IT Security News Daily Summary 2024-10-14

• U.S. CISA adds Fortinet products and Ivanti CSA bugs to its Known Exploited Vulnerabilities catalog

• USENIX NSDI ’24 – CHISEL: An Optical Slice of the Wide-Area Network

• Decoding DORA: EU’s Unified Approach to ICT Risk Governance

• Gmail users, beware of new AI scam that looks very authentic

• U.S. Lawmakers, White House Move to Stem China Cyberthreat

• Tech Trends for 2025 with Brian Jackson, Principal Research Director for Info-Tech: Cyber Security Today Weekend for October 12, 2024

• Central Tickets Confirms Data Breach as Hacker Leaks Data of 1 Million Users

• How to Set up OAuth JWT Flow and mTLS in the Salesforce Connector for a MuleSoft App

• The biggest data breaches in 2024: 1 billion stolen records and rising

• Can AI and automation properly manage the growing threats to the cybersecurity landscape?

• Nation-state actor exploited three Ivanti CSA zero-days

• OpenAI’s Disruption of Foreign Influence Campaigns Using AI

• Biometric Data Theft and Cyberterrorism Are The Major Future Threats

• Upcoming Speaking Engagements

• Robot vacuum cleaners hacked to spy on, insult owners

• IBM X-Force Security Report Spotlights Lack of Cloud Security Fundamentals

• Telekopye Scammers Target Booking.com and Airbnb Users

• Lack of Cyber Talent is creating new opportunities to Cyber Threat Actors

• TrickMo Malware Targets Android Devices to Steal Unlock Patterns and PINs

• CoreWarrior Malware Attacking Windows Machines From Dozens Of IP Address

• OilRig Hackers Exploiting Microsoft Exchange Server To Steal Login Details

• Internet Archive’s Wayback Machine is back up after data breach – with a catch

• Transforming Security Testing With AI: Benefits and Challenges

• DOJ Created NexFundAI Crypto Firm in Crypto Scamming Sting

• Surfshark VPN Review (2024): Is it a Safe and Trustworthy VPN?

• National Public Data, the hacked data broker that lost millions of Social Security numbers and more, files for bankruptcy

• CISA Urges Encryption of Cookies in F5 BIG-IP Systems

• What We Learned About Secrets Security at AppSec Village at DEF CON 32

• Leveraging AI/ML for next-gen SOC environments

• Trump campaign arms up with ‘unhackable’ phones after Iranian intrusion

• The War on Passwords Is One Step Closer to Being Over

• Zero-day Flaws Exposed EV Chargers to Shutdowns and Data Theft

• Casio confirms customer data compromised in ransomware attack

• OneSpan strenghtens banking security with phishing-resistant authentication

• Ridge Security delivers enhanced capabilities for web application security

• Researchers Win $70K for Reporting Zero-Day Flaws in EV Chargers

• October Cyber Awareness | IoT security – beyond connectivity into risk

• KnowBe4 announces 2024 EMEA Partner Programme Award winners

• Juniper Networks Patches Dozens of Vulnerabilities

• Iranian Cyberspies Exploiting Recent Windows Kernel Vulnerability

• Chinese State Hackers Main Suspect in Recent Ivanti CSA Zero-Day Attacks

• Gryphon Healthcare, Tri-City Medical Center Disclose Significant Data Breaches

• Watch Now: Zero Trust Strategies Summit – All Sessions Available on Demand

• Make Deployments Great Again: How to Use Helm with Continuous Deployment (CD)

• Rancher Government Solutions introduces Harvester Government

• US DoD Tightens Cybersecurity Standards for Defense Contractors

• Thousands of Fortinet instances vulnerable to actively exploited flaw

• The new Catalyst ESS9300: Transforming critical military communications through open standards

• Delivering Modernized Security for Government Agencies: The Vital Role of FedRAMP

• THN Cybersecurity Recap: Top Threats, Tools and Trends (Oct 7 – Oct 13)

• Supply Chain Attacks Exploit Entry Points in Python, npm, and Open-Source Ecosystems

• 5 Steps to Boost Detection and Response in a Multi-Layered Cloud

• Nation-State Attackers Exploiting Ivanti CSA Flaws for Network Infiltration

• The Power of Tomorrow: Technologies that Will Revolutionise Digital Transformation in the Next Decade

• pac4j Java Framework Vulnerable to RCE Attacks

• Dutch police dismantled dual dark web market ‘Bohemia/Cannabia’

• Perfectl Malware

• Pokémon Developer Game Freak Suffers Data Breach

• Beware of Fake AI Scam calls that Takeover your Gmail Account

• Northvolt In Talks For 200m Euros In Short-Term Funding

• US Lawmakers Seek Answers From Telcos Over China Hack

• X Drops Unilever From Advertiser Lawsuit

• US Regulator Approves SpaceX Falcon 9 Return To Service

• Breaking into Cybersecurity: It’s Never Too Late

• Blockchain Innovation Drives Payroll and Employee Data Security in HR

• How to head off data breaches with CIAM

• Casio Confirms Ransomware Outage and Data Breach

• Water Makara Uses Obfuscated JavaScript in Spear Phishing Campaign, Targets Brazil With Astaroth Malware

• Advanced Tips for Leveraging the NIST Cybersecurity Framework for Compliance

• Analyzing the Latest APWG Phishing Activity Trends Report: Key Findings and Insights

• Whispers from the Dark Web Cave. Cyberthreats in the Middle East

• Toxic Triad of Cloud Vulnerabilities Puts Businesses at Risk

• Critical Veeam Vulnerability Exploited to Spread Akira and Fog Ransomware

• Securing Your Online Accounts: A Comprehensive Guide

• Huawei Beats Apple In Mainland China Shipments

• US Labour Board Accuses Apple Of Slack Restrictions

• Zendesk Email Spoofing Flaw Let Attackers Access Support Tickets

• Fidelity Investments suffered a second data breach this year

• GitGuardian Visual Studio Code extension helps developers protect their sensitive information

• Skills Shortages Now a Top-Two Security Risk for SMBs

• A week in security (October 7 – October 13)

• Check Point’s threat index emphasizes the shift towards AI-driven malware tactics in the current cyber landscape

• Phishing Page Delivered Through a Blob URL, (Mon, Oct 14th)

• Apple Opens Major Research Hub In China

• OpenAI says bad actors are using ChatGPT to write malware, sway elections

• Emergency Satellite Messaging, Stagnation in User Cybersecurity Habits

• Gmail Users Targeted by AI-Driven Cyber Attacks and OpenAI-Generated Malware

• How to Effectively Handle Mobile Device Cyber Risks

• 18 Individuals Charged for Widespread Manipulation Cryptocurrency Markets

• Crypto-apocalypse soon? Chinese researchers find a potential quantum attack on classical encryption

• 4 Frightening Things Coming for Security this Season

• The quantum dilemma: Game-changer or game-ender

• CIOs want a platform that combines AI, networking, and security

• CISSP and CompTIA Security+ lead as most desired security credentials

• CISOs’ strategies for managing a growing attack surface

• Breaking down the numbers: Q3 2024 cybersecurity funding activity recap

• ISC Stormcast For Monday, October 14th, 2024 https://isc.sans.edu/podcastdetail/9178, (Mon, Oct 14th)

• RegreSSHion, Critical RCE Vulnerabilities, and When Should You Be Scared?

• ConfusedPilot: UT Austin & Symmetry Systems Uncover Novel Attack on RAG-based AI Systems

• IT Security News Weekly Summary – Week 41

• IT Security News Daily Summary 2024-10-13

• USENIX NSDI ’24 – Spectrumize: Spectrum-Efficient Satellite Networks for the Internet of Things

• Teraleak: Pokémon Developer Game Freak Hacked; Decades of Data Leaked

• Patch-22: The Catch of Waiting to Fix Cybersecurity Vulnerabilities

• AsyncRAT Malware Exploits Bitbucket to Launch Multi-Stage Attack

• Awaken Likho Targets Russian Agencies with MeshCentral Remote Access Tool

• Millions of Android Devices at Risk, New Chip Bug Exploited in Targeted Attacks

• The Role of End-to-End Encryption in Modern Cybersecurity

• Meet the Chinese ‘Typhoon’ hackers preparing for war

• SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 15

• Security Affairs newsletter Round 493 by Pierluigi Paganini – INTERNATIONAL EDITION

• Schools bombarded by nation-state attacks, ransomware gangs, and everyone in between

• Misinformation, Online Scams Surging Following Historic Hurricanes

• Casio Hit by Cyberattack Causing Service Disruption Amid Financial Challenges

• OilRig Exploits Windows Kernel Flaw in Espionage Campaign Targeting UAE and Gulf

• Week in review: Microsoft fixes two exploited zero-days, SOC teams are losing trust in security tools

• Wireshark 4.4.1 Released, (Sun, Oct 13th)

• Russia-linked group APT29 is targeting Zimbra and JetBrains TeamCity servers on a large scale

• Microsoft’s guidance to help mitigate Kerberoasting

Generated on 2024-10-14 23:55:09.384529