IT Security News Daily Summary 2024-09-16

• Elon Musk Is a National Security Risk

• US government expands sanctions against spyware maker Intellexa

• CISA Releases Plan to Align Operational Cybersecurity Priorities for Federal Agencies

• The empire of C++ strikes back with Safe C++ blueprint

• NordPass Review (2024): Is it a Safe Password Manager?

• D-Link addressed three critical RCE in wireless router models

• Unveiling Venezuela’s Repression: Surveillance and Censorship Following July’s Presidential Election

• Apple Patches Major Security Flaws with iOS 18 Refresh

• A Personally Identifiable Cyber Jihadist Domain Portfolio

• After CrowdStrike Crash, Microsoft Mulls New Windows Security Tools

• CISO Series Podcast LIVE at Stanford University (10-17-24)

• Methodology for incident response on generative AI workloads

• Tile Trackers now include an SOS feature – here’s how they compare with Apple’s AirTags

• Point Product vs. CDN for Bot Protection: Striking the Right Balance

• RansomHub Ransomware Gang Leaks 487GB of Alleged Kawasaki Europe Data

• Crypto Mining and DDoS Threats: How Hadooken Malware Targets Oracle Web Logic Servers

• The best travel VPNs of 2024: Expert tested and reviewed

• Windows spoofing flaw exploited in earlier zero-day attacks

• Deployment considerations for Red Hat OpenShift Confidential Containers solution

• How Red Hat is integrating post-quantum cryptography into our products

• Cursor’s Magic Comes with a Catch: The Trust Setting You’re Missing

• Snowflake slams ‘more MFA’ button again – months after Ticketmaster, Santander breaches

• SecurityWeek to Host 2024 Attack Surface Management Summit on Wednesday

• Is Google Spying on You? EU Investigates AI Data Privacy Concerns

• Rhysida Ransomware Hits Seattle Port in August Attack

• Create security observability using generative AI with Security Lake and Amazon Q in QuickSight

• Google Enhances Data Security with Confidential Computing Technology

• DuckDuckGo Joins AI Chat, Promises Enhanced Anonymity

• Apple’s New Passwords App May Solve Your Login Nightmares

• U.S. government expands sanctions against spyware maker Intellexa

• The Climate Has a Posse – And So Does Political Satire

• EasyDMARC Lands $20M for Email Security Authentication Tech

• Five Tools That Can Help Organizations Combat AI-powered Deception

• Apple Seeks to Drop Its Lawsuit Against Spyware Maker NSO

• Preventing Credit Card Fraud in 2024: Tips to Avoid Declined Transactions and Fraud Alerts

• Vulnerability Recap 9/16/24 – Critical Endpoint Flaws Emerged

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• Forward as One: Embracing the Future of Partnering with Cisco

• Recently patched Windows flaw CVE-2024-43461 was actively exploited as a zero-day before July 2024

• Legacy Ivanti Cloud Service Appliance Being Exploited

• Germany’s CDU still struggling to restore data months after June cyberattack

• DORA Compliance Checklist: From Preparation to Implementation

• Why Are So Many Public Sector Organizations Getting Attacked?

• Vulnerability Summary for the Week of September 9, 2024

• Half of UK Firms Lack Basic Cybersecurity Skills

• White House to Tackle AI-Generated Sexual Abuse Images

• Flare’s FTSOv2 Launch Sets A New Standard For Decentralized Data

• Obfuscation vs Encryption: How To Protect Your .NET Code the Right Way

• AI and Cyber Security: Innovations & Challenges

• How to Create & Implement a Cloud Security Policy

• FBI, CISA Warn of Fake Voter Data Hacking Claims

• BT Uncovers 2,000 Potential Cyberattacks Signals Every Second

• ICBC London Branch Hit by Ransomware Attack, Hackers Steal 6.6TB of Sensitive Data

• Sourcepoint helps companies mitigate vulnerabilities across various privacy regulations

• Advanced Phishing Attacks Put X Accounts at Risk

• Introducing the APRA CPS 230 AWS Workbook for Australian financial services customers

• The Curious Case Of MutantBedrog’s Trusted-Types CSP Bypass

• Critical Vulnerabilities Impact Million of D-Link Routers, Patch Now!

• 23andMe to pay $30 million in settlement over 2023 data breach

• Hispanic Heritage Month Spotlight: Bill Diaz

• Entro Security Labs Releases Non-Human Identities Research Security Advisory

• North Korean Hackers Target Cryptocurrency Users on LinkedIn with RustDoor Malware

• Google Fixes GCP Composer Flaw That Could’ve Led to Remote Code Execution

• Modernizing Enterprise Security for An Application-Centric World

• Windows MSHTML Zero-Day Vulnerability Exploited In The Wild

• Microsoft confirms second 0-day exploited by Void Banshee APT (CVE-2024-43461)

• DeltaPrime Suffers $5.98M Loss as Hacker Exploits Admin Key on Arbitrum

• Prison just got rougher as band of heinously violent cybercrims sentenced to lengthy stints

• Master Your PCI DSS v4 Compliance with Innovative Smart Approvals

• From Breach to Recovery: Designing an Identity-Focused Incident Response Playbook

• Medusa Ransomware Exploiting Fortinet Flaw For Sophisticated Ransomware Attacks

• Azure API Management Vulnerability Let Attackers Escalate Privileges

• SolarWinds fixed critical RCE CVE-2024-28991 in Access Rights Manager

• Microsoft Says Recent Windows Vulnerability Exploited as Zero-Day

• Unlock FCC Pilot Program Funding with Cloud Monitor and Content Filter

• Uber To Offer Waymo Robotaxi Rides In Austin, Atlanta

• Brazil Unfreezes Starlink, X Bank Accounts After Funds Transfer

• Largest Crypto Exchange in Indonesia Suffers $22 Million Theft

• Apple to Drop Spyware Lawsuit Over Security Concerns

• Microsoft September Patch Tuesday Patched 4 Zero-Day Flaws

• Hackers Can Bypass WhatsApp ‘View Once’ Due To Feature Vulnerability

• Spring Framework Vulnerability Let Attackers obtain Any Files from the System

• Apple dismisses lawsuit against surveillance firm NSO Group due to risk of threat intelligence exposure

• Hackers Target Selenium Grid Servers for Proxyjacking and Cryptomining Attacks

• US Port Security Threatened by Chinese-Made Cranes, Says House Report

• North Korean Hackers Attacking Crypto Industry, Billions at Risk

• Cloud Access Security Broker Policy

• Hacker Claims Breach of UK’s Experience Engine, Data Sold Online

• Is your Windows license legal? Should you even care?

• Windows Vulnerability Abused Braille “Spaces” in Zero-Day Attacks

• Cybersecurity News: Fortinet breach, RansomHub extorts Kawasaki, TfL password resets

• US House Passes Bill Targeting Chinese EV Battery Tech

• GenAI Shopping: Revolutionising Retail Experiences

• Cyber Threats Intensify in Mexico; Espionage and Extortion Risks Grow

• Ivanti CSA Vulnerability Exploited in Attacks Days After DIsclosure

• Industry Moves for the week of September 16, 2024 – SecurityWeek

• SolarWinds Patches Critical Vulnerability in Access Rights Manager

• Meta Goes Ahead With Controversial AI Training in UK

• NASA Mission To Jupiter’s Europa Gets Go-Ahead

• CISA Urges Agencies to Upgrade or Remove End-of-Life Ivanti Appliance

• Navigating the Cloud Chaos: 2024’s Top Threats Revealed

• Mitigating Alert Fatigue in SecOps Teams

• Applications are Open for IoT Device Cyber Certifiers

• China’s quantum* crypto tech may be unhackable, but it’s hardly a secret

• SOC 2 Compliance Provides AppViewX Customers Security and Data Protection Assurance

• Musk Calls Australia ‘Fascists’ Over Social Media Regulation

• Stephen Fry Calls X, Meta Cultural ‘Polluters’

• Police Arrest Youth Over London Transport Hack

• Crimson Palace Returns With New Hacking Tolls And Tactics

• Is Microsoft really going to cut off security updates for your ‘unsupported’ Windows 11 PC?

• Hacker tricked ChatGPT into providing detailed instructions to make a homemade bomb

• Python Libraries Exploited for Malicious Intent

• Aembit Raises $25M to Tackle Nonhuman Identity Security Challenges

• Apple Drops Spyware Case Against NSO Group, Citing Risk of Threat Intelligence Exposure

• 23andMe Agrees to $30m Data Breach Settlement

• A week in security (September 9 – September 15)

• The Rise of AI Voicemail Scams, Political Donation Privacy Concerns

• UK Hosts International Cyber Skills Conference

• Managing PE Files With Overlays, (Mon, Sep 16th)

• Microsoft Windows 10 support end and Crowdstrike Global Outage details

• Benefits of Using Blockchain in Cybersecurity

• Hunters International Claims Breach of ICBC London

• Fortinet experiences another major breech with hacker claiming 440 GB of data stolen. Cyber Security Today for Monday, September 16, 2024

• Researchers Discover New Variant of TrickMo Banking Trojan

• EchoStrike: Generate undetectable reverse shells, perform process injection

• Cybercriminals Exploit HTTP Headers for Credential Theft via Large-Scale Phishing Attacks

• New Environmental Policies and Practices Raise Unexpected Cybersecurity Challenges

• U.S. Tax Reform Can Fuel AI and Cybersecurity Innovation

• The ripple effects of regulatory actions on CISO reporting

• Compliance frameworks and GenAI: The Wild West of security standards

• 23andMe settles class-action breach lawsuit for $30 million

• eBook: Navigating compliance with a security-first approach

• Trends and dangers in open-source software dependencies

• ISC Stormcast For Monday, September 16th, 2024 https://isc.sans.edu/podcastdetail/9138, (Mon, Sep 16th)

• IT Security News Weekly Summary – Week 37

• IT Security News Daily Summary 2024-09-15

• USENIX Security ’23 – Multiview: Finding Blind Spots in Access-Deny Issues Diagnosis

• Fortifying The Digital Frontier: Everyday Habits That Shape Your Company’s Cybersecurity Posture

• YARA-X’s Dump Command, (Sun, Sep 15th)

• Port of Seattle shares ransomware attack details

• Ford’s Latest Patent: A Step Toward High-Tech Advertising or Privacy Invasion?

• TrickMo Android Trojan Abuses Accessibility Services for On-Device Financial Scam

• Combating Telecom Fraud: Trai and DoT’s Joint Effort Against Spam Calls

• Port of Seattle confirmed that Rhysida ransomware gang was behind the August attack

• Global Cybercrime Syndicate Falls in Singapore’s Largest-Ever Police Raid

• Florida Healthcare Data Leak Exposes Thousands of Doctors and Hospitals

• SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 11

• Week in review: Veeam Backup & Replication RCE could soon be exploited, Microsoft fixes 4 0-days

• Games Box – 1,439,354 breached accounts

• Security Affairs newsletter Round 489 by Pierluigi Paganini – INTERNATIONAL EDITION

• Upcoming Speaking Engagements

Generated on 2024-09-16 23:55:07.972824