IT Security News Daily Summary 2024-10-25

• Chinese Hackers Target Trump Campaign via Verizon Breach

• Innovator Spotlight: Legit Security

• Sophos Acquires Dell’s Secureworks for $859 Million

• 7 Best Attack Surface Management Software for 2025

• Friday Squid Blogging: Giant Squid Found on Spanish Beach

• How to mitigate bot traffic by implementing Challenge actions in your AWS WAF custom rules

• 12 Expert Tips for Secure Cloud Deployments

• Joint Statement by FBI and CISA on PRC Activity Targeting Telecommunications

• Pentest People Achieves CREST Cyber Security Incident Response (CSIR) Accreditation

• Apple will pay you up to $1 million if you can hack into Apple Intelligence servers

• Change Healthcare Cyberattack Exposed Data of Over 100 Million People

• Change Healthcare data breach impacted over 100 million people

• Relearning past lessons in assessing cloud risk

• WhatsApp Moves Toward Usernames, Phasing Out Phone Numbers

• Best Cybersecurity Software & Tools for 2025

• Prominent crypto critic says someone offered bribes to take down a blog post

• DDoS mitigation: How to stop DDoS attacks

• SonicWall Doubles Down on Edge Security With Risk-Based Connectivity and Threat Protection

• Intel To Invest More Than $28 Billion In Ohio Chip Factories – Report

• Data Breach Exposes 93,000 Transak Users Due to Employee’s Device Misuse

• Elon Musk reportedly chats regularly with Putin

• AWS Seizes Domains Used by Russian Threat Group APT29

• Australia government looses visa holders sensitive details in cyber attack

• How to Shift Your Cybersecurity Focus from Breach to Impact (& Manage Risk)

• Apple Returns To Top 5 Smartphone Ranks In China, Amid Tim Cook Visit

• 100 million US citizens officially impacted by Change Healthcare data breach

• The best AirTag wallets of 2024: Expert tested

• Cisco ASA and FTD zero day used in password spraying attacks

• The Three Pillars of Shift-Left API Security

• A Preemptive Guide to State Cybersecurity Compliance

• It’s Time to Take Action This Cybersecurity Awareness Month

• Unlocking Business Growth: The Need for Cyber Risk Quantification

• Linux Kernel Project Drops 11 Russian Developers Amid US Sanctions Concerns

• Cybercrime Atlas: An Effective Approach to Collaboration in Cybersecurity

• Just how private is Apple’s Private Cloud Compute? You can test it to find out

• 100 MILLION Americans in UnitedHealth PII Breach

• The Growing Role of AI in Ethical Hacking: Insights from Bugcrowd’s 2024 Report

• Enhancing Study with QR Codes: A Modern Educational Tool

• Enter the World of Ethical Hacking with Confidence

• How AI Will Help Empower SMB Cybersecurity

• New Qilin Ransomware Variant Spotted by Cybersecurity Researchers

• Cybersecurity Insights with Contrast CISO David Lindner | 10/25/24

• How LLMs could help defenders write better and faster detection

• Researchers Discover Command Injection Flaw in Wi-Fi Alliance’s Test Suite

• In Other News: CVE Turns 25, Henry Schein Data Breach, Reward for Shahid Hemmat Hackers

• Addressing growing concerns about cybersecurity in manufacturing

• Watermark for LLM-Generated Text

• UnitedHealth: 100 Million Individuals Affected by the Change Healthcare Data Breach

• LinkedIn Hit With 310 Million Euro Fine for Data Privacy Violations From Irish Watchdog

• Change Healthcare Breach Affects 100 Million Americans

• Worms vs. Viruses: What’s the Difference?

• Windows 11 CLFS Driver Vulnerability Let Attackers Escalate Privileges – PoC Exploit Released

• Elon Musk reportedly chats often with Putin

• Safeguarding Corporate Secrets: Best Practices and Advanced Solutions

• Over $1 Million Paid Out at Pwn2Own Ireland 2024

• Apple Opens PCC Source Code for Researchers to Identify Bugs in Cloud AI Security

• CDK Cyber Attack

• 10 Best Linux Distributions In 2024

• Cloud Risk Management: The DevOps Guide

• US, Australia Release New Security Guide for Software Makers

• Protect Your Devices With Free Virus Removal

• Protecting Your Website From DDoS Attack

• SEC fines tech companies for misleading SolarWinds disclosures

• what is Malware

• UNC5820 Exploits FortiManager Zero-Day Vulnerability (CVE-2024-47575)

• CISOs Should Be Directing IAM Strategy — Here’s Why

• Worldwide IT Spending To Grow 9.3 Percent In 2025, Gartner Predicts

• AWS CDK Vulnerabilities Let Takeover S3 Bucket

• Landmark Admin Discloses Data Breach Impacting 800,000 People

• EDR Dependency: Ensuring Uninterrupted and Comprehensive Security Coverage

• Eliminating AI Deepfake Threats: Is Your Identity Security AI-Proof?

• OnePoint Patient Care data breach impacted 795916 individuals

• SEC Charges 4 Companies Over Misleading SolarWinds Cyberattack Disclosures

• Ukraine Warns of Mass Phishing Campaign Targeting Citizens Data

• Exploited: Cisco, SharePoint, Chrome vulnerabilities

• From Risk Assessment to Action: Improving Your DLP Response

• Why Is Privileged Access Management (PAM) Important?

• AWS Seizes Domains Used by Russia’s APT29

• Irish Data Protection Watchdog Fines LinkedIn $336m

• New Rules for US National Security Agencies Balance AI’s Promise With Need to Protect Against Risks

• Proof Verify reduces false positives and improves fraud detection accuracy

• NVIDIA Patch Multiple GPU Display Driver for Windows & Linux

• OnePoint Patient Care Data Breach Impacts Nearly 800,000 People

• 3 Tips for Organizations to Shore Up Their Cyber Resilience Strategies This Fall

• Cyberattacks Against Sporting Events are Growing More Calculated

• Inequity Challenges Women in Digital Trust, But Progress is Being Made

• Concentric AI raises $45 million to expand go-to-market strategies

• AuthenticID360 blocks AI-generated IDs during digital onboarding

• 7 essential password rules to follow in 2024, according to security experts

• U.S. CISA adds Cisco ASA and FTD, and RoundCube Webmail bugs to its Known Exploited Vulnerabilities catalog

• MacOS-Focused Ransomware Attempts Leverage LockBit Brand

• Qiliin ransomware upgrade, Sharepoint KEV flaw, Rhysida ransoms Easterseals

• Ransomware threat to Apple MacOS devices

• Understanding NIS2 and DORA: What executives need to know

• Sysdig Predicts Global Cyberattacks Costs Will Exceed $100B in 2025

• Safely Scale Your Data Center With These Five Cybersecurity Measures

• Irish Watchdog Imposes Record €310 Million Fine on LinkedIn for GDPR Violations

• US Energy Sector Faces Growing Cybersecurity Threats

• A Dangerous Alliance: Scattered Spider, RansomHub Join Forces

• AI-Driven Deepfake Scams Cost Americans Billions in Losses

• Achieving peak cyber resilience

• ESET Research Podcast: CosmicBeetle

• How to fend off a quantum computer attack

• The future of cyber insurance: Meeting the demand for non-attack coverage

• How to Protect Against Ransomware Attacks?

• New infosec products of the week: October 25, 2024

• Unclear pricing for GRC tools creates market confusion

• ISC Stormcast For Friday, October 25th, 2024 https://isc.sans.edu/podcastdetail/9196, (Fri, Oct 25th)

• digiDirect – 304,337 breached accounts

• Putin’s pro-Trump trolls accuse Harris of poaching rhinos

• Have you stayed at a Marriott? Here’s what its settlement with the FTC means for you

• Is the Blockchain Secure? Yes, and Here’s Why

• AWS Cloud Development Kit flaw exposed accounts to full takeover

• 5 Security Considerations for Managing AI Agents and Their Identities

• Disability Rights Are Technology Rights

• IT Security News Daily Summary 2024-10-24

• How the ransomware attack at Change Healthcare went down: A timeline

• UnitedHealth says Change Healthcare data breach affects over 100 million people in America

• Pwn2Own Ireland 2024 Day 2: participants demonstrated an exploit against Samsung Galaxy S24

• Apple will pay security researchers up to $1 million to hack its private AI cloud

• White House Memo Puts the Focus of AI on National Security

• Apple Cuts Orders iPhone 16, Says Analyst

• Meta just beat Google and Apple in the race to put powerful AI on phones

• Apple Opens Private Cloud Compute for Public Security Inspection

• Emergency patch: Cisco fixes bug under exploit in brute-force attacks

• Lazarus Group Exploits Chrome 0-Day for Crypto with Fake NFT Game

• Development Features Enabled in Prodcution, (Thu, Oct 24th)

• Cisco Partner Summit 2024: Know Before You Go

• Confidential Containers with IBM Secure Execution for Linux

• Secure design principles in the age of artificial intelligence

• Strengthen DevSecOps with Red Hat Trusted Software Supply Chain

• How to Upskill and Fill Cybersecurity Skill Gaps on Your Team With Custom Learning Paths

• Beyond the Resume: Effective Techniques for Qualifying Top Cybersecurity Talent

• Modernizing Data Security: Imperva and IBM Z in Action

• Cybersecurity teams being excluded from AI implementation discussions, ISACA study shows

• Keeper Security Introduces New Updates to KeeperFill Browser Extension

• Evolving Email Threats and How to Protect Against Them

• The Rise of Cyberattacks on Critical Infrastructure: Are You Prepared?

• The Entrust Distrust Deadline is Closing In. Are you Prepared?

• DEF CON 32 – AppSec Village – Securing Frontends at Scale;Paving our Way to Post XSS World

• Randall Munroe’s XKCD ‘RNAWorld’

• Blackwire Labs AI Cybersecurity Platform Incorporates Blockchain to Validate Data

• New Qilin.B Ransomware Variant Emerges with Improved Encryption and Evasion Tactics

• LinkedIn Fined €310m By Irish Data Protection Commission

• Cisco fixed tens of vulnerabilities, including an actively exploited one

• Nvidia Patches High-Severity Flaws in Windows, Linux Graphics Drivers

• Security Risks Discovered in Popular End-to-End Encrypted Cloud Storage Platforms

• Lounge Scam at Bengaluru Airport Costs Woman ₹ 87,000

• Infostealer-Injecting Plugins infect Thousands of WordPress Sites

• How Ignoring These Wi-Fi Settings Can Leave You Vulnerable to Hackers

• Amazon identified internet domains abused by APT29

• Fake IT Workers: How HYPR Stopped a Fraudulent Hire

• DMARC MSP Case Study: CloudTech24 Simplies Domain Security Management for Clients with PowerDMARC

• WhatsApp offers new contact management for data security

• CMA Begins Probe Into Alphabet Partnership With Anthropic

• From Uptime to Outcome: New Paths for Managed Services Success

• Lazarus Group Exploits Google Chrome Flaw in New Campaign

• Wordfence Intelligence Weekly WordPress Vulnerability Report (October 14, 2024 to October 20, 2024)

• The Most Secure Payment Solutions in the USA: Zelle, MoneyGram, CashApp, and Venmo

• NotLockBit: Ransomware Discovery Serves As Wake-Up Call For Mac Users

• 2024 Report: Insider Threat

• Accelerating Connection Handshakes in Trusted Network Environments

• Penn State Settles for $1.25M Over Cybersecurity Violations

• TSMC Stops Supplying Customer, After Discovery Of Restricted Chip

• 3 proven use cases for AI in preventative cybersecurity

• Deep Sea Electronics DSE855

• VIMESA VHF/FM Transmitter Blue Plus

• iniNet Solutions SpiderControl SCADA PC HMI Editor

• CISA Releases Four Industrial Control Systems Advisories

• AWS Cloud Development Kit Vulnerability Exposes Users to Potential Account Takeover Risks

• Exploring digital sovereignty: learning opportunities at re:Invent 2024

• Get it Done Faster with AI Copilot for Harmony SASE

• Pinterest tracks users without consent, alleges complaint

• North Korean Hackers Exploited Chrome Zero-Day for Cryptocurrency Theft

• White House Issues AI National Security Memo

• Misconfigured UN Database Exposes 228GB of Gender Violence Victims’ Data

• The 3 Questions at the Core of Every Cybersecurity Compliance Mandate

• ‘Deceptive Delight’ Jailbreak Tricks Gen-AI by Embedding Unsafe Topics in Benign Narratives

• SEC Fines Four Tech Firms for Downplaying SolarWinds Impacts

• Strengthening Critical Infrastructure Defense: Shifting to an Exposure Management Mindset

• Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability Under Active Attack

• What is the difference between a data leak and a data breach?

• Hook’d: How HookBot Malware Impersonates Known Brands to Steal Customer Data

• The best travel VPNs of 2024: Expert tested and reviewed

• What Is PCI Compliance? A Simple Guide for Businesses

• FortiJump flaw CVE-2024-47575 has been exploited in zero-day attacks since June 2024

• Phishing for Votes in the Upcoming US Election

• Bitwarden’s FOSS halo slips as new SDK requirement locks down freedoms

• New Fortinet Zero-Day Exploited for Months Before Patch

• Why Phishing-Resistant MFA Is No Longer Optional: The Hidden Risks of Legacy MFA

• How to use the Private Space feature in Android 15 – and secure your sensitive data

• Equipment to include in a computer forensic toolkit

• Top Court Sides With Intel Over EU Antitrust Fine

• Ransomware’s ripple effect felt across ERs as patient care suffers

• Penn State Settles for $1.25M Over Failure to Comply With DoD, NASA Cybersecurity Requirements

• Fortinet Confirms Exploitation of Critical FortiManager Zero-Day Vulnerability

• GitLab Patches HTML Injection Flaw Leads to XSS Attacks

• 16-31 July 2024 Cyber Attacks Timeline

• The UK Must Act: Alaa Abd El-Fattah Still Imprisoned 25 Days After Release Date

• New Scoring System Helps Secure the Open Source AI Model Supply Chain

• Exploring the Transformative Potential of AI in Cybersecurity

• Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices

• UK Government Introduces New Data Governance Legislation

• Talos IR trends Q3 2024: Identity-based operations loom large

• Perplexity Boss Surprised After New Corp Sues

• Get Advanced Ad Blocking and Superior Data Privacy Tools for Just $11

• Cybersecurity Teams Largely Ignored in AI Policy Development

• Understanding the Initial Stages of Web Shell and VPN Threats: An MXDR Analysis

• Technologist Bruce Schneier on security, society and why we need ‘public AI’ models

• Meet ZachXBT, the Masked Vigilante Tracking Down Billions in Crypto Scams and Thefts

• NotLockBit Ransomware Targets Both Windows and MacOS

• Cisco Patches Vulnerability Exploited in Large-Scale Brute-Force Campaign

• Majority of SaaS Applications, AI Tools Unmanaged

• Fortinet FortiManager flaw exploited in zero-day attacks (CVE-2024-47575)

• Xerox Printers Vulnerable to Remote Code Execution Attacks

• Samsung Galaxy S24 Hacked at Pwn2Own Ireland 2024

• Blending Traditional and Emerging Cybersecurity Practices for a Holistic Approach

• Nucleus Security unveils POAM Process Automation for federal agencies

• F5 BIG-IP Next for Kubernetes reduces the complexity of AI deployments

• Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation

• Guarding Digital Assets By Understanding Third-Party Access Risks

• UK Government Urges Organizations to Get Cyber Essentials Certified

• Cisco ASA Devices Vulnerable to SSH Remote Command Injection Flaw

• CISA data rules, Fortinet zero-day, UK Cyber Essentials

• Ransomware hackers using cloud service platforms as their playgrounds

• Google Patches Multiple Chrome Security Vulnerabilities

• Voice-enabled AI agents can automate everything, even your phone scams

• SEC Fines Four Companies $7 Million for Misleading Cybersecurity Disclosures: Cyber Security Today for Thursday, October 23, 2024

• U.S. CISA adds Fortinet FortiManager flaw to its Known Exploited Vulnerabilities catalog

• Cybersecurity Awareness Month 2024: Wrapping Up with Actionable Insights to Secure Our World

• WhatsApp Debuts New Features for Contact Management with Enhanced Privacy Protections

• The Lazarus APT Strikes Again: New Zero-Day Exploit Targets Investors through DeFi Games

• China’s top messaging app WeChat banned from Hong Kong government computers

• Enhancing national security: The four pillars of the National Framework for Action

• What’s more important when hiring for cybersecurity roles?

• Anthropic’s latest Claude model can interact with computers – what could go wrong?

• Facing the uncertainty of cyber insurance claims

• How to enable Safe Browsing in Google Chrome on Android

• AI and deepfakes fuel phishing scams, making detection harder

• Perfctl malware strikes again as crypto-crooks target Docker Remote API servers

• 2024-10-17 – Two days of server scans and probes and web traffic

• 2024-10-23 – Redline Stealer infection

• ISC Stormcast For Thursday, October 24th, 2024 https://isc.sans.edu/podcastdetail/9194, (Thu, Oct 24th)

• Hackers Leak 180,000 Esport North Africa User Records a Day Before Tournament Begins

• Investigating FortiManager Zero-Day Exploitation (CVE-2024-47575)

• Samsung phone users under attack, Google warns

Generated on 2024-10-25 23:55:05.421996