IT Security News Monthly Summary – August

• IT Security News Daily Summary 2023-07-31

• Experts discovered a previously undocumented initial access vector used by P2PInfect worm

• Understanding Data Protection: Best Practices for Keeping Your Information Safe

• MIT CSAIL unveils PhotoGuard, an AI defense against unauthorized image manipulation

• Reducing Generative AI Hallucinations and Trusting Your Data: Interview With Cognite CPO Moe Tanabian

• China’s Volt Typhoon APT Burrows Deeper into US Critical Infrastructure

• Protecting Intellectual Property When It Needs to Be Shared

• The White House Acknowledges the Pressure on Section 702, But Much More Reform is Needed

• Police Arrest Suspect in Crypto Millionaire’s Murder

• White House: Losing Section 702 spy powers would be among ‘worst intelligence failures of our time’

• Air-Gapped ICS Systems Targeted by Sophisticated Malware

• SEC demands four-day disclosure limit for cybersecurity breaches

• July 2023 Web Server Survey

• CISA details backdoor malware used in Barracuda ESG attacks

• Essential Types of Metrics to Boost Support for Your Cybersecurity Learning Program – Part 2

• Hikvision, Nvidia named in contract for ‘Uyghur detection’

• Reddit Taps Fredrick ‘Flee’ Lee for CISO Job

• Apple Lists APIs That Developers Can Only Use for Good Reason

• SpyNote Android Spyware Strikes Financial Institutions

• Abyss Locker Ransomware Looks to Drown VMware’s ESXi Servers

• Call of Duty Self-Spreading Worm Takes Aim at Player Lobbies

• Fleek Network Releases New Whitepaper for Decentralized Edge Platform

• APT31 Implants Target Industrial Organizations

• Israeli Oil Refinery Giant BAZAN Hit by Fresh Wave of Cyber Attacks

• 5 Essential Tips For Data Security On The Cloud

• Worldcoin Crypto Project Already Under Radar in Europe

• Kenya’s eCitizen Service Faces Downtime: Analyzing the Cyber-Attack

• Critical Cybercrime Hub’s Hacked Data Emerges for Sale on Underground Markets

• The Power of Automation in DevOps: Streamlining Software Development and Delivery

• Lenovo’s latest heavy on flash, security for enterprise storage

• Biden Announces National Cyber Workforce and Education Strategy

• RAM dump: Understanding its ­­­importance and the process

• Singapore government sees rise in security incidents amid increased data sharing

• UK Military Embraces Security by Design

• Ivanti fixes second zero-day exploited by attackers (CVE-2023-35081)

• Oracle unveils Cloud Native SCCA Landing Zone framework for the U.S. Department of Defense

• Dell introduces new offerings to accelerate secure generative AI initiatives

• How to make sure the reputation of your products and company is good

• U.S. Senator Blasts Microsoft for Chinese Hack Seeks Federal Action

• Ongoing STARK#MULE Attack Campaign Discovered

• Call of Duty worm malware used to hack players exploits years-old bug

• Was Pro-Russian Group Behind Kenya Cyber-Attack?

• Instead Of Warrants, The NSA Would Like To Keep Buying Your Data

• Unpatched Apache Tomcat Servers Spread Mirai Botnet Malware

• Second Ivanti EPMM Zero-Day Vulnerability Exploited In Targeted Attacks

• What Is an Exploit? Definition, Types, and Prevention Measures

• BAZAN Group, Israel’s Largest Oil Refinery, Had Its Website Hit by a DDoS Attack

• How to Migrate from a compromised Hosted Microsoft Exchange Service to Microsoft 365?

• New Android Malware Uses Optical Character Recognition to Steal Login Credentials

• Key Developer Concepts and Tools in Software Supply Chain Security

• How to Structure a Platform Team – An Illustrative Model

• Israeli Oil Refinery Taken Offline by Pro-Iranian Attackers

• Spend to save: The CFO’s guide to cybersecurity investment

• Best Practices for Enterprise Private 5G Security

• New P2PInfect Worm Targets Redis Servers with Undocumented Breach Methods

• Threat intelligence startup Cyble lands $24M investment

• Efficiency Unleashed: The Benefits of Intranet Software Solutions

• Experts link AVRecon bot to the malware proxy service SocksEscort

• Pentagon Looks Into ‘Critical Compromise’ of Air Force and FBI Contacts

• Summer Documentary Watch Party: 8 Sizzling Cybersecurity Tales

• Webinar: Riding the vCISO Wave: How to Provide vCISO Services

• Patchwork Hackers Target Chinese Research Organizations Using EyeShell Backdoor

• Multiple Chinese Hacker Outfits are Targeting Organisations Worldwide

• FakeTrade Android Malware Attack Steals Crypto Wallet Data

• Data Encryption Policy

• Locky Ransomware 101: Everything You Need to Know

• What Is an Exploit? Definition, Types and Prevention Measures

• Hikvision and Nvidia named in contract for Uyghur detection

• Peloton Treadmill Vulnerabilities Risk Users Data

• SEC Mandates Cyber Attack Disclosure Within Four Days: A Major Shift in Cybersecurity Transparency

• Security professionals unaware of NCSC Cyber Essentials framework – Lookout

• Why Inadequate Investment in Cybersecurity is a False Economy

• The Power of AI In Today’s Rapidly Evolving Financial Crime Landscape

• How to enable two-factor authentication on your Opera account

• Strengthening security in a multi-SaaS cloud environment

• Automatically Finding Prompt Injection Attacks

• Apple Strengthens App Store API Regulations To Curb User Fingerprinting

• New SEC Rules Require U.S. Companies To Reveal Cyber Attacks Within 4 Days

• Apple iOS, Google Android Patch Zero-Days in July Security Updates

• Salt Security Appoints Ori Bach as Executive Vice President of Product

• New persistent backdoor used in attacks on Barracuda ESG appliances

• Web browsing is the primary entry vector for ransomware infections

• Ministry of Defence Investigates Emails Sent To Russian Ally

• Tech Investors Flee China As Political Tensions Worsen

• Musk Says X Users Reach ‘New High’

• US Lawmakers Call For Stricter AI Chip Export Controls

• EU Launches Probe Into Spanish Ride-Hailing Restrictions

• CISA Analyzes Malware Used in Barracuda ESG Attacks

• Second Ivanti EPMM Zero-Day Vulnerability Exploited in Targeted Attacks

• Global Lawyers Unveil Cyber Best Practices for Execs

• Fruity Trojan Uses Deceptive Software Installers to Spread Remcos RAT

• AVRecon Botnet Leveraging Compromised Routers to Fuel Illegal Proxy Service

• DNS Security in Healthcare: The Gem in Your Cybersecurity Arsenal

• Think Tank: Insurers Not Fuelling Ransomware Market

• Three flaws in Ninja Forms plugin for WordPress impact 900K sites

• Ivanti Warns Of Another EPMM Zero-Day Flaw Under Attack

• Server Inventory Checklist

• How the best CISOs leverage people and technology to become superstars

• What would sustainable security even look like?

• CISA: New Submarine Backdoor Used in Barracuda Campaign

• Multiple Flaws Found in Ninja Forms Plugin Leave 800,000 Sites Vulnerable

• NIS-2: EU Directive Takes a Massive Step towards Increased Security

• Experts warn attackers started exploiting Citrix ShareFile RCE flaw CVE-2023-24489

• Software developers, how secure is your software?

• Cyber-Attacks Disrupt Kenyan Government Systems

• Silicon UK In Focus Podcast: The State of MedTech

• Healthcare Innovation: A Safe and Secure Approach

• Captcha security to end for Google and Apple users

• Curbing Mobile Malware with Zero Trust: Enhancing Mobile Security

• AI reduces data breach lifecycles and costs

• The race against time in ransomware attacks

• Open-source security challenges and complexities

• Relying on CVSS alone is risky for vulnerability management

• Data privacy vault: Securing sensitive data while navigating regulatory demands

• US senator victim-blames Microsoft for Chinese hack

• Instead of obtaining a warrant, the NSA would like to keep buying your data

• Officials bust illegal lab containing 20 infectious agents, hundreds of lab mice

• Devs aren’t allowed to let Apple’s Vision Pro dev kits out of their sight

• Most of the 100 million people who signed up for Threads stopped using it

• Thailand warns of escalating cybercrime

• IT Security News Weekly Summary – Week 30

• IT Security News Daily Summary 2023-07-30

• Unleashing FreedomGPT on Windows

• How CISOs can engage the C-suite and Board to manage and address cyber risk

• In 2022, more than 40% of zero-day exploits used in the wild were variations of previous issues

• Google’s Earthquake Alert System Failed to Notify Residents of Turkish Earthquake

• Here’s How to Safeguard Your Credit Card Info

• Tech Meets Healthcare: GoodRx’s Rewarding ‘Medicine Cabinet’ Promotes Medication Adherence

• Police Van Equipped with AI Can Detect if Drivers are Using Mobile Phones

• New flaw in Ivanti Endpoint Manager Mobile actively exploited in the wild

• Security Affairs newsletter Round 430 by Pierluigi Paganini – International edition

• Hackers Infect Call of Duty Players with Self-Spreading Malware

• Week in review: Ivanti zero-day exploited, MikroTik vulnerability could compromise 900,000 routers

• Cyber Security Management System (CSMS) for the Automotive Industry

• Building a Network Security Strategy: Complete Checklist To Protect Your Network

• CISA warns about SUBMARINE Backdoor employed in Barracuda ESG attacks

• Modern Warfare 2 Servers Were Offline Amid Malware Attack

• IT Security News Daily Summary 2023-07-29

• Now Abyss Locker also targets VMware ESXi servers

• HSI Seeks Public’s Help Following New Orleans Daycare Worker Arrest

• ChatGPT’s Plug-In Vulnerabilities

• Protecting energy infrastructure from cyberattacks

• FraudGPT: ChatGPT’s Evil Face

• Out of 50,000 Cybercrimes Reported in 6 Years, Only 23% Successfully Solved

• The Unyielding AI Challenge: Safeguarding Organizations in the Digital Era

• CERT-In Warns Against Mallox Ransomware Targeting Unsecured MS SQL Servers

• Original BreachForums Breached, PII Data of 210K Users Sold Online

• ‘Call of Duty: Modern Warfare 2’ Players Hit With Worm Malware

• Lawmakers Accuse Facebook Of Censoring Americans After White House Pressure

• CISA’s security-by-design initiative is at risk: Here’s a path forward

• 41 Zero-days Exploited In-the-Wild in 2022 – Google Report

• Why Dwell Time is the Biggest Threat to Security Operations Center (SOC) Teams in 2023

• A Look into The Future: My Journey at the 2023 RSA Conference and The Exciting, Yet Troubling Path of Cybersecurity Innovation

• Is backdoor access oppressive? – Week in security with Tony Anscombe

• Security Serious Unsung Heroes Awards 2023 Open for Nominations

• New Android Malware CherryBlos Utilizing OCR to Steal Sensitive Data

• Build or Buy your own antivirus product

• Google: 0-Day vulnerabilities down in 2022, but still higher than average

• Apple Sets New Rules for Developers to Prevent Fingerprinting and Data Misuse

• RFP Template for Browser Security

• Hackers Deploy “SUBMARINE” Backdoor in Barracuda Email Security Gateway Attacks

• Ivanti Warns of Another Endpoint Manager Mobile Vulnerability Under Active Attack

• Mobile Device Management: Securing the modern workplace

• Stories from the SOC: OneNote MalSpam – Detection & response

• Florida man accused of hoarding America’s secrets faces fresh charges

• Millions of people’s data stolen because web devs forget to check access perms

• Zimbra issues awaited patch for actively exploited vulnerability

• Thoughts on Tool Features, pt II

• Russian APT BlueBravo targets diplomatic entities with GraphicalProton backdoor

• BlackBerry announces participation in Cybertech Africa

• N. Korean Lazarus Group Suspected in $37.3M CoinsPaid Crypto Heist

• How to Use NordVPN Meshnet for Free

• IT Security News Daily Summary 2023-07-28

• OpenAI, Microsoft, Google, Anthropic Launch Frontier Model Forum to Promote Safe AI

• Friday Squid Blogging: Zaqistan Flag

• Choose the Best Biometrics Authentication for Your Use Case

• Senator Blasts Microsoft for Negligence in 365 Email Breach

• Stark#Mule Malware Campaign Targets Koreans, Uses US Army Documents

• CherryBlos Malware Uses OCR to Pluck Android Users’ Cryptocurrency

• Hack Crew Responsible for Stolen Data, NATO Investigates Claims

• A Successful IGA Deployment is a Journey, Not a Destination

• Zimbra Patched An XSS Zero-Day Vulnerability Under Active Attack

• Android’s new ‘unknown tracker alerts’ can help warn users of rogue Apple AirTags

• FBI boss: Congress must renew Section 702 spy powers – that’s how we get nearly all our cyber intel

• Chinese companies evade sanctions, fuel Moscow’s war on Ukraine, says report

• HackerOne: How Artificial Intelligence Is Changing Cyber Threats and Ethical Hacking

• Another AI Pitfall: Digital Mirroring Opens New Cyberattack Vector

• Government Needs Both the Ability to Talk to Social Media Platforms and Clear Limits, EFF Argues in Brief to Appellate Court

• Malvertising Attack Drops BlackCat Ransomware via Fake Search Results

• Improve IAM with identity threat detection and response

• Intersection of generative AI, cybersecurity and digital trust

• How to Prioritize Vulnerabilities Effectively: Vulnerability Prioritization Explained

• DNS Protection: A Must-Have Defense Against Cyber Attacks

• ‘Verified human’: Worldcoin Users Crowd for Iris Scans

• national identity card

• Incident Response Plan: What It Is and How to Build One

• Hackers Attack Apache Tomcat Servers to Deploy Malware

• In Other News: Data Breach Cost Rises, Russia Targets Diplomats, Tracker Alerts in Android

• US, Australia Issue Warning Over Access Control Vulnerabilities in Web Applications

• UK MoD Error Sends Emails to Russia’s Ally Instead of US

• Programme for International Cyber Expo’s Global Cyber Summit 2023 Announced

• Hacker Using Google and Bing ads to Deliver Weaponized IT tools

• The best AirTag wallets of 2023: Secure your cash

• New Study Reveals Forged Certificate Attack Risks

• MOVEit latest: US Government services provider Maximus hit

• Challenge Arising From the ChatGPT Plugin

• ChatGPT boss wants to scan eyeballs of billions amid AI privacy concerns

• 40% of Ubuntu Cloud Workloads Vulnerable to Exploits

• What is Managed Detection and Response (MDR)? Benefits & Capabilities

• 40,000 HRM Enterprises Clients Had Their Credit Card Information Stolen Following Cyberattack

• Zenbleed: Security Flaw Steals Data from AMD Zen 2 CPUs

• Corporate Data Heist: Infostealer Malware Swipes 400,000 Credentials in a Record Breach

• SentinelOne unveils cloud data security products for Amazon S3, NetApp

• Industry Reactions to New SEC Cyber Incident Disclosure Rules: Feedback Friday

• Exploitation of Recent Citrix ShareFile RCE Vulnerability Begins

• Microsoft Accused of Negligence in Recent Email Compromise

• Employees are Feeding Sensitive Data to ChatGPT, Prompting Security Concerns

• Crypto Fraud Prevention and E-commerce Fraud Detection: Safeguarding the Digital Economy

• compliance audit

• IT Ops and Security Teams Need Automation, Not Couples Therapy

• IcedID Malware Adapts and Expands Threat with Updated BackConnect Module

• NATO Probes Hacktivist Crew’s Boasts Of Stolen Data

• MOVEit Bug Tied To Breach Of Up To 11M Records Via Govt Contractor

• US Senator Blasts Microsoft For Negligent Cybersecurity Practices

• Exploitation Of Recent Citrix ShareFile RCE Vulnerability Begins

• STARK#MULE Targets Koreans with U.S. Military-themed Document Lures

• Baffle Advanced Encryption analyzes regulated data while meeting all compliance standards

• Zimbra Patches Exploited Zero-Day Vulnerability

• Australia and US Issue Warning About Web App Threats

• Cyclops Launches From Stealth With Generative AI-Based Search Tool

• Citrix expands cloud and on-premises capabilities to support the needs of hybrid customers

• Mark Zuckerberg Admits More Than Half Of Users Have Left Threads

• Evolving Data Strategy at Major Canadian Bank

• The rise of malicious Chrome extensions targeting Latin America

• Hackers Abusing Windows Search Feature to Install Remote Access Trojans

• A Data Exfiltration Attack Scenario: The Porsche Experience

• What Is Secure Remote Access?

• Data Leak Exposes 572 GB of Student, Faculty Info from Accreditation Org

• Cyber insurance audit: Painful necessity, or a valuable opportunity?

• New Zenbleed Attack Threatens AMD Zen2 CPUs – Patch released

• AMD To Invest $400m In India Over Five Years

• Weintek Weincloud Vulnerabilities Allowed Manipulation, Damaging of ICS Devices

• CoinsPaid Blames North Korean Hackers for $37 Million Cryptocurrency Heist

• WhatsApp’s New Record Feature Lets You Record And Send Short Videos In Chats

• Dark Power Ransomware Abusing Vulnerable Dynamic-Link Libraries in Resolved API Flow

• U.S. Government Contractor Maximus Hit by Massive Data Breach

• The Road to Redemption: Ransomware Recovery Strategies for Businesses

• Campaign Finance Charge Against FTX’s Sam Bankman-Fried Dropped

• CoinsPaid blames North Korea-linked APT Lazarus for theft of $37M worth of cryptocurrency

• BlueBravo Deploys GraphicalProton Backdoor Against European Diplomatic Entities

• Anomaly detection in certificate-based TGT requests

• The lost art of cloud application engineering

• SSNDOB Marketplace Admin Pleads Guilty

• Related CherryBlos and FakeTrade Android Malware Involved in Scam Campaigns

• North Korean Hackers Bag Another $100m in Crypto Heists

• MOVEit Campaign Claims Millions More Victims

• Monitor Insider Threats but Build Trust First

• Data Loss Prevention for Small and Medium-Sized Businesses

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Microsoft and Samsung launch Advanced Mobile Security Solution

• How to Spot Whaling Attacks: Safeguarding Against Targeted Cyber Threats

• Akira Ransomware Expands to Linux with In-built Tor Website

• Cybersecurity Agencies Warn Against IDOR Bugs Exploited for Data Breaches

• Major Security Flaw Discovered in Metabase BI Software – Urgent Update Required

• New infosec products of the week: July 28, 2023

• ZTNA can be more than a VPN replacement for application access

• Effectively managing security budgets in a recession

• Get the AT&T Cybersecurity InsightsTM Report: Focus on Healthcare

• National Cyber Strategy Implementation Plan: What you need to know

• Blocking access to ChatGPT is a short term solution to mitigate risk

• CISOs consider zero trust a hot security ticket

• Credit Card Fraud Prevention: 12 Tips to Protect Yourself

• Cybersecurity in the Age of Remote Work: Best Practices for Businesses

• New SEC Rules Require Breach Disclosure within Four Days

• Enhance Productivity with Canon’s New B&W All-in-One Laser Printers

• Google: 41 zero-day vulnerabilities exploited in 2022

• Why CISOs Should Get Involved With Cyber Insurance Negotiation

• Patch now! Ivanti Endpoint Manager Mobile Authentication vulnerability used in the wild

• Funding for Cybersecurity Startups Plunges – But Some Still Get Deals

• How to connect with Microsoft Security at Black Hat USA 2023

• How scammers used SEO to disguise themselves as an electric utility

• NATO probes hacktivist crew’s boasts of stolen portal data

• Cl0p Ransomware Strikes Deloitte, Company Refutes Breach

• Despite Post-Log4J Security Gains, Developers Can Still Improve

• US, Australia cyber agencies warn IDOR security flaws can be exploited ‘at scale’

• Zimbra fixed actively exploited zero-day CVE-2023-38750 in ZCS

• How researchers broke ChatGPT and what it could mean for future AI development

• CompTIA ChannelCon Technology Vendor Fair Highlights Tech Solutions

• 7 in 10 MSPs Name Data Security and Network Security As Their Top IT Priorities for 2023

• Healthcare files of 8M-plus people fall into hands of Clop via MOVEit mega-bug

• IT Security News Daily Summary 2023-07-27

• Millions of People Affected in MOVEit Attack on US Gov’t Vendor

• Ryanair Hit With Lawsuit Over Use of Facial Recognition Technology

• Deloitte, Maximus, Chuck E. Cheese join 500+ orgs as MOVEit attack victims

• Can AI detectors save us from ChatGPT? I tried 5 online tools to find out

• The NSA Is Lobbying Congress to Save a Phone Surveillance ‘Loophole’

• How a Cyber Security Platform Addresses the 3 “S”

• US Senator Wyden Accuses Microsoft of ‘Cybersecurity Negligence’

• Vulnerabilities exposed Peloton treadmills to malware and DoS attacks

• Deloitte and Chuck E. Cheese join 500+ orgs as MOVEit victims

• Microsoft responsible for China’s U.S. government email hack, Senator Wyden says

• BlueHat October 2023 Call for Papers is Now Open!

• Benefits of hiring a Java web application development company

• 7 Best Cloud Security Posture Management (CSPM) Software for 2023

• Group-IB Co-Founder Sentenced to 14 Years in Russian Penal Colony

• Deja Vu: The FBI Proves Again it Can’t be Trusted with Section 702

• Think tank calls for monitoring of Chinese AI-enabled products

• Bipartisan Bill Seeks New US Tech Regulator

• Israeli-Trained Azerbaijan Cyber Students Mark Inaugural Graduation

• Laptops will need to support growing AI and security priorities, says Lenovo

• S3 Ep145: Bugs With Impressive Names!

• DepositFiles exposed config file, jeopardizing user security

• Maryland Supreme Court: Police Can’t Search Digital Data When Users Revoke Consent

• What Happens When an AI Company Falls Victim to a Software Supply Chain Vulnerability

• Ubuntu Linux Cloud Workloads Face Rampant Root Take Takeovers

• What Will CISA’s Secure Software Development Attestation Form Mean?

• The Ups and Downs of 0-days: A Year in Review of 0-days Exploited In-the-Wild in 2022

• What your peers want to know before buying a DLP tool

• The human element of Cybersecurity: Nurturing a cyber-aware culture to defend against social engineering attacks

• EU Investigates Microsoft Over Teams Bundling With Office

• Security Incident Impacts CardioComm’s Operations

• Group-IB CEO Ilya Sachkov sentenced to 14 years in a strict prison colony

• Critical Privilege Escalation Flaw Risks 900K+ MikroTik Routers

• Microsoft Message Queuing Service Flaw Allows DoS and RCE Attacks

• Multiple Security Issues Identified in Peloton Fitness Equipment

• Watch Now: Exposing Common Myths of OT Cybersecurity

• TSA Updates Pipeline Cybersecurity Requirements

• Head of US Cybersecurity Agency Sees Progress on Election Security, With More Work Needed for 2024

• European Threat Intelligence Firm QuoIntelligence Raises $5.5 Million in Seed Funding

• China’s Wuhan Earthquake Center Suffers Cyber-Attack

• High Severity Vulnerabilities Discovered in Ninja Forms Plugin

• Android will now warn about unknown Bluetooth trackers, like AirTag, traveling with you

• Seraphic extends enterprise browser security to collaboration apps

• Palo Alto Networks unveils CI/CD Security module to improve risk prevention

• US SEC makes it mandatory to report cyber attack within 4 days

• Samsung Extends Chip Production Cuts After $7 Billion Loss

• Iranian Stalkerware ‘Spyhide’ Steals Data from 60,000 Android Devices

• The best home security systems of 2023: Ring, Simplisafe, and more compared

• The best home automation systems of 2023

• “Mysterious Elephant” Emerges, Kaspersky Reports

• Wormhole digs out of its hole with new security measures to move on from $320M hack

• Microsoft must be held responsible for China’s U.S. government email hack, Senator Wyden demands

• Singapore Explores Generative AI Use Cases Through Sandbox Options

• Stolen Session Cookies Turns Into the Next Cyber Threat

• Exposed Secrets: Backdoor Vulnerabilities in Worldwide Radio Systems

• SolarWinds Platform 2023.3 Released – What’s New!

• SEC requires reporting cyberattacks within 4 days, but not everyone may like it.

• 4 Most Dangerous and Destructive Ransomware Groups of 2023

• Two New Vulnerabilities Could affect 40% of Ubuntu Cloud Workloads

• The Good, the Bad and the Ugly of Generative AI

• SkyKick Cloud Management Platform upgrades enhance data protection capabilities

• Island appoints Steve Tchejeyan as President

• N2WS Backup and Recovery enhancements strengthen AWS workload protection

• Notorious Lazarus Hacking Outfit Linked to a $60 Million Alphapo Crypto Theft

• Explaining risk maturity models and how they work

• Why Today’s CISOs Must Embrace Change

• New Malvertising Campaign Distributing Trojanized IT Tools via Google and Bing Search Ads

• GameOver(lay): Two Severe Linux Vulnerabilities Impact 40% of Ubuntu Users

• Hackers are infecting Call of Duty players with a self-spreading malware

• Two New Vulnerabilities Could Affect 40% Of Ubuntu Cloud Workloads

• Axis Door Controller Vulnerability Exposes Facilities to Threats

• Infostealer Incidents More Than Doubled In Q1 2023

• The UFO Hearing Got Pretty Interesting

• Russia Throws Group-IB Founder In The Clink For Treason

• Top 7 ecommerce cybersecurity threats and tips to avoid them

• PDF Malware Distribution Has Increased by 500%, as Reported by VirusTotal

• How credential stuffing works (and how to stop it)

• Decentralized Identity Puts People In Control Of Their Data

• Cyberattack Investigation Shuts Down Ambulance Patient Records System

• Insights from the cybersecurity trenches: Security is essential as a defensive strategy, but it’s also good for business

• Settling for the bare minimum is jeopardising your business’ cyber safety

• AXIS A1001 Network Door Controller Flaw Exposes Secure Facilities

• Axis Door Controller Vulnerability Exposes Facilities to Physical, Cyber Threats

• CardioComm Takes Systems Offline Following Cyberattack

• Egnyte’s AI-powered solutions empower users to classify and protect sensitive data

• AXIS A1001 System Flaws Expose Secure Facilities to Unauthorized Access

• US government contractor says MOVEit hackers accessed health data of ‘at least’ 8 million individuals

• The Future of Web Development: Predictions and Possibilities

• Up to 11 Million People Hit by MOVEit Hack at Government Services Firm Maximus

• OpenAI, Microsoft, Google and Anthropic Form Body to Regulate AI

• The 4 Keys to Building Cloud Security Programs That Can Actually Shift Left

• Takeaways From Perception Point’s “H1 2023 Report: Cybersecurity Trends & Insights”

• Protect AI raises $35 million to help organizations build safer AI

• Harnessing Technology For Research In Essay Writing

• The Next Evolution of Devsecops For The Defense Department

• Cyberattack Impacts Two Ambulance Services

• Fooling an AI Article Writer

• Over 40% of Ubuntu Users Vulnerable to Privilege Escalation Flaw

• Group-IB Co-Founder Sentenced to 14 Years in Russian Prison for Alleged High Treason

• Hackers Target Apache Tomcat Servers for Mirai Botnet and Crypto Mining

• Ivanti Mobile Management Software Zero-Day Under Active Attack

• Fake Games Deliver Redline, Realst Malware On Windows and Mac

• Facebook Parent Meta Profits From Advertising Increase

• Companies Required by SEC to Disclose Cybersecurity Incidents in 4 Days

• APT trends report Q2 2023

• Is a Chat GP Coming?

• Tripwire Enterprise: Reimagining a Winning Product

• NCSC Publishes New Guidance on Shadow IT

• Dear all, What are some common subject lines in phishing emails?

• Gathering dust and data: How robotic vacuums can spy on you.

• Supply Chain Attack Hits NHS Ambulance Trusts

• SEC Wants Cyber-Incident Disclosure Within Four Days

• Do you know what your supply chain is and if it is secure?

• Rust Infostealer Malware Attacks macOS Sonoma Ahead of Public Release

• New SEC Rules Require U.S. Companies to Reveal Cyber Attacks Within 4 Days

• Thales partners with Hint AG to provide managed security services for the Swiss healthcare sector

• Two flaws in Linux Ubuntu affect 40% of Ubuntu users

• How to migrate your Bitwarden vaults from US to EU storage

• Hacker-Attacking Developers Using Weaponized MS Visual Studio

• Are we getting close to the mass adoption of digital IDs?

• Data Security firm Imperva to be acquired by Thales for $3.5 billion

• Key factors for effective security automation

• Why are computer security guidelines so confusing?

• A step-by-step guide for patching software vulnerabilities

• Cryptojacking soars as cyberattacks increase, diversify

• UAC: Live response collection script for incident response

• CISOs gear up to combat the rising threat of B2B fraud

• User Awareness Training: A Critical Component to Collaboration Tool Security

• Companies Must Have Corporate Cybersecurity Experts, SEC Says

• Thoughts on Tool Features

• Wiz Says 62% of AWS Environments Exposed to Zenbleed Exploitation

• Ransomware groups claim responsibility for double-attack on Yamaha

• 60,000 Androids have stalkerware-type app Spyhide installed

• Crooks pwned your servers? You’ve got four days to tell us, SEC tells public companies

• Group-IB Founder Ilya Sachkov Jailed for 14 Years in Russia

• BreachForums – 212,156 breached accounts

• Empowering Future Minds: The Indispensable Role of Coding for Kids

• SE Labs Unveils Latest Comparative Analysis of Endpoint Detection and Response Products

• Rezilion Uncovers High-Risk Vulnerabilities Missing From CISA KEV Catalog

• Coro Acquires Network Security Startup Privatise

• IT Security News Daily Summary 2023-07-26

• SEC Adopts New Rule on Cybersecurity Incident Disclosure Requirements

• Massive macOS Campaign Targets Crypto Wallets, Data

• ‘Nitrogen’ Ransomware Effort Lures IT Pros via Google, Bing Ads

• Russia throws founder of infosec biz Group-IB in the clink for treason

• From Vulnerability to Vigilance: How Mobile App Evolution Influenced Security Mindsets

• ETSI Dismisses Claims of ‘Backdoor’ Vulnerabilities in TETRA Standard

• The U.K. Government Is Very Close To Eroding Encryption Worldwide

• Following WormGPT, FraudGPT Emerges for AI-Driven Cyber Crime

• Two ambulance services in UK lost access to patient records after a cyber attack on software provider

• Flipper Zero Launched “Apps Hub” As A Third-Party App Store

• SEC adopts new cybersecurity incident disclosure rules for companies

• International Rights Groups to Thierry Breton: You Need to Make Clear That Under the DSA States Can’t Shut Down the Internet as Punishment for Hateful Content on Platforms

• 6 Best Practices To Protect Your Company From Data Loss

• Lazarus Hackers Target Microsoft IIS Servers to Propagate Malware

• Listed US Firms Must Disclose Cyber Breaches In Four Days

• Security hygiene and posture management: A work in progress

• Russia Sends Cybersecurity CEO to Jail for 14 Years

• Ex-NSA Official Harry Coker Tapped for National Cyber Director Job

• Future careers: how to make it in biometrics

• How to improve employee phishing awareness

• Unveiling the secrets: Exploring whitespace steganography for secure communication

• Repeatable VEC Attacks Target Critical Infrastructure

• Virgin Media O2 To Axe 2,000 UK Jobs

• Apple Mulls Price Rise For iPhone Pro – Report

• VMware Patches Vulnerability Exposing Admin Credentials

• Peloton Bugs Expose Enterprise Networks to IoT Attacks

• Source: CrowdStrike is close to acquiring Bionic.AI for between $200M and $300M

• Terrestrial Trunked Radio System Vulnerable to Leakage and Message Injection

• BlackCat Attackers Target Italian Asset Manager Azimut

• Google Cloud’s Security Strategy: Emphasizing ‘Secure by Design’ and ‘Secure by Default’

• Travel HACK: Why you Should not Share Photos of Your Boarding Pass Online

• Security Breach: Clearweb Sites Attacked by MOVEit, Data Exposed

• VirusTotal Malware Trends Report: Emerging Formats and Delivery Techniques

• Group-IB Founder Sentenced in Russia to 14 Years for Treason

• Experts Warn About Privacy Issues With Facebook-Owned Threads App

• Source: Crowdstrike is close to acquiring Bionic.AI for between $200M and $300M

• SeeMetrics Security Performance Boards empowers CISOs to validate security programs

• EndaceProbe Cloud detects threats and network performance issues

• SentinelOne introduces cloud data security products

• Cyber Attack news headlines trending on Google

• OWASP ModSecurity Core Rule 3.3.5 Released – What’s New!

• Dark Web Markets Offer New FraudGPT AI Tool

• Cyclops Emerges From Stealth With Security Search Platform Powered by Generative AI

• Alphabet CFO Steps Aside, As Q2 Profit Beats Expectations

• QRadar SIEM reduces incident investigation time by 90%

• 4 Essential Elements for a Comprehensive Cloud Security Stack

• Dozens of Organizations Targeted by Akira Ransomware

• Microsoft Message Queuing Vulnerabilities Allow Remote Code Execution, DoS Attacks

• FraudGPT, a new malicious generative AI tool appears in the threat landscape

• Australian Home Affairs Leaks Sensitive Information Of Cybersecurity Survey Respondents

• Clear Skye IGA 5.0 optimizes identity security and business processes on ServiceNow

• DataGrail unveils Managed Services offering for data privacy

• MikroTik vulnerability could be used to hijack 900,000 routers (CVE-2023-30799)

• Talon Extension enhances security and control over browser activity

• Kubernetes and the Software Supply Chain

• Decoy Dog: New Breed of Malware Posing Serious Threats to Enterprise Networks

• Dozens Of Organizations Targeted By Akira Ransomware

• Crypto Bills To Face Congressional Committee Vote

• New AI Phishing Tool FraudGPT Tied To Same Group Behind WormGPT

• FraudGPT: A New Dark Side AI Tool For Cyber Criminals

• Thales Agrees to Buy App Security Vendor Imperva in $3.6B Deal

• Threat Intelligence Is Growing — Here’s How SOCs Can Keep Up

• Congress Is About To Stream UFO Hearings On YouTube At 10AM EST

• Cyclops raises $6.4M in seed funding to launch AI-powered cybersecurity search platform

• Protect AI raises $35M to expand its AI and machine learning security platform

• Code Execution Vulnerability Impacts 900k MikroTik Devices

• Russian Cybersecurity Firm Founder Jailed for 14 Years

• Webinar Today: Exposing Common Myths of OT Cybersecurity

• CardioComm, a provider of ECG monitoring devices, confirms cyberattack downed its services

• Protect AI raises $35M to build a suite of AI-defending tools

• Darktrace HEAL provides security teams with abilities to simulate real-world cyber incidents

• BreachRx Cyber RegScout helps legal and compliance professionals eliminate manual processe

• Rise of Bossware: Balancing Workplace Surveillance and Employee Privacy

• Trustmi lands $17M to scale its payments fraud prevention tech

• CISA adds Ivanti EPMM flaw to its Known Exploited Vulnerabilities catalog

• Norwegian Government`s System Breached over Ivanti EPMM Zero-Day

• Microsoft Signals Heavy AI Spending, Amid Healthy FY23 Results

• Dynatrace expands Davis AI engine to boost productivity across teams

• Critical MikroTik RouterOS Flaw Exposes 900,000 Systems to Cyber Attacks

• CISO Conversations: Field CISOs From VMware Carbon Black and NetSPI

• Twitter Scammers Stole $1,000 From My Friend—So I Hunted Them Down

• Fenix Cybercrime Group Poses as Tax Authorities to Target Latin American Users

• The Alarming Rise of Infostealers: How to Detect this Silent Threat

• Backdoor in TETRA Police Radios

• Ransomware Attacks Skyrocket in Q2 2023

• Norway government ministries hit by cyber attack

• New AI Tool ‘FraudGPT’ Emerges, Tailored for Sophisticated Attacks

• Over 500K MikroTik RouterOS systems potentially exposed to hacking due to critical flaw

• Meta, Microsoft Own Trademarks For New Twitter Name

• Checklist: Securing Digital Information

• Learn How to Protect Your Business With Ultimate Security for $80

• Education Sector Has Highest Ransomware Victim Count

• Yamaha Confirms Cyber Attack on Its Canadian Division

• New Vulnerability Puts 926,000 MikroTik Routers at Risk! Users Urged to Patch

• Ambulance patient records system hauled offline for cyber-attack probe

• Dear all! What are some common subject lines in phishing emails?

• Enhanced Data Analysis with Synthetic Datasets

• Understanding Machine Learning Attacks, Techniques, and Defenses

• Over 900,000 MikroTik Routers Exposed to Critical Bug

• Industry Coalition Calls For Enhanced Network Resilience

• Transforming Your Phone into an Intercom: Harnessing Alexa’s Power for Seamless Communication

• Rust-based Realst Infostealer Targeting Apple macOS Users’ Cryptocurrency Wallets

• Why performing security testing on your products and systems is a good idea

• Sneaky Python package security fixes help no one – except miscreants

• Cyber Attack on Norway govt websites identified to Ivanti Security vulnerability

• What is an SSL stripping attack

• DarkSide Ransomware: Definition and Prevention Tips

• Ivanti plugs critical bug – but not before it was used against Norwegian government

• Critical MikroTik RouterOS Vulnerability Exposes Over Half a Million Devices to Hacking

• Overcoming the cybersecurity talent shortage with upskilling initiatives

• Enterprises should layer-up security to avoid legal repercussions

• Companies encounter months-long delays in filling critical security positions

• Zero trust rated as highly effective by businesses worldwide

• Product showcase: Stellar Toolkit for Exchange – Restore Exchange Database

• Mitigating generative A.I. risks: ‘Fight innovation with innovation,’ says identity security firm

• 2023-07-25 – IcedID (Bokbot) from wave of malspam on 2023-07-24

• Zenbleed: How the quest for CPU performance could put your passwords at risk

• i-PRO: How to Advance Cybersecurity with Secure Element & FIPS

• Tampa General Hospital half thwarts ransomware attack, but still loses patient data

• How to set up computer security for your parents

• Update now! Apple fixes several serious vulnerabilities

• Palo Alto Networks Secures Black Hat from Itself

• Atlassian addressed 3 flaws in Confluence and Bamboo products

• Why computer security advice is more confusing than it should be

• IT Security News Daily Summary 2023-07-25

• SiegedSec Hacktivist Claims to Strike NATO and Leak Sensitive Docs

• Apple patches exploited bugs in iPhones plus other holes

• Who and What is Behind the Malware Proxy Service SocksEscort?

• Decoy Dog Gets an Upgrade With New Persistence Features

• KnowBe4 Phishing Test Results Reveal Half of Top Malicious Email Subjects Are HR Related

• 50% of Zero Trust Programs Risk Failure According to PlainID Survey

• Why Computer Security Advice Is More Confusing Than It Should Be

• ChatGPT Has a Plug-In Problem

• What is Incident Response? Ultimate Guide + Templates

• Zero-Day Vulnerabilities Discovered in Global Emergency Services Communications Protocol

• FBI Seizure of Mastodon Server is a Wakeup Call to Fediverse Users and Hosts to Protect their Users

• Thoma Bravo sells Imperva to Thales Group for $3.6B

• VMware addressed an information disclosure flaw in VMware Tanzu Application Service for VMs and Isolation Segment

• Explainability of Machine Learning Models: Increasing Trust and Understanding in AI Systems

• Stay Vigilant: Google Docs Phishing Scams Spreading Rapidly

• Human Error: A Helping Hand for Cyber Criminals

• Webinar Tomorrow: Exposing Common Myths of OT Cybersecurity

• Ivanti EPMM zero-day vulnerability exploited in wild

• Lazarus APT Group Targets Windows IIS Web Servers to Distribute Malware

• Get 8 Months of Live Cyber Security Training for Under $500

• Ivanti Zero-Day Exploit Disrupts Norway’s Government Services

• ChatGPT Has a Plugin Problem

• How to build stronger security teams

• Cryptojacking: Understanding and defending against cloud compute resource abuse

• Database APIs: Benefits, Limitations, and When You Should Switch to Datasets

• 4 ways to avoid clicking malicious links that everyone online should know

• Maritime Cyberattack Database Launched by Dutch University

• Decoy Dog Malware Upgraded to Include New Features

• Essential Metrics to Boost Support for Your Cybersecurity Learning Program – Part 1

• Cybercrime as a Public Health Crisis

• Ransomware business model-What is it and how to break it?

• How to Leverage AWS Performance Efficiency Pillar

• TETRA Radio Standard Vulnerabilities Can Expose Military Comms, Industrial Systems

• Actively Exploited Apple Zero-Day Affects iPhone Kernel

• Groundbreaking Integration: Stellar Cyber Safeguards OT Environments Alongside IT

• North Korean Cyber Group Suspected in JumpCloud Breach

• Google limits internet access to employees to save them from Cyber Attacks

• Critical Flaws Found in Microsoft Message Queuing Service

• ZEDEDA improves application performance and security with Edge Application Services

• NETSCOUT introduces next generation Omnis Cyber Intelligence solution

• Zenbleed – AMD’s Zen2 Processor Flaw Allows Attackers to Steal Sensitive Data

• North Korean Nation-State Actors Exposed in JumpCloud Hack After OPSEC Blunder

• Open Source Software Supply Chain Attacks Spotted Targeting the Banking Sector

• Yoga Trainer Defrauded of Rs.94,998 in a Paytm Fraud

• 5 steps to approach BYOD compliance policies

• Panorays unveils cybersecurity enhancements for supply chains

• Lookout releases new endpoint agents to replace virtual private networks

• Dig Data Security Platform enhancements secure LLM architectures

• How Generative AI Affects Mobile Security

• Beyond ChatGPT: Organizations Must Protect Themselves Against the Power of AI

• AMD Zenbleed Chip Bug Leaks Secrets Fast And Easy

• Apple Patches Another Kernel Flaw Exploited In Operation Triangulation

• China-Backed Hackers Suspected In NetScaler RCE Attacks

• Ivanti Zero-Day Vuln Exploited In Attack On Norwegian Government

• Critical Vulnerabilities in AMI MegaRAC BMC Software

• Canadian Cybersecurity Head Warns of Surging AI-Powered Hacking and Disinformation

• Vulnerability Summary for the Week of July 17, 2023

• Combining EPP and EDR tools can boost your endpoint security

• Thales Acquiring Imperva From Thoma Bravo for $3.6 Billion

• Casbaneiro Banking Malware Goes Under the Radar with UAC Bypass Technique

• AMD CPU Vulnerability ‘Zenbleed’ Can Expose Sensitive Information

• UK Government Report Finds Cybersecurity Skills Gap Stagnant

• Ivanti zero-day exploited to target Norwegian government (CVE-2023-35078)

• OpenText Cloud Editions 23.3 helps customers interconnect and exchange insights across clouds

• How Memcyco Battles Brandjacking with a Multi-Layered Defense

• Hackers Use SMS Alerts to Install SpyNote Malware

• Zenbleed: New Flaw in AMD Zen 2 Processors Puts Encryption Keys and Passwords at Risk

• How MDR Helps Solve the Cybersecurity Talent Gap

• TETRA:BURST — 5 New Vulnerabilities Exposed in Widely Used Radio Communication System

• macOS Under Attack: Examining the Growing Threat and User Perspectives

• Ivanti rushes to patch zero-day used to breach Norway’s government

• Patch Tuesday July 2023 – Microsoft Publishes Bug Fixes for 142 Vulnerabilities [UPDATED]

• What Is Mobile Device Management? Role in Endpoint Security and Benefits

• Energy-Saving Heroes: Eco-Friendly Home Appliances for a Sustainable Future

• Traversing the Investment Landscape: The Vital Role of Venture Capitalists

• Critical Flaws Exposed Microsoft Message Queuing Service to DoS Attacks

• ‘SIM Swapper’ Pleads Guilty For Hacking Instagram User Accounts

• An Interview with Sarah Armstrong-Smith

• Critical Flaws Exposed Microsoft Message Queuing Service to DoS Attack

• How to Create a Custom Security & Threat Dashboard in Power BI

• ChatGPT Plugins Pose Security Risks

• Thales enters app security market with $3.6B Imperva acquisition

• Protect Your Data Like Your Reputation Depends On It (Because it Does)

• Silicon Insights: The State of MarTech: Part 2

• ‘SIM Swapper’ Pleads Guilty to Hacking into Instagram Users

• Sysdig Sage brings power of generative AI to cloud security with an LLM controller approach

• Hacker Claims to Have Stolen Sensitive Medical Records from Egypt’s Ministry of Health

• TETRA Communication Systems Vulnerabilities Expose Critical Infrastructure

• Worldcoin Holds Official Launch Amidst Crypto Crackdown

• 15 More Vulnerabilities Added to 2023 CWE Top 25 Most Dangerous Software

• Operation Geometrix Do Brasil

• Ivanti Zero-Day Vulnerability Exploited in Attack on Norwegian Government

• Deciphering the IBM Cost of a Data Breach Report: A Statistical Perspective for Business Leaders

• Decoding the PlainID Zero Trust Survey: Key Insights for Business Leaders

• Thales acquires Imperva for $3.6 billion

• Apple fixes exploited zero-day in all of its OSes (CVE-2023-38606)

• SoftBank In Deal With Symbiotic For AI-Powered Warehouses

• EU ‘Set For In-Depth Probe’ Of $20bn Adobe-Figma Buy

• Aussie Government Exposed Personal Info Via Security Report

• EU Agrees on Common Position for Cyber Resilience Act to Enhance Security of Digital Products

• How to Develop a Telemedicine Software in 2023

• ATT&CKing the Center for Internet Security

• CISO to BISO – What’s your next role?

• Ivanti Patches Zero-Day Bug Used in Norway Attacks

• Is the UK about to steal a lead in the AI race?

• Google Ordered To Pay $338.7m Over Chromecast Patents

• Tesla ‘Meeting With Indian Govt’ Over Car Plant

• Data Breach Costs Hit Record High but Fall For Some

• Network Encryption Keeps Our Data in Motion Secure for Business Services

• Need to improve the detection capabilities in your security products?

• China Looks To AI-Generated Hosts For Livestream Sales

• Apple addressed a new actively exploited zero-day tracked as CVE-2023-38606

• BookCrossing – 1,582,323 breached accounts

• Twelve Norwegian ministries were hacked using a zero-day vulnerability

• Converging networking and security with SASE

• Inspiring secure coding: Strategies to encourage developers’ continuous improvement

• Akira and BlackByte ransomware group claim attack on Yamaha Music Canada

• Apple Rolls Out Urgent Patches for Zero-Day Flaws Impacting iPhones, iPads and Macs

• Ivanti Releases Urgent Patch for EPMM Zero-Day Vulnerability Under Active Exploitation

• Atlassian Releases Patches for Critical Flaws in Confluence and Bamboo

• RaaS proliferation: 14 new ransomware groups target organizations worldwide

• Companies are rushing into generative AI without a cohesive, secure strategy

• Safeguarding the IoT Landscape With Data Masking Techniques

• Yes! OpenTelemetry Is a Critical Part of Securing Your Systems

• The Next Step: VHD Files and Metadata

• A week in security (July 17 – 23)

• Apple Patches Another Kernel Flaw Exploited in ‘Operation Triangulation’ Attacks

• Apple ships that recent “Rapid Response” spyware patch to everyone, fixes a second zero-day

• Tigo – 700,394 breached accounts

• From Power Grids to Airports: TETRA Radio Hacking Risks Global Infrastructure

• TETRA radio comms used by emergency heroes easily cracked, say experts

• The U.S. Is Falling Behind on Encryption Standards – And That’s a Global Problem

• OpenAI, Google and More Agree to White House List of Eight AI Safety Assurances

• CISOs Connect Launches the 2023 CISO Choice Awards

• Global Security Assurance Market to Reach $13B by 2030

• Managing Human Risk: Discoveries From SANS 2023 Security Awareness Report

• Cl0p Ransomware Gang Leaks MOVEit Data on Clearweb Sites

• TARA Partners With Plante Moran to Deliver Risk-Based Vulnerability Management

• OneTrust Secures $150M Investment Led by Generation Investment Management

• The NDAA is No Place for Sweeping Internet Legislation Like the STOP CSAM Act

• IT Security News Daily Summary 2023-07-24

• How to Easily Block IP Addresses From Accessing a Desktop or Server

• China Propaganda Spreads via US News Sites, Freelancers, Times Square

• Experts Warn About New “Malicious Tagging” Facebook Scam

• AMD Zenbleed chip bug leaks secrets fast and easy

• Coveware: Rate of victims paying ransom continues to plummet

• Are AI-Engineered Threats FUD or Reality?

• Orgs Face Record $4.5M Per Data Breach Incident

• Nubeva’s Ransomware Key Interception and Decryption Technology Validated in Third-Party Lab

• How To Merge And Use AI In Cybersecurity To Prevent Cyber Attacks

• Hardware-bound passkeys are still ultimate in security: Yubico VP

• Mandiant: JumpCloud breach led to supply chain attack

• Atlassian RCE Bugs Plague Confluence, Bamboo

• Microsoft Defender Experts for XDR helps triage, investigate, and respond to cyberthreats

• New Microsoft identity and data security capabilities to accelerate CMMC compliance for the Defense Industrial Base

• Norway Probes Major Cyberattack on 12 Government Ministries

• Hacking police radios: 30-year-old crypto flaws in the spotlight

• KillNet’s Kremlin Connection Unclear as the Cybercrime Collective Grows

• Digital Rights Updates with EFFector 35.9

• Want to Alleviate CISO Burnout? Tear Down the Security Tower of Babel

• Singapore looks for generative AI use cases with sandbox options

• Artificial Intelligence Governance Professional Certification – AIGP

• Stories from the SOC: OneNote MalSpam – Detection & response

• Roblox Developers Conference Attendees’ Data Breached

• Tips To Keep Track of Code and Infrastructure Security Risks

• The top 10 technologies defining the future of cybersecurity

• Tampa General Hospital Data Breach Impacts 1.2 Million Patients

• North Korean Cyberspies Target GitHub Developers

• Spyhide stalkerware is spying on tens of thousands of phones

• Twitter Scraps Iconic Blue Bird, Officially Rebrands As ‘X’

• IBM FlashSystem 5045 aids access to storage cyber resilience

• Biden-Harris Administration Secures AI Commitments For Safety

• Has the MOVEit hack paid off for Cl0p?

• OneTrust raises $150 million to accelerate platform innovation

• Stolen Microsoft Key: The Impact Is Higher Than Expected

• A critical cybersecurity backup plan that too many companies are ignoring

• How to make sure the reputation of your products and company is good

• DdoS attack on 12 Norway government websites

• OneTrust Raises $150 Million at $4.5 Billion Valuation

• North Korean hackers targeting JumpCloud mistakenly exposed their IP addresses, researchers say

• Beyond Security: The Comprehensive Approach to Tackling Cyberattacks

• Movie Scam: Fraudsters Take Advantage of the Popularity of Barbie and Oppenheimer

• Storm-0558 Breach: Microsoft Breach Risks Millions of Azure AD Apps

• How to use Discord’s ‘Family Center’ to help protect your child

• Cyber-Attack Strikes Norwegian Government Ministries

• Is Your Peloton Attracting Security Threats?

• Hackers exploit Citrix zero-day to target US critical infrastructure

• A flaw in OpenSSH forwarded ssh-agent allows remote code execution

• DC Circuit FOSTA Ruling Lets a Bad Law Stay on the Books, But Offers Meaningful Protection for Some Sex Work Forums and Sex Workers Using Online Services

• Court Rejects Efforts to Identify Anoymous Webhost

• Automation Technologies That Improve Agricultural Returns

• 12 Norway Government Ministries were Targeted in a Cyberattack

• Is It Okay To Stop Running Your Tests After the First Failure?

• Over 20,000 Citrix Appliances Vulnerable to New Exploit

• Los Angeles SIM Swapper Pleads Guilty to Cybercrime Charges

• MOVEit Hack Could Earn Cybercriminals $100M as Number of Confirmed Victims Grows

• Cybersecurity Public-Private Partnership: Where Do We Go Next?

• Designing a Security Strategy for Defending Multicloud Architectures

• The Best Personal Safety Devices, Apps, and Wearables (2023)

• D2iQ DKP AI Navigator simplifies Kubernetes management

• US companies commit to safe, transparent AI development

• Warcraft Fans Trick AI with Glorbo Hoax

• GitHub Issues Alert on Lazarus Group’s Social Engineering Attack on Developers

• DangerousPassword Campaign Targets Desktops With Python, Node.js Malware

• Flipper Zero gets an app store

• How to Protect Patients and Their Privacy in Your SaaS Apps

• Google Messages Getting Cross-Platform End-to-End Encryption with MLS Protocol

• Critical Zero-Days in Atera Windows Installers Expose Users to Privilege Escalation Attacks

• WebBoss.io CMS Concerns: A Tale Of Neglect And Unresponsiveness

• Los Angeles SIM Swapper Pleads Guilty To Cybercrime Charges

• MOVEit Hack Could Earn Cybercriminals $100 Million

• Researchers Find Backdoor In Encrypted Police And Military Radios

• Critical Zyxel Firewall Injection Flaw Exploited to Conduct DDoS Attacks

• The New Summer Vacation Necessity: Cyber Hygiene

• Industrial Organizations in Eastern Europe Targeted by Chinese Cyberspies

• Perimeter81 Vulnerability Disclosed After Botched Disclosure Process

• Atlassian Patches Remote Code Execution Vulnerabilities in Confluence, Bamboo

• Average cost of a data breach reaches $4.45 million in 2023

• From Lullabies to Apps: Tracing the Impact of Technology on Infant Care Over the Past 30 Years

• Actionable Threat Intel (IV) – YARA beyond files: extending rules to network IoCs

• Novel Open Source Supply Chain Attacks Target Banking Sector

• New OpenSSH Vulnerability Exposes Linux Systems to Remote Command Injection

• Cisco Disclosed Vulnerabilities In SPA500 Series IP Phones – Won’t Fix

• Adobe Patched Critical ColdFusion Zero-Day Flaw Under Attack

• WhatsApp Quietly Mitigates Remote Account Deactivation Threat Hours After The Report

• Amazon Builds $120m Florida Facility For Internet Satellites

• The Silicon UK In Focus Podcast is 100!

• TETRA Radio Code Encryption Has a Flaw: A Backdoor

• Experts warn of OSS supply chain attacks against the banking sector

• Toyota Looks To Use Lunar Water To Power Manned Moon Vehicle

• CMA Publishes Microsoft Arguments As It Denies Bowing To Pressure

• A new hope for software security

• Booz Allen Pays $377m to Settle Government Fraud Case

• How-To: NIS2 EU Directive

• Micron Chief ‘Meets With Chinese Government’ Amidst Sanctions

• What is SWIFT? 8 Things You Need to Know

• DSPM and CSPM: What are the Differences?

• Thousands of Citrix Servers Exposed to Zero-Day Bug

• Gamers Trick AI-Generated News Site Into Posting Fake Article

• Start-Up Eve To Build ‘Flying Taxis’ In Brazil

• ASML Boosts Revenue Outlook On China Demand

• Clop Could Make $100m from MOVEit Campaign

• Banking Sector Targeted in Open-Source Software Supply Chain Attacks

• Apple could opt to stop iMessage and FaceTime services due to the government’s surveillance demands

• Software developers, how secure is your software?

• Hacked Microsoft Keys Let Attackers Access a Wide Range of Azure Applications

• How to Put the Sec in DevSecOps

• What C-Suite Leaders Need to Know About XDR

• North Korean Hacker Group Breached US IT Firm JumpCloud

• Bridging the cybersecurity skills gap through cyber range training

• Ransomware news trending on Google

• Topics to study for job in Artificial Intelligence

• What’s new in the 2023 Cost of a Data Breach report

• Part 1: Historic To 2022 – The APT And Logical Threats

• The Email Threat Landscape, Q1 2023: Key Takeaways

• Consumers demand more from businesses when it comes to security

• Shaping the future of digital identity

• Strengthening the weakest links in the digital supply chain

• Google half-patches Cloud Build permissions exploit, the rest is on you

• IBM Report: Average Cost of a Data Breach Rises to $4.45 Million

• Failing to embrace AI is the real ‘threat’ to the US in the global AI race: Investor

• E-commerce Cybersecurity: How to Protect Customer Data and Online Transactions

• IT Security News Weekly Summary – Week 29

• IT Security News Daily Summary 2023-07-23

• VirusTotal issues apology for recent sensitive data leak

• The Next Step

• API Security Checklist: A Must Read Guide 2023

• Web Development Revolution: Chrome’s Cookie-Free Tools

• North Korea-Backed Hackers Breach US Tech Company to Target Crypto Firms

• Security Affairs newsletter Round 429 by Pierluigi Paganini – International edition

• Shadowserver reported that +15K Citrix servers are likely vulnerable to attacks exploiting the flaw CVE-2023-3519

• Nigel Farage Controversy Results in Hundreds of NatWest Private Data Requests

• CVE-2023-3519: NetScaler (Citrix) RCE Blocked By Imperva

• Aligning Risk Appetite, Tolerance, and Thresholds with Business Planning: A Comprehensive Guide to Enterprise Risk Management

• Week in review: VirusTotal data leak, Citrix NetScaler zero-day exploitation

• Symantec DLP Product Review

• Cyber Security Management System (CSMS) for the Automotive Industry

• How To Handle Dependencies Between Pull-Requests

• Adobe ColdFusion vulnerabilities mitigated by Imperva

• Get the AT&T Cybersecurity InsightsTM Report: Focus on Healthcare

• Roblox – 52,458 breached accounts

• IT Security News Daily Summary 2023-07-22

• Microsoft Offers Free Security Features Amid Recent Hacks

• As More MOVEit Hack Victims Emerge, Ofcom Declares Non-Payment of Ransom

• Multiple DDoS botnets were observed targeting Zyxel devices

• Ransomware Outbreak in Canada: Cybersecurity Meltdown

• 10 Essential Cybersecurity Tips for Small Businesses

• The human element of Cybersecurity: Nurturing a cyber-aware culture to defend against social engineering attacks

• How businesses can shape the (safer) future of social media

• Estée Lauder: Cosmetic Brand Amongst the new Victims of Ransomware Attack

• Phishers Exploiting Google Docs to Harvest Crypto Credentials

• AI Will Result in Greater Game Development and Job Growth

• Cisco Small Business IP Phones Flaw Allows XSS & Injection Attacks

• Inside the World of Ransomware Negotiations: From Colonial Pipeline to JBS

• China’s Breach of Microsoft Cloud Email May Expose Deeper Problems

• Cybercriminals Masquerade as Cybersecurity Company to Hijack Entire PCs

• Ransomware Trends: RaaS and Cryptocurrency Impacts

• Build or Buy your own antivirus product

• Apple Threatens to Pull iMessage and FaceTime from U.K. Amid Surveillance Demands

• How social media compromises information security

• Telly’s free TVs are shipping already, but just how ‘free’ are they?

• Estée Lauder targeted by Cl0p and BlackCat ransomware groups

• CISA: You’ve got two weeks to patch Citrix NetScaler vulnerability CVE-2023-3519

• Top cybersecurity exec talks targeted hacks on U.S. diplomats

• Stolen Microsoft key may have opened up a lot more than US govt email inboxes

• 7 Steps to the Incident Response Process & Frameworks

• Living Off the Land Attacks: LOTL Definition & Prevention

• BGP Software Vulnerabilities Under the Microscope in Black Hat Session

• IT Security News Daily Summary 2023-07-21

• VirusTotal: We’re sorry someone fat-fingered and exposed 5,600 users

• Banks In Attackers’ Crosshairs, Via Open Source Software Supply Chain

• CISA warns of attacks against Citrix NetScaler ADC and Gateway Devices

• Young People Should Oppose the Kids Online Safety Act

• 6 Steps to the Incident Response Process & Frameworks

• Global CDN Service ‘jsdelivr’ Exposed Users to Phishing Attacks

• Few Fortune 100 Firms List Security Pros in Their Executive Ranks

• Microsoft Cloud Hack Exposed More Than Exchange, Outlook Emails

• Roblox Data Breach: PII of Thousands of Developers Stolen

• Rootkit Attack Detections Increase at UAE Businesses

• Cosmic Wire raises $30M to expand cross-chain Web3 platform

• Europol’s IOCTA 2023 Report Reveals Cybercriminals are Increasingly Interdependent

• Microsoft Cloud Hack Exposed More than Exchange, Outlook Emails

• The latest from Black Hat USA 2023

• CVSS 4.0 Is Here, But Prioritizing Patches Still a Hard Problem

• 8 Best Enterprise Password Managers for 2023

• Microsoft 365 Breach Risk Widens to Millions of Azure AD Apps

• Saudi Arabia’s Tuwaiq Academy Opens Cybersecurity Bootcamp

• ChatGPT, the new rubber duck

• Meet the Finalists for the 2023 Pwnie Awards

• White House, Big Tech Ink Commitments to Secure AI

• Top Cyber Official Says AI Needs Better Security

• HotRat: New Variant of AsyncRAT Malware Spreading Through Pirated Software

• Azure AD Token Forging Technique in Microsoft Attack Extends Beyond Outlook, Wiz Reports

• Security Professionals Propose Guidelines for AI Development in an Open Letter

• Growing Surveillance Threat for Abortions and Gender-Affirming Care

• Cyber Trust Mark: U.S. Administration Introduces Program to Boost Home Security

• Microsoft offers free cloud security logs after CISA recommend

• AI Firms Agree Safeguards, Including Watermarks For AI Content

• Best VPN for streaming in 2023: Unblock your favorite streaming services now

• How to Access Your iPhone if You Forget Your Passcode

• US DoJ Announces Plan to Shakeup Cybercrime Investigations

• Confidential containers with AMD SEV

• Deloitte expands MXDR solution with new operational technology and identity modules

• IGEL appoints Klaus Oestermann as CEO

• Google Creates Red Team to Test Attacks Against AI Systems

• Russia Seeks 18 Years in Jail for Founder of Cybersecurity Firm

• In Other News: Military Emails Leaked, Google Restricts Internet Access, Chinese Spyware

• Plurilock Launches Generative AI ‘Guardrails’ Product for Workforces

• Google Outlines Common Red Team Attacks Targeting AI Systems

• Docker Images: Why are Many Cyber Attacks Originating Here?

• The growing impact of generative AI on cybersecurity and identity theft

• BMC Firmware Flaw Affecting Millions Gives Superuser Access

• Microsoft Key Stolen By Chinese Hackers Provided Access Far Beyond Outlook

• NetScaler RCE Abused To Pilfer Critical Infra Active Directory Data

• OpenMeetings Flaws Allow Hackers To Execute Code And Hijack

• AppViewX joins AWS ISV Accelerate Program to offer a certificate lifecycle management

• Russian Prosecutor Asks for 18 Years in Jail for Group-IB Founder

• The Dark Side of AI

• Three Things Corporate Board Members Need to Know to Protect Their Companies From Cyberattacks

• FTX’s Sam Bankman-Fried Sued For More Than $1Bn

• OpenMeetings Flaws Allow Hackers to Hijack Instances, Execute Code on Servers

• North Korean hackers targeted tech companies through JumpCloud and GitHub

• G-71 launches integration with mail servers to secure email attachments

• Chinese Hackers Breached Ambassador’s Email

• Watch Now: Cloud & Data Security Summit Sessions

• VirusTotal Provides Clarifications on Data Leak Affecting Premium Accounts

• Local Governments Targeted for Ransomware – How to Prevent Falling Victim

• Sophisticated BundleBot Malware Disguised as Google AI Chatbot and Utilities

• Citrix ADC zero-day exploitatation: CISA releases details about attack on CI organization (CVE-2023-3519)

• Mallox Ransomware Witnessing Alarming Surge in Activity

• Securing Communications for Operational Military Success

• Mobile Roaming Charging Sees Ofcom Propose New Rules

• Tampa General Hospital Says Patient Information Stolen in Ransomware Attack

• GitHub Warns of North Korean Social Engineering Attacks Targeting Tech Firm Employees

• Tech Titans Promise Watermarks to Expose AI Creations

• AI and Microdirectives

• WormGPT: Cybercriminals AI Tool Gained Over 5,000 Subscribers in Just a Week

• Experts believe North Korea behind JumpCloud supply chain attack

• Lawyer sees almost 1,000 complainants sign up to Capita breach class action

• Citrix Zero-Day Exploited Against Critical Infrastructure Organization

• Chinese Hackers Breached Ambassador’s Email – Report

• Intrusion Detection Policy

• Clop Drives Record Ransomware Activity in June

• DDoS Botnets Hijacking Zyxel Devices to Launch Devastating Attacks

• Critical Zyxel Firewall Vulnerability Exploited in DDOS Attacks

• New Severe Vulnerabilities Found in AMI MegaRAC BMC Software

• A Google Cloud Build Vulnerability Could Aid Supply-Chain Attacks

• GitHub Warns Devs of North Korean Attacks

• Nice Suzuki, sport: shame dealer left your data up for grabs

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Silicon UK Pulse: Your Tech News Update: Episode 12

• Citrix NetScaler ADC and Gateway Devices Under Attack: CISA Urges Immediate Action

• New infosec products of the week: July 21, 2023

• Meta collaborates with Qualcomm for Llama 2 Artificial Intelligence

• How to Draft an Effective Data Protection Strategy

• Hackers Deliver HotRat as Hidden Scripts in cracked software

• Attackers intensify DDoS attacks with new tactics

• Unveiling the secrets: Exploring whitespace steganography for secure communication

• Life sciences leaders act to counter insider-driven data loss

• How healthcare organizations should measure their device security success

• CISOs are making cybersecurity a business problem

• Apology and Update on Recent Accidental Data Exposure

• Amazon in-van delivery driver footage makes its way online

• Accidental VirusTotal upload is a valuable reminder to double check what you share

• Google fixes “Bad.Build” Cloud Build flaw, researchers say it’s not enough

• Report: Apple has already built its own ChatGPT-like chatbot

• Firmware vulnerabilities in millions of computers could give hackers superuser status

• A Battlefield AI Company Says It’s One of the Good Guys

• Pioneering hacker Kevin Mitnick, dies at 59

• The Metaverse is connected to cryptocurrencies – but not so much to Bitcoin

• Kevin Mitnick, Hacker Turned Cybersecurity Leader, Dies at 59

• North Korean Attackers Targeted Crypto Companies in JumpCloud Breach

• Experts attribute WyrmSpy and DragonEgg spyware to the Chinese APT41 group

• Victory! Embedded Links to Photos on Instagram Don’t Infringe Photographers’ Copyrights, Court Rules

• First Draft of UN Cybercrime Convention Drops Troubling Provisions, But Dangerous And Open-Ended Cross Border Surveillance Powers Are Still on the Table

• IT Security News Daily Summary 2023-07-20

• Fake ChatGPT and AI pages on Facebook are spreading infostealers

• How Developers Can Work With Generative AI Securely

• TrustArc Announces TRUSTe EU-US Data Privacy Framework Verification

• MOVEit body count closes in on 400 orgs, 20M+ individuals

• UN security council delegates urge AI controls to defuse potential global threat

• API keys: Weaknesses and security best practices

• First Draft of UN Cybercrime Convention Drops Troubling Provisions, But Dangerous And Open-Ended Cross Border Surveillance Powers Are Back on the Table

• zkEVMs and the Future of Blockchain Scalability

• Mallox Ransomware Group Activity Shifts Into High Gear

• Deloitte Global Expands MXDR Cybersecurity SaaS Solution With Operational Technology and Identity Modules

• Supply chain security for Go, Part 3: Shifting left

• Critical Infrastructure Workers Better At Spotting Phishing

• Kevin Mitnick Died

• The best VPN trials: Top VPNs to test for free

• Estée Lauder Breached in Twin MOVEit Hacks, by Different Ransom Groups

• Kevin Mandia Brings the HammerCon

• NYPD Body Cam Data Shows the Scale of Violence Against Protesters

• Updated Researcher Portal Submission Form: Discover the New Fields in the Submission Form

• Security Patch Management Strengthens Ransomware Defense

• Apple Developing ChatGPT AI Equivalent – Report

• Tech support scammers trick victims into old-school offline money transfer

• Multiple DDoS Botnets Exploiting Recent Zyxel Vulnerability

• Human Cyber-Risk Can Be Demonstrably Mitigated by Behavior Changing Training: Analysis

• Cosmetics Giant Estée Lauder Targeted by Two Ransomware Groups

• JumpCloud Cyberattack Linked to North Korean Hackers

• New AMI BMC Flaws Allowing Takeover and Physical Damage Could Impact Millions of Devices

• S3 Ep144: When threat hunting goes down a rabbit hole

• RIP Kevin Mitnick: Former most-wanted hacker dies at 59

Generated on 2023-08-01 00:02:22.051978