IT Security News Daily Summary 2024-11-07

• Wordfence Price Increases Coming December 5th, 2024

• Stronger Together: Cisco and Splunk’s strategic push for digital resilience

• Don’t open that ‘copyright infringement’ email attachment – it’s an infostealer

• How to create an enterprise cloud security budget

• CISA Kicks Off Critical Infrastructure Security and Resilience Month 2024

• 764 Terror Network Member Richard Densmore Sentenced to 30 Years in Prison

• North Korean Hackers Target macOS Users

• Mistral AI takes on OpenAI with new moderation API, tackling harmful content in 11 languages

• The Global Effort to Maintain Supply Chain Security | Part Two

• Jane Goodall: Reasons for hope | Starmus highlights

• More Layoffs For iRobot Staff After Abandoned Amazon Deal

• Smishing: The elephant in the room

• Fabrice Malware on PyPI Has Been Stealing AWS Credentials for 3 Years

• Google DORA issues platform engineering caveats

• How to Build a Healthy Patch Management Program?

• North Korean Hackers Target macOS Users with Fake Crypto PDFs

• Bot Attacks Are Coming to Town: How to Safeguard Your Customers’ Holiday Travel

• How to build a Python port scanner

• JPCERT Explains How to Identify Ransomware Attacks from Windows Event Logs

• UK Watchdog Urges Data Privacy Overhaul as Smart Devices Collect “Excessive” User Data

• Mozilla Foundation Confirms Layoffs, Eliminates Advocacy Division

• Hacker says they banned ‘thousands’ of Call of Duty gamers by abusing anti-cheat flaw

• DPRK-linked BlueNoroff used macOS malware with novel persistence

• AppOmni and Cisco Partner to Extend SaaS Security with End-to-End Zero Trust From Endpoint to the Application

• Fortinet Extends Generative AI Reach Across Portfolio

• Androxgh0st Botnet Adopts Mozi Payloads, Expands IoT Reach

• Google To Make MFA Mandatory Next Year

• CISA Adds Four Known Exploited Vulnerabilities to Catalog

• Delta Electronics DIAScreen

• Beckhoff Automation TwinCAT Package Manager

• CISA Releases Three Industrial Control Systems Advisories

• Bosch Rexroth IndraDrive

• Air fryers are the latest surveillance threat you didn’t consider

• Fast-Track Your AI Revenue: 4 Game-Changing Solutions Partners Need Now

• Prompt Injection Defenses Against LLM Cyberattacks

• Fortinet Partners with European Governments to Drive Cyber Resiliency Globally

• Adversary AI Threat Intelligence Content Added to the Tidal Cyber Knowledge Base

• A Beginner’s Guide to PCI DSS 4.0: Requirements 1-4

• The Growing Concern Regarding Privacy in Connected Cars

• NCSC Unveils “Pigmy Goat” Malware Targeting Sophos Firewalls in Advanced Chinese Cyberattack

• Interlock Ransomware Targets US Healthcare, IT and Government Sectors

• Google Cloud makes MFA mandatory for all global users by 2025

• UK Government Launch AI Safety Platform For Businesses

• The Biggest Inhibitor of Cybersecurity: The Human Element

• Akamai’s Behavioral DDoS Engine: A Breakthrough in Modern DDoS Mitigation

• Androxgh0st Botnet Integrates Mozi, Expands Attacks on IoT Vulnerabilities

• Fortinet expands GenAI capabilities across its portfolio with two new additions

• Exploring DORA: How to manage ICT incidents and minimize cyber threat risks

• Java(Script) Drive-By, Hacking Without 0days

• Permiso Adds Three More Open Source Cybersecurity Tools

• Malwarebytes acquires AzireVPN to boost security for customers

• Wordfence Intelligence Weekly WordPress Vulnerability Report (October 28, 2024 to November 3, 2024)

• Australia Plans Social Media Ban For Children Under 16

• Strata Cloud Manager: One Interface, Complete Network Security Control

• Cyber Risks for Government Agencies Are on the Rise. Why Security Is Still an Uphill Battle

• Malwarebytes acquires AzireVPN to fuel additional VPN features and functionalities

• Drawbridge simplifies cyber governance for alternative investment firms

• North Korean Hackers Use Fake News to Spread ‘Hidden Risk’ Malware

• Evasive ZIP Concatenation: Trojan Targets Windows Users

• Runtime security in multi-cloud environments: best practices and importance

• AudioEye Accessibility Protection Status identifies high-impact areas for improvement

• Industrial companies in Europe targeted with GuLoader

• Meeting CISA’s Memory Safety Mandate: The Role of OT Software Buyers and Manufacturers

• Tackling Cyberbullying with Cyber security to defend the Digital Playground

• Embed Security Raises $6 Million to Help Overworked Analysts

• SonicWall Unveils Cutting-Edge Security Solution for Branch and Small Office Environments

• AI-Assisted Attacks Top Cyber Threat for Third Consecutive Quarter, Gartner Finds

• Asking for your feedback: ENISA technical guidance for the cybersecurity measures of the NIS2 Implementing Act

• NetSecOPEN: Cisco Firewall Outperforms Competition in Real-World Testing

• ‘SteelFox’ Miner and Information Stealer Bundle Emerges

• How to comply with PCI DSS 4’s Req 6.4.3 and 11.6.1 in 4 minutes or less?

• A Hacker’s Guide to Password Cracking

• North Korean Hackers Target Crypto Firms with Hidden Risk Malware on macOS

• Canada Orders Shutdown Of TikTok’s Canadian Business

• Cisco Desk Phone Series Vulnerability Lets Remote Attacker Access Sensitive Information

• Subverting LLM Coders

• Cisco Patches Critical Vulnerability in Industrial Networking Solution

• UK Regulator Urges Stronger Data Protection in AI Recruitment Tools

• Hackers and AI – Should we be worried?

• Cisco scores a perfect CVSS 10 with critical flaw in its wireless system

• North Korean hackers employ new tactics to compromise crypto-related businesses

• Canada orders shutdown of TikTok offices over security risks (but won’t block app)

• Canada Orders Shutdown of Local TikTok Branch Over Security Concerns

• Unwrapping the emerging Interlock ransomware attack

• Silent Skimmer Gets Loud (Again)

• Canada Orders TikTok’s Canadian Business to Be Dissolved but Won’t Block App

• Cyberattack on Microlise Disables Tracking in Prison Vans, Courier Vehicles

• Gmail Under Attack: Secure a Backup Account

• Malicious PyPI Package ‘Fabrice’ Found Stealing AWS Keys from Thousands of Developers

• SteelFox and Rhadamanthys Malware Use Copyright Scams, Driver Exploits to Target Victims

• 5 Most Common Malware Techniques in 2024

• NCSC Publishes Tips to Tackle Malvertising Threat

• Android Banking Trojan ToxicPanda Targets Europe

• UK Cybersecurity Wages Soar Above Inflation as Stress Levels Rise

• It’s Time To Have A Real Conversation About The Quality Of Digital Life

• Critical vulnerability in Cisco industrial wireless access points fixed (CVE-2024-20418)

• A Snapshot of Cyber Threats: Highlights from the ENISA Threat Landscape 2024 Report

• Top 10 PowerDMARC Alternatives and Competitors: Detailed Feature Comparison

• Zywave enhances Cyber Quoting to provide insight into coverage limit adequacy and potential loss gaps

• Defenders Outpace Attackers in AI Adoption

• Canada ordered ByteDance to shut down TikTok operations in the country over security concerns

• Cisco Releases Patch for Critical URWB Vulnerability in Industrial Wireless Systems

• Nokia investigates breach claims, Nigerian cybercrime bust, SelectBlinds e-skimmer breach

• Steam Account Checker Poisoned with Infostealer, (Thu, Nov 7th)

• PRODUCT REVIEW: TXONE NETWORKS FOR PROACTIVE OT DEFENSE

• Critical bug in Cisco UWRB access points allows attackers to run commands as root

• Securing SMBs in a Cloud-Driven World: Best Practices for Cost-Effective Digital Hygiene Through Verified Authentication

• Network Penetration Testing in the Age of Automation: A Conversation with an Ethical Hacker

• Real-Time Protection: How Deep Packet Inspection Enhances Detection and Response

• Telegram new content surveillance policy and Cyber Attack on South Korea Defense

• Cisco Flaw Let Attackers Run Command as Root User

• New Malware Campaign Targets Windows Users Through Gaming Apps

• JFrog Uncovers Critical Vulnerabilities in Machine Learning Platforms

• Fry Another Day: The Hidden Surveillance Powers of Smart Appliances

• Using Human Risk Management to Detect and Thwart Cyberattacks

• Google Cloud to Mandate Multi-Factor Authentication for All Users by 2025

• Earth 2 – 420,961 breached accounts

• AWS security essentials for managing compliance, data protection, and threat detection

• How AI will shape the next generation of cyber threats

• Consumer privacy risks of data aggregation: What should organizations do?

• Canada Orders TikTok to Shut Down Canadian Operations Over Security Concerns

• ​​Zero Trust Workshop: Advance your knowledge with an online resource

• Officials warn of Russia’s tech-for-troops deal with North Korea amid Ukraine conflict

• ISC Stormcast For Thursday, November 7th, 2024 https://isc.sans.edu/podcastdetail/9212, (Thu, Nov 7th)

• When Should You Prepare Your Java State for DORA Compliance? (Hint: NOW)

• Large eBay malvertising campaign leads to scams

• Protecting privacy without hurting RAG performance

• IT Security News Daily Summary 2024-11-06

• AI-Assisted Attacks Top Cyber Threat For Third Consecutive Quarter, Gartner Finds

• INTERPOL: Operation Synergia II disrupted +22,000 malicious IPs

• Increasing Awareness of DNS Hijacking: A Growing Cyber Threat

• Video: 2.9 Billion Records Compromised in NPD Breach – Recap

• Cybercrooks are targeting Bengal cat lovers in Australia for some reason

• Video: How Hackers Steal Your Cookies & How to Stop Them

• Video: Top Cybersecurity Threats That You Need to Fix

• Memorial Hospital and Manor suffered a ransomware attack

• CISA on 2024 election security: ‘Good news’ for democracy

• The 2024 U.S. Election is Over. EFF is Ready for What’s Next.

• Google Cloud: MFA Will Be Mandatory for All Users in 2025

• What is machine identity management?

• Scammers Target BASE and Ethereum with Political Meme Coins and Rug Pulls

• Amazon Boss Denies Return To Office Mandate Is ‘Backdoor Layoff’

• Columbus Ransomware Attack Exposes 500,000+ Residents’ Data: How to Stay Safe

• Winos 4.0 Malware Infects Gamers Through Malicious Game Optimization Apps

• VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware

• IntelBroker Claims Selling Nokia’s Source Code on BreachForums

• Apple Set To Be Fined Under EU’s Tough DMA – Report

• Researchers Develop Blockchain-Based Federated Learning Model to Boost IoT Security

• Donald Trump Election Victory, And Implications For Tech Sector

• Schneider Electric Confirms Ransom Hack — Hellcat Demands French Bread as ‘Joke’

• INTERPOL Arrests 41, Takes Down 22,000 Malicious IPs and 59 Servers

• The best VPN routers of 2024

• Interpol Operation Shuts Down 22,000 Malicious Servers

• Crypto Bull Market Targeted: The Lottie-Player Security Breach

• Rails Without Derails: Thwarting Code Injection Attacks

• Uncovering a Large-Scale Campaign Using the Latest Version of The Rhadamanthys Stealer: Rhadamanthys.07

• Facebook, Nvidia Push SCOTUS to Limit Investor Lawsuits

• New Flaws in Fortinet, SonicWall, and Grafana Pose Significant Threats

• How to Protect Yourself Against Phishing Extortion Scams Involving Personal Data

• Cyber-Attack on Microlise Disrupts DHL and Serco Tracking Services

• Statement from CISA Director Easterly on the Security of the 2024 Elections

• Serco Hit by Cyber Attack, Disrupting Prisoner Tracking and Transport Operations

• New Winos4.0 Malware Targeting Windows via Fake Gaming Apps

• Interlock Ransomware Specifically Targets FreeBSD Servers

• Google Cloud Rolling Out Mandatory MFA for All Users

• IRISSCON: Organizations Still Falling Victim to Predictable Cyber-Attacks

• (In)tuned to Takeovers: Abusing Intune Permissions for Lateral Movement and Privilege Escalation in Entra ID Native Environments

• Serco Tracking Devices On Prison Vans Disabled After Cyberattack

• Operation Synergia II sees Interpol swoop on global cyber crims

• What Telegram’s recent policy shift means for cyber crime

• Prioritising eHealth cybersecurity against emerging challenges

• Atakama introduces DNS filtering designed for MSPs

• All Google Cloud users will have to enable MFA by 2025

• New Winos 4.0 Malware Infects Gamers Through Malicious Game Optimization Apps

• Shaking Up Security — The Power of AI-Native SOCs

• Threat Campaign Spreads Winos4.0 Through Game Application

• 8 security tips for small businesses

• In The News | The Importance of Securing School Bus Wi-Fi Networks

• Spectra Assure Malware Detection in ML and LLM Models

• Winos4.0 Malware Found in Game Apps, Targets Windows Users

• CrowdStrike to Acquire Adaptive Shield in Reported $300 Million Deal

• Massive Nigerian Cybercrime Bust Sees 130 Arrested

• UK Orders Chinese Entity To Sell Stake In Scottish Chip Firm FTDI

• Update your Android: Google patches two zero-day vulnerabilities

• Go Beyond with Cisco Customer Experience at Cisco Live

• Cyber Threat Intelligence (CTI) for Supply Chain Monitoring

• HookBot Malware Use Overlay Attacks Impersonate As Popular Brands To Steal Data

• CRON#TRAP Campaign Attacks Windows Machine With Weaponized Linux Virtual Machine

• North Korean Hackers Employing New Tactic To Acruire Remote Jobs

• Rise Of Ransomware-As-A-Service Leads To Decline Of Custom Tools

• Researchers Detailed Credential Abuse Cycle

• South Korea fined Meta $15.67M for illegally collecting and sharing Facebook users

• IoT Devices in Password-Spraying Botnet

• Cyberattackers stole Microlise staff data following DHL, Serco disruption

• Microchip Technology Reports $21.4 Million Cost From Ransomware Attack

• What Is a VPN? Definition, How It Works, and More

• Cyberattack Blamed for Statewide Washington Courts Outage

• 9 Steps to Get CTEM on Your 2025 Budgetary Radar

• Watchdog Says Vodafone, Three Merger Could Proceed With Certain Remedies

• Ransomware Attack Disrupts Georgia Hospital’s Access to Health Records

• GoZone ransomware accuses and threatens victims

• Schneider Electric ransomware attack to cost $125k and more in Baguettes

• The Most Notorious Cyber Threat Groups: A Global Overview

• Heimdal and COOLSPIRiT Team Up to Strengthen UK Business Cybersecurity

• Google Cloud to Mandate Multifactor Authentication by 2025

• CIS Control 14: Security Awareness and Skill Training

• How to Integrate FIM with SOAR Platforms

• Synology fixed critical flaw impacting millions of DiskStation and BeePhotos NAS devices

• INTERPOL Disrupts Over 22,000 Malicious Servers in Global Crackdown on Cybercrime

• Snowflake Hacking Suspect Arrested in Canada

• Azure API Management Vulnerabilities Let Attackers Escalate Privileges

• New SteelFox Trojan mimics software activators, stealing sensitive data and mining cryptocurrency

• PLCHound Aims to Improve Detection of Internet-Exposed ICS

• Authlete 3.0 empowers organizations to improve how they issue and manage user credentials

• Global Operation Takes Down 22,000 Malicious IPs

• South Korea Fines Meta $15 Million for Illegally Collecting Information on Facebook Users

• Symbiotic provides developers with real-time feedback on potential security vulnerabilities

• Google Patches High-Severity Vulnerabilities in Chrome

• Holiday Shopping Readiness: How is Retail Data Security Holding Up?

• ElizaRAT hits India, Washington court outage, Snowflake hacker arrested

• South Korea Fines Meta $15.67M for Illegally Sharing Sensitive User Data with Advertisers

• AI Finds Zero Day Vulnerability For First Time: Cyber Security Today for Wednesday, November 6, 2024

• CISA’s Cyber Hygiene Services

• Google’s Big Sleep AI Tool Finds Zero-Day Vulnerability

• LightSpy Update Expands Surveillance on iOS Devices

• Google Cloud to Enforce Multi-Factor Authentication by 2025 for All Users

• Attackers Exploit DocuSign API to Send Fraudulent Invoices, Bypassing Security Filters

• Scammers Impersonate Thunder Bay RCMP in New Phone Spoofing Scheme

• The cybersecurity gender gap: How diverse teams improve threat response

• Osmedeus: Open-source workflow engine for offensive security

• [Guest Diary] Insights from August Web Traffic Surge, (Wed, Nov 6th)

• Key cybersecurity predictions for 2025

• Identity-related data breaches cost more than average incidents

• China’s Volt Typhoon reportedly breached Singtel in ‘test-run’ for US telecom attacks

• ISC Stormcast For Wednesday, November 6th, 2024 https://isc.sans.edu/podcastdetail/9210, (Wed, Nov 6th)

• Scumbag puts ‘stolen’ Nokia source code, SSH and RSA keys, more up for sale

• Schneider Electric Investigates Cybersecurity Incident

Generated on 2024-11-07 23:55:05.689664