IT Security News Daily Summary 2024-09-24

• Investigating Infrastructure and Tactics of Phishing-as-a-Service Platform Sniper Dz

• A generative artificial intelligence malware used in phishing attacks

• AI Adoption Set to Unravel Years of Cyber Resilience

• EFF to Federal Trial Court: Section 230’s Little-Known Third Immunity for User-Empowerment Tools Covers Unfollow Everything 2.0

• Congressional Staffers’ Data Leaked on Dark Web: Report

• AI can now solve reCAPTCHA tests as accurately as you can

• What Is EDR in Cyber Security: Overview & Capabilities

• NormCyber Introduces Digital Risk Protection For Enhanced Cyber Resilience

• Who’s watching you the closest online? Google, duh

• CrowdStrike Overhauls Testing and Rollout Procedures to Avoid System Crashes

• CrowdStrike Gets Grilled By U.S. Lawmakers Over Faulty Software Update

• Arkansas City water treatment facility hit by cyberattack

• Russia’s digital warfare on Ukraine shows no signs of slowing: Malware hits surge

• Randall Munroe’s XKCD ‘Maslow’s Pyramid’

• SBOM-a-Rama Fall 2024: Sonatype’s top 5 takeaways

• CRQ Loss Exceedance Curves for Risk Management | Kovrr

• USENIX NSDI ’24 – A Large-Scale Deployment of DCTCP

• PREVIEW: CISO Series Podcast LIVE in Los Angeles, CA 10-9-24

• 20,000 WordPress Sites Affected by Privilege Escalation Vulnerability in WCFM – WooCommerce Frontend Manager WordPress Plugin

• Automatic Tank Gauges Used in Critical Infrastructure Plagued by Critical Vulnerabilities

• We analyzed 2,670 posts and comments from social media platforms. Here’s what we learned about job scams

• Spotlight on DeepKeep.ai

• 10 nasty software bugs put thousands of fuel storage tanks at risk of cyberattacks

• AI-Generated Malware Found in the Wild

• GUEST ESSAY: Massive NPD breach tells us its high time to replace SSNs as an authenticator

• Microsoft Pushes Governance, Sheds Unused Apps in Security Push

• Necro Android Malware Found in Popular Camera and Browser Apps on Play Store

• How AWS WAF threat intelligence features help protect the player experience for betting and gaming customers

• NetApp Secure Data Storage offers resilience against ransomware attacks

• How AIOps enhances operational resilience in the face of IT complexity

• Leveraging LLMs for Malware Analysis: Insights and Future Directions

• Harnessing the Power of Cloud App Development and DevOps for Modern Businesses

• A new wave of personalized sextortion scams—Using Google Street View images to startle targets

• US Kaspersky customers startled by forced switch to ‘rando’ AV software

• Formula 1 looks to AI to fuel efficiencies and improve sustainability scorecard

• Warnings After New Valencia Ransomware Group Strikes Businesses and Leaks Data

• 2024 Exposed: The Alarming State of Australian Data Breaches

• Microsoft Initiative the ‘Largest Cybersecurity Engineering Effort in History’

• Layered Protection for RADIUS With Cisco

• Microsoft Names Deputy CISOs, Governance Council to Manage Security Push

• FTC Report Exposes Mass Data Surveillance by Some of the Social Media Giants in the World

• Cybersecurity Incident Affects Arkansas City Water Treatment Facility

• Threat Actors Shift to JavaScript-Based Phishing Attacks

• The best VPN services for torrenting in 2024: Expert tested and reviewed

• 10 nasty bugs put thousands of fuel storage tanks at risk of attacks

• PC Matic vs Norton Antivirus: Feature Comparisons

• OMNTEC Proteus Tank Monitoring

• Franklin Fueling Systems TS-550 EVO

• A cyberattack on MoneyGram caused its service outage

• Building Cyber Resilience

• Osano reduces complexity for data privacy professionals

• Transportation, logistics companies targeted with lures impersonating fleet management software

• New Octo2 Malware Variant Threatens Mobile Banking Security

• Exploitation of RAISECOM Gateway Devices Vulnerability CVE-2024-7120, (Tue, Sep 24th)

• Exploring the Sidecar Pattern in Cloud-Native Architecture

• Alisonic Sibylla

• OPW Fuel Management Systems SiteSentinel

• MoneyGram blames ‘cybersecurity issue’ for ongoing days-long outage

• You Don’t Need an Agent to Secure Your Browser

• Forrester Names Palo Alto Networks a Leader in Attack Surface Management

• Cyberattack Causes MoneyGram Service Outage

• Anatomy of an Attack | ADR vs WAF and EDR Technology | Contrast Security

• Specops Unearths Millions of Compromised VPN Passwords

• Arlo Secure 5 boosts smart home security

• Cloudflare helps secure popular messaging applications

• KELA Identity Guard detects and intercepts compromised assets

• U.S. Proposes Ban on Connected Vehicles Using Chinese and Russian Tech

• Six tips to improve the security of your AWS Transfer Family server

• Telegram to Share User IPs and Phone Numbers on Legal Request

• SANS Institute: Top 5 dangerous cyberattack techniques in 2024

• With 23andMe in crisis, strengthening DNA security has never been more urgent

• Torq, which automates cybersecurity workflows, raises $70M in new capital

• Gamuda Transforms IT Operations with Cato Networks

• Privileged Access Management Features: What You Need in Your PAM Solutions

• NETGEAR announces three WIFI 7 routers to secure connectivity for homes of any size

• US-based Kaspersky users startled by unexpected UltraAV installation

• NetApp enhances security directly within enterprise storage

• Absolute AI Threat Insights monitors, detects, and prioritizes suspicious activity

• HPE unveils AI insights and third-party network device monitoring capabilities

• 14 Million Patients Impacted by US Healthcare Data Breaches in 2024

• Russia-Backed Media Outlets Are Under Fire in the US—but Still Trusted Worldwide

• Did Israel infiltrate Lebanese telecoms networks?

• How to spot a North Korean agent before they get comfy inside payroll

• Kansas Water Facility Switches to Manual Operations Following Cyberattack

• Modernize your chaos engineering with commercial software transparency

• NICE Actimize Fraud Investigation combats fraud and financial crime

• The SSPM Justification Kit

• Discover Latest Ransomware Tactics and Zero Trust Strategies in This Expert Webinar

• EU Digital Identity Wallet: A leap towards secure and trusted electronic identification through certification

• Israel’s Pager Attacks and Supply Chain Vulnerabilities

• Users Quick to Remove UltraAV After Silent Transition From Kaspersky Antivirus

• HTTP Headers Phishing Campaigns Used For Credential Theft

• TuxCare Expands Presence in South America through New Strategic Partnership

• Ubuntu 22.04.5 LTS Released with Linux Kernel 6.8

• Malvertising and Cybercrime in Online Advertising

• FBI Shuts Down Chinese Linked Botnet Campaign in a Joint Operation

• Port of Seattle Faces $5.9 Million Ransom Demand in Rhysida Cyberattack

• New Octo2 Android Banking Trojan Emerges with Device Takeover Capabilities

• US Mulls Ban on Russian, Chinese Parts in Connected Vehicles

• #GartnerSEC: Zero Failure Tolerance, A Cybersecurity Myth Holding Back Organizations

• Google Launches Passkeys Sync With Google Password Manager

• Coinbase Challenges SEC Over Crypto Rules

• OpenAI Backers ‘Betting It Will Be Worth Trillions’

• How to Create an Effective Cybersecurity Awareness Program

• Web tracking report: who monitored users’ online activities in 2023–2024 the most

• Telegram will share IP addresses, phone numbers of criminal suspects with cops

• Cybersecurity News: Proposed ban on autonomous vehicles, updated Telegram policy, Necro infects Android devices

• … And the Business Listened to the CISO and Everyone Lived Happily Ever After

• US Proposes Ban On Chinese, Russian Components In Cars

• Xiaomi Asks For Recall Of India Antitrust Report

• The Relation Between Breaches and Stock Price Drops

• A data leak and a data breach

• Deloitte Says No Threat to Sensitive Data After Hacker Claims Server Breach

• How to Choose the Right VMDR Tool?

• Guardsquare strenghtens mobile application security for developers

• Europol: GenAI Offers “Treasure Trove of Possibilities”

• Telegram Boss Agrees to Closer Police Cooperation

• LinkedIn Suspends Use Of UK Data For AI

• Jony Ive Confirms Working With OpenAI’s Altman On Device

• Researcher Details Cisco Smart Licensing that Lets Attacker Control Device

• ArmorCode unveils two modules to help reduce software-based risks

• Telegram Agrees to Share User Data With Authorities for Criminal Investigations

• Meta AI Chatbot To Offer Voices Of Judi Dench, Other Celebrities

• MC2 Data leak Exposes 100 million+ US Citizens Data

• Telegram will provide user data to law enforcement in response to legal requests

• Addressing Data Security Concerns in Cloud Migrations

• UN Report on Governing AI for Humanity – Key Recommendations and Insights

• ColorTokens Acquires PureID to Advance Zero-Trust IT

• Clothes less photos of patients land on dark web after ransomware attack

• Red Canary’s Midyear Threat Report Highlights Infostealer Surge Targeting macOS Devices

• Discover how online fraud can impact your business

• Future-proofing cybersecurity: Why talent development is key

• 65% of websites are unprotected against simple bot attacks

• How cyber compliance helps minimize the risk of ransomware infections

• MFA bypass becomes a critical security issue as ransomware tactics advance

• ISC Stormcast For Tuesday, September 24th, 2024 https://isc.sans.edu/podcastdetail/9150, (Tue, Sep 24th)

• Some US Kaspersky customers find their security software replaced by ‘UltraAV’

• OpenAI tackles global language divide with massive multilingual AI dataset release

• Community Corner: InClusive InCyber

• Hacker Leaks 12,000 Alleged Twilio Call Records with Audio Recordings

• Crypto scammers hack OpenAI’s press account on X

• What Is Noise-Down Automation?

• Telegram will now hand over IP addresses, phone numbers of suspects to cops

• Publisher’s Spotlight: Reach Security

• Necro malware continues to haunt side-loaders of dodgy Android mods

• ‘Cybersecurity issue’ takes MoneyGram offline for three days – and counting

• IT Security News Daily Summary 2024-09-23

• Inside SnipBot: The Latest RomCom Malware Variant

• How to prepare a system security plan, with template

• ​​Securing our future: September 2024 progress update on Microsoft’s Secure Future Initiative (SFI)

• 100 million+ US citizens have records leaked by background check service

• Some Kaspersky customers receive surprise forced-update to new antivirus software

• Reducing Infrastructure Misconfigurations With IaC Security

• EFF to Supreme Court: Strike Down Texas’ Unconstitutional Age Verification Law

• Randall Munroe’s XKCD ‘Tectonic Surfing’

• Join Us 10-04-24 for “Hacking Job Stagnation” – Super Cyber Friday

• Cyber Security Leader vs Cyber Security Tag-along: How to Tell the Difference

• The best VPN services for iPhone: Expert tested and reviewed

• Vulnerability Recap 9/23/24 – Remote Code Execution Steals the Show

• ESET fixed two privilege escalation flaws in its products

• US proposes ban on Chinese, Russian connected car tech over security fears

• Mandiant Offers Clues to Spotting and Stopping North Korean Fake IT Workers

• 2024 NIST Password Guidelines: Enhancing Security Practices

• Vice Society Shifts to Inc Ransomware in Latest Healthcare Cyberattack

• iCloud Storage fake warning leading to Phishing and Malware attacks

• Securing Cloud Native Apps: The Power of SSPM Essentials

• Dark Web Sales Fuel 32% Increase in Global Healthcare Cyberattacks

• San Francisco’s fight against deepfake porn, with City Attorney David Chiu (Lock and Code S05E20)

• Police are using AI to write crime reports. What could go wrong?

• First TikTok, now smart cars: How Biden’s new proposed ban will affect U.S. automakers

• Hacking the “Bike Angels” System for Moving Bikeshares

• Necro Trojan Infects Google Play Apps With Millions of Downloads

• Nearly Half of Security Experts Believe AI is Risky

• Kryptina Ransomware Resurfaces in Enterprise Attacks By Mallox

• [Free & Downloadable] Endpoint Security Policy Template – 2024

• Why DNS Security Is Important: 3 Real-life Use Cases

• So how’s Microsoft’s Secure Future Initiative going?

• Freemium Model Optimization for B2B SaaS: A Strategic Growth Approach

• USENIX NSDI ’24 – Can’t Be Late: Optimizing Spot Instance Savings under Deadlines

• Brave Browser: The Secure and Private Way to Surf the Web

• Vulnerability Summary for the Week of September 16, 2024

• Vulnerabilities Found in Popular Houzez Theme and Plugin

• Staying a Step Ahead: Mitigating the DPRK IT Worker Threat

• Relationship broken up? Here’s how to separate your online accounts

• ASPM vs. ASOC: How do they differ?

• Types of Cloud Security Controls & Their Uses

• FreeBSD Issues Critical Security Advisory for CVE-2024-41721 (CVSS 9.8)

• Innovator Spotlight: Qwiet

• Innovator Spotlight: ZINAD

• Ban Sought for Chinese, Russian Software and Hardware Used in Autonomous Vehicles on US Roads

• Small Trade Businesses Urged to Strengthen Security After Total Tools Data Breach

• RightCrowd SmartAccess platform enhancements boost enterprise security

• Cloudflare AI Audit helps websites control how their content is used by AI models

• Windows Server 2025 gets hotpatching option, without reboots

• Russian Cyber-Attacks Home in on Ukraine’s Military Infrastructure

• Hackers Posed as Google Support to Steal $243 Million in Crypto

• Hackers Mimic as Company’s HR to Trick Employees

• 10 Security Best Practices for SaaS

• SpaceX, CNN, and The White House internal data allegedly published online. Is it real?

• What Is Threat Hunting In Cybersecurity?

• North Korea-linked APT Gleaming Pisces deliver new PondRAT backdoor via malicious Python packages

• Critical Dragonfly2 Flaw Due to Hardcoded Key Threatens Admin Access

• One Year Later: CISA’s Secure by Design Initiative

• Public Sector Compliance: Passwords and Credentials Matter

• Organizations are changing cybersecurity providers in wake of Crowdstrike outage

• The secrets to Developing a High-Performing Data Team

• Three Key Considerations for Companies Implementing Ethical AI

• Beyond CISO Scapegoating: Cultivating Company-Wide Security Mindsets

• Demystifying AI Models: How to Choose the Right Ones

• Critical Grafana Plugin SDK Flaw Exposes Sensitive Information

• Innovator Spotlight: HyperCube

• UPS supplier’s password policy flip-flops from unlimited, to 32, then 64 characters

• Versa Networks Patches Vulnerability Exposing Authentication Tokens

• Why ‘Never Expire’ Passwords Can Be a Risky Decision

• THN Cybersecurity Recap: Last Week’s Top Threats and Trends (September 16-22)

• Publishers Spotlight: HackerOne

• How the Necro Trojan infiltrated Google Play, again

• Picus Security Raises $45M in Funding

• US DoJ Charged Two Men With Stealing and Laundering $230 Million Worth of Cryptocurrency

• More Than $44 Million in Cryptocurrency Stolen From Singaporean Platform Bingx

• DOJ, FBI Need Better Metrics for Tracking Ransomware Disruption Efforts, Audit Finds

• Keycloak Vulnerability Puts SAML Authentication at Risk

• The Importance of Cybersecurity Awareness and Insider Threat Management

• Will Smaller Companies Buckle Under the SEC’s Incident Reporting Requirements?

• Iranian-Linked Group Facilitates APT Attacks on Middle East Networks

• Complexity: Research Offers Solution for Healthcare Security Amid Rising Cyberattacks

• AI Development Needs Global Oversight, UN Experts State

• Discord Introduces DAVE Protocol for End-to-End Encryption in Audio and Video Calls

• Critical Flaw in Microchip ASF Exposes IoT Devices to Remote Code Execution Risk

• When Can AI Take Over Decision Making in the SOC?

• SEC To Seek Sanctions After Musk Fails To Appear In Court

• Sky Glass Televisions Disabled By Tech Fault

• It’s Never Too Late: Transitioning to a Career in Cybersecurity

• Industry Moves for the week of September 23, 2024 – SecurityWeek

• Videos: Attack Surface Management Summit – All Sessions Available on Demand

• The Problem With Third-Party Breaches: A Data Protection Dilemma

• Cybersecurity News: LinkedIn halts AI training, Ukraine bans Telegram, hack-for-hire lawsuit

• Apple Previews AI Features As iPhone 16 Sales Begin

• Trump Media Shares Fall To All-Time Low

• Aligning Your Cybersecurity Strategy with the NIST CSF 2.0

• The Latest Email Scams: Key Trends to Look Out For

• What is Cybersecurity Automation? Benefits & Challenges

• Quishing 2.0: QR Code Phishing Evolves with Two-Step Attacks and SharePoint Abuse

• SambaSpy RAT Targets Italian Users in a Unique Malware Campaign

• Lumma Stealer Malware Campaign Exploits Fake CAPTCHA Pages

• Police Dismantles Phone Unlocking Ring Linked to 483,000 Victims

• Germany Seizes Leak Site of ‘Vanir’ Ransomware Operation

• Bitdefender debuts GravityZone PHASR, enhancing security through user behavior analysis

• LinkedIn Pauses GenAI Training Following ICO Concerns

• Geely’s Zeekr Slashes Electric SUV Price In Latest Threat To Tesla

• Huawei’s Mate XT Launches On Same Day As iPhone 16

• Chinese APT Earth Baxia target APAC by exploiting GeoServer flaw

• Cloud Security Risk Prioritization is Broken. Here’s How to Fix It.

• PIPEDA

• German Police Shutter 47 Criminal Crypto Exchanges

• Phishing links with @ sign and the need for effective security awareness building, (Mon, Sep 23rd)

• Qualcomm ‘Offers To Buy Intel’

• FreeBSD RCE Vulnerability Let Attackers Execute Malicious Code

• macOS Sequoia Update Breaks Multiple Security Tools

• A week in security (September 16 – September 22)

• Privacy and API security: What’s at stake?

• Move over, Cobalt Strike. Splinter’s the new post-exploit menace in town

• New PondRAT Malware Hidden in Python Packages Targets Software Developers

• Google Chrome gets rid of Password menace

• Benefits of Data Protection and GDPR Compliance for Businesses

• Hacktivist group Twelve is back and targets Russian entities

• Analysis of ENISA’s 2024 Threat Landscape Report: Key Takeaways and Implications

• Chinese Hackers Exploit GeoServer Flaw to Target APAC Nations with EAGLEDOOR Malware

• Tor browser anonymity cracked by German police: Cyber Security Today for Monday, September 23, 2024

• Certainly: Open-source offensive security toolkit

• GameVN – 1,369,485 breached accounts

• Paid open-source maintainers spend more time on security

• Offensive cyber operations are more than just attacks

• Tor Project Assures Users It’s Safe Amid Controversy of Deanonymizing Users

• The surge in cyber insurance and what it means for your business

• ISC Stormcast For Monday, September 23rd, 2024 https://isc.sans.edu/podcastdetail/9148, (Mon, Sep 23rd)

• Apple’s latest macOS release is breaking security software, network connections

Generated on 2024-09-24 23:55:10.857266