IT Security News Daily Summary 2024-10-23

• Deceptive Google Meet Invites Lure Users Into Malware Scams

• ‘Satanic’ data thief claims to have slipped into 350M Hot Topic shoppers info

• Microsoft Threat Intelligence healthcare ransomware report highlights need for collective industry action

• Critical Flaw in Open Policy Agent Exposed NTLM Credentials, Patch Released

• OpenAI scientist Noam Brown stuns TED AI Conference: ’20 seconds of thinking worth 100,000x more data’

• Microsoft SharePoint RCE flaw exploits in the wild – you’ve had 3 months to patch

• Fortinet Confirms Zero-Day Exploit Targeting FortiManager Systems

• CISA Adds One Known Exploited Vulnerability to Catalog

• Are Automatic License Plate Scanners Constitutional?

• Apple ‘Sharply Cuts’ Production For Vision Pro Headset – Report

• How Federal Agencies Are Achieving Zero Trust With Automation

• Digital Echo Chambers and Erosion of Trust – Key Threats to the US Elections

• Google SynthID Adding Invisible Watermarks to AI-Generated Content

• WeChat’s Updated Encryption System Prone to Threats for its Users

• New Grandoreiro Banking Malware Variants Emerge with Advanced Tactics to Evade Detection

• Congratulations to the Top MSRC 2024 Q3 Security Researchers!

• Wiz hopes to hit $1B in ARR in 2025 before an IPO, after turning down Google’s $23B

• TA866 Group Linked to New WarmCookie Malware in Espionage Campaign

• Google Messages adds nudity blur option, plus other new security upgrades

• The best VPN for streaming in 2024: Expert tested and reviewed

• After concerns of handing Facebook taxpayer info, four companies found to have improperly shared data

• Unveiling Hidden Connections: JA4 Client Fingerprinting on VirusTotal

• Hong Kong Bans WhatsApp, Google Drive On Government Devices

• Threat Actors Are Exploiting Vulnerabilities Faster Than Ever

• Microsoft Warns Foreign Disinformation Is Hitting the US Election From All Directions

• CISA Proposes Stronger Security Requirements to Protect Sensitive Data

• API Vulnerabilities Jump 21% in Third Quarter

• Everybody Loves Bash Scripts. Including Attackers., (Wed, Oct 23rd)

• Deceptive Delight: Jailbreak LLMs Through Camouflage and Distraction

• Trick or Treat? Your Infrastructure Might Be Haunted by Zombie and Shadow APIs

• DdoS Attack on Russian Foreign Ministry during BRICS summit

• Unmasking Prometei: A Deep Dive Into Our MXDR Findings

• Ofcom Finds Online Posts Were Clearly Connected To UK Riots

• ARM Cancels Qualcomm Chip Design Licence – Report

• Nigerian Court Orders Release Of Binance Executive

• Millions of iOS and Android Users at Risk as Popular Apps Expose Cloud Keys

• Attackers Use Encoded JavaScript to Deliver Malware

• Threat Actors Allegedly Selling Database of 1,000 NHS Email Accounts

• Grayscale Investments Data Breach Exposes 693K User Records Reportedly Affected

• AI hallucinations can pose a risk to your cybersecurity

• Engaging with Security Researchers: Embracing a “See Something, Say Something” Culture

• Defending Against Ransom DDoS Attacks

• CIS Control 16 Application Software Security

• Is a VPN Really Worth It in 2024?

• The Global Surveillance Free-for-All in Mobile Ad Data

• Nigeria Drops Charges Against Tigran Gambaryan, Jailed Binance Exec and Former IRS Agent

• How Cisco is Using Apple Vision Pro to Create the Next Evolution of Spatial Collaboration

• Crooks are targeting Docker API servers to deploy SRBMiner

• U.S. CISA adds Microsoft SharePoint flaw to its Known Exploited Vulnerabilities catalog

• The Crypto Game of Lazarus APT: Investors vs. Zero-days

• Democratising Cybersecurity

• ShadyShader: Crashing Apple Devices with a Single Click

• Modernizing Data Security: Imperva and IBM zSystems in Action

• Securing E-commerce

• LinkedIn bots and spear phishers target job seekers

• Reality Defender Banks $33M to Tackle AI-Generated Deepfakes

• Bolstering CTEM with AI and Purple Team Security

• Keep your secrets secret: 5 core tips — and a call to action on modernizing

• IBM Addresses AI, Quantum Security Risks with New Platform

• FortiJump: Yet Another Critical Fortinet 0-Day RCE

• The Impact of Google’s Manifest V3 on Chrome Extensions

• Old Redbox Kiosks Hacked to Expose Customers’ Private Details

• Cofense improves visibility of dangerous email-based threats

• Ransomware Gangs Use LockBit’s Fame to Intimidate Victims in Latest Attacks

• Think You’re Secure? 49% of Enterprises Underestimate SaaS Risks

• Researchers Reveal ‘Deceptive Delight’ Method to Jailbreak AI Models

• CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)

• Permiso State of Identity Security 2024: A Shake-up in Identity Security Is Looming Large

• Internet Archive Secures Zendesk Account, Works Toward Full-Service Restoration

• 70% of Leaders See Cyber Knowledge Gap in Employees

• Former British PM Cameron Calls for Tech Engagement with China Despite Cyber Threats

• Embargo Ransomware Gang Deploys Customized Defense Evasion Tools

• New Malware WarmCookie Targets Users with Malicious Links

• Everybody Loves Bash Scripts. Including Attackers., (Wed, Oct 23rd)

• Deceptive Delight: Jailbreak LLMs Through Camouflage and Distraction

• Trick or Treat? Your Infrastructure Might Be Haunted by Zombie and Shadow APIs

• DdoS Attack on Russian Foreign Ministry during BRICS summit

• Unmasking Prometei: A Deep Dive Into Our MXDR Findings

• Ofcom Finds Online Posts Were Clearly Connected To UK Riots

• ARM Cancels Qualcomm Chip Design Licence – Report

• Nigerian Court Orders Release Of Binance Executive

• Millions of iOS and Android Users at Risk as Popular Apps Expose Cloud Keys

• Attackers Use Encoded JavaScript to Deliver Malware

• Threat Actors Allegedly Selling Database of 1,000 NHS Email Accounts

• Grayscale Investments Data Breach Exposes 693K User Records Reportedly Affected

• AI hallucinations can pose a risk to your cybersecurity

• Engaging with Security Researchers: Embracing a “See Something, Say Something” Culture

• Defending Against Ransom DDoS Attacks

• CIS Control 16 Application Software Security

• Is a VPN Really Worth It in 2024?

• The Global Surveillance Free-for-All in Mobile Ad Data

• Nigeria Drops Charges Against Tigran Gambaryan, Jailed Binance Exec and Former IRS Agent

• How Cisco is Using Apple Vision Pro to Create the Next Evolution of Spatial Collaboration

• Crooks are targeting Docker API servers to deploy SRBMiner

• U.S. CISA adds Microsoft SharePoint flaw to its Known Exploited Vulnerabilities catalog

• The Crypto Game of Lazarus APT: Investors vs. Zero-days

• Democratising Cybersecurity

• ShadyShader: Crashing Apple Devices with a Single Click

• Modernizing Data Security: Imperva and IBM zSystems in Action

• Securing E-commerce

• LinkedIn bots and spear phishers target job seekers

• Reality Defender Banks $33M to Tackle AI-Generated Deepfakes

• Bolstering CTEM with AI and Purple Team Security

• Keep your secrets secret: 5 core tips — and a call to action on modernizing

• IBM Addresses AI, Quantum Security Risks with New Platform

• FortiJump: Yet Another Critical Fortinet 0-Day RCE

• The Impact of Google’s Manifest V3 on Chrome Extensions

• Old Redbox Kiosks Hacked to Expose Customers’ Private Details

• Cofense improves visibility of dangerous email-based threats

• Ransomware Gangs Use LockBit’s Fame to Intimidate Victims in Latest Attacks

• Think You’re Secure? 49% of Enterprises Underestimate SaaS Risks

• Researchers Reveal ‘Deceptive Delight’ Method to Jailbreak AI Models

• CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)

• Permiso State of Identity Security 2024: A Shake-up in Identity Security Is Looming Large

• US Government Pledges to Cyber Threat Sharing Via TLP Protocol

• Internet Archive Secures Zendesk Account, Works Toward Full-Service Restoration

• 70% of Leaders See Cyber Knowledge Gap in Employees

• Former British PM Cameron Calls for Tech Engagement with China Despite Cyber Threats

• Embargo Ransomware Gang Deploys Customized Defense Evasion Tools

• Highlighting TA866/Asylum Ambuscade Activity Since 2021

• Threat Spotlight: WarmCookie/BadSpace

• Complex controls: Addressing PCI DSS by 2025

• Why DSPM is Essential for Achieving Data Privacy in 2024

• ESET HOME Security enhancements strengthen protection against AI-driven threats

• UK Government Weighs Review of Computer Misuse Act to Combat Cybercrime

• Building a Cyber Resilience Framework for Credit Unions

• BT Switches On First Self-Powered Cell Tower

• Dutch Police Infiltrate Telegram Groups, Arrest 4 for Illegal Data Trading

• AI is Revolutionizing Cybersecurity — But Not in the Ways You Might Think

• Mallox Ransomware Vulnerability Lets Victims Decrypt Files

• SEC fined 4 companies for misleading disclosures about the impact of the SolarWinds attack

• Election Security: Here’s What We Should Really Be Worried About

• Western Digital Fined Over $310 Million for Patent Infringement

• AI Data Breach Reveals Trust Issues with Personal Information

• Reality Defender secures $33 million to enhance AI detection capabilities

• Cohesity Gaia brings the power of generative AI to enterprise data

• Stream.Security raises $30 million to boost cloud security

• White Hat Hackers Earn $500,000 on First Day of Pwn2Own Ireland 2024

• US Energy Sector Vulnerable to Supply Chain Attacks

• Red Hat NetworkManager Flaw Allows Hackers to Gain Root Access

• SolarWinds disclosure fines, Zendesk helps Internet Archive, Samsung zero-day

• Grandoreiro, the global trojan with grandiose goals

• Can Offline Data Storage Curb Ransomware Attacks?

• Tor Browser 14.0 Released With New Android Circuit Options

• CISA Proposes New Security Measures to Safeguard Sensitive Data from Adversary States

• Britain online users should be aware of this Online Job Scam

• Five Ways to Improve Your Security Posture, Fast

• Effective strategies for measuring and testing cyber resilience

• Argus: Open-source information gathering toolkit

• Evolving cloud threats: Insights and recommendations

• Cybersecurity jobs available right now: October 23, 2024

• Showcasing our Industry-First BDR Solution in Singapore

• Most women in IT work overtime to advance in their careers

• ISC Stormcast For Wednesday, October 23rd, 2024 https://isc.sans.edu/podcastdetail/9192, (Wed, Oct 23rd)

• Millions of Android and iOS users at risk from hardcoded creds in popular apps

• US lawmakers push DoJ to prosecute tax prep firms for leaking taxpayer data to big tech

• US lawmakers push DOJ to prosecute tax prep firms for leaking taxpayer data to big tech

• USENIX NSDI ’24 – Accelerating Skewed Workloads With Performance Multipliers in the TurboDB Distributed Database

• DEF CON 32 – AppSec Village – Lessons Learned from Building and Defending LLM Applications

• How Security Automation Platforms Streamline SOC Operations

• USENIX NSDI ’24 – SIEVE is Simpler than LRU: An Efficient Turn-Key Eviction Algorithm for Web Caches

• Deceptive Google Meet Invites Lures Users Into Malware Scams

• IT Security News Daily Summary 2024-10-22

• SEC fines four companies $7M for ‘misleading cyber disclosures’ regarding SolarWinds hack

• Burning Zero Days: FortiJump FortiManager vulnerability used by nation state in espionage via MSPs

• Implement Hibernate Second-Level Cache With NCache

• The best VPN for Mac in 2024: Expert tested and reviewed

• In Appreciation of David Burnham

• How to use the Amazon Detective API to investigate GuardDuty security findings and enrich data in Security Hub

• CISA and USPIS Release Two Election Mail Security Resources

• Elon Musk, Tesla Sued By Blade Runner 2049 Producers

• 5 Best Rootkit Scanners and Removers: Anti-Rootkit Tools

• Elevating SaaS Security: The Strategic Role of Bug Bounty Programs

• Announcing the BlueHat 2024 Sessions

• Understanding WhatsApp Check Marks: One or Two, Gray or Blue

• The best VPN services for iPhone: Expert tested and reviewed

• Bluesky Gains After X Changes How Blocking Works

• Fake CAPTCHA Pages Used by Lumma Stealer to Spread Fileless Malware

• Grandoreiro, the global trojan with grandiose ambitions

• Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans

• Wiping your Windows laptop? Here’s the simplest way to erase all personal data

• Exposed United Nations Database Left Sensitive Information Accessible Online

• TSMC blows whistle on potential sanctions-busting shenanigans from Huawei

• USENIX NSDI ’24 – THC: Accelerating Distributed Deep Learning Using Tensor Homomorphic Compression

• Randall Munroe’s XKCD ‘Temperature Scales’

• UK Government Signs Five Year Deal With Microsoft

• 5 new protections on Google Messages to help keep you safe

• How Many U.S. Persons Does Section 702 Spy On? The ODNI Needs to Come Clean.

• VMware fixes critical RCE, make-me-root bugs in vCenter – for the second time

• SEC Charges Four Companies Over Misleading Disclosures on SolarWinds Hack

• How much HTTP (not HTTPS) Traffic is Traversing Your Perimeter?, (Tue, Oct 22nd)

• Critical Vulnerability Patched In Jetpack WordPress Plugin

• SEC fines four companies $7 million for ‘misleading cyber disclosures’ regarding SolarWinds hack

• Keeper Security Calls for Action: Week Four

• KnowBe4 Launches Complimentary Training Module Following Thwarted North Korean Infiltration Attempt

• Tech firms to pay millions in SEC penalties for misleading SolarWinds disclosures

• Meta Restarts Use Of Facial Recognition For ‘Celebrity Scam Ad’ Crackdown

• Dark Web Anti-Bot Services Let Phishers Bypass Google’s Red Page

• What NIST’s post-quantum cryptography standards mean for data security

• Researchers link Polyfill supply chain attack to huge network of copycat gambling sites

• Team-Based Training and the Power of Simulation

• Nidec Corporation Ransomware Attack: Data Leak on Dark Web

• Security Experts Downplay the Significance of the Chinese Quantum “Hack”

• LLMjacking and Open-Source Tool Abuse Surge in 2024 Cloud Attacks

• Samsung zero-day flaw actively exploited in the wild

• Akira ransomware is encrypting victims again following pure extortion fling

• SEC Charges Tech Firms Over Misleading SolarWinds Hack Disclosures

• Dutch central bank says to keep cash on hand and Hackers targeting US Elections 2024 with domains

• TSMC Alerts US Of Attempt To Circumvent China AI Chip Restriction

• Skills shortage persists in cybersecurity with many jobs going unfilled

• MixMode Recognized By USA Today As One Of The Top 10 AI Companies To Watch in 2024

• Best Cybersecurity Metrics to Use in the Boardroom | Kovrr

• INE Security Launches New Training Solutions to Enhance Cyber Hygiene for SMBs

• Anthropic’s new AI can use computers like a human, redefining automation for enterprises

• The Shitposting Cartoon Dogs Sending Trucks, Drones, and Weapons to Ukraine’s Front Lines

• US Police Detective Charged With Purchasing Stolen Credentials

• Cranium Detect AI accelerates AI governance

• 75% of US Senate Campaign Websites Fail to Implement DMARC

• OpenSSL 3.4 Final Release Live

• ICONICS and Mitsubishi Electric Products

• CISA Releases One Industrial Control Systems Advisory

• ShadyShader: Crashing Apple M-Series Devices with a Single Click

• SailPoint Machine Identity Security reduces the risk associated with unmanaged machine identities

• Cybercriminals Exploiting Docker API Servers for SRBMiner Crypto Mining Attacks

• Security Flaw in Styra’s OPA Exposes NTLM Hashes to Remote Attackers

• RecoverPy : To Find And Recover Deleted Or Overwritten Files From Terminal

• Experts warn of a new wave of Bumblebee malware attacks

• Russian Disinformation Group Behind Bogus Walz Conspiracy: Report

• Kusari helps organizations gain visibility into their software

• Can Security Experts Leverage Generative AI Without Prompt Engineering Skills?

• Putting the “R” back in GRC – Insights from Gartner on Emerging Cyber GRC Technologies

• SailPoint Adds Raft of Capabilities to Better Manage Privileges

• How to use interface VPC endpoints to meet your security objectives

• Generative AI grows 17% in 2024, but data quality plummets: Key findings from Appen’s State of AI Report

• Cloud Security — Maturing Past the Awkward Teenage Years

• Upload a video selfie to get your Facebook or Instagram account back

• Stream.Security Secures $30 Million Series B

• IBM Guardium Data Security Center protects hybrid cloud and AI

• OpenSSL is hiring Communities Manager

• Beware Of Callback Phishing Attacks Google Groups That Steal Login Details

• Socket lands a fresh $40M to scan software for security flaws

• SOC Findings Report From RSA Conference 2024

• New AI Tool To Discover 0-Days At Large Scale With A Click Of A Button

• GHOSTPULSE Hides Within PNG File Pixel Structure To Evade Detections

• NordVPN Review (2024): Is NordVPN Worth the Cost?

• Critical Vulnerabilities Expose mbNET.mini, Helmholz Industrial Routers to Attacks

• Proofpoint Alternatives and Competitors: Find the Best

• Critical Chrome Vulnerabilities Let Malicious Apps Run Shell Command on Your PC

• IcePeony Hackers Exploiting Public Web Servers To Inject Webshells

• No, The Chinese Have Not Broken Modern Encryption Systems with a Quantum Computer

• BlackCat Ransomware Successor Cicada3301 Emerges

• Packet Capture cStor 200S enables organizations to capture, analyze, and optimize network traffic

• A Comprehensive Guide to Finding Service Accounts in Active Directory

• Russia-Linked Hackers Attacking Governmental And Political Organizations

• Threat intelligence vs. threat hunting: Better together

• Latrodectus Malware Increasingly Used by Cybercriminals

• VMware fixes critical vCenter Server RCE bug – again! (CVE-2024-38812)

• Phishing Attack Impacts Over 92,000 Transak Users

• Threat actor abuses Gophish to deliver new PowerRAT and DCRAT

• Astaroth Banking Malware Runs Actively Targets Users In Brazil

• Sophos Expands Cybersecurity With $860m Secureworks Purchase

• Best practices on securing your AI deployment

• What Is Secure Access Service Edge?

• Bumblebee Malware Loader Resurfaces Following Law Enforcement Takedown

• Malicious npm Packages Target Developers’ Ethereum Wallets with SSH Backdoor

• Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies

• Meta to Fight Celeb-Bait Scams with Facial Recognition

• Using gRPC and HTTP/2 for Cryptominer Deployment: An Unconventional Approach

• The Past, Present, and Future of File Integrity Monitoring

• Palo Alto Networks extends security into harsh industrial environments

• U.S. CISA adds ScienceLogic SL1 flaw to its Known Exploited Vulnerabilities catalog

• Palo Alto Networks Adds New Capabilities to OT Security Solution

• Ivanti Neurons for App Control strengthens endpoint security

• Roundcube XSS flaw exploited to steal credentials, email (CVE-2024-37383)

• Pharma Giant Johnson & Johnson Discloses Data Breach

• Fastly DDoS Protection blocks malicious traffic

• Think Tanks Urge Action to Curb Misuse of Spyware and Hack-for-Hire

• FBI & CISA Warns of Tactics Used by Hackers Targeting 2024 U.S. General Election

• VMware failed to fully address vCenter Server RCE flaw CVE-2024-38812

• AI-Powered Attacks Flood Retail Websites

• VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability

• U.S. rule on selling sensitive data, Cisco data stolen, Nidec breach

• Cyber Attackers Set Their Sights on the Manufacturing Industry

• OWASP Mobile Top 10 2024: Update Overview

• Winnebago Public Schools Suffers Cyber Attack, Services Shut Down

• Attackers Exploit Roundcube Webmail Vulnerability

• Cyber Attackers Set Their Sights on Manufacturing

• Ransomware group demands $30k for not leaking Transak user data

• Best Programming Languages for Hacking in 2025

• Google Mandiant: Time-to-Exploit Falls, Zero Day Exploits Rise

• Pixel perfect Ghostpulse malware loader hides inside PNG image files

• NHS App to Provide Full Medical Records Under Digital Overhaul Plan

• IT security and government services: Balancing transparency and security

• CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

• Phishing scams and malicious domains take center stage as the US election approaches

• Myths holding women back from cybersecurity careers

• Hackers are finding new ways to leverage AI

• Whitepaper: Securing GenAI

• Severe Flaws Discovered in Major E2EE Cloud Storage Services

• ISC Stormcast For Tuesday, October 22nd, 2024 https://isc.sans.edu/podcastdetail/9190, (Tue, Oct 22nd)

• Inside the Dark Web: How Threat Actors Are Selling Access to Corporate Networks

• USENIX NSDI ’24 – DISTMM: Accelerating Distributed Multimodal Model Training

• Are Leaders Ready to Break the Ransomware Cycle

Generated on 2024-10-23 23:55:05.892934