IT Security News Daily Summary 2024-11-05

• ToxicPanda Android banking trojan targets Europe and LATAM, with a focus on Italy

• Dennis Kirk – 1,356,026 breached accounts

• Canadian Man Accused of Snowflake Data Breach Arrested

• How to Become a Chief Information Officer: CIO Cheat Sheet

• AI in Criminal Justice Is the Trend Attorneys Need to Know About

• Schneider Electric ransomware crew demands $125k paid in baguettes

• Russia Is Going All Out on Election Day Interference

• DEF CON 32 – Open Sesame: How Vulnerable Is Your Stuff In Electronic Lockers

• Check Point Software Strengthens Cyber Security Training for Enterprises with OffSec’s Advanced Learning Platform

• The TechCrunch Cyber Glossary

• A Kansas pig butchering: CEO who defrauded bank, church, friends gets 24 years

• Mozilla Foundation lays off 30% staff, drops advocacy division

• CISA Unveils Guidelines to Combat AI-Driven Cyber Threats

• Amazon Inspector suppression rules best practices for AWS Organizations

• Your Android device is vulnerable to attack and Google’s fix is imminent

• Man Arrested for Snowflake Hacking Spree Faces US Extradition

• What the Chainsmokers bring to the cap table for cybersecurity startup Chainguard

• Criminals open DocuSign’s Envelope API to make BEC special delivery

• Google Cloud to roll out mandatory MFA for all users

• Canada Arrests Suspected Hacker Linked to Snowflake Data Breaches

• Canadian Man Arrested in Snowflake Data Extortions

• Flaw in Right-Wing ‘Election Integrity’ App Exposes Voter-Suppression Plan and User Data

• EFF Lawsuit Discloses Documents Detailing Government’s Social Media Surveillance of Immigrants

• Fortinet Adds Data Loss Prevention Capability Following Acquistion of Next DLP

• Rising Bank Fraud: Steps You Can Take to Safeguard Your Money

• FBI Seeks Public Help to Identify Chinese Hackers Behind Global Cyber Intrusions

• ClickFix Exploits Users with Fake Errors and Malicious Code

• Announcing The Wordfence Audit Log: Off-Site Real-Time Security Event Logging for WordPress

• Meet the startup that just won the Pentagon’s first AI defense contract

• Flaw in Right-Wing ‘Election Integrity’ App Exposes Voter-Suppression Plan and User Data

• Google Cloud to make multi-factor authentication mandatory in 2025

• Why PKIaaS is a Smarter and Secure Alternative to On-Premises PKI

• Google Uses Its Big Sleep AI Agent to Find SQLite Security Flaw

• Tech Expert Warns AI Could Surpass Humans in Cyber Attacks by 2030

• VMware Explore Barcelona 2024: Tanzu Platform 10 Enters General Availability

• Check Point Software Partners with OffSec to Elevate Cybersecurity Training for IGS Customers

• Overcoming Cybersecurity Integration Roadblocks

• Ongoing typosquatting campaign impersonates hundreds of popular npm packages

• Sanitize Client-Side: Why Server-Side HTML Sanitization is Doomed to Fail

• ToxicPanda Malware Targets Banking Apps on Android Devices

• Implement effective data authorization mechanisms to secure your data used in generative AI applications

• Nokia starts investigating source code data breach claims

• NordVPN vs ExpressVPN: Which VPN Should You Choose?

• The 7 Best Encryption Software Choices for 2024

• VMWare Explore Barcelona 2024: VMWAre Tanzu Platform 10 Enters General Availability

• Canadian authorities say they arrested hacker linked to Snowflake data breaches

• Canadian Authorities Arrest Suspected Snowflake Hacker

• Skills shortage directly tied to financial loss in data breaches

• Washington courts grapple with statewide outage after ‘unauthorized activity’

• Suspected Snowflake Hacker Arrested in Canada

• Advanced Persistent Teenagers: A Rising Security Threat

• Balancing Act: Russia’s New Data Decree and the Privacy Dilemma

• Warning: Hackers could take over your email account by stealing cookies, even if you have MFA

• Enhance customer experiences with Generative AI

• Top Three Ways Organizations Were Unprepared for Cyberattacks in 2023

• DocuSign Abused to Deliver Fake Invoices

• Beware of phishing emails delivering backdoored Linux VMs!

• Lumifi acquires Critical Insight to boost incident response capabilities

• US Voters Urged to Use Official Sources for Election Information

• Hackers Deploy CRON#TRAP for Persistent Linux System Backdoors

• Check Point Further Enhances Cyber Security Training for IGS Customers with OffSec’s Learn Enterprise

• U.S. CISA adds PTZOptics camera bugs to its Known Exploited Vulnerabilities catalog

• Cybersecurity M&A Roundup: 37 Deals Announced in October 2024

• Securing Generative AI: Tackling Unique Risks and Challenges

• Spotlight on Dashlane

• Spotlight on Onyxia

• New Android Banking Malware ‘ToxicPanda’ Targets Users with Fraudulent Money Transfers

• Team Europe wins the International Cybersecurity Challenge 2024!

• Canadian authorities arrested alleged Snowflake hacker

• AIs Discovering Vulnerabilities

• Google Patches Two Android Vulnerabilities Exploited in Targeted Attacks

• Strengthen Cyber Resilience: A Checklist for ITOps and SecOps Collaboration

• ClickFix Exploits GMeet & Zoom Pages to Deliver Sophisticated Malware

• Researcher Discloses 36 Vulnerabilities Found in IBM Security Verify Access

• Recovering From a Breach: 4 Steps Every Organization Should Take

• Nvidia, Meta Ask Supreme Court To Axe Investor Lawsuits

• James Dyson Says ‘Spiteful’ Budget Will Kill Start-Ups

• EU To Assess Apple’s iPad Compliance Plans

• OpenAI In Talks With California Over For-Profit Shift

• Real Estate Fraud is Running Rampant in the US

• Tripwire Patch Priority Index for October 2024

• Google patches actively exploited Android vulnerability (CVE-2024-43093)

• Pakistani Hackers Targeted High-Profile Indian Entities using Custom RAT

• APT36 Hackers Attacking Windows Deevices With ElizaRAT

• How Microsoft Defender for Office 365 innovated to address QR code phishing attacks

• Report: Voice of Practitioners 2024 – The True State of Secrets Security

• Leveraging Wazuh for Zero Trust security

• Hackers Created 100+ Fake Web Stores To Steal Millions Of Dollars From Customers

• Hackers Using AV/EDR Bypass Tool From Cybercrime Forums To Bypass Endpoints

• Schneider Electric Launches Probe After Hackers Claim Theft of User Data

• Oasis Fans Losing Up to £1000 Each to Ticket Scammers

• Leveraging Tabletop exercises to Enhance OT security maturity

• Three ‘Must Solve” Challenges Hindering Cloud-Native Detection and Response

• Synology Urges Patch for Critical Zero-Click RCE Flaw Affecting Millions of NAS Devices

• Toyota-Backed Joby Flies ‘Air Taxi’ In Japan

• Nvidia To Replace Intel On Dow Jones Industrial Average

• Android flaw CVE-2024-43093 may be under limited, targeted exploitation

• 10 Best Darktrace Alternatives & Competitors in 2024 [Features, Pricing & Reviews]

• BigID DSPM Starter App enhances data security posture for Snowflake customers

• Chinese Air Fryers May Be Spying on Consumers, Which? Warns

• Python RAT with a Nice Screensharing Feature, (Tue, Nov 5th)

• Nvidia Asked SK Hynix To Advance Next-Gen AI Memory Production

• How Cybersecurity Training Must Adapt to a New Era of Threats

• ClickFix tactic: Revenge of detection

• Is the UK government about to ban smartphones in schools?

• Google Patched 40 Security Vulnerabilities Along With Two Zero-Days

• Altenen – 1,267,701 breached accounts

• The Role of Secrets Management in Securing Financial Services

• Hackers Exploit DocuSign APIs for Phishing Campaign

• Schneider Electric breached again, Russia behind fake video, Ohio’s ransomware lawsuits

• 500,000 Affected in Columbus Data Breach, Followed by Lawsuit Against Security Researcher

• Google claims Big Sleep ‘first’ AI to spot freshly committed security bug that fuzzing missed

• Canadian Suspect Arrested Over Snowflake Data Breach and Extortion Attacks

• Malware Campaign Uses Ethereum Smart Contracts to Control npm Typosquat Packages

• Threat Actor IntelBroker Claims Leak of Nokia’s Source Code

• Three UK Council websites hit by DdoS Cyber Attacks

• How to Make SaaS Backups More Secure than Production Data

• AI & API Security

• What is a Cyber Range?

• Bitdefender’s Perspective on Weaponized AI and Its Impact on Cybersecurity

• Open-source software: A first attempt at organization after CRA

• Maximizing security visibility on a budget

• AI learning mechanisms may lead to increase in codebase leaks

• Cybersecurity jobs available right now: November 5, 2024

• Google Warns of Actively Exploited CVE-2024-43093 Vulnerability in Android System

• SOC Around the Clock: World Tour Survey Findings

• ISC Stormcast For Tuesday, November 5th, 2024 https://isc.sans.edu/podcastdetail/9208, (Tue, Nov 5th)

• Joint ODNI, FBI, and CISA Statement

• Joint Statement from CISA and EAC in Support of State and Local Election Officials

• CISA: U.S. election disinformation peddled at massive scale

• July 2024 ransomware attack on the City of Columbus impacted 500,000 people

• Automatically Detecting DNS Hijacking in Passive DNS

• Judge’s Investigation Into Patent Troll Results In Criminal Referrals

• IT Security News Daily Summary 2024-11-04

• FIDO: Consumers are Adopting Passkeys for Authentication

• DEF CON 32 – OH MY DC Abusing OIDC All The Way To Your Cloud

• MDR vs. MSSP: Making the Right Choice for Your Business

• Vulnerability Recap 11/4/24 – Fourteen-Year Bug Finally Gets Patched

• UC San Diego, Tsinghua University researchers just made AI way better at knowing when to ask for help

• Software Makers Encouraged to Stop Using C/C++ by 2026

• Randall Munroe’s XKCD ‘Disposal’

• Hackers Leak 300,000 MIT Technology Review Magazine User Records

• Exploring Artificial Intelligence: Is AI Overhyped?

• How AI Is Changing the Cloud Security and Risk Equation

• Gartner Report: How to Respond to the Threat Landscape in a Volatile, Complex and Ambiguous World

• Celebrating Connections and Launching the New Cisco 360 Partner Program

• DEF CON 32 – The Edges Of Surveillance System And Its Supply Chain

• PCI DSS v4.0.1 Changes | Application Security PCI Compliance Requirements | Contrast Security

• Vulnerability Summary for the Week of October 28, 2024

• Columbus Ransomware Attack Exposes Data of 500,000 Residents

• City of Columbus breach affects around half a million citizens

• Why your vote can’t be “hacked,” with Cait Conley of CISA (Lock and Code S05E23)

• Columbus, Ohio, confirms 500K people affected by Rhysida ransomware attack

• Crooks bank on Microsoft’s search engine to phish customers

• Cambodia-Based Cybercriminals Exploit Digital Arrest Scam on Indian Victims

• Meta Struggles to Curb Misleading Ads on Hacked Facebook Pages

• Behind the Search Bar: How Google Algorithm Shapes Our Perspectives

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• KnowBe4 Named as One of Newsweek’s Top UK Most Loved Workplaces For 2024

• Cybercriminals Exploit DocuSign APIs to Send Fake Invoices

• ChatGPT new search engine features cause data sanctity concerns

• Hackers Claim Access to Nokia Internal Data, Selling for $20,000

• 10 API security testing tools to mitigate risk

• Partnering for Purpose Winners: 7th Global Partner Innovation Challenge

• Nigerian Handed 26-Year Sentence for Real Estate Phishing Scam

• Nigerian man Sentenced to 26+ years in real estate phishing scams

• Wild, Weird, and Secure: SecureWV 2024’s Cryptid-Themed Conference

• Misinformation is Ruining our Elections. Here’s How we can Rescue Them.

• Google Researchers Claim First Vulnerability Found Using AI

• ENISA Cybersecurity Resilience and Market Conference: Joining forces for a cyber-secure and resilient digital single market

• Columbus says ransomware gang stole personal data of 500,000 Ohio residents

• Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning

• 210,000 Impacted by Saint Xavier University Data Breach

• Millions of Synology NAS devices vulnerable to zero-click attacks (CVE-2024-10443)

• Unauthorized tactic spotlight: Initial access through a third-party identity provider

• Scammers Use DocuSign API to Evade Spam Filters with Phishing Invoices

• Microsoft Warns of Russian Spear-Phishing Campaign Targeting Multiple Organizations

• US Says Russia Behind Fake Haitian Voters Video

• Is the Digital Transformation of Businesses Complete?

• How the 2024 US presidential election will determine tech’s future

• Overview of Cybersecurity Regulations in the Middle East Region, Part 1

• US Sentences Nigerian to 26 Years in Prison for Stealing Millions Through Phishing

• Monitoring Distributed Microservices

• New Windows Zero-Day Vulnerability Let Attackers Steal Credentials From Victim’s Machine

• Chinese Hackers Attacking Microsoft Customers With Sophisticated Password Spray Attacks

• Sophisticated Phishing Attack Targeting Ukraine Military Sectors

• Massive Midnight Blizzard Phishing Attack Using Weaponized RDP Files

• Evasive Panda Attacking Cloud Services To Steal Data Using New Toolkit

• The Evolution of Transparent Tribe’s New Malware

• SYS01 InfoStealer Malware Attacking Meta Business Page To Steal Logins

• THN Recap: Top Cybersecurity Threats, Tools, and Practices (Oct 28 – Nov 03)

• German Police Disrupt DDoS-for-Hire Platform dstat[.]cc; Suspects Arrested

• Sophos Versus the Chinese Hackers

• FBI Seeking Information on Chinese Hackers Targeting Sophos Firewalls

• Singapore’s Government Directed ISPs To Block Access To Ten Inauthentic Websites

• Embargo Ransomware Actors Abuses Safe Mode To Disable Security Solutions

• Russian Hackers Attacking Ukraine Military With Malware Via Telegram

• A Massive Hacking Toolkit From “You Dun” Threat Group Developed To Lauch Massive Cyber Attack

• Russia, Iran, And China Influence U.S. Elections, Microsoft Warns

• Top Traceable API Security Alternative: Escape vs. Traceable

• What is Enterprise Compliance and Why is It Important?

• Cybersecurity and AI Challenges: How Companies Must Evolve to Stay Secure and Competitive

• Supply Chain Attack Uses Smart Contracts for C2 Ops

• Huawei Sees Sales Surge, But Profits Fall

• Google Maps Steers Into Local Information With AI Chat

• OpenAI Adds ChatGPT Search Features

• Craig Wright Faces Contempt Claim Over Bitcoin Lawsuit

• Inside the Massive Crime Industry That’s Hacking Billion-Dollar Companies

• Russian disinformation campaign active ahead of 2024 US election

• Why the long name? Okta discloses auth bypass bug affecting 52-character usernames

• Google’s AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine

• Cyber Threats That Could Impact the Retail Industry This Holiday Season (and What to Do About It)

• City of Columbus Ransomware Attack Impacts 500,000 People

• Okta Verify Agent for Windows Flaw Let Attackers Steal User Passwords

• Strategies for Implementing Effective Threat Detection in IIoT

• What Is the ISA/IEC 62443 Framework?

• Public sector cyber break-ins: Our money, our lives, our right to know

• Binance Co-Founder CZ Does Not Want To Return To Company

• Apple Posts China Sales Decline, Ramping Pressure On AI Strategy

• Siemens and Rockwell Tackle Industrial Cybersecurity, but Face Customer Hesitation

• UK Council Sites Recover Following Russian DDoS Blitz

• MediaTek High Severity Vulnerabilities Let Attackers Escalate Privileges

• A week in security (October 28 – November 3)

• Industry Moves for the week of November 4, 2024 – SecurityWeek

• Businesses Worldwide Targeted in Large-Scale ChatGPT Phishing Campaign

• China’s BYD Overtakes Tesla On Quarterly Sales

• Entra MFA mandatory, German pharma cyberattack, LightSpy iPhone enhancements

• DSPM vs. Traditional Data Protection: What’s the Difference?

• Heimdal® Supports MSP Compliance Efforts with Fourth Consecutive ISAE 3000 SOC 2 Type II Certification

• IRISSCON 2024 to address AI’s dual impact on cybersecurity

• China is an increasing threat in Cyber Security: Cyber Security Today for Monday, November 4, 2024

• International law enforcement operation shut down DDoS-for-hire platform Dstat.cc

• Proactive Ways To Bridge The Cybersecurity Talent Gap

• New FakeCall Malware Variant Hijacks Android Devices for Fraudulent Banking Calls

• Analyzing an Encrypted Phishing PDF, (Mon, Nov 4th)

• Threat Actors Allegedly Claiming Leak of Dell Partner Portal Data

• Advanced Variant of FakeCall Malware Targets Mobile Users with Sophisticated Vishing Attacks

• Gmail Security Challenges Amid Rising Phishing Scams

• How Safe Are AI-Powered Laptops When It Comes to Onboard Data Security?

• Securing Your SaaS Application Security

• Microsoft Warns of Major Credential Theft by Chinese Hackers Via Covert Network Attacks

• Hiring guide: Key skills for cybersecurity researchers

• Cybersecurity in crisis: Are we ready for what’s coming?

• Whispr: Open-source multi-vault secret injection tool

• Z-lib – 9,737,374 breached accounts

• Quadrant Launches Free Dark Web Reports to Help Organizations Identify Leaked Credentials and Sensitive Information

• Strong privacy laws boost confidence in sharing information with AI

• ISC Stormcast For Monday, November 4th, 2024 https://isc.sans.edu/podcastdetail/9206, (Mon, Nov 4th)

• NAKIVO Backup for MSP: Best Backup Solution for MSPs

Generated on 2024-11-05 23:55:05.609542