IT Security News Daily Summary 2024-10-22

• SEC fines four companies $7M for ‘misleading cyber disclosures’ regarding SolarWinds hack

• Burning Zero Days: FortiJump FortiManager vulnerability used by nation state in espionage via MSPs

• Implement Hibernate Second-Level Cache With NCache

• The best VPN for Mac in 2024: Expert tested and reviewed

• In Appreciation of David Burnham

• How to use the Amazon Detective API to investigate GuardDuty security findings and enrich data in Security Hub

• CISA and USPIS Release Two Election Mail Security Resources

• Elon Musk, Tesla Sued By Blade Runner 2049 Producers

• 5 Best Rootkit Scanners and Removers: Anti-Rootkit Tools

• Elevating SaaS Security: The Strategic Role of Bug Bounty Programs

• Announcing the BlueHat 2024 Sessions

• Understanding WhatsApp Check Marks: One or Two, Gray or Blue

• The best VPN services for iPhone: Expert tested and reviewed

• Bluesky Gains After X Changes How Blocking Works

• Fake CAPTCHA Pages Used by Lumma Stealer to Spread Fileless Malware

• Grandoreiro, the global trojan with grandiose ambitions

• Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans

• Wiping your Windows laptop? Here’s the simplest way to erase all personal data

• Exposed United Nations Database Left Sensitive Information Accessible Online

• TSMC blows whistle on potential sanctions-busting shenanigans from Huawei

• USENIX NSDI ’24 – THC: Accelerating Distributed Deep Learning Using Tensor Homomorphic Compression

• Randall Munroe’s XKCD ‘Temperature Scales’

• UK Government Signs Five Year Deal With Microsoft

• 5 new protections on Google Messages to help keep you safe

• How Many U.S. Persons Does Section 702 Spy On? The ODNI Needs to Come Clean.

• VMware fixes critical RCE, make-me-root bugs in vCenter – for the second time

• SEC Charges Four Companies Over Misleading Disclosures on SolarWinds Hack

• How much HTTP (not HTTPS) Traffic is Traversing Your Perimeter?, (Tue, Oct 22nd)

• Critical Vulnerability Patched In Jetpack WordPress Plugin

• SEC fines four companies $7 million for ‘misleading cyber disclosures’ regarding SolarWinds hack

• Keeper Security Calls for Action: Week Four

• KnowBe4 Launches Complimentary Training Module Following Thwarted North Korean Infiltration Attempt

• Tech firms to pay millions in SEC penalties for misleading SolarWinds disclosures

• Meta Restarts Use Of Facial Recognition For ‘Celebrity Scam Ad’ Crackdown

• Dark Web Anti-Bot Services Let Phishers Bypass Google’s Red Page

• What NIST’s post-quantum cryptography standards mean for data security

• Researchers link Polyfill supply chain attack to huge network of copycat gambling sites

• Team-Based Training and the Power of Simulation

• Nidec Corporation Ransomware Attack: Data Leak on Dark Web

• Security Experts Downplay the Significance of the Chinese Quantum “Hack”

• LLMjacking and Open-Source Tool Abuse Surge in 2024 Cloud Attacks

• Samsung zero-day flaw actively exploited in the wild

• Akira ransomware is encrypting victims again following pure extortion fling

• SEC Charges Tech Firms Over Misleading SolarWinds Hack Disclosures

• Dutch central bank says to keep cash on hand and Hackers targeting US Elections 2024 with domains

• TSMC Alerts US Of Attempt To Circumvent China AI Chip Restriction

• Skills shortage persists in cybersecurity with many jobs going unfilled

• MixMode Recognized By USA Today As One Of The Top 10 AI Companies To Watch in 2024

• Best Cybersecurity Metrics to Use in the Boardroom | Kovrr

• INE Security Launches New Training Solutions to Enhance Cyber Hygiene for SMBs

• Anthropic’s new AI can use computers like a human, redefining automation for enterprises

• The Shitposting Cartoon Dogs Sending Trucks, Drones, and Weapons to Ukraine’s Front Lines

• US Police Detective Charged With Purchasing Stolen Credentials

• Cranium Detect AI accelerates AI governance

• 75% of US Senate Campaign Websites Fail to Implement DMARC

• OpenSSL 3.4 Final Release Live

• ICONICS and Mitsubishi Electric Products

• CISA Releases One Industrial Control Systems Advisory

• ShadyShader: Crashing Apple M-Series Devices with a Single Click

• SailPoint Machine Identity Security reduces the risk associated with unmanaged machine identities

• Cybercriminals Exploiting Docker API Servers for SRBMiner Crypto Mining Attacks

• Security Flaw in Styra’s OPA Exposes NTLM Hashes to Remote Attackers

• RecoverPy : To Find And Recover Deleted Or Overwritten Files From Terminal

• Experts warn of a new wave of Bumblebee malware attacks

• Russian Disinformation Group Behind Bogus Walz Conspiracy: Report

• Kusari helps organizations gain visibility into their software

• Can Security Experts Leverage Generative AI Without Prompt Engineering Skills?

• Putting the “R” back in GRC – Insights from Gartner on Emerging Cyber GRC Technologies

• SailPoint Adds Raft of Capabilities to Better Manage Privileges

• How to use interface VPC endpoints to meet your security objectives

• Generative AI grows 17% in 2024, but data quality plummets: Key findings from Appen’s State of AI Report

• Cloud Security — Maturing Past the Awkward Teenage Years

• Upload a video selfie to get your Facebook or Instagram account back

• Stream.Security Secures $30 Million Series B

• IBM Guardium Data Security Center protects hybrid cloud and AI

• OpenSSL is hiring Communities Manager

• Beware Of Callback Phishing Attacks Google Groups That Steal Login Details

• Socket lands a fresh $40M to scan software for security flaws

• SOC Findings Report From RSA Conference 2024

• New AI Tool To Discover 0-Days At Large Scale With A Click Of A Button

• GHOSTPULSE Hides Within PNG File Pixel Structure To Evade Detections

• NordVPN Review (2024): Is NordVPN Worth the Cost?

• Critical Vulnerabilities Expose mbNET.mini, Helmholz Industrial Routers to Attacks

• Proofpoint Alternatives and Competitors: Find the Best

• Critical Chrome Vulnerabilities Let Malicious Apps Run Shell Command on Your PC

• IcePeony Hackers Exploiting Public Web Servers To Inject Webshells

• No, The Chinese Have Not Broken Modern Encryption Systems with a Quantum Computer

• BlackCat Ransomware Successor Cicada3301 Emerges

• Packet Capture cStor 200S enables organizations to capture, analyze, and optimize network traffic

• A Comprehensive Guide to Finding Service Accounts in Active Directory

• Russia-Linked Hackers Attacking Governmental And Political Organizations

• Threat intelligence vs. threat hunting: Better together

• Latrodectus Malware Increasingly Used by Cybercriminals

• VMware fixes critical vCenter Server RCE bug – again! (CVE-2024-38812)

• Phishing Attack Impacts Over 92,000 Transak Users

• Threat actor abuses Gophish to deliver new PowerRAT and DCRAT

• Astaroth Banking Malware Runs Actively Targets Users In Brazil

• Sophos Expands Cybersecurity With $860m Secureworks Purchase

• Best practices on securing your AI deployment

• What Is Secure Access Service Edge?

• Bumblebee Malware Loader Resurfaces Following Law Enforcement Takedown

• Malicious npm Packages Target Developers’ Ethereum Wallets with SSH Backdoor

• Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies

• Meta to Fight Celeb-Bait Scams with Facial Recognition

• Using gRPC and HTTP/2 for Cryptominer Deployment: An Unconventional Approach

• The Past, Present, and Future of File Integrity Monitoring

• Palo Alto Networks extends security into harsh industrial environments

• U.S. CISA adds ScienceLogic SL1 flaw to its Known Exploited Vulnerabilities catalog

• Palo Alto Networks Adds New Capabilities to OT Security Solution

• Ivanti Neurons for App Control strengthens endpoint security

• Roundcube XSS flaw exploited to steal credentials, email (CVE-2024-37383)

• Pharma Giant Johnson & Johnson Discloses Data Breach

• Fastly DDoS Protection blocks malicious traffic

• Think Tanks Urge Action to Curb Misuse of Spyware and Hack-for-Hire

• FBI & CISA Warns of Tactics Used by Hackers Targeting 2024 U.S. General Election

• VMware failed to fully address vCenter Server RCE flaw CVE-2024-38812

• AI-Powered Attacks Flood Retail Websites

• VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability

• U.S. rule on selling sensitive data, Cisco data stolen, Nidec breach

• Cyber Attackers Set Their Sights on the Manufacturing Industry

• OWASP Mobile Top 10 2024: Update Overview

• Winnebago Public Schools Suffers Cyber Attack, Services Shut Down

• Attackers Exploit Roundcube Webmail Vulnerability

• Cyber Attackers Set Their Sights on Manufacturing

• Ransomware group demands $30k for not leaking Transak user data

• Best Programming Languages for Hacking in 2025

• Google Mandiant: Time-to-Exploit Falls, Zero Day Exploits Rise

• Pixel perfect Ghostpulse malware loader hides inside PNG image files

• NHS App to Provide Full Medical Records Under Digital Overhaul Plan

• IT security and government services: Balancing transparency and security

• CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

• Phishing scams and malicious domains take center stage as the US election approaches

• Myths holding women back from cybersecurity careers

• Hackers are finding new ways to leverage AI

• Whitepaper: Securing GenAI

• Severe Flaws Discovered in Major E2EE Cloud Storage Services

• ISC Stormcast For Tuesday, October 22nd, 2024 https://isc.sans.edu/podcastdetail/9190, (Tue, Oct 22nd)

• Inside the Dark Web: How Threat Actors Are Selling Access to Corporate Networks

• USENIX NSDI ’24 – DISTMM: Accelerating Distributed Multimodal Model Training

• Are Leaders Ready to Break the Ransomware Cycle

• China’s Spamouflage cranks up trolling of US Senator Rubio as election day looms

• Meta tests facial recognition for spotting ‘celeb-bait’ ads scams and easier account recovery

• Sophos to snatch Secureworks in $859M buyout: Why fight when you can just buy?

• 170 AWS services achieve HITRUST certification

• IT Security News Daily Summary 2024-10-21

• Vulnerability Recap 10/21/24 – Immediate Patching Is Critical

• FedRAMP Certification and Compliance: What It Is and Why It Matters

• Types of Security Audits: Overview and Best Practices

• Internet Archive (Archive.org) Hacked for Second Time in a Month

• How to Implement Client-Side Load Balancing With Spring Cloud

• Cisco confirms attackers stole data from DevHub environment

• The billionaire behind Trump’s ‘unhackable’ phone is on a mission to fight Tesla’s FSD

• Survey Surfaces Depth and Scope of Identity Management Challenge

• ICE’s $2 Million Contract With a Spyware Vendor Is Under White House Review

• Cisco states that data published on cybercrime forum was taken from public-facing DevHub environment

• VMware Struggles to Fix Flaw Exploited at Chinese Hacking Contest

• USENIX NSDI ’24 – Parcae: Proactive, Liveput-Optimized DNN Training on Preemptible Instances

• Randall Munroe’s XKCD ‘Experimental Astrophysics’

• Is It Time to Move on from Your Legacy GRC Solution?

• USENIX NSDI ’24 – Accelerating Neural Recommendation Training with Embedding Scheduling

• DEF CON 32 – AppSec Village – Web2 Meets Web3 Hacking Decentralized Applications

• How to Lower Ping: 11 Practical Tips

• Securing Financial Operations: Know Your SaaS

• HM Surf Bug in macOS Raises Data Privacy Concerns

• Study outlines ‘severe’ security issues in cloud providers

• Apple Offering Hackable iPhones to Universities

• ISC2 Security Congress 2024: The Landscape of Nation-State Cyber Attacks

• Data Breach Statistics [2024] : Penalties and Fines for Major regulations

• Akira ransomware continues to evolve

• Hacker Advertises “Top Secret US Space Force (USSF) Military Technology Archive”

• Living Our Purpose Through Pro Bono

• Cybersecurity Action Month: When Awareness Must Lead to Action

• What is Incident Response?

• Vietnamese Hackers Target Digital Marketers in Malware Attack

• Innovator Spotlight: Interpres Security

• AWS Tells Staff To Leave If They Don’t Wish To Return To Office

• Hacker Advertises “Top Secret US Space Force Military Technology Archive”

• How to Secure Your Raspberry Pi and Enable Safe, Resilient Updates

• Gartner: 2025 will see the rise of AI agents (and other top trends)

• Why you should power off your phone at least once a week – according to the NSA

• U.S. Border Surveillance Towers Have Always Been Broken

• Innovator Spotlight: Concentric

• Innovator Spotlight: Keepnet Labs

• USENIX NSDI ’24 – OPPerTune: Post-Deployment Configuration Tuning of Services Made Easy

• North Korean Hackers Develop Linux Variant of FASTCash Malware Targeting Financial Systems

• A Network Nerd’s Take on Emergency Preparedness, (Tue, Oct 15th)

• Sophos to acquire Secureworks

• Attackers Target Exposed Docker Remote API Servers With perfctl Malware

• Eutelsat Launches First Satellites Since OneWeb Merger

• Get 9 Courses on Ethical Hacking for Just $50

• Fortinet Training Institute Wins Industry Accolades

• The Ugly Truth about Your Software Vendor which CISOs Won’t Want (But Do Need) to Hear

• This industry profits from knowing you have cancer, explains Cody Venzke (Lock and Code S05E22)

• Microsoft Builds Fictitious Azure Tenants to Lure Phishers to Honeypots

• Stolen Access Tokens Lead to New Internet Archive Breach

• Zero-Trust Endpoint Security

• More of Internet Archive is back online, despite hackers infiltrating its helpdesk

• Sophos to Acquire SecureWorks in $859 Million All-Cash Deal

• 50,000 Files Exposed in Nidec Ransomware Attack

• Samsung Delays ASML Deliveries For Texas Chip Factory – Report

• Internet Archive was breached twice in a month

• Seven Cybersecurity Tips to Protect Your Retail Business This Holiday Season

• Internet Archive attackers email support users: “Your data is now in the hands of some random guy”

• Vulnerability Summary for the Week of October 14, 2024

• Netskope Reports Possible Bumblebee Loader Resurgence

• Australia’s New Scam Prevention Laws: What You Need to Know

• macOS HM Surf vuln might already be under exploit by major malware family

• Fortinet releases patches for undisclosed critical FortiManager vulnerability

• Graylog enables organizations to make more informed decisions about their security posture

• Chinese Nation-State Hackers APT41 Hit Gambling Sector for Financial Gain

• How In-Person Meetings Fast-Tracked Our vPPA Negotiations in Europe

• TikTok’s ByteDance Fires Intern For Allegedly Sabotaging AI Project

• Strengthening Cloud Defenses: Key Strategies

• ESET Distributor’s Systems Abused to Deliver Wiper Malware

• Chinese Research Using Quantum System to Crack Encryption a ‘Cautionary Tale’

• How to build a Security Guardians program to distribute security ownership

• How To Secure Your Raspberry Pi and Enable Safe, Resilient Updates

• A Trump Win Could Unleash Dangerous AI

• Big Rewards Offered in Dedicated Google Cloud Bug Bounty Program

• Cisco Confirms Security Incident After Hacker Offers to Sell Data

• Phishing Attacks Snare Security, IT Leaders

• THN Cybersecurity Recap: Top Threats, Tools and News (Oct 14 – Oct 20)

• Guide:  The Ultimate Pentest Checklist for Full-Stack Security

• Safeguard OT Environments with the Power of Precision AI

• Former OpenAI Mira Murati Raising Capital For New AI Startup – Report

• Silicon UK AI For Your Business Podcast: Government and AI

• AI and the SEC Whistleblower Program

• Australia’s Privacy Watchdog Publishes Guidance on Commercial AI Products

• Hackers Use Bumblebee Malware to Gain Access to Corporate Networks

• FBI Arrested Hacker Behind the Takeover of the U.S. SEC X account

• Nearly half (44%) of CISOs Fail to Detect Breaches

• Atlassian Patches Vulnerabilities in Bitbucket, Confluence, Jira

• Escape vs Qualys

• Western Digital Fined $316m For Infringing Data Security Patent

• The 6 Best Antivirus Software Providers for Mac in 2024

• US Government Says Relying on Chinese Lithium Batteries Is Too Risky

• How a Trump Win Could Unleash Dangerous AI

• Stealer here, stealer there, stealers everywhere!

• AI and Hardware Hacking on the Rise

• Roundcube Webmail Vulnerability Exploited in Government Attack

• Ataccama ONE v15.3 empowers data teams to monitor, manage, and utilize data

• The Internet Archive breach continues

• Genomics company 23andMe to pay up to $10,000 per person to victims of data breach

• Industry Moves for the week of October 21, 2024 – SecurityWeek

• Internet Archive Hacked Again During Service Restoration Efforts

• Hackers Mimic as ESET to Deliver Wiper Malware

• Preventing Breaches Using Indicators of Compromise

• Cybersecurity at Ports Gets a Boost with New Bipartisan Bill

• Half of Organizations Have Unmanaged Long-Lived Cloud Credentials

• A week in security (October 14 – October 20)

• FBI’s Most Wanted Hacker Arrested in Malpensa

• Unknown threat actors exploit Roundcube Webmail flaw in phishing campaign

• Fortra Report Reveals Surge in Domain Impersonation, Social Media Attacks, and Dark Web Activity

• Researchers Discover Severe Security Flaws in Major E2EE Cloud Storage Providers

• Microsoft logs lost, Omni Family breach, Internet Archive Zendesk breach

• Fair Vote Canada – 134,336 breached accounts

• Fair Vote Canada Data Leak: 34k Email Addresses Leaked

• FBI Arrests Alabama Man in Connection to SEC Social Media Hack: Cyber Security Today for Monday, October 21st, 2024

• Windows 11 passkey transformation will say goodbye to Passwords

• Understanding AI and ML Security in Telecommunication Networks

• Tesla, Intel, deny they’re the foreign company China just accused of making maps that threaten national security

• Policy as code in Kubernetes: security with seccomp and network policies

• Building secure AI with MLSecOps

• Evolving cybercriminal tactics targeting SMBs

• Should the CISOs role be split into two functions?

• Aranya: Open-source toolkit to accelerate secure by design concepts

• These 7 Practices Are Building Cybersecurity Safeguards in the Construction Industry

• ISC Stormcast For Monday, October 21st, 2024 https://isc.sans.edu/podcastdetail/9188, (Mon, Oct 21st)

• Internet Archive exposed again – this time through Zendesk

Generated on 2024-10-22 23:55:09.428519