IT Security News Monthly Summary – July

• IT Security News Weekly Summary – Week 26

• IT Security News Daily Summary 2024-06-30

• The dangers of voice fraud: We can’t detect what we can’t see

• USENIX Security ’23 – Beyond The Gates: An Empirical Analysis of HTTP-Managed Password Stealers and Operators

• Russia-linked Midnight Blizzard stole email of more Microsoft customers

• Kadokawa Group Hit by Major Ransomware Attack

• Pipeline Hijacking: GitLab’s Security Wake-Up Call

• Phishing And The Threats of QR Codes

• Montgomery County, Md.’s Chatbot Shows GenAI in Action

• Kimsuky Unleashes TRANSLATEXT Malware on South Korean Academic Institutions

• TeamViewer’s Corporate Network Compromised in Suspected APT Hack

• 37signals Boosts Profits by Over $1 Million by Exiting Cloud Computing

• Russia-linked group APT29 likely breached TeamViewer’s corporate network

• Security Affairs newsletter Round 478 by Pierluigi Paganini – INTERNATIONAL EDITION

• Week in review: MOVEit auth bypass flaws quitely fixed, open-source Rafel RAT targets Androids

• USENIX Security ’23 – A Plot is Worth a Thousand Words: Model Information Stealing Attacks via Scientific Plots

• Staying Ahead of Adversarial AI with Incident Response Automation

• IT Security News Daily Summary 2024-06-29

• The biggest data breaches in 2024: 1B stolen records and rising

• Infosys McCamish Systems data breach impacted over 6 million people

• GitHub Artifact Attestations sign and verify software artifacts

• Why You Should Mask Your Email Address

• Apology Accepted: Ken Griffin’s Tax Records and the IRS

• Virtual Escape; Real Reward: Introducing Google’s kvmCTF

• Sustaining Digital Certificate Security – Entrust Certificate Distrust

• How Data Inference Could Expose Customer Information: The Case of UnitedHealth Breach

• Symmetric vs. Asymmetric Encryption in the Cloud: Choosing the Right Approach

• Addressing Financial Organizations’ Digital Demands while Avoiding Cyber Threats

• Mirai-like Botnet Targets Zyxel NAS Devices in Europe for DDoS Attacks

• Google to Block Entrust Certificates in Chrome Starting November 2024

• AI-Generated Exam Answers Outperform Real Students, Study Finds

• Hyperscaling and On-Chain Confidentiality: The Cornerstones of Web3’s Future

• China’s Backdoor Data Infiltration: A Growing Concern For Indian Government

• Google Is Piloting Face Recognition for Office Security

• The US Wants to Integrate the Commercial Space Industry With Its Military to Prevent Cyber Attacks

• AI Accelerates Healthcare’s Digital Transformation

• Security News This Week: Google Is Piloting Face Recognition for Office Security

• What Are the Cybersecurity Threats When Allowing Third-Party Cookies on Mac?

• Embracing automated policy as code in financial services

• Post-quantum cryptography: Code-based cryptography

• API security: The importance of rate limiting policies in safeguarding your APIs

• Generative AI vs. Predictive AI: A Cybersecurity Perspective

• Your Phone’s 5G Connection Is Vulnerable to Bypass, DoS Attacks

• Key trends shaping the threat landscape in H1 2024 – Week in security with Tony Anscombe

• Critical GitLab Bug Lets Attackers Run Pipelines as Any User

• China-Sponsored Attackers Target 40K Corporate Users in 90 Days

• DAST Vs. Penetration Testing: Comprehensive Guide to Application Security Testing

• HubSpot Investigating Cyber Attack Following Customer Account Hacks

• Betting on Your Digital Rights: EFF Benefit Poker Tournament at DEF CON 32

• A cyberattack shut down the University Hospital Centre Zagreb in Croatia

• June 2024 Web Server Survey

• IT Security News Daily Summary 2024-06-28

• Friday Squid Blogging: New Squid Species

• Unfurling Hemlock Tossing ‘Cluster Bombs’ of Malware

• CISA looked at C/C++ projects and found a lot of C/C++ code. Wanna redo any of it in Rust?

• TeamViewer Confirms Security Breach by Russian Midnight Blizzard

• How the FTC Can Make the Internet Safe for Chatbots

• USENIX Security ’23 – PCAT: Functionality and Data Stealing from Split Learning by Pseudo-Client Attack

• How To Plan a (Successful) MuleSoft VPN Migration (Part II)

• TeamViewer says Russia broke into its corp IT network

• How to use Social-Engineer Toolkit

• TeamViewer breached by Russian state actor Midnight Blizzard

• HubSpot says it’s investigating customer account hacks

• Quora’s Chatbot Platform Poe Allows Users to Download Paywalled Articles on Demand

• Hubspot says it’s investigating customer account hacks

• Microsoft Alerts More Customers to Email Theft in Expanding Midnight Blizzard Hack

• Temu is Malware — It Sells Your Info, Accuses Ark. AG

• Hacker Claims Data Breach of India’s Blue-Collar Worker Database

• Jack Dorsey Warns: The Blurring Line Between Real and Fake

• The Role of Immutable Data Storage in Strengthening Cybersecurity

• Fresh MOVEit Vulnerability Under Active Exploitation: Urgent Updates Needed

• TEMU sued for being “dangerous malware” by Arkansas Attorney General

• LMSYS launches ‘Multimodal Arena’: GPT-4 tops leaderboard, but AI still can’t out-see humans

• Mississippi Can’t Wall Off Everyone’s Social Media Access to Protect Children

• The Eureka Moment: Discovering Application Traffic Observability

• Skeleton Key the Latest Jailbreak Threat to AI Models: Microsoft

• Kimsuky Using TRANSLATEXT Chrome Extension to Steal Sensitive Data

• Progress Software Releases Security Bulletin for MOVEit Transfer

• New Unfurling Hemlock Threat Actor Floods Systems with Malware

• Cybersecurity breach of TeamViewer Corporate environment by APT29

• Chrome to Distrust Entrust Certificates by November 2024

• SandboxAQ Joins the FIDO Alliance to Further Drive the Use of Secure Protocols instead of Passwords

• Cross-Platform Product Release: Heimdal Integrates with HaloPSA

• Elevating Cloud Security: Highlights from CloudNativeSecurityCon 2024

• What Is Application Security Posture Management (ASPM): A Comprehensive Guide

• 3 More Plugins Infected in WordPress.org Supply Chain Attack Due to Compromised Developer Passwords

• What Is Cloud Workload Security? Ultimate Guide

• Review: Top 5 For Outsourced Customer Service Solutions UK and Abroad

• Remote Access Giant TeamViewer Says Russian Spies Hacked Its Corporate Network

• CISA and Fauquier County Hold K-12 Active Shooter Exercise

• Nyobolt Reveals EV Battery That Recharges In Just Five Minutes

• Falcon Cloud Security Supports Google Cloud Run to Strengthen Serverless Application Security

• Exposure Management – Browser Extension Inventory

• Seeing the Unseen: Preventing Breaches by Spotting Malicious Browser Extensions

• Unlock the future of security

• AuthZed Raises $12 Million for Permissions Management Technology

• GetReal Labs Emerges From Stealth to Tackle Deepfakes

• GitLab Releases Patch for Critical CI/CD Pipeline Vulnerability and 13 Others

• Google cuts ties with Entrust in Chrome over trust issues

• 5 WordPress Plugins Compromised; Millions of Websites at Risk

• Kimsuky Deploys TRANSLATEXT to Target South Korean Academia

• TeamViewer Cyber-Attack Attributed to Russian APT Midnight Blizzard

• How TrafficPeak Helped Provide a Superior Football Viewing Experience

• Vulnerability management empowered by AI

• Remote access giant TeamViewer says Russian spies hacked its corporate network

• Malware Peddlers Experimenting with BPL Sideloading and Masking Malicious Payloads as PGP Keys

• Microsoft hits snooze again on security certificate renewal

• Microsoft Details ‘Skeleton Key’ AI Jailbreak Technique

• In Other News: Malware Delivered by ISP, Temu Spying, Critical Dataverse Vulnerability

• Cyber Workforce Grows 15% at Large Organizations as Security is Prioritized

• Data: The Final(?) Security Frontier

• Fairness and Safety of LLMs

• Gitleaks: Open-Source Solution for Detecting Secrets in Your Code

• Tesla Argues Elon Musk Won Battle Over $56 Billion Pay Package

• Crypto-Gang Leader Convicted of Vicious Kidnaps, Robbery

• ‘Poseidon’ Mac stealer Distributed via Malicious Google Ads

• Combatting the Evolving SaaS Kill Chain: How to Stay Ahead of Threat Actors

• 8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency Mining

• Stopping Supply Chain Attacks with Cisco’s User Protection Suite

• New MOVEit Transfer Critical Vulnerability Targeted by Threat Actors

• US Federal Agencies Warn Healthcare Sector of Payment Diversion Schemes

• James Bamford on Section 702 Extension

• Nuance Ex-Employee Indicted for Breach Affecting 1 Million

• Chicago Children’s Hospital Says 791,000 Impacted by Ransomware Attack

• Fortra Patches Critical SQL Injection in FileCatalyst Workflow

• New Ransomware, Infostealers Pose Growing Risk in 2024

• CISA Report Finds Critical Open-Source Memory Safety Risks

• How to Enhance Security Without Affecting the Customer Experience

• Working with a cybersecurity committee of the board

• Mitigating Skeleton Key, a new type of generative AI jailbreak technique

• New SnailLoad Attack Exploits Network Latency to Spy on Users’ Web Activities

• OpenAI Signs Content Agreement With Time

• Inside a Violent Gang’s Ruthless Crypto-Stealing Home Invasion Spree

• CISA Adds GeoServer, Linux Kernel, and Roundcube Webmail Bugs to its Known Exploited Vulnerabilities Catalog

• WhisperGate Data-Wiping Malware Suspect Indicted

• Google Thwarts Over 10,000 Attempts by Chinese Influence Operator

• Support of SSL 2.0 on web servers in 2024, (Fri, Jun 28th)

• The Contrastive Credibility Propagation Algorithm in Action: Improving ML-powered Data Loss Prevention

• TeamViewer Internal Systems Accessed by APT Hackers

• Snowblind Abuses Android seccomp Sandbox To Bypass Security Mechanisms

• Cyber Insurance Terms Drive Companies To Invest More in Security, Report Finds

• Russian APT Reportedly Behind New TeamViewer Hack

• Polyfill Domain Shut Down as Owner Disputes Accusations of Malicious Activity

• The Urgency to Uplevel AppSec: Securing Your Organization’s Vulnerable Building Blocks

• Cybersecurity News: Gas chromatograph vulnerabilities, Cloudflare rebukes Polyfill, Evolve Bank breach

• How to check how much RAM my computer has?

• 16-31 March 2024 Cyber Attacks Timeline

• B+ Security Rating Masks Healthcare Supply Chain Risks

• Cyber Security Today, June 28, 2024 – Cyber authorities remind developers to switch to memory-safe coding languages

• Elevate Your Career in AI & ML with Leading Academia and Industry Insights

• California Privacy Regulator to Partner With French Data Authority

• Xeno RAT Spread via .gg Domains and GitHub

• U.S. Department of Justice Announced $10 Million Reward For Russian Hacker

• Better Resilience Sees More Extorted Companies Refuse To Pay Their Ransomware Attackers

• Researchers Warn of Flaws in Widely Used Industrial Gas Analysis Equipment

• Mitigating Skeleton Key, a New Type of Generative AI Jailbreak Technique

• Cyberattack Rate Surges as Novel Malware Growth Accelerates

• USX Cyber GUARDIENT helps MSPs protect their clients

• Hackers Slip Backdoor into WordPress Plugins in Latest Supply-Chain Attack

• Chinese Hacker Groups Using Off-The-Shelf Tools To Deploy Ransomware

• No Patches for Hospital Temperature Monitors’ Critical Flaws

• Vanna AI Prompt Injection Vulnerability Enables RCE

• Former IT Employee Stolen 1 Million Geisinger Patient’s Personal Data

• US announces a $10M reward for Russia’s GRU hacker behind attacks on Ukraine

• ‘Skeleton Key’ attack unlocks the worst of AI, says Microsoft

• TeamViewer Detects Security Breach in Corporate IT Environment

• Apple Safari Browser Data Security ad against Google Chrome

• How Sanctions Can Help in Fighting State-Sponsored Ransomware Actors

• Examining Water Sigbin’s Infection Routine Leading to an XMRig Cryptominer

• Web3 in Healthcare: Privacy, Consent, and Equity

• CISOs becoming more comfortable with risk levels

• Leveraging AI and automation for enhanced security operations

• Polyfill.io owner punches back at ‘malicious defamation’ amid domain shutdown

• News Alert: Infinidat introduces advanced cyber resiliency and recovery solution for enterprises

• Web scraping is not just a security or fraud problem

• New infosec products of the week: June 28, 2024

• ISC Stormcast For Friday, June 28th, 2024 https://isc.sans.edu/podcastdetail/9040, (Fri, Jun 28th)

• GitHub Artifact Attestations now generally available

• Ticketek – 17,643,173 breached accounts

• Mechanical computer relies on kirigami cubes, not electronics

• TeamViewer can’t bring itself to say someone broke into its network – but it happened

• Webinar: How to secure Microsoft Copilot & Gen AI

• Amazon Is Investigating Perplexity Over Claims of Scraping Abuse

• LockBit group falsely claimed the hack of the Federal Reserve

• Victory! Grand Jury Finds Sacramento Cops Illegally Shared Driver Data

• IT Security News Daily Summary 2024-06-27

• How To Plan a (Successful) MuleSoft VPN Migration (Part I)

• LockBit group wrongly claimed the hack of the Federal Reserve

• New Relic CEO sets observability strategy for the AI age

• ACM will no longer cross sign certificates with Starfield Class 2 starting August 2024

• An Inside Look at The Malware and Techniques Used in the WordPress.org Supply Chain Attack

• GitHub Artifact Attestions now generally available

• AI Is Changing the Way Enterprises Look at Trust: Deloitte & SAP Weigh In

• Container Security Scanning: Vulnerabilities, Risks and Tooling

• An Artificially Intelligent Peer Reviewer Arrives

• US Announces Charges, Reward for Russian National Behind Wiper Attacks on Ukraine

• Drone As First Responder Programs Are Swarming Across the United States

• 14 Types of Malware and How to Prevent Them

• Thousands of UEFA Customer Credentials Sold on Dark Web

• Third-Party Trust Issues: AppSec Learns from Polyfill

• Rethinking the Cloud: Why Companies Are Returning to Private Solutions

• We’re not talking about cryptocurrency as much as we used to, but there are still plenty of scammers out there

• A new MOVEit vulnerability is igniting hacking attempts. Companies should patch ASAP

• What to do if you’re using Kaspersky security software that is now banned in the U.S.

• VMware vCenter RCE Vulnerability: What You Need to Know

• FBI Offers $5 Million Bounty For Fugitive ‘CryptoQueen’ Ruja Ignatova

• Precision AI — Revolutionizing Cybersecurity with Our Latest Campaign

• Toward greater transparency: Unveiling Cloud Service CVEs

• Polyfill Library Injected with Malware Impacting 100,000 Websites

• 2024-06-25 – Latrodectus infection with BackConnect and Keyhole VNC

• Smart Infrastructure Gets Lit Up!

• The Evolving SSL/TLS Certificate Lifecycle & How to Manage the Changes

• Driving licences and other official documents leaked by authentication service used by Uber, TikTok, X, and more

• Surprise! The Latest ‘Comprehensive’ US Privacy Bill Is Doomed

• Startups scramble to assess fallout from Evolve Bank data breach

• CISOs Reveal Firms Prioritize Savings Over Long-Term Security

• Lack Of Clarity On AI Regulation Hindering UK Projects

• Datadog DASH updates push into fresh IT automation turf

• CISA adds GeoSolutionsGroup JAI-EXT, Linux Kernel, and Roundcube Webmail bugs to its Known Exploited Vulnerabilities catalog

• Access AWS services programmatically using trusted identity propagation

• LockBit ransomware attack on Evolve Bank via US Federal Reserve

• Data Governance: Data Integration (Part 4)

• MerkSpy: Exploiting CVE-2021-40444 to Infiltrate Systems

• Operation First Light Seizes $257m in Global Scam Bust

• Wordfence Intelligence Weekly WordPress Vulnerability Report (June 17, 2024 to June 23, 2024)

• VinFast Touts Cheap And Tiny EV, Amid Sales Concerns

• TELSAT marKoni FM Transmitter

• Johnson Controls Illustra Essentials Gen 4

• Yokogawa FAST/TOOLS and CI Server

• LogRhythm Partners with The National Museum of Computing to Preserve Technological Heritage and Promote Inclusion in the Cybersecurity Industry

• Ransomware Strikes Auto Dealerships: The CDK Global Incident

• Rust-Based P2PInfect Botnet Evolves with Miner and Ransomware Payloads

• Global Revival of Hacktivism Requires Increased Vigilance from Defenders

• 12 Common Concerns of the Permeable IoT Attack Surface

• Check Point vs Palo Alto (2024): Which NGFW Is Better?

• What Is Cloud Data Security? Definition, Benefits & Best Practices

• PoC Exploit for Critical Fortra FileCatalyst Flaw Published

• Government Has Extremely Heavy Burden to Justify TikTok Ban, EFF Tells Appeals Court

• Elevating Disaster Recovery in Cybersecurity With AI-Driven Hyperautomation

• US lawmakers wave red flags over Chinese drone dominance

• Inside the Mind of a CISO: Survey and Analysis

• US, Allies Warn of Memory Unsafety Risks in Open Source Software

• GitLab Security Updates Patch 14 Vulnerabilities

• Designed Receivable Solutions Data Breach Impacts 585,000 People

• P2Pinfect Worm Now Delivering Ransomware on Redis Servers

• The Blockchain Revolution: Transforming Industries Beyond Finance

• Celebrating a Year of Innovation with Akamai Brand Protector

• SpaceX Wins Contract For International Space Station Disposal

• ‘Poseidon’ Mac stealer distributed via Google ads

• Strengthening Digital Defenses: Cyber Security Challenges and Top Tips for MSMEs

• Majority of Critical Open Source Projects Contain Memory Unsafe Code

• Infinidat Introduces Cyber Storage Protection to Reduce Ransomware and Malware Threats

• What is the Fediverse and the Social Network Platforms It Powers

• Exclusive: Zip’s AI procurement platform drives $4.4 billion in savings, reshaping enterprise spending

• Palo Alto Networks Cybersecurity Academy Supports Future Cyber Leaders

• Third of Organisations Have Suffered Three or More Data Breaches in the Last 24 Months

• Poc Exploit Released for Fortra Filecatalyst SQL Injection Vulnerability

• Malicious NPM Package Targets AWS Users to Deploy Backdoor

• CISA Warns of Exploited GeoServer, Linux Kernel, and Roundcube Vulnerabilities

• Gas Chromatograph Hacking Could Have Serious Impact: Security Firm

• The Secrets of Hidden AI Training on Your Data

• Snowflake isn’t an outlier, it’s the canary in the coal mine

• PortSwigger, the company behind the Burp Suite of security testing tools, swallows $112M

• Korean Telco Allegedly Infected Around 600,000 P2P Users with Malware

• Software composition analysis (SCA): A beginner’s guide

• Infinidat Revolutionizes Enterprise Cyber Storage Protection to Reduce Ransomware and Malware Threat Windows

• Bluesky Offers Starter Packs For Friends, Feeds To Follow

• Xeno RAT Attacking Users Via GitHub Repository And .gg Domains

• Ransomware Cheat Sheet: Everything You Need To Know In 2024

• Security Analysis of the EU’s Digital Wallet

• Largest Croatian hospital under cyberattack

• Top Tips to Keep Data Safe During the 2024 Paris Olympics

• Maryland Association of Community Colleges Receives Funding for the Cyber Workforce Accelerator

• ICO Scams Leverage 2024 Olympics to Lure Victims, Use AI for Fake Sites

• Odaseva raises $54M to secure Salesforce users

• Novel Snowblind Malware Targets Banking Customers in Southeast Asia

• Evolve Bank Data Leaked After LockBit’s ‘Federal Reserve Hack’

• Cloud Security Tops Priority List for Organizations Globally

• US Charges Russian Individual for Pre-Invasion Ukraine Hack

• 1-Click Exploit In Kakaotalk’s Android App Allows Arbitrary Code Execution

• Lastwall Quantum Shield delivers protection against Q-Day threats

• How to Use Python to Build Secure Blockchain Applications

• Securing Identities in the Cloud

• Amazon Finally Breaches $2 Trillion Valuation

• New Medusa RAT Attacking Android Devices to Steal SMS & Screen Controls

• Hackers Attacking Linux Cloud Servers To Gain Complete Control

• Too good to be true: Beware the temptation of recovery scams

• ‘Phantom’ Source Code Secrets Haunt Major Organizations

• Security Budgets Grow, but Inefficiencies Persist

• IT Leaders Split on Using GenAI For Cybersecurity

• Cybersecurity News: Snowblind Android, identity services leaks data, Polyfill.io supply chain attack

• The State of Kubernetes Security in 2024

• Phantom Secrets: Undetected Secrets Expose Major Corporations

• Datadog LLM Observability secures generative AI applications

• PoC exploit for critical Fortra FileCatalyst flaw published (CVE-2024-5276)

• Prompt Injection Flaw in Vanna AI Exposes Databases to RCE Attacks

• Russian National Indicted for Cyber Attacks on Ukraine Before 2022 Invasion

• Google Announced Chrome Enterprise Core Features for IT, Security Teams

• Heimdal and Escom Bulgaria Partner to Strengthen Cybersecurity in Bulgaria

• Update: MOVEit Transfer Vulnerability Targeted Amid Disclosure Drama

• Chinese State Actors Use Ransomware to Conceal Real Intent

• Multiple TP-Link Omada Vulnerabilities Let Attackers Execute Remote Code

• Chinese Cyberspies Employ Ransomware in Attacks for Diversion

• Strong Authentication: What It Is and Why You Need It

• Lattice launches two solutions to help users stay ahead of cyberthreats

• Critical SQLi Vulnerability Found in Fortra FileCatalyst Workflow Application

• US offers $10 million for information on indicted WhisperGate malware suspect

• New P2Pinfect version delivers miners and ransomware on Redis servers

• Adversaries Seek to Take Advantage of Global Events – How To Prepare for the 2024 Paris Olympics

• Ransomware attacks launched on the world by China and North Korea

• Cyber insurance as part of the cyber threat mitigation strategy

• Gitleaks: Open-source solution for detecting secrets in your code

• New ransomware, infostealers pose growing risk in 2024

• 75% of new vulnerabilities exploited within 19 days

• Exploit Attempts Recorded Against New MOVEit Transfer Vulnerability – Patch ASAP!

• Google Chrome Users at Risk: Study Reveals Dangerous Extensions Affecting 280 Million

• Enterprises increasingly turn to cloud and AI for database management

• ISC Stormcast For Thursday, June 27th, 2024 https://isc.sans.edu/podcastdetail/9038, (Thu, Jun 27th)

• BSNL Data Breach Exposes Millions of Users to Fraud and Security Risks

• Korean telco allegedly infected its P2P users with malware

• WhisperGate suspect indicted as US offers a $10M bounty for his capture

• Hack of Age Verification Company Shows Privacy Danger of Social Media Laws

• How NinjaOne’s New MDM Capabilities Transform IT Management

• Chinese Espionage Group “ChamelGang” Uses Attacks for Disruption and Data Theft

• LockBit claim about hacking U.S. Federal Reserve fizzles

• US charges Russian civilian for allegedly helping GRU spies target Ukrainian government systems with data-destroying malware

• Leverage Platformization – Strengthen, Unify and Simplify Cybersecurity Tools

• What Setting Live Traps for Cybercriminals Taught Me About Security [Guest Diary], (Wed, Jun 26th)

• Developer Accounts Compromised Due to Credential Reuse in WordPress.org Supply Chain Attack

• Feds put $5M bounty on ‘CryptoQueen’ Ruja Ignatova

• IT Security News Daily Summary 2024-06-26

• US charges Russian for allegedly helping GRU spies target Ukrainian government systems with data-destroying malware

• Microsoft clamps down on Windows 11 users who want local accounts – but this trick still works

• New MOVEit Transfer critical bug is actively exploited

• Chinese APT Groups Use Ransomware to Hide Spying Activities

• Pen Testing Across the Environment: External, Internal, and Wireless Assessments

• Scattered Spider: Evolving & Resilient Group Proves Need for Constant Defender Vigilance

• A Foundation for AI and ML: Cisco Intelligent Industrial IoT Network Drives Uptime, Yield, Security, and Revenue

• New “Snowblind” Android Malware Steals Logins, Bypasses Security Features

• How to become a cybersecurity architect

• MoveIt Transfer vulnerability targeted amid disclosure drama

• LockBit Claims Breaching the US Federal Reserve but Fails to Prove It

• US convicts crypto-robbing gang leader who kidnapped victims before draining their accounts

• WikiLeaks Founder Julian Assange Returns to Australia a Free Man After US Legal Battle Ends

• Episode 2: Behind the Scenes of a Tailor-Made Massive Phishing Campaign Part 2

• EFF livestream series coming to a platform near you!

• BSNL Reportedly Suffers Major Data Breach: Sensitive User Information at Risk

• Supreme Court Backs Biden In Social Media Misinformation Case

• War Crime Prosecutions Enter a New Digital Age

• Kaspersky resellers deride US government ban: ‘Complete bulls—t’

• Digital Afterlife: Are We Ready for Virtual Resurrections?

• Rivian To Gain Up To $5 Billion Investment From Volkswagen

• Hugging Face’s updated leaderboard shakes up the AI evaluation game

• The CDK Global outage: Explaining how it happened

• 5 essential programming languages for cybersecurity pros

• Google Unveils New Chrome Enterprise Core Features for IT, Security Teams

• Progress Discloses Two New Vulnerabilities in MOVEit Products

• Multiple vulnerabilities in TP-Link Omada system could lead to root access

• AI driven Google Naptime to help LLM to conduct vulnerability research

• Attackers in Profile: menuPass and ALPHV/BlackCat

• Shortened Links, Big Risks: Unveiling Security Flaws in URL Shortening Services

• 12 common types of malware attacks and how to prevent them

• LockBit Claims Breaching the US Federal Reserve but Fails Proving It

• How the Kaspersky ban will hit resellers in the US

• The AI Revolution and Critical Infrastructure

• Former Global CISO of Wells Fargo, Sunil Seshadri, Joins Board of Directors at Obsidian Security

• WordPress Plugin Supply Chain Attack Gets Worse

• New MOVEit Transfer Vulnerability Under Active Exploitation – Patch ASAP!

• Novel Banking Malware Targets Customers in Southeast Asia

• Incident Response: SOC’s Role in Managing Cyber Threats

• Tesla Issues Fourth Recall For Cybertruck

• Federal Reserve “breached” data may actually belong to Evolve Bank

• Hacker claims data breach of India’s eMigrate labor portal

• Google Disrupts More China-Linked Dragonbridge Influence Operations

• Law Enforcement is Spying on Thousands of U.S. Citizens’ Mail

• From Hype to Reality: Understanding Abandoned AI Initiatives

• CISA and Partners Release Guidance for Exploring Memory Safety in Critical Open Source Projects

• Misconfigured MFA Increasingly Targeted by Cybercriminals

• GAO Urges Action to Address Critical Cybersecurity Challenges Facing U.S.

• Cofense enhances PhishMe to identify engagement and resilience gaps across all employee levels

• Keep Your Tech Flame Alive: Trailblazer Mie Elmkvist Schneider

• Companies Optimize Cloud Costs and Deliver Superior Experiences on Akamai

• Microsoft At Risk Of EU Antitrust Charge Over Teams Bundling With Office

• The dangers of anthropomorphizing AI: An infosec perspective

• The 6 Best LastPass Alternatives for 2024

• Probllama: Ollama Remote Code Execution Vulnerability

• Top 10 NinjaOne Alternatives to Consider in 2024

• GrimResource Technique Exploits Years-Old Unpatched Windows XSS Flaw

• Batten down the hatches, it’s time to patch some more MOVEit bugs

• Prioritizing Exposures vs. Prioritizing Actions

• The XZ Utils Backdoor in Linux: A Symptom of Ailing Security in the Software Supply Chain

• Check Point SecureAcademy Launches Special Program Offering Content and Services Valued Up to $60K to Help Close the Global Cyber Security Skills Gap

• Fortinet vs Palo Alto (2024): Which NGFW Is Best for Your Team?

• Multiple Vulnerabilities in Siemens Power Automation Products

• ARMO launches behavioral-based cloud detection and response

• 6 Best LastPass Alternatives for 2024

• An Unforgettable Week at Cisco Live 2024 in Las Vegas

• Is Your Organization a Laggard or a Leader in Digital Trust?

• The EU Targets Russia’s LNG Ghost Fleet With Sanctions as Concern Mounts About Hybrid Attacks

• Gaining and Retaining Security Talent: A Cheat Sheet for CISOs

• Malware peddlers experimenting with BPL sideloading and masking malicious payloads as PGP keys

• The Crucial Role of Network Segmentation in OT Environments with DirectDefense

• Waymo Opens Autonomous Ride Hailing Taxi To All San Fran Residents

• OilRig Hackers Attacking Individuals And Organizations In The Middle East

• Securing the Foundation: Optimizing Governmental Critical Infrastructure

• P2Pinfect Worm Now Dropping Ransomware on Redis Servers

• 6 Tips for Preventing DDoS Attacks Using Rate Limits

• Cyber Attackers Turn to Cloud Services to Deploy Malware

• P2Pinfect Redis Server with New Ransomware Payload

• Ollama AI Platform Flaw Let Attackers Execute Remote Code

• NTT Data and Zebra Technologies partner on private 5G and device as a service

• Digital Forensics for Investigating the Metaverse

• New Caesar Cipher Skimmer targets popular CMS used by e-stores

• New Medusa Malware Variants Target Android Users in Seven Countries

• Cybercriminal Group UNC5537 Strikes with Major Data Breaches

• Developer errors lead to long-term exposure of sensitive data in Git repos

• Identity Crime Reports Drop 16% Annually but Job Scams Surge

• Julian Assange Freed After US Plea Deal, Returns To Australia

• P2Pinfect Botnet Now Targets Servers with Ransomware, Cryptominer

• Malwarebytes Premium stops 100% of malware during AV Lab test

• The US Is Banning Kaspersky

• Understanding Compliance and File Integrity Monitoring (FIM)

• Polyfill Supply Chain Attack Hits Over 100k Websites

• Navigating Security Challenges in Containerized Applications

• Critical ADOdb Vulnerabilities Fixed in Ubuntu

• Why Cybercriminals Keep Targeting the NHS: Insights into the Latest Attack

• New North Korean Actor Distributing Malicious npm Packages To Compromise Organizations

• Malicious JavaScript Snippets Served Due to Supply Chain Attack on Polyfills Site

• UK and US Law Enforcement Put Qilin Ransomware Criminals in the Crosshairs

• Apple Patches AirPods Bluetooth Vulnerability That Could Allow Eavesdropping

• Practical Guidance For Securing Your Software Supply Chain

• Chinese and N. Korean Hackers Target Global Infrastructure with Ransomware

• Attackers Exploiting Public Cobalt Strike Profiles

• Threat Actor Claims 0Day Sandbox Escape RCE in Chrome Browser

• Business Email Compromise Attacks Are Evolving: How Organizations Can Stay Ahead of the Curve

• Best Practices for Password Creation and Storage

• Share your feedback: ENISA public consultation bolsters EU5G Cybersecurity Certification

• Zeek: Open-Source Network Traffic Analysis, Security Monitoring

• Update: CISA Warns Chemical Facilities of Potential Data Theft

• Exploitation Attempts Target New MOVEit Transfer Vulnerability

• Siemens Sicam Vulnerabilities Could Facilitate Attacks on Energy Sector

• Kivu Consulting introduces CyberCertainty Managed XDR

• Cybersecurity News: Julian Assange plea, Latest MOVEit bug, Neiman Marcus data sale

• NSA Recommends users restart mobile devices weekly

• Defending Gold: Protecting the 2024 Olympics from Cyber Threats

• The 5 Industries Most Vulnerable to Data Breaches in 2024

• New Credit Card Skimmer Targets WordPress, Magento, and OpenCart Sites

• Cyber Security Today, June 26, 2024 – New vulnerability in MOVEit and a warning to WordPress administrators on poisoned plugins

• Russian Hackers Target Ukraine with XWorm RAT Malware Payload

• Grammarly delivers enhanced security and control features for safer AI use

• Compromised plugins found on WordPress.org

• New Medusa Android Trojan Targets Banking Users Across 7 Countries

• Authentication Bypasses in MOVEit Transfer and MOVEit Gateway

• How to boost your incident response readiness

• Fake Law Firms Con Victims of Crypto Scams, Warns FBI

• Cisco Umbrella: A Leader in the GigaOm Radar for DNS Security

• FireTail Unveils Free Access for All to Cutting-Edge API Security Platform

• Cloud Security becoming a priority for businesses in 2024

• How to safeguard oneself from sectortion attacks online

• Microsoft Announced Copilot for Security TI in Defender XDR

• EU Opens the App Store Gates: A Call to Arms for MDM Implementation

• Stepping Into the Attacker’s Shoes: The Strategic Power of Red Teaming (Insights from the Field)

• Efficiency is Key to Cybersecurity in the Post-Cloud Era

• Back-to-Back Cyberattacks Disrupt Car Dealers in the US and Canada

• Welcome to the fediverse: Your guide to Mastodon, Threads, Bluesky and more

• Yahoo! Japan to waive $189 million ad revenue after detecting fraudulent clicks

• Critical Vulnerability in MOVEit Transfer Let Hackers Gain Files Access

• Over 110,000 Websites Affected by Hijacked Polyfill Supply Chain Attack

• Cybersecurity jobs available right now: June 26, 2024

• Organized crime and domestic violence perps are big buyers of tracking devices

• Future trends in cyber warfare: Predictions for AI integration and space-based operations

• B+ security rating masks healthcare supply chain risks

• ISC Stormcast For Wednesday, June 26th, 2024 https://isc.sans.edu/podcastdetail/9036, (Wed, Jun 26th)

• What?s That Scraping Sound? How Web Scraper Bots Erode Ecommerce Profits

• Microsoft blamed for million-plus patient record theft at US hospital giant

• If you’re using Polyfill.io code on your site – like 100,000+ are – remove it immediately

• GitLab devsecops survey finds progress, new priorities

• Welcome to the fediverse: Your guide to Mastodon, Threads, Bluesky, and more

• Neiman Marcus confirms breach. Is the customer data already for sale?

• LockBit holds 33TB of stolen data and its ransom deadline is up: What’s next and is it real or hoax?

• Security Is Essential (Especially in the Cloud)

• EFF Welcomes Tarah Wheeler to Its Board of Directors

• IT Security News Daily Summary 2024-06-25

• LockBit holds 33TB of stolen data and its ransom deadline is almost up: What’s next and is it real or hoax?

• Comparing MDR vs SIEM: Which Is Better for Your Business?

• Rogue Nations: An Assessment of State-Sponsored Cyberattacks.

• The AI Arms Race Shaping Federal Cyber Resilience

• Large Issue Cleanup in OpenSSL

• U.S. Imposes Ban on Russia’s Kaspersky; Sanctions 12 Executives

• Get 10x more Visibility across APTs with Red Piranha’s SOC-as-a-Service and Crystal Eye

• Fiend touts stolen Neiman Marcus customer info for $150K

• Indonesia won’t pay $8M ransom in data center attack that disrupted major public services

• Cybersecurity Essentials for Software Developers

• SonarQube 10.6 Release Announcement

• LockBit Claims Ransomware Attack on U.S. Federal Reserve

• Crypto scammers circle back, pose as lawyers, steal an extra $10M in truly devious plan

• Best practices for protection from ransomware in cloud storage

• $50 Million in BEC Losses

• IT and Consulting Firms Leverage Generative AI for Employee Development

• Progress quietly fixes MOVEit auth bypass flaws (CVE-2024-5805, CVE-2024-5806)

• Mirai-like botnet is exploiting recently disclosed Zyxel NAS flaw

• Google Framework Helps LLMs Perform Basic Vuln Research

• Neiman Marcus Data Breach Exposed As Hacker Offers To Sell Stolen Info

• Julian Assange Pleads Guilty, Goes Home

• Meta’s VR Headset Vulnerable To Ransomware Attacks

• Deadline Looms For Alleged LockBit Extortion Over Feds Of 33TB Of Data

• Index Engines’ Cybersense Delivers Unparalleled Ransomware Detection With 99.99% Accuracy

• What is security information and event management (SIEM)?

• EFF Statement on Assange Plea Deal

• How platform engineering helps you get a good start on Secure by Design

• Hacking APIs with HTTPie

• Microsoft Privacy FAIL: Windows 11 Silently Backs Up to OneDrive

• Google’s Project Naptime Aims for AI-Based Vulnerability Research

• CDK Global faced second ransomware attack

• Ransomware attacks on obsolete Android devices

• EDR vs. antivirus: What’s the difference?

• New Medusa Trojan Variant Emerges with Enhanced Stealth Features

• WordPress 6.5.5 Security Release – What You Need to Know

• NIS2 for manufacturing organizations: 3 steps towards compliance

• Report: Cloud Breaches Impact Nearly Half of Organizations

• The Growing Threat of Malware Concealed Behind Cloud Services

• Four FIN9-linked Vietnamese Hackers Indicted in $71M U.S. Cybercrime Spree

• FBI Warns of Fake Law Firms Targeting Crypto Scam Victims

• EU Sanctions Six Russian Hackers

• Dark Web Sees 230% Rise in Singapore Identity Theft

• How Anthropic’s ‘Projects’ and new sharing features are revolutionizing AI teamwork

• ABB Ability System 800xA

• CISA Releases Two Industrial Control Systems Advisories

• PTC Creo Elements/Direct License Server

• A Week in Vegas with the Cisco Store

• Enhancing Your Network Security Growth: New Partner Offers

• Android RAT SpyMax Targets Telegram Users

• Ensuring Secure Communication in the Digital Age with VPNs and Post-Quantum Cryptography

• NTA Faces Exam Security Crisis Amid Darknet Threats

• What?s that scraping sound? How web scraper bots erode ecommerce profits

• digital signature

• P2PInfect Botnet Targets Redis Servers with New Ransomware Module

• eSentire introduces MDR for GenAI Visibility

• Create order from chaos

• Stolen Singaporean Identities Sold on Dark Web Starting at $8

• Manage AI threats with the right technology architecture

• 8 Best Enterprise Password Managers for 2024

• CISA says crooks used Ivanti bugs to snoop around high-risk chemical facilities

• Indonesia Says a Cyberattack Has Compromised Its Data Center but It Won’t Pay the $8 Million Ransom

• Recent Zyxel NAS Vulnerability Exploited by Botnet

• Top 6 Compliance Reporting Tools in 2024

• How AttackIQ Can Bolster CORA Compliance in the Federal Government

• Beware Of Shorten URLs With Word Files That Install Remcos RAT

• What Is a Secure Web Gateway? Features, Benefits & Challenges

• The Julian Assange Saga Is Finally Over

• Celebrating Authenticity at Cisco and London Pride

• SnailLoad Attack can Exploit Remote Network Latency Measurements to Infer User Activity

• Campaign Oversight Results in Leak of Senior Tories’ Private Info

• What is a Secure Web Gateway? Features, Benefits & Challenges

• Several Plugins Compromised in WordPress Supply Chain Attack

• Hackers Steal Over $2 Million in Cryptocurrency From CoinStats Wallets

• Cloud Breaches Impact Nearly Half of Organizations

• Omdia Report: Trend Disclosed 60% of Vulnerabilities

• Top 10 Best Penetration Testing Companies & Services in 2024

• Telegram says it has ‘about 30 engineers’; security experts say that’s a red flag

• Is the Cybersecurity Industry Ready for AI?

• Manufacturing Cybersecurity at Heart of New White House Guidance

• New Attack Uses MSC Files and Windows XSS Flaw to Breach Networks

• Boolka Group’s Modular Trojan BMANAGER Exposed

• Hackers Create Rogue Admin Accounts via Backdoored WordPress Plugins

• Akamai Doubles Down on API Security

• Security Measures to Look for in Online Gaming

• Tor Browser 13.5 Released With Improved Bridges, Feature Upgrades

• Hackers Use Windows XSS Flaw To Execute Arbitrary Command In MMC Console

• How adversarial AI is creating shallow trust in deepfake world

• UK and US cops band together to tackle Qilin’s ransomware shakedowns

• Meta’s Virtual Reality Headset Vulnerable to Ransomware Attacks: Researcher

• Ransomware disrupts Indonesia’s national data centre, LockBit gang claims US Federal Reserve breach

• New Attack Technique Exploits Microsoft Management Console Files

• Wikileaks founder Julian Assange is free

• Breaking the M-209

• KnowBe4 Launches Ransomware Awareness Month With IT Resource Kit at No Cost

• Sophos vs. Trend Micro: How Do They Shape Up?

• Reverse engineering eBPF programs

• From Code to Chaos: BlackSuit Ransomware and The CDK Global Cyber Crisis

• Google’s Naptime Framework to Boost Vulnerability Research with AI

• New Webkit Vulnerabilities Let Attackers Exploit PS4 And PS5 Playstations

• The Mystery of AI Gunshot-Detection Accuracy Is Finally Unraveling

• How AI Tool Marketplaces Are Revolutionising Business Efficiency

• Car Dealerships in North America Revert to Pens and Paper After Cyberattacks on Software Provider

• How to Cut Costs with a Browser Security Platform

• Malware Sandbox Any.Run Targeted in Phishing Attack

• New security loophole allows spying on internet users’ online activity

• How About This? Only Attack the Endpoints We Configured

• Hackers Exploit Multiple WordPress Plugins to Hack Websites & Create Rogue Admin Accounts

• Deepfake Creators Are Revictimizing GirlsDoPorn Sex Trafficking Survivors

• Cybersecurity in the SMB space — a growing threat

• Cybersecurity News: Indonesia battles Lockbit, DOJ charges cybercrime group, SEC reports following CDK attack

• Recording Labels Sue Start-Ups Over AI-Generated Music

• AT&T Says Tech Giants Should Fund Rural Broadband

• Zero Trust Maturity: How to Know When You’re Getting Close

• How Artificial General Intelligence Will Redefine Cybersecurity

• Ransomware thieves beware

• Suspected North Korean Attack Drains $2m from CoinStats Wallets

• Protect your network

• Neiman Marcus Data Breach Disclosed as Hacker Offers to Sell Stolen Information

• China Memory Chip Maker YMTC Sues Tech Consultancy For Libel

• White House Says Microsoft’s G42 AI Deal ‘Positive’ As It Ousted Huawei

• Credential Stuffing Attack Hits 72,000 Levi’s Accounts

• Hackers Attacking Windows IIS Server to Upload Web Shells

• Cisco NGO partner Simprints to advance ethical, inclusive AI for face recognition biometrics

• Chrome 126 Update Patches Memory Safety Bugs

• EU, China Agree To Talks Over Planned EV Tariffs

• WikiLeaks Founder Julian Assange Released in Stunning Deal with U.S.

• Intermediate vs Root Certificates

• Four Members of FIN9 Hackers Charged for Attacking U.S. Companies

• CISA confirmed that its CSAT environment was breached in January.

• Wikileaks’ Julian Assange Released from U.K. Prison, Heads to Australia

• Back to the Future: What AppSec Can Learn From 30 Years of IT Security

• BREAKING: NHS England’s Synnovis Hit by Massive Cyber Attack

• CISOs’ new ally: Qualys CyberSecurity Asset Management 3.0

• Zeek: Open-source network traffic analysis, security monitoring

• Multiple WordPress Plugins Compromised: Hackers Create Rogue Admin Accounts

• 4 FIN9-linked Vietnamese Hackers Indicted in $71M U.S. Cybercrime Spree

• Telegram says it has ‘about 30 engineers’; security experts say that’s . . . not good

• Breaking down the numbers: Q2 2024 cybersecurity funding activity recap

• 2024-06-24 – ClickFix popup leads to Lumma Stealer

• Guide to mitigating credential stuffing attacks

• Telegram says it has just ’30 engineers’; security experts say that’s . . . not good

• ISC Stormcast For Tuesday, June 25th, 2024 https://isc.sans.edu/podcastdetail/9034, (Tue, Jun 25th)

• Julian Assange to go free in guilty plea deal with US

• EFF Opposes the American Privacy Rights Act

• Julian Assange freed in UK after agreeing to plead guilty to US charges

• Julian Assange freed after agreeing to plead guilty to US charges

• America’s best chance for nationwide privacy law could do more harm than good

• WikiLeaks Founder Julian Assange Will Plead Guilty in Deal With US and Return to Australia

• Zip Slip Meets Artifactory: A Bug Bounty Story

• StealC & Vidar Malware Campaign Identified

• IT Security News Daily Summary 2024-06-24

• Ollama drama as ‘easy-to-exploit’ critical flaw found in open source AI server

• Experts say Telegram’s ’30 engineers’ team is a security red flag

• Securing AI-Native Platforms: A Comprehensive Approach with SecureFLO

• Cybersecurity strategies for protecting data against ransomware and other threats

• USENIX Security ’23 – A Two-Decade Retrospective Analysis of a University’s Vulnerability to Attacks Exploiting Reused Passwords

• Tech Leaders Gather This Week for AI Risk Summit + CISO Forum at the Ritz-Carlton, Half Moon Bay

• Chinese Hackers Have Stepped Up Attacks on Taiwanese Organizations, Cybersecurity Firm Says

• The best travel VPNs of 2024: Expert tested and reviewed

• Vulnerability Recap 6/24/24 – Patch Highlights Across Platforms

• Navigating Cybersecurity and Regulatory Challenges in Financial Services

• Threat actors compromised 1,590 CoinStats crypto wallets

• Cyberattacks Threaten US Hospitals: Patient Care at Risk

• Massive Data Breach Hits London Hospitals Following Cyber Attack

• Car dealers stuck in the slow lane after cyber woes at software biz CDK

• Rafel RAT Used in 120 Campaigns Targeting Android Device Users

• Workers Killed In Fire At South Korean Battery Plant

• Hacker Claims TEG Ticket Vendor Breach: 30M User Records for Sale

• Change Healthcare confirms the customer data stolen in ransomware attack

• How to Create the Future of the Guest and Fan Experience

• Customize your Red Hat OpenShift nodes and keep them updated

• Passkey is the Future, and the Future is Now with Red Hat Enterprise Linux

• The Marvin Attack

• Understanding Qilin Ransomware: Threats, Origins, and Impacts on Healthcare

• EU Finds Apple In Breach Of DMA Competition Rules

• Corvus: Cyber insurance premiums see ‘stabilization’

• New SnailLoad Attack Relies on Network Latency Variations to Infer User Activity

• Modular Malware Boolka’s BMANAGER Trojan Exposed

• LockBit ransomware spinoff variant targets Indonesia Govt data centers

• Infamous Hacker IntelBroker Breaches Apple’s Security, Leaks Internal Tool Source Code

• Supply Chain Attack on WordPress.org Plugins Leads to 5 Maliciously Compromised WordPress Plugins

• Widespread Use of Rafel RAT Puts 3.9 Billion Android Devices at Risk

• Millions and Millions of Fraud Domains: China attacks Illegal Gambling and Telecom Fraud

• LivaNova USA Discloses Data Breach Impacting 130,000 Individuals

• EFF Issues New Warning After Discovery of Automated License Plate Reader Vulnerabilities

• Google Introduces Project Naptime for AI-Powered Vulnerability Research

• Android Users Warned of Rising Malware Threat From Rafel RAT

• Car dealership outages drag on after CDK cyberattacks

• Automating How DevNet Produces API Changelogs

• Cisco Unveils Workflows in Cisco Networking Cloud for Secure Network Automation

• ‘Mirai-like’ botnet observed attacking EOL Zyxel NAS devices

• Fast Food Giant Jollibee Suffers Major Cyberattack, 32 Million Affected

• Mozilla Firefox Now Requires Device Lock To Access Stored Passwords

• Malware Campaign Targets F5 BIG-IP Appliances To Steal Data For Years

• Google Addressed Numerous Security Flaws With Chrome 126

• Critical RCE Vulnerability Discovered in Ollama AI Infrastructure Tool

• Push Notification Fatigue Leads to LA County Health Department Data Breach

• Vietnamese Members of FIN9 Hacking Group Charged in US

• Vulnerability Summary for the Week of June 17, 2024

• Provenir’s AI-powered risk decisioning platform increases fraud detection

• Women in Tech: Remain Open to Unexpected Opportunities

• LockBit Ransomware Group Claims Hack of US Federal Reserve

• Threat Actor Claiming a 0-day in Linux LPE Via GRUB bootloader

• Experts observed approximately 120 malicious campaigns using the Rafel RAT

• Zip Slips Meets Artifactory: A Bug Bounty Story

• LockBit Ransomware Claims 33 TB of US Federal Reserve Data for Ransom

• Comprehensive Guide To Troubleshooting IPsec VPN Site-To-Site Connections With PSK on FortiGate Firewalls

• Levi’s And More Affected In Pants Dropping Week Of Data Breaches

• CDK Global Begins To Restore Systems After Cyber Attack Hits Thousands Of Retailers

• Cyber Attack Compromised Indonesian Datacenter, Ransom Sought

• Snowflake Breach Snowballs With More Victims

• Britain’s Ministry of Defence accused of wasting £174M on ‘external advice’

• Behind the Breach: Understanding the Change Healthcare Cyberattack

• US Sanctions 12 Kaspersky Executives

• Cyber Security Today, June 24, 2024 – Ransomware gang reportedly behind the hack of car dealership software provider

• Mailcow Patches Critical XSS and File Overwrite Flaws – Update NOW

• Sparking Growth and Inspiration: How Cisco Illuminates a New Path for Learning

• Striving for Sustainability: Meet Pelin

• Exciting News: CDO India and CDO Australia Now Generally Available!

• Open-source Rafel RAT steals info, locks Android devices, asks for ransom

• China-Based RedJuliett Targets Taiwan in Cyber Espionage Campaign

• Paul Nakasone Joins OpenAI’s Board of Directors

• Ease the Burden with AI-Driven Threat Intelligence Reporting

• Microsoft Power BI Vulnerability Let Attackers Access Organizations Sensitive Data

• Advance Auto Parts – 79,243,727 breached accounts

• Levi’s and more affected in pants-dropping week of data breaches

• Say Hello to Scytale’s Newest Integrations, Enabling Deeper Compliance Automation

• Intrusion Detection in Linux: Protecting Your System from Threats

• Real-time Ubuntu 24.04 LTS is Available

• Booking.com Warns Of AI-Fuelled 900 Percent Scam Surge

• China-Linked Shein Faces Uphill Battle For IPO In US Or UK

• US Publishes Draft Rules On China AI, Chip Investment

• US Government Prepares TikTok Lawsuit Over Child Privacy

• Apple Delays AI Features In EU Over DMA Rules

• Get a Lifetime Subscription of FastestVPN for just $32 Through 6/26

• Bitdefender VPN vs NordVPN (2024): Which VPN Is the Best?

• LockBit claims the hack of the US Federal Reserve

• XZ backdoor: Hook analysis

• VBSpam tests to be executed under the AMTSO framework

• Japan’s Space Agency Was Hit by Multiple Cyberattacks, but Officials Say No Sensitive Data Was Taken

• Hacker Claims Theft of 30M User Records From Australia Ticketing Company TEG

• Cybersecurity News: BlackSuit behind CDK, Microsoft spoofing bug, Nuclear compliance failures

• Ransomware threat landscape Jan-Apr 2024: insights and challenges

• Polish Prosecutors Step Up Probe into Pegasus Spyware Operation

• Configuration Scanners Adding Java Specific Configuration Files, (Mon, Jun 24th)

• Red Tape Is Making Hospital Ransomware Attacks Worse

• On-Demand Materiality Analysis Guides Determination | Kovrr

• TikTok Offered US ‘Kill Switch’ Over Data Concerns

• Nvidia Cedes Top Market Spot To Microsoft

• IoT Security Regulations: A Compliance Checklist – Part 1

• Gaining Network Transparency with Asset Discovery and Compliance for IT/OT

• 7 Challenges in Scaling SOC Operations and How to Overcome Them

• Meta and SQL Server make strange bedfellows on a couch of cyber-pain

• ExCobalt Cybercrime group targets Russian organizations in multiple sectors

• Enzoic appoints Kristen Ranta Haikal Wilson as CEO

• RedJuliett Cyber Espionage Campaign Hits 75 Taiwanese Organizations

• Sellafield Pleads Guilty to Historic Cybersecurity Offenses

• Social Media Warning Labels, Should You Store Passwords in Your Web Browser?

• A week in security (June 17 – June 23)

• Techie took out a call center – and almost their career – with a cut and paste error

• Facial Recognition Startup Clearview AI Settles Privacy Suit

• Consulting Companies to Pay $11 Million Failing Cybersecurity Requirements

• The Importance of Whitelisting Scanner IPs in Cybersecurity Assessments

• NHS Qilin Ransomware gang is shrugging off the blame

• Top 10 Industries Most Vulnerable to Cyber Attacks

• Multiple Threat Actors Deploying Open-Source Rafel RAT to Target Android Devices

• New RAT Malware SneakyChef & SugarGhost Attack Windows Systems

• The End of Our Dog Era

• Securing the video market: From identification to disruption

• Why are threat actors faking data breaches?

• Cracking down on cybercrime: Who you gonna call?

• 1 out of 3 breaches go undetected

• Snowflake breach snowballs as more victims, perps, come forward

• ISC Stormcast For Monday, June 24th, 2024 https://isc.sans.edu/podcastdetail/9032, (Mon, Jun 24th)

• Investigation of Russian Hack on London Hospitals May Take Weeks Amid Worries Over Online Data Dump

• The Ultimate Guide To Buying A Server For Your Small Business

• Threat actor attempts to sell 30 million customer records allegedly stolen from TEG

• IT Security News Weekly Summary – Week 25

• IT Security News Daily Summary 2024-06-23

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• Cybercriminals Target UPI Payments: How to Stay Safe

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• New Infostealer ‘Fickle Stealer’ Targets Sensitive Data Using Multiple Distribution Methods

• Examining the US Government’s DDoS Protection Guidance Update

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• Productivity vs security: How CIOs and CISOs can see eye to eye

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• USENIX Security ’23 – Educators’ Perspectives of Using (or Not Using) Online Exam Proctoring

• The Speed and Efficiency of Modern Password-Cracking Techniques

• 🌜 A voice cries out under the crescent moon…

• Five Tips to Avoid Financial Fraud

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• AI in Cybersecurity: Friend or Foe?

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• Terrorist Tactics: How ISIS Duped Viewers with Fake CNN and Al Jazeera Channels

• Phishing Alert: Spotting the ‘Vahan Parivahan’ Speeding Violation Ticket Scam

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• Risk of getting malicious extension from Chrome store way worse than Google’s letting on, study suggests

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• Security Affairs newsletter Round 477 by Pierluigi Paganini – INTERNATIONAL EDITION

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• Threat actors are actively exploiting SolarWinds Serv-U bug CVE-2024-28995

• 🌜 A voice cries out under the crescent moon…

• Week in review: CDK Global cyberattack, critical vCenter Server RCE fixed

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• Chinese Winnti Group Intensifies Financially Motivated Attacks

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 12 Tips for Managing Cryptocurrency Market Volatility

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• IT Security News Daily Summary 2024-06-22

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• Many Passwords Can Be Cracked in Under an Hour, Study Finds

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• USENIX Security ’23 – “I’m Going To Trust This Until It Burns Me” Parents’ Privacy Concerns and Delegation of Trust in K-8 Educational Technology

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• RansomHub Ransomware Targets VMware ESXi Environments with Specialized Encryptor

• 🌜 A voice cries out under the crescent moon…

• US government sanctions twelve Kaspersky Lab executives

• 🌜 A voice cries out under the crescent moon…

• Rider Data Compromised in Ransomware Attack on TheBus, Handi-Van

• 🌜 A voice cries out under the crescent moon…

• A National Imperative – Cyber Resiliency

• 🌜 A voice cries out under the crescent moon…

• Small Businesses Increasingly Concerned About Payment Fraud

• Cyberattack Cripples Forklift Giant Crown Equipment’s Production

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• How and When to Know You Need a Fractional CISO

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• From Siri to 5G: AI’s Impact on Telecommunications

• 🌜 A voice cries out under the crescent moon…

• Warning: New Adware Campaign Targets Meta Quest App Seekers

• ExCobalt Cyber Gang Targets Russian Sectors with New GoRed Backdoor

• 🌜 A voice cries out under the crescent moon…

• Sysinternals’ Process Monitor Version 4 Released, (Sat, Jun 22nd)

• 🌜 A voice cries out under the crescent moon…

• A Catastrophic Hospital Hack Ends in a Leak of 300M Patient Records

• Experts found a bug in the Linux version of RansomHub ransomware

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• From network security to nyet work in perpetuity: What’s up with the Kaspersky US ban?

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• What Are the Benefits of FedRAMP Certification in 2024?

• 🌜 A voice cries out under the crescent moon…

• U.S. Treasury Sanctions 12 Kaspersky Executives Amid Software Ban

• The long-tail costs of a data breach – Week in security with Tony Anscombe

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• Cyber Security Today, Week in Review for week ending Friday, June 21, 2024

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• Learn about ISO 27001 Penetration Testing and its requirements

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• AI Everywhere: Key Takeaways from the Gartner Security & Risk Management Summit 2024

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• LAUSD Data Breach: Hackers Leak 25M Records, Including Student Locations

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• Australian Organizations are Fascinated With Copilot for Microsoft 365, But Will They Avoid The “Gotchas”?

• 🌜 A voice cries out under the crescent moon…

• Change Healthcare finally spills the tea on what medical data was stolen by cyber-crew

• Ross Randall’s 3 Essential Tips to Strengthening Your District’s Multilayered Cybersecurity

• U.S. Bans Sale of Kaspersky Cybersecurity Software

• IT Security News Daily Summary 2024-06-21

• Why Anthropic’s Artifacts may be this year’s most important AI feature: Unveiling the interface battle

• Friday Squid Blogging: Squid Nebula

• 🌜 A voice cries out under the crescent moon…

• Gartner: 3 Actions to Achieve Cybersecurity Consolidation

• US Pledges ‘Most Powerful’ Security Deal: Can It Fortify Ukraine’s Cyber Defenses?

• 🌜 A voice cries out under the crescent moon…

• 🌜 A voice cries out under the crescent moon…

• Uncle Sam sanctions Kaspersky’s top bosses – but not Mr K himself

• USENIX Security ’23 – Uncontained: Uncovering Container Confusion in the Linux Kernel

• Hacker claims to have 30 million customer records from Australian ticket seller giant TEG

• 🌜 A voice cries out under the crescent moon…

• Simplifying Azure Key Vault Updates With AppViewX Automation

• 🌜 A voice cries out under the crescent moon…

• Zero-Day Exploits Cheat Sheet: Definition, Examples & How It Works

• 🌜 A voice cries out under the crescent moon…

• Randall Munroe’s XKCD ‘Pascal’s Wager Triangle’

• Benefits of dark web monitoring

• 🌜 A voice cries out under the crescent moon…

• For The Bragging Rights: EFF’s 16th Annual Cyberlaw Trivia Night

• 🌜 A voice cries out under the crescent moon…

• Perplexity Plagiarized Our Story About How Perplexity Is a Bullshit Machine

• Biden administration bans Kaspersky software sales in US over national security concerns

• AdsExhaust Adware Distributed in Fake Oculus Installer via Google Search

• Keeper vs Dashlane: Which Should You Use in 2024?

• Young Hacker Linked to Scattered Spider Group Detained

• First million breached Ticketmaster records released for free

• Phoenix UEFI flaw puts long list of Intel chips in hot seat

• EU Proposes New Law to Allow Bulk Scanning of Chat Messages

• CISA warns chemical facilities in America about possible data breach

• U.S. government sanctions Kaspersky executives

• 30,000 Dealerships Down — ‘Ransomware’ Outage Outrage no. 2 at CDK Global

• Juniper Networks Releases Security Bulletin for Juniper Secure Analytics

• New Cato Networks MSASE Framework Gives Vendor-Like Powers to Channel Partners

• Amazon Mulls $5 Monthly Charge For AI Alexa – Report

• The US bans Kaspersky products, citing security risks – what this means for you

• Biden administration bans Kaspersky Lab products in US

• Understanding the Dark Web: What You Need to Know

• Why attack surfaces are expanding

• Hunting for Credential Theft – Identify When an InfoStealer May be Stealing Sensitive Access

• Chinese Hackers Deploy SpiceRAT and SugarGh0st in Global Espionage Campaign

• Understanding Access Control Models: RBAC, ABAC, and DAC

• Crafty Criminals Use Fake Error Messages to Deploy Malware via PowerShell

• Russian Hackers Of London Hospitals Publish Patient Data

• OpenID (OpenID Connect)

• Military-themed Email Scam Spreads Malware to Infect Pakistani Users

• How generative AI Is expanding the insider threat attack surface

• Change Healthcare confirms ransomware hackers stole medical records on a ‘substantial proportion’ of Americans

• UEFICANHAZBUFFEROVERFLOW flaw in Phoenix SecureCore UEFI firmware potentially impacts hundreds of PC and server models

• Recent SolarWinds Serv-U Vulnerability Exploited in the Wild

• In Other News: Microsoft Email Spoofing, Snowflake Hack Ransoms, LogoFail Follow-Up

• Spatial Computing Hack Exploits Apple Vision Pro Flaw to Fill Room With Spiders, Bats

• Santander Employee Data Breach Linked to Snowflake Attack

• Securing Corporate Data: The Crucial Role of Third-Party Access Audits

• Defending Hospitals and Clinics: Strategies Against Ransomware

• Chemical Facilities Warned of Possible Data Exfiltration Following CISA Breach

• A Step-by-Step Guide to Spotting and Preventing Frame Injections

• What Are Network Firewalls? Benefits, Types & Best Practices

• Special Cybersecurity Considerations for Medical and Legal Practices

• Coding Error In Forgotten API Blamed For Massive Data Breach

• Sweden Claims Russia Has Been Borking Nordic Satellites

• President Biden Bans Kaspersky Antivirus Software Over Russia Ties

• Car Dealerships Disrupted As CDK Hack Worsens

• US Bans Kaspersky Over Alleged Kremlin Links

• SneakyChef espionage group targets government agencies with SugarGh0st and more infection techniques

• Unveiling SpiceRAT: SneakyChef’s latest tool targeting EMEA and Asia

• Qilin Ransomware Leaks 400GB of NHS and Patient Data on Telegram

• Enhancing AI Security Incident Response Through Collaborative Exercises

• Security Cloud Control: Pioneering the Future of Security Management

• Intel-powered computers affected by serious firmware flaw (CVE-2024-0762)

• How to Use Tines’s SOC Automation Capability Matrix

• Ross Anderson’s Memorial Service

• Qilin cyber scum leak data they claim belongs to London hospitals’ pathology provider

• Kaspersky Denies It Is Security Risk, After US Sales Banned By Biden

• Personal and Chemical Facility Information Potentially Accessed in CISA Hack

• Oyster Backdoor Spreading via Trojanized Popular Software Downloads

• Can AI detectors save us from ChatGPT? I tried 6 online tools to find out

• How to Study Ethical Hacking as a Beginner

• New body IMCSO to elevate standards and streamline provisioning of cybersecurity services in Maritime

• US bans Kaspersky antivirus software due to national security risks

• Synnovis Attackers Publish NHS Patient Data Online

• Cybersecurity News: CDK Global hacked again, LockBit activity, Kraken extorted for bug bounty

• Russia-linked APT Nobelium targets French diplomatic entities

• Community Corner: CybAid

• SolarWinds Serv-U Vulnerability Under Active Attack – Patch Immediately

• Cyber Security Today, June 21, 2024 – US to ban Kaspersky for consumers and businesses

• PrestaShop Website Under Injection Attack Via Facebook Module

• US bans Kaspersky, warns: “Immediately stop using that software”

• Beware Of Zergeca Botnet with Advanced Scanning & Persistence Features

• Beware Of Illegal OTT Platforms That Exposes Sensitive Personal Information

• Telcos Hit Hardest by Cloud Malware, Report Finds

• Hackers Attacking Vaults, Buckets, And Secrets To Steal Data

• Mailcow Mail Server Vulnerability Let Attackers Execute Remote Code

• Was T-Mobile compromised by a zero-day in Jira?

• How to find Kaspersky products with runZero

• It’s a Hard Time to Be a CISO. Transformational Leadership is More Important Than Ever.

• Chinese UNC3886 Actors Exploiting VMware, Fortinet 0-days For Spying

• New Highly Evasive SquidLoader Attacking Employees Mimic As Word Document

Generated on 2024-07-01 00:01:28.571922