IT Security News Daily Summary 2024-11-08

• Friday Squid Blogging: Squid-A-Rama in Des Moines

• DEF CON 32 – Securing CCTV Cameras Against Blind Spots – Jacob Shams

• Week in Review: Sophos Chinese hacker warning, AI flaws and vulnerabilities

• HackerOne: Nearly Half of Security Professionals Believe AI Is Risky

• 3 key generative AI data privacy and security concerns

• The Human Side of Incident Response

• Closing 2024 with Style at Cisco Live Melbourne

• Palo Alto Networks warns of potential RCE in PAN-OS management interface

• DEF CON 32 – Smishing Smackdown: Unraveling the Threads of USPS Smishing and Fighting Back

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #312 – Appraisal

• How OpenAI’s New AI Agents Are Shaping the Future of Coding

• An explanation of ransomware

• Big Tech’s Data-Driven AI: Transparency, Consent, and Your Privacy

• US Gov Agency Urges Employees to Limit Phone Use After China ‘Salt Typhoon’ Hack

• 28,000 WordPress Sites Affected by Arbitrary File Read and Deletion Vulnerability in WPLMS WordPress Theme

• In Other News: China Hacked Singtel, GuLoader Attacks on Industrial Firms, Phone Use Warning in US Agency

• Hackers Can Access Mazda Vehicle Controls Via System Vulnerabilities

• TikTok ordered to close Canada offices following “national security review”

• FBI says hackers are sending fraudulent police data requests to tech giants to steal people’s private information

• IPConsul automates operations with Cisco’s industrial IoT secure networking

• Upcoming Webinar – Working with X.509 Keys and Certificates

• BlueOLEx 2024 exercise: EU-CyCLONe test its cyber crisis response preparedness

• Google To Make MFA Mandatory for Google Cloud in 2025

• How to maximize cybersecurity ROI

• Innovator Spotlight: Push Security

• Pro-Russian Hacktivists Target South Korea as North Korea Joins Ukraine War

• American Oilfield supplier Newpark Resources hit by ransomware attack

• Google Jarvis AI Extension Leaked On Chrome Store

• Cash App user have a few days left to claim up to a $2,500 settlement payout

• Clearing the Clutter: Simplifying Security Operations with Tool Consolidation

• AI Summit Vancouver 2024: Exploring AI’s Role, Risks, and Transformative Power

• Mastering the 3-2-1 Backup Approach: What It Is and Why It Works

• Finding Solutions to Meet PCI DSS v4.0 Requirements 6.4.3 and 11.6.1

• Smart holiday shopping—How to safely secure deals and discounts for the hottest gifts

• SpyAgent malware targets crypto wallets by stealing screenshots

• Scattered Spider, BlackCat claw their way back from criminal underground

• Threat Actors Hijack Windows Systems Using the New SteelFox Malware

• Malwarebytes Acquires VPN Provider AzireVPN

• Check Point Uncover Pakistan-Linked APT36’s New Malware Targeting Indian Systems

• Why Small Businesses Are Major Targets for Cyberattacks and How to Defend Against Them

• AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services

• New Campaign Uses Remcos RAT to Exploit Victims

• Unpatched Vulnerabilities Allow Hacking of Mazda Cars: ZDI

• Operation Synergia II: A Global Effort to Dismantle Cybercrime Networks

• Ciso Playbook: Cyber Resilience Strategy

• Nokia Says Impact of Recent Source Code Leak Is Very Limited

• Amazon Mulls New Multi-Billion Dollar Investment In Anthropic – Report

• Incident Response Readiness Journey

• Leveraging Threat Intelligence in Cisco Secure Network Analytics, Part 2

• Converge Your WAN and Security With Cisco Firewall

• The AT&T Phone Records Stolen

• IcePeony and Transparent Tribe Target Indian Entities with Cloud-Based Tools

• FTX’s Caroline Ellison Begins Her Two Year Prison Sentence

• iPhones in a law enforcement forensics lab mysteriously rebooted losing their After First Unlock (AFU) state

• AI Industry is Trying to Subvert the Definition of “Open Source AI”

• US Prison Sentences for Nigerian Cybercriminals Surge in Recent Months

• Opera Browser Vulnerability Could Allow Exploits Via Browser Extensions

• HPE Patches Critical Vulnerabilities in Aruba Access Points

• UIUC Researchers Expose Security Risks in OpenAI’s Voice-Enabled ChatGPT-4o API, Revealing Potential for Financial Scams

• Critical Palo Alto Networks Expedition bug exploited (CVE-2024-5910)

• The vCISO Academy: Transforming MSPs and MSSPs into Cybersecurity Powerhouses

• Major Oilfield Supplier Hit by Ransomware Attack

• How to Evaluate and Improve Your Organisation’s Data Security Posture

• AI can drive business growth in Southeast Asia. But some big challenges remain

• How to Build a Healthy Patch Management Program

• Why having too many cybersecurity point solutions is risky

• Palo Alto Networks Expedition Vulnerability Exploited in Attacks, CISA Warns

• Observability in Security: Strategies for the Modern Enterprise

• Webinar: Learn How Storytelling Can Make Cybersecurity Training Fun and Effective

• North Korean Actor Deploys Novel Malware Campaign Against Crypto Firms

• QSC: A multi-plugin framework used by CloudComputating group in cyberespionage campaigns

• Recent improvements in Red Hat Enterprise Linux CoreOS security data

• Secure cloud bursting: Leveraging confidential computing for peace of mind

• More value, less risk: How to implement generative AI across the organization securely and responsibly

• Breaking Down Earth Estries’ Persistent TTPs in Prolonged Cyber Operations

• Steps Organizations Can Take to Improve Cyber Resilience

• The CISO Evolution: From Tactical Defender to Strategic Business Partner

• Columbus Data Breach Affects 500,000 in Recent Cyberattack

• Mirantis provides support offerings for Harbor Registry and KubeVirt

• Top Vulnerability Management Tools: Reviews & Comparisons 2024

• AppOmni partners with Cisco to extend zero trust to SaaS

• Interlock targets healthcare, Canada dissolves TikTok, HP critical flaws

• New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus

• Canada Orders TikTok To Close Operations: Cyber Security Today for Friday, November 8th, 2024

• Digital Arrest: How Even The Educated Become Victims

• CISA Warns of Critical Palo Alto Networks Vulnerability Exploited in Attacks

• Apple’s 45-day certificate proposal: A call to action

• New Malware “ToxicPanda” Targets Android Devices to Steal Banking Information

• Credential Abuse Market Flourishes Despite Setbacks

• Large-Scale Phishing Campaign Exposed Using New Version of Rhadamanthys Malware

• Am I Isolated: Open-source container security benchmark

• CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability

• A closer look at the 2023-2030 Australian Cyber Security Strategy

• Why AI-enhanced threats and legal uncertainty are top of mind for risk executives

• New infosec products of the week: November 8, 2024

• Driving social impact at work: A rewarding collaboration with WWF-Australia

• Winos4.0 abuses gaming apps to infect, control Windows machines

• DEF CON 32 – QuickShell Sharing Is Caring About RCE Attack Chain On QuickShare – Or Yair, Shmuel Cohen

• Highlights from the InCyber Montreal Forum

• ISC Stormcast For Friday, November 8th, 2024 https://isc.sans.edu/podcastdetail/9214, (Fri, Nov 8th)

• Imperva: A Leader in WAAP

• New SteelFox Malware Posing as Popular Software to Steal Browser Data

• EFF to Court: Reject X’s Effort to Revive a Speech-Chilling Lawsuit Against a Nonprofit

• U.S. CISA adds Palo Alto Expedition, Android, CyberPanel and Nostromo nhttpd bugs to its Known Exploited Vulnerabilities catalog

• The Future of Work: Understanding AI Agents and Digital Coworkers

• IT Security News Daily Summary 2024-11-07

• Wordfence Price Increases Coming December 5th, 2024

• Stronger Together: Cisco and Splunk’s strategic push for digital resilience

• Don’t open that ‘copyright infringement’ email attachment – it’s an infostealer

• How to create an enterprise cloud security budget

• CISA Kicks Off Critical Infrastructure Security and Resilience Month 2024

• 764 Terror Network Member Richard Densmore Sentenced to 30 Years in Prison

• North Korean Hackers Target macOS Users

• Mistral AI takes on OpenAI with new moderation API, tackling harmful content in 11 languages

• The Global Effort to Maintain Supply Chain Security | Part Two

• Jane Goodall: Reasons for hope | Starmus highlights

• More Layoffs For iRobot Staff After Abandoned Amazon Deal

• Smishing: The elephant in the room

• Fabrice Malware on PyPI Has Been Stealing AWS Credentials for 3 Years

• Google DORA issues platform engineering caveats

• How to Build a Healthy Patch Management Program?

• North Korean Hackers Target macOS Users with Fake Crypto PDFs

• Bot Attacks Are Coming to Town: How to Safeguard Your Customers’ Holiday Travel

• How to build a Python port scanner

• JPCERT Explains How to Identify Ransomware Attacks from Windows Event Logs

• UK Watchdog Urges Data Privacy Overhaul as Smart Devices Collect “Excessive” User Data

• Mozilla Foundation Confirms Layoffs, Eliminates Advocacy Division

• Hacker says they banned ‘thousands’ of Call of Duty gamers by abusing anti-cheat flaw

• DPRK-linked BlueNoroff used macOS malware with novel persistence

• AppOmni and Cisco Partner to Extend SaaS Security with End-to-End Zero Trust From Endpoint to the Application

• Fortinet Extends Generative AI Reach Across Portfolio

• Androxgh0st Botnet Adopts Mozi Payloads, Expands IoT Reach

• Google To Make MFA Mandatory Next Year

• CISA Adds Four Known Exploited Vulnerabilities to Catalog

• Delta Electronics DIAScreen

• Beckhoff Automation TwinCAT Package Manager

• CISA Releases Three Industrial Control Systems Advisories

• Bosch Rexroth IndraDrive

• Air fryers are the latest surveillance threat you didn’t consider

• Fast-Track Your AI Revenue: 4 Game-Changing Solutions Partners Need Now

• Prompt Injection Defenses Against LLM Cyberattacks

• Fortinet Partners with European Governments to Drive Cyber Resiliency Globally

• Adversary AI Threat Intelligence Content Added to the Tidal Cyber Knowledge Base

• A Beginner’s Guide to PCI DSS 4.0: Requirements 1-4

• The Growing Concern Regarding Privacy in Connected Cars

• NCSC Unveils “Pigmy Goat” Malware Targeting Sophos Firewalls in Advanced Chinese Cyberattack

• Interlock Ransomware Targets US Healthcare, IT and Government Sectors

• Google Cloud makes MFA mandatory for all global users by 2025

• UK Government Launch AI Safety Platform For Businesses

• The Biggest Inhibitor of Cybersecurity: The Human Element

• Akamai’s Behavioral DDoS Engine: A Breakthrough in Modern DDoS Mitigation

• Androxgh0st Botnet Integrates Mozi, Expands Attacks on IoT Vulnerabilities

• Fortinet expands GenAI capabilities across its portfolio with two new additions

• Exploring DORA: How to manage ICT incidents and minimize cyber threat risks

• Java(Script) Drive-By, Hacking Without 0days

• Permiso Adds Three More Open Source Cybersecurity Tools

• Malwarebytes acquires AzireVPN to boost security for customers

• Wordfence Intelligence Weekly WordPress Vulnerability Report (October 28, 2024 to November 3, 2024)

• Australia Plans Social Media Ban For Children Under 16

• Strata Cloud Manager: One Interface, Complete Network Security Control

• Cyber Risks for Government Agencies Are on the Rise. Why Security Is Still an Uphill Battle

• Malwarebytes acquires AzireVPN to fuel additional VPN features and functionalities

• Drawbridge simplifies cyber governance for alternative investment firms

• North Korean Hackers Use Fake News to Spread ‘Hidden Risk’ Malware

• Evasive ZIP Concatenation: Trojan Targets Windows Users

• Runtime security in multi-cloud environments: best practices and importance

• AudioEye Accessibility Protection Status identifies high-impact areas for improvement

• Industrial companies in Europe targeted with GuLoader

• Meeting CISA’s Memory Safety Mandate: The Role of OT Software Buyers and Manufacturers

• Tackling Cyberbullying with Cyber security to defend the Digital Playground

• Embed Security Raises $6 Million to Help Overworked Analysts

• SonicWall Unveils Cutting-Edge Security Solution for Branch and Small Office Environments

• AI-Assisted Attacks Top Cyber Threat for Third Consecutive Quarter, Gartner Finds

• Asking for your feedback: ENISA technical guidance for the cybersecurity measures of the NIS2 Implementing Act

• NetSecOPEN: Cisco Firewall Outperforms Competition in Real-World Testing

• ‘SteelFox’ Miner and Information Stealer Bundle Emerges

• How to comply with PCI DSS 4’s Req 6.4.3 and 11.6.1 in 4 minutes or less?

• A Hacker’s Guide to Password Cracking

• North Korean Hackers Target Crypto Firms with Hidden Risk Malware on macOS

• Canada Orders Shutdown Of TikTok’s Canadian Business

• Cisco Desk Phone Series Vulnerability Lets Remote Attacker Access Sensitive Information

• Subverting LLM Coders

• Cisco Patches Critical Vulnerability in Industrial Networking Solution

• UK Regulator Urges Stronger Data Protection in AI Recruitment Tools

• Hackers and AI – Should we be worried?

• Cisco scores a perfect CVSS 10 with critical flaw in its wireless system

• North Korean hackers employ new tactics to compromise crypto-related businesses

• Canada orders shutdown of TikTok offices over security risks (but won’t block app)

• Canada Orders Shutdown of Local TikTok Branch Over Security Concerns

• Unwrapping the emerging Interlock ransomware attack

• Silent Skimmer Gets Loud (Again)

• Canada Orders TikTok’s Canadian Business to Be Dissolved but Won’t Block App

• Cyberattack on Microlise Disables Tracking in Prison Vans, Courier Vehicles

• Gmail Under Attack: Secure a Backup Account

• Malicious PyPI Package ‘Fabrice’ Found Stealing AWS Keys from Thousands of Developers

• SteelFox and Rhadamanthys Malware Use Copyright Scams, Driver Exploits to Target Victims

• 5 Most Common Malware Techniques in 2024

• NCSC Publishes Tips to Tackle Malvertising Threat

• Android Banking Trojan ToxicPanda Targets Europe

• UK Cybersecurity Wages Soar Above Inflation as Stress Levels Rise

• It’s Time To Have A Real Conversation About The Quality Of Digital Life

• Critical vulnerability in Cisco industrial wireless access points fixed (CVE-2024-20418)

• A Snapshot of Cyber Threats: Highlights from the ENISA Threat Landscape 2024 Report

• Top 10 PowerDMARC Alternatives and Competitors: Detailed Feature Comparison

• Zywave enhances Cyber Quoting to provide insight into coverage limit adequacy and potential loss gaps

• Defenders Outpace Attackers in AI Adoption

• Canada ordered ByteDance to shut down TikTok operations in the country over security concerns

• Cisco Releases Patch for Critical URWB Vulnerability in Industrial Wireless Systems

• Nokia investigates breach claims, Nigerian cybercrime bust, SelectBlinds e-skimmer breach

• Steam Account Checker Poisoned with Infostealer, (Thu, Nov 7th)

• PRODUCT REVIEW: TXONE NETWORKS FOR PROACTIVE OT DEFENSE

• Critical bug in Cisco UWRB access points allows attackers to run commands as root

• Securing SMBs in a Cloud-Driven World: Best Practices for Cost-Effective Digital Hygiene Through Verified Authentication

• Network Penetration Testing in the Age of Automation: A Conversation with an Ethical Hacker

• Real-Time Protection: How Deep Packet Inspection Enhances Detection and Response

• Telegram new content surveillance policy and Cyber Attack on South Korea Defense

• Cisco Flaw Let Attackers Run Command as Root User

• New Malware Campaign Targets Windows Users Through Gaming Apps

• JFrog Uncovers Critical Vulnerabilities in Machine Learning Platforms

• Fry Another Day: The Hidden Surveillance Powers of Smart Appliances

• Using Human Risk Management to Detect and Thwart Cyberattacks

• Google Cloud to Mandate Multi-Factor Authentication for All Users by 2025

• Earth 2 – 420,961 breached accounts

• AWS security essentials for managing compliance, data protection, and threat detection

• How AI will shape the next generation of cyber threats

• Consumer privacy risks of data aggregation: What should organizations do?

• Canada Orders TikTok to Shut Down Canadian Operations Over Security Concerns

• ​​Zero Trust Workshop: Advance your knowledge with an online resource

• Officials warn of Russia’s tech-for-troops deal with North Korea amid Ukraine conflict

• ISC Stormcast For Thursday, November 7th, 2024 https://isc.sans.edu/podcastdetail/9212, (Thu, Nov 7th)

• When Should You Prepare Your Java State for DORA Compliance? (Hint: NOW)

• Large eBay malvertising campaign leads to scams

• Protecting privacy without hurting RAG performance

Generated on 2024-11-08 23:55:04.401519