IT Security News Daily Summary 2024-10-31

• Stalker Online – 1,385,472 breached accounts

• October 2024 Web Server Survey

• UnitedHealth Hires Longtime Cybersecurity Executive as CISO

• AI Pulse: Election Deepfakes, Disasters, Scams & more

• Microsoft delays its troubled AI-powered Recall feature yet again

• 6 Best Cybersecurity Training for Employees in 2025

• Lottie Player NPM package compromised in supply chain attack

• Nastiest Malware 2024

• 4 Essential Strategies for Enhancing Your Application Security Posture

• Midnight Blizzard Escalates Spear-Phishing Attacks On Over 100 Organizations

• Essential Open-Source Security Tools: From Vulnerability Scanning to AI Safety

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #311 – Come to the Office

• Why Ignoring Data Breaches Can Be Costly

• How Cypago’s Cyber GRC Automation Platform Helps Enterprises with Compliance Oversight

• Can’t quit Windows 10? Microsoft will charge for updates next year. Here’s how much

• “Is My Phone Listening To Me?”

• Evasive Panda Unfurls Cloud Services Under Siege

• India Faces Rising Ransomware Threat Amid Digital Growth

• Scammers Use Fake Centrelink Promises to Target Australians Online

• Unofficial Patches Published for New Windows Themes Zero-Day Exploit

• Preparing IT teams for the next AI wave

• Top 6 XDR Solutions & Vendors

• Android malware FakeCall intercepts your calls to the bank

• New Xiu Gou Phishing Kit Targets US, Other Countries with Mascot

• SecurityBridge Unveils Automated Virtual Patching to Protect SAP Systems from Vulnerabilities

• Misconfigured Git Configurations Targeted in Emeraldwhale Attack

• Threat actor says Interbank refused to pay the ransom after a two-week negotiation

• Shedding AI Light on Bank Wire Transfer Fraud

• How SSO and MFA Improves Identity Access Management (IAM)

• Misconfigured Git Configurations Targeted in EMERALDWHALE Attack

• Wordfence Intelligence Weekly WordPress Vulnerability Report (October 21, 2024 to October 27, 2024)

• IBM Data Breach 2024 might be fake

• New Xiū gǒu Phishing Kit Hits UK, US, Japan, Australia Across Key Sectors

• How to remove your personal information from Google Search results

• FTSCon

• Roger Grimes on Prioritizing Cybersecurity Advice

• EFF Launches Digital Rights Bytes to Answer Tech Questions that Bug Us All

• Application Detection and Response (ADR): A Game-changing SOC Analyst Tool | Contrast Security

• Safeguarding Cyber Insurance Policies With Security Awareness Training

• NVIDIA shader out-of-bounds and eleven LevelOne router vulnerabilities

• Fraudsters Exploit US General Election Fever, FBI Warns

• Tracking World Leaders Using Strava

• Distributing Ownership of an Organization’s Cybersecurity Risks

• Sophos Used Custom Implants to Surveil Chinese Hackers Targeting Firewall Zero-Days

• Small Businesses Boosting Cybersecurity as Threats Grow: ITRC

• New LightSpy Spyware Version Targets iPhones with Increased Surveillance Tactics

• How To Create a Complete GitHub Backup

• Why you should update Chrome and Firefox right now

• CISA Releases Four Industrial Control Systems Advisories

• Rockwell Automation FactoryTalk ThinManager

• LottieFiles Issues Warning About Compromised “lottie-player” npm Package

• Cato Networks Joins MITRE AI Incident Sharing Initiative to Improve AI Defences

• How to Implement Patch Management Software

• Understanding DNS MX Records and Their Role in Email Security

• CJIS v5.9.5

• Threat actors use copyright infringement phishing lure to deploy infostealers

• Quishing: A growing threat hiding in plain sight

• 5 Best Cybersecurity Certifications to Get in 2025

• Bridging the Digital Divide: Cisco’s Commitment to the BEAD Program

• Keeper Security Expands Leadership Team in Japan

• Sophos mounted counter-offensive operation to foil Chinese attackers

• Canadian Government Data Stolen By Chinese Hackers

• Halloween Frights of the Digital Age: Cyber Threats Haunting Us in 2024

• What is a Passkey? Definition, How It Works and More

• Defending Democracy From Cyber Attacks in 2024

• North Korean Hackers Team Up with Play Ransomware in Global Attack

• Inside Sophos’ 5-Year War With the Chinese Hackers Hijacking Its Devices

• Beyond Philanthropy: The Cisco Foundation’s Commitment to Thriving Communities

• Banking on AI to Defend the Financial Services Sector

• Yahoo Discloses NetIQ iManager Flaws Allowing Remote Code Execution

• Lottie Player supply chain compromise: Sites, apps showing crypto scam pop-ups

• Google on scaling differential privacy across nearly three billion devices

• North Korean Hackers Collaborate with Play Ransomware

• How Agentic AI Became the Newest Form of Business Investment

• Noma is building tools to spot security issues with AI apps

• dope.security Embeds LLM in CASB to Improve Data Security

• New EU Law Expands Digital Resilience to Third-Party Dependencies: What is the Impact on Businesses

• 2024 looks set to be another record-breaking year for ransomware — and it’s likely going to get worse

• LottieFiles supply chain attack exposes users to malicious crypto wallet drainer

• Government Sector Suffers 236% Surge in Malware Attacks

• Meta Warns Of Accelerating AI Infrastructure Costs

• Spotify, Paramount Sign Up To Use Google Cloud ARM Chips

• So long, SaaS: Klarna is right, DIY is the Future for AI-Enabled Businesses

• Mystic Valley Elder Services Data Breach Impacts 87,000 People

• Cynet enables 426% ROI in Forrester Total Economic Impact Study

• Russian Actor Midnight Blizzard Conducts Massive Spear-Phishing Campaign Using RDP Files

• A Halloween Haunting: Unveiling Cybersecurity’s Scary Stats

• API Security Matters: The Risks of Turning a Blind Eye

• North Korean hackers pave the way for Play ransomware

• Enterprise Identity Threat Report 2024: Unveiling Hidden Threats to Corporate Identities

• Trump Media Briefly Worth More Than X

• AI Helps Boost Microsoft Cloud Revenues By 33 Percent

• CyberPanel Vulnerabilities Exploited in Ransomware Attacks Shortly After Disclosure

• LiteSpeed Cache Plugin Vulnerability Poses Significant Risk to WordPress Websites

• Every Doggo Has Its Day: Unleashing the Xiū Gǒu Phishing Kit

• The best password manager for iPhone in 2024: Expert tested

• The Untold Story of Trump’s Failed Attempt to Overthrow Venezuela’s President

• QNAP fixed second zero-day demonstrated at Pwn2Own Ireland 2024

• Loose-lipped neural networks and lazy scammers

• Lottie Player compromised in supply chain attack — all you need to know

• Over 80% of US Small Businesses Have Been Breached

• Federal agency confirms that a health data breach affects a third of Americans

• Russia Carrying Out Targeted Attacks In UK, Microsoft Warns

• Reddit Shares Surge On First-Ever Profit

• ExpressVPN rolls out three new ID theft tools to help you before, during, and after an incident

• Claro Enterprise Solutions helps organizations identify vulnerabilities within Microsoft 365

• Autumn Budget Hikes Business Taxes, Seeks Growth

• Tower PC case used as ‘creative cavity’ by drug importer

• A Wave of Identity Security Reports Defines a Big Problem

• CISA’s plan, North Korea comes to Play, FakeCall’s new tricks

• The evolution of open source risk: Persistent challenges in software security

• Facebook alerts users about the ongoing Malvertising Campaign

• Chinese attackers accessed Canadian government networks – for five years

• IoT needs more respect for its consumers, creations, and itself

• How agentic AI handles the speed and volume of modern threats

• 99% of CISOs work extra hours every week

• Why cyber tools fail SOC teams

• Simson Garfinkel on Spooky Cryptographic Action at a Distance

• ISC Stormcast For Thursday, October 31st, 2024 https://isc.sans.edu/podcastdetail/9204, (Thu, Oct 31st)

• New version of Android malware FakeCall redirects bank calls to scammers

• TNAFlix – 1,374,344 breached accounts

• October 2024 Activity with Username chenzilong, (Thu, Oct 31st)

• Microsoft Ignite: Sessions and demos to improve your security strategy

• Scans for RDP Gateways, (Wed, Oct 30th)

• IT Security News Daily Summary 2024-10-30

• Windows Themes zero-day bug exposes users to NTLM credential theft

• Fake Meta Ads Hijacking Facebook Accounts to Spread SYS01 Infostealer

• The cybsecurity problems and opportunities facing open-source startups

• Sorry, Gas Companies – Parody Isn’t Infringement (Even If It Creeps You Out)

• Cloud Security Alliance Advocates Zero Trust for Critical Infrastructure

• How to create an incident response playbook with template

• The Frightening Stakes of this Halloween’s Net Neutrality Hearing

• OpenSSL Forms Business Advisory Committees – Shape the Future – Join Now!

• Russia-linked Midnight Blizzard APT targeted 100+ organizations with a spear-phishing campaign using RDP files

• Triumphs, Trials, and Tangles From California’s 2024 Legislative Session

• Zero-Trust Log Intelligence: Safeguarding Data with Secure Access

• Russian Cozy Bear Hackers Phish Critical Sectors with Microsoft, AWS Lures

• Google’s AI system could change the way we write: InkSight turns handwritten notes digital

• Operation Magnus: Joint Law Enforcement Operation Targets Major Infostealer Networks

• Survey Surfaces Fundamental Weaknesses in API Security

• Citrix Boosts Security for Remote Application Accesses With “More Security Layers”

• Top AI security certifications to consider

• Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

• LiteSpeed Cache Plugin Vulnerability Poses Admin Access Risk

• 10,000 WordPress Sites Affected by Arbitrary File Upload Vulnerability in AI Power: Complete AI Pack WordPress Plugin

• Cyber Expert Points SMB Leaders to Patching as Important Tool for Avoiding Attacks

• Disastrous cyberattacks show organisations need to be more proactive in defence, says Oxylabs

• Elections and Financial Crime: Navigating a Shifting Landscape

• Establishing Security Guardrails in the Age of Shadow IT

• Compliance Automated Standard Solution (COMPASS), Part 7: Compliance-to-Policy for IT Operation Policies Using Auditree

• ‘We’re a Fortress Now’: The Militarization of US Elections Is Here

• No Matter What the Bank Says, It’s YOUR Money, YOUR Data, and YOUR Choice

• Why Did Snowflake Have a Target on It? Handling Data Warehouse Security Risks

• ATPC Cyber Forum to Focus on Next Generation Cybersecurity and Artificial Intelligence Issues

• Avoiding Social Media Scams When Recovering a Locked Gmail Account

• When and Why to Consider a Data Removal Service

• Updated FakeCall Malware Targets Mobile Devices with Vishing

• Baby Reindeer—The dangers of real-life stalkers

• Diversity in leadership: Forge your own success

• ‘We’re a Fortress Now’: The Militarization of US Elections Is Here

• Fired Disney staffer accused of hacking menu to add profanity, wingdings, removes allergen info

• North Korean Group Collaborates with Play Ransomware in Significant Cyber Attack

• Samsung Smart TVs gain FIPS 140-3 Certification related to data security

• Fired Disney staffer accused of hacking menu to add profanity, wingdings, while removing allergen info

• BOFHound: AD CS Integration

• Apple Rolls Out Major Security Update to Patch macOS and iOS Vulnerabilities

• New “Scary” FakeCall Malware Captures Photos and OTPs on Android

• Patch now! New Chrome update for two critical vulnerabilities

• Simpson Garfinkel on Spooky Cryptographic Action at a Distance

• Data Loss Prevention Startup MIND Emerges From Stealth With $11M in Funding

• XM Cyber Vulnerability Risk Management boosts prioritization with actual impact analysis

• Immuta Data Marketplace automates data access workflows

• Neon Authorize: Granular access controls at the database layer

• Ransomware hits web hosting servers via vulnerable CyberPanel instances

• 6 Steps for Cyber Resilience During the 2024 U.S. Presidential Election

• Cybersecurity Awareness Month: 5 new AI skills cyber pros need

• Change Healthcare Breach Hits 100M Americans

• The new Webroot PC Optimizer boosts computer performance

• Get Inspired and Go Beyond with Cisco Customer Experience at Cisco Live Melbourne

• Microsoft Warns of Russian Spear-Phishing Attacks Targeting Over 100 Organizations

• Webflow Sites Employed to Trick Users Into Sharing Login Details

• Malvertising Campaign Hijacks Facebook Accounts to Spread SYS01stealer Malware

• Opera Browser Fixes Big Security Hole That Could Have Exposed Your Information

• CISA Launches First International Cybersecurity Plan

• 7,500 Phishing Emails Use Interesting Obfuscation Method to Target Student Loan Holders

• Noma arrives to provide security from data storage to deployment for enterprise AI solutions

• Google fixed a critical vulnerability in Chrome browser

• Cato Networks Named to 2025 Fortune Cyber 60 List

• Russian spies use remote desktop protocol files in unusual mass phishing drive

• FakeCall Android Trojan Evolves with New Evasion Tactics and Expanded Espionage Capabilities

• Proofpoint Boosting Data Security with Normalyze Acquisition

• CHOROLOGY.ai Extends AI Reach to Classify Sensitive Data

• AI Cyberattacks Rise but Businesses Still Lack Insurance

• Product showcase: Shift API security left with StackHawk

• Over Half of US County Websites “Could Be Spoofed”

• No matter what the bank says, it’s YOUR money, YOUR data, and YOUR choice

• Voice of Practitioners 2024

• Securing AI Infrastructure for a More Resilient Future

• RCE Flaw Exposes 22,000 CyberPanel Instances to PSAUX Ransomware

• Embarking on a Compliance Journey? Here’s How Intruder Can Help

• Researchers Uncover Python Package Targeting Crypto Wallets with Malicious Code

• OpenAI Working With Broadcom, TSMC On First AI Chip

• AMD Reports Strong AI Chip Sales, Investors Unimpressed

• Master IT Fundamentals With This CompTIA Certification Prep Bundle

• WhiteRabbitNeo: High-Powered Potential of Uncensored AI Pentesting for Attackers and Defenders

• Midnight Blizzard Spearphishing Campaign Targets Thousands with RDP Files

• How AI Transforms the Employee Experience

• Back to the Future, Securing Generative AI

• Russian hackers deliver malicious RDP configuration files to thousands

• Robert Downey, Jr. Says He Would Sue Over AI Likeness

• Alphabet Sees Jump In Advertising, AI Cloud Revenues

• Trust Through Transparency: Regulation’s Role in Consumer Confidence

• APT29 Spearphishing Campaign Targets Thousands with RDP Files

• Writing a BugSleep C2 server and detecting its traffic with Snort

• Jumpy Pisces Engages in Play Ransomware

• Understanding SOX Requirements for IT and Cybersecurity Auditors

• 5 Steps to Assess the Cyber and Privacy Risk of Generative AI

• Why Does Every Retailer Need Penetration Testing to Ensure Customer Safety?

• Facial recognition is partially back to Facebook and Instagram

• TikTok Seeks ‘Trust’ In Global Markets

• EU Electric Vehicle Duties Come Into Force After China Talks Fail

• Google Patches Critical Chrome Vulnerability Reported by Apple

• Running JtR’s Tokenizer Attack

• Kaseya 365 User helps MSPs to protect user data

• New PySilon RAT Abusing Discord Platform to Maintain Persistence

• QNAP fixed NAS backup zero-day demonstrated at Pwn2Own Ireland 2024

• Beijing claims it’s found ‘underwater lighthouses’ that its foes use for espionage

• Synology, QNAP, TrueNAS Address Vulnerabilities Exploited at Pwn2Own Ireland

• Seclore secures sensitive intellectual property and data in CAD files

• TikTok Parent Co-Founder Tops China Rich List

• Attacker Abuses Victim Resources to Reap Rewards from Titan Network

• Konni APT Hackers Attacking Organizations with New Spear-Phishing Tactics

• Best Antivirus Software for Small Businesses in 2024

• VimeWorld – 3,118,964 breached accounts

• Five Eyes program, Chinese activity, Russian Linux

• US Elections 2024 are super prone to cyber attacks

• What to Do If Hit by Ransomware

• The Hidden Threat of Web Scraping and How to Fight Back

• 3 Key DSPM Takeaways from the Latest Gartner Report

• CRA Paid Millions in Bogus Refunds as Tens of Thousands of Tax Accounts Hacked: Cyber Security Today for Wednesday, October 30, 2024

• Stopping bad things from happening to good businesses

• Google Chrome Security, Critical Vulnerabilities Patched

• US Joins International Crackdown on RedLine and META Infostealers

• Simplifying decentralized identity systems for everyday use

• Risk hunting: A proactive approach to cyber threats

• 6 key elements for building a healthcare cybersecurity response plan

• How Security Automation Platforms Streamline SOC Operations

• ISC Stormcast For Wednesday, October 30th, 2024 https://isc.sans.edu/podcastdetail/9202, (Wed, Oct 30th)

• Italian Politicians Express Alarm at Latest Data Breach Allegedly Affecting 800,000 Citizens

• Uncle Sam outs a Russian accused of developing Redline infostealing malware

Generated on 2024-10-31 23:55:06.023831