IT Security News Daily Summary 2024-09-09

• Emergency Fix Issued for 10/10 Severity Vulnerability in LoadMaster Products

• Building Cyber Resilience: How Continuous Training Fortifies Organizational Security

• Become a Certified Threat Hunter with OffSec’s New Foundational Threat Hunting Course (TH-200)

• Randall Munroe’s XKCD ‘Slingshots’

• FIPPA: Understanding Canada’s Information and Protection Privacy Law

• USENIX Security ’23 – BunnyHop: Exploiting the Instruction Prefetcher

• CISA Director Jen Easterly Remarks at the Election Center 39th Annual National Conference in Detroit

• Russia’s top-secret military unit reportedly plots undersea cable ‘sabotage’

• Google Pushes Rust in Legacy Firmware to Tackle Memory Safety Flaws

• CISA Director Jen Easterly Remarks at the 39th Annual National Conference in Detroit

• LightEval: Hugging Face’s open-source solution to AI’s accountability problem

• How to create an AI acceptable use policy, plus template

• New RAMBO Attack Uses RAM Radio Signals to Steal Data from Air-Gapped Networks

• Google’s Grip on Ad Tech: What the UK Competition Watchdog Discovered

• Council of Europe Lunches First AI Treaty

• CISA Releases Election Security Focused Checklists for Both Cybersecurity and Physical Security

• Google Goes On Trial In US Over Ad Tech Dominance

• Payment Gateway SLIM CD Data Breach: 1.7 Million Users Impacted

• Avis alerts nearly 300k car renters that crooks stole their info

• Empowering Cybersecurity on the Go: Nuspire’s Revolutionary Mobile App

• Achieving Cyber Clarity: myNuspire for Unified Cybersecurity Management

• Meet Nutron: Your AI-Driven Ally in Proactive Cyber Defense

• Redefining Cyber Defense: Introducing the Nuspire Cybersecurity Experience

• Introducing the Nuspire Cybersecurity Experience: A New Era of Intelligent Unification

• Credit Card details of over 1.7 million USA customers exposed

• What the arrest of Telegram’s CEO means, with Eva Galperin (Lock and Code S05E19)

• Predator spyware operation is back with a new infrastructure

• 1.7M potentially pwned after payment services provider takes a year to notice break-in

• TFL Hit by Cyberattack, Leaving Disabled Riders Stranded

• Novel Android Malware Employs OCR to Steal Crypto Wallet Keys From Images

• Technology Causes “Digital Entropy” as Firms Struggle With Governance

• Akira Ransomware Actively Exploiting SonicWall firewall RCE Vulnerability

• Vulnerability Recap 9/9/24 – Exploited Vulnerabilities Persist

• CISA Adds Three Known Exploited Vulnerabilities to Catalog

• Cisco and BT Partner to Upskill Ukrainian Refugees in Ireland

• Strengthening enterprise storage against cyber threats

• 300,000 Impacted by Data Breach at Car Rental Firm Avis

• DDoS Attacks Double With Governments Most Targeted

• How to Reduce API Sprawl with API Discovery

• Surfshark vs NordVPN (2024): Which VPN Should You Choose?

• Bug lets anyone bypass WhatsApp’s ‘View Once’ privacy feature

• Cisco University: Elevate Your Cybersecurity, Network Security, Forensics, and Incident Response Skills

• Cyber Threats vs. Risks: Building a Proactive Cyber Defense

• Kremlin-linked COLDRIVER crooks take pro-democracy NGOs for phishy ride

• Vulnerability Summary for the Week of September 2, 2024

• Chinese Hackers Exploit Visual Studio Code in Southeast Asian Cyberattacks

• Blind Eagle Targets Colombian Insurance Sector with Customized Quasar RAT

• One More Tool Will Do It? Reflecting on the CrowdStrike Fallout

• Cyber-Attack on Payment Gateway Exposes 1.7 Million Credit Card Details

• New RAMBO Attack Steals Data Using RAM in Air-Gapped Computers

• Two Indicted in US for Running Dark Web Marketplaces Offering Stolen Information

• TP-Link Omada Cloud Essentials: Centralized network management and monitoring

• Man Charged in AI-Generated Music Fraud on Spotify and Apple Music

• A glimpse into the Quad7 operators’ next moves and associated botnets

• 5 Ways to Mitigate Risk in Cybersecurity

• New Veeam Vulnerability Puts Thousands of Backup Servers at Risk – PATCH NOW!

• Surfshark vs. NordVPN: Which VPN Is Better in 2024?

• An expert’s big-picture view of the state of SecOps

• What Is Industrial Control System (ICS) Cyber Security?

• Critical Kibana Flaws Expose Systems to Arbitrary Code Execution

• What is Malware

• Sextortion Scam Now Use Your “Cheating” Spouse’s Name as a Lure

• The Weaponization of AI and ML is Complicating the Digital Battlefield

• Protecting Against Fog Ransomware: Key Strategies and Insights

• Webinar: How to Protect Your Company from GenAI Data Leakage Without Losing It’s Productivity Benefits

• Wireshark 4.4’s IP Address Functions, (Mon, Sep 9th)

• Thousands of Avis car rental customers had personal data stolen in cyberattack

• HAProxy Vulnerability CVE-2024-45506 Under Active Exploit: Urgent Patching Required

• Critical SonicWall Vulnerability Possibly Exploited in Ransomware Attacks

• Veeam Backup & Replication RCE flaw may soon be leveraged by ransomware gangs (CVE-2024-40711)

• Australia Threatens to Force Companies to Break Encryption

• Critical GeoServer Flaw Enabling Global Hack Campaigns

• What You Need to Know About Grok AI and Your Privacy

• LummaC2 Stealer and Malicious Chrome Extension Wreak Havoc

• Progress Software Issues Patch for Vulnerability in LoadMaster and MT Hypervisor

• Wing Security SaaS Pulse: Continuous Security & Actionable Insights — For Free

• Man Arrested After ‘Earning Millions’ From AI Music Tracks

• Australian Official Received Death Threats After Musk Criticism

• Trump ‘To Appoint Musk’ To Gov’t Efficiency Role If Elected

• US DOJ To Propose Google Penalties By End Of Year

• 10 Things You Should Do to Securely Dispose of Computers

• Is Apple’s iCloud Keychain Safe to Use in 2024?

• TIDRONE APT targets drone manufacturers in Taiwan

• SonicWall SSLVPN Access Control Flaw is Now Exploited in Akira Ransomware Attacks

• One Million US Kaspersky Customers Transferred to Pango’s UltraAV

• Industry Moves for the week of September 9, 2024 – SecurityWeek

• Predator Spyware Resurfaces With Fresh Infrastructure

• Apache Addresses Severe RCE Vulnerability in OFBiz with an Urgent Patch

• 25 Ways to Make the SOC More Efficient and Avoid Team Burnout

• Unmasking PackXOR: The FIN7 Packer Exposed

• Why Legacy MFA is DOA

• Best Practices for Enterprise Security

• Old Habits, New Threats: Why More Phishing Attacks are Bypassing Outdated Perimeter Detection

• Cybersecurity News: Avis rentals breach, Microsoft disables ActiveX, Wisconsin Medicare breach

• Examining the Intersection of Cybersecurity and Automation in 5 Different Industries

• Security Automation – As Easy As Making Tea?

• Post-Quantum Cryptography Coalition Publishes Comparison of International PQC Standards

• Absolute Purchases Syxsense to Tackle Cyber Vulnerabilities

• Feds Indicted Two Alleged Administrators of WWH Club Dark Web Marketplace

• Feds Warn Health Sector to Patch Apache Tomcat Flaws

• Cybersecurity regulation stepping up

• New Android SpyAgent Malware Uses OCR to Steal Crypto Wallet Recovery Keys

• Car Giant Avis Reveals Breach Impacted 300,000 Customers

• Earth Preta Evolves its Attacks with New Malware and Strategies

• TfL Cuts Data Feeds Amidst Cyber-Attack Fallout

• NCSC Calls Out Cyber-Attacks From Russia’s GRU

• Young Gamers Under Attack, Here is the List of Games Targeted

• A week in security (September 2 – September 8)

• Critical Flaw in IBM webMethods Integration Demand Immediate Action

• What is a TPM, and why does Windows 11 require one?

• Red Hat Issues Critical Patch for Pulpcore Authentication Bypass Flaw (CVE-2024-7923)

• The Foundation of Zero-Trust Security Architecture

• Security Budget Growth Slows, but Spending Remains Elevated

• TfL Admits Some Services Are Down Following Cyber-Attack

• How to Protect Healthcare Data from Cyber Attacks

• CMA Finds Google Abuses Ad Tech Dominance

• Boeing’s Starliner Returns To Earth Without Crew

• IBM webMethods Integration Server Vulnerabilities Exposes Systems to Arbitrary Command Execution

• Multiple malware families delivered exploiting GeoServer GeoTools flaw CVE-2024-36401

• Loki: a new private agent for the popular Mythic framework

• The Role of SIEM in Regulatory Compliance

• Advanced surveillance is key to countering emerging global threats

• Red Hat Enterprise Linux AI extends innovation across the hybrid cloud

• 5.9 terabytes of sensitive medical data leaked: Cyber Security Today for Monday, September 9th, 2024

• Malware spread via LinkedIn and EV Charging Stations prone to Quishing Attacks

• Progress Software fixed a maximum severity flaw in LoadMaster

• Predator Spyware Resurfaces: Renewed Threats and Global Implications

• Prevalent, Indigocube Security Partner to Elevate Third-Party Risk Management Solutions in SA

• TIDRONE Espionage Group Targets Taiwan Drone Makers in Cyber Campaign

• OpenZiti: Secure, open-source networking for your applications

• AI cybersecurity needs to be as multi-layered as the system it’s protecting

• U.S. Offers $10 Million for Info on Russian Cadet Blizzard Hackers Behind Major Attacks

• Predator spyware updated with dangerous new features, also now harder to track

• Best practices for implementing the Principle of Least Privilege

• 
Password Cracking & Energy: More Dedails, (Sun, Sep 8th)

• ISC Stormcast For Monday, September 9th, 2024 https://isc.sans.edu/podcastdetail/9130, (Mon, Sep 9th)

• End of an era: Security budget growth slows down

• Phishing in focus: Disinformation, election and identity fraud

• Predator spyware updated withn dangerous new features, also now harder to track

• 2024-09-04 – Traffic Analysis Exercise: Big Fish in a Little Pond

• Lazarus Group Targets Blockchain Pros with Fake Video Conferencing, Job Scam

• IT Security News Weekly Summary – Week 36

• IT Security News Daily Summary 2024-09-08

• USENIX Security ’23 – Collide+Power: Leaking Inaccessible Data with Software-based Power Side Channels

• 83% of Businesses Hit by Ransomware – Are You Next?

• Cyberattack Targets Malaysian Officials with Babylon RAT Malware

• Here’s Why Attackers Have a Upper Hand Against CISOs

• Australia’s Proposed Mandatory Guardrails for AI: A Step Towards Responsible Innovation

• 
Python & Notepad++, (Sat, Sep 7th)

• Password Cracking & Energy: More Dedails, (Sun, Sep 8th)

• Feds indicted two alleged administrators of WWH Club dark web marketplace

• 22,000 PyPI Packages Affected by Revival Hijack Supply-Chain Attack

• SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 10

• Addressing Critical Challenges in Responsible Enterprise AI Adoption

• Security Affairs newsletter Round 488 by Pierluigi Paganini – INTERNATIONAL EDITION

• Cyber Resilience: Preparing for the Inevitable in a New Era of Cybersecurity

• (Re)Building the Ultimate Homelab NUC Cluster – Part 1

• How to integrate CTEM into your cybersecurity strategy for continuous threat monitoring and mitigation?

• Week in review: Vulnerability allows Yubico security keys cloning, Patch Tuesday forecast

• Vulnerabilities in IBM Products Let Attackers Exploit & Launch DOS Attack

Generated on 2024-09-09 23:55:07.662042