IT Security News Daily Summary 2024-09-05

• How To Find XSS (Cross-Site Scripting) Vulnerabilities in WordPress Plugins and Themes

• 5 Reasons Why You Need API Discovery

• How AI can help fix this global healthcare challenge

• YubiKeys Are a Security Gold Standard—but They Can Be Cloned

• Uncle Sam charges Russian GRU cyber-spies behind ‘WhisperGate intrusions’

• How to Use a VPN: Complete User Guide

• Veeam fixed a critical flaw in Veeam Backup & Replication software

• Security baseline for Microsoft Edge version 128

• US charges Russian GRU hackers behind WhisperGate intrusions

• Join Us 9-23-24 For a CISO Series Meetup in Houston

• IBM Executive on Future Cybersecurity: Passkeys, Deepfakes & Quantum Computing

• US charges five Russian military hackers with targeting Ukraine’s government with destructive malware

• Cisco Insider Mateusz Frąk is passionate about gaining—and sharing—knowledge.

• Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and Espionage

• How StorageGuard Can Assist With CISA’s Advised Mitigations For Newly Emerged BlackSuit Ransomware

• Storage & Data Protection Trends & Innovations To Watch in 2025

• The best and worst ways to get users to improve their account security

• The AI Security Gap: Protecting Systems in the Age of Generative AI

• Tracelo Data Breach: 1.4 Million Records Exposed

• Russian Military Cyber Actors Target US and Global Critical Infrastructure

• Baxter Connex Health Portal

• Cisco Networking Academy unveils new unified teaching and learning experience on NetAcad.com

• Cisco’s Smart Licensing Utility flaws suggest it’s pretty dumb on security

• The Deception Game: How Cyber Scams Manipulate Trust to Access Sensitive Information

• WordPress Mandates 2FA, SVN Passwords for Plugin, Theme Authors

• Russia’s Most Notorious Special Forces Unit Now Has Its Own Cyber Warfare Team

• Cisco Fixes Root Escalation Vulnerability With Public Exploit Code

• Intricate Babylon RAT Campaign Targets Malaysian Politicians, Government

• Litespeed Cache Flaw Exposes Millions of WordPress Sites to Takeover Attacks

• EFF & 140 Other Organizations Call for an End to AI Use in Immigration Decisions

• Transport for London Faces Ongoing Cyber Security Incident, Works to Safeguard Systems and Data

• IT Manager Faces Charges for Locking Computers to Demand Money

• Veeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical Issues

• Chinese-Speaking Hacker Group Targets Human Rights Studies in Middle East

• Watch our new documentary, “The Light We Keep: A Project PowerUp Story”

• Russia APT28 Cyber Attacks German Air Traffic Control

• Planned Parenthood partly offline after ransomware attack

• Lowe’s employees phished via Google ads

• Why It’s So Hard to Fully Block X in Brazil

• CISA Releases Four Industrial Control Systems Advisories

• New Omdia report offers first of its kind analysis of the industrial edge

• CISO Role Expands as Cybersecurity Becomes Integral to Business Strategy

• PyPI Revival Hijack Puts Thousands of Applications at Risk

• Businesses still ready to invest in Gen AI, with risk management a top priority

• Cicada Ransomware – What You Need To Know

• Australia Proposes Mandatory Guardrails for AI

• Hughes Network Systems WL3000 Fusion Software

• Partnering for Purpose: Join the Movement to Amplify Positive Impact

• Cisco Warns of Backdoor Admin Account in Smart Licensing Utility

• Security boom is over, with over a third of CISOs reporting flat or falling budgets

• Quantum computing is coming – are you ready?

• MIT Database Lists Hundreds of AI Dangers Impacting Human Lives

• Citrine Sleet APT Exploits Chrome Zero-Day Vulnerability for Rootkit Infiltration

• UK Signs Council of Europe AI Convention

• Security Budgets Come Under Pressure as “Hypergrowth” Ends

• Wordfence Intelligence Weekly WordPress Vulnerability Report (August 26, 2024 to September 1, 2024)

• New report shows ongoing gender pay gap in cybersecurity

• EUCLEAK Attack Allows Yubico Security Keys to be Cloned

• The AI Wild West: Unraveling the Security and Privacy Risks of GenAI Apps

• Rise in Ransomware Attacks in Southeast Asia Driven by Rapid Digitalization and Security Gaps

• Vanta empowers GRC teams to make their security and compliance automated

• Earth Lusca adds multiplatform malware KTLVdoor to its arsenal

• Google Fixed Actively Exploited Android Privilege Escalation Flaw (CVE-2024-32896)

• U.S. Seizes 32 Pro-Russian Propaganda Domains in Major Disinformation Crackdown

• Abusix Launches Guardian: Cutting-Edge Security Platform for Email and Network Providers

• Lazarus Hackers Attacking Job-Seekers to Deliver Javascript Malware

• Earth Lusca Using Multiplatform Backdoor to Attack Windows & Linux Machines

• Threat Actors Exploit GeoServer Vulnerability CVE-2024-36401

• Revival Hijack Attack Puts 22,000 PyPI Packages at Risk of Hijack

• Cisco Patches Critical Vulnerabilities in Smart Licensing Utility

• Choosing the Best Cybersecurity Prioritization Method for Your Organization

• RansomHub Emerges in Rapidly Evolving Ransomware Landscape

• RomCom Group’s Underground Ransomware Exploits Microsoft Zero-Day Flaw

• CISA Warns of Three Actively Exploited Vulnerabilities That Demand Immediate Attention

• Fake OnlyFans Checker Tool Infects Hackers with Lummac Stealer Malware

• One League, 32 Teams, One Cisco

• 6 Best Enterprise Antivirus Software Choices in 2024

• Long Analysis of the M-209

• Two Nigerians Sentenced to Prison in US for BEC Fraud

• Proofpoint helps organizations simplify governance of communication data

• Researcher Finds Unfixable Yet Tricky to Exploit Flaw in Yubikeys

• We Hunted Hidden Police Signals at the DNC

• Pool Your Cybersecurity Resources to Build the Perfect Security Ecosystem

• Cloud Access Security Brokers (CASBs): Are They Still Relevant?

• Vestager To Step Down As EU Competition Chief

• US Probes Four-Vehicle Crash Involving AI Driver Assistance

• Growth of Web3 Fuled New Opportunities for Threat Actors to Attack Finance Sectors

• Is Russian group APT28 behind the cyber attack on the German air traffic control agency (DFS)?

• The fingerpointing starts as cyber incident at London transport body continues

• Bitdefender Security for Creators protects YouTube content creators and influencers from hackers

• Hiring Cyber Teenagers with Criminal Records

• Banking Trojans: Mekotio Looks to Expand Targets, BBTok Abuses Utility Command

• US Targets Russian Election Influence Operation With Charges, Sanctions, Domain Seizures

• Revenera OSS Inspector enables developers to assess open source software risks

• NIST Cybersecurity Framework (CSF) and CTEM – Better Together

• Cybersecurity News: Spyware research, Cicada rebrand, MacroPack malware

• EU Seeks Industry Views On Google DMA Compliance

• Quishing, an insidious threat to electric car owners

• Microchip Technology confirms theft of employee data

• OnlyFans Hackers Targeted With Infostealer Malware

• A Powerful Approach to SaaS ITDR – Avoiding False Positives on Improbable Travel

• Skyhigh AI mitigates risks associated with AI applications

• Nvidia Served With Subpoena In US Antitrust Probe

• Nvidia Invests In Japan Start-Up Sakana AI

• China Accused Of Poaching Talent Amidst Chip Plant Drive

• Veeam Backup & Replication Vulnerabilities Let Attackers Execute Remote Code

• Tor Browser 13.5.3 Released, What’s New?

• Tropic Trooper spies on government entities in the Middle East

• Double Trouble: DOJ Exposes Russian AI-Powered Disinformation

• The Six Most Dangerous New Threats Security Teams Need to Know About

• Threat Actors Using MacroPack to Deploy Brute Ratel, Havoc, and PhantomCore Payloads

• FBI Warns Crypto Firms of Aggressive Social Engineering Attacks

• Binarly Transparency Platform 2.5 identifies critical vulnerabilities before they can be exploited

• Malware Attackers Using MacroPack to Deliver Havoc, Brute Ratel, and PhantomCore

• Russian Blamed For Mass Disinformation Campaign Ahead of US Election

• Cisco Smart Licensing Utility Vulnerability Let Attackers Gain Admin Control

• Iran pays millions to stop data leak related to banks

• Phishing Remains Top Cyber Threat Despite Drop in Incidents

• Cisco Warns of Critical Vulnerabilities in Smart Licensing Utility

• New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm

• “Active Listening” software reportedly used to listen in on smart phone conversations. Cyber Security Today for Thursday, September 5, 2024

• Security biz Verkada to pay $3m penalty under deal that also enforces infosec upgrade

• The future of automotive cybersecurity: Treating vehicles as endpoints

• Cisco Fixes Two Critical Flaws in Smart Licensing Utility to Prevent Remote Attacks

• How to gamify cybersecurity preparedness

• ISC Stormcast For Thursday, September 5th, 2024 https://isc.sans.edu/podcastdetail/9126, (Thu, Sep 5th)

• vCISO services thrive, but challenges persist

• Enterprise DSPM for Fortune 500 – 1touch.io is your go-to solution

• Managing Automatic Certificate Management Environment (ACME) in Identity Management (IdM)

• White House seizes 32 domains, issues criminal charges in massive election-meddling crackdown

• Attack Surface [Guest Diary], (Wed, Sep 4th)

• Check Point Software Celebrates Partner Success at the Asia Pacific Partner Conference 2024

• North Korean scammers plan wave of stealth attacks on crypto companies, FBI warns

• News alert: Blackwired launches ‘ThirdWatch?’ — an advanced third-party risk management platform

• News alert: INE Security releases a strategies guide for cyber threat preparedness, response capabilities

• News alert: AI SPERA attains PCI DSS certification for its search engine solution ‘Criminal IP’

• New Supply Chain Attack “Revival Hijack” Risks Massive PyPI Takeovers

• Google fixed actively exploited Android flaw CVE-2024-32896

• U.S. Federal Employees: Plant Your Flag for Digital Freedoms Today!

• Palo Alto takes a big $500M bite out of IBM QRadar

• Palo Alto takes a big bite out of IBM QRadar security

• IT Security News Daily Summary 2024-09-04

• Copilot for Microsoft 365 might boost productivity if you survive the compliance minefield

• That massive Pixel security flaw reported last month has been patched

• Planned Parenthood confirms cyber-attack as RansomHub threatens to leak data

• AWS achieves HDS certification in four additional AWS Regions

• What is a cloud architect and how do you become one?

• X is hiring staff for security and safety after two years of layoffs

• August Recap: New AWS Sensitive Permissions and Services

• White House Wants to Tighten Internet Routing Security

• CISO Series Podcast LIVE in Boca Raton, FL (09-21-24)

• White House unveils plan to improve BGP security

• EFF Calls For Release of Alexey Soldatov, “Father of the Russian Internet”

• FBI Warns of North Korea Attacks Against the Crypto Industry

• 20,000 WordPress Sites Affected by Remote Code Execution Vulnerability in Bit File Manager WordPress Plugin

• That massive Pixel security flaw has been patched

• Use AI threat modeling to mitigate emerging attacks

• US Government Isn’t Ready for Cyber Chaos in the Food and Agriculture Sector

• Microsoft Tackling Windows Logfile Flaws With New HMAC-Based Security Mitigation

• Build a mobile driver’s license solution based on ISO/IEC 18013-5 using AWS Private CA and AWS KMS

• Adapting Cybersecurity Practices to Modern Threats

• Researchers Discover SQL Injection Issue That Can Bypass Airport Security

• Trump Media Shares Hit New Post-IPO Low

• Nvidia Market Value Hit By Historic Single-Day Drop

• DDoS Attacks Hit France Over Telegram’s Pavel Durov Arrest

• “Hello pervert” sextortion scam includes new threat of Pegasus—and a picture of your home

• Iran Cyber Attack: Fox Kitten Facilitates Ransomware in US

• Everything you need to know about the OSCP+

• 28 Zyxel Access Points and Router Vulnerable to OS Command Injection

• Daniel Stori’s Turnoff.US: ‘pid 1’

• Security Analysts Observe Massive Surge in Telegram App Downloads Following Durov Arrest

• Adopting a Connected Mindset: A Strategic Imperative for National Security

• Is Telegram Still a Safe Messaging App? An In-Depth Look

• WordPress XSSplorer Challenge: An Expanded Scope for All Researchers in the Wordfence Bug Bounty Program

• CISA offers Voluntary Cyber Incident Reporting Portal

• Comprehensive Threat Protection Strategies for Google Workspace Environments

• Hacktivists Call for Release of Telegram Founder with #FreeDurov DDoS Campaign

• Deploying Rust in Existing Firmware Codebases

• Dutch Privacy Watchdog Fines Clearview AI $34 Million for ‘Illegal’ Database of Faces

• Researchers Find Over 22,000 Removed PyPI Packages at Risk of Revival Hijack

• Android Users Urged to Install Latest Security Updates to Fix Actively Exploited Flaw

• North Korean Hackers Targets Job Seekers with Fake FreeConference App

• US Government Set Out to Improve Internet Routing Security

• Scans for Moodle Learning Platform Following Recent Update, (Wed, Sep 4th)

• Stopping last year’s data spill becoming today’s headlines

• Rage Stealer Rebranded as Angry Stealer, Now Uses Telegram Bot for Data Theft

• How to avoid election related scams

• 500,000 tokens: How Anthropic’s Claude Enterprise is pushing AI boundaries

• Three myths preventing you from building your lifecycle practice

• Head Mare hacktivist group targets Russia and Belarus

• Discontinued D-Link DIR-846 routers are affected by code execution flaws. Replace them!

• Complying with PCI DSS Requirements by 2025

• Cicada ransomware may be a BlackCat/ALPHV rebrand and upgrade

• USENIX Security ’23 – ProSpeCT: Provably Secure Speculation for the Constant-Time Policy

• North Korea Targeting Crypto Industry, Says FBI

• Criminal IP Secures PCI DSS v4.0 Certification, Enhancing Payment Security with Top-Level Compliance

• 5 Steps To Integrate Istio With OPA

• What is a unique identifier (UID)?

• Microsoft Purview Audit helps IT flush out bad behavior

• How Ransomware Groups Weaponize Stolen Data

• FBI: North Korea Aggressively Hacking Cryptocurrency Firms

• EU’s Initiative to Define ‘Important Data’ in China: A Step Towards Global Data Governance

• AI System Optimise Could Help GPs Identify High-Risk Heart Patients

• Google Confirms CVE-2024-32896 Exploited in the Wild, Releases Android Security Patch

• Malwarebytes review: Solid, free protection with a user-friendly interface

• Worried about the YubiKey 5 vulnerability? Here’s why I’m not

• HHS Drops Appeal of Hospital Web Tracking Decision

• Secure by Demand: Going Beyond Questionnaires and SBOMs

• Yikes, YubiKey Vulnerable — ‘EUCLEAK’ FIDO FAIL?

• trackd AutoPilot leverages historical patch disruption data

• Hackers Hijack 22,000 Removed PyPI Packages, Spreading Malicious Code to Developers

• Warning: New Emansrepo Malware Uses HTML Files to Target Windows Users

• A Comprehensive Guide to Access and Secrets Management: From Zero Trust to AI Integration — Innovations in Safeguarding Sensitive Information

• AI startup You.com raises $50 million, predicts ‘more AI agents than people’ by 2025

• From Threats to Trends: Highlights from Perception Point’s H1 2024 Report

• Crush It, Don’t Get Crushed — Combat SOC Analyst Burnout with AI

• Damn Vulnerable UEFI: Simulate Real-world Firmware Attacks

• Red Teaming Tool Abused for Malware Deployment

• Crypto Vulnerability Allows Cloning of YubiKey Security Keys

• Automatic Burn-In Technology by Sinon Elevates Windows Deception Hosts

• North Korean hackers’ social engineering tricks

• The Importance Of Access Control

• Rethinking “I Have Nothing to Hide”: The Importance of Online Privacy

• Everyday Work at Home Security Tips

• 12 types of Phishing and how to avoid them

• What are APTs, and why are they dangerous?

• How To Conduct Effective Data Security Audits for Big Data Systems

• Leveraging Threat Intelligence in Cisco Secure Network Analytics

• Effective Privileged Access Management Implementation: A Step-by-Step Guide

• Transport for London (TfL) Targeted in Cyberattack

• Swan Bitcoin Alerts Users of Phishing Emails Carrying Fake Data Breach Notice

• Three UK Men Convicted of Running Website Behind Fraud Calls During COVID-19 Lockdown

• INE Security Announces 5 Practical Steps to Elevate Cyber Defense Strategies

• Security Flaw Allows Attackers to Clone YubiKeys by Extract Private Key

• ToddyCat APT Abuses SMB, Exploits IKEEXT A Exchange RCE To Deploy ICMP Backdoor

• Security Researcher Sued for Disproving Government Statements

• FTC: Over $110 Million Lost to Bitcoin ATM Scams in 2023

• Verkada to Pay $2.95 Million for Alleged CAN-SPAM Act Violations

• The New Effective Way to Prevent Account Takeovers

• Clearview AI Fined €30.5m by Dutch Watchdog Over Illegal Data Collection

• Record breaking Ransomware attacks on Schools and Colleges in 2023

• How to Combat APT Cyber Threats: A Comprehensive Guide

• Keeping up With Automated Threats is Becoming Harder

• White House Outlines Plan for Addressing BGP Vulnerabilities

• Prompt Security helps organizations monitor data shared with Microsoft 365 Copilot

• Feminists in South Korea’s fight against Deepfakes

• Trump Media Shares Hit Post-IPO Low

• White House Calls Attention to ‘Hard Problem’ of Securing Internet Traffic Routing

• Proofpoint launches NIST-inspired framework to tackle data loss prevention challenges

• Vulnerability allows Yubico security keys to be cloned

• Cybersecurity News: Halliburton data stolen, Columbus sues researcher, White House protects internet

• Automating Network Alert Investigations with Dropzone AI

• Fake GlobalProtect VPN Downloads Used to Spread WikiLoader Malware

• Mallox ransomware: in-depth analysis and evolution

• Android’s September 2024 Update Patches Exploited Vulnerability

• Halliburton Confirms that Hackers Stolen Data in Cyber Attack

• Zyxel Warns of Critical OS Command Injection Flaw in Routers

• Cthulhu Stealer: New macOS Malware Targets Apple Users’ Data

• Bad Reasons to Update Your Linux Kernel

• Debian Patches Two Dovecot Vulnerabilities

• Clearview AI Faces €30.5M Fine for Building Illegal Facial Recognition Database

• Initial Access Brokers Target $2bn Revenue Companies

• Intel ‘May Be Removed’ From Dow Index

• Goldman Sachs Research Finds AI Could Reduce Oil Prices

• AI Data Centre Boom Driving Huge Emissions Rise, Finds Research

• Starlink Says ‘Complying’ With X Ban In Brazil

• Employee Cybersecurity Awareness Training Strategies for AI-Enhanced Attacks

• Let’s Dance: Securing Access with PIM and PAM to Prevent Breaches

• Samba 4.21 comes with upgraded security features

• Earth Lusca Uses KTLVdoor Backdoor for Multiplatform Intrusion

• PoC Exploit Released For 0-Day Windows Kernel Privilege Escalation Vulnerability

• Connectivity they can count on: Claflin University’s tech revolution

• Can Every Business Afford to Be a Target?

• September is Preparedness Month

• Bluetooth Channel Sounding enhances security of Bluetooth connected devices

• APP Fraud Dominates as Scams Hit All-Time High

• Huawei Plans ‘Trifold’ Phone Launch Hours After Apple Event

• Google Patches Actively Exploited Android 0-day Privilege Escalation Vulnerability

• FBI Warns that North Korean Hackers Aggressively Attacking Employees of Crypto Companies

• Zyxel fixed critical OS command injection flaw in multiple routers

• Webinar: Unveiling Hidden APIs and Securing Vulnerabilities in the Healthcare Sector

• Hackers Use Fake GlobalProtect VPN Software in New WikiLoader Malware Attack

• The Japanese Robot Controversy Lurking in Israel’s Military Supply Chain

• Telegram apologizes to South Korea and takes down smutty deepfakes

• Rubrik Allies to Cisco to Improve Cyber Resiliency

• Protecting national interests: Balancing cybersecurity and operational realities

• OpenBAS: Open-source breach and attack simulation platform

• The Most Misunderstood Data Security Terms in The U.S.

• Ransomware attacks escalate as critical sectors struggle to keep up

• Cybersecurity jobs available right now: September 4, 2024

• ISC Stormcast For Wednesday, September 4th, 2024 https://isc.sans.edu/podcastdetail/9124, (Wed, Sep 4th)

• Ex-senior New York State staffer charged in cash-for-favors scandal with China

• Blackwired Launches ThirdWatch℠, A Paradigm Shift in Cybersecurity

• White House thinks it’s time to fix the insecure glue of the internet: Yup, BGP

Generated on 2024-09-05 23:55:10.810431