IT Security News Daily Summary 2024-11-15

• Google Gemini unexpectedly surges to No. 1, over OpenAI, but benchmarks don’t tell the whole story

• Retrofitting spatial safety to hundreds of millions of lines of C++

• Week in Review: Most common passwords, Secure-by-design, DNA firm vanishes

• ANZ CIO Challenges: AI, Cybersecurity & Data Analytics for 2025

• Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit

• NSO Group admits cutting off 10 customers because they abused its Pegasus spyware, say unsealed court documents

• Homeland Security Department Releases Framework for Using AI in Critical Infrastructure

• Bitfinex hacker Ilya Lichtenstein was sentenced to 5 years in prison

• Keyboard robbers steal 171K customers’ data from AnnieMac mortgage house

• Executive Perspectives, Episode 3, Bobby Mehta

• The Future of Cybersecurity: Predictions for 2025 and Beyond

• Keyboard robbers steal 171k customers’ data from AnnieMac mortgage house

• Think you need a VPN? Start here.

• Daniel Stori’s Turnoff.US: ‘I Love Windows Powershell’

• Iranian Hackers Deploy WezRat Malware in Attacks Targeting Israeli Organizations

• MFA required for AWS Organizations member accounts in 2025

• Retrofitting Spatial Safety to hundreds of millions of lines of C++

• Secure by Design: AWS enhances centralized security controls as MFA requirements expand

• 8.8 Rated PostgreSQL Vulnerability Puts Databases at Risk

• The best secure browsers for privacy in 2024: Expert tested

• New Glove Stealer Malware Bypasses Google Chrome’s App-Bound to Steal Data

• Malicious QR codes sent in the mail deliver malware

• C-Level Fireside Chat Uncovers the Truth About Data Security’s Hardest Battles

• DEF CON 32 – Spies And Bytes: Victory In The Digital Age

• Amazon Employee Data Leaked in MOVEit Attack Fallout

• Reimagining Healthcare with Synthetic Data

• IT Security News Hourly Summary

• Akamai?s Perspective on November?s Patch Tuesday 2024

• The Rising Threat of Cloud Ransomware: A Global Concern for Businesses of All Sizes

• Northvolt Mulls US Bankruptcy Protection – Report

• Microsoft Power Pages Misconfigurations Expose Millions of Records Globally

• Critical TP-Link DHCP Vulnerability Let Attackers Execute Arbitrary Code Remotely

• CISA’s Vulnerability Management goes “Big” on Interns and the Results are Staggering!

• Surfshark VPN review: One of our favorite budget VPNs with unlimited connections

• Simplifying endpoint security

• Palo Alto Networks Confirms New Zero-Day Being Exploited by Threat Actors

• Critical TP-Link DHCP Vulnerability Let Attackers Execute Arbitary Code Remotely

• Cybersecurity dominates concerns among the C-suite, small businesses and the nation

• Talking to the C-Suite About Cybersecurity

• Bitfinex burglar bags 5 years behind bars for Bitcoin heist

• Gmail Alert: Massive Phishing Campaign Spreads Rhadamanthys Malware

• Updated whitepaper: Architecting for PCI DSS Segmentation and Scoping on AWS

• FTC Plans Investigation Into Microsoft Cloud Business – Report

• 5G network AI models: Threats and Mitigations

• [Free & Downloadable] Cloud Security Policy Template

• SurePath AI Raises $5.2 Million for Gen-AI Governance Solution

• Cyber crooks push Android malware via letter

• Cybercriminals hijack DNS to build stealth attack networks

• Master Certificate Management: Join This Webinar on Crypto Agility and Best Practices

• Researchers Warn of Privilege Escalation Risks in Google’s Vertex AI ML Platform

• Bitfinex Hacker Jailed for Five Years Over Billion Dollar Crypto Heist

• Microsoft Released November 2024 Patch Tuesday With ~90 Fixes

• The Importance of Data Security Posture Management (DSPM) in Today’s Digital Landscape

• The Role of Proxies in Modern Cybersecurity & Protecting Data

• Halliburton Cyberattack Update: Losses Worth $35 Million Hit The Firm

• Good Essay on the History of Bad Password Policies

• Interconnectivity and cyber risk: A double-edged sword

• Guarding the Games: Cybersecurity and the 2024 Summer Olympics

• API Security Day – powered by APIDays & Escape

• watchTowr Finds New Zero-Day Vulnerability in Fortinet Products

• Programmer Sentenced To Five Years In Prison For Bitcoin Laundering

• Cybercriminals Launch SEO Poisoning Attack to Lure Shoppers to Fake Online Stores

• Chinese SilkSpecter Hackers Attacking Black Friday Shoppers

• Iranian “Dream Job” Cyber Campaign Targets Aerospace Sector

• Google Debuts Online Fraud and Scams Advisory

• Ransomware Attacks on Healthcare Sector Surge in 2024

• Known Brand, Government Domains Hijacked via Sitting Ducks Attacks

• Palo Alto Networks firewalls, Expedition under attack (CVE-2024-9463, CVE-2024-9465)

• Vietnamese Hacker Group Deploys New PXA Stealer Targeting Europe and Asia

• Black Basta Ransomware Leveraging Social Engineering For Malware Deployment

• Research Highlights SHA256 Password Security Strengths and Risks

• CISA Warns of Two More Palo Alto Expedition Flaws Exploited in Attacks

• Oscilar Cognitive Identity Intelligence Platform combats AI-powered fraud

• How AI Is Transforming IAM and Identity Security

• British Students Warned of Smishing Scams

• Critical Laravel Vulnerability CVE-2024-52301 Allows Unauthorized Access

• U.S. CISA adds Palo Alto Networks Expedition bugs to its Known Exploited Vulnerabilities catalog

• Palo Alto Networks Confirms New Firewall Zero-Day Exploitation

• Zero-Day Exploits Surge in 2023, Cisco, Fortinet Vulnerabilities Targeted

• USX Cyber strengthens phishing defense in GUARDIENT XDR

• Bitsight acquires Cybersixgill to help organizations manage cyber exposure

• IBM announces Autonomous Security for Cloud

• Ransomware Groups Use Cloud Services For Data Exfiltration

• ViperSoftX: Tracking And Countering a Persistent Threat

• O2’s AI Granny Outsmarts Scam Callers with Knitting Tales

• NordPass popular passwords, Healthcare extortion sentence, China breached telecoms

• CISA Warns of Actors Exploiting Two Palo Alto Networks Vulnerabilities

• 4M+ WordPress Websites to Attacks, Following Plugin Vulnerability

• High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

• New Report Details Cyber Security Scams For Retailers At Christmas: Cyber Security Today for Friday, November 15, 2024

• Top industries facing cyber threats

• Bitsight acquires Cybersixgill for $115 Million

• The invisible cyber shield that combats morphing threats

• Microsoft Power Pages misconfigurations exposing sensitive data

• CISA Flags Two Actively Exploited Palo Alto Flaws; New RCE Attack Confirmed

• Bitfinex Hacker Sentenced to 5 Years, Guilty of Laundering $10.5 Billion in Bitcoin

• For Today’s Enterprise, Modern IGA Helps Control Your Acceleration

• Enhancing security posture through advanced offensive security testing

• ESET APT Activity Report Q2 2024–Q3 2024: Key findings

• AI’s impact on the future of web application security

• CISA Flags Critical Palo Alto Network Flaws Actively Exploited in the Wild

• An Interview With the Target & Home Depot Hacker

• Critical vulnerabilities persist in high-risk sectors

• Using AI to drive cybersecurity risk scoring systems

• NIST report on hardware security risks reveals 98 failure scenarios

• New infosec products of the week: November 15, 2024

• 2024-11-14 – Raspberry Robin infection using WebDAV server

• Examining the Role of Asset Recovery in Safeguarding Data: Ten Points IT Professionals Should Know

• Palo Alto Networks Issues AI Red Alert

• Hackers target critical flaw CVE-2024-10914 in EOL D-Link NAS Devices

• Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack

• 122 million people’s business contact info leaked by data broker

• Fortinet patches VPN app flaw that could give rogue users, malware a privilege boost

• DEF CON 32 – Redefining V2G: How To Use Your Vehicle As Game Controller

• IT Security News Daily Summary 2024-11-14

• What is identity governance and administration (IGA)?

• Is your iPhone rebooting after being inactive? It’s a feature, not a bug

• Meet Andy Zollo, SVP of APJ Sales

• Business Logic Attacks Target Election-Related Sites on Election Day

• Cybercriminal devoid of boundaries gets 10-year prison sentence

• Blinded by Silence

• Wordfence Intelligence Weekly WordPress Vulnerability Report (November 4, 2024 to November 10, 2024)

• Pirates in the Data Sea: AI Enhancing Your Adversarial Emulation

• Hate Speech Watchdog CCDH To Quit Musk’s X

• These 8 Apps on Google Play Store Contain Android/FakeApp Trojan

• Black Friday bots are coming—is your e-commerce site prepared?

• Building complex gen AI models? This data platform wants to be your one-stop shop

• The 10 most popular passwords of 2024 are also the worst: 5 easy ways to do better

• “Why Is It So Expensive To Repair My Devices?”

• Phishing Scams use Microsoft Visio Files to Steal Information

• Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

• Elon Musk Rebuked By Italian President Over Migration Tweets

• Meta Fined €798m Over Alleged Facebook Marketplace Violations

• Bitsight buys dark web security specialist Cybersixgill for $115M

• New Apple security feature reboots iPhones after 3 days, researchers confirm

• Iranian Hackers Target Aerospace Industry in ‘Dream Job’ Campaign

• The CrowdStrike Incident: The Devil is in the Details, and Chaos is in the Code

• Silverfort Expands Cloud Identity Security with Acquisition of Rezonate, Creating First Comprehensive Identity Security Platform

• CISA and FBI: Chinese Hackers Compromised US Telecom Networks

• Anthropic’s new AI tools promise to simplify prompt writing and boost accuracy by 30%

• Securing the AI frontier: Protecting enterprise systems against AI-driven threats

• ShrinkLocker Ransomware: What You Need To Know

• Infoblox: 800,000 domains vulnerable to hijacking attack

• China-linked threat actors compromised multiple telecos and spied on a limited number of U.S. government officials

• The Intersection of Marketing and Technology

• Fortifying the Future: AI Security Is The Cornerstone Of The AI And GenAI Ecosystem

• Bitsight to Acquire Cybersixgill for $115 Million

• NIST Clears Backlog of Known Security Flaws but Not All Vulnerabilities

• Microsoft Power Pages Misconfiguration Leads to Data Exposure

• Sitting Ducks DNS Attacks Put Global Domains at Risk

• World’s Top 200 Common Passwords continue to be incredibly weak

• 4,000,000 WordPress Sites Using Really Simple Security Free and Pro Versions Affected by Critical Authentication Bypass Vulnerability

• The Definitive Guide to Linux Process Injection

• Phorpiex Botnet Phishing Emails Linked to LockBit Black Ransomware Campaign

• VW, Rivian Launch Joint Venture, As Investment Rises To $5.8 Billion

• Smart holiday shopping—How to safely secure deals and discounts for the hottest gifts

• Spotlight on Iranian Cyber Group Emennet Pasargad’s Malware

• Siemens TeleControl Server

• Siemens OZW672 and OZW772 Web Server

• 2N Access Commander

• Siemens SIPORT

• Siemens SINEC INS

• BitSight buys dark web security specialist Cybersixgill for $115M

• Hot Topic Data Breach Exposes Private Data of 57 Million Users

• Addressing AI Risks: Best Practices for Proactive Crisis Management

• Autonomous security for cloud in AWS: Harnessing the power of AI for a secure future

• New educational campaign “Flex Your Cyber” launched

• The Elephant in AppSec Conference: 4 Key Takeaways

• Volt Typhoon rebuilds malware botnet following FBI disruption

• NIST is chipping away at NVD backlog

• Google Warns of Rising Cloaking Scams, AI-Driven Fraud, and Crypto Schemes

• Lazarus Group Targets macOS with RustyAttr Trojan in Fake Job PDFs

• This startup’s AI platform could replace 90% of your accounting tasks—here’s how

• TunnelBear VPN Review 2024: Pricing, Ease of Use & Security

• 1.1 Million UK NHS Employee Records Exposed From Microsoft Power Pages Misconfiguration

• FBI confirms China-backed hackers breached US telecom giants to steal wiretap data

• 2025 Predictions — How One Year Will Redefine the Cybersecurity Industry

• Advertisers are pushing ad and pop-up blockers using old tricks

• Two Men Charged For Hacking US Tax Preparation Firms

• Google launches on-device AI to alert Android users of scam calls in real-time

• VersaONE unifies security and networking into a single, centrally managed platform

• Massive Telecom Hack Exposes US Officials to Chinese Espionage

• AMD Axes 4 Percent Of Staff, Amid AI Chip Focus

• How to make any password manager your autofill service on Android

• Organizations face mounting pressure to accelerate AI plans, despite lack of ROI

• New iOS Security Feature Makes It Harder for Police to Unlock Seized Phones

• Scammer robs homebuyers of life savings in $20 million theft spree

• CISA, FBI Confirm China Hacked Telecoms Providers for Spying

• FBI confirms China-linked cyber espionage involving breached telecom providers

• 5 BCDR Oversights That Leave You Exposed to Ransomware

• Tesla Recalls 2,431 Cybertrucks Over Propulsion Issue

• Kids’ shoemaker Start-Rite trips over security again, spilling customer card info

• SSL Certificate Best Practices Policy

• Windows Zero-Day Exploited by Russia Triggered With File Drag-and-Drop, Delete Actions

• New PXA Stealer targets government and education sectors for sensitive information

• Chinese National Faces 20 Years of Jail Time for Laundering Millions in Crypto

• Google Unveils New Intelligent, Real-Time Protections for Android Users

• CEO: GenAI changes multi-cloud security, network equation

• More Spyware, Fewer Rules: What Trump’s Return Means for US Cybersecurity

• NatWest blocks bevy of apps in clampdown on unmonitorable comms

• Cybereason and Trustwave Announce Merger

• The Magic ITAM Formula for Navigating Oracle Java Licensing

• TikTok Pixel Privacy Nightmare: A New Case Study

• API Security in Peril as 83% of Firms Suffer Incidents

• Exploring the Security Risks of VR and AR

• US confirms China-backed hackers breached telecom providers to steal wiretap data

• Сrimeware and financial cyberthreats in 2025

• GoIssue Phishing Tool Reveals Hackers Set Sights on GitHub Users

• Asda security chief replaced, retailer sheds jobs during Walmart tech divorce

• Best 7 Compliance Risk Assessment Tools for 2024

• Red Hat Enterprise Linux 9.5 helps organizations simplify operations

• How a Windows zero-day was exploited in the wild for months (CVE-2024-43451)

• New RustyAttr Malware Targets macOS Through Extended Attribute Abuse

• Bank of England U-turns on Vulnerability Disclosure Rules

• Google to Issue CVEs for Critical Cloud Vulnerabilities

• Five Eyes infosec agencies list 2024’s most exploited software flaws

• Unpatched Flaw in Legacy D-Link NAS Devices Exploited Days After Disclosure

• Microsoft Data Security Index annual report highlights evolving generative AI security needs

• Volt Typhoon’s new botnet, China APT hits Tibet, DoD leaker sentenced

• SeeMetrics Unveils Automated Executive Reporting Solution for Cybersecurity Boards

• GitLab Patches Critical Flaws Leads to Unauthorized Access to Kubernetes Cluster

• The Dark Side of Google Searches: How Simple keywords can Lead to Cyber Threats

• Optimizing Active Directory Security: How Security Audits and Continuous Monitoring Enhance One Another

• Windows 0-Day Exploited in Wild with Single Right Click

• ESET Research Podcast: Gamaredon

• OnDMARC by Red Sift Alternatives: Top Alternatives and Competitors

• Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails

• Zero-days dominate top frequently exploited vulnerabilities

• How Intel is making open source accessible to all developers

• Google Cloud Cybersecurity Forecast 2025: AI, geopolitics, and cybercrime take centre stage

• Machine Identities Outnumber Human Ones: 69% of Companies Face Rising Security Risks”

• Cyware Attains FedRAMP Ready Status

• Horizon3.ai Debuts NodeZero Kubernetes Pentesting to Strengthen Critical Infrastructure Defense

• How cybersecurity failures are draining business budgets

• What 2025 holds for user identity protection

• Reminder: China-backed crews compromised ‘multiple’ US telcos in ‘significant cyber espionage campaign’

• Teen Behind Hundreds of Swatting Attacks Pleads Guilty to Federal Charges

• China-backed crews compromised ‘multiple’ US telcos in ‘significant cyber espionage campaign’

• Bitdefender released a decryptor for the ShrinkLocker ransomware

• ShrinkLocker ransomware scrambled your files? Free decryption tool to the rescue

• Microsoft brings AI to the farm and factory floor, partnering with industry giants

• Top Bot Attack Predictions for Holiday Sales 2024

Generated on 2024-11-15 23:55:05.679180