IT Security News Daily Summary 2024-10-02

• Vote for EFF’s ‘How to Fix the Internet’ podcast in the Signal Awards!

• Two simple give-me-control security bugs found in Optigo network switches used in critical manufacturing

• U.S. CISA adds Ivanti Endpoint Manager (EPM) flaw to its Known Exploited Vulnerabilities catalog

• 14 New DrayTek routers’ flaws impacts over 700,000 devices in 168 countries

• Security related Docker containers, (Wed, Oct 2nd)

• Oracle To Invest $6.5 Billion In Malaysia To Expand Public Cloud Region

• Exclusive: Google Cloud Updates Confidential Computing Portfolio

• Why ASPM Requires an Independent Approach: Exploring the Role of ASPM vs. CNAPP | Part 1

• Cyberattack on Maui’s Community Clinic Affects 123,000 Individuals in May

• Why system resilience should mainly be the job of the OS, not just third-party applications

• Digital ID Isn’t for Everybody, and That’s Okay | EFFector 36.13

• Zero-Day Breach at Rackspace Sparks Vendor Blame Game

• Fake Trading Apps Target Victims Globally via Apple App Store and Google Play

• 7 Best Practices for Job Orchestration

• Top 6 Cybersecurity Threat Detection Use Cases: How AI/ML Can Help Detect Advanced and Emerging Threats

• Russia Fines Google, Discord For ‘Banned Content’

• Decade-Old Linux Vulnerability Can Be Exploited for DDoS Attacks on CUPS

• Vera AI launches ‘AI Gateway’ to help companies safely scale AI without the risks

• The Top 5 Largest Scale Intrusions in 2023

• Leverage vCISO Services to Unlock Managed Service Provider (MSP) Success

• SeeMetrics Expands The Use of Cybersecurity Metrics to Empower The Full Security Team

• What is Android System WebView and should you uninstall it?

• Region 8 Invites You to Secure Our World

• China-Linked CeranaKeeper Targeting Southeast Asia with Data Exfiltration

• ACSC and CISA Launch Critical OT Cybersecurity Guidelines

• Five Strategies for Creating Water-Tight Cybersecurity for Business Outcome & Value

• Cyber attacks anticipated with the start of Israel and Iran war

• How NaaS is Reshaping Enterprise Connectivity

• Ofcom Preparing For ‘Strong Action’ Against Tech Giants – Report

• AWS LetsEncrypt Lambda or Why I Wrote a Custom TLS Provider for AWS Using OpenTofu and Go

• CISA Adds One Known Exploited Vulnerability to Catalog

• News agency AFP notifies French authorities of potential data breach

• Admin Rights in Action: How Hackers Target Privileged Accounts

• Ransomware Attack Disrupts UMC Health System Activity

• Lockin Company’s Approach to Zero Trust Security and Rising Phishing Threats with its security software LIAPP, LIKEY, and LISS

• Why I Came Out of (Pseudo) Retirement to Help Solve the Non-Human Identity Challenge as Aembit’s CISO

• Microsoft Warns of Storm-0501 Ransomware Attacks on U.S. Cloud Systems

• UK and US Warn of Rising Iranian Spear Phishing Threat

• Fake Job Applications Deliver Dangerous More_eggs Malware to HR Professionals

• Stonefly Group Targets US Firms With New Malware Tools

• DevOps Decoded: Prioritizing Security in a Dynamic World

• Google To Invest $1 Billion For Data Centre In Thailand

• Pig Butchering: Fake Trading Apps Target Crypto on Apple, Google Play Stores

• Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities

• Join Us 10-18-24 for “Hacking the Hype of Zero Trust”

• Enhancing data privacy with layered authorization for Amazon Bedrock Agents

• Misconfiguration Madness: Thwarting Common Vulnerabilities in the Financial Sector

• Rhadamanthys information stealer introduces AI-driven capabilities

• MITRE Adds Mitigations to EMB3D Threat Model

• Metomic Data Classification automates complex data management workflows

• Venafi helps organizations solve more machine identity security problems

• X Value Down By 79 Percent Since Elon Musk Purchase

• Cybersecurity Awareness Month: Cybersecurity awareness for developers

• 5,000 Fake Microsoft Emails that Your Employees Could Fall For

• The Next Iteration of Privacy: What Businesses Should Know About New Privacy Laws in Oregon, Texas, and Florida

• Average CISO Compensation Tops $500K

• Concentric AI helps monitor and remediate risky Copilot activity

• PlexTrac unveils new capabilities to prioritize proactive security remediation

• Advancing Federal Cybersecurity With Zero Trust Principles

• Cryptocurrency Wallets Targeted via Python Packages Uploaded to PyPI

• Mario Duarte, Former Snowflake Cybersecurity Leader, Joins Aembit as CISO to Tackle Non-Human Identities

• Harmonic Security raises $17.5 million to improve data security for organizations

• Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit

• 80% of Manufacturing Firms Have Critical Vulnerabilities

• Obsidian Security Warns of Rising SaaS Threats to Enterprises

• Stopping Attacks Early: The Power of Endpoint Telemetry in Cybersecurity

• Test before patching. Windows update KB5043145 turns computers unstable

• NIST’s security flaw database still backlogged with 17K+ unprocessed bugs. Not great

• 5 Must-Have Tools for Effective Dynamic Malware Analysis

• BT Recoups £105 Million By Recycling Copper Cables

• 7th Cybersecurity Forum: Power grids cybersecurity ascending to prominence

• California AI Safety Bill Vetoed

• Critical Zimbra RCE vulnerability under mass exploitation (CVE-2024-45519)

• ‘Patch yesterday’: Zimbra mail servers under siege through RCE vuln

• Critical Vulnerability in TI WooCommerce Wishlist Plugin Exposes 100K+ Sites to SQL Attacks

• Researchers Warn of Ongoing Attacks Exploiting Critical Zimbra Postjournal Flaw

• Andariel Hacking Group Shifts Focus to Financial Attacks on U.S. Organizations

• Critical Zimbra Postjournal flaw CVE-2024-45519 actively exploited in the wild. Patch it now!

• Finding a needle in a haystack: Machine learning at the forefront of threat hunting research

• Critical Zimbra Vulnerability Exploited One Day After PoC Release

• Addressing Git Vulnerabilities in Ubuntu 18.04 and 16.04

• 4 new LockBit-related arrests, identities of suspected Evil Corp members, affiliates revealed

• Cybersecurity News: LockBit ties to Evil Corp, public records flaws, ransomware hits Texas hospital

• Patch Tuesday early release has huge issues: Cyber Security Today for Wednesday, October 2, 2024

• Russian Cyber Offensive Shifts Focus to Ukraine’s Military Infrastructure

• New Bluetooth Vulnerability Leak, Your Passcode to Hackers During Pairing

• Face Off: US Election Debate Sparks New Wave of Crypto-Doubling Scams

• How to Share a Wi-Fi Password: A Step-by-Step Guide

• Meta Teams Up with Banks to Target Fraudsters

• Major Database Security Threats and How to Prevent Them

• Tripwire Patch Priority Index for September 2024

• CyberSmart and e92plus Announce Partnership to Deliver Cyber Risk Management in the UK and Ireland

• What Happens After p=Reject: Beyond the DMARC Golden Standard

• Catalogic DPX 4.11 strengthens data security

• Share of Women in UK Cyber Roles Now Just 17%

• Bulbature, beneath the waves of GobRAT

• Protecting private data in AI deployments

• Microsoft Alert: New INC Ransomware Targets US Healthcare

• Cybersecurity Professionals Operate Under Increased Stress Levels

• Pisces Introduces Innovative Tools KLogEXE and FPSpy

• SAFE X equips CISOs with integrated data from all their existing cybersecurity products

• Balbix D3 accelerates vulnerability mitigation

• GhostStrike – A Cyber Security Tool for Red Team to Evade Detection

• Police arrested four new individuals linked to the LockBit ransomware operation

• Cybersecurity Awareness Month: Securing our world—together

• Enveil enables organizations to securely train machine learning models

• American CISOs Face Budget Challenges in Cybersecurity Defense

• Password Fatigue Giving Rise to Cyber Threats

• Community Clinic of Maui says 123,000 affected by May cyberattack

• The fix for BGP’s weaknesses has big, scary, issues of its own, boffins find

• Evil Corp hit with new sanctions, BitPaymer ransomware charges

• How to Build a SOAR Playbook: Start with the Artifacts

• PyPI Repository Found Hosting Fake Crypto Wallet Recovery Tools That Steal User Data

• Researchers Sound Alarm on Active Attacks Exploiting Critical Zimbra Postjournal Flaw

• Passkeys and Cybersecurity Awareness: A New Era of Business Security

• More Evil Corp Actors Exposed, Including LockBit Affiliate

• Crook made millions by breaking into execs’ Office365 inboxes, feds say

• Zimbra RCE Vuln Under Attack Needs Immediate Patching

• Cyble Researchers Uncover Sophisticated Attack Using VSCode for Remote Access

• Iran-linked Threat Group Handala Actively Targets Israel

• Enhancing firewall management with automation tools

• Suricata: Open-source network analysis and threat detection

• Cybersecurity jobs available right now: October 2, 2024

• What bots mean for businesses and consumers

• Cybersecurity hiring slows, pros’ stress levels rise

• ISC Stormcast For Wednesday, October 2nd, 2024 https://isc.sans.edu/podcastdetail/9162, (Wed, Oct 2nd)

• ASD’s ACSC, CISA, FBI, NSA, and International Partners Release Guidance on Principles of OT Cybersecurity for Critical Infrastructure Organizations

• Mitsubishi Electric MELSEC iQ-F FX5-OPC

• USENIX NSDI ’24 – BBQ: A Fast and Scalable Integer Priority Queue for Hardware Packet Scheduling

• Fake Disney+ activation page redirects to pornographic scam

• Palo Alto Networks Prevents Data Loss at Enterprise Scale with NVIDIA

• IT Security News Daily Summary 2024-10-01

• Dotnet Source Generators in 2024 Part 1: Getting Started

• How to perform a proof of concept for automated discovery using Amazon Macie

• What Is Inside Microsoft’s Major Windows 11 Update?

• New security protocol shields data from attackers during cloud-based computation

• Law enforcement agencies arrest 4 alleged LockBit members

• News alert: Introducing Mayhem Security — ForAllSecure unveils name change, fresh focus

• ICE Signs $2 Million Contract With Spyware Maker Paragon Solutions

• How to Stop Advertisers From Tracking Your Teen Across the Internet

• API Gateways and API Protection: What’s the Difference?

• Workarounds for Oracle Restrictions on the Size of Expression Lists

• T-Mobile reaches $31.5M breach settlement with FCC

• UMC Health System diverted patients following a ransomware attack

• Euro cops arrest 4 including suspected LockBit dev chilling on holiday

• Building Your First Web Application with Yii Framework

• OpenAI’s DevDay 2024: 4 major updates that will make AI more accessible and affordable

• Meta Penalized $101 Million for Storing Passwords in Plaintext, Faces Heightened EU Oversight

• Top Tech Conferences & Events to Add to Your Calendar in 2024

• Notorious Evil Corp Hackers Targeted NATO Allies for Russian Intelligence

• DCRat Malware Propagates via HTML Smuggling

• Meta Fined €91 Million by EU Privacy Regulator for Improper Password Storage

• Ransomware Gangs Targeting CEOs with Stolen Data

• Embargo Ransomware Shifts Focus to Cloud Platforms

• AI-Powered Rhadamanthys Stealer Targets Crypto Wallets with Image Recognition

• 8,000 WordPress Sites affected by Arbitrary File Upload Vulnerability in WP Hotel Booking WordPress Plugin

• New PyPI Malware Poses as Crypto Wallet Tools to Steal Private Keys

• Risk & Repeat: Inside the Microsoft SFI progress report

• From security to AI: factors that are driving industrial networking investment

• British Hacker Charged in the US For $3.75m Insider Trading Scheme

• CISA Kicks Off 21st Anniversary of Cybersecurity Awareness Month

• Russia Cyber attack on Nato countries and ransomware attack on UMC Health System

• Get a waterproof Blink Mini 2 security camera for only $20 before October Prime Day

• Evil Corp’s deep ties with Russia and NATO member attacks exposed

• T-Mobile to Pay Millions to Settle With FCC Over Data Breaches

• Ransomware Attack Forces UMC to Divert Emergency Patients

• The complete agenda for the Disrupt Stage at TechCrunch Disrupt 2024

• How Payment Solutions Can Help CFOs Overcome Economic Challenges

• Evolving and Reimagining Cisco Marketing Velocity – introducing Jennifer Machgan

• Evil Corp’s LockBit Ties Exposed in Latest Phase of Operation Cronos

• Keep your firewall rules up-to-date with Network Firewall features

• Using AWS WAF Efficiently To Secure Your CDN, Load Balancers, and API Servers

• Spooky action: Phantom domains create hijackable hyperlinks

• AI and deepfakes: How to be AI-savvy

• Protecting your identity: Stay one step ahead of cybercriminals

• How the FBI and Mandiant caught a ‘serial hacker’ who tried to fake his own death

• U.S. CISA adds D-Link DIR-820 Router, DrayTek Multiple Vigor Router, Motion Spell GPAC, SAP Commerce Cloud bugs to its Known Exploited Vulnerabilities catalog

• Synopsys Software Integrity Group Rebrands as Black Duck – A New Era in Application Security

• Risk Management in Real Time with Safe Security

• Hurricane Helene Aftermath – Cyber Security Awareness Month, (Tue, Oct 1st)

• Introducing an Effortless Way to Deploy Akamai API Security

• capa Explorer Web: A Web-Based Tool for Program Capability Analysis

• Guarding Kubernetes From the Threat Landscape: Effective Practices for Container Security

• Android users targeted on Facebook and porn sites, served adware

• Global Cyber Attacks to Double from 2020 to 2024, Report Finds

• Vulnerability Recap 10/01/24 – NVIDIA, Ivanti & Newcomer Kia See Issues

• CISA Releases Two Industrial Control Systems Advisories

• Eon emerges from stealth with $127M to bring a fresh approach to backing up cloud infrastructure

• UK unmasks LockBit ransomware affiliate as high-ranking hacker in Russia state-backed cybercrime gang

• Keeper Kicks Off Cybersecurity Action Month

• Why Is IT Forcing You to Patch Your Software? Understand the Importance of Patching

• BudTrader – 2,721,185 breached accounts

• PLANET Technology Switches Face Multiple Vulnerabilities, Urgent Firmware Updates Advised

• Cloud Security Firm Apono Raises $15.5 Million to Expand AI-Powered Access Management

• Windows 11, version 24H2 security baseline

• NCA unmasks man it suspects is both ‘Evil Corp kingpin’ and LockBit affiliate

• Microsoft Unveils Copilot Vision AI Tool, but Highlights Security After Recall Debacle

• OWASP Global AppSec SF 2024: Empowering Developer Security As A Community

• Veeam Recon Scanner identifies adversary tactics, techniques, and procedures

• Red Sift Radar diagnoses issues through AI-powered insights

• Exabeam introduces AI-driven LogRhythm Intelligence

• Halcyon offers ransomware protection for Linux environments

• T-Mobile to Pay $15.75m Penalty for Multiple Data Breaches

• Optigo Networks ONS-S8 Spectra Aggregation Switch

• The Art and Science of CX Success

• Check Point Software Completes Cyberint Acquisition

• Over Half of Cyber Professionals Feel Their Budget is Underfunded

• Building a Better Cybersecurity Awareness Program

• Authorities Warn of Growing Iranian Spear Phishing Threat Against Journalists and Diplomats

• Exabeam Brings AI Security Operations to On-Premises, Cloud Native and Hybrid Environments

• RSA and Swissbit join forces to secure government agencies

• Eon emerges from stealth with $127M to bring a fresh approach to back up cloud infrastructure

• Logpoint Strengthens SIEM by Acquiring Muninn AI-Powered NDR

• KartLANPwn Flaw Exploits Mario Kart 8 Deluxe LAN Play Feature for RCE

• Organizations Warned of Exploited SAP, Gpac and D-Link Vulnerabilities

• Why SMBs Have Become Easy Prey for Cyber Criminals

• The Rising Threat of Payment Fraud: How It Impacts Businesses and Ways to Counter It

• ConnectSecure unveils M365 Assessment Module to help MSPs identify security weaknesses

• Dragos acquires Network Perception to boost security in OT environments

• I’ve weathered a lot of hurricanes – these are my must-have storm tracking tools

• What Is Threat Hunting In Cybersecurity?

• Top 7 Cyber Threat Hunting Tools Reviewed by Experts for 2024

• CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog

• JPCERT Shares Windows Event Log Tips to Detect Ransomware Attacks

• What CIRCIA Means for Critical Infrastructure Providers and How Breach and Attack Simulation Can Help

• Five Eyes Agencies Put Focus on Active Directory Threats

• Researcher Details RCE Flaw (CVE-2024-36435) in Supermicro BMC IPMI Firmware

• Malicious Actors Use Infected PyPI Packages to Target Roblox Da Hood Game Cheaters

• Kia Dealer Portal Vulnerability Risked Millions of Cars

• AFP News Agency’s Content Delivery Systems Hit by Cyberattack

• Apono Raises $15.5 Million for Cloud Access Platform

• 5 Actionable Steps to Prevent GenAI Data Leaks Without Fully Blocking AI Usage

• US Grounds SpaceX Falcon After Second-Stage Issue

• Facebook and Instagram passwords were stored in plaintext, Meta fined

• Windows 11 users, beware: A recent update has been causing constant reboots

• News agency AFP hit by cyberattack, client services impacted

• GitLab Patches: Severe SAML Authentication Bypass Flaw Fixed

• CISA and FBI Issue Alert on XSS Vulnerabilities

• Use Windows event logs for ransomware investigations, JPCERT/CC advises

• Google Workspace Announced New Password Policies, What is Changing

• We’re Lowering the Requirement for Entry Level to Just 8 Years of Experience

• Detecting Vulnerability Scanning Traffic From Underground Tools Using Machine Learning

• China Telecom Trains 1 Trillion-Parameter AI Model Using Domestic Chips

• Judge Adds New Terms For X Brazil Re-Entry

• US Moves To Facilitate AI Chip Shipments To Middle East

• Key Takeaways from the 2024 Crypto Crime Mid-Year Update

• Monitoring Your Files for Security and Compliance

• Key Group: another ransomware group using leaked builders

• June 2024 Cyber Attacks Statistics

• UMC Health System Diverts Patients Following Ransomware Attack

• Cybersecurity Awareness Month 2024: The Top Four Ways to Secure Our World

• Cybersecurity News: T-Mobile data breach fines, Iranian hackers charged, Deepfake scam hits U.S. senate

• How to Create a Secure Password: 7 Best Practices for 2024

• Ten Million Brits Hit By Fraud in Just Three Years

• TechRepublic Premium Editorial Calendar: Policies, Hiring Kits, and Glossaries for Download

• OWG Parallax Private Cloud Desktop simplifies business operations

• California Governor Vetoes AI Safety Bill

• Epic Sues Google, Samsung Over App Store Barriers

• Digitally Curious

• Sick of ads on Android? Change these 5 settings for more privacy – fast

• North Korea-linked APT Kimsuky targeted German defense firm Diehl Defence

• Phishing Attacks on Australia Disguised as Atlassian

• DragonForce Ransomware Expands RaaS, Targets Firms Worldwide

• PoC Exploit Shows Local Privilege Escalation Risk in Linux

• Critical XSS Flaw Discovered in Filament Necessitates Urgent Update for Laravel Developers

• Multiple Vulnerabilities Discovered in PHP, Prompting Urgent Security Updates

• Apono raises $15.5 million to accelerate product development

• Free Sniper Dz Phishing Tools Fuel 140,000+ Cyber Attacks Targeting User Credentials

• ISACA: European Security Teams Are Understaffed and Underfunded

• Top Paying Countries for Cybersecurity Experts

• SpaceX Capsule Docks With ISS For Starliner Rescue Mission

• Password Advice for the Rest of Us

• Top Trending Cybersecurity news headlines on Google for today

• CISA Warns of Four Vulnerabilities that Exploited Actively in the Wild

• Ambulances Still Diverted as UMC Faces Ongoing Cybersecurity Incident

• Book Review: “Premier CISO – Board & C-Suite” by Michael S. Oberlaender

• Three Iranian Cyber Actors Indicted for Election Interference and Hacking Campaign

• Critical Infrastructure at Risk: Vulnerabilities Discovered in Automatic Tank Gauging

• 3 easy microsegmentation projects

• New Cryptojacking Attack Targets Docker API to Create Malicious Swarm Botnet

• Password management habits you should unlearn

• Reducing credential complexity with identity federation

• Infosec products of the month: September 2024

• U.K. Hacker Charged in $3.75 Million Insider Trading Scheme Using Hacked Executive Emails

• ISC Stormcast For Tuesday, October 1st, 2024 https://isc.sans.edu/podcastdetail/9160, (Tue, Oct 1st)

• The 5 Best VoIP Routers (Wired, Wireless, and Mesh)

• Splunk Urges Australian Organisations to Secure LLMs

• Crooked Cops, Stolen Laptops & the Ghost of UGNazi

• Trouble in Da Hood: Malicious Actors Use Infected PyPI Packages to Target Roblox Cheaters

• T-Mobile US to cough up $31.5M after that long string of security SNAFUs

• Ransomware forces hospital to turn away ambulances

• Rackspace monitoring systems hit by zero-day

• Australian e-tailer digiDirect customers’ info allegedly stolen and dumped online

• Microsoft Readies a More Secure Recall Feature for Release

Generated on 2024-10-02 23:55:09.825125