IT Security News Daily Summary 2024-09-11

• 10 Countries With the Fastest Internet in the World [2024]

• 2024-09-11 – Data dump: Remcos RAT and XLoader (Formbook)

• Optimizing Data Management for AI Success: Industry Insights and Best Practices

• Cybersecurity Hiring: How to Overcome Talent Shortages and Skills Gaps

• Apple Intelligence Promises Better AI Privacy. Here’s How It Actually Works

• The Unraveling of an Iranian Cyber Attack Against the Iraqi Government

• Chinese DragonRank Hackers Exploit Global Windows Servers in SEO Fraud

• Major sales and ops overhaul leads to much more activity … for Meow ransomware gang

• Customer Story | Protecting Students and Data in Google Workspace at Santa Rita Union School District

• Join Us 9-30-24 for a CISO Series Meetup in Washington, DC

• Former Girlfriend of FTX’s Bankman-Fried Seeks To Avoid Prison

• How to prevent vendor email compromise attacks

• HTTP vs. HTTPS: What’s the difference?

• Connect in Cancùn with Learning & Certifications

• DoJ Distributes $18.5 Million to Western Union Fraud Victims

• Tech Stack Uniformity has Become a Systemic Vulnerability

• Stopping the Harms of Automated Decision Making | EFFector 36.12

• Innovator Spotlight: Salt Security

• Innovator Spotlight: HUMAN

• Hunters International claims ransom on Chinese mega-bank’s London HQ

• Google Introduces ‘Air-Gapped’ Backup Vault to Thwart Ransomware

• Slim CD Data Breach Exposes Credit Card Information of 1.7 Million Customers

• Kali Linux 2024.3 released: 11 new tools, Qualcomm Snapdragon SDM845 SoC support

• Navigating the Risks of Namespace Collision: A Critical Security Challenge

• Microsoft Fixes Four 0-Days — One Exploited for SIX YEARS

• SpyAgent Malware Uses OCR Tech to Attack Crypto Wallets

• Digital Dictatorship: The Dangers of Unchecked Spyware

• Quad7 Botnet Expands to Target SOHO Routers and VPN Appliances

• Vulnerability in Acrobat Reader could lead to remote code execution; Microsoft patches information disclosure issue in Windows API

• Latest Cybersecurity News Headlines on Google

• Samsung India Workers Strike, Amid Report Of Overseas Job Cuts

• What is DuckDuckGo? If you’re into online privacy, try this popular Google alternative

• Cyberattack shuts down 34 Highline Public Schools for 3 days

• Security Budgets Continue Modest Growth, but Staff Hiring Slows Considerably, Research Finds

• Innovator Spotlight: Tanium

• Disney Data Breach Exposes Sensitive Corporate and Personal Information

• ‘TIDrone’ Cybercriminals Target Taiwan’s Drone Makers

• Free Russia Foundation Investigates Potential Cyberattack Amid Leak of Sensitive Documents

• DragonRank Black Hat SEO Campaign Targeting IIS Servers Across Asia and Europe

• Operational Technology Leaves Itself Open to Cyber-Attack

• Five ways to lose your data

• Hold – Verify – Execute: Rise of malicious POCs targeting security researchers

• AWS To Invest £8 Billion In UK, Amid Cloud AI Expansion

• Researchers Hacked Car EV Chargers To Execute Arbitrary Code

• Threat Actors Exploiting Legitimate Software For Stealthy Cyber Attacks

• 8 Practices Software Engineers Should Adopt and Champion for Cybersecurity

• Managed Assurance: Transforming Digital Experience with ThousandEyes on Meraki MX

• Innovator Spotlight: Keepnet Labs

• Innovator Spotlight: Lineaje

• SplxAI Raises $2 Million to Protect AI Chatbot Apps

• ADCS Attack Paths in BloodHound — Part 3

• Gallup: Pollster Acts to Close Down Security Threat

• Trust, Teams, and Tragedy – The Ever-Present Risk of Insider Threats

• Successful Hyperloop Test Completed In Holland

• Celebrating Innovation and Connection: Cisco in Paris with NBC Sports

• Highline Public Schools school district suspended its activities following a cyberattack

• AI Cybersecurity Needs to be as Multi-Layered as the System it’s Protecting

• Quad7 Botnet Targets More SOHO and VPN Routers, Media Servers

• Britain Must Call for Release of British-Egyptian Activist and Coder Alaa Abd El Fattah

• So you paid a ransom demand … and now the decryptor doesn’t work

• Intel Informs Customers About Over a Dozen Processor Vulnerabilities

• Mitiga Cloud MDR detects threats in SaaS and cloud environments

• Hackers Use Fake Domains to Trick Trump Supporters in Trading Card Scam

• This Senate Bill Could Improve Voting Machine Security

• Common Phishing Attacks and How to Protect Against Them

• RansomHub ransomware gang relies on Kaspersky TDSKiller tool to disable EDR

• CISA adds SonicWall SonicOS, ImageMagick, and Linux Kernel Bugs to its Known Exploited Vulnerabilities catalog

• DHS Cyber Review Board Will Announce Next Investigation ‘Soon’

• Chinese ‘Crimson Palace’ Espionage Campaign Keeps Hacking Southeast Asian Governments

• GDPR & CCPA: A CIO’s Essential Guide to Email Compliance

• PIXHELL Attack Allows Air-Gap Jumping via Noise From Screens

• The SBOM Survival Guide: Why SBOM Compliance is Set to Ignite IoT Security

• SpecterOps Extends Reach of BloodHound Tool for Mapping Microsoft AD Attacks

• Singapore Police Arrest Six Hackers Linked to Global Cybercrime Syndicate

• Crypto Scams Reach New Heights, FBI Reports $5.6bn in Losses

• Join Us 09-27-24 for “Hacking Alerts” – Super Cyber Friday

• Apple Ordered To Pay Ireland €13bn In Taxes

• Check Point Software Recognised as a Leader in GigaOm Radar Report for Security Policy as Code

• Siemens Issues Critical Security Advisory for User Management Component (UMC)

• OpenZiti: Secure, Open-Source Networking for Your Applications

• CosmicBeetle Upgrades Arsenal with New ScRansom Ransomware to Target SMBs

• Ivanti fixes critical vulnerabilities in Endpoint Management (CVE-2024-29847)

• Why Is It So Challenging to Go Passwordless?

• Cybersecurity Workforce Gap Rises by 19% Amid Budget Pressures

• Google Must Pay €2.4bn Fine, EU Court Rules

• Siemens Industrial Edge Management Vulnerable to Authorization Bypass Attacks

• Evaluating the Effectiveness of Reward Modeling of Generative AI Systems

• Slim CD Data Breach Exposes Financial Data of almost 1.7 million People

• Windows Elevation of Privilege Flaw Exploited by QakBot Malware, PoC Published

• FBI Report Says Cryptocurrency Scams Surged in 2023

• Earth Preta Upgrades Attack Strategy via Removable Drives

• How $20 and a lapsed domain allowed security pros to undermine internet integrity

• Microsoft Adds Support for Post-Quantum Algorithms in SymCrypt Library

• Tenable AI Aware provides exposure insight into AI applications, libraries and plugins

• Opus Security empowers organizations to prioritize the most critical vulnerabilities

• Poland’s Supreme Court Blocks Pegasus Spyware Probe

• Phishing Pages Delivered Through Refresh HTTP Response Header

• Critical Command Injection Flaw in Zyxel NAS Devices, Hotfixes Released for End-of-Support Products

• UK: National Crime Agency, Responsible for Fighting Cybercrime, ‘On Its Knees,’ Warns Report

• Reputation Hijacking With JamPlus: A Maneuver To Bypass Smart App Control (SAC)

• Mind the talent gap: Infosec vacancies abound, but hiring is flat

• AI In Wrong Hands: The Underground Demand for Malicious LLMs

• Tanium helps organizations automate complex tasks in real-time

• Proofpoint expands platform capabilities for broader, adaptive human-centric security controls

• Developers Beware: Lazarus Group Uses Fake Coding Tests to Spread Malware

• Cybersecurity News: Slim CD data breach, International sextortion bust, TfL mixed messages

• Ivanti fixed a maximum severity flaw in its Endpoint Management software (EPM)

• Cato Networks Expands Board of Directors with Two Industry Leaders

• Data Breach at Golf Course Management Firm KemperSports Impacts 62,000

• UK’s ICO and NCA Sign Memorandum to Boost Reporting and Resilience

• FreeBSD Issues Urgent Security Advisory for CVE-2024-43102 (CVSS 10)

• Gallup Poll Bugs Open Door to XSS Attacks

• 6 Questions to Answer Before Choosing an Identity Provider

• Saviynt Intelligence delivers identity security analytics through ML and AI capabilities

• Trellix strengthens email security with DLP capabilities

• Securing Gold : Hunting typosquatted domains during the Olympics

• New Android Spyware As TV Streaming App Steals Sensitive Data From Devices

• New RansomHub Attack Killing Kaspersky’s TDSSKiller To Disable EDR

• Open XDR vs. Native XDR: A Selection Guide for Organizations

• Experts Demonstrate How to Bypass WhatsApp View Once Feature

• P0 Security raises $15 million to govern and secure cloud access for all identities

• Ivanti Releases Urgent Security Updates for Endpoint Manager Vulnerabilities

• Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows Flaws

• Microsoft Fixes Four Actively Exploited Zero-Days

• Python Libraries Used for Malicious Purposes, (Wed, Sep 11th)

• Adobe Security Update, Multiple Vulnerabilities Patched

• Microsoft Patch Tuesday security updates for September 2024 addressed four actively exploited zero-days

• German Cyber Agency Investigating APT28 Phishing Campaign

• 1.7 million credit card records leaked by payment gateway. Cyber Security Today for Wednesday, September 11, 2024

• Ransomware attacks on financial firms in USA increased in 2024

• How to Curtail Cyber Risks in Complex Cloud Environments

• Behind the Power of the Cloud

• Unveiling Hidden APIs and Securing Vulnerabilities in the Healthcare Sector

• RansomHub Serves Up LaZagne

• India to train 5000 ‘Cyber Commandos’

• DockerSpy: Search for images on Docker Hub, extract sensitive information

• Cybersecurity is a fundamental component of patient care and safety

• Opus Security Elevates Vulnerability Management With its AI-Powered Multi-Layered Prioritization Engine

• Cybersecurity jobs available right now: September 11, 2024

• How AI and zero trust are transforming resilience strategies

• eBook: Keep assets secure after cloud migration

• ISC Stormcast For Wednesday, September 11th, 2024 https://isc.sans.edu/podcastdetail/9134, (Wed, Sep 11th)

• Microsoft says it broke some Windows 10 patching – as it fixes flaws under attack

• How SOAR Automation is Boosting MSSP Revenue Without Replacing Human Workers

• Where Do I Start With SASE Evaluations? Gartner® Report

• Microsoft September 2024 Patch Tuesday Fixes 79 Flaws, Including 4 Zero-Days

• VERT Threat Alert: September 2024 Patch Tuesday Analysis

• Bug Left Some Windows PCs Dangerously Unpatched

• IT Security News Daily Summary 2024-09-10

• Are you having the right conversations about online safety with your kids?

• Patch Tuesday for September 2024: Microsoft Catches Four Zero-Day Vulnerabilities

• Was your Social Security number leaked to the dark web? Here’s how to find out

• Ivanti Releases Security Updates for Endpoint Manager, Cloud Service Application, and Workspace Control

• BPL Medical Technologies PWS-01-BT and BPL Be Well Android Application

• Viessmann Climate Solutions SE Vitogate 300

• Quad7 botnet evolves to more stealthy tactics to evade detection

• Microsoft Says Windows Update Zero-Day Being Exploited to Undo Security Fixes

• Manufacturing, Industrial Sectors Are Under Siege

• Microsoft fixes 4 exploited zero-days and a code defect that nixed earlier security fixes

• Join us at FAIRCON24 – 10-02-24 for CISO Series Game Show

• Four zero-days included in group of 79 vulnerabilities Microsoft discloses, including one with 9.8 severity score

• Microsoft will start charging for Windows 10 updates next year. Here’s how much

• JFrog connects key software supply chain management dots

• 8 key aspects of a mobile device security audit program

• CISA Adds Four Known Exploited Vulnerabilities to Catalog

• Microsoft Releases September 2024 Security Updates

• CISA Releases Four Industrial Control Systems Advisories

• iniNet Solutions SpiderControl SCADA Web Server

• London’s transit agency drops claim it has ‘no evidence’ of customer data theft after hack

• Three years of progress on the pathway to net zero

• Microsoft September 2024 Patch Tuesday, (Tue, Sep 10th)

• Insights on Cyber Threats Targeting Users and Enterprises in Mexico

• Is Anthropic’s new ‘Workspaces’ feature the future of enterprise AI management?

• DarkCracks Malware Exploits Vulnerabilities in GLPI and WordPress Systems

• Microsoft is going to start charging for Windows 10 updates next year. Here’s how much

• Secure Network Analytics 7.5.1 – Improving Operational Efficiencies and Providing Tighter Integrations with Cisco …

• Adobe Patches Critical, Code Execution Flaws in Multiple Products

• Delinea Survey Surfaces Spike in Cybersecurity Insurance Claims

• CosmicBeetle Deploys Custom ScRansom Ransomware, Partnering with RansomHub

• Over 40,000 WordPress Sites Affected by Privilege Escalation Vulnerability Patched in Post Grid and Gutenberg Blocks Plugin

• India plans to train about 5k Cyber Commandos

• The RAMBO Attack Explained: Risks, Implications, & Mitigations for RSA Security

• Cybercriminals Ramp Up Malvertising Schemes Through Google Searches

• Adlumin Thwarts Fog Ransomware Attack Using Innovative Decoy Technology

• Highline Public Schools Forced to Close By Cyber-Attack

• Cyber-risk quantification challenges and tools that can help

• Rockwell Automation SequenceManager

• CISA Flags ICS Bugs in Baxter, Mitsubishi Products

• Thanks, Edward Snowden: You propelled China to quantum networking leadership

• Crypto scams rake in $5.6B a year for cyberscum lowlifes, FBI says

• USENIX Security ’23 – Can a Deep Learning Model for One Architecture Be Used for Others? Retargeted-Architecture Binary Code Analysis

• Continuous Threat Exposure Management: A Proactive Cybersecurity Approach

• CyberVolk Ransomware: A Rising Threat to Global Cybersecurity

• Adaptiva enables users to instantly control patch rollouts

• Tufin improves security automation on Azure, GCP, and VMware clouds

• LOKKER’s consent management solution blocks all unauthorized data collection on websites

• China-Linked Threat Actors Target Taiwan Military Industry

• Chinese Hackers Using Open Source Tools To Launch Cyber Attacks

• ChatGPT 4 can exploit 87% of one-day vulnerabilities: Is it really that impressive?

• Payment provider data breach exposes credit card information of 1.7 million customers

• Microsoft Is Disabling Default ActiveX Controls in Office 2024 to Improve Security

• Citrix Releases Security Updates for Citrix Workspace App for Windows

• Study Finds Excessive Use of Remote Access Tools in OT Environments

• Small Business, Big Threats: INE Security Launches Initiative to Train SMBs to Close a Critical Skills Gap

• How to Detect Suspicious API Traffic

• Poland Dismantles Cyber Sabotage Group Linked to Russia, Belarus

• The Slim CD Data Breach: 1.7 Million Credit Cards Compromised

• Netskope accelerates cloud networking and security operations

• The Role of VPNs in Protecting Online Privacy

• Your partner “is cheating on you” scam asks you to pay to see proof

• August 2024’s Most Wanted Malware: RansomHub Reigns Supreme While Meow Ransomware Surges

• JFrog announces new integrations with Github Copilot, Nvidia Microservices and unified ops platform

• Kimsuky-linked Hackers Use Similar Tactics to Attack Russia and South Korea

• No Ransom Demand by Rhysida Before Columbus Data Leak: City IT Chief

• Galileo delivers real-time fraud detection for fintechs, banks and businesses

• Ketch helps media brands enable privacy-safe data activation

• Join CISO Series for a Game Show at FAIRCON24 – 10-02-24

• Man Faces 20 Years in Prison for First-Ever AI Music Streaming Scam

• Top Security Flaws Hiding in Your Code Right Now and How To Fix Them

• Using Time in Your Favor During a Ransomware Attack

• Predator Spyware Roars Back with New Infrastructure, Evasive Tactics

• AI in Cybersecurity: Understanding Challenges, Opportunities and New Approaches

• Fake recruiter coding tests target devs with malicious Python packages

• Experts Identify 3 Chinese-Linked Clusters Behind Cyberattacks in Southeast Asia

• Improving Operational Efficiencies and Providing Tighter Integrations with Cisco Security Products

• Poland thwarted cyberattacks that were carried out by Russia and Belarus

• Darkhive Raises $21 Million for Drones, Secure Code Delivery System

• CISA confirms that SonicWall vulnerability is getting exploited (CVE-2024-40766)

• Chinese APT Group Abuses Visual Studio Code to Target Government in Asia

• New PIXHELL Attack Exploits Screen Noise to Exfiltrates Data from Air-Gapped Computers

• Shining a Light on Shadow Apps: The Invisible Gateway to SaaS Data Breaches

• New Chrome Zero-Day

• Risk Assessment and Gap Analysis for Industrial Control System infrastructure: the core essentials

• Looking Toward U.S. Federal Privacy Regulation, How Software Companies can Prepare

• Underground Demand for Malicious LLMs is Robust

• ‘TIDrone’ Cyberattackers Target Taiwan’s Drone Manufacturers

• Threat Assessment: Repellent Scorpius, Distributors of Cicada3301 Ransomware

• China Delegation Visits Brussels Over EV Tariffs

• Beware Of Malicious Chrome Extension That Delivers Weaponized ZIP Archive

• Researchers Details Attacks On Air-Gaps Computers To Steal Data

• Key Cyber Insurance Stakeholders Urge Government To Help Close $900B in Uncovered Risk

• Just-in-Time Access: Key Benefits for Cloud Platforms

• Our Cybersecurity Journey Starts With a Single Overworked Staffer

• CISA Issues Warning About Three Actively Exploited Vulnerabilities in the Wild

• Cybercriminals Target Latin American Banks with Mekotio, BBTok, and Grandoreiro Trojans

• Slim CD Data Breach Impacts 1.7 Million Individuals

• Mustang Panda Deploys Advanced Malware to Spy on Asia-Pacific Governments

• Cybersecurity News: Payment processing breach, dark web admins charged, Predator spyware resurges

• Moody’s Ratings: Cyber Insurance Competition Up, Prices Down

• AI-Powered Deepfake Scams Wreak Havoc on Businesses

• CISA Identifies Industrial Cybersecurity Bugs in Baxter and Mitsubishi Products

• Zyxel fixes critical command injection flaw in EOL NAS devices (CVE-2024-6342)

• DoJ Distributes $18.5m to Western Union Fraud Victims

• Huawei Launches World’s First Double-Hinged Smartphone

• Why developers, GraphRAG, and Open Source Should be Core to Your GenAI strategy

• PoC Exploit Releases for Windows Elevation of Privilege Vulnerability (CVE-2024-26230)

• Homeland Security Hopes to Scuttle Maritime Cyber-Threats

• Seventh Sense Unveils Revolutionary Privacy-Preserving Face-Based Public Key Infrastructure and eID Solution

• Critical SonicWall SSLVPN Bug Exploited By Ransomware Actors

• China Says New Dutch Chip Export Rules Result Of ‘Coercion’

• X Updates Grok AI Chatbot Over Election Misinformation

• WhatsApp’s “View Once” Feature Flaw Exploited in the Wild

• High School in London Forced to Sends Students Home Following Ransomware Attack

• Want to keep getting Windows 10 updates next year? Here’s what it will cost

• SOX Compliance in the Age of Cyber Threats

• U.S. CISA adds SonicWall SonicOS, ImageMagick and Linux Kernel bugs to its Known Exploited Vulnerabilities catalog

• The Biggest Cyber Warfare Attacks in Global Geopolitics

• Strengthening Healthcare Cybersecurity: Lessons from Recent Supplier Attacks

• CAMO Unveiled: How Cybercriminals Exploit Legitimate Software for Stealthy Attacks

• Musician Charged With $10M Streaming Royalties Fraud Using AI and Bots

• iPhone 16 Gets Generative AI, Siri Upgrade

• Threat Actors Allegedly Claiming Leak of Capgemini Data

• Huntress launches Managed SIEM, eliminating the complexity of traditional SIEMs

• Ransomware attack makes school children go home and Veeam Backup Vulnerability

• Understanding the Differences Between Password Management and Passkeys

• Electronic payment gateway Slim CD disclosed a data breach impacting 1.7M individuals

• Thanks, Edward Snowden: you propelled China to quantum networking leadership

• Legal Impact of GDPR Data Policy Violations

• Free SaaS Pulse tool from Wing Security enhances SaaS security posture

• Most Common Cybersecurity Threats to Avoid!

• Payment Gateway Breach Exposes 1.7 Million Customers

• Tech stack uniformity has become a systemic vulnerability

• How human-led threat hunting complements automation in detecting cyber threats

• ISC Stormcast For Tuesday, September 10th, 2024 https://isc.sans.edu/podcastdetail/9132, (Tue, Sep 10th)

• 33 open-source cybersecurity solutions you didn’t know you needed

• Singapore moots legislation to outlaw use of deepfakes during elections

• Poland’s Cybersecurity Experts Foil Russian and Belarussian Attacks

• Eclypsium Product Roadmap

Generated on 2024-09-11 23:55:10.934250