IT Security News Monthly Summary – August

• IT Security News Daily Summary 2024-07-31

• An In-Depth Look at the Cisco CCDE-AI Infrastructure Certification

• More than 83K certs from nearly 7K DigiCert customers must be swapped out now

• Russia takes aim at Sitting Ducks domains, bags 30,000+

• Security review for Microsoft Edge version 127

• USENIX Security ’23 – Oops..! I Glitched It Again! How to Multi-Glitch the Glitching-Protections on ARM TrustZone-M

• Identifying a BOLA Vulnerability in Harbor, a Cloud-Native Container Registry

• What is CrowdStrike? Everything You Need to Know

• The Cisco Store Patching Station

• Introducing the MSRC Researcher Resource Center

• Microsoft: DDoS Attack on Azure Services Exacerbated by Defense Error

• WhatsApp Allows Python, PHP Script Execution on Windows Without Warnings

• Mandrake Android Malware Creeps Up On Google Play Store Again

• Recent SideWinder Campaign Targets Ports And Maritime Facilities

• The big cybersecurity themes at Black Hat 2024 — and why they matter

• State of SaaS Security Report 2024: Key Findings & Tips from Deployments at Scale

• Why You Should Clear Your Android Browser’s Cache and Cookies

• Increased Activity Against Apache OFBiz CVE-2024-32113, (Wed, Jul 31st)

• Microsoft Says Ransomware Groups Are Exploiting the Newly-Patched VMware ESXi Flaw

• Ransomware Attack Hits OneBlood Blood Bank, Disrupts Medical Operations

• US To Exempt Allies From Expanded China Chip Equipment Export Rules

• Global SMS Stealer Targeting Android Users via Malicious Apps and Ads

• Australian Organisations Experiencing Highest Rate of Data Breaches, Reports Rubrik

• Microsoft confirms DDoS attack disrupted cloud services

• Cost of Data Breach in 2024: $4.88 Million, Says Latest IBM Study

• Urgent Email Alert from Amazon UK Customers Must Act Now

• Over 8,000 Exploit Attempts Already Blocked For Recently Patched Unauthenticated Arbitrary File Upload Vulnerability in 简数采集器 (Keydatas) WordPress Plugin

• CISA and FBI Release Joint PSA: Putting Potential DDoS Attacks During the 2024 Election Cycle in Context

• X Leverages Users’ Posts For Training Its Grok AI

• 6 Best Vulnerability Management Software & Systems in 2024

• Texas Wins $1.4 Billion Biometric Settlement Against Meta. It Would Have Happened Sooner With Consumer Enforcement

• Chrome adopts app-bound encryption to stymie cookie-stealing malware

• Report: Amount of Data Being Analyzed by Cybersecurity Teams Rises

• Analysis of Top Infostealers: Redline, Vidar and Formbook

• Meta to pay $1.4 billion over unauthorized facial recognition image capture

• Five takeaways from Forrester’s 2024 state of application security

• Hackers Exploit Vmware ESXi Vulnerability in Ransomware Attacks

• Source Code of Phorpiex Botnet with Anti-AV Capabilities on Sale

• Navigating the Evolving Landscape of Cybersecurity

• CrowdStrike Sued? — Delta Dials David Boies

• Out-of-bounds read vulnerability in NVIDIA driver; Open-source flashcard software contains multiple security issues

• Microsoft Slowdown In Cloud Growth Worries Wall Street

• Oracle challenges cloud giants with new Nvidia AI hardware offerings

• Nearly 7% of Internet Traffic Is Malicious

• Multiple SMTP Servers Vulnerable to Spoofing Attacks, Let Hackers Bypass Authentication

• Our Last Chance to Stop KOSA | EFFector 36.10

• The CISO: A Cornerstone of Private Equity Success

• Urgent Blood Appeal Issued in US After Ransomware Attack

• VMware vulnerability leads ransomware to encrypt mass virtual machines

• Microsoft 365 subscriptions now include a free VPN – here’s how to use it

• What is cyber attribution?

• Unlocking the Future of MSSP Operations with Cisco CDO APIs

• Security Researchers and Journalists at Risk: Why You Should Hate the Proposed UN Cybercrime Treaty

• Embedding AI security from the get go

• Black Hat Preview: CrowdStrike, Disinformation Lead The Narrative

• Passwords Vanish for 15 Million Windows Users, Google Says “Sorry”

• New SMS Stealer Malware Targets Over 600 Global Brands

• UK Investigates Alphabet Partnership With AI Firm Anthropic

• Vulnerabilities Enable Attackers to Spoof Emails From 20 Million Domains

• The Concerning Rise of AI “Undressing” Apps: A Violation of Privacy and Ethics

• SMS Stealer malware targeting Android users: Over 105,000 samples identified

• Take Cover: Securing Games Truly Is a Battle Royale

• Bridging the skills gap to build a secure future for the cloud

• Five months after takedown, LockBit is a shadow of its former self

• Cyberse and the Marketplace Era of Cybersecurity Purchasing

• DigiCert to Revoke 83,000+ SSL Certificates Due to Domain Validation Oversight

• CrowdStrike Shares Plunge Amid Delta Compensation Report

• PR vs cybersecurity teams: Handling disagreements in a crisis

• California digitizes car titles, putting 42 million vehicles on the blockchain

• Malwarebytes vs Bitdefender: Best Cybersecurity Software of 2024

• Addressing communication roadblocks to overcome cybersecurity threats

• Malicious Packages Hidden in PyPI

• Data Breaches for the Month July 2024

• Google Backs Messaging Layer Security for Enhanced Privacy and Interoperability

• North Korea-Linked Malware Targets Developers on Windows, Linux, and macOS

• Meta to Pay Texas $1.4bn for Unlawful Biometric Data Capture

• World Wide Web Consortium Opposed Google’s Decision on Third-party cookies

• Vulnerability Management in DevOps Environments

• Apple fixes Siri vulnerabilities that could have allowed sensitive data theft from locked device. Update now!

• Are You Getting the Most Value from Your Existing CNAPP Solution?

• City of Columbus Says Data Compromised in Ransomware Attack

• New PyPI Package Zlibxjson Steals Discord, Browser Data

• ‘Error’ in Microsoft’s DDoS defenses amplified 8-hour Azure outage

• Can GPT-4o Be Trusted With Your Private Data?

• Apple fixed dozens of vulnerabilities in iOS and macOS

• How to Best Secure Banking Applications – Top Tips from a Mobile Security Expert

• The Challenges and Responsibilities of CISOs with Halcyon

• New Specula Tool Turning Outlook as a C2 Server by Leveraging Registry

• The best travel VPNs of 2024: Expert tested and reviewed

• Don’t Let Your Domain Name Become a “Sitting Duck”

• Tenable Considering a Potential Sale: Report

• “There is no business school class that would ever sit down and design Talos”

• Protect Against Adversary-in-the-Middle with Cisco’s User Protection Suite

• The Transformational Opportunity of AI on ICT Jobs

• DigiCert Revokes 83,267 TLS Certificates Due to DNS Check Problem

• Top CVEs of July 2024: Key Vulnerabilities and Mitigations

• How To Get the Most From Your Security Team’s Email Alert Budget

• Chinese Hackers Target Japanese Firms with LODEINFO and NOOPDOOR Malware

• Tesla Using Full Self Driving In Crash Kills Biker, Amid Another Recall

• Phishing Attack Steals Donations from Trump Voters Using Fake Websites

• Meta paid a $1.4 Billion Settlement for the Unauthorized Capture of Personal Biometric Data

• Cybercriminals Target Polish Businesses with Agent Tesla and Formbook Malware Delivered by ModiLoader

• DigiCert Revoking Many Certificates Due to Verification Issue

• Microsoft: DDoS defense error amplified attack on Azure, leading to outage

• Clutch Security launches to transform management of NHIs

• GDPR Consent Request Forms: Sample Text

• Can ChatGPT-4o Be Trusted With Your Private Data?

• New Specula Tool Uses Outlook for Remote Code Execution in Windows

• Report: 40% of Environments Exposed to Full Take Over

• How Bots and AI are Fueling Disinformation

• Fortanix expands Key Insight to enhance cryptographic security across hybrid environments

• Cyber Espionage Group XDSpy Targets Companies in Russia and Moldova

• Cybercriminals Deploy 100K+ Malware Android Apps to Steal OTP Codes

• Join Us 08-16-24 for “Hacking the Demo” – Super Cyber Friday

• Intel To Cut Thousands Of Jobs – Report

• AI-powered ‘narrative attacks’ a growing threat: 3 defense strategies for business leaders

• Phishing campaigns target SMBs in Poland, Romania, and Italy with multiple malware families

• How AI is Shaping Fraud: VIPRE Reveals 40% of BEC Emails Are Now AI-Generated

• Cost of a Data Breach Surges 10% on Shadow Data Challenge

• DDoS Attack Triggers New Microsoft Global Outage

• Cybersecurity News: Delta’s legal maneuver, Record-breaking ransom, Meta $1.4B settlement

• 6% of All Published CVEs Have Been Exploited in the Wild, Report Finds

• AnimeLeague – 192,134 breached accounts

• From Geopolitics to Boardrooms: The Impact of the Kaspersky Ban

• Cycode unveils Cycode AI to enhance ASPM platform with advanced security features

• #TripwireBookClub – From its Origins to its Future: How AI Works

• IBM: Cost of a Breach Reaches Nearly $5 Million, With Healthcare Being Hit the Hardest

• UK Electoral Commission slapped for basic cybersecurity fails

• Innovative approach promises faster bug fixes

• Researchers Uncover Largest Ever Ransomware Payment of $75m

• Lineaje secures $20 million in funding to address software supply chain issues

• Enabling new service models with SSDP

• Chrome Security Update: Patch for Critical Flaw that Leads to Exploitation

• Bumble and Hinge allowed stalkers to pinpoint users’ locations down to 2 meters, researchers say

• Building bridges, feeding people and empowering students: How new technologies are changing lives

• A Fortune 50 company paid a record-breaking $75 million ransom

• Email Attacks Surge, Ransomware Threat Remains Elevated

• Meta Agrees to $1.4B Settlement With Texas in Privacy Lawsuit Over Facial Recognition

• Can Negotiations Yield Success in Ransomware Attacks

• Devo Technology launches data orchestration and SOC enhancements

• DDoS Attack on Microsoft Azure Cloud leads to another global IT Outage

• Cohesity unveils enhanced GenAI capabilities for faster threat detection and recovery

• Microsoft world wide outage: Cybersecurity Today for Wednesday, July 31, 2024

• How AI is Shaping Fraud: Vipre Reveals 40% of BEC Emails Are Now AI-Generated

• IBM: Cost of Data Breach on Average Reaches $4.9 Million

• If You are Reachable, You Are Breachable, and Firewalls & VPNs are the Front Door

• NSFOCUS RSAS New Features Unleashed

• Proficio launches ProBAS service to help organizations better prepare and respond to cyber attacks

• Meta Settles for $1.4 Billion with Texas Over Illegal Biometric Data Collection

• Dark Angels gang scores a record-breaking $75 million ransom

• What CISOs need to keep CEOs (and themselves) out of jail

• Leveraging dynamic configuration for seamless and compliant software changes

• Cybersecurity jobs available right now: July 31, 2024

• Secretive: Open-source app for storing and managing SSH keys in the Secure Enclave

• ISC Stormcast For Wednesday, July 31st, 2024 https://isc.sans.edu/podcastdetail/9076, (Wed, Jul 31st)

• DigiCert gives unlucky folks 24 hours to replace doomed certificates after code blunder

• Ubook – 699,908 breached accounts

• Lineaje raises $20M to help organizations combat software supply chain threats

• ThreatLabz Ransomware Report: Unveiling a $75M Ransom Payout Amid Rising Attacks

• DigiCert Certificate Revocations

• Calls Mount—from Principal UN Human Rights Official, Business, and Tech Groups—To Address Dangerous Flaws in Draft UN Surveillance Treaty

• CISA adds VMware ESXi bug to its Known Exploited Vulnerabilities catalog

• Certbot Use Continues to Grow

• IT Security News Daily Summary 2024-07-30

• Proofpoint Platform Exploited to Send Millions of Spoofed Phishing Emails

• How to Get Started in Cybersecurity: Steps, Skills & Resources

• Mandrake Android spyware found in five apps in Google Play with over 32,000 downloads since 2022

• Building A SOC: Key Considerations And Strategies

• Google Workspace Authentication Vulnerability Allowed Thousands of Emails to be Compromised

• It took some serious nerve for Wiz to walk away from Google’s $23B offer

• AI Pulse: Brazil Gets Bold with Meta, Interpol’s Red Flag & more

• AI-Powered Deepfake Tools Becoming More Accessible Than Ever

• Delta Air Lines dials up Microsoft’s legal nemesis over CrowdStrike losses

• Empowering WordPress Bug Bounty Hunters: Meet the New Wordfence Bug Bounty Program Researcher Dashboard

• Microsoft need to be transparent about customer impacting DDoS attacks

• Ransomware Attacks Are Attracting Record Payouts in Australia. Should You Pay the Ransom?

• Microsoft, SecOps pros weigh kernel access post-CrowdStrike

• Cloud Security Challenges Extend Beyond Technology

• The best Bluetooth trackers of 2024: Expert tested

• HealthEquity data breach affects 4.3M people

• Apple Patches Everything. July 2024 Edition, (Tue, Jul 30th)

• $75 Million Ransom Paid to Dark Angels Ransomware Group

• Threat actor impersonates Google via fake ad for Authenticator

• Meta’s AI Safety System Manipulated by Space Bar Characters to Enable Prompt Injection

• The KOSA Internet Censorship Bill Just Passed The Senate—It’s Our Last Chance To Stop It

• NTLM Deprecation is Giving Us XP EOL Flashbacks: Are You Protected?

• US State Department Says UN Cybercrime Treaty Must Include Human Rights Protections

• With the Olympics underway, Attendees and Spectators at Risk of Cyberattacks

• SAFECOM Releases New Resource for Cloud Adoption

• IT leaders worry the rush to adopt Gen AI may have tech infrastructure repercussions

• SideWinder Utilizes New Infrastructure to Target Ports and Maritime Facilities in the Mediterranean Sea

• Ransomware actors pivot away from major brands in Q2 2024

• Extending Resilience: Reducing Stress and Burnout for Cybersecurity Teams

• Crypto Exchange Gemini Confirms Third-Party Data Breach

• Balancing Privacy and Authenticity in the Digital Age

• Google’s New Feature to Protect Users From Fake Calls

• How to deploy an Amazon OpenSearch cluster to ingest logs from Amazon Security Lake

• Proficio Launches New ProBAS Breach and Attack Simulation Service

• Food Fraud: The Top Three Scams Impacting the Food Delivery Industry

• Apple Releases Security Updates for Multiple Products

• CISA Adds One Known Exploited Vulnerability to Catalog

• SideWinder phishing campaign targets maritime facilities in multiple countries

• New PowerShell Backdoor Linked to Zloader Malware

• Change Healthcare Begins to Notify Millions Affected by Hack

• Western Maryland Community Colleges Receive Edwards Fund Grant for Cyber Ranges

• The US States Most at Risk of Cyberattacks

• Australia wants companies disclose ransomware payments

• Microsoft: Ransomware gangs exploiting VMware ESXi flaw

• European Central Bank Concludes Banking Cyber Stress Test

• Cowbell Secures $60 Million Series C Funding From Zurich Insurance Group

• Google Cloud CISO Phil Venables: ‘I’m short-term pessimistic, long-term optimistic’

• Sophisticated Phishing Campaign Targets Microsoft OneDrive Users

• Crowdstrike preliminary report as sourced from Richard Ford

• Salvador Technologies sees growth in maritime cybersecurity

• Price Drop: This Complete Ethical Hacking Bundle is Now $40

• HealthEquity data breach affects 4.3 million people

• HealthEquity Data Breach Compromises Customer Information

• Massive Phishing Campaign Exploiting Proofpoint’s Email Protection to Dispatch Millions of Perfectly Spoofed Emails

• Crafty ClickFix-Style Phishing Campaign Targets Microsoft OneDrive Users

• ‘LockBit of phishing’ EvilProxy used in more than a million attacks every month

• Adaptive Shield Showcases New ITDR Platform for SaaS at Black Hat USA

• Why (and How) APIs and Web Applications Are Under Siege

• Google Workspace Vulnerability Allowed Hackers to Access 3rd-Party Services

• A Senate Bill Would Radically Improve Voting Machine Security

• The Unyielding Struggle of Cybersecurity and Its Paradoxical Dilemma

• Indian APT Targeting Mediterranean Ports and Maritime Facilities

• New Mandrake Spyware Found in Google Play Store Apps After Two Years

• Stolen GenAI Accounts Flood Dark Web With 400 Daily Listings

• Progress Patched New MOVEit File Transfer Flaw that Allows Privilege Escalation

• Weak Human Rights Protections: Why You Should Hate the Proposed UN Cybercrime Treaty

• Fortanix Extends Encyption Key Discovery to On-Premises IT Platforms

• Ukraine Hacks ATMs Across Russia in Massive Cyberattack

• Listening to the Voice of the Customer: Cisco’s 2024 State of Industrial Networking Report

• Accenture and SandboxAQ Expand Cybersecurity Partnership

• The Power and Peril of RMM Tools

• ubook Suffered Data Breach, 710,000 Users’ Data Exposed

• Why Do We Need to Keep Our Builds Green?

• Embracing Diversity and Growth: My Cisco Internship Experience

• Average data breach cost jumps to $4.88 million, collateral damage increased

• Critical OpenSSH “regreSSHion” Vulnerability Impacted macOS  Systems, Patch Now

• Threat Actor Allegedly Claiming Hack of Microsoft Employee’s Device

• Hackers Exploiting ESXi Hypervisor Auth Bypass Flaw For Ransomware Attacks

• Proofpoint’s Email Protection Let Attackers Send Millions Of Phishing Emails

• Microsoft Warns of Ransomware Gangs Abusing VMware ESXi Authentication Bypass in Attacks

• OCI Customers Can Now Externally Manage Encryption Keys from a Cloud-Based Service

• Adaptive Shield unveils ITDR platform for SaaS

• SocGholish Malware Attacking Windows Users Using Fake Browser Update

• Providing Security Updates to Automobile Software

• The Most Common DNS Security Risks in 2024 (And How to Mitigate Them)

• Ransomware gangs are loving this dumb but deadly make-me-admin ESXi vulnerability

• Cyber Threat Intelligence: Illuminating the Deep, Dark Cybercriminal Underground

• Cybercriminals Target Polish Businesses with Agent Tesla and Formbook Malware

• ICO Slams Electoral Commission for Basic Security Failings

• South Korea To Support Businesses Amidst E-Commerce Crisis

• China Sees Slowdown In Foreign-Branded Smartphone Growth

• Telegram-Controlled TgRat Trojan Targets Linux Servers

• Threat Actor Allegedly Claiming Breach of Cyepr

• AcidPour Malware Attacking Linux Data Storage Devices To Wipe Out Data

• IPVanish vs NordVPN (2024): Which VPN Is Better?

• 16-30 April 2024 Cyber Attacks Timeline

• VMware ESXi auth bypass zero-day exploited by ransomware operators (CVE-2024-37085)

• Hacker Attacking Bank Users With AI-powered Phishing Tools and Android Malware

• Surging data breach disruption drives costs to record highs

• What is sudo in Linux and why is it so important?

• Cyber Insurance Provider Cowbell Raises $60 Million

• Incident Response Is So Important We Might Try Getting Good At It

• 8 Daily Practices to Avoid Cybersecurity Burnout

• Re-Extortion: How Ransomware Gangs Re-Victimize Victims

• Just One in 10 Attacks Flagged By Security Tools

• Cybersecurity News: HealthEquity data breach, CrowdStrike impact grows, Proofpoint exploit

• Microsoft Expected To Report 31 Percent Azure Growth Amidst AI Pressure

• People Overconfident in Password Habits, Overwhelmed by Too Many Passwords

• Attackers Bypassed Google’s Email Verification to Create Workspace Accounts, Access Third-Party Services

• Ubuntu Fixes Two OpenVPN Vulnerabilities

• HealthEquity Breach Hits 4.3 Million Customers

• Millions of Spoofed Emails Bypass Proofpoint Security in Phishing Campaign

• SpaceX ‘In Talks’ To Recover Starship Rocket In Australia

• Silicon UK In Focus Podcast: Connecting the Machines

• A crafty phishing campaign targets Microsoft OneDrive users

• Apple Rolls Out Security Updates for iOS, macOS

• Xiaomi Buys $116m Plot To Expand Bejing EV Factory

• HPE $14bn Juniper Acquisition Set For ‘Unconditional’ EU Approval

• Microsoft 365 Users Targeted by Phishers Abusing Microsoft Forms

• New SideWinder Cyber Attacks Target Maritime Facilities in Multiple Countries

• 5 Bitwarden features that make it my favorite password manager

• Malware Campaign Lures Users With Fake W2 Form

• ZeroTier Raises $13.5 Million in Series A Funding

• Report: An 18% Increase in Ransomware Attacks Includes $75M Payment

• Hacked Blood Testing Provider Expects Autumn Recovery Date

• DigiCert to Revoke Thousands of Certificates Following Domain Validation Error

• The Critical Role of Response Time in Cybersecurity

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Detecting Externally Facing Resources

• OneDrive Phishing Scam Tricks Users into Running Malicious PowerShell Script

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Proofpoint phishing palaver plagues millions with ‘perfectly spoofed’ emails from IBM, Nike, Disney, others

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• VMware ESXi Flaw Exploited by Ransomware Groups for Admin Access

• X allows users to turn off GROK AI Training due to data concerns

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• 2024-07-30 – Traffic analysis exercise: You dirty rat!

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Review: Action1 – Simple and powerful patch management

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Coding practices: The role of secure programming languages

• Securing remote access to mission-critical OT assets

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Insecure file-sharing practices in healthcare put patient privacy at risk

• Malaysia is working on an internet ‘kill switch’, says minister

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• ISC Stormcast For Tuesday, July 30th, 2024 https://isc.sans.edu/podcastdetail/9074, (Tue, Jul 30th)

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Hacker Scrapes and Publishes 100,000-Line CrowdStrike IoC List

• This tool tests AI’s resilience to ‘poisoned’ data

• ManageEngine: Australian SMEs Aim to Reduce IT Costs Amid Growing Technology Complexity

• iOS gets an AI upgrade: Inside Apple’s new ‘Intelligence’ system

• 6 types of DNS attacks and how to prevent them

• Ransomware gangs exploit recently patched VMware ESXi bug CVE-2024-37085

• Senators Expose Car Companies’ Terrible Data Privacy Practices

• IT Security News Daily Summary 2024-07-29

• Progress Telerik Report Server Vulnerability Allows RCE Attacks

• ServiceNow Remote Code Execution Vulnerabilities Under Attack

• Docker Engine Vulnerability Could Allow AuthZ Bypass

• Google Chrome Password Manager Flaw Triggered Outage

• GitHub Design Flaw Retains Deleted, Private Repos

• Meta’s AI safety system defeated by the space bar

• US border cops really must get a warrant in NY before searching your phones, devices

• USENIX Security ’23 – Device Tracking via Linux’s New TCP Source Port Selection Algorithm

• Windows Security best practices for integrating and managing security tools

• Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption

• The Top 4 CrowdStrike Alternatives & Competitors in 2024

• US border cops really must get a warrant in NY before searching phones, devices

• Apple Joins Voluntary U.S. Government Commitment to AI Safety

• How to opt out of facial recognition at airports (if you’re American)

• Secure, Simple, Superior: The Advantages of Tokenized Payment Cards by Wallester

• EFF’s Concerns About the UN Draft Cybercrime Convention

• Microsoft Says Ransomware Gangs Exploiting Just-Patched VMware ESXi Flaw

• AWS revalidates its AAA Pinakes rating for Spanish financial entities

• What is SSH (Secure Shell) and How Does It Work?

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #299 — Motivation and Reality

• XSS and OAuth Combo Threatens Millions of Users Due to Hotjar Flaw

• Yes, Americans can opt out of airport facial recognition. Here’s how

• Understanding VPN Protocols: Ensuring Your Data Security

• FBCS Data Breach Affects 4.2 Million Americans

• Guarding Privacy: Cutting-Edge Technologies for Data Protection

• Vulnerability Recap 7/29/24 – Multiple Old Security Flaws Reappear

• Why You Should Hate the Proposed UN Cybercrime Treaty

• Critical Flaw in Acronis Cyber Infrastructure Exploited in the Wild

• India Cybersecurity: Key Government Initiatives for Cybersecurity

• Some good may come out of the CrowdStrike outage

• Don’t Get Hacked! Essential Cybersecurity Tips You Need To Know

• Optical fibers fit for the age of quantum computing

• HealthEquity: 4.3 Million People Affected by Data Breach

• Accelerate incident response with Amazon Security Lake – Part 2

• Ransomware attacks are inevitable on Paris Olympics 2024

• LockBit Lies Prove Another Reason to Never Pay the Ransom

• July 2024 Web Server Survey

• SIEM is not storage, with Jess Dodson (Lock and Code S05E16)

• How the Change Healthcare attack may affect cyber insurance

• What is GDPR? Compliance and conditions explained

• Acronis Cyber Infrastructure bug actively exploited in the wild

• Mandiant: North Korean Hackers Are Targeting Naval Tech

• Nine Individuals Apprehended in Cavite for Alleged Voice Phishing Activities

• Vulnerability Summary for the Week of July 22, 2024

• Mandrake Spyware Infects 32,000 Devices Via Google Play Apps

• VPN Usage Increased 5016% in Bangladesh Amidst Online Censorship

• US senators ask FTC to investigate car makers’ privacy practices

• With Open Source Artificial Intelligence, Don’t Forget the Lessons of Open Source Software

• CISA Adds Three Known Exploited Vulnerabilities to Catalog

• Security Flaws Found in Hotjar, Potentially Affecting Sensitive Data of Millions Utilising Major Global Brands

• Mitigating Data Breaches with AI-Driven Security Solutions

• Crowdstrike outage: Growing scams amid global outage

• USENIX Security ’23 – Did the Shark Eat The Watchdog In The NTP Pool? Deceiving The NTP Pool’s Monitoring System

• WTH? Google Auth Bug Lets Hackers Login as You

• Mandrake Spyware Infects 32,000 Devices via Google Play Apps

• The Aftermath of the WordPress.org Supply Chain Attack: New Malware and Techniques Emerge

• Strategies for Mitigating the Human Element of Cyber Risk

• Unlock the Potential of AI/ML Workloads with Cisco Data Center Networks

• Bitsight for Insurance Services

• UNC4393 Goes Gently into the SILENTNIGHT

• Threat Actots Leveraging ChatGPT To Craft Sophisticated Attacks

• Apple reportedly delays the first Apple Intelligence features until October

• Beware of AI ‘model collapse’: How training on synthetic data pollutes the next generation

• Top Tech Conferences & Events to Add to Your Calendar in 2024

• Taking action: how to combat the financial repercussions of a cyber incident

• Report: Russian Ransomware Gangs Account for 69% of all Ransom Proceeds

• The Dual Nature of Ransomware Attacks

• Millions of Websites Susceptible to XSS Attack via OAuth Implementation Flaw

• The NIS2 Directive: Implications for Your Organization

• Keep Your Tech Flame Alive: Akamai Trailblazer Elizabeth Padley

• Ukraine Hacked Russian Banks, Leading Major Disruption

• One of the best productivity laptops I’ve tested is not a Lenovo ThinkPad or MacBook

• Most people worry about deepfakes – and overestimate their ability to spot them

• Saboteurs Cut Internet Cables in Latest Disruption During Paris Olympics

• Effective change management practices in IT environments: a guide

• Despite Bans, AI Code Generation Tools Widely Used in Organizations

• Intruders at HealthEquity rifled through storage, stole 4.3M people’s data

• Walmart Discovers New PowerShell Backdoor Linked to Zloader Malware

• Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails

• Google apologizes for breaking password manager for millions of Windows users with iffy Chrome update

• Cato Networks Surpasses $200 Million, Doubles ARR in Under Two Years

• WhatsApp for Windows Lets Python, PHP Scripts Execute with no Warning

• Senators to FTC: Car Companies’ Data Privacy Practices Must be Investigated

• DDoS Attacks Disrupt Major Russian Banks: Ukraine Claims Responsibility

• Critical Acronis Cyber Infrastructure vulnerability exploited in the wild (CVE-2023-45249)

• Hotjar, Business Insider Vulnerabilities Expose OAuth Data Risks

• How Infostealers Pillaged the World’s Passwords

• National Vulnerability Backlog Could Surge to 30,000 by 2025

• The Other Lesson from the XZ Utils Supply-Chain Attack

• Millions of Websites Susceptible XSS Attack via OAuth Implementation Flaw

• How iOS 18 will impact your iPhone’s battery health – and what you can do about it

• The best mobile VPNs of 2024: Expert tested and reviewed

• How Searchable Encryption Changes the Data Security Game

• Acronis Warns of Cyber Infrastructure Default Password Abused in Attacks

• RaspAP Flaw Let Hackers Escalate Privileges with Raspberry Pi Devices

• New Research in Detecting AI-Generated Videos

• What Every Business Needs to Know About Ransomware

• Gh0stGambit Dropper Used to Deploy Gh0st RAT Against Chinese Users

• Data From Deleted Github Repositories May Not Actually be Deleted

• Ukraine Claims Cyber Attack Disrupted Russian ATMs and Banking System

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• US border agents must get warrant before cell phone searches, federal court rules

• AI-Generated Deepfake Attacks Force Companies To Reassess Cybersecurity

• 4.3 Million Impacted by HealthEquity Data Breach

• Amazon Faces Double Tax Fraud Probes In Italy

• How to Build an Effective Security Operations Center

• The Top 5 1Password Alternatives for 2024

• Targeted PyPI Package Steals Google Cloud Credentials from macOS Devs

• eBook: 20 tips for secure cloud migration

• How to Write a Generative AI Cybersecurity Policy

• JPMorgan Rolls Out AI Chatbot To Staff

• Malicious Python Package Attacking macOS Developers To Steal Google Cloud Logins

• Mandrake spyware sneaks onto Google Play again, flying under the radar for two years

• Most CISOs Feel Unprepared for New Compliance Regulations

• Industry Moves for the week of July 29, 2024 – SecurityWeek

• Selenium Grid Instances Exploited for Cryptomining

• Less Than Half of European Firms Have AI Controls in Place

• Cybersecurity News: PyPi package targets MacOS, Columbus, Ohio suffers cyber incident, Windows July update problems

• SK Hynix To Invest $6.8bn In Yongin Memory Chip Plant

• White House, CISA Name Key Cybersecurity Officials as National Resilience Strategy Rollout Continues

• Microsoft 365 users targeted by phishers abusing Microsoft Forms

• Russia Throttles YouTube Over ‘Anti-Russian Policy’

• North Korean Onyx Sleet Using Group Of Malware And Exploits to Gain Intelligence

• Hackers Attacking Users Searching For W2 Form

• PKfail, Critical Firmware Supply-Chain Issue Let Attackers Bypass Secure Boot

• Meta Nukes Massive Instagram Sextortion Network of 63,000 Accounts

• Russia-Backed Brute-Force Campaign Targets Microsoft Infrastructure in EU

• Why Biometrics are Key to a Safe Paris Olympics

• US Crypto Exchange Gemini Reveals Breach

• Hollywood Video Game Performers Strike Over AI Fears

• Apple Signs White House AI Safeguards

• LinkedIn To Pay $6.625m In Ad Lawsuit Settlement

• Cisco Patches the Products Impacted by RADIUS Protocol Vulnerability

• Navigating PCI DSS 4.0: Your Guide to Compliance Success

• Dazz Snaps up $50M for AI-Based, Automated Cloud Security Remediation

• French Police Push PlugX Malware Self-Destruct Payload to Clean PCs

• Hallucination Control: Benefits and Risks of Deploying LLMs as Part of Security Processes

• A week in security (July 22 – July 28)

• NVIDIA Patches Flaw in Jetson Software Used in AI-Powered Systems

• Fighting Fire with Fire: Using AI to Thwart Cybercriminals

• ‘Stargazer Goblin’ Creates 3,000 Fake GitHub Accounts for Malware Spread

• French Govt Investigating Recent Malware Attack that Compromised 3,000 Machines

• Report: 95% of Organizations Face Severe Software Supply Chain Risk

• Deepfakes, AI, and the Future of Cybersecurity: Insights from Dan DeCloss of PlexTrac

• North Korean Hackers Target USA Critical Infrastructure and Military Bases

• Microsoft admits 8.5 million CrowdStruck machines estimate was lowballed

• Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome Site

• Google’s Password Bug Hits Millions: Cybersecurity Today for Monday, July 29, 2024

• How Software Updates Can Lead to Cyber Attacks

• Belarus-linked APT Ghostwriter targeted Ukraine with PicassoLoader malware

• Fake Falcon crash reporter installer used to target German Crowdstrike users

• China ponders creating a national ‘cyberspace ID’

• Microsoft CrowdStrike Software Update leading to Phishing Attacks

• Enhancing threat detection for GenAI workloads with cloud attack emulation

• Cirrus: Open-source Google Cloud forensic collection

• The cost of cybersecurity burnout: Impact on performance and well-being

• Why a strong patch management strategy is essential for reducing business risk

• The gap between business confidence and cyber resiliency

• Whitepaper: DevSecOps Blueprint

• ISC Stormcast For Monday, July 29th, 2024 https://isc.sans.edu/podcastdetail/9072, (Mon, Jul 29th)

• Secure Boot useless on hundreds of PCs from major vendors after key leak

• 
Quickie: Password Cracking & Energy, (Sun, Jul 28th)

• CrowdStrike Outage Themed Maldoc, (Mon, Jul 29th)

• Quickie: Password Cracking & Energy, (Sun, Jul 28th)

• IT Security News Weekly Summary – Week 30

• IT Security News Daily Summary 2024-07-28

• French authorities launch disinfection operation to eradicate PlugX malware from infected hosts

• USENIX Security ’23 – Bilingual Problems: Studying the Security Risks Incurred by Native Extensions in Scripting Languages

• KnowBe4 Avoids Data Breach After Hiring North Korean Hacker

• Eliminating the Last Mile Between Security Data and Decision Making

• Security Affairs Malware Newsletter – Round 4

• Security Affairs newsletter Round 482 by Pierluigi Paganini – INTERNATIONAL EDITION

• Indian Govt Confirms BSNL User Data Breach

• Report: Spyware Maker’s Data Leak Exposes Malware Used on Windows, Mac, Android, and Chromebook Devices

• CyberCartel: Latest Banking Trojan Threat in Chrome Extensions

• Cyber Heist: Rs 40 Crore Taken from IndusInd Bank

• The best laptop docking stations in 2024: Expert tested and reviewed

• Artificial Intelligence in 2024

• Apple may be cooking something big with its new Game Mode. Here are 3 things we know

• One of the best e-readers I’ve tested is an Android phone dupe that’s full of wonder

• One of the best rugged Android phones I’ve tested is also one of the cheapest

• Week in review: CrowdStrike-triggered outage insights, recovery, and measuring cybersecurity ROI

• IT Security News Daily Summary 2024-07-27

• Ukraine’s cyber operation shut down the ATM services of major Russian banks

• Create Your Own BSOD: NotMyFault, (Sat, Jul 27th)

• North Korean Hacker Indicted for Cyber Attacks on U.S. Hospitals, NASA, and Military Bases

• Telegram Users Cross 900 Million, Company Plans to Launch App Store

• The best cheap gaming PCs of 2024: Expert recommended

• USENIX Security ’23 – Hiding in Plain Sight: An Empirical Study of Web Application Abuse in Malware

• Teen Hacker Linked to Hacking of Government Agencies, School Websites

• Hacker Alleges Theft of Piramal Group’s Employee Data; Company Denies Breach as “Erroneous and Misleading”

• Pharmacy Network Sues Change Healthcare Post-Cyberattack

• Get this top-rated 12-in-1 electric screwdriver for $60!

• This 3-in-1 MagSafe charger is my new favorite travel accessory, it supports Qi2

• This power station has an irreplaceable emergency feature

• This portable power station has a standout feature that makes camping safer

• The Jackery Explorer 1000 is one of the best portable power stations

• Stop X’s Grok AI From Training on Your Tweets

• I can’t recommend this rugged power station enough to drone users, and it’s now $300 off

• One of the most durable power stations I’ve tested is not made by Anker or Jackery

• Get 50% off a Sam’s Club membership – here’s how

• Unlocking the Power of Behavioral Cloud Native Threat Detection and Response

• 3,000 Fake GitHub Accounts Used to Spread Malware in Stargazers Ghost Scheme

• These $50 earbuds blew me away with stunning sound and plenty of comfort

• The best GaN chargers of 2024: Expert tested

• 5 Linux commands for better group management (and how to use them)

• Telegram for Android hit by a zero-day exploit – Week in security with Tony Anscombe

• Buy a one-year subscription to Microsoft 365 for $45

• This Dell Inspiron is one of the most versatile, well-rounded laptops I’ve tested

• Navigating the Impact of Major IT Outages: Lessons from the CrowdStrike Incident

• This cheap fix made my Google Pixel Buds Pro sound better than ever

• French Authorities Launch Operation to Remove PlugX Malware from Infected Systems

• Unveiling the Latest Banking Trojan Threats in Latin America

• Cybersecurity Today Week in Review: CrowdStrike and more.

• Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials

• Response to CISA Advisory (AA24-207A): North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs

• FAQ: How Are STIGs, SRGs, SCAP, and CCIs Related?

• A bug in Chrome Password Manager caused user credentials to disappear

• Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services

• IT Security News Daily Summary 2024-07-26

• Friday Squid Blogging: Sunscreen from Squid Pigments

• The best Alexa devices of 2024: Expert tested and recommended

• These transparent earbuds by Nothing made my AirPods look and sound boring

• This Asus Copilot+ PC has one of the best displays I’ve seen on a laptop (and it exudes premium)

• How to calibrate your TV for the best picture quality – 2 easy and simple methods

• Apple reports iCloud Private Relay global outages for some users

• Negotiate Your Next Cyber Insurance Policy With This 6-Step Playbook

• 5 Innovative Cybersecurity Measures App Developers Should Incorporate in the Digital Transformation Race

• CrowdStrike meets Murphy’s Law: Anything that can go wrong will

• AI and Vulnerability Management: Industry Leaders Show Positive Signs

• EvilVideo Exploit: Telegram Zero-Day Vulnerability Allows Disguised APK Attacks

• Google Backtracks on Cookie Phaseout: What It Means for Users and Advertisers

• Researcher says deleted GitHub data can be accessed ‘forever’

• Chainguard Raises $140M to Drive AI Support, Global Growth

• Researchers Warn of Increased Cyberterrorism Activity Targeting Paris Olympics

• Scams to steer clear of as a college student, from a college student

• Effortless certificate management with automated CNAME validation

• National Defense University Cyber Professor Tapped as ONCD Deputy Director

• PKfail: 800+ Major PC Models have Insecure ‘Secure Boot’

• Ledger Flex: Secure self-custody with E Ink touchscreen display

• Your industrial network is not a commodity: it is strategic to your success

• Compromising the Secure Boot Process

• The Most Urgent Security Risks for GenAI Users are all Data-Related

• How to build a CA hierarchy across multiple AWS accounts and Regions for global organization

• Crowdstrike Threat Intelligence data leaked by hackers

• What is a computer exploit?

• 8 Benefits of Endpoint Detection & Response (EDR) You Should Know [2024]

• Software Maker MCG Health Settles Data Breach Suit for $8.8M

• How To Secure Your Angular Apps: End-To-End Encryption of API Calls

• Learn a new language with a Babbel subscription for 76% off

• The best TVs for PS5 of 2024: Expert tested

• One of the best budget Android tablets I’ve tested is not made by Samsung or Google

• Fortinet Training Institute Expands Cyber Education Opportunities for Veterans

• How Cyber Insurance Coverage is Evolving

• Meta takes down 63,000 sextortion-related accounts on Instagram

• Are We Ready For The Next Major Global IT Outage? Here’s All You Need to Know

• ERP Firm Data Breach Exposes Over 750 Million Records

• California’s Major Trial Court Falls Victim to Ransomware Attack

• Planting Trees in India: Green Team #GenerationRestoration

• Google Chrome Modifies Privacy Sandbox To Allow Cookies

• OpenAI Tests Search Engine Prototype Called ‘SearchGPT’

• My favorite accessory for DIY projects has a useful LED screen – and it’s game-changing

• Elon Musk’s X now trains Grok on your data by default – here’s how to opt out

• Belarus-linked Hackers Target Ukrainian Organizations with PicassoLoader Malware

• Digital Apartheid in Gaza: Unjust Content Moderation at the Request of Israel’s Cyber Unit

• IAM for MSPs Provider Evo Security Raises $6 Million

• CrowdStrike CEO: 97 Percent Of Windows Sensors Back Online

• The best bone conduction headphones of 2024: Expert tested and reviewed

• I replaced my Nest with this Arlo 2K video doorbell, and it’s perfect for smart home beginners

• Synnovis Restores Systems After Cyber-Attack, But Blood Shortages Remain

• What to expect from Made by Google 2024: Pixel 9 Pro Fold, Watch, Android 15, AI, and more

• We’ve entered the era of the smart ring. Here’s why it will shake up the wearables market

• BitLocker workaround may offer aid for CrowdStrike customers

• ServiceNow RCE Flaws Actively Exploited by Threat Actors to Steal Credentials

• How CISOs Enable ITDR Approach Through the Principle of Least Privilege

• Malicious Inauthentic CrowdStrike Falcon Crash Reporter Installer Distributed to German Entity

• Progress discloses second critical flaw in Telerik Report Server in as many months

• This AI-Powered Cybercrime Service Bundles Phishing Kits with Malicious Android Apps

• Hacktivists Claim Leak of CrowdStrike Threat Intelligence

• SeleniumGreed Cryptomining Campaign Exploiting Publicly Exposed Grid Services

• Buy a Costco membership and get a $40 gift card, free. Here’s how

• US Indicts Alleged North Korean State Hacker for Ransomware Attacks on Hospitals

• Suspect Indicted in North Korea Group’s Expansive Spying Operation

• Sheltering from the Cyberattack Storm

• A North Korean Hacker Tricked a US Security Vendor Into Hiring Him—and Immediately Tried to Hack Them

• Threat Actors Exploit Fresh ServiceNow Vulnerabilities in Attacks

• ExelaStealer Delivered “From Russia With Love”, (Fri, Jul 26th)

• I’ve tried a zillion desktop distros – it doesn’t get any better than Linux Mint 22

• The best humidifiers of 2024: Expert tested and reviewed

• The best iPads for college students in 2024: Expert tested and reviewed

• BIND updates fix four high-severity DoS bugs in the DNS software suite

• Thread Name-Calling: Using Thread Name for Offense

• Senator: Top Banks Only Reimburse 38% of Unauthorized Claims

• Elon Musk To Discuss $5 Billion xAI Investment With Tesla Board

• Europe Is Pumping Billions Into New Military Tech

• ZeroTier raises $13.5M to help avert CrowdStrike-like network problems

• Critical ServiceNow RCE Flaws Actively Exploited to Steal Credentials

• CrowdStrike Disruption Direct Losses to Reach $5.4B for Fortune 500, Study Finds

• Offensive AI: The Sine Qua Non of Cybersecurity

• US Charges North Korean Hacker for Ransomware Attacks on Hospitals

• OpenAI Launches SearchGPT Prototype

• Buy a Windows 11 Pro license for $25 right now

• DTX + UCX London is back: Global brands, cutting-edge technology and world-renowned speakers take centre stage

• In Other News: FBI Cyber Action Team, Pentagon IT Firm Leak, Nigerian Gets 12 Years in Prison

• Despite Bans, AI Code Tools Widespread in Organizations

• Scam Attacks Taking Advantage of the Popularity of the Generative AI Wave

• North Korean Hackers Targeted KnowBe4 with Fake IT Worker

• North Korean Hackers Target Critical Infrastructure for Military Gain

• Progress Software Fixed Critical Flaw in Telerik Report Server

• Google Chrome Now Asks for Passwords To Scan Protected Archives

• PKfail Vulnerability Allows Secure Boot Bypass on Hundreds of Computer Models

• Cybersecurity News: Microsoft Defender exploited, assassin’s encryption frustration, NK elite hackers

• Security Serious Unsung Heroes Awards 2024 open for nominations

• SocGholish: Fake Update Puts Visitors at Risk

• Happy System Administrator Appreciation Day 2024

• Master Cybersecurity With The Complete CompTIA Security+ SY0-701 Certification Kit by IDUNOVA

• Email Gateway Security Gaps Enable New Malware Tactics

• Patchwork Group Found Using Brute Ratel C4 and an Enhanced Version of PGoShell Backdoor

• Mimecast Acquires Veteran Data Security Firm Code42

• Onyx Sleet uses array of malware to gather intelligence for North Korea

• U.S. DoJ Indicts North Korean Hacker for Ransomware Attacks on Hospitals

• 97% of Devices Disrupted by CrowdStrike Restored as Insurer Estimates Billions in Losses

• Deepfake Attacks Prompt Change in Security Strategy

• Networking Equipment Riddled With Software Supply Chain Risks

• North Korean chap charged for attacks on US hospitals, military, NASA – and even China

• Terrorist Activity is Accelerating in Cyberspace – Risk Precursor to Summer Olympics and Elections

• The Role of DDoS Stress Testing in DDoS Protection

• Bridging the Expertise Gap: Enhancing Cybersecurity Skills in Compliance Professionals

• Play & LockBit Ransomware Join Hands to Launch Cyber Attacks

• Progress fixes critical RCE flaw in Telerik Report Server, upgrade ASAP! (CVE-2024-6327)

• North Korean state hacker infiltrates US security firm; Cybersecurity Today for Friday, July 26, 2024

• NHS Ransomware Attack leads to extreme blood shortage

• Harnessing Defensive AI: Safeguarding the Digital Realm

• CrowdStrike Warns of New Phishing Scam Targeting German Customers

• Ongoing Cyberattack Targets Exposed Selenium Grid Services for Crypto Mining

• North Korean chap charged for attacks on US hospitals, miiltary, NASA – and even China

• Critical Flaw in Telerik Report Server Poses Remote Code Execution Risk

• AI-generated deepfake attacks force companies to reassess cybersecurity

• 16% of organizations experience disruptions due to insufficient AI maturity

• Most CISOs feel unprepared for new compliance regulations

• Changing the Passive to Active: Updating SaaS Cybersecurity Strategy with Threat Management

• North Korean chap charged for attacks on US hospitals, NASA – and even China

• New infosec products of the week: July 26, 2024

• ISC Stormcast For Friday, July 26th, 2024 https://isc.sans.edu/podcastdetail/9070, (Fri, Jul 26th)

• Malware crew Stargazers Goblin used 3,000 GitHub accounts to make bank

• CrowdStrike update blunder may cost world billions – and insurance ain’t covering it all

• Beware of fake CrowdStrike domains pumping out Lumma infostealing malware

• A Guide to Open Source Software

• How To Implement a Gateway With Spring Cloud

• IT Security News Daily Summary 2024-07-25

• Microsoft’s generative search engine weds something new, something old

• Join Our Webinar: Zero Trust and IAM – Building a Secure Future

• Learning from CrowdStrike’s Quality Assurance Failures

• Progress Software fixed critical RCE CVE-2024-6327 in the Telerik Report Server

• Google’s DeepMind AI takes home silver medal in complex math competition

• The best smartwatch for kids that I’ve tested is not an Apple Watch or Garmin

• OpenAI’s newly released GPT-4o mini dominates the Chatbot Arena. Here’s why.

• The best silent mouse of 2024: Expert tested and reviewed

• FYI: Data from deleted GitHub repos may not actually be deleted

• North Korean Charged in Ransomware Attacks on American Hospitals

• CCNA: What It Means to Me, What Awaits in Cisco U.

• Emulating the Prickly Cactus Ransomware

• Google, Microsoft, Others Support U.S.-Based Spyware Lawsuits

• OpenAI launches SearchGPT – here’s what it can do and how to access it

• An explanation of Flipper Zero

• The CrowdStrike Outage and Market-Driven Brittleness

• One of the most versatile video doorbells I’ve tested is not made by Ring or Nest

• Cyber travel scams: The biggest scams to be aware of when planning your next trip

• AI’s Rapid Code Development Outpaces Security Efforts

• The massive computer outage over the weekend was not a cyber attack, and I’m not sure why we have to keep saying that

• Amazon Developing Cheaper AI Chips – Report

• 5 reasons to work with the competition, according to business leaders

• Disney+, Hulu and Max streaming bundle is now available for almost 40% off

• Apple Smartphone Sales In China Drop 6.7 Percent, Canalys Finds

• 5 Linux commands for group management and how to use them

• How to install Windows 11 the way you want (and sneak by Microsoft’s restrictions)

• North Korean Hacker Group Targeting Healthcare, Energy Sectors

• ConfusedFunction: A Privilege Escalation Vulnerability Impacting GCP Cloud Functions

• Uncle Sam accuses telco IT pro of decade-long spying campaign for China

• Researchers Claim Anyone Can Access Deleted, Private GitHub Repository Data

• Chainguard Raises $140 Million, Expands Tech to Secure AI Workloads

• LangChain Gen AI Under Scrutiny Experts Discover Significant Flaws

• Meta Ordered To Clean Up AI-Generated Porn By Oversight Board

• Windows update may present users with a BitLocker recovery screen

• SEXi / APT Inc Ransomware – What You Need To Know

• Play Ransomware Group is Targeting VMWare ESXi Environments

• India’s Digital Rise Sees Alarming Surge in Online Scams Targeting the Elderly

• The best MP3 players of 2024

• I’m a diehard Pixel user, but I’m considering switching for 2 reasons (and I’m not alone)

• Skip the Apple Watch: Google’s Fitbit Ace LTE is the best smartwatch for your kids

• Google’s Gemini chatbot gets highly anticipated updates. Here’s what it means for you

• Critical bug in Docker Engine allowed attackers to bypass authorization plugins

• Comparative Analysis of Password Hashing Algorithms: Argon2, bcrypt, scrypt, and PBKDF2

• Ransomware shift from Cyber Espionage for North Korea

• One of the best foldable phones I’ve tested is not a OnePlus or Motorola

• Improving Data Center Energy Efficiency to Power the AI Revolution

• Cisco Partner Conversations: Delivering for our clients with NTT DATA

• [2024] 10 Qualys Alternatives That Should Be on Your Shortlist

• Life at Fortinet: The Various Career Pathways in Cybersecurity

• Critical Microsoft Zero-Day Vulnerability Exploited in the Wild for Over a Year

• Wordfence Intelligence Weekly WordPress Vulnerability Report (July 15, 2024 to July 21, 2024)

• The Essential Guide to Total Protection in Microsoft 365

• The Importance of Ethical Hacking in Cybersecurity

• Chinese SMS Phishing Group Hits iPhone Users in India Post Scam

• The best tablets of 2024: Expert tested and reviewed

• The best iPads of 2024: Expert tested and reviewed

• Join BJ’s Wholesale Club for $20 (reg. $55)

• Sophos XG vs Fortinet Fortigate: 2024 Firewall Comparison

• Siemens SICAM Products

• Positron Broadcast Signal Processor

• CISA Releases Two Industrial Control Systems Advisories

• Hacked, leaked, exposed: Why you should never use stalkerware apps

• Electronic Frontier Foundation to Present Annual EFF Awards to Carolina Botero, Connecting Humanity, and 404 Media

• North Korean Hackers Shift from Cyber Espionage to Ransomware Attacks

• What I learned from the ‘Microsoft global IT outage’

• Pilot VPC and Advanced NAT: Securely Connect Overlapping Networks to AWS VPC

• Forget Dyson: I tested Roborock’s wet-dry hand vacuum and it left my floors spotless

• This $45 mini screwdriver kit has a useful LED screen – and I highly recommend it

• Spotify wants you to get Deluxe, a more expensive version with lossless audio and other perks

• How technology is being used to help support environmental conservation

• E-rate Program Expanded, Plus Cisco Knowledge Hub Updates

• The Road to CTEM, Part 3: BAS vs. Other Validation Technologies

• Navigating Cybersecurity Legal Liabilities

• CrowdStrike Blames ‘Undetected Error’ For World’s Largest IT Outage

• Nexo Cements User Data Security with SOC 3 Assessment and SOC 2 Audit Renewal

• Threat Actors Claiming Leak of IOC list with 250M Data, CrowdStrike Responded

• Unveiling the latest banking trojan threats in LATAM

• How to turn on Private DNS Mode on Android – and what it can do for you

• Buy a 5-year subscription to AdGuard VPN for $40

• The best iPad Air cases of 2024: Expert tested

• We’ve entered the era of the smart ring. Here are 3 reasons why I couldn’t be more excited

• At the Olympics, AI Is Watching You

• TransparentTribe’s Spear-Phishing Targeting Indian Government Departments

• You should probably fix this 5-year-old critical Docker vuln fairly sharpish

• Ransomware and BEC Make Up 60% of Cyber Incidents

• Navigating Legal and Ethical Challenges in Web Scraping

• Google Chrome Warns of Malicious Files While Downloading

• Protecting Your Cloud Application Against Unknown Risks

• CrowdStrike outage explained: What caused it and what’s next

• AI Accelerates Code Development Faster Than Security Teams can Keep up

• BIND Updates Resolve High-Severity DoS Vulnerabilities

• Chainguard raises $140 million to strengthen open source software security

• Alphabet To Invest $5 Billion In Waymo Self-Driving Unit

• Data breach exposes US spyware maker behind Windows, Mac, Android and Chromebook malware

• Phishing Campaign Targeting Mobile Users in India Using India Post Lures

• Report: Malware Attacks Surge 30% in First Half of 2024

• Deep Dive: Unveiling the Untold Challenges of Single Sign-On (SSO) Management

• Faulty Software Update Shuts Down Critical Infrastructure, Highlighting Major Risks

• The best noise-canceling earbuds of 2024: Expert tested and reviewed

• Get Microsoft Office for Windows or Mac for $25 right now

• The best foldable phones of 2024: Expert tested and reviewed

• Apple Maps is now on the web – here’s how you can use it, and not just for directions

• ‘Stargazer Goblin’ Amasses Thousands of Rogue GitHub Accounts to Spread Malware

• 5 Echo Show settings to change to make your smart display less annoying

• Kaspersky says Uncle Sam snubbed proposal to open up its code for third-party review

• At The 2024 Summer Olympics, AI Is Watching You

• Pro-Palestinian Actor Levels Six-Day DDoS Attack on UAE Bank

• Vanta Raises $150M Series C, Now Valued at $2.45B

• Docker fixes critical auth bypass flaw, again (CVE-2024-41110)

• Microsoft’s Windows Hello for Business Flaw Let Attackers Bypass Authentication

• Data Wallets Using the Solid Protocol

• Major Russian Banks Hit with DDoS Attacks as Ukraine Claims Responsibility

• Lakera Raises $20 Million to Secure GenAI Applications

• Network of 3,000 GitHub Accounts Used for Malware Distribution

• Thawing Your Email Security Strategy with Frost’s 2024 Radar Report: A Dynamic Cyber Threat Landscape

• Meta Removes 63,000 Instagram Accounts Linked to Nigerian Sextortion Scams

• 6 Types of Applications Security Testing You Must Know About

• I spent a week with Samsung’s Galaxy Z Flip 6. Here’s what you should know before buying one

• EDR vs. SIEM: What’s the difference?

• Hackers exploit Microsoft Defender SmartScreen bug CVE-2024-21412 to deliver ACR, Lumma, and Meduza Stealers

• Infisical: Open-source secret management platform – Help Net Security

• APT45: North Korea’s Digital Military Machine

• Akira Ransomware Gang targets Split Airport of Croatia

• Revolut Gains UK Banking Licence

• Buy a Microsoft Visual Studio Pro license for 90% off

• Echoes of Braodo Tales from the Cyber Underworld

• Researchers Reveal ConfusedFunction Vulnerability in Google Cloud Platform

• Webinar: Securing the Modern Workspace: What Enterprises MUST Know about Enterprise Browser Security

• Cybersecurity Is a Communications Problem

• IR Trends: Ransomware on the rise, while technology becomes most targeted sector

• AI Tool Identifies BOLA Vulnerabilities in Easy!Appointments

• LummaC2 Malware Using Steam Gaming Platform as C2 Server

• Over Half of UK Workers Haven’t Received Training on Avoiding Phishing Scams

• Learning from CrowdStrike’s quality assurance failures

• Cybersecurity News: CrowdStrike details, Chrome keeps cookies, BreachForums leaked

• Google Boosts Chrome Protections Against Malicious Files

• Third-Party Cookies Stay: Google’s New Plan for Web Browsing Privacy

• CAST SBOM Manager automates creation and handling of SBOMs

• Malware Attacks Surge 30% in First Half of 2024

• Okta Browser Plugin Reflected Cross-Site Scripting CVE-2024-0981

• A Guide to Select the Best Operating System for NAS Data Recovery

• Most IT Leaders Say Severity of Cyber-Attacks has Increased

• Lakera raises $20 million to secure GenAI applications

• XWorm Hidden With Process Hollowing, (Thu, Jul 25th)

• Patch management still seemingly abysmal because no one wants the job

• BIND 9.20 released: Enhanced DNSSEC support, application infrastructure improvements

• Ukraine Hackers Hit Major Russian banks with DDoS attacks

• Condo.com – 1,481,555 breached accounts

• Hacker claims theft of Piramal Group’s employee data

• New Chrome Feature Scans Password-Protected Files for Malicious Content

• Critical Docker Engine Flaw Allows Attackers to Bypass Authorization Plugins

• How CISOs enable ITDR approach through the principle of least privilege

• Explore Talent – 5,371,574 breached accounts

• Cloud security threats CISOs need to know about

• Researchers expose GitHub Actions workflows as risky and exploitable

• The most urgent security risks for GenAI users are all data-related

• Briefing: Negotiating States Must Address Human Rights Risks in the Proposed UN Surveillance Treaty

• How a cheap barcode scanner helped fix CrowdStrike’d Windows PCs in a flash

• ISC Stormcast For Thursday, July 25th, 2024 https://isc.sans.edu/podcastdetail/9068, (Thu, Jul 25th)

• The months and days before and after CrowdStrike’s fatal Friday

• Cybersecurity Firm KnowBe4 Tricked into Hiring North Korean Hacker as IT Pro

• Michigan Medicine data breach impacted 56953 patients

• Journalists Sue Massachusetts TV Corporation Over Bogus YouTube Takedown Demands

• Fatal timeline of CrowdStrike’s week from hell – Feb to now

• Docker Patches Critical AuthZ Plugin Bypass Vulnerability Dating Back to 2018

• Nvidia’s latest AI offering could spark a custom model gold rush

• IT Security News Daily Summary 2024-07-24

• NCSWIC’s Planning, Training, and Exercise Committee releases “Set Your PACE Plan” Flyer

• Buy Microsoft Project Pro or Microsoft Visio Pro for $20 right now

• U.S. CISA adds Microsoft Internet Explorer and Twilio Authy bugs to its Known Exploited Vulnerabilities catalog

• Oops. Apple relied on bad code while flaming Google Chrome’s Topics ad tech

• KnowBe4 Unknowingly Hired Fake North Korean IT Worker

• Learn a new language with a Babbel subscription for 76% off right now

• Are You Configured for Failure?

• KnowBe4 Unknowingly Hires Fake North Korean IT Worker

• How Behavioral Biometrics Enhances Fraud Prevention

• The future of work: How Salesforce and Workday’s AI alliance will transform your office

• Meta Quest 3 is getting AI before Apple’s Vision Pro does – here’s how to enable it

• The best external hard drives of 2024: Expert tested

• How my 4 favorite AI tools help me get more done at work

• Zero Trust in the Age of AI: Join our online event to learn how to strengthen your security posture

• Telcos given extra time to retire 3G networks

• Sign up for a Costco membership and get a $40 gift card, free. Here’s how

• Congratulations to the Top MSRC 2024 Q2 Security Researchers!

• I tested the 3 best VPNs for streaming ahead of the Summer Olympics

• How to watch the 2024 Summer Olympics: Every streaming option

• Upgrade to Windows 11 Pro for $25 right now

• Meet Stability AI’s Stable Video 4D, a nuanced take on AI video generation

• AT&T data breach: What’s next for affected customers?

• KnowBe4 catches North Korean hacker posing as IT employee

• Zest Security Aims to Resolve, Not Just Mitigate Cloud Risks

• NHS Staff Say New Tech Will Treat Extra 18.6 Million Patients A Year

• SAFECOM and NCSWIC Publish Fall 2023 Joint SAFECOM-NCSWIC Bi-Annual Meeting Executive Summaries

• The best MagSafe battery packs of 2024: Expert tested and reviewed

• How to enable Slack notifications on your Apple Watch

• Building cyber-resilience: Lessons learned from the CrowdStrike incident

• TracFone will pay $16 million to settle FCC data breach investigation

• One of the best E Ink tablets I’ve tested is not a ReMarkable or Kindle Paperwhite

• The best portable jump starters of 2024: Expert recommended

• 10 social media scams and how to avoid them

• LA County Superior Court Hit by Ransomware Attack

• Alphabet Q2 Beats Expectations, But Shares Dip

• This versatile Dell laptop surprised me with 3 standout features

• The best headphones for working out: Expert tested and reviewed

• OpenAI’s budget GPT-4o mini model is now cheaper to fine-tune, too

• F5: AI Applications Will Complicate ‘Unsustainable’ Hybrid Multicloud Sprawl in Australia

• Uncle Sam opens probe into CrowdStrike turbulence at Delta Air Lines

• ASP.NET Core Web Apps

• This AI-powered Linux terminal app can help you learn how to use commands

• Summer Olympics: What IT Teams Need to Do Before & During the Event for Their Businesses

• Is GhostEmperor Back? Sygnia Finds Clues in Recent Cyber Incident

• State-Sponsored Cyber Threats: Daggerfly’s Upgraded Malware Toolkit

• Canada’s Oil and Gas Sector Faces Rising Cybersecurity Threats Amid Digital Transformation

• KnowBe4 targeted by North Korea with Insider Threat

• How Amazon can turn around its failing Alexa business in 4 steps

• One of the best work laptops I’ve tested is not a Lenovo ThinkPad or MacBook

• The best Kindle readers of 2024: Expert tested and reviewed

• 7 Best Business Antivirus Software Solutions in 2024

• ISC Releases Security Advisories for BIND 9

• CrowdStrike offers a $10 apology gift card to say sorry for outage

• OT/ICS and IoT Incident Response Plan

• AI Surveillance at Paris Olympics Raise Privacy Concerns

• Smishing Exposed How to Recognize Report and Prevent Text Message Scams

• Google Cancels Plan To Axe Third Party Cookies For Chrome Browser

• I can’t travel without this Anker GaN wall charger. Here’s why you shouldn’t either

• CrowdStrike: Buggy Validator Started Massive Outage

• Robot Dog Internet Jammer

• The best radar detectors: Expert recommended

• The sub-$50 earbuds I recommend most aren’t by Bose or Sony

• The best drones of 2024: Expert tested and reviewed

• Windows Patch Tuesday update might send a user to the BitLocker recovery screen

• 12 top contact center platforms of 2024

• Organizations Warned of Exploited Twilio Authy Vulnerability

• Meta Releases Open Source Llama 3.1 AI Model

• ShadowRoot Ransomware Attacking Organizations With Weaponized PDF Documents

• This Sony Bravia is my No. 1 most recommended TV right now – and it would be great to watch the Olympics

• The best self-cleaning litter boxes of 2024: Expert tested

• The best large tablets of 2024: Expert tested and reviewed

• Slack now offers four iPhone widgets – here’s how you can use them

• One of Samsung’s best TVs of all time is on sale and would be a great TV for the Olympics

• Mimecast Announces Acquisition of Code42, Expands Human Risk Management Platform with Visibility into Insider Threats

• Network of ghost GitHub accounts successfully distributes malware

• Indian Firm Linked to Fake DMCA Notices Silencing Journalists

• BlueStacks Emulator For Windows Flaw Exposes Millions Of Gamers To Attack

• Chinese Hackers Using Shared Framework To Create Multi-Platform Malware

• Beware Of Malicious Python Packages That Steal Users Sensitive Data

• 250 Million Hamster Kombat Players Targeted Via Android And Windows Malware

• BreachForumsV1 Database Leaked: Private messages, Emails & IP Exposed

• The best iPad keyboard cases of 2024: Expert tested and reviewed

• 7 password rules to live by in 2024, according to security experts

• The best digital notebooks you can buy in 2024: Expert tested and reviewed

• Risk & Repeat: Faulty CrowdStrike update causes global outage

• Two Vulnerabilities Discovered in LangChain GenAI Framework

• CISOs, CIOs Struggle with Data Protection Challenges in AI, Cloud Era

• Vanta raises $150 million accelerate its AI product innovation

• Crisis communication: What NOT to do

• Data pilfered from Pentagon IT supplier Leidos

• Cybersecurity Startup Protexxa Closes $10M Series A Round

• U.S. Government Escalates Sanctions to Combat Rising Cybersecurity Threats

• CrowdStrike Shares How a Rapid Response Content Update Caused Global Outage

• Google Chrome 127 Released with a fix for 24 Security Vulnerabilities

• Check Point Research Reveals Q2 2024 Brand Phishing Trends: Microsoft Tops List While New Entries Signal Shifting Threat Landscape

• 3 ways Meta’s Llama 3.1 is an advance for Gen AI

• Credit Karma unveils updated AI tools to help you better understand your finances

• Philippines to End Online Casinos, Maybe Scams Too

• Malware Campaigns Target Hamster Kombat Players

• Verizon Subsidiary Settles With FCC for $16M Over Three Data Breaches

• CrowdStrike Admits it Doesn’t ‘Canary’ Test all Updates

• Optimizing Security Operations with DirectDefense

• Russia-Linked Brute-Force Campaign Targets EU via Microsoft Infrastructure

• DeFi Crypto Exchange dYdX v3 Website Hacked in DNS Hijacking Attack

• How the Newest Tech Changes Cybersecurity Needs in the Legal Industry

• Microsoft Account Security Alert Email: Recognize the Scam

• CrowdStrike blames buggy testing software for disastrous update

• Wiz Rejects $23 Billion Acquisition Bid From Google – Report

• The best electric screwdrivers of 2024: Expert tested and reviewed

• A Hacker ‘Ghost’ Network Is Quietly Spreading Malware on GitHub

• Dazz snaps up $50M for AI-based, automated cloud security remediation

• How a Trust Center Solves Your Security Questionnaire Problem

• Researchers Detail on How Defenders Eliminate Detection Gaps in AWS Environments

• Report: HHS Needs to Beef up Cloud Security and Skills

• Fake CrowdStrike Repair Manual Pushes New Infostealer Malware

• CrowdStrike Explains Why Bad Update Was Not Properly Tested

• Coalfire announces Cyber Security On-Demand portfolio

• Extracting Value from Your Investment in AI

• Microsoft Blames 2009 EU Agreement For World’s Biggest IT Outage

• Windows SmartScreen Flaw Enabling Data Theft in Major Stealer Attack

• The Hidden Menace of Phantom Attackers on GitHub by Stargazers Ghost Network

• Private Internet Access (PIA) vs NordVPN: Which VPN Is Better?

• This Machine Exposes Privacy Violations

• China-linked APT group uses new Macma macOS backdoor version

• Chinese Espionage Group Upgrades Malware Arsenal to Target All Major Operating Systems

• Patchwork Hackers Target Bhutan with Advanced Brute Ratel C4 Tool

• How to Reduce SaaS Spend and Risk Without Impacting Productivity

• Accelerating Analysis When It Matters

• 10 Ways AI Can Help Organizations Tackle Cyberattacks

• Drone Usage Policy

• Alphabet’s Reported $23B Bet on Wiz Fizzles Out

• Critical Exim Vulnerability Threatens Millions of Email Servers

• North Korean Hackers Targeted Cybersecurity Firm KnowBe4 with Fake IT Worker

• Cybersecurity News: Wiz deal crumbles, CrowdStrike aftermath, dYdX exchange hack

• A (somewhat) complete timeline of Talos’ history

• The Power and Peril of RMM Tools

• Infostealer Campaign Exploits Microsoft Windows SmartScreen Flaw to Spread Payloads

• Craxel Black Forest Reaper boosts cyber defense for organizations

• British politicians show exactly what NOT to do online

• Possible APT28-linked Hackers Target Ukraine’s Scientific Institutions

• Permit Share-If enables developers to implement secure collaboration features into their apps

• CrowdStrike Explains Friday Incident Crashing Millions of Windows Devices

• Pentagon IT Service Provider Hacked: U.S. Government Secrets Exposed

• The Dual Impact of AI on Power Grids: Efficiency and Vulnerability

• Chinese ‘Cybercrime Syndicate’ Behind Gambling Sites Advertised at European Sporting Events

• Google Abandons Plan to Drop Third-Party Cookies in Chrome

• School gets an F for using facial recognition on kids in canteen

• Cyber Insurance Market Evolves as Threat Landscape Changes

• Emulating and Detecting Scattered Spider-like Attacks

• SocGholish: Fake update puts visitors at risk

• Verizon to Pay $16 Million in TracFone Data Breach Settlement

• Why SPRS Matters and 4 Steps to Improve Your Security Posture

• GitGuardian’s tool helps companies discover developer leaks on GitHub

• Google Criticized for Abandoning Cookie Phase-Out

• The Value in Root Cause Analysis for Vulnerability Management

• BreachForums v1 database leak is an OPSEC test for hackers

• Spanish Police Arrest Three Suspects Linked to Pro-Moscow NoName057(16) Hackers

• “Mouse Logger” Malicious Python Script, (Wed, Jul 24th)

• CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List

• Microsoft Defender Flaw Exploited to Deliver ACR, Lumma, and Meduza Stealers

Generated on 2024-08-01 00:01:28.949840