IT Security News Daily Summary 2024-10-18

• FBI and CISA Issue Public Service Announcement Warning of Tactics Foreign Threat Actors are Using to Spread Disinformation in the 2024 U.S. General Election

• Friday Squid Blogging: Squid Scarf

• Iran-linked actors target critical infrastructure organizations

• APIContext Joins Akamai’s Qualified Compute Partner Program to Boost Cloud Capabilities

• A Flourishing Internet Depends on Competition

• USENIX NSDI ’24 – MESSI: Behavioral Testing of BGP Implementations

• Securing Cloud-Native Applications: A CISO’s Perspective on Broken Access Control

• The American Water cyberattack: Explaining how it happened

• Publishers Spotlight: Proofpoint

• AI-Generated Personas: Trust and Deception

• Cash App users have less than a month to claim up to a $2,500 settlement payout

• Stop exposing your Venmo activity – by changing this privacy setting. Here’s why

• Compare Antivirus Software 2025: Bitdefender vs ESET

• Computer Networking Fundamentals: Learn the Basics

• Top 9 Trends In Cybersecurity Careers for 2025

• Use Venmo? Change this privacy setting now. Here’s why – and how

• Gartner 2024 CNAPP Market Guide Insights for Leaders

• Can You Fax a Check? Yes. Follow These Steps to Do it Safely

• New TrickMo Variants Exploit Fake Lock Screens to Steal Android PINs

• AI and cybersecurity – A double-edged sword

• Secure Golden Images: A Blueprint for Vulnerability Management

• Unauthorized data access vulnerability in macOS is detailed by Microsoft

• HM Surf vulnerability in macOS has details revealed by Microsoft

• AI to power future data privacy breaches

• AI boost to SWIFT banking network helps thwart Cyber Threats

• Apple Sees Strong Initial iPhone 16 Sales In China

• Iranian Hackers Target Microsoft 365, Citrix Systems with MFA Push Bombing

• Key Worries Surrounding the Growing Impact of Technology in Our Lives

• Bitcoin fraud through (hacked?) WordPress installations

• Ransomware Attack and Software Glitches Reveal Fragility in U.S. Car Dealerships and Global Systems

• Iranian Attackers Exploit Windows Bug to Elevate Privileges

• TrickMo Banking Trojan Unveils Advanced Threat Capabilities in Latest Variant

• Examining Telegram’s Encryption Flaws: Security Risks and Privacy Concerns

• Microsoft Reveals Loss of Customer Security Logs for a Month

• Internet Archive and Wayback Machine Resurrect After DDoS Wave

• Cyber Awareness Month: The End of the VPN Era

• Tesla Faces NHTSA Probe Over FSD Fatal Accident

• Bell Canada’s Transformation Journey with Routed Optical Networking

• North Korean IT Workers in Western Firms Now Demanding Ransom for Stolen Data

• Cybersecurity Workforce in Crisis

• What’s behind the 51% drop in ransomware attacks?

• Are your Venmo transactions still public? Here’s why – and how – to change that ASAP

• How Innovations in Clientless SASE Services Redefine Security in Mobile Networks

• Justice Department Indicts Tech CEO for Falsifying Security Certifications

• Security review for Microsoft Edge version 130

• Army Cloud Program to Help SMBs Meet DoD Cyber Requirements

• Microsoft lost some customers’ cloud security logs

• How Organizations Can Avoid Domain Exploitation When “Big News” Breaks

• Serhiy Tokarev Reveals Roosh’s Investment in the French Freelance Platform

• A Closer Look at Q3 2024: 75% Surge in Cyber Attacks Worldwide

• AI-Powered Fraud Detection Systems for Enhanced Cybersecurity

• Microsoft: macOS Vulnerability Potentially Exploited in Adware Attacks

• CISOs Concerned Over Growing Demands of Role

• macOS Vulnerability Could Expose User Data, Microsoft Warns

• Options for AWS customers who use Entrust-issued certificates

• Roosh Ventures Invests in French Freelance Platform Jump

• Alleged Bitcoin crook faces 5 years after SEC’s X account pwned

• Brazil Arrests ‘USDoD,’ Hacker in FBI Infragard Breach

• U.S. and Allies Warn of Iranian Cyberattacks on Critical Infrastructure in Year-Long Campaign

• The Ultimate DSPM Guide: Webinar on Building a Strong Data Security Posture

• Worldcoin Rebrands To World Network, Ramps Up Iris Scanning

• ESET denies it was compromised as Israeli orgs targeted with ‘ESET-branded’ wipers

• North Korean APT Exploited IE Zero-Day in Supply Chain Attack

• US Crackdown With Microsoft: Over 100 Russian Domains Seized

• How to Master CentOS Commands: The Ultimate Cheat Sheet

• Understanding the Importance of MFA: A Comprehensive Guide

• Rising Tides: Christien “DilDog” Rioux on Building Privacy and What Makes Hackers Unique

• Beware: Fake Google Meet Pages Deliver Infostealers in Ongoing ClickFix Campaign

• Instagram Rolls Out New Sextortion Protection Measures

• Need a Wyze Cam alternative? The waterproof Blink Mini 2 security camera is it

• macOS HM Surf flaw in TCC allows bypass Safari privacy settings

• Analysis of the Crypt Ghouls group: continuing the investigation into a series of attacks on Russia

• Israeli orgs targeted with wiper malware via ESET-branded emails

• Microsoft Named Most Imitated Brand in Phishing Attacks

• Unveiling Hidden Connections: JA4 Client Fingerprinting on VirusTotal

• Call for Experts: Join the ENISA Ad Hoc Working Group on EU Digital Identity Wallets Cybersecurity Certification

• What the US Army’s 1959 ‘Soldier of Tomorrow’ Got Right About the Future of Warfare

• Organizations Faster at Detecting OT Incidents, but Response Still Lacking: Report

• Arrested: USDoD, Anonymous Sudan, SEC X account hacker

• US Arrest Man for SEC X Account Hack

• Intel lightly hits back at China’s accusations it bakes in NSA backdoors

• Omni Family Health Data Breach Impacts 470,000 Individuals

• CyCognito expands automated testing capabilities

• SolarWinds Web Help Desk Vulnerability Allows Remote Code Execution

• Cyera Acquires Data Loss Prevention Firm Trail Security for $162 Million

• New macOS vulnerability, “HM Surf”, could lead to unauthorized data access

• LinkedIn suspends some AI training operations

• Hacker Arrested for Invading Computers & Selling Police Data

• ConfusedPilot Exposes Vulnerability in AI Systems Used by Major Enterprises

• Globe Life extortion, hacker USDoD arrested, Anonymous Sudan indicted

• Beware of Starbucks Phishing Scam and China using Quantum tech to break encryption

• Cisco ATA 190 Telephone Adapter Vulnerabilities Let Attackers Execute Remote Code

• Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser

• Building Digital Resilience: Insider Insights for a Safer Cyber Landscape

• Intel robustly refutes China’s accusations it bakes in NSA backdoors

• Despite massive security spending, 44% of CISOs fail to detect breaches

• Biz hired, and fired, a fake North Korean IT worker – then the ransom demands began

• What to do if your iPhone or Android smartphone gets stolen?

• Cybercrime’s constant rise is becoming everyone’s problem

• DDoS Attacks and the Upcoming US Presidential Election

• New infosec products of the week: October 18, 2024

• Addressing Critical Gaps in Threat Intelligence Sharing

• As Attackers Embrace AI, Every Organization Should Do These 5 Things

• Singapore releases guidelines for securing AI systems and prohibiting deepfakes in elections

• ISC Stormcast For Friday, October 18th, 2024 https://isc.sans.edu/podcastdetail/9186, (Fri, Oct 18th)

• Uncle Sam puts $10M bounty on Russian troll farm Rybar

• Two Sudanese nationals indicted for operating the Anonymous Sudan group

• Troubled US insurance giant hit by extortion after data leak

• The Evolution of Automated Browser Detection: A Cat & Mouse Game

• Protecting children from grooming | Unlocked 403 cybersecurity podcast (ep. 7)

• EIW — ESET Israel Wiper — used in active attacks targeting Israeli orgs

• Cato Networks CEO Shlomo Kramer to Speak at Bloomberg Tech London 2024

• Winners Named at Security Serious Unsung Heroes Awards 2024

• Life in the Swimlane with Abby Shapiro, Customer Success Manager

• Russia-linked RomCom group targeted Ukrainian government agencies since late 2023

• ADR Provides Application Visibility for CISOs | Closing Application Layer Gap | Contrast Security

• IT Security News Daily Summary 2024-10-17

• How to Attract Top Cybersecurity Talent

• Microsoft: Ransomware Attacks Growing More Dangerous, Complex

• 5 AI Security Takeaways featuring Forrester

• How to Mitigate the Impact of Rogue AI Risks

• California Attorney General Issues New Guidance on Military Equipment to Law Enforcement

• World Economic Forum: AI, Quantum Require ‘Paradigm Shift’ in Security

• Malvertising: What It Is and How to Protect Yourself

• Fake North Korean IT Workers Infiltrate Western Firms, Demand Ransom

• GitHub Copilot Security and Privacy Concerns: Understanding the Risks and Best Practices

• Email Aliasing is a Great Privacy Tool

• Scary cybersecurity stories to tell in the dark

• Microsoft said it lost weeks of security logs for its customers’ cloud products

• How to Choose the Best Analytics Tools for Mobile Apps

• Be Aware of These Eight Underrated Phishing Techniques

• What I’ve learned in my first 7-ish years in cybersecurity

• The CMMC Final Rule is Published: What Contractors Need to Know

• Microsoft blocked your Windows 11 upgrade? This trusty tool can fix that

• Number of Active Ransomware Groups Highest on Record, Cyberint’s Report Finds

• Feds arrest man who allegedly participated in hack of the SEC’s X account, boosting Bitcoin’s price

• AppOmni Achieves FedRAMP®️ “In Process” Status for Public Sector SaaS Security

• Linux Persistence Mechanisms and How to Find Them

• Ransomware Payouts Decline as Security Maturity Rises

• Want to Make the Most of ChatGPT? Here Are Some Go-To Tips

• Intel Denies Chinese Claims Of Security Issues

• The cybersecurity skills gap contributed to a $1.76 million increase in average breach costs

• Glimmer Of Good News On The Ransomware Front As Encryption Rates Plummet

• AppOmni Achieves FedRAMP®️ “In Process” Status for Public Sector SaaS Security

• CISA, FBI Seek Public Comment on Software Security Bad Practices Guidance

• AppOmni Achieves FedRAMP®️ “In Process” Status for Public Sector SaaS Security

• Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant

• Cicada3301 Ransomware Targets Critical Sectors in US and UK

• Amazon helps in nabbing Anonymous Sudan cyber criminals

• Prosecutors in Washington State Warn Police: Don’t Use Gen AI to Write Reports

• Wordfence Intelligence Weekly WordPress Vulnerability Report (October 7, 2024 to October 13, 2024)

• What Is a Social Media Threat? + 10 Examples

• Microsoft Settles Gamer Lawsuit Over Activision Purchase

• ClickFix Attack: Fake Google Meet Alerts Install Malware on Windows, macOS

• 10 steps to safeguarding your privacy online

• CISA Adds One Known Exploited Vulnerability to Catalog

• Kieback&Peter DDC4000 Series

• LCDS LAquis SCADA

• HMS Networks EWON FLEXY 202

• Elvaco M-Bus Metering Gateway CMe3100

• Award-winning Cisco Sustainability Data Foundation takes the stage as key to sustainability success

• USENIX NSDI ’24 – Towards Provably Performant Congestion Control

• Indonesian Government Asks Apple, Google to Block China’s Temu to Safeguard Small Merchants

• AI Tools Fueling Global Expansion of China-Linked Trafficking and Scamming Networks

• US Charges Anonymous Sudan Members in DDoS Cybercrime Case

• What is tailgating (piggybacking)?

• Hackers are extorting Globe Life with stolen customer data

• Iranian Hackers Target Critical Infrastructure with Brute Force Attacks

• Sudanese Brothers Arrested in ‘AnonSudan’ Takedown

• The Newest PSR Protections

• Researchers Uncover Cicada3301 Ransomware Operations and Its Affiliate Program

• Meta Axes Staff At WhatsApp, Instagram, Reality Labs – Report

• Brazilian police claim they’ve cuffed serial cybercrook behind FBI and Airbus attacks

• Why Modern Layer 7 DDoS Protections Are Crucial for Web Security in 2024

• Check Point Research Unveils Q3 2024 Brand Phishing Trends: Microsoft Remains Most Imitated Brand as Alibaba and Adobe Enter Top 10

• Strategies for Building an Effective, Resilient Security Operations Center

• MFA Compromise: The Mechanics Behind This Escalating Threat Vector

• An unexpected discovery: Automated reasoning often makes systems more efficient and easier to maintain

• F5 BIG-IP Updates Patch High-Severity Elevation of Privilege Vulnerability

• US Halts Some Imports From Chinese Drone Maker DJI

• 23andMe will retain your genetic information, even if you delete the account

• Shadow IT risks are on the rise as GenAI tools gain popularity with employees

• NIS 2 Compliance Deadline Arrives: What You Need to Know

• Cisco’s Firewall Solution Recognized as a Leader in Forrester Wave™

• You’ve Heard the Security Service Edge (SSE) Story Before, but We Re-Wrote It!

• Cisco Patches High-Severity Vulnerabilities in Analog Telephone Adapters

• Ubuntu 24.10 “Oracular Oriole” Released: Find What’s New

• Fake Google Meet pages deliver infostealers

• Casio says ‘no prospect of recovery yet’ after ransomware attack

• Brazilian Police Arrest Notorious Hacker USDoD

• Schneider Electric Bolsters Data Centre Credentials With Motivair Acquisition

• This Prompt Can Make an AI Chatbot Identify and Extract Personal Details From Your Chats

• GPS Jamming Is Screwing With Norwegian Planes

• SideWinder APT Strikes Middle East and Africa With Stealthy Multi-Stage Attack

• 5 Ways to Reduce SaaS Security Risks

• North Korea Escalates Fake IT Worker Schemes to Extort Employers

• Gatekeeper Bypass: Uncovering Weaknesses in a macOS Security Mechanism

• Intel, AMD Form x86 Group To Tackle Challenge Posed By ARM

• Cyera acquires Trail Security for $162M; Cyera is now raising at a $3B valuation

• A critical flaw in Kubernetes Image Builder could allow attackers to gain root access

• SAS CTF and the many ways to persist a kernel shellcode on Windows 7

• UAT-5647 targets Ukrainian and Polish entities with RomCom malware variants

• The Battle for Identity Security: Key Insights from the ManageEngine Identity Security Survey 2024

• AI Companies Are Not Meeting EU AI Act Standards

• Iranian Cyber Actors Compromise Critical Infrastructure Using Brute Force and Credential Access Tactics

• RansomHub Overtakes LockBit as Most Prolific Ransomware Group

• Android Set-top Box Lies about Its OS Version, Comes Pre-infected with Malware

• Anonymous Sudan DDoS Service Disrupted, Members Charged by US

• U.S. Charges Two Sudanese Brothers for Record 35,000 DDoS Attacks

• Two-thirds of Attributable Malware Linked to Nation States

• ClickFix tactic: The Phantom Meet

• VMware HCX Platform Vulnerable to SQL Injection Attacks

• Gartner® Magic Quadrant™ for Endpoint Protection Platforms

• Hackers Turn to AI as Hardware Attacks Surge

• The role of compromised cyber-physical devices in modern cyberattacks

• CISA Seeks Feedback on Upcoming Product Security Flaws Guidance

• WeChat devs introduced security flaws when they modded TLS, say researchers

• Stronger Together: AI and Human Collaboration in the Battle Against Evolving Threats

• Anonymous Sudan isn’t any more: Two alleged operators named, charged

• Cognizant Neuro Cybersecurity enhances threat detection and response

• Authorities Indicted Two Anonymous Sudan Hackers Over Cyberattacks

• VMware fixes high-severity SQL injection flaw CVE-2024-38814 in HCX

• Anonymous Sudan isn’t any more: two alleged operators named, charged

• NIS2 Confusion: Concerns Over Readiness as Deadline Reached

• AI models tested, breaking encryption, Intel security review

• 53% would switch banks if their institution had a data breach: Cyber Security Today for Thursday, October 17, 2024

• Microsoft blocked most ransomware attacks and about 600M Cyber attacks

• MongoDB Queryable Encryption now supports range queries on encrypted data

• Critical Kubernetes Image Builder Vulnerability Exposes Nodes to Root Access Risk

• Pokémon game developer breached, TrickMo’s new variants, Ivanti zero-days exploited

• VW alleged data theft, Finland seizes Sipultie, Calgary library cyberattack

• Organization Hacked Following Accidental Hiring of North Korean Remote IT Worker

• AlpineReplay – 898,681 breached accounts

• GhostStrike: Open-source tool for ethical hacking

• US contractor pays $300K to settle accusation it didn’t properly look after Medicare users’ data

• How NIS2 will impact sectors from healthcare to energy

• AI data collection under fire

• USENIX NSDI ’24 – Finding Adversarial Inputs for Heuristics using Multi-level Optimization

• Why companies are struggling to keep up with SaaS data protection

• Navigating the NIS2 Directive: A comprehensive guide for UK businesses

• A Turning Point in Loyalty Fraud Prevention

• ISC Stormcast For Thursday, October 17th, 2024 https://isc.sans.edu/podcastdetail/9184, (Thu, Oct 17th)

• Nvidia just dropped a new AI model that crushes OpenAI’s GPT-4—no big launch, just big results

• Scanning Activity from Subnet 15.184.0.0/16, (Thu, Oct 17th)

• Anthropic flags AI’s potential to ‘automate sophisticated destructive cyber attacks’

Generated on 2024-10-18 23:55:09.648315