IT Security News Daily Summary 2024-10-07

• 2024-10-07 – Data dump (Formbook, possible Astaroth/Guildma, Redline Stealer, unidentified malware)

• American Water stops billing for H2O due to ‘cybersecurity incident’

• 7,000 WordPress Sites Affected by Unauthenticated Critical Vulnerabilities in LatePoint WordPress Plugin

• Integrate Spring Boot With jOOQ, Liquibase, and Testcontainers

• Timeline: 15 Notable Cyberattacks and Data Breaches

• Germany Rushes to Expand Biometric Surveillance

• USENIX NSDI ’24 – Reverie: Low Pass Filter-Based Switch Buffer Sharing for Datacenters with RDMA and TCP Traffic

• Okta Fixes Critical Vulnerability Allowing Sign-On Policy Bypass

• Comcast and Truist Bank customers impacted by debt collector’s breach

• Cops love facial recognition, and withholding info on its use from the courts

• Need to manage Linux passwords on the command line? No GUI, no problem!

• The 30-year-old internet backdoor law that came back to bite

• Universal Music data breach impacted 680 individuals

• American Water discloses breach, utilities unaffected

• Massive Global Fraud Campaign Exploits Fake Trading Apps on Apple and Google Platforms

• MC2 Data Breach Exposes Millions: Stay Protected

• Cryptomining and Proxyjacking: The Rise of Perfctl Malware

• The waterproof Blink Mini 2 security camera is down to $20 this October Prime Day

• Large scale Google Ads campaign targets utility software

• The Past Month in Stolen Data

• DOJ Wants to Claw Back $2.67 Million Stolen by Lazarus Group

• Apple fixes bugs in macOS Sequoia that broke some cybersecurity tools

• Chinese cyberspies reportedly breached Verizon, AT&T, Lumen

• Vulnerability Summary for the Week of September 30, 2024

• Leveling Up Security: Understanding Cyber Threats in the Gaming Industry

• Universal Music Group Admits Data Breach

• macOS Sequoia: System/Network Admins, Hold On!, (Mon, Oct 7th)

• American Water warns of billing outages after finding hackers in its systems

• Simplifying SBOM compliance with Sonatype under India’s cybersecurity framework

• New FakeUpdate Cyber Campaign Spreads Updated WarmCookie Backdoor in France

• Insurance Companies May Halt Ransomware Payment Coverage Amid White House Push

• Kyiv’s hackers launched an unprecedented cyber attack on Russian state media VGTRK on Putin’s birthday

• MoneyGram: No Proof Ransomware Was Behind The Recent Cyber Attack

• Harvard Student Uses Meta Ray-Ban 2 Glasses and AI for Real-Time Data Scraping

• Advanced Threat Group GoldenJackal Exploits Air-Gapped Systems

• Cisco IOS XE Automation at Cisco Live APJC 2024

• PTaaS vs. Bug Bounty Programs: Complementary or Competing Approaches?

• Board-CISO Mismatch on Cyber Responsibility, NCSC Research Finds

• Learn Cybersecurity Essentials for Just $40 from Home

• ICO Releases New Data Protection Audit Framework

• OpenSSL 3.4 beta released

• Hybrid Analysis Utilizes Criminal IP’s Robust Domain Data for Better Malware Detection

• iPhone flaw could read your saved passwords out loud. Update now!

• US Government, Microsoft Aim to Disrupt Russian threat actor ‘Star Blizzard’

• Multi-cloud Strategies Making DDI and DNS Cumbersome to Manage

• Reachability and Risk: Prioritizing Protection in a Complex Security Landscape

• EU Urged to Harmonize Incident Reporting Requirements

• China’s Salt Typhoon Hacks AT&T and Verizon, Accessing Wiretap Data: Report

• FBCS data breach impacted 238,000 Comcast customers

• Tips for Cybersecurity Awareness Month

• Action1 offers extended endpoint management capabilities for macOS devices

• Tech Professionals Highlight Critical AI Security Skills Gap

• Mamba 2FA: A new contender in the AiTM phishing ecosystem

• Beyond Fines: The Real Value of Achieving Cybersecurity Compliance

• Linux systems targeted with stealthy “Perfctl” cryptomining malware

• An anti-theft upgrade is coming to Android phones. Here’s how to see if you have it yet

• Australian Cybersecurity Professionals Confess To Growing Job Stress

• Comcast says customer data stolen in ransomware attack on debt collection agency

• Akamai Embeds API Security Connector in CDN Platform

• Critical Vulnerabilities Expose Nearly 1 Million DrayTek Routers Globally

• Top 10 SentinelOne Competitors & Alternatives in 2024 [Features, Pricing & Reviews]

• Vulnerable APIs and Bot Attacks Costing Businesses Up to $186 Billion Annually

• Critical Apache Avro SDK RCE flaw impacts Java applications

• Largest Recorded DDoS Attack is 3.8 Tbps

• Cacti Network Monitoring Tool Vulnerability Let Attackers Execute Remote Code

• RCE Vulnerability (CVE-2024-30052) Allow Attackers To Exploit Visual Studio via Dump Files

• New Gorilla Botnet Launches Over 300,000 DDoS Attacks Across 100 Countries

• Modernization of Authentication: Webinar on MFA, Passwords, and the Shift to Passwordless

• The Age of Virtual Assistants

• Google Threatens New Zealand News Ban Over Law

• EU States Approve China EV Tariffs In Split Vote

• US Think Tank Probes NASA Staff Over Trump, Musk Criticism

• Meta Shows Sound-Capable AI Video Generation Tool

• Microsoft & DOJ Dismantles Hundreds of Websites Used by Russian Hackers

• WordPress Security Checklist

• Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

• Awaken Likho is awake: new techniques of an APT group

• Google Blocks Unsafe Android App Sideloading in India for Improved Fraud Protection

• THN Cybersecurity Recap: Top Threats and Trends (Sep 30 – Oct 6)

• Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications

• Fraud Repayment Rules Could Leave Victims Struggling, CTSI Claims

• Critical Skills Gap in AI, Cloud Security

• CosmicSting Exploit Targets Adobe Commerce and Magento Stores

• Fraud Repayment Rules Could Leave Victims Struggling – Non-Profit

• How to Prepare Identity Stack to Adopt the Zero-Trust Model

• Get Safe Online Launches New Scam Detector

• A week in security (September 30 – October 6)

• Embattled users worn down by privacy options? Let them eat code

• What is Command Prompt, what is Terminal and which is better?

• Musk Remains Silent Over SEC Interview

• An anti-theft upgrade is coming to Android phones. Here’s how to see if you have it

• Justifying Compliance Tools Before a Breach Occurs

• Are Your Containers Secure? Answer These 5 Questions and Find Out

• Man pleads guilty to stealing over $37 Million worth of cryptocurrency

• VIPRE Introduces All-in-one Endpoint EDR+MDR Package for  24/7 Managed Security

• Russia finally cracks down on cyber crimes: Cyber Security Today for Monday, October 7th, 2024

• New DDoS Attack Vector Discovered in CUPS, Exposing 58,000+ Vulnerable Devices Online

• E.U. Court Limits Meta’s Use of Personal Facebook Data for Targeted Ads

• Tools for Cyber Threat Hunting: Enhancing Security Posture

• Chinese Group Hacked US Court Wiretap Systems

• U.S. CISA adds Synacor Zimbra Collaboration flaw to its Known Exploited Vulnerabilities catalog

• CloudSEK Debuts Free Deep Fake Detection Technology

• DHS tracks down $ 4.3 billion ransomware payments

• Check Point Software Acquires Cyberint

• The Future of Network Access Control: Transitioning to Universal ZTNA

• 19.6K+ Public Zimbra Installations Vulnerable to Code Execution Attacks – CVE-2024-45519

• Transforming cloud security with real-time visibility

• The case for enterprise exposure management

• SOC teams are frustrated with their security tools

• Rspamd: Open-source spam filtering system

• Meet the shared responsibility model with new CIS resources

• ISC Stormcast For Monday, October 7th, 2024 https://isc.sans.edu/podcastdetail/9168, (Mon, Oct 7th)

• IT Security News Weekly Summary – Week 40

• IT Security News Daily Summary 2024-10-06

• China-linked group Salt Typhoon hacked US broadband providers and breached wiretap systems

• How Cybercriminals Use Stolen Data to Target Companies — A Deep Dive into the Dark Web

• 5 hurricane-tracking apps I rely on as a Floridian tech pro – and which one is my favorite

• USENIX NSDI ’24 – Credence: Augmenting Datacenter Switch Buffer Sharing with ML Predictions

• 5 best hurricane-tracking apps that I rely on as a Floridian tech pro

• Indian Textile Tycoon Duped of ₹7 Crore in Elaborate ‘Digital Arrest’ Scam

• How to Protect Your PC from Ransomware with Windows Defender

• Tony Fadell-backed Plumerai brings on-device AI to home security cameras

• SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 14

• Global Governments Address Ransomware Threat with New Guidelines

• Law Enforcement From Thirty Nine Nations Team Up to Tackle Ransomware Attacks

• Security Affairs newsletter Round 492 by Pierluigi Paganini – INTERNATIONAL EDITION

• It’s Time to Sound the Alarm on SMB Cyber Threats

• Learning from the NASCIO Annual Conference 2024

• Google Pixel 9 supports new security features to mitigate baseband attacks

• Week in review: Critical Zimbra RCE vulnerability exploited, Patch Tuesday forecast

Generated on 2024-10-07 23:55:09.771690