IT Security News Daily Summary 2024-10-03

• Understanding the Dependency Injection Lifecycle: Singleton, Scoped, and Transient With Detailed Examples

• Check Point Software Recognized as a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024

• 3thix partners with Avalanche on web3 gaming ad data

• Make Cybersecurity Awareness Month a Game-Changer for You and Your Career

• Check Point Software Recognized as a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024

• Check Point Software Recognized as a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024

• Check Point Software Recognized as a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024

• A Leader in 2024 Forrester Enterprise Firewall Solutions Wave

• Average North American CISO pay now $565K, mainly thanks to one weird trick

• Google Adds New Pixel Security Features to Block 2G Exploits and Baseband Attacks

• 2024-10-01 – Ukrainian language malspam pushes RMS-based malware

• 2024-10-03 – SmartLoader to Lumma Stealer

• Check Point Software Recognized as a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024

• Microsoft SFI progress report elicits cautious optimism

• News alert: SquareX shows how Google’s MV3 standard falls short, putting millions at risk

• News alert: Doppler fortifies ‘secrets management’ with Change Requests auditable approval feature

• Check Point Software Recognized as a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024

• Microsoft security overhaul offers blueprint for SecOps

• Tesla Recalls 27,000 Cybertrucks Over Rear Camera Issue

• Voting for the first time—4 cybersecurity tips for new voters

• Check Point Software Recognized as a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024

• You don’t need to pay for antivirus software – here’s why

• CISA is warning us (again) about the threat to critical infrastructure networks

• Check Point Software Recognized as a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024

• Daniel Stori’s Turnoff.US: ‘Terminal Password Typing’

• Android 14 Adds New Security Features to Block 2G Exploits and Baseband Attacks

• Browser Firms Press EU To Reconsider Microsoft Edge As Gatekeeper

• New Linux Malware ‘Perfctl’ Targets Millions by Mimicking System Files

• Check Point Software Recognized as a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024

• The TechCrunch Cyber Glossary

• Evaluating Mitigations & Vulnerabilities in Chrome

• Pixel’s Proactive Approach to Security: Addressing Vulnerabilities in Cellular Modems

• How Snoozing on Cybersecurity Fails Modern Businesses

• Evil Corp Faces New Sanctions and BitPaymer Ransomware Charges

• Beware of These Email Warning Signs to Stay Safe Online

• JPCERT Shares Tips for Detecting Ransomware Attacks Using Windows Event Logs

• Cybersecurity Attacks Rise in Hong Kong, Scammers Steal Money

• The Rise of VPNs: A Tool for Privacy or a False Promise

• Check Point Software Recognized as a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024

• The 6 Best Email Security Software & Solutions of 2024

• Microsoft Invests €4.3 Billion In Italy For AI, Cloud

• Check Point Software Recognized as a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024

• ‘Defunct’ DOJ ransomware task force raises questions, concerns

• Celebrating Latin and Hispanic Heritage Month

• DOJ, Microsoft seize 107 domains used in Russia’s Star Blizzard phishing attacks

• Litespeed Cache Plugin Flaw Allows XSS Attack, Update Now

• Customer compliance and security during the post-quantum cryptographic migration

• Wordfence Intelligence Weekly WordPress Vulnerability Report (September 23, 2024 to September 29, 2024)

• Check Point Software Recognized as a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024

• One-Third of UK Teachers Lack Cybersecurity Training, While 34% Experience Security Incidents

• Eliminating Memory Safety Vulnerabilities at the Source

• The Secret Weakness Execs Are Overlooking: Non-Human Identities

• Microsoft and US Government Disrupt Russian Star Blizzard Operations

• Operation Cronos extension on LockBit Ransomware and FIN7 Deepfake Malware

• Check Point Software Recognized as a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024

• The state of generative AI in 2024

• Celebrating Cisco’s Solutions Engineers in Honor of National Techies Day

• Thousands of Adobe Commerce e-stores hacked by exploiting the CosmicSting bug

• The Complete Guide to PAM Tools, Features, And Techniques

• Critical Ivanti Endpoint Manager flaw exploited (CVE-2024-29824)

• CeranaKeeper Emerges as New Threat to Thai Government Networks

• Check Point Software Recognized as a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024

• UWA Innovates: Network Upgrade Transforms Student Experience, Boosts Security, and Drives Sustainability

• Doppler Launches ‘Change Requests’ to Strengthen Secrets Management Security with Audited Approvals

• New Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and Proxyjacking

• Millions of Enterprises at Risk: SquareX Shows How Malicious Extensions Bypass Google’s MV3 Restrictions

• Check Point Software Recognized as a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024

• OpenText report raises awareness for consumer digital life protection as privacy concerns increase with generative AI use

• Subnet Solutions Inc. PowerSYSTEM Center

• CISA Releases Three Industrial Control Systems Advisories

• TEM Opera Plus FM Family Transmitter

• Delta Electronics DIAEnergie

• CISA issues warning about another Ivanti flaw under active attack

• Average North American CISO salary now $565K, mainly thanks to one weird trick

• Why Fuzzing Isn?t Enough to Test Your APIs for Security Issues

• Harvard Students Use Meta Glasses To Dox People In Real-Time

• Webinar Announcement: Attack Surface Management to the Rescue – Find, Fix, Fortify Your ASM with Criminal IP

• Trends: Hardware gets AI updates in 2024

• Check Point Software Recognized as a Leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024

• Virtual Patching: A Proactive Approach to API Security

• Darktrace brings real-time cloud detection and response to Microsoft Azure customers

• Malwarebytes Browser Guard updates block unwanted and unsafe content

• North Korean Hackers Using New VeilShell Backdoor in Stealthy Cyber Attacks

• Not Black Mirror: Meta’s smart glasses used to reveal someone’s identity just by looking at them

• Browser Guard now flags data breaches and better protects personal data

• Stay Safe This Prime Day: Check Point Identifies Rise in Phishing Attacks and Scam Emails

• Customers Praise Check Point CloudGuard WAF for Exceptional Web Application and API Security

• Cryptomining perfctl malware swarms Linux machines

• A Single Cloud Compromise Can Feed an Army of AI Sex Bots

• License Plate Readers Are Creating a US-Wide Database of More Than Just Cars

• Cloudflare mitigated new record-breaking DDoS attack of 3.8 Tbps

• India Launches New Initiatives to Combat Spam and Cyber Fraud

• CUPS vulnerabilities could be abused for DDoS attacks

• Tick Tock.. Operation Cronos Arrests More LockBit Ransomware Gang Suspects

• The First 10 Days of a vCISO’S Journey with a New Client

• Two British-Nigerian men sentenced over multimillion-dollar business email scam

• Northern Ireland Police to Pay £750,000 Fine Following Data Breach

• Radiology provider exposed tens of thousands of patient files

• 2024’s Best Open Source Cybersecurity Tools

• Empathy in Action: How Cisco Changes Lives with The Opportunity Platform

• Legit Posture Score empowers security teams to measure and manage their AppSec posture

• Cybersecurity Spending on the Rise, But Security Leaders Still Feel Vulnerable

• Microsoft Makes Recall Opt-In While Improving Privacy

• Biden Exempts Some Chip Factories From Extra Environmental Scrutiny

• ANY.RUN Upgrades Threat Intelligence to Identify Emerging Threats

• Weird Zimbra Vulnerability

• License Plate Readers Are Creating a US-Wide Database of Political Lawn Signs and Bumper Stickers

• Private US companies targeted by Stonefly APT

• INTERPOL Arrests 8 in Major Phishing and Romance Fraud Crackdown in West Africa

• Hunting for IoCs: from singles searches to an automated and repeatable process

• ChatGPT Maker OpenAI Raises $6.6bn In Funding

• How to Balance Data Storage, Features, and Cost in Security Applications

• 10 Must-Read Books on Cybersecurity

• The 2024 ERA-ENISA Conference on Railway Cybersecurity seeks to strengthen sector preparedness and resilience against current threats

• Ransomware crew infects 100+ orgs monthly with new MedusaLocker variant

• Northern Ireland Police Data Leak Sees Service Fined by ICO

• Threat actor believed to be spreading new MedusaLocker variant since 2022

• Is it a good idea to pirate a video game?

• Q2 2024 Cyber Attacks Statistics

• Brits hate how big tech handles their data, but can’t be bothered to do much about it

• LockBit Ransomware and Evil Corp Members Arrested and Sanctioned in Joint Global Effort

• Crypto-Doubling Scams Surge Following Presidential Debate

• Email Phishing Attacks Surge as Attackers Bypass Security Controls

• Rogue AI: What the Security Community is Missing

• China-aligned CeranaKeeper Makes a Beeline for Thailand

• SSPM: A Better Way to Secure SaaS Applications

• LockBit Ransomware and Evil Corp Leaders Arrested and Sanctioned in Joint Global Effort

• FIN7 Gang Hides Malware in AI “Deepnude” Sites

• Hackers Now Exploit Ivanti Endpoint Manager Vulnerability to Launch Cyber Attacks

• Cisco Nexus Vulnerability Let Hackers Execute Arbitrary Commands on Vulnerable Systems

• CISA Warns of Critical Vulnerabilities Switches Used in Critical Manufacturing

• Decoding the Double-Edged Sword: The Role of LLM in Cybersecurity

• AuthenticID Velocity Checks detects fraudulent activities

• Tor Browser 13.5.6 Released – What’s New!

• Telegram revealed it shared U.S. user data with law enforcement

• Ivanti Endpoint Manager Flaw Actively Targeted, CISA Warns Agencies to Patch

• Hackers distributing Prince Ransomware by impersonating Royal Mail

• Small Steps, Big Impact: Expert Tips for Building a Stronger Cyber Defense

• Three hard truths hindering cloud-native detection and response

• Spotting AI-generated scams: Red flags to watch for

• How to use the Apple Passwords app

• 15% of office workers use unsanctioned GenAI tools

• Ransomware activity shows no signs of slowing down

• Whitepaper: Reach higher in your career with cloud security

• ISC Stormcast For Thursday, October 3rd, 2024 https://isc.sans.edu/podcastdetail/9164, (Thu, Oct 3rd)

• Kickstart Your DShield Honeypot [Guest Diary], (Thu, Oct 3rd)

• US and Other Countries Outline Principles for Securing OT

• A smarter way to manage malware with Red Hat Insights

• Vote for EFF’s ‘How to Fix the Internet’ Podcast in the Signal Awards!

• 700K+ DrayTek routers are sitting ducks on the internet, open to remote hijacking

• IT Security News Daily Summary 2024-10-02

• Vote for EFF’s ‘How to Fix the Internet’ podcast in the Signal Awards!

• Two simple give-me-control security bugs found in Optigo network switches used in critical manufacturing

• U.S. CISA adds Ivanti Endpoint Manager (EPM) flaw to its Known Exploited Vulnerabilities catalog

• 14 New DrayTek routers’ flaws impacts over 700,000 devices in 168 countries

• Security related Docker containers, (Wed, Oct 2nd)

• Oracle To Invest $6.5 Billion In Malaysia To Expand Public Cloud Region

• Exclusive: Google Cloud Updates Confidential Computing Portfolio

• Why ASPM Requires an Independent Approach: Exploring the Role of ASPM vs. CNAPP | Part 1

• Cyberattack on Maui’s Community Clinic Affects 123,000 Individuals in May

• Why system resilience should mainly be the job of the OS, not just third-party applications

• Digital ID Isn’t for Everybody, and That’s Okay | EFFector 36.13

• Zero-Day Breach at Rackspace Sparks Vendor Blame Game

• Fake Trading Apps Target Victims Globally via Apple App Store and Google Play

• 7 Best Practices for Job Orchestration

• Top 6 Cybersecurity Threat Detection Use Cases: How AI/ML Can Help Detect Advanced and Emerging Threats

• Russia Fines Google, Discord For ‘Banned Content’

• Decade-Old Linux Vulnerability Can Be Exploited for DDoS Attacks on CUPS

• Vera AI launches ‘AI Gateway’ to help companies safely scale AI without the risks

• The Top 5 Largest Scale Intrusions in 2023

• Leverage vCISO Services to Unlock Managed Service Provider (MSP) Success

• SeeMetrics Expands The Use of Cybersecurity Metrics to Empower The Full Security Team

• What is Android System WebView and should you uninstall it?

• Region 8 Invites You to Secure Our World

• China-Linked CeranaKeeper Targeting Southeast Asia with Data Exfiltration

• ACSC and CISA Launch Critical OT Cybersecurity Guidelines

• Five Strategies for Creating Water-Tight Cybersecurity for Business Outcome & Value

• Cyber attacks anticipated with the start of Israel and Iran war

• How NaaS is Reshaping Enterprise Connectivity

• Ofcom Preparing For ‘Strong Action’ Against Tech Giants – Report

• AWS LetsEncrypt Lambda or Why I Wrote a Custom TLS Provider for AWS Using OpenTofu and Go

• CISA Adds One Known Exploited Vulnerability to Catalog

• News agency AFP notifies French authorities of potential data breach

• Admin Rights in Action: How Hackers Target Privileged Accounts

• Ransomware Attack Disrupts UMC Health System Activity

• Lockin Company’s Approach to Zero Trust Security and Rising Phishing Threats with its security software LIAPP, LIKEY, and LISS

• Why I Came Out of (Pseudo) Retirement to Help Solve the Non-Human Identity Challenge as Aembit’s CISO

• Microsoft Warns of Storm-0501 Ransomware Attacks on U.S. Cloud Systems

• UK and US Warn of Rising Iranian Spear Phishing Threat

• Fake Job Applications Deliver Dangerous More_eggs Malware to HR Professionals

• Stonefly Group Targets US Firms With New Malware Tools

• DevOps Decoded: Prioritizing Security in a Dynamic World

• Google To Invest $1 Billion For Data Centre In Thailand

• Pig Butchering: Fake Trading Apps Target Crypto on Apple, Google Play Stores

• Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities

• Join Us 10-18-24 for “Hacking the Hype of Zero Trust”

• Enhancing data privacy with layered authorization for Amazon Bedrock Agents

• Misconfiguration Madness: Thwarting Common Vulnerabilities in the Financial Sector

• Rhadamanthys information stealer introduces AI-driven capabilities

• MITRE Adds Mitigations to EMB3D Threat Model

• Metomic Data Classification automates complex data management workflows

• Venafi helps organizations solve more machine identity security problems

• X Value Down By 79 Percent Since Elon Musk Purchase

• Cybersecurity Awareness Month: Cybersecurity awareness for developers

• 5,000 Fake Microsoft Emails that Your Employees Could Fall For

• The Next Iteration of Privacy: What Businesses Should Know About New Privacy Laws in Oregon, Texas, and Florida

• Average CISO Compensation Tops $500K

• Concentric AI helps monitor and remediate risky Copilot activity

• PlexTrac unveils new capabilities to prioritize proactive security remediation

• Advancing Federal Cybersecurity With Zero Trust Principles

• Cryptocurrency Wallets Targeted via Python Packages Uploaded to PyPI

• Mario Duarte, Former Snowflake Cybersecurity Leader, Joins Aembit as CISO to Tackle Non-Human Identities

• Harmonic Security raises $17.5 million to improve data security for organizations

• Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit

• 80% of Manufacturing Firms Have Critical Vulnerabilities

• Obsidian Security Warns of Rising SaaS Threats to Enterprises

• Stopping Attacks Early: The Power of Endpoint Telemetry in Cybersecurity

• Test before patching. Windows update KB5043145 turns computers unstable

• NIST’s security flaw database still backlogged with 17K+ unprocessed bugs. Not great

• 5 Must-Have Tools for Effective Dynamic Malware Analysis

• BT Recoups £105 Million By Recycling Copper Cables

• 7th Cybersecurity Forum: Power grids cybersecurity ascending to prominence

• California AI Safety Bill Vetoed

• Critical Zimbra RCE vulnerability under mass exploitation (CVE-2024-45519)

• ‘Patch yesterday’: Zimbra mail servers under siege through RCE vuln

• Critical Vulnerability in TI WooCommerce Wishlist Plugin Exposes 100K+ Sites to SQL Attacks

• Researchers Warn of Ongoing Attacks Exploiting Critical Zimbra Postjournal Flaw

• Andariel Hacking Group Shifts Focus to Financial Attacks on U.S. Organizations

• Critical Zimbra Postjournal flaw CVE-2024-45519 actively exploited in the wild. Patch it now!

• Finding a needle in a haystack: Machine learning at the forefront of threat hunting research

• Critical Zimbra Vulnerability Exploited One Day After PoC Release

• Addressing Git Vulnerabilities in Ubuntu 18.04 and 16.04

• 4 new LockBit-related arrests, identities of suspected Evil Corp members, affiliates revealed

• Cybersecurity News: LockBit ties to Evil Corp, public records flaws, ransomware hits Texas hospital

• Patch Tuesday early release has huge issues: Cyber Security Today for Wednesday, October 2, 2024

• Russian Cyber Offensive Shifts Focus to Ukraine’s Military Infrastructure

• New Bluetooth Vulnerability Leak, Your Passcode to Hackers During Pairing

• Face Off: US Election Debate Sparks New Wave of Crypto-Doubling Scams

• How to Share a Wi-Fi Password: A Step-by-Step Guide

• Meta Teams Up with Banks to Target Fraudsters

• Major Database Security Threats and How to Prevent Them

• Tripwire Patch Priority Index for September 2024

• CyberSmart and e92plus Announce Partnership to Deliver Cyber Risk Management in the UK and Ireland

• What Happens After p=Reject: Beyond the DMARC Golden Standard

• Catalogic DPX 4.11 strengthens data security

• Share of Women in UK Cyber Roles Now Just 17%

• Bulbature, beneath the waves of GobRAT

• Protecting private data in AI deployments

• Microsoft Alert: New INC Ransomware Targets US Healthcare

• Cybersecurity Professionals Operate Under Increased Stress Levels

• Pisces Introduces Innovative Tools KLogEXE and FPSpy

• SAFE X equips CISOs with integrated data from all their existing cybersecurity products

• Balbix D3 accelerates vulnerability mitigation

• GhostStrike – A Cyber Security Tool for Red Team to Evade Detection

• Police arrested four new individuals linked to the LockBit ransomware operation

• Cybersecurity Awareness Month: Securing our world—together

• Enveil enables organizations to securely train machine learning models

• American CISOs Face Budget Challenges in Cybersecurity Defense

• Password Fatigue Giving Rise to Cyber Threats

• Community Clinic of Maui says 123,000 affected by May cyberattack

• The fix for BGP’s weaknesses has big, scary, issues of its own, boffins find

• Evil Corp hit with new sanctions, BitPaymer ransomware charges

• How to Build a SOAR Playbook: Start with the Artifacts

• PyPI Repository Found Hosting Fake Crypto Wallet Recovery Tools That Steal User Data

• Researchers Sound Alarm on Active Attacks Exploiting Critical Zimbra Postjournal Flaw

• Passkeys and Cybersecurity Awareness: A New Era of Business Security

• More Evil Corp Actors Exposed, Including LockBit Affiliate

• Crook made millions by breaking into execs’ Office365 inboxes, feds say

• Zimbra RCE Vuln Under Attack Needs Immediate Patching

• Cyble Researchers Uncover Sophisticated Attack Using VSCode for Remote Access

• Iran-linked Threat Group Handala Actively Targets Israel

• Enhancing firewall management with automation tools

• Suricata: Open-source network analysis and threat detection

• Cybersecurity jobs available right now: October 2, 2024

• What bots mean for businesses and consumers

• Cybersecurity hiring slows, pros’ stress levels rise

• ISC Stormcast For Wednesday, October 2nd, 2024 https://isc.sans.edu/podcastdetail/9162, (Wed, Oct 2nd)

• ASD’s ACSC, CISA, FBI, NSA, and International Partners Release Guidance on Principles of OT Cybersecurity for Critical Infrastructure Organizations

• Mitsubishi Electric MELSEC iQ-F FX5-OPC

Generated on 2024-10-03 23:55:10.177021