IT Security News Daily Summary 2024-09-30

• Network Sniffing: A Critical Concept in Network Security

• CISA Announces the FY 2024 Rural Emergency Medical Communications Demonstration Project (REMCDP) Cooperative Agreement Recipient

• Google’s new Workspace password policy starts today: How to know if you’re affected

• Cybersecurity In Critical Infrastructure: Protecting Power Grids and Smart Grids

• Patelco Credit Union data breach impacted over 1 million people

• What is WPA3 (Wi-Fi Protected Access 3)?

• Mozilla Faces GDPR Complaint Over New Firefox Tracking Feature

• How to Safeguard Your Systems from Linux CUPS Vulnerabilities

• North Korea Hackers Linked to Breach of German Missile Manufacturer

• Storm-0501 Gang Targets US Hybrid Clouds with Ransomware

• How to implement relationship-based access control with Amazon Verified Permissions and Amazon Neptune

• Tool update: mac-robber.py and le-hex-to-ip.py, (Mon, Sep 30th)

• A (Beta) Audio Roundup of September’s WordPress Vulnerabilities

• Check Point Harmony Endpoint: Strategic Leader in Real-World Endpoint Protection

• LINUX CUPS VULNERABILITIES

• 5 Reasons Why Developers Should Attend Security Conferences

• EFF Awards Night: Celebrating Digital Rights Founders Advancing Free Speech and Access to Information Around the World

• Randall Munroe’s XKCD ‘Late Cenozoic’

• Our New Carbon Calculator Report Supports 400 Days of Data

• Google to use Gemini AI to secure Gmail from spam and malware

• Britain teachers need Cyber security training on an urgent note

• The Most Misunderstood Data Security Terms in the United States

• CISA Adds Four Known Exploited Vulnerabilities to Catalog

• Everything you need to know about VPNs

• We are skeptical of VPN providers, and you should be, too

• VPN providers don’t protect your privacy online. Here’s what can.

• How to make your own encrypted VPN server in 15 minutes

• Think you need a VPN? Start here.

• Zen and the Art of Modern Patch Management: How to Eliminate Stress, Improve Security, and Streamline IT Operations

• Central Tickets – 722,860 breached accounts

• Patelco Credit Union Data Breach Impacts Over 1 Million People

• Kia’s Huge Security Hole: FIXED (Finally)

• NVIDIA Container Toolkit Vulnerability Exposes AI Systems to Risk

• MDR in Action: Preventing The More_eggs Backdoor From Hatching

• DCRAt Attacking Users Via HTML Smuggling To Steal Login Credentials

• GorillaBot Emerged As King For DDoS Attacks With 300,000+ Commands

• North Korean Hackers Attempted To Steal Sensitive Military Data

• Why Haven’t You Upgraded to HTTP/2?

• Barracuda SPF and DKIM Configuration: Step By Step

• Avanan’s SPF and DKIM configuration: Step By Step Guideline

• Apono Secures $15.5M Series A Funding to Revolutionize Cloud Access Security

• ChatGPT Vulnerability Exploited: Hacker Demonstrates Data Theft via ‘SpAIware

• Critical RCE Vulnerabilities Found in Common Unix Printing System

• Darktrace AI Halts Thread Hijacking Attack Targeting Major Company

• Community Clinic of Maui discloses a data breach following May Lockbit ransomware attack

• If you’re holding important data, Iran is probably trying spearphish it

• Hawaii Health Center Discloses Data Breach After Ransomware Attack

• Meta Unveils its First Open AI Model That Can Process Images

• Shocking Ways Hackers Can Exploit Your IP Address – You’re Not as Safe as You Think

• Vulnerability Summary for the Week of September 23, 2024

• Ransomware attackers hop from on-premises systems to cloud to compromise Microsoft 365 accounts

• US State CISOs Struggling with Insufficient Cybersecurity Funding

• Artisan raises $11.5M to deploy AI ’employees’ for sales teams

• THN Cybersecurity Recap: Last Week’s Top Threats and Trends (September 23-29)

• EDR vs. SIEM: Key Differences, Features, Functionality Gaps, and More

• Remote ID verification tech is often biased, bungling, and no good on its own

• Celebrating 6 Years with CISO Series

• Facial DNA provider leaks biometric data via WordPress folder

• Nigeria Hackers Sentenced for Selling Financial Information on Dark Web

• Maximizing Cloud Network Security With Next-Generation Firewalls (NGFWs): Key Strategies for Performance and Protection

• Accounting Firm WMDDH Discloses Data Breach Impacting 127,000

• Session Hijacking 2.0 — The Latest Way That Attackers are Bypassing MFA

• Critical Flaws in Tank Gauge Systems Expose Gas Stations to Remote Attacks

• How Open-Source Tools Can Help Keep Your Computer Secure

• Tor And Tails OS Announce Merger For Streamlined Operations

• Cloud threats have execs the most freaked out because they’re not prepared

• A British national has been charged for his execution of a hack-to-trade scheme

• Storm-0501 Expands Ransomware Attacks to Hybrid Cloud Environments

• The Path of Least Resistance to Privileged Access Management

• Growing Focus on Data Privacy Among GenAI Professionals in 2024

• Microsoft revised the controversial Copilot+ Recall feature

• A Hacker’s Era: Why Microsoft 365 Protection Reigns Supreme

• Cyber-Attacks Hit Over a Third of English Schools

• UK Competition Regulator Clears $4bn Amazon Anthropic AI Deal

• Apple Must Face Reduced Claims In Device Privacy Case

• Hacktivist Groups Operating Together! Connection Ober TTPs Uncovered

• GDPR Security Pack

• Meet Team Europe for International Cybersecurity Challenge 2024!

• The Pig Butchering Invasion Has Begun

• Critical WatchGuard Vulnerabilities Discovered: CVE-2024-6592 and CVE-2024-6593

• British National Arrested, Charged for Hacking US Companies

• PwC Urges Boards to Give CISOs a Seat at the Table

• Cybersecurity News: Recall redesigned, Embargo attacks cloud, Dallas suburb cyberattack

• Why it’s time to replace your legacy SIEM with a SOC platform

• Microsoft Relaunches Controversial AI Snapshot Tool

• Musk Lashes Out At UK Government After Investment Summit Snub

• International Tensions, AI Drive Record Chip Spending

• Google Expert Argues US Ad Case Is Too Narrow

• The Growing Threat Of Fake Job Applicants

• Data Security Best Practices for Cloud CRM Systems as Adoption Surges

• Promoting security in the digital world during the European Cybersecurity Month

• Critical NVIDIA Container Toolkit flaw could allow access to the underlying host

• Heimdal and emt Distribution Aim to Dominate the Middle East Cybersecurity Market

• DCRat Targets Users with HTML Smuggling

• Unpatched SQLi Flaw in TI WooCommerce Wishlist Threatens 100,000+ Sites

• Hadooken and K4Spreader: The 8220 Gang’s Latest Arsenal

• Some Americans are finally able to renew their passports online

• UK and US Warn of Growing Iranian Spear Phishing Threat

• Facebook Parent Fined £75m Over Password Storage

• A week in security (September 23 – September 29)

• The Rise of API Security Automation: Defending the Digital Frontlines with AI and Machine Learning

• Meta Fined €91 Million for Storing Millions of Facebook and Instagram Passwords in Plaintext

• NIST issues new password guidelines: Cyber Security Today for Monday, September 30, 2024

• Israeli Army Hacked Beirut Airport to Threaten Civilians

• CISA Urges Action as Attackers Exploit Critical Systems Using Basic Tactics

• Kia Vulnerability Enables Remote Access to Millions of Cars Using Just a License Plate

• Escape vs Salt Security

• Eliminating Memory Safety Vulnerabilities at the Source

• SCCMSecrets: Open-source SCCM policies exploitation tool

• Could APIs be the undoing of AI?

• AI code helpers just can’t stop inventing package names

• Open source maintainers: Key to software health and security

• What Are the Main Types of Cybersecurity Risks That Should Be Accepted?

• Forget the Kia Boyz: Hackers could hijack your car with just a smartphone

• Industry Moves for the week of September 30, 2024 – SecurityWeek

• California Governor Vetoes Bill to Create First-in-Nation AI Safety Measures

• The most common authentication method is also the least secure

• Businesses turn to private AI for enhanced security and data management

• ISC Stormcast For Monday, September 30th, 2024 https://isc.sans.edu/podcastdetail/9158, (Mon, Sep 30th)

• Binance claims it helped to bust Chinese crypto scam app in India

• Nitrogen Campaign Drops Sliver and Ends With BlackCat Ransomware

• IT Security News Weekly Summary – Week 39

• IT Security News Daily Summary 2024-09-29

• USENIX NSDI ’24 – The Bedrock of Byzantine Fault Tolerance: A Unified Platform for BFT Protocols Analysis, Implementation, and Experimentation

• Social Media Content Fueling AI: How Platforms Are Using Your Data for Training

• Red team hacker on how she ‘breaks into buildings and pretends to be the bad guy’

• Israel army hacked the communication network of the Beirut Airport control tower

• What is a Zero-Day Attack And How You Can Safeguard Against It?

• Microsoft to start charging for Windows 10 updates next year. Here’s how much

• Wiping a Windows laptop? Here’s the safest way to erase your personal data – for free

• Security Affairs newsletter Round 491 by Pierluigi Paganini – INTERNATIONAL EDITION

• SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 13

• From Burnout to Balance: How AI Supports Cybersecurity Professionals

• Homeland Security Alerts on Increasing Risks for Schools

• Delaware Libraries Hit by Ransomware Attack, Internet Services Disrupted

• Over 300,000! GorillaBot: The New King of DDoS Attacks

• Remote Code Execution Vulnerability Alert of Unix CUPS Print Service (CVE-2024-47076 / CVE-2024-47175 / CVE-2024-47177)

• Progress Software fixed 2 new critical flaws in WhatsUp Gold

• Week in review: Windows Server 2025 gets hotpatching option, PoC for SolarWinds WHD flaw released

Generated on 2024-09-30 23:55:07.983688