IT Security News Daily Summary 2024-11-06

• AI-Assisted Attacks Top Cyber Threat For Third Consecutive Quarter, Gartner Finds

• INTERPOL: Operation Synergia II disrupted +22,000 malicious IPs

• Increasing Awareness of DNS Hijacking: A Growing Cyber Threat

• Video: 2.9 Billion Records Compromised in NPD Breach – Recap

• Cybercrooks are targeting Bengal cat lovers in Australia for some reason

• Video: How Hackers Steal Your Cookies & How to Stop Them

• Video: Top Cybersecurity Threats That You Need to Fix

• Memorial Hospital and Manor suffered a ransomware attack

• CISA on 2024 election security: ‘Good news’ for democracy

• The 2024 U.S. Election is Over. EFF is Ready for What’s Next.

• Google Cloud: MFA Will Be Mandatory for All Users in 2025

• What is machine identity management?

• Scammers Target BASE and Ethereum with Political Meme Coins and Rug Pulls

• Amazon Boss Denies Return To Office Mandate Is ‘Backdoor Layoff’

• Columbus Ransomware Attack Exposes 500,000+ Residents’ Data: How to Stay Safe

• Winos 4.0 Malware Infects Gamers Through Malicious Game Optimization Apps

• VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware

• IntelBroker Claims Selling Nokia’s Source Code on BreachForums

• Apple Set To Be Fined Under EU’s Tough DMA – Report

• Researchers Develop Blockchain-Based Federated Learning Model to Boost IoT Security

• Donald Trump Election Victory, And Implications For Tech Sector

• Schneider Electric Confirms Ransom Hack — Hellcat Demands French Bread as ‘Joke’

• INTERPOL Arrests 41, Takes Down 22,000 Malicious IPs and 59 Servers

• The best VPN routers of 2024

• Interpol Operation Shuts Down 22,000 Malicious Servers

• Crypto Bull Market Targeted: The Lottie-Player Security Breach

• Rails Without Derails: Thwarting Code Injection Attacks

• Uncovering a Large-Scale Campaign Using the Latest Version of The Rhadamanthys Stealer: Rhadamanthys.07

• Facebook, Nvidia Push SCOTUS to Limit Investor Lawsuits

• New Flaws in Fortinet, SonicWall, and Grafana Pose Significant Threats

• How to Protect Yourself Against Phishing Extortion Scams Involving Personal Data

• Cyber-Attack on Microlise Disrupts DHL and Serco Tracking Services

• Statement from CISA Director Easterly on the Security of the 2024 Elections

• Serco Hit by Cyber Attack, Disrupting Prisoner Tracking and Transport Operations

• New Winos4.0 Malware Targeting Windows via Fake Gaming Apps

• Interlock Ransomware Specifically Targets FreeBSD Servers

• Google Cloud Rolling Out Mandatory MFA for All Users

• IRISSCON: Organizations Still Falling Victim to Predictable Cyber-Attacks

• (In)tuned to Takeovers: Abusing Intune Permissions for Lateral Movement and Privilege Escalation in Entra ID Native Environments

• Serco Tracking Devices On Prison Vans Disabled After Cyberattack

• Operation Synergia II sees Interpol swoop on global cyber crims

• What Telegram’s recent policy shift means for cyber crime

• Prioritising eHealth cybersecurity against emerging challenges

• Atakama introduces DNS filtering designed for MSPs

• All Google Cloud users will have to enable MFA by 2025

• New Winos 4.0 Malware Infects Gamers Through Malicious Game Optimization Apps

• Shaking Up Security — The Power of AI-Native SOCs

• Threat Campaign Spreads Winos4.0 Through Game Application

• 8 security tips for small businesses

• In The News | The Importance of Securing School Bus Wi-Fi Networks

• Spectra Assure Malware Detection in ML and LLM Models

• Winos4.0 Malware Found in Game Apps, Targets Windows Users

• CrowdStrike to Acquire Adaptive Shield in Reported $300 Million Deal

• Massive Nigerian Cybercrime Bust Sees 130 Arrested

• UK Orders Chinese Entity To Sell Stake In Scottish Chip Firm FTDI

• Update your Android: Google patches two zero-day vulnerabilities

• Go Beyond with Cisco Customer Experience at Cisco Live

• Cyber Threat Intelligence (CTI) for Supply Chain Monitoring

• HookBot Malware Use Overlay Attacks Impersonate As Popular Brands To Steal Data

• CRON#TRAP Campaign Attacks Windows Machine With Weaponized Linux Virtual Machine

• North Korean Hackers Employing New Tactic To Acruire Remote Jobs

• Rise Of Ransomware-As-A-Service Leads To Decline Of Custom Tools

• Researchers Detailed Credential Abuse Cycle

• South Korea fined Meta $15.67M for illegally collecting and sharing Facebook users

• IoT Devices in Password-Spraying Botnet

• Cyberattackers stole Microlise staff data following DHL, Serco disruption

• Microchip Technology Reports $21.4 Million Cost From Ransomware Attack

• What Is a VPN? Definition, How It Works, and More

• Cyberattack Blamed for Statewide Washington Courts Outage

• 9 Steps to Get CTEM on Your 2025 Budgetary Radar

• Watchdog Says Vodafone, Three Merger Could Proceed With Certain Remedies

• Ransomware Attack Disrupts Georgia Hospital’s Access to Health Records

• GoZone ransomware accuses and threatens victims

• Schneider Electric ransomware attack to cost $125k and more in Baguettes

• The Most Notorious Cyber Threat Groups: A Global Overview

• Heimdal and COOLSPIRiT Team Up to Strengthen UK Business Cybersecurity

• Google Cloud to Mandate Multifactor Authentication by 2025

• CIS Control 14: Security Awareness and Skill Training

• How to Integrate FIM with SOAR Platforms

• Synology fixed critical flaw impacting millions of DiskStation and BeePhotos NAS devices

• INTERPOL Disrupts Over 22,000 Malicious Servers in Global Crackdown on Cybercrime

• Snowflake Hacking Suspect Arrested in Canada

• Azure API Management Vulnerabilities Let Attackers Escalate Privileges

• New SteelFox Trojan mimics software activators, stealing sensitive data and mining cryptocurrency

• PLCHound Aims to Improve Detection of Internet-Exposed ICS

• Authlete 3.0 empowers organizations to improve how they issue and manage user credentials

• Global Operation Takes Down 22,000 Malicious IPs

• South Korea Fines Meta $15 Million for Illegally Collecting Information on Facebook Users

• Symbiotic provides developers with real-time feedback on potential security vulnerabilities

• Google Patches High-Severity Vulnerabilities in Chrome

• Holiday Shopping Readiness: How is Retail Data Security Holding Up?

• ElizaRAT hits India, Washington court outage, Snowflake hacker arrested

• South Korea Fines Meta $15.67M for Illegally Sharing Sensitive User Data with Advertisers

• AI Finds Zero Day Vulnerability For First Time: Cyber Security Today for Wednesday, November 6, 2024

• CISA’s Cyber Hygiene Services

• Google’s Big Sleep AI Tool Finds Zero-Day Vulnerability

• LightSpy Update Expands Surveillance on iOS Devices

• Google Cloud to Enforce Multi-Factor Authentication by 2025 for All Users

• Attackers Exploit DocuSign API to Send Fraudulent Invoices, Bypassing Security Filters

• Scammers Impersonate Thunder Bay RCMP in New Phone Spoofing Scheme

• The cybersecurity gender gap: How diverse teams improve threat response

• Osmedeus: Open-source workflow engine for offensive security

• [Guest Diary] Insights from August Web Traffic Surge, (Wed, Nov 6th)

• Key cybersecurity predictions for 2025

• Identity-related data breaches cost more than average incidents

• China’s Volt Typhoon reportedly breached Singtel in ‘test-run’ for US telecom attacks

• ISC Stormcast For Wednesday, November 6th, 2024 https://isc.sans.edu/podcastdetail/9210, (Wed, Nov 6th)

• Scumbag puts ‘stolen’ Nokia source code, SSH and RSA keys, more up for sale

• Schneider Electric Investigates Cybersecurity Incident

• IT Security News Daily Summary 2024-11-05

• ToxicPanda Android banking trojan targets Europe and LATAM, with a focus on Italy

• Dennis Kirk – 1,356,026 breached accounts

• Canadian Man Accused of Snowflake Data Breach Arrested

• How to Become a Chief Information Officer: CIO Cheat Sheet

• AI in Criminal Justice Is the Trend Attorneys Need to Know About

• Schneider Electric ransomware crew demands $125k paid in baguettes

• Russia Is Going All Out on Election Day Interference

• DEF CON 32 – Open Sesame: How Vulnerable Is Your Stuff In Electronic Lockers

• Check Point Software Strengthens Cyber Security Training for Enterprises with OffSec’s Advanced Learning Platform

• The TechCrunch Cyber Glossary

• A Kansas pig butchering: CEO who defrauded bank, church, friends gets 24 years

• Mozilla Foundation lays off 30% staff, drops advocacy division

• CISA Unveils Guidelines to Combat AI-Driven Cyber Threats

• Amazon Inspector suppression rules best practices for AWS Organizations

• Your Android device is vulnerable to attack and Google’s fix is imminent

• Man Arrested for Snowflake Hacking Spree Faces US Extradition

• What the Chainsmokers bring to the cap table for cybersecurity startup Chainguard

• Criminals open DocuSign’s Envelope API to make BEC special delivery

• Google Cloud to roll out mandatory MFA for all users

• Canada Arrests Suspected Hacker Linked to Snowflake Data Breaches

• Canadian Man Arrested in Snowflake Data Extortions

• Flaw in Right-Wing ‘Election Integrity’ App Exposes Voter-Suppression Plan and User Data

• EFF Lawsuit Discloses Documents Detailing Government’s Social Media Surveillance of Immigrants

• Fortinet Adds Data Loss Prevention Capability Following Acquistion of Next DLP

• Rising Bank Fraud: Steps You Can Take to Safeguard Your Money

• FBI Seeks Public Help to Identify Chinese Hackers Behind Global Cyber Intrusions

• ClickFix Exploits Users with Fake Errors and Malicious Code

• Announcing The Wordfence Audit Log: Off-Site Real-Time Security Event Logging for WordPress

• Meet the startup that just won the Pentagon’s first AI defense contract

• Flaw in Right-Wing ‘Election Integrity’ App Exposes Voter-Suppression Plan and User Data

• Google Cloud to make multi-factor authentication mandatory in 2025

• Why PKIaaS is a Smarter and Secure Alternative to On-Premises PKI

• Google Uses Its Big Sleep AI Agent to Find SQLite Security Flaw

• Tech Expert Warns AI Could Surpass Humans in Cyber Attacks by 2030

• VMware Explore Barcelona 2024: Tanzu Platform 10 Enters General Availability

• Check Point Software Partners with OffSec to Elevate Cybersecurity Training for IGS Customers

• Overcoming Cybersecurity Integration Roadblocks

• Ongoing typosquatting campaign impersonates hundreds of popular npm packages

• Sanitize Client-Side: Why Server-Side HTML Sanitization is Doomed to Fail

• ToxicPanda Malware Targets Banking Apps on Android Devices

• Implement effective data authorization mechanisms to secure your data used in generative AI applications

• Nokia starts investigating source code data breach claims

• NordVPN vs ExpressVPN: Which VPN Should You Choose?

• The 7 Best Encryption Software Choices for 2024

• VMWare Explore Barcelona 2024: VMWAre Tanzu Platform 10 Enters General Availability

• Canadian authorities say they arrested hacker linked to Snowflake data breaches

• Canadian Authorities Arrest Suspected Snowflake Hacker

• Skills shortage directly tied to financial loss in data breaches

• Washington courts grapple with statewide outage after ‘unauthorized activity’

• Suspected Snowflake Hacker Arrested in Canada

• Advanced Persistent Teenagers: A Rising Security Threat

• Balancing Act: Russia’s New Data Decree and the Privacy Dilemma

• Warning: Hackers could take over your email account by stealing cookies, even if you have MFA

• Enhance customer experiences with Generative AI

• Top Three Ways Organizations Were Unprepared for Cyberattacks in 2023

• DocuSign Abused to Deliver Fake Invoices

• Beware of phishing emails delivering backdoored Linux VMs!

• Lumifi acquires Critical Insight to boost incident response capabilities

• US Voters Urged to Use Official Sources for Election Information

• Hackers Deploy CRON#TRAP for Persistent Linux System Backdoors

• Check Point Further Enhances Cyber Security Training for IGS Customers with OffSec’s Learn Enterprise

• U.S. CISA adds PTZOptics camera bugs to its Known Exploited Vulnerabilities catalog

• Cybersecurity M&A Roundup: 37 Deals Announced in October 2024

• Securing Generative AI: Tackling Unique Risks and Challenges

• Spotlight on Dashlane

• Spotlight on Onyxia

• New Android Banking Malware ‘ToxicPanda’ Targets Users with Fraudulent Money Transfers

• Team Europe wins the International Cybersecurity Challenge 2024!

• Canadian authorities arrested alleged Snowflake hacker

• AIs Discovering Vulnerabilities

• Google Patches Two Android Vulnerabilities Exploited in Targeted Attacks

• Strengthen Cyber Resilience: A Checklist for ITOps and SecOps Collaboration

• ClickFix Exploits GMeet & Zoom Pages to Deliver Sophisticated Malware

• Researcher Discloses 36 Vulnerabilities Found in IBM Security Verify Access

• Recovering From a Breach: 4 Steps Every Organization Should Take

• Nvidia, Meta Ask Supreme Court To Axe Investor Lawsuits

• James Dyson Says ‘Spiteful’ Budget Will Kill Start-Ups

• EU To Assess Apple’s iPad Compliance Plans

• OpenAI In Talks With California Over For-Profit Shift

• Real Estate Fraud is Running Rampant in the US

• Tripwire Patch Priority Index for October 2024

• Google patches actively exploited Android vulnerability (CVE-2024-43093)

• Pakistani Hackers Targeted High-Profile Indian Entities using Custom RAT

• APT36 Hackers Attacking Windows Deevices With ElizaRAT

• How Microsoft Defender for Office 365 innovated to address QR code phishing attacks

• Report: Voice of Practitioners 2024 – The True State of Secrets Security

• Leveraging Wazuh for Zero Trust security

• Hackers Created 100+ Fake Web Stores To Steal Millions Of Dollars From Customers

• Hackers Using AV/EDR Bypass Tool From Cybercrime Forums To Bypass Endpoints

• Schneider Electric Launches Probe After Hackers Claim Theft of User Data

• Oasis Fans Losing Up to £1000 Each to Ticket Scammers

• Leveraging Tabletop exercises to Enhance OT security maturity

• Three ‘Must Solve” Challenges Hindering Cloud-Native Detection and Response

• Synology Urges Patch for Critical Zero-Click RCE Flaw Affecting Millions of NAS Devices

• Toyota-Backed Joby Flies ‘Air Taxi’ In Japan

• Nvidia To Replace Intel On Dow Jones Industrial Average

• Android flaw CVE-2024-43093 may be under limited, targeted exploitation

• 10 Best Darktrace Alternatives & Competitors in 2024 [Features, Pricing & Reviews]

• BigID DSPM Starter App enhances data security posture for Snowflake customers

• Chinese Air Fryers May Be Spying on Consumers, Which? Warns

• Python RAT with a Nice Screensharing Feature, (Tue, Nov 5th)

• Nvidia Asked SK Hynix To Advance Next-Gen AI Memory Production

• How Cybersecurity Training Must Adapt to a New Era of Threats

• ClickFix tactic: Revenge of detection

• Is the UK government about to ban smartphones in schools?

• Google Patched 40 Security Vulnerabilities Along With Two Zero-Days

• Altenen – 1,267,701 breached accounts

• The Role of Secrets Management in Securing Financial Services

• Hackers Exploit DocuSign APIs for Phishing Campaign

• Schneider Electric breached again, Russia behind fake video, Ohio’s ransomware lawsuits

• 500,000 Affected in Columbus Data Breach, Followed by Lawsuit Against Security Researcher

• Google claims Big Sleep ‘first’ AI to spot freshly committed security bug that fuzzing missed

• Canadian Suspect Arrested Over Snowflake Data Breach and Extortion Attacks

• Malware Campaign Uses Ethereum Smart Contracts to Control npm Typosquat Packages

• Threat Actor IntelBroker Claims Leak of Nokia’s Source Code

• Three UK Council websites hit by DdoS Cyber Attacks

• How to Make SaaS Backups More Secure than Production Data

• AI & API Security

• What is a Cyber Range?

• Bitdefender’s Perspective on Weaponized AI and Its Impact on Cybersecurity

• Open-source software: A first attempt at organization after CRA

• Maximizing security visibility on a budget

• AI learning mechanisms may lead to increase in codebase leaks

• Cybersecurity jobs available right now: November 5, 2024

• Google Warns of Actively Exploited CVE-2024-43093 Vulnerability in Android System

• SOC Around the Clock: World Tour Survey Findings

• ISC Stormcast For Tuesday, November 5th, 2024 https://isc.sans.edu/podcastdetail/9208, (Tue, Nov 5th)

• Joint ODNI, FBI, and CISA Statement

• Joint Statement from CISA and EAC in Support of State and Local Election Officials

• CISA: U.S. election disinformation peddled at massive scale

Generated on 2024-11-06 23:55:04.697403