attacks on US Schools and Colleges Cost $9.45 Billion

• In Other News: Automotive CTF, Deepfake Scams, Singapore’s OT Security Masterplan

• Published Vulnerabilities Surge by 43%

• Iranian Threat Group Attack US Organization via Ransomware

• Wireshark 4.4 Released With New I/O Graphs, Flow Graph / VoIP Calls, TCP Stream

• Radware Report Surfaces Increasing Waves of DDoS Attacks

• How RansomHub went from zero to 210 victims in six months

• Intel To Present Board With Strategic Options – Report

• Voldemort Threat Actors Abusing Google Sheets to Attack Windows Users

• Manufacturing Sector Under Fire From Microsoft Credential Thieves

• Integrity360 Expands to South Africa with Grove Acquisition

• Year-Long Malware Campaign Exploits NPM to Attack Roblox Developers

• South Korea-linked group APT-C-60 exploited a WPS Office zero-day

• The NIS2 Directive: How Far Does it Reach?

• Fortra Patches Critical Vulnerability in FileCatalyst Workflow

• INE Security Named 2024 SC Awards Finalist

• Cybersecurity Insurance: Signals Maturity to Partners, Improved Security Response

• Iranian Hackers Set Up New Network to Target U.S. Political Campaigns

• Malware Masquerading as Palo Alto GlobalProtect Tool Targets Middle East Users

• FBI: RansomHub Hits Over 200 Entities Since Feb

• Top Cost-Effective Cybersecurity Strategies for SMBs

• Philippines: Intel Fusion Center Eyed to Boost Cybersecurity

• California Passes Landmark Bill Requiring Easier Data Sharing Opt-Outs for Consumers

• PoorTry Windows Driver Deletes Crucial Files to Impairs Windows Computers

• Veeam Widens Beam to MongoDB, Nutanix & Proxmox VE

• New Malware Masquerades as Palo Alto VPN Targeting Middle East Users

• Unpatchable Zero-Day in Surveillance Cameras is Being Exploited to Install Mirai

• Cisco Bolsters AI Security by Buying Robust Intelligence

• Russian Hackers Use Commercial Spyware Exploits to Target Victims

• TLD Tracker: Exploring Newly Released Top-Level Domains

• .NET-based Snake Keylogger Attack Windows Using Weaponized Excel Documents

• LummaC2 Infostealer Resurfaces with Obfuscated PowerShell Tactics

• Top 5 Cyber Security Companies in Mumbai

• Breaking Down AD CS Vulnerabilities: Insights for InfoSec Professionals

• Cybersecurity News: DICK’S Sporting Goods cyberattack, Brain Cipher hacked Paris

• Silent Intrusions: Godzilla Fileless Backdoors Targeting Atlassian Confluence

• Threat actors exploit Atlassian Confluence bug in cryptomining campaigns

• New Tickler Malware Used to Backdoor US Government, Defense Organizations

• What is a QR Code Scam?

• Attackers Spread Lumma Stealer Malware GitHub Comments

• The top 10 most-searched data security terms in the US: Can you define them?

• 2 Men From Europe Charged With ‘Swatting’ Plot Targeting Former US President and Members of Congress

• Hackers Exploited Digital Advertising Tools to Launch Malicious Campaigns

• DMARC Deployment Phases: What to Expect and How to Prepare

• Accenture expands partnership with Google Cloud to boost AI adoption and cybersecurity

• Hackers Repeatedly Using Same iOS & Chrome Exploits to Attack Government Websites

• US Election-Themed Phishing Scams Rely on Fake Donation Sites

• Buffer Overflow Flaw in TP-Link Routers Opens Door to RCE

• Atlassian Confluence Vulnerability Exploited in Crypto Mining Campaigns

• New Cyberattack Targets Chinese-Speaking Businesses with Cobalt Strike Payloads

• SANS Institute Unveils Critical Infrastructure Strategy Guide for 2024: A Call to Action for Securing ICS/OT Environments

• North Korean Hackers Target Developers with Malicious npm Packages

• Deepfake Scams, Fake Global Protect Malware, and Russian Threats:Cybersecurity Today: for Friday, August 30th, 2024

• Palo Alto Networks found to spread Malware

• How Ransomware Is Evolving into a Geopolitical Weapon

• Russia-linked APT29 reused iOS and Chrome exploits previously developed by NSO Group and Intellexa

• Lookiero – 4,981,760 breached accounts

• Iran hunts down double agents with fake recruiting sites, Mandiant reckons

• Sinon: Open-source automatic generative burn-in for Windows deception hosts

• A macro look at the most pressing cybersecurity risks

• New infosec products of the week: August 30, 2024

• Cyber threats that shaped the first half of 2024

• ISC Stormcast For Friday, August 30th, 2024 https://isc.sans.edu/podcastdetail/9120, (Fri, Aug 30th)

• 2024-08-30 – Approximately 11 days of server scans and probes

• Simulating Traffic With Scapy, (Fri, Aug 30th)

Generated on 2024-08-31 23:55:08.876390