IT Security News Daily Summary 2024-09-14

• CosmicBeetle joins the ranks of RansomHub affiliates – Week in security with Tony Anscombe

• USENIX Security ’23 – On the Feasibility of Malware Unpacking via Hardware-assisted Loop Profiling

• RansomHub Ransomware: Exploiting Trusted Tools to Evade Detection

• U.S. CISA adds Ivanti Cloud Services Appliance Vulnerability to its Known Exploited Vulnerabilities catalog

• Ransomware Actors Refused to Provide Decryptor Even After Recieving Ransom Payment

• London’s Transit System Suffers Through Prolonged Cyberattack; Data Security a Concern

• Cryptocurrency Scams Surge in 2023, FBI Reports Record $5.6 Billion in Losses

• A Creative Trick Makes ChatGPT Spit Out Bomb-Making Instructions

• A new path for Kyber on the web

• NoName Hackers Use RansomHub in Recent Cyber Campaigns

• Ivanti Cloud Service Appliance flaw is being actively exploited in the wild

• Security News This Week: A Creative Trick Makes ChatGPT Spit Out Bomb-Making Instructions

• GitLab Warns of Critical Pipeline Execution Vulnerability

• How an Asset Inventory Improves The Five Essential Steps of a Risk Management Program

• Fileless Remcos RAT Campaign Leverages CVE-2017-0199 Flaw

• SquareX: The Future of BYOD Security for Enterprises

• The Role of Governance, Risk, and Compliance in Modern Cybersecurity Programs

• Chinese-Made Port Cranes in US Included ‘Backdoor’ Modems, House Report Says

• Innovator Spotlight: Cymulate

• Innovator Spotlight: Illumio

• Innovator Spotlight: Fortanix

• Organizations Can’t Afford to Ignore the Security Risks of Proximity Technology

• Citrix Workspace App Users Urged to Update Following Two Privilege Escalation Flaws

• Update: Protecting Against RCE Attacks Abusing WhatsUp Gold Vulnerabilities

• New Vo1d Malware Infects 1.3 Million Android Streaming Boxes

• Targeted Campaigns in Retail Sector Involve Domain Fraud, Brand Impersonation, and Ponzi Schemes

• Hackers Have Sights Set on Four Microsoft Vulnerabilities, CISA Warns

• Cyber Security Today Week in Review for September 14, 2024

• GitLab fixed a critical flaw in GitLab CE and GitLab EE

• Ivanti Warns of Active Exploitation of Newly Patched Cloud Appliance Vulnerability

• Kubernetes attacks are growing: Why real-time threat detection is the answer for enterprises

• CVE-2024-28986 – SolarWinds Web Help Desk Security Vulnerability – August 2024

• Fortinet confirms data breach, extortion demand

• IT Security News Daily Summary 2024-09-13

• Antivirus vs. Anti-Malware: Which One Do I Need?

• Microsoft’s Windows Agent Arena: Teaching AI assistants to navigate your PC

• Friday Squid Blogging: Squid as a Legislative Negotiating Tactic

• Apple Suddenly Drops NSO Group Spyware Lawsuit

• Setting Up Secure Data Lakes for Starlight Financial: A Guide to AWS Implementation

• Your data is under siege. How to protect your data and privacy.

• At Microsoft’s security summit, experts debated how to prevent another global IT meltdown. Will it help?

• The Role of Leadership in Cultivating a Resilient Cybersecurity Team

• New Office of the CISO Paper: Organizing Security for Digital Transformation

• Fundamentals of GraphQL-specific attacks

• 2024-09-12 – Approximately 11 days of server scans and probes

• Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel

• CVE-2024-29847 Deep Dive: Ivanti Endpoint Manager AgentPortal Deserialization of Untrusted Data Remote Code Execution Vulnerability

• USENIX Security ’23 – Security Analysis of MongoDB Queryable Encryption

• Randall Munroe’s XKCD ‘Monocaster’

• Podcast: Empowering organizations to address their digital sovereignty requirements with AWS

• Evolution of Fueling Partner Success

• Try the New Security Sandbox for Cisco Defense Orchestrator

• New Linux malware called Hadooken targets Oracle WebLogic servers

• NextNav’s Callous Land-Grab to Privatize 900 MHz

• Feeld dating app’s security too open-minded as private data swings into public view

• Payment Gateway Slim CD Reports Major Data Breach Affecting 1.7 Million Users

• How to Protect Your Accounts from 2FA Vulnerabilities: Avoid Common Security Pitfalls

• Ford seeks patent for conversation-based advertising

• 5 Steps to Building a Robust Cyber Resilience Framework

• Ivanti Releases Security Update for Cloud Services Appliance

• Veeam Software Issues Fixes for Exploitable Security Flaws

• Ransomware attacks are driving up costs to millions of dollars for schools and educational institutions

• 10 Cybersecurity Measures That Experts Follow (and You Should, Too!)

• New Android Malware Ajina.Banker Steals 2FA Codes, Spreads via Telegram

• The Critical Role of Data at Rest Encryption in Cybersecurity

• iPhone 16 better thwarts hackers who use the camera or microphone to spy on you

• ‘Terrorgram’ Charges Show US Has Had Tools to Crack Down on Far-Right Terrorism All Along

• AI in Cybersecurity: Experts Discuss Opportunities, Misconceptions and the Path Forward

• Fortinet confirms customer data breach

• Critical Severity Flaw Exposes Siemens Industrial Systems

• Election Sabotage via Cyberattacks Increases

• Hackers Use SonicWall Security Flaw in Ransomware Attacks

• Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers

• Finding Honeypot Data Clusters Using DBSCAN: Part 2, (Fri, Sep 13th)

• Akamai Prevents Record-Breaking DDoS Attack on Major U.S. Customer

• Akamai?s Perspective on September?s Patch Tuesday 2024

• Announcing the 11th Annual Flare-On Challenge

• Kali Linux 2024.3 Released With New Hacking Tools

• What can businesses learn from the rise of cyber espionage?

• CISA Releases Analysis of FY23 Risk and Vulnerability Assessments

• Lehigh Valley Health Network hospital network has agreed to a $65 million settlement after data breach

• Navigating the Leap: My Journey from Software Engineering to Offensive Security

• Fake Recruiter Coding Tests Target Developers With Malicious Python Packages

• SolarWinds Reveals RCE Flaw in Access Rights Manager

• Top 5 Vulnerability Management Mistakes Companies Make (Plus a Bonus Mistake to Avoid)

• 17-Year-Old Arrested in Connection with Cyber Attack Affecting Transport for London

• Malicious Actors Spreading False US Voter Registration Breach Claims

• Reduce risks of user sign-up fraud and SMS pumping with Amazon Cognito user pools

• BT Identifies 2,000 Potential Cyberattacks Signals Every Second

• Putting AI Into AIOps: A Future Beyond Dashboards

• Update: Hackers Target Apache OFBiz RCE Flaw CVE-2024-45195 After PoC Exploit Released

• In Other News: Possible Adobe Reader Zero-Day, Hijacking Mobi TLD, WhatsApp View Once Exploit

• Finding Honeypot Data Clusters Using DBSCAN: Part 2, (Fri, Aug 23rd)

• Chinese-speaking Hackers Linked to DragonRank SEO Manipulator Service

• Tips for Detecting and Preventing Multi-Channel Impersonation Attacks

• CMA Cites Higher Prices Post Vodafone, Three Merger, Demands Changes

• The Dark Nexus Between Harm Groups and ‘The Com’

• Iranian APT Hackers Target Iraqi Government in New Espionage Campaign

• Two Critical RCE Flaws Discovered in Docker Desktop

• Progress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw

• TrickMo Android Trojan Exploits Accessibility Services for On-Device Banking Fraud

• Say Goodbye to Phishing: Must-Haves to Eliminate Credential Theft

• Record $65m Settlement for Hacked Patient Photos

• Microsoft Cuts Hundreds Of Gaming Staff

• Hacker Tricks ChatGPT to Get Details for Making Homemade Bombs

• New Linux Malware “Hadooken’ Targets Oracle WebLogic Applications

• Adobe Completes Fix for Reader Bug with Known PoC Exploit

• New ‘Hadooken’ Linux Malware Targets WebLogic Servers

• Realm.Security Emerges to Tackle Cybersecurity Data Management

• PREVIEW: CISO Series Podcast LIVE in Boca Raton, FL 9-21-24

• MSSPs – Why You Need a SOC Product And How to Choose the Right One

• Citrix Workspace App Vulnerable to Privilege Escalation Attacks

• Keeper Security Expands Passphrase Generator Capability to Mobile Devices

• Vo1d malware infected 1.3 Million Android-based TV Boxes in 197 countries

• Real-Time Cyberattack Simulations Take Centre Stage at International Cyber Expo 2024 with CrisisCast

• 1.3 Million Android TV Boxes Infected by Vo1d Malware

• Cyber Security in Banking: Threats, Solutions & Best Practices

• Microsoft Vows to Prevent Future CrowdStrike-Like Outages

• Cybersecurity News: Lazarus spoofs CapitalOne, Mastercard buys RecordedFuture, WordPress imposes 2FA

• Beware Of Weaponized Excel Document That Delivers Fileless Remcos RAT

• GitLab Updates Resolve Critical Pipeline Execution Vulnerability

• Why Windows 11 Requires a TPM and How It Enhances Security

• Rain Technology protects consumers against visual hackers and snoopers at ATM terminals

• Hackers gain access to credit card details of approximately 1.7 million people in USA and Canada

• Hackers Exploiting Apache OFBiz RCE Vulnerability in the Wild

• Live Patching as a Growth Enabler for Your Infrastructure

• Nudge Security unveils SSPM capabilities to strengthen SaaS security

• From Open Networks to Zero Trust: A Paradigm Shift

• Docker Desktop Vulnerabilities Let Attackers Execute Remote Code

• Cybersecurity Compliance and Beyond: How Protocols Drive Innovation and Growth

• How Secure is the “Password Protection” on Your Files and Drives?

• 20 dollars exposes a huge flaw in Internet security: Cyber Security Today for Friday the 13th September, 2024

• Mastercard acquires Cyber Threat Intelligence firm Recorded Future for $2.58 Billion

• Is Your Business Ready for the Quantum Cybersecurity Threat?

• Cambodian senator sanctioned by US over alleged forced labor cyber-scam camps

• Why Breaking into Cybersecurity Isn’t as Easy as You Think

• New Linux Malware Campaign Exploits Oracle Weblogic to Mine Cryptocurrency

• Fortinet Confirms Data Breach Following Hacker’s Claim of 440GB Data Theft

• Android TV Box Malware, Vo1d, Infects Over a Million Devices Worldwide

• Fortinet Confirms Data Breach

• Australia’s government spent the week boxing Big Tech

• How to make Infrastructure as Code secure by default

• Application Security — The Complete Guide

• Cyber insurance set for explosive growth

• Organizations still don’t know how to handle non-human identities

• Security measures fail to keep up with rising email attacks

• SquareX, Awarded Rising Star Category in CybersecAsia Readers’ Choice Awards 2024

• Comprehensive Guide to Infrastructure Robustness Metrics

• New infosec products of the week: September 13, 2024

• ISC Stormcast For Friday, September 13th, 2024 https://isc.sans.edu/podcastdetail/9136, (Fri, Sep 13th)

• Feds pull plug on domains linked to import of Chinese gun conversion devices

• The US is Preparing Criminal Charges in Iran Hack Targeting Trump, AP Sources Say

• ‘Hadooken’ Linux malware targets Oracle WebLogic servers

• Fortinet admits miscreant got hold of customer data in the cloud

Generated on 2024-09-14 23:55:08.490265