IT Security News Daily Summary 2024-09-18

• Gleaming Pisces Poisoned Python Packages Campaign Delivers PondRAT Linux and MacOS Backdoors

• Fal.Con 2024: CrowdStrike unveils resilient-by-design framework to bolster global cybersecurity

• Deja blues… LockBit boasts once again of ransoming IRS-authorized eFile.com

• FBI boss says China ‘burned down’ 260,000-device botnet when confronted by Feds

• AT&T to Pay $13 Million to Settle FCC Case of 2023 Data Breach

• Webroot SecureAnywhere Internet Security Ranks #1 Among 8 Competitors for Overall Performance

• Experts warn of China-linked APT’s Raptor Train IoT Botnet

• Putin really wants Trump back in the White House

• LockBit boasts of ransoming IRS-authorized eFile.com

• Global Crime Hit as Europol Shuts Down Encrypted Chat App Ghost

• Singapore mandates face authentication for ‘higher risk’ bank transactions

• US government ‘took control’ of a botnet run by Chinese government hackers, says FBI director

• FBI Disrupts Another Massive Chinese-Linked Botnet

• Refine unused access using IAM Access Analyzer recommendations

• Securing Your Enterprise With an Identity-First Security Strategy

• Lebanon now hit with deadly walkie-talkie blasts as Israel declares ‘new phase’ of war

• Pulumi Adds Cloud Security Intelligence Tool to Portfolio

• 23andMe Agrees to $30 Million Settlement Over Data Breach Impacting 6.9 Million Customers

• Microsoft’s Hiring Of Inflection AI Staff Does Not Meet EU Merger Thresholds

• Censys Uncovers Hidden Infrastructure of Iranian Fox Kitten Group

• Senate Vote Tomorrow Could Give Helping Hand To Patent Trolls

• Chinese spies spent months inside aerospace engineering firm’s network via legacy IT

• Chinese Spies Built Massive Botnet of IoT Devices to Target US, Taiwan Military

• E2EE is MIA in iPhone/Android Chat — GSMA Gonna Fix it

• New “Raptor Train” IoT Botnet Compromises Over 200,000 Devices Worldwide

• Rising Threat of Ransomware Targeting Cloud Services

• US To Host International Network of AI Safety Institutes In November

• Google Urges London Tribunal To Dismiss Mass Lawsuit

• Walmart customers scammed via fake shopping lists, threatened with arrest

• Two-Thirds of Security Leaders Consider Banning AI-Generated Code, Report Finds

• Walkie-Talkies Explode in New Attack on Hezbollah

• CISA Adds Five Known Exploited Vulnerabilities to Catalog

• Apple Releases Security Updates for Multiple Products

• U.S. government ‘took control’ of a botnet run by Chinese government hackers, says FBI director

• Critical Infrastructure at Risk From Email Security Breaches

• Using Amazon Detective for IAM investigations

• Server Misconfiguration at Fuel Industry Software Provider Exposes SSNs, PII Data

• Nobody Cares About Security

• What is email spam and how to fight it?

• The best secure browsers for privacy in 2024: Expert tested

• Windows MSHTML Platform Spoofing Vulnerability Exploited as Zero-Day

• The Perils of Settling: Why ‘Good Enough’ Fails in Modern Cybersecurity

• SecurityWeek to Host 2024 Attack Surface Management Summit Today

• North Korean Group Uses Fake Job Offers to Target Energy, Aerospace Sectors

• Here’s How to Remove Malware From Your Chromebook

• Six Hackers Linked to Worldwide Cyber Attacks Arrested in Singapore

• Kawasaki Motors Europe Targeted by RansomHub Ransomware Attack

• E-commerce Threat: The WooCommerce Skimming Attacks

• Chinese Engineer Charged in U.S. for Years-Long Cyber Espionage Targeting NASA and Military

• Google Street View Images Used For Extortion Scams

• Qualcomm Loses Appeal Over EU Antitrust Fine

• LibreOffice Repair Mode Vulnerability Let Attackers Mark the Document as Not Valid

• Ransomware Groups Abusing Azure Storage Explorer For Stealing Data

• Exploiting Windows MiniFilter to Bypass EDR Protection

• Cybersecurity risks in healthcare are an ongoing crisis

• Scam ‘Funeral Streaming’ Groups Thrive on Facebook

• Credential Flusher, understanding the threat and how to protect your login data

• The Rising Cost of Vulnerable APIs and Bot Attacks – A $186 Billion Wake-Up Call for Businesses

• 10 Best Attack Surface Management Tools

• Post-Quantum Cryptography: The Future of Secure Communications and the Role of Standards

• Hackers breaching construction firms via specialized accounting software

• Snapchat wants to put your AI-generated face in its ads

• Check Point SASE: Triple Threat Protection for the New Perimeter

• Orca: AI services, models falling short on security

• CREST CAMP: A Catalyst for Global Cyber Security Growth

• Unveiling Venezuela’s Repression: A Legacy of State Surveillance and Control

• SpyCloud Unveils Massive Scale of Identity Exposure Due to Infostealers, Highlighting Need for Advanced Cybersecurity Measures

• Analysis Identifies Web Servers as Weakest Cybersecurity Link

• Komodor Klaudia identifies the root cause of issues in Kubernetes

• PREVIEW: CISO Series Game Show LIVE in Washington, DC 10-2-24

• Get to know Amazon GuardDuty Runtime Monitoring for Amazon EC2

• Microsoft Windows Kernel Vulnerability Exploited in the Wild

• UNC2970 Hackers Attacking Job Seekers Using Weaponized PDF Reader

• Routed Optical Networking Continues to Transform the Industry

• Sandbox scores are not an antivirus replacement

• Cops across the world arrest 51 in orchestrated takedown of Ghost crime platform

• Australian Police Infiltrate Encrypted Messaging App Ghost and Arrest Dozens

• Ghost: Criminal communication platform compromised, dismantled by international law enforcement

• Why Pay A Pentester?

• Vulnerabilities in Cellular Packet Cores Part IV: Authentication

• Meta Bans Russian State Media Networks

• EU Court Rules Google’s €1.49bn Fine Should Be Annulled

• Discord Announces End-to-End Encryption for Audio & Video Chats

• U.S. Treasury issued fresh sanctions against entities linked to the Intellexa Consortium

• CISA Urges Software Developers to Weed Out XSS Vulnerabilities

• Red Hat OpenShift Receives Patches for Two Critical Flaws

• INE Security Wins 2024 SC Excellence Award

• Critical VMware vCenter Server bugs fixed (CVE-2024-38812)

• Fivetran Hybrid Deployment keeps sensitive data within the customer’s environment

• North Korean Hackers Target Energy and Aerospace Industries with New MISTPEN Malware

• Problems in the Parking Lot: Threat Actors Use IRL Quishing to Target Travelers

• Uber launches new rider verification program as a safety measure for drivers across the US

• Build Your Network Skills With the 2024 Network Fundamentals Bundle — Only $39.99

• Exotic SambaSpy is now dancing with Italian users

• US Indicts Chinese National for Phishing for NASA Tech

• Data Theft Risk in Salesforce by Manipulating Public Links

• Valid Accounts Remain Top Access Point for Critical Infrastructure Attacks, Officials Say

• Construction Companies Potentially Vulnerable Through Accounting Software

• Russian Security Firm Doctor Web Hacked

• PlainID introduces identity security for Zscaler

• Rapid7 launches Vector Command for continuous red teaming and security gap identification

• Europol Taskforce Disrupts Global Criminal Network Through Supply Chain Attack

• Cybersecurity News: Exploding pager analysis, construction company vulnerability, cyberattack job loss

• Apple released iOS 18, check out the new features

• RAMBO Attack: Electromagnetic Waves Steal Data from Air-Gapped Systems

• Threat Actor Allegedly Selling Bharat Petroleum Database

• The Role of Zero Trust Architecture in Enhancing SSO Security

• NESA Standard Ensures Security of UAE’s Cyberspace

• Critical Flaws Found in VICIdial Contact Center Suite, PoC Published

• Despite Russia warnings, Western critical infrastructure remains unprepared

• Intezer raises $33 million to further develop its AI-based security operations solution

• Verimatrix XTD Network Monitoring provides real-time detection of malicious activities

• Chrome Introduces One-Time Permissions and Enhanced Safety Check for Safer Browsing

• AT&T Agrees $13m FCC Settlement Over Cloud Data Breach

• Python Infostealer Patching Windows Exodus App, (Wed, Sep 18th)

• VMware vCenter Server Vulnerability Let Attackers Escalate Privileges

• Chrome 129 Released with Fix for Multiple Security Vulnerabilities

• Did a Chinese University Hacking Competition Target a Real Victim?

• Broadcom fixed Critical VMware vCenter Server flaw CVE-2024-38812

• Cyware Joins Coalition for Secure AI (CoSAI) to Advance Safe and Ethical AI Technologies

• Deadly Pager Explosions in Lebanon Linked to Possible Supply Chain Attack

• Apache Flaw: High Severity Vulnerability Fix Via Update

• Building a Secure Linux Environment for Enterprise Applications

• Hydden raises $4.4 million to improve identity security

• CISA Issues Advice to Help Eliminate XSS Bugs

• Big Tech Prioritizes Security with Zuckerberg at the Helm

• GSMA Plans End-to-End Encryption for Cross-Platform RCS Messaging

• London Transport requires in person password validation for 30,000 employees, Cyber Security Today for Wednesday, September 18, 2024

• Binance issues malware threat to Bitcoins users

• What to do if a Ransomware Decryptor Doesn’t Work Even After Paying the Ransom

• Patch Issued for Critical VMware vCenter Flaw Allowing Remote Code Execution

• Fair Ball or Foul Play?  EU’s Digital Markets Act Puts App Security on Shaky Ground

• CrowdSec: Open-source security solution offering crowdsourced protection

• Cybersecurity jobs available right now: September 18, 2024

• The proliferation of non-human identities

• Detecting vulnerable code in software dependencies is more complex than it seems

• Australian Police conducted supply chain attack on criminal collaborationware

• Organizations overwhelmed by numerous and insecure remote access tools

• ISC Stormcast For Wednesday, September 18th, 2024 https://isc.sans.edu/podcastdetail/9142, (Wed, Sep 18th)

• The New U.S. House Version of KOSA Doesn’t Fix Its Biggest Problems

• WhatsApp fix to make View Once chats actually disappear is beaten in less than a week

• Remote attack on pagers used by Hezbollah caused 9 deaths and thousands of injuries

• Data Detection & Response (DDR): Not the Dance Revolution It Claims

• VMware patches remote make-me-root holes in vCenter Server, Cloud Foundation

• Hundreds of Pagers Exploded in Lebanon and Syria in a Deadly Attack. Here’s What We Know.

• IT Security News Daily Summary 2024-09-17

• 2024-09-16 – Snake KeyLogger (VIP Recovery) infection, SMTP exfil

• 2024-09-17 – Snake KeyLogger (VIP Recovery) infection, FTP exfil

• Discord launches end-to-end encrypted voice and video chats

• VMware patches over remote make-me-root holes in vCenter Server, Cloud Foundation

• AI and Technical Debt: Balancing Innovation and Sustainability

• The best AirTag wallets of 2024: Expert tested

• Lebanon: At least nine dead, thousands hurt after Hezbollah pagers explode

• Google Cloud Document AI flaw (still) allows data theft despite bounty payout

• USENIX NSDI ’24 – Fast Vector Query Processing for Large Datasets Beyond GPU Memory with Reordered Pipelining

• Did ChatGPT just message you? Relax – it’s a bug, not a feature (for now)

• WordPress To Require Two-Factor Authentication for Plugin Developers

• The Mystery of Hezbollah’s Deadly Exploding Pagers

• KOSA’s Online Censorship Threatens Abortion Access

• At least nine dead, thousands hurt in Lebanon after Hezbollah pagers explode

• VMware Patches Remote Code Execution Flaw Found in Chinese Hacking Contest

• Avoiding The “No Responsibility” Cloud Security Model

• Part 1: Can Just Anyone Access Your ServiceNow Articles?

• Part 2: Can Just Anyone Access Your ServiceNow Articles?

• Randall Munroe’s XKCD ‘Craters’

• GPU Hosting and Open Source AI Will Revolutionize or Kill WordPress

• Hezbollah claims dozens dead as its pagers go boom, not beep

• 80% of Critical National Infrastructure Companies Experienced an Email Security Breach in Last Year

• The Mystery of Hezbollah’s Deadly Exploding Pagers

• Port of Seattle Battles Ransomware Attack, Refuses to Pay

• Fortinet Confirms Data Breach Involving Limited Number of Customers, Linked to Hacker “Fortibitch”

• Global telcos pledge to adopt responsible AI guidelines

• Australian IT Spending to Surge in 2025: Cybersecurity & AI Focus

• Rhysida ransomware gang ships off Port of Seattle data for $6M

• Intezer Raises $33M to Extend AI-Powered SOC Platform

• Cyber attack on Telecom companies triggers explosions of Pagers in Lebanon

• 2024-09-16 – Snake KeyLogger activity

• Yokogawa Dual-redundant Platform for Computer (PC2CKM)

• CISA Adds Four Known Exploited Vulnerabilities to Catalog

• Remotely Exploding Pagers

• How to Scale Your MSP from a Firm That Grew Revenue 440%

• How MSPs Can Use the ‘Four Kinds of Luck’ to Succeed

• EchoStrike: Generate Undetectable Reverse Shells, Perform Process Injection

• Update: PoC Exploit Released for Windows Hyper-V Zero-Day Vulnerability

• US Hits Intellexa Spyware Maker With More Sanctions

• C/side Raises $6 Million to Secure the Browser Supply Chain

• 5 Ways to Reduce Information Security Risk in a Mobile Workplace

• USENIX NSDI ’24 – Horus: Granular In-Network Task Scheduler for Cloud Datacenters

• US Looks to Align Security Across Government

• Millbeck Communications Proroute H685t-w

• CISA Releases Three Industrial Control Systems Advisories

• Siemens SIMATIC S7-200 SMART Devices

• Chinese man charged for spear-phishing against NASA and US Government

• Assessing Apple’s Update to Rotating MAC Addresses

• Secure your organization

• Global Bot Security Report Findings: 2 in 3 Websites Are Unprotected

• A Future of Security Free from CNAPP – Keynote Interview with James Berthoty

• Can a Bot Farm Damage Your Business? What You Need to Know About Bot Farms

• Here’s How Criminals Are Targeting Users and Enterprises in Mexico

• ICO Acts Against Sky Betting and Gaming Over Cookies

• An Offer You Can Refuse: UNC2970 Backdoor Deployment Using Trojanized PDF Reader

• CVE backlog update: The NVD struggles as attackers change tactics

• Best Kaspersky Alternatives in 2024

• CISA and FBI Release Secure by Design Alert on Eliminating Cross-Site Scripting Vulnerabilities

• Cisco’s second layoff of 2024 affects thousands of employees

• Phishing Campaigns Surge with New Header Refresh Technique, Targeting Financial and Government Sectors

• TfL Employees Face In-Person Identity Verification Following Cyberattack

• 23andMe Pledges $30 Million to the 6.4 Million People Affected by Data Breach

• Zero-Click Calendar Invite: Critical macOS Vulnerability Chain Uncovered

• Rising Clipper Malware Attacks Target Cryptocurrency Users

• Critical Vulnerability in AutoGPT Puts Over 166,000 Projects at Risk

• Predator spyware kingpins added to US sanctions list

• Software Security Firm RunSafe Raises $12 Million in Series B Funding

• Most Cyber Leaders Fear AI-Generated Code Will Increase Security Risks

• iOS 18 is out. Here are the new privacy and security features

• Cyber predators target vulnerable victims: Hackers blackmail hospitals, trade patient data and find partners through darknet ads

• The cybersecurity labor gap now stands at 4M+ open jobs. Intezer has raised $33M for AI tools to plug it

• Top Tips and Risks Ahead of the 2024 Olympic Games

• Protecting Against Malicious Open Source Packages

• Hydden Raises $4.4M in Seed Funding for Identity Security Platform

• Email Security Breaches Rampant Among Critical Infrastructure Organizations

• Apple releases iOS 18, with security and privacy improvements

• WTW Indigo Vault secures business sensitive files

• U.S. Treasury Sanctions Executives Linked to Intellexa Predator Spyware Operation

• Google Chrome Switches to ML-KEM for Post-Quantum Cryptography Defense

• LastPass Review 2024: Is it Still Safe and Reliable?

• D-Link Fixes Critical RCE, Hardcoded Credential Flaws in WiFi 6 Routers

• Metabase Q Raises $11M in Series A Extension Funding

• The Dark Nexus Between Harm Groups and ‘The Com’ – Krebs on Security

• Strider Secures $55M to Fuel AI Growth and Global Expansion

• CosmicBeetle Exploits Vulnerabilities in Small Businesses Globally

• F5 NGINX One improves app delivery and security functions

• Veritas unveils AI-driven features to simplify cyber recovery

• Beware the Rising Tide: Financial Services Is Awash in Attacks

• Hackers Exploiting Selenium Grid Tool To Deploy Exploit Kit & Proxyjacker

• CISA Warns of Windows MSHTML & Progress WhatsUp Gold Flaw Exploited Widely

• September 2024 Web Server Survey

• Forget AirTags: Tile’s new trackers come in all shapes and sizes (and an SOS button)

• Python Developers Targeted with Malware During Fake Job Interviews

• Performance Testing Vs Load Testing: Know the Key differences

• From Fragmentation to Integration: Establishing a Cyber Risk Management Program

• RunSafe Security raises $12 million to reduce attack surface in critical infrastructure

• How to Investigate ChatGPT activity in Google Workspace

• Singapore Launches Accelerator for International Cybersecurity Startups

• Intel ‘Lost PlayStation 6 Chip Bid To AMD’

• Intel, AWS To Collaborate On AI Chip In Major Win

• Master IT Fundamentals With This CompTIA Certification Prep Bundle

• U.S. CISA adds Microsoft Windows MSHTML Platform and Progress WhatsUp Gold bugs to its Known Exploited Vulnerabilities catalog

• ‘Cyber Wellbeing Corner’ Returns to International Cyber Expo

• DoJ: Chinese Man Used Spear-Phishing to Obtain Software From NASA, Military

• PoC exploit for exploited Ivanti Cloud Services Appliance flaw released (CVE-2024-8190)

• Gcore WAAP protects websites, web applications, and APIs

• Cybersecurity News: Intellexa faces new sanctions, London hospitals impact, Apple releases update

• Our Guardrails Only Fail When You Try To Go Around Them (LIVE in Seattle)

• Pioneering Researcher Raises $230m For ‘Spatial’ AI Start-Up

• US Sanctions Commercial Spyware Group

• Creating An AI Honeypot To Engage With Attackers Sophisticatedly

• North Korean Hackers Attacking LinkedIn Users to Deliver RustDoor Malware

• England and Wales Report a Spike in Computer Misuse

• What’s Changed in CIS Critical Security Controls v8.1?

• Misconfigured ServiceNow Knowledge Bases Expose Confidential Information

• Enterprise ServiceNow Knowledge Bases at Risk: Extensive Data Exposures Uncovered

• AppOmni Surfaces Configuration Flaw in ServiceNow SaaS Platform

• US Ramps Up Sanctions on Spyware-Maker Intellexa

• Over Half of Breached UK Firms Pay Ransom

• China Touts ‘Significant’ Advances In Chipmaking Tools

• China ‘Closing Gap’ With West In AI

• Key Russian Hacker Group Attacking Users With .NET Built Ransomware

• How Google and Yahoo’s shift to stricter email standards proved a windfall for this Armenian startup

• Qilin ransomware attack on Synnovis impacted over 900,000 patients

• Taking Control Online: Ensuring Awareness of Data Usage and Consent

• All Smoke, no Fire: The Bizarre Trend of Fake Data Breaches and How to Protect Against Them

• Making the Complex Simple: Authorization for the Modern Enterprise

• Binance Warns of Rising Clipper Malware Attacks Targeting Cryptocurrency Users

• 23:59, Time to Exfiltrate!, (Tue, Sep 17th)

• TikTok Tells US Court Ban Would Have ‘Staggering’ Effects

• Woo Skimmer Uses Style Tags and Image Extension to Steal Card Details

• MSSPs Say Client Communication Is Too Hard. Here’s How We’re Helping.

• The New Era of SOCs: Simplifying Cybersecurity for SMBs

• Google Chrome browser users given 72 hour deadline to adopt Cybersecurity patches

• Securing Data from Espionage: The Role of Confidential Computing

• Chinese Hackers Charged for Multi-Year Spear-Phishing Attacks

• Unlocking Secure Communications 101: The Fundamentals

• China claims Starlink signals can reveal stealth aircraft – and what that really means

• Gateways to havoc: Overprivileged dormant service accounts

• SolarWinds Issues Patch for Critical ARM Vulnerability Enabling RCE Attacks

• The Day the IT World Stood Still

• How to Prepare Your Organization for the Future with Continuous Security Testing

• The Human Element in Non-Human Identity Security: Bridging the Gap in Modern Cybersecurity

• Beyond human IAM: The rising tide of machine identities

• The growing danger of visual hacking and how to protect against it

• Securing SAP Systems: Essential Strategies to Protect Against Hackers

• The cybersecurity workforce of the future requires diverse hiring practices

• ISC Stormcast For Tuesday, September 17th, 2024 https://isc.sans.edu/podcastdetail/9140, (Tue, Sep 17th)

• Microsoft confirms IE bug squashed in Patch Tuesday was exploited zero-day

• Chinese national accused by Feds of spear-phishing for NASA, military source code

Generated on 2024-09-18 23:55:10.357508