IT Security News Daily Summary 2024-10-10

• Lynx Ransomware: A Rebranding of INC Ransomware

• Remediation vs. Mitigation: The Choice Between Instant or Indirect Action

• How the Auth0 and Aembit Integration Boosts Non-Human Access Security

• Fidelity Data Breach Exposes Data of Over 77,000 Customers

• New IPANDETEC Report Shows Panama’s ISPs Still Lag in Protecting User Data

• Tonic.ai Product Updates: October 2024

• Fidelity Data Breach Exposes Data From Over 77,000 Customers

• OpenAI details how threat actors are abusing ChatGPT

• Coalition: Ransomware severity up 68% in first half of 2024

• Top 11 Cybersecurity Questions Every CISO Should Be Ready to Answer

• What NIST’s latest password standards mean, and why the old ones weren’t working

• AMD Launches New AI, Server Chips To Expand Nvidia Challenge

• Qantas Employee Data Misuse: Over 800 Bookings Affected by Rogue Staff

• Downside of Tech: Need for Upgraded Security Measures Amid AI-driven Cyberattacks

• Microsoft Urges Millions to Upgrade as Windows Support Ends, Security Risks Increase

• Why Trust Drives the Future of Cybersecurity Marketing

• Apple Patches VoiceOver Flaw That Could Read Passwords Aloud

• Chinese Hackers Breach US Wiretap Systems – Report

• Apple’s iPhone Mirroring bug could expose your personal apps to your employer

• How to encrypt a file on Linux, MacOS, and Windows – and why

• Deloitte: Why Only a Quarter of Cybersecurity Professionals are Women

• Wordfence Intelligence Weekly WordPress Vulnerability Report (September 30, 2024 to October 6, 2024)

• Fisker Unable To Migrate EV Data To New Owner’s Server

• Using Chrome’s accessibility APIs to find security bugs

• Disinformation Campaign Targets Moldova Ahead of EU Referendum

• Strengthening security in the era of generative AI: Must-attend sessions at re:Invent 2024

• Marriott agrees to pay $50 million to its users of 50 states for data breach

• Internet Archive (Archive.Org) Hacked: 31 Million Accounts Compromised

• USENIX NSDI ’24 – MegaScale: Scaling Large Language Model Training to More Than 10,000 GPUs

• Qualys Unfurls Risk Operations Center Platform

• Internet Archive breach compromises 31 million accounts – what you need to know

• Rockwell Automation ControlLogix

• The Next Wave of Service Assurance: Driving Revenue and Customer Experience

• Partners who use Cisco Marketing Velocity can generate 5.2x more pipeline

• E-skimming campaign uses Unicode obfuscation to hide the Mongolian Skimmer

• Over 10m Conversations Exposed in AI Call Center Hack

• Elon Musk’s X To Avoid EU’s Tough DMA – Report

• Mozilla Warns Of Firefox Zero-Day Actively Exploited In Cyber Attacks

• Best Anti-Malware Software for Mac 2025

• Siemens SIMATIC S7-1500 and S7-1200 CPUs

• Best Practices to Configure BIG-IP LTM Systems to Encrypt HTTP Persistence Cookies

• EU Adopts Cyber Resilience Act for Connected Devices

• Risk, reward and reality: Has enterprise perception of the public cloud changed?

• What is extended detection and response (XDR)?

• Fore-get about privacy, golf tech biz leaves 32M data records on the fairway

• Secure your AI initiatives

• Understanding Security Needs at Security Field Day 12

• Internet Archive is Attacked and 31 Million Files Stolen

• How Americaneagle.com Thwarted a Massive DNS DDoS Attack with Akamai Shield NS53

• Beyond the Edge: Complementing WAAP with Always-On API Security

• Why ‘never expire’ passwords are a security nightmare

• Abusix and Red Sift Form New Partnership, Leveraging Automation to Mitigate Cyber Attacks

• Shaping the Future: Announcing the U.S. Fast Future Innovation Awards

• CISA adds fresh Ivanti vuln, critical Fortinet bug to hall of shame

• CIOs Sound Alarm on Network Security in AI Era

• Overly Complex Passwords Could Weaken Security Measures

• Simbian unveils AI Agents to address the top pain points for SOC analysts

• ESET updates Vulnerability and Patch Management module

• SpyCloud Adds Identity Analytics to Cybercrime Investigation Solution for Insider Risk

• Casio Hit by Major Cyberattack AGAIN

• Hispanic Heritage Month Spotlight: Priscilla Ramis

• Worried about Insider Risk? Pay More Attention to Offboarding

• Ketch Third Party Risk Intelligence provides control over trackers, tags, and cookies

• OpenAI Blocks 20 Global Malicious Campaigns Using AI for Cybercrime and Disinformation

• How AWS uses active defense to help protect customers from security threats

• Nobel Prizes Awarded To Current and Former Google Scientists

• SpyCloud Embeds Identity Analytics in Cybercrime Investigations Solution to Accelerate Insider and Supply Chain Risk Analysis & Threat Actor Attribution

• List of Cybersecurity Initiatives by the Government of India

• Attacks on GenAI Models Can Take Seconds, Often Succeed: Report

• Experts Warn of Critical Unpatched Vulnerability in Linear eMerge E3 Systems

• Marriott Agrees $52m Settlement for Massive Data Breach

• Internet Archive suffers data breach and DDoS

• U.S. CISA adds Ivanti CSA and Fortinet bugs to its Known Exploited Vulnerabilities catalog

• Is Local Government the Latest Big Target for Phishing?

• Fivecast Discovery drives better analytical outputs

• Actively exploited Firefox zero-day fixed, update ASAP! (CVE-2024-9680)

• watchTowr raises $19 million to accelerate global growth

• Fidelity says data breach exposed personal data of 77,000 customers

• Relyance lands $32M to help companies comply with data regulations

• Introducing Cisco’s AI Security Best Practice Portal

• 6 Simple Steps to Eliminate SOC Analyst Burnout

• Mozilla patches critical Firefox vuln that attackers are already exploiting

• Deebot Robot Vacuums Are Using Photos and Audio to Train Their AI

• 1-15 July 2024 Cyber Attacks Timeline

• Internet Archive Breached, 31 Million Records Exposed

• Hackers Exploiting Zero-day Flaw in Qualcomm Chips to Attack Android Users

• Meta AI Chatbot Launches In UK On Facebook, Instagram, WhatsApp

• Patch Tuesday: Internet Explorer Vulnerabilities Still Pose a Problem

• 7 Privileged Access Management (PAM) deployment mistakes to avoid

• Mastering SOC complexity: Optimizing access management with Sekoia Defend

• Ghidra data type archive for Windows driver functions

• Secure Your World with Phishing Resistant Passkeys

• Internet Archive data breach, defacement, and DDoS: Users’ data compromised

• Wireshark 4.4.1 Released, What’s new!

• Foxit PDF Reader Vulnerability Let Attackers Execute Arbitary Code

• AI anxiety afflicts 90% of consumers and businesses – see what worries them most

• The Role of the NIST CSF in Cyber Resilience

• CIS Control 18 Penetration Testing

• AI Most Serious Threat to Orgs, According to Security Professionals

• Former RAC Employees Get Suspended Sentence for Data Theft

• International Cyber Expo 2024 A Success, Sees 16% Growth in Visitors

• Qualys Enterprise TruRisk Management unifies asset inventory and risk factors

• Malware by the (Bit)Bucket: Unveiling AsyncRAT

• Mozilla issued an urgent Firefox update to fix an actively exploited flaw

• Adaptiva improves collaboration between IT and security teams with vulnerability dashboards

• Over 240 Million US Breach Victims Recorded in Q3

• Multiple VMware NSX Vulnerabilities Let Attackers Gain Root Access

• How to enable secure use of AI

• Cybercriminals Use Unicode to Hide Mongolian Skimmer in E-Commerce Platforms

• How should CISOs respond to the rise of GenAI?

• Massive Breach at Internet Archive’s Wayback Machine – Millions of user records compromised

• Dutch cops reveal takedown of ‘world’s largest dark web market’

• CISA Added Fortinet & Ivanti Vulnerabilities that Exploited in the Wild

• Palo Alto fixed critical flaws in PAN-OS firewalls that allow for full compromise of the devices

• Cyber Attack on Internet Archives: A Major Breach and DDoS Assault

• Palo Alto Networks Warns of Exploitable Firewall Hijack Vulnerabilities

• No Silver Bullet, Just Smarter Security: More Expert Tips for Cyber Defense

• CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Security Patches

• The Internet Archive slammed by DDoS attack and data breach

• Disinformation Campaign Targets Moldova Ahead of Presidential Elections and EU Membership Referendum

• Widening talent pool in cyber with on-demand contractors

• Firefox Zero-Day Under Attack: Update Your Browser Immediately

• Network Penetration Testing Checklist – 2024

• File hosting services misused for identity phishing

• Balancing legal frameworks and enterprise security governance

• Investing in Privacy by Design for long-term compliance

• Consumers have trust issues regarding how AI collects their data

• GPTHoney: A new class of honeypot [Guest Diary], (Thu, Oct 10th)

• What lies ahead for AI in cybersecurity

• Internet Archive Breach Exposes 31 Million Users

• ISC Stormcast For Thursday, October 10th, 2024 https://isc.sans.edu/podcastdetail/9174, (Thu, Oct 10th)

• Internet Archive leaks user info and succumbs to DDoS

• Third-Party Pitfalls: Securing Private Data in Government Operations

• Moscow-adjacent GoldenJackal gang strikes air-gapped systems with custom malware

• Internet Archive – 31,081,179 breached accounts

• Smart TVs are spying on everyone

• IT Security News Daily Summary 2024-10-09

• Atlassian ‘cloud-first’ becomes ‘enterprise-first’

• Imperva Adaptive Threshold for Layer 7 DDoS Attacks Reduces Risk of Business Disruption

• Marriott settles for a piddly $52M after series of breaches affecting millions

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• What is user behavior analytics (UBA)?

• Election Security: When to Worry, When to Not

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Cyber insurance, human risk, and the potential for cyber-ratings

• Bitwarden vs 1Password (2024): Which One Should You Choose?

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Supra Redefines the Layer-2 Debate with “Supra Containers” – Is This the End of L2s?

• The Importance Of Verifying Your GitHub Environment’s Security Controls

• If you’re a Marriott customer, FTC says the breach-plagued hotel chain owes you

• Alarm Management Enhancements

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• National Public Data files for bankruptcy, admits ‘hundreds of millions’ potentially affected

• India’s Star Health confirms data breach after cybercriminals post customers’ health data online

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Gradio 5 is here: Hugging Face’s newest tool simplifies building AI-powered web apps

• How Google’s new partnership will uncover and disrupt online scams

• 5 hurricane-tracking apps I’m using to monitor Hurricane Milton from South Florida

• Cybercriminals Are Targeting AI Conversational Platforms

• A Sale of 23andMe’s Data Would Be Bad for Privacy. Here’s What Customers Can Do.

• Test Data Management & Compliance Challenges For On-Prem Environments

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Largest US Water Utility Suffers Cyberattack

• Lamborghini Carjackers Lured by $243M Cyberheist

• Google Joins Forces with GASA and DNS RF to Tackle Online Scams at Scale

• Battery Maker Northvolt To Replace Plant Boss, Amid Difficulties

• Google Search user interface: A/B testing shows security concerns remain

• New Crypto Trojan.AutoIt.1443 Hits 28,000 Users via Game Cheats, Office Tool

• Best Secure Remote Access Software of 2025

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• 20% of Generative AI ‘Jailbreak’ Attacks Succeed, With 90% Exposing Sensitive Data

• Ivanti zero-day vulnerabilities exploited in chained attack

• 69,000 Bitcoins Are Headed for the US Treasury—While the Agent Who Seized Them Is in Jail

• Banishing Burnout: Data Security Hangs in Balance in Cyber Wellbeing Crisis

• Start ‘Em Young: Setting Would Be Black Hat Hackers on a More Ethical Path

• As Attackers Embrace AI, Every Organization Should Do These 5 Things

• Google Begins Testing Verified Checkmarks for Websites in Search Results

• Cyberattacks on Critical Infrastructure: A Growing Threat to Global Security

• Apple’s iPhone Mirroring Flaw Exposes Employee Privacy Risks

• Vulnerability in popular PDF reader could lead to arbitrary code execution; Multiple issues in GNOME project

• Britain Cyber Team Competition and Australia New Cybersecurity Law

• TikTok Sued By US States For Allegedly Harming Children

• Hackers targeted Android users by exploiting zero-day bug in Qualcomm chips

• Digital Crack for Kids: TikTok Sued Again by 14 AGs

• Researchers Uncover Major Security Vulnerabilities in Industrial MMS Protocol Libraries

• Canadian Crypto Expert Denies He Is Satoshi Nakamoto

• iPhone users: This October Prime Day tracker deal means you’ll never lose your wallet again

• CISA Adds Three Known Exploited Vulnerabilities to Catalog

• Cisco Partner Conversations: Delivering Smart Manufacturing Solutions with Deloitte

• The Role of Intelligence in Cyber Threat Response

• Microsoft cleans up hot mess of Patch Tuesday preview

• 5 commercial software attacks — and what you can learn from them

• Why 90-Day certificates, PQC, and crypto agility are more interconnected than you think

• Stealthy Malware Has Infected Thousands of Linux Systems Since 2021

• Understanding and Combating Insider Threats in the Digital Age

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• New BeaverTail Malware Targets Job Seekers via Fake Recruiters

• Cybersecurity Awareness Month: Horror stories

• Salt Typhoon Hack Shows There’s No Security Backdoor That’s Only For The “Good Guys”

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• N. Korean Hackers Use Fake Interviews to Infect Developers with Cross-Platform Malware

• New Generation of Malicious QR Codes Uncovered by Researchers

• Strengthening DOD Cybersecurity: The Journey to Zero Trust by 2027

• Risk & Repeat: Is Microsoft security back on track?

• Dallas Cowboys Innovate with Webex and Cisco

• Awaken Likho APT group targets Russian government with a new implant

• Comcast Data Breach: Over 237,000 Customers’ Information Stolen in Cyberattack on Debt Collector

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• UK Launches New Competition to Spur Cybersecurity Careers

• Sui to Make Native USDC Available Through NAVI Protocol

• Dragonz Lab Secures $9M from Syndicate Capital to Boost ‘Dragonz Land’ Ecosystem

• AI girlfriend site breached, user fantasies stolen

• 5 hurricane-tracking apps I’m using to keep an eye on Hurricane Milton from South Florida

• Ransomware gang Trinity joins pile of scumbags targeting healthcare

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Netwrix Threat Manager 3.0 prevents improper changes in Microsoft Entra ID

• HiddenLayer enhances risk detection for enterprise AI models

• White House official says insurance companies need to stop paying ransoms. Cyber Security Today for Wednesday, October 9, 2024

• Operation MiddleFloor: Unmasking the Disinformation Campaign Targeting Moldova’s National Elections

• Exploiting LNK Metadata

• Security Breach Exposes U.S. Wiretap Systems to China-Linked Hackers

• Writer’s Palmyra X 004 takes the lead in AI function calling, surpassing tech giants

• Amazon revamps Ring subscriptions with AI video search

• How Network Security Platformization Paid Off with 174% ROI

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Exploit code for critical GitLab auth bypass flaw released (CVE-2024-45409)

• Introducing Amy Parker

• Top Security Configuration Management Tools: Features & Comparisons

• Building an AI-Native Security Operations Center: Revolutionizing Your Cyber Defense

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Brazil To Restore X Access After Elon Musk Complies With Court Orders

• The Countdown Has Begun: Getting Started on Your Post-Quantum Journey

• Social Media Accounts: The Weak Link in Organizational SaaS Security

• Hackers Breached Japan Aerospace Company’s President Account

• Dark Angels Ransomware Attacking Windows And Linux/ESXi Systems

• Prime rethinks enterprise security by design with AI system risk analysis and suggested actions

• Auto-Identification Smart Glasses

• Extended Support for Ubuntu: Patch Intel Microcode Vulnerabilities

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Contagious Interview: DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware

• Google Confronts Break-Up Threat From US DoJ

• Scammers Hit Florida Hurricane Victims with Fake FEMA Claims, Malware Files

• How to Safeguard Enterprises from Exploitation of AI Applications

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Commvault Cloud Rewind helps businesses bounce back from cyber incidents

• Australia Introduces First Standalone Cybersecurity Law

• Frontegg Flows simplifies customer identity processes

• New EU Body to Centralize Complaints Against Facebook, TikTok, YouTube

• AI-Driven eCommerce Fraud to Top $107 Billion by 2029

• Edgio Premier Bot Manager detects, classifies and mitigates bot traffic

• Ivanti: Three CSA Zero-Days Are Being Exploited in Attacks

• iPhone Mirroring Flaw Could Expose Employee Personal Information

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Top Strategies for Using Vendor Risk Questionnaires to Strengthen Cybersecurity

• U.S. CISA adds Windows and Qualcomm bugs to its Known Exploited Vulnerabilities catalog

• Trulioo Fraud Intelligence fights fraud during onboarding

• Bitwarden integrates with Microsoft Sentinel to strengthen real-time threat detection

• Microsoft Fixes Five Zero-Days in October Patch Tuesday

• Chrome Security Update, Patched for High-Severity Vulnerabilities

• Innovator Spotlight: Concentric AI

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Tidal Cyber empowers organizations to improve their protection efforts

• Guide for selecting the right GRC framework, EU edition

• From Perfctl to InfoStealer, (Wed, Oct 9th)

• Financial impact of cybercrime

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild

• CISA Alerted Users to Remain Vigil on Natural Disasters Scam

• Cyber Attacks news headlines trending on Google

• Cyber Threats Involved in Edge Computing

• CISA Warns of Microsoft Zero-Day Vulnerabilities Exploited in the Wild

• Delivering secure software in an agile way

• Password Basics: Why Mastering Fundamentals Is Crucial in Today’s Complex Cybersecurity Landscape

• White House official says, insurance companies need to stop paying ransoms. Cyber Security Today for Wednesday, October 9, 2024

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Report Highlights Escalating Security Challenges Amid Swift AI Adoption

• YARA: Open-source tool for malware research

• Microsoft Detects Growing Use of File Hosting Services in Business Email Compromise Attacks

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• GoldenJackal APT group breaches air-gapped systems in Europe

• Cultivating a security-first mindset: Key leadership actions

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Cybersecurity jobs available right now: October 9, 2024

• 30% of customer-facing APIs are completely unprotected

• Protecting America’s Water Systems: A Cybersecurity Imperative

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• ISC Stormcast For Wednesday, October 9th, 2024 https://isc.sans.edu/podcastdetail/9172, (Wed, Oct 9th)

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• DumpForums Claim 10TB Data Breach at Russian Cybersecurity Firm Dr.Web

• 5 Ways to “Secure Our World” for Cyber Security Awareness Month

• Shell Items

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

• RegRipper Educational Materials

• Microsoft issues 117 patches – some for flaws already under attack

• A decade of transformation: ADDO and the State of the Software Supply Chain

• Unveiling the trillion dollar engine of innovation: Manuel Hoffmann’s keynote at ADDO

• Transforming enterprises with generative AI: Pallavi Nargund’s keynote at ADDO

• Best practices for authentication and authorization: Yoshiyuki Tabata’s keynote at ADDO

• Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI™ study

Generated on 2024-10-10 23:55:13.004658