IT Security News Daily Summary 2024-10-28

• Adding threat detection to custom authentication flow with Amazon Cognito advanced security features

• Vulnerability Recap 10/28/24 – Phishing, DoS, RCE & a Zero-Day

• France’s second-largest telecoms provider Free suffered a cyber attack

• The SaaS Governance Gap | Grip Security

• Exploring AAA and TACACS Configuration with Cisco Modeling Labs

• Apple Updates Everything, (Mon, Oct 28th)

• How to identify and prevent insecure output handling

• Top 10 Governance, Risk & Compliance (GRC) Tools

• Leading through learning with Cisco 360 Partner Program

• JPMorgan Chase sues scammers following viral ‘infinite money glitch’

• Spring 2024 PCI DSS and 3DS compliance packages available now

• Apple Launches ‘Apple Intelligence’ and Offers $1M Bug Bounty for Security

• The most secure browser on the web just got a major update – what’s new

• Feds investigate China’s Salt Typhoon amid campaign phone hacks

• INE Launches Initiative to Optimize Year-End Training Budgets with Enhanced Cybersecurity and Networking Programs

• India’s New SMS Traceability Rules to Combat Fraud Begin November 1, 2024

• Hard-Coded Credentials Vulnerability Found In Kubernetes Image Builder

• Check Point Software Celebrates Irish Partner Success

• Russian Court Jails Four REvil Ransomware Gang Members

• What is authentication, authorization and accounting (AAA)?

• Wiz CEO says company was targeted with deepfake attack that used his voice

• Wiz CEO explains why he turned down a $23 billion deal

• Cop Companies Want All Your Data and Other Takeaways from This Year’s IACP Conference

• Data Masking Challenges: Overcoming Complexities in Multi-Database Environments

• NTT Data Taps Palo Alto Networks for MXDR Service

• The Evolution of Phishing Emails: From Simple Scams to Sophisticated Cyber Threats

• Insider threat hunting best practices and tools

• Delta sues CrowdStrike over IT outage fallout

• How a CISO Should Brief the Board of Directors

• DEF CON 32 – AppSec Village – Transforming AppSec Protecting ‘Everything as Code

• DEF CON 32 – AppSec Village – 0 0 0 0 Day Exploiting Localhost APIs From The Browser

• Randall Munroe’s XKCD ‘Sandwich Helix’

• Chinese Hackers Use CloudScout Toolset to Steal Session Cookies from Cloud Services

• How to implement trusted identity propagation for applications protected by Amazon Cognito

• NEW Qilin Ransomware Variant Emerges with Improved Evasion Techniques

• Embargo Ransomware Uses Custom Rust-Based Tools for Advanced Defense Evasion

• UnitedHealth Claims Data of 100 Million Siphoned in Change Healthcare Breach

• Evasive Panda’s CloudScout Toolset Targets Taiwan

• Black Basta operators phish employees via Microsoft Teams

• Types of cybersecurity controls and how to place them

• Criminals Are Blowing up ATMs in Germany

• New Type of Job Scam Targets Financially Vulnerable Populations

• Educated people becoming prime targets to Cyber Frauds

• Advanced CI/CD Pipeline Optimization Techniques Using GitHub Actions

• Europol warns about counterfeit goods and the criminals behind them

• Brazen crims selling stolen credit cards on Meta’s Threads

• Google Invests in Alternative Neutral Atom Quantum Technology

• Vulnerability Summary for the Week of October 21, 2024

• BeaverTail Malware Resurfaces in Malicious npm Packages Targeting Developers

• Russian Espionage Group Targets Ukrainian Military with Malware via Telegram

• Russian Malware Campaign Targets Ukrainian Recruits Via Telegram

• You’re Invited: Rampant Phishing Abuses Eventbrite

• Strengthening Cyber Preparedness through Collaborative Efforts

• Google: Russia Targeting Ukrainian Military Recruits With Android, Windows Malware

• Armis raises $200 million to fuel growth strategy

• Using AUTHID Parameter in Oracle PL/SQL

• A crime ring compromised Italian state databases reselling stolen info

• EU to Apple: “Let Users Choose Their Software”; Apple: “Nah”

• Bad Bots: 6 Common Bot Attacks and Why They Happen

• CrowdStrike outage explained: What caused it and what’s next

• Police operation claims takedown of prolific Redline and Meta password stealers

• Delta officially launches lawyers at $500M CrowdStrike problem

• How To Find & Delete Specific Emails in Gmail using Cloud Monitor by ManagedMethods

• Energy Sector Faces Heightened Supply Chain Risks Amid Growing Dependence on IT and Software Vendors

• Police hacks, disrupts Redline, Meta infostealer operations

• Filigran Secures $35M Investment to Disrupt Threat Intel

• Entrust helps banks fight fraud during account opening

• Cybercriminals Pose a Greater Threat of Disruptive US Election Hacks Than Russia or China

• Hybrid Russian Espionage and Influence Campaign Aims to Compromise Ukrainian Military Recruits and Deliver Anti-Mobilization Narratives

• 2024 Cloud Security Report Trend Micro

• Protecting university students with robust network solutions

• TeamTNT Exploits 16 Million IPs in Malware Attack on Docker Clusters

• 2025 Cyber Security Predictions – The Rise of AI-Driven Attacks, Quantum Threats, and Social Media Exploitation

• Abstract Security Raises $15 Million in Series A Funding

• THN Cybersecurity Recap: Top Threats, Tools and News (Oct 21 – Oct 27)

• Dutch cops pwn the Redline and Meta infostealers, leak ‘VIP’ aliases

• Third-Party Identities: The Weakest Link in Your Cybersecurity Supply Chain

• ExtremeCloud Universal ZTNA enhancements boost visibility and security

• CISA Launches #PROTECT2024 Election Threat Updates Webpage

• China Hackers Targeted Harris, Trump, Vance Phones

• Norwegian Investor Dumps Palantir Over AI Surveillance

• Microsoft Brings Call Of Duty To Game Pass In Major Bet

• Vulnerabilities in Realtek SD Card Reader Driver Impacts Dell, Lenovo, & Others Laptops

• AP Sources: Chinese Hackers Targeted Phones of Trump, Vance, People Associated With Harris Campaign

• PwC Survey Surfaces Lack of Focus on Cyber Resiliency

• Sailing the Seven Seas Securely from Port to Port – OT Access Security for Ships and Cranes

• Cybercriminals Use Webflow to Deceive Users into Sharing Sensitive Login Credentials

• Four REvil Ransomware Group Members Sentenced to Prison in Russia

• Jumio Liveness detects various sophisticated spoofing attacks

• Trending Cybersecurity News Headlines on Google

• Key Cybersecurity Trends Every CISO Should be well aware off

• Nvidia Surpasses Apple As World’s Most Valuable Company

• Meta Adds Reuters Content To AI Chatbot

• Why Security Configuration Management (SCM) Matters

• 5 Things to Learn About COBIT

• Hiring Kit: Computer Forensic Analyst

• Is Firefox Password Manager Secure?

• Researchers Discover Over 70 Zero-Day Bugs at Pwn2Own Ireland

• A week in security (October 21 – October 27)

• TSMC Arizona Chip Plant Yields 4 Percent Higher Than Taiwan

• Huawei Begins Staffing Massive New Research Campus

• AI-Powered BEC Scams Zero in on Manufacturers

• Black Basta affiliates used Microsoft Teams in recent attacks

• Delta Sues Cybersecurity Firm CrowdStrike Over Tech Outage That Canceled Flights

• Shein Profits Drop 70 Percent

• Silicon In Focus Podcast: A New Age of Cyberculture?

• Internet Archive Hacked, Introducing The AI Toilet Camera

• Filigran raises $35 million to drive global expansion

• Integrating Password Managers with Other Tools

• Self-contained HTML phishing attachment using Telegram to exfiltrate stolen credentials, (Mon, Oct 28th)

• Critical WhatsUp Gold Authentication Flaw Exposes Organizations to Cyber Attack

• Industry Moves for the week of October 28, 2024 – SecurityWeek

• Cyber Guru Raises $25 Million for Training Platform

• Historic Change Healthcare breach, Telcom hacks investigation, Delta sues CrowdStrike

• Filigran secures $35M for its cybersecurity threat management suite

• Apple Offers 1 Million Dollar Bug Bounty For It’s Apple Intelligence Services: Cyber Security Today for Monday, October 28, 2024

• WordPress forces user conf organizers to share social media credentials, arousing suspicions

• A good cyber leader prioritizes the greater good

• Four Evil Ransomware Operators Sentenced For Hacking Enterprises

• How isolation technologies are shaping the future of Kubernetes security

• Researchers Uncover OS Downgrade Vulnerability Targeting Microsoft Windows Kernel

• Fraudsters revive old tactics mixed with modern technology

• Cloud Security Essentials

• Enhancing Email Security: The Pivotal Role of AI in Defending Against Evolving Cyber Threats

• Adversarial groups adapt to exploit systems in new ways

• Top 10 strategic technology trends shaping the future of business

• Antivirus Software

• ISC Stormcast For Monday, October 28th, 2024 https://isc.sans.edu/podcastdetail/9198, (Mon, Oct 28th)

• Inside the Open Directory of the “You Dun” Threat Group

• StreamCraft – 1,772,620 breached accounts

• IT Security News Weekly Summary – Week 43

• IT Security News Daily Summary 2024-10-27

• How Has Video Analytics Enhanced Security and Efficiency?

• The Imperative of Penetration Testing AI Systems

• Orchestrating Success: How Rehearsals in Music Mirror Cybersecurity Resiliency

• DEF CON 32 – AppSec Village – Ticking SQLi

• Two currently (old) exploited Ivanti vulnerabilities, (Sun, Oct 27th)

• UnitedHealth Confirms 100M Affected in Record-Breaking Change Healthcare Hack

• Microsoft: Healthcare Sector Sees 300% Surge in Ransomware Assaults

• Senator accuses sloppy domain registrars of aiding Russian disinfo campaigns

• Think You’re Safe? Cyberattackers Are Exploiting Flaws in Record Time

• Massive Data Breach in Mexican Health Care Sector Exposes 5.3 Million Users’ Data

• Adversarial SysAdmin – The Key to Effective Living off the Land

• Security Affairs newsletter Round 495 by Pierluigi Paganini – INTERNATIONAL EDITION

• SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 17

• Four REvil Ransomware members sentenced for hacking and money laundering

• FIPS 140-3 changes for PKCS #12

• Week in review: Fortinet patches critical FortiManager 0-day, VMware fixes vCenter Server RCE

• PRODUCT REVIEW: Fortra’s Digital Brand Protection Solution

• Beware of Shadow AI Haunting Organizations This Halloween

• Must-have security features in insurance policy management software

• Groundbreaking AI Engine to Transform Data Compliance and Security Management

Generated on 2024-10-28 23:55:03.611159