IT Security News Monthly Summary – June

• IT Security News Daily Summary 2024-05-31

• US senator claims UnitedHealth’s CEO, board appointed ‘unqualified’ CISO

• Hacked, leaked, exposed: Why you should never use stalkerware apps

• Friday Squid Blogging: Baby Colossal Squid

• International Malware Takedown Seized 100+ Servers

• Exposed and vulnerable: Recent attacks highlight critical need to protect internet-exposed OT devices

• Nexus Dashboard Essentials: Learn How to Manage Your Data Center Fabric Like a Pro

• Keep your iPhone super secure. This app shows you how

• Cyber cops plead for info on elusive Emotet mastermind

• Senator Calls for FTC, SEC Probe Into UnitedHealth’s ‘Negligence’ in Breach

• Snowflake compromised? Attackers exploit stolen credentials

• Cyber Security Today Week in Review for week ending May 31, 2024

• Recall: Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible.

• Proven Data Restores PowerHost’s VMware Backups After SEXi Ransomware Attack

• Immersive Labs Study Reveals AI Prompt Injection Vulnerability in Bots

• A Major Industrial Cybersecurity Threat: Living off the Land Attacks

• Mysterious Cyber Attack Took Down 600,000+ Routers in the U.S.

• Hackers steal $305M from DMM Bitcoin crypto exchange

• ‘Pumpkin Eclipse’ — 600,000+ Rural ISP Routers Bricked Beyond Repair

• How to tell if a VPN app added your Windows device to a botnet

• Hackers steal $305 million from DMM Bitcoin crypto exchange

• USENIX Security ’23 – zkSaaS: Zero-Knowledge SNARKs as a Service

• Part 13

• TrustCloud Product Updates: May 2024

• The NSA advises you to turn your phone off and back on once a week – here’s why

• Ransomware attack on Poland news agency and Seattle Public Library

• Essential Data Protection Starts with Least Privilege

• Proven Data Restores Powerhosts’ VMware Backups After SEXi Ransomware Attack

• Internet Safety Month: Keep Your Online Experience Safe and Secure

• New Nork-ish Cyberespionage Outfit Uncovered After Three Years

• CISA Warns Of Exploited Linux Kernel Vulnerability

• Mysterious Threat Actor Used Chalubo Malware To Brick 600,000 Routers

• Okta Says Customer Identity Cloud Prone To Credential Stuffing Attacks

• Information Of Hundreds Of European Politicians Found On Dark Web

• Fraudulent SMS Entities Blacklisted in Government Crackdown

• A Practical Guide to Applying Zero Trust Principles to Active Directory for Microsoft On-Premises and Hybrid Environment Protection

• New Nork-ish cyberespionage outfit uncovered after three years

• BSides Knoxville 2024: A Community Celebrating A Decade of Cybersecurity

• Facebook Account Takeovers: Can Tech Giant Stop Hijacking Scams?

• How to stop ransomware for good— and add the missing layer to ransomware resiliency

• A Data Responsibility: Leveraging the Power of Trust to Drive Growth

• Get Ready for more Cisco Software and Solutions on Google Cloud Marketplace

• CTI for M&A

• Cybersecurity Insights with Contrast CISO David Lindner | 5/31/24

• Phishing Campaigns Exploit Cloudflare Workers to Harvest User Credentials

• Edge Computing Versus Cloud Computing: Key Similarities and Differences

• Top Tech Conferences & Events to Add to Your Calendar in 2024

• Over 600,000 SOHO routers were destroyed by Chalubo malware in 72 hours

• Effective Incident Response: A Cybersecurity Playbook for Executives

• Navigating the Danger Zone: Discord’s Battle Against Malware

• Microsoft Warns of Surge in Cyber Attacks Targeting Internet-Exposed OT Devices

• The Public Sector’s Troubled Relationship to Ransomware in 2023: A Year in Review

• TikTok Developing Clone Of App’s Core Algorithm – Report

• In Other News: Apple WPS Surveillance, Canadian Gov Wants Backdoors, NIST AI Program

• ELLIO and ntop partnership to boost high-speed network traffic monitoring with real-time data on opportunistic scans, botnets, and mass attacks

• 25,000 individuals affected in BBC Pension Scheme data breach

• DDoS-as-a-Service Botnet Backed by Mirai Attacking Gaming Community

• Hackers Weaponizing MS Office-Cracked Versions to Deliver Malware

• FlyingYeti Exploits WinRAR Vulnerability For Targeted Malware Attacks

• LilacSquid Hackers Attacking IT Industries To Harvest Confidential Data

• Is Zero Trust Enough?

• Introducing the Open Supply-Chain Information Modeling (OSIM) Technical Committee

• LilacSquid APT targeted organizations in the U.S., Europe, and Asia since at least 2021

• Beyond Threat Detection – A Race to Digital Security

• New banking trojan “CarnavalHeist” targets Brazil with overlay attacks

• Data Leak Exposes Business Leaders and Top Celebrity Data

• Hackers Exploiting Stored XSS Vulnerabilities in WordPress Plugins

• OpenAI’s Altman Sidesteps Questions About Governance, Johansson at UN AI Summit

• CISA Warns of Exploited Linux Kernel Vulnerability

• Mysterious Threat Actor Used Chalubo Malware to Brick 600,000 Routers

• Information of Hundreds of European Politicians Found on Dark Web

• Google to push ahead with Chrome’s ad-blocker extension overhaul in earnest

• How AI Will Change Democracy

• Check Point VPN zero-day exploited since beginning of April (CVE-2024-24919)

• Amazon Given FAA Clearance To Expand Drone Deliveries

• 6 Best Enterprise VPN Solutions for 2024

• The Evolution of Security in Containerized Environments

• OpenAI, Meta, and TikTok Crack Down on Covert Influence Campaigns, Some AI-Powered

• Russian Hackers Target Europe with HeadLace Malware and Credential Harvesting

• BBC Pension Scheme Breached, Exposing Employee Data

• “K1w1” InfoStealer Uses gofile.io for Exfiltration, (Fri, May 31st)

• What Is Cloud Security? Definition, Best Practices & Types

• Hackers Boast Ticketmaster Breach on Relaunched BreachForums

• Cybersecurity News: UnitedHealth responsibility, Europol dropper takedown, malware bricks routers

• The 8 P’s to Mitigate Risks in Software Product Development Initiatives

• apexanalytix Cyber Risk provides instant alerts for supplier data breaches

• Terra Labs, Do Kwon Settle SEC Fraud Case

• VirusTotal Celebrates 20th Anniversary, What’s Next?

• Surge in fake pharmacy campaigns abusing Firebase link shortener

• BBC Data Breach Impacts 25,000 Employees

• #Infosec2024: Why Cybersecurity is Critical for the 2024 Paris Olympics

• OpenAI, Meta, TikTok Disrupt Multiple AI-Powered Disinformation Campaigns

• Beware of Fake Browser Updates That Deliver Bitrat & Lumma Stealer

• Check Point Releases Emergency Fix for Exploited VPN Zero-Day – Key Points

• BBC disclosed a data breach impacting its Pension Scheme members

• Over 600K routers in USA were disrupted by Cyber Attack

• The Crucial Role of Security in Accelerating 5G Adoption

• What is ISO 27701 PIMS?

• FlyingYeti phishing crew grounded after abominable Ukraine attacks

• AI in HR: Is artificial intelligence changing how we hire employees forever?

• Cyber Security Today, May 31, 2024 – Hundreds of thousands of routers are wiped, warnings to Okta and Snowflake administrators, and more

• Lack of skills and budget slow zero-trust implementation

• Operation Endgame – 16,466,858 breached accounts

• From Phishing to Fraud: How AI Can Safeguard Your Customers

• Encrypted Notepad: Open-source text editor

• New infosec products of the week: May 31, 2024

• ISC Stormcast For Friday, May 31st, 2024 https://isc.sans.edu/podcastdetail/9004, (Fri, May 31st)

• Ransomware Attack Struck This Medical Device Manufacturer

• Mystery miscreant remotely bricked 600,000 SOHO routers with malicious firmware update

• Mystery attacker remotely bricked 600,000 SOHO routers with malicious firmware update

• Hackers Use Trojanized Minesweeper Clone to Phish Financial Organizations

• In the jungle of AWS S3 Enumeration

• OpenAI is very smug after thwarting five ineffective AI covert influence ops

• Make Your Buildings Smarter with Cisco Spaces Cloud

• One Phish, Two Phish, Red Phish, Blue Phish

• US Treasury says NFTs ‘highly susceptible’ to fraud, but ignored by high-tier criminals

• IT Security News Daily Summary 2024-05-30

• Proofpoint’s CISO 2024 Report: Top Challenges Include Human Error & Risk

• Trump Guilty On All 34 Felony Counts

• What is extortionware? How does it differ from ransomware?

• CISA adds Check Point Quantum Security Gateways and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

• Law enforcement conducts ‘largest ever’ botnet takedown

• The 7 core pillars of a zero-trust architecture

• AI Threat Scenario, GuLoader, DarkGate, MirrorBlast, Kutaki Stealer and More – Hacker’s Playbook Threat Coverage Round-up: May 2024

• Top 6 benefits of zero-trust security for businesses

• Experts found a macOS version of the sophisticated LightSpy spyware

• ShinyHunters Claims Santander Bank Breach: 30M Customers’ Data for Sale

• Is Imitation A Form Of Flattery? Scarlett Johansson Doesn’t Think So | Avast

• Cybersecurity Management Lessons from Healthcare Woes

• Ecuador Is Literally Powerless in the Face of Drought

• Mitigate Http/2 continuations with Imperva WAF

• Do you need an anti-spy camera finder and bug detector? How they work

• Zero-day flaw in Check Point VPNs is ‘extremely easy’ to exploit

• CISA Alerts Federal Agencies to Patch Actively Exploited Linux Kernel Flaw

• Attackers are impersonating a road toll payment processor across the U.S. in phishing attacks

• Analysis: US Sanctions Target Chinese Botnet Behind COVID Relief Theft

• The best VPN for streaming in 2024: Expert tested and reviewed

• The best travel VPNs of 2024: Expert tested and reviewed

• Euro cops disrupt malware droppers, seize thousands of domains

• E80 Group secures its AGVs with Cisco industrial solutions and Italtel system integration

• Investing in Cloud Infrastructure in the Kingdom of Saudi Arabia

• Important details about CIRCIA ransomware reporting

• Microsoft’s Windows Recall: Cutting-Edge Search Tech or Creepy Overreach?

• Cloudflare Expands Zero Trust Capabilities with Acquisition of BastionZero

• FlyingYeti Exploits WinRAR Vulnerability to Deliver COOKBOX Malware in Ukraine

• Beware of scammers impersonating Malwarebytes

• 4 Arrested as Operation Endgame Disrupts Ransomware Botnets

• What Is Cloud Security Management? Types & Strategies

• Solaris SE partners with Salt Security

• Ticketmaster Hack Ticks Off 560M Customers in 1.3TB Breach

• Cyber Espionage Alert: LilacSquid Targets IT, Energy, and Pharma Sectors

• Europol-Led Operation Endgame Hits Botnet, Ransomware Networks

• Eurojust conducts operation to shut malware and ransomware spreading botnets

• USENIX Security ’23 – Curve Trees: Practical and Transparent Zero-Knowledge Accumulators

• AI Transforming Education in the South East: A New Era for Schools

• Wordfence Intelligence Weekly WordPress Vulnerability Report (May 20, 2024 to May 26, 2024)

• We Made It, Together: 20 Years of VirusTotal!

• May 2024 Web Server Survey

• ‘Operation Endgame’ Hits Malware Delivery Platforms

• NIST Getting Outside Help for National Vulnerability Database

• Critical WordPress Plugin Flaws Exploited to Inject Malicious Scripts and Backdoors

• Investigating the Potential Benefits of Periodic iPhone Shutdowns

• First American Reveals Data Breach Impacting 44,000 Individuals

• RedTail Cryptominer Threat Actors Adopt PAN-OS CVE-2024-3400 Exploit

• Toshiba Email Compromise Leaks Social Security Numbers – Analysis

• Is Microsoft Recall a ‘privacy nightmare’? 7 reasons you can stop worrying about it

• Baxter Welch Allyn Connex Spot Monitor

• Inosoft VisiWin

• Inspiring Innovation at Cisco Live Las Vegas 2024

• Cross-Team Collaboration is Vital for Organizations in Today’s Digital Landscape

• I purchased a luxury vacation to Aruba for only $151.73 – thanks to credential stuffing

• RedTail Malware Abuses Palo Alto Flaw in Latest Cryptomining Campaign

• RedTail Crypto-Mining Malware Exploiting Palo Alto Networks Firewall Vulnerability

• What Is ShrinkLocker? New Ransomware Targets Microsoft BitLocker Encryption Feature

• Cisco Firepower Management Center Impacted By a High-Severity Vulnerability

• Researchers Uncover Active Exploitation of WordPress Plugin Vulnerabilities

• Cybercriminals raid BBC pension database, steal records of over 25,000 people

• Fuji Electric Monitouch V-SFT

• LenelS2 NetBox

• The power of community helps Cisco Insider Rob Taylor bring innovation to his customers.

• Researchers Crack 11-Year-Old Password, Recover $3 Million In Bitcoin

• FBCS Data Breach Impact Grows To 3.2 Million Individuals

• Massive 911 S5 Botnet Dismantled, Mastermind Arrested

• Critics Of Putin And His Allies Targeted With Spyware Inside The EU

• Australia Looking Into Alleged Ticketmaster Hack

• 16-29 February 2024 Cyber Attacks Timeline

• Top 7 Database Security Best Practices

• Strata Identity Wins 2024 Fortress Cybersecurity Award from Business Intelligence Group

• Analysis Uncovers Raft of Identity Issues in the Cloud

• History Meets Hackers: Internet Archive Battles Ongoing DDoS Attacks

• Centripetal Expands Portfolio with DNS Offering

• “Largest Botnet Ever” Disrupted. 911 S5’s Alleged Mastermind Arrested

• IT worker sued over ‘vengeful’ cyber harassment of policeman who issued a jaywalking ticket

• Revolutionizing Education in South Australia: Strong Networks, Strong Learning

• Full Drive Encryption Only a Half-Measure for Data Security

• Ask the Analyst: Nisos Anti-scraping Expert Scott Tessier

• Iranian Hacker Group Void Manticore Linked to Destructive Cyber Attacks on Israel and Albania

• Stopping Cloud-Based Identity Attacks with Push Security

• Pop Culture Passwords Most Likely to Get You Hacked, New Study

• Progress Telerik Report Server Flaw Let Attackers Bypass Authentication

• FBCS Data Breach Impact Grows to 3.2 Million Individuals

• TrickBot and Other Malware Droppers Disrupted by Law Enforcement

• How to Build Your Autonomous SOC Strategy

• LilacSquid: The stealthy trilogy of PurpleInk, InkBox and InkLoader

• CryptoChameleon Kit With Group of Tools Propagate Phishing Quickly into Infrastructure

• Managing Firewall complexity and Augmenting Effectiveness with AIOps for Cisco Firewall

• Cisco Secure Firewall integrates with Azure Virtual WAN (vWAN) to simplify firewall insertion in Azure environments

• Shifting gender stereotypes: ten years of Women Rock-IT

• Massive 911 S5 Botnet Dismantled, Chinese Mastermind Arrested

• 8 Degrees of Secure Access Service Edge

• Okta Warns of Credential Stuffing Attacks Targeting Cross-Origin Authentication

• Europol Shuts Down 100+ Servers Linked to IcedID, TrickBot, and Other Malware

• Spring Cloud Data Flow Let Attackers Compromise The Server

• Top 6 Database Security Solutions Available in 2024

• Supply Chain Attack against Courtroom Software

• IBM spin-off Kyndryl accused of discriminating on basis of age, race, disability

• Do VPNs Change or Hide Your IP Address?

• The Ticketmaster “breach”—what you need to know

• Pretty much all of the headaches affecting MSPs are due to cybersecurity

• NIST says NVD will be back on track by September 2024

• BlackRock $20bn ETF Becomes World’s Biggest Bitcoin Fund

• OpenAI Board ‘Not Aware Of ChatGPT Launch’

• Meta Finds Facebook Propaganda Network Using Generative AI

• HP Sales Beat Expectations As PCs Return To Growth

• The Unusual Espionage Act Case Against a Drone Photographer

• US-Led Operation Takes Down World’s Largest Botnet

• Recruiting From the Help Desk

• Employee Termination Policy

• Check Point VPN Attacks Involve Zero-Day Exploited Since April

• Ransomware Attack Disrupts Seattle Public Library Services

• VMware Workstation and Fusion: Critical Security Flaws Fixed

• Cybersecurity News:  New NK hackers, Dutch bank breached, Wayback Machine attacked

• Operation Endgame, the largest law enforcement operation ever against botnets

• RSAC Fireside Chat: Start-up Anetac rolls out a solution to rising ‘service accounts’ exposures

• U.S. Dismantles World’s Largest 911 S5 Botnet, with 19 Million Infected Devices

• Elevate Your IAM Strategy with Thales at EIC 2024

• Threat Hunting 101: Five Common Threats to Look For

• Former FTX Executive Ryan Salame Sentenced To Seven Years

• Shark Tank Host Launches Crowdfunding Site For TikTok Buy

• Law enforcement operation dismantled 911 S5 botnet

• #Infosec2024: Why Credential-Based Attacks Need Modern Solutions

• Okta Warns Credential Stuffing Attacks Targeting Customer Identity Cloud

• London Woman Jailed For Six Years For Laundering Bitcoin

• Okta warns of credential stuffing attacks targeting its Cross-Origin Authentication feature

• Okta Warns of Credential Stuffing Attacks Targeting Customer Identity Cloud

• Feeding MISP with OSSEC, (Thu, May 30th)

• Hackers Claiming Shell Data Breach On Popular Hacking Forum

• Cyber Attack news headlines trending on Google

• Indian stock exchange finally encrypting all messages to traders

• Operation Endgame – 16,455,383 breached accounts

• Decoding Water Sigbin’s Latest Obfuscation Tricks

• ESET World 2024: Big on prevention, even bigger on AI

• What is Security Orchestration?

• Cybercriminals Abuse Stack Overflow to Promote Malicious Python Package

• 59% of public sector apps carry long-standing security flaws

• A Year of Opportunity: Our Role in Empowering Global Progress

• Identity-related incidents becoming severe, costing organizations a fortune

• NIST unveils ARIA to evaluate and verify AI capabilities, impacts

• ISC Stormcast For Thursday, May 30th, 2024 https://isc.sans.edu/podcastdetail/9002, (Thu, May 30th)

• Chinese national cuffed on charges of running ‘likely the world’s largest botnet ever’

• Malicious PyPI Package ‘Pytoileur’ Targets Windows and Leverages Stack Overflow for Distribution

• Miscreants claim they’ve snatched 560M people’s info from Ticketmaster

• Chinese EV makers, and their connected vehicles, targeted by new House bill

• The Alaska Supreme Court Takes Aerial Surveillance’s Threat to Privacy Seriously, Other Courts Should Too

• Ticketmaster Hacked, Personal Data of 560 Million Customers Leaked, ShinyHunters Claim

• NIST Struggles with NVD Backlog as 93% of Flaws Remain Unanalyzed

• IT Security News Daily Summary 2024-05-29

• ‘Largest Botnet Ever’ Tied to Billions in Stolen Covid-19 Relief Funds

• A Plan to Protect Critical Infrastructure from 21st Century Threats

• How to converge networking and security teams: Key steps

• Multi-day DDoS storm batters Internet Archive

• Chinese EVs – and their connected tech – are the next target of US lawmakers

• USENIX Security ’23 – Dubhe: Succinct Zero-Knowledge Proofs for Standard AES and related Applications

• Scammers Build Fraud Campaigns Around Free Piano Offers

• Is Your Computer Part of ‘The Largest Botnet Ever?’

• Check Point released hotfix for actively exploited VPN zero-day

• Top 6 Managed Detection & Response (MDR) Providers in 2024

• From Trend to Mainstay: The Unstoppable Force of Managed Services

• From IT Pro to Swiftie, Scott Sardella’s Winning Big with Cisco Insider Advocates

• Don’t Let the Sun Go Down on Section 230 | EFFector 36.7

• Cybercriminals Abuse StackOverflow to Promote Malicious Python Package

• Christie’s Auction House Hacked, Sensitive Data from 500,000 Customers Stolen

• Moonstone Sleet emerges as new North Korean threat actor with new bag of tricks

• 6 insights from Microsoft’s 2024 state of multicloud risk report to evolve your security strategy

• Why healthcare data is often the target of ransomware attacks

• House bill would ban Chinese connected vehicles over security concerns

• Out-of-bounds reads in Adobe Acrobat; Foxit PDF Reader contains vulnerability that could lead to SYSTEM-level privileges

• New Generative AI category added to Talos reputation services

• Retail Tech Deep-Dive: Meraki Security

• Integration of Cisco Secure Threat Defense Virtual with Megaport

• #MIWIC2024 One To Watch: Ellie Calver, Cybersecurity Apprentice at BT

• How to turn off location tracking on iOS and iPadOS

• USENIX Security ’23 – PROGRAPHER: An Anomaly Detection System based on Provenance Graph Embedding

• Advance Fee Fraud Targets Colleges With Free Piano Offers

• Microsoft uncovers North Korea Moonstone Sleet

• Surge in Discord Malware Attacks as 50,000 Malicious Links Uncovered

• Check Point discovers vulnerability tied to VPN attacks

• Defend Your Business: Testing Your Security Against QakBot and Black Basta Ransomware

• Check Point Warns of Zero-Day Attacks on its VPN Gateway Products

• Geoffrey Hinton Discusses Risks and Societal Impacts of AI Advancements

• New PyPI Malware “Pytoileur” Steals Crypto and Evades Detection

• Brazilian Banks Targeted by New AllaKore RAT Variant Called AllaSenha

• AI, Deepfakes and Digital ID: The New Frontier of Corporate Cybersecurity

• Vulnerabilities in Eclipse ThreadX Could Lead to Code Execution

• Transcend Raises $40 Million for Data Privacy Platform

• A NIST AI RMF Summary

• You Know You Need GenAI Policies, Right?

• 400% Increase in MoD Data Breaches Sparks Fears of Cyber Threats from Russia and China

• Hackers exploited “Free VPN” to build massive fraud botnet, hit with US sanctions

• Severe Vulnerability Fixed In Cisco Firepower Management Center

• North Korea Building Cash Reserves Using Ransomware, Video Games

• Top Lieutenant To Crypto King Jailed For Seven Years

• US Sanctions Three Chinese Men For Operating 911 S5 Botnet

• Netflix Paid Out Over $1 Million Via Bug Bounty Program

• BreachForums Returns Just Weeks After FBI-Led Takedown

• A Wider View on TunnelVision and VPN Advice

• Risks of Generative AI for Organisations and How to Manage Them

• Combatting International Spoofed Calls: India’s New Measures to Protect Citizens

• Protect and Elevate Your DNS with Akamai Shield NS53

• How to turn off location tracking on Android

• US Sanctions Three Chinese Men for Operating 911 S5 Botnet

• AI Market Research: The Pivotal Role of Generative AI in Cyber Security

• Keeper Unveils Revamped Browser Extension

• Data leak site BreachForums is back, boasting Live Nation/Ticketmaster user data. But is it a trap?

• From Courtroom to Cyber Threat: The JAVS Viewer 8 Incident

• Internet Archive Disrupted by Sustained and “Mean” DDoS Attack

• North Korea building cash reserves using ransomware, video games

• Industrials at Cisco Live 2024

• How Empathetic Leadership Can Shape the Future of Inclusion in Cybersecurity

• Truecaller AI Call Scanner detects AI voice clones in real-time

• Moonstone Sleet: A new North Korean threat actor

• The Idea of Web3 and 7 Global Web3 Agencies

• Ransomlord – Anti-Ransomware Exploitation Tool

• Top 6 Managed Detection and Response (MDR) Providers in 2024

• BreachForums resurrected after FBI seizure

• New Endpoint Protection Platform by Cigent Blocks Ransomware at the Data Level

• Europe’s Cybersecurity Chief Says Disruptive Attacks Have Doubled in 2024, Sees Russia Behind Many

• New North Korean Threat Actor Engaging in Espionage, Revenue Generation Attacks

• Zendata Emerges From Stealth With Data Security, AI Governance Solutions

• New Research Warns About Weak Offboarding Management and Insider Risks

• U.S. Sentences 31-Year-Old to 10 Years for Laundering $4.5M in Email Scams

• Blocksquare Hits $100M Tokenized RWA Triggering Launchpad Release

• 10 Best SIEM Tools for 2024

• Strengthening Data Security to Protect Consumers

• #Infosec2024: How Williams Racing Relies on Data Security for Peak Performance

• OpenAI Creates AI Safety Committee After Criticism

• EU Eyes Telegram User Numbers As It Nears Regulatory Threshold

• Nvidia Value Nears Apple As Shares Surge

• Musk’s Neuralink Seeks Patients For Clinical Trial

• GMO GlobalSign introduces Certificate Automation Manager

• Privacy Implications of Tracking Wireless Access Points

• Personal Information of 44,000 Compromised in First American Cyberattack

• ASML and TSM Face Uncertain Future in Event of Chinese Assault on Taiwan

• How fraudsters stole $37 million from Coinbase Pro users

• Microsoft Uncovers ‘Moonstone Sleet’ — New North Korean Hacker Group

• ELLIO and ntop Partnership Enhances Real-Time Network Traffic Monitoring

• Hiring Kit: Cryptography Engineer

• Price Drop: This Complete Ethical Hacking Bundle is Now $40

• New North Korean Hacking Group Identified by Microsoft

• Join Us 06-14-24 for “Hacking the Conversation Around Risk” – Super Cyber Friday

• PoC exploits for critical FortiSIEM command execution flaws released (CVE-2024-23108, CVE-2023-34992)

• Cybersecurity News: BreachForums returns, First American data breach, Chinese nationals sanctioned

• Netflix Paid Out Over $1 Million via Bug Bounty Program

• Dashlane Nudges reduces the risk of credential theft

• #Infosec2024: Decoding SentinelOne’s AI Threat Hunting Assistant

• Cyber Security Today, May 29, 2024 – A new North Korean ransomware gang spotted, and more

• ELLIO and ntop partnership to boost high-speed network traffic monitoring with real-time data on opportunistic scans, botnets, and mass attacks.

• Introducing Sekoia TDR

• TikTok Challenge To US Ban Law Gets September Hearing

• Tencent Uses AI To Help Decipher Ancient Chinese Script

• Transcend raises $40 million to address data privacy issues

• Tracking Threat Actors Using Images and Artifacts

• Data Destruction: The Final Line of Defense Against Cyber Attacks

• EU Is Tightening Cybersecurity for Energy Providers

• BreachForums Returns Just Weeks After FBI Seizure – Honeypot or Blunder?

• Study Finds Public Interest In AI Lags Industry Hype

• ABN Amro discloses data breach following an attack on a third-party provider

• Understanding Material Cybersecurity Breaches and Material Cyber Attacks

• Simplify 5G Fixed Wireless Access and Scale Secure Connectivity to More Places

• Symmetry Systems Unveils State of Data+AI Security: Dormant data growing 5X Year on Year, while 1/4 of Identities haven’t accessed Any Data in over 90 days.

• Data Entry Job Offers in Southeast Asia Could Be Cyber Crime Traps

• Customer Identity and Access Management (CIAM) 101

• Avoiding the cybersecurity blame game

• RansomLord: Open-source anti-ransomware exploit tool

• Cybersecurity jobs available right now: May 29, 2024

• A closer look at GenAI impact on businesses

• Spyware maker pcTattletale says it’s ‘out of business’ and shuts down after data breach

• 
Is that It? Finding the Unknown: Correlations Between Honeypot Logs & PCAPs [Guest Diary], (Tue, May 28th)

• ISC Stormcast For Wednesday, May 29th, 2024 https://isc.sans.edu/podcastdetail/9000, (Wed, May 29th)

• Is that It? Finding the Unknown: Correlations Between Honeypot Logs & PCAPs [Guest Diary], (Tue, May 28th)

• Using Scary but Fun Stories to Aid Cybersecurity Training

• What Is Security Service Edge (SSE): All You Need to Know

• Top Cloud Security Issues: Threats, Risks, Challenges & Solutions

• Hackers Claim Ticketmaster Data Breach: 560M Users’ Info for Sale at $500K

• 2 Weeks Out: Evolution at RSAC 2024

• Christie disclosed a data breach after a RansomHub attack

• 2.8M US folks learn their personal info was swiped months ago in Sav-Rx IT heist

• BreachForums returns just weeks after FBI-led takedown

• IT Security News Daily Summary 2024-05-28

• Treasury Sanctions Creators of 911 S5 Proxy Botnet

• Spyware maker pcTattletale shutters after data breach

• pcTattleTale spyware leaks database containing victim screenshots, gets website defaced

• Important Security Update – Stay Protected Against VPN Information Disclosure (CVE-2024-24919)

• Elon Musk and Yann LeCun’s social media feud highlights key differences in approach to AI research and hype

• IBM to test Southeast Asian LLM and facilitate localization efforts

• Experts released PoC exploit code for RCE in Fortinet SIEM

• OpenAI Launches Security Committee Amid Ongoing Criticism

• How AI could bolster software supply chain security

• Check Point warns of threat actors targeting VPNs

• BreachForums returns, just weeks after FBI-led takedown

• Rock band’s hidden hacking-themed website gets hacked

• Vulnerability Summary for the Week of May 20, 2024

• Why cellular-first SASE is defining the future of distributed enterprises

• Randall Munroe’s XKCD ‘Room Code’

• Upcoming Webinar: Getting Started With QUIC and OpenSSL

• Hackers Target Check Point VPNs, Security Fix Released

• Ongoing Hacking Campaign Targets Check Point VPNs

• The Satellites Using Radar To Peer At Earth In Minute Detail

• OpenAI Forms Safety Committee As It Starts Training Latest AI Model

• Christie’s Confirms Data Breach After Ransomware Group Claims Attack

• SpiderOak One customers threaten to jump ship following datacenter upgrade

• The Rise of Generative AI is Transforming Threat Intelligence – Five Trends to Watch

• ‘Microsoft’ Scammers Steal the Most, says FTC

• GDPR Turns Six: Reflecting on a Global Privacy Benchmark

• Threats of the Week: Black Basta, Scattered Spider, and FIN7 Malvertising

• HP Report Surfaces Shifts in Cyber Attack Tactics

• Unmasking the Trojan: How Hackers Exploit Innocent Games for Malicious Intent

• Check Point Urges VPN Configuration Review Amid Attack Spike

• ABN AMRO bank hit by Ransomware

• Congresswomen Advocate for Cybersecurity Jobs for Formerly Incarcerated

• CISA Releases One Industrial Control Systems Advisory

• Campbell Scientific CSI Web Server

• CISA Adds One Known Exploited Vulnerability to Catalog

• Shared Responsibility: How We Can All Ensure Election Security and Voter Confidence

• Social Distortion: The Threat of Fear, Uncertainty and Deception in Creating Security Risk

• ABN Amro Client Data Possibly Stolen in AddComm Ransomware Attack

• OpenAI Forms Safety Committee as It Starts Training Latest Artificial Intelligence Model

• XSS Vulnerabilities Found in WordPress Plugin Slider Revolution

• Building AI on a Foundation of Open Source Requires a Fundamentally New Approach to Application Security

• RSAC Fireside Chat: Dispersive adapts WWII radio-signal masking tool to obfuscating network traffic

• User Guide: PCI 4.0 Requirement 11.6 – Detecting and Responding to Unauthorized Changes on Payment Pages with Feroot

• Windows 11: Home or Pro? A Comprehensive Comparison

• Sharp Dragon Shifts Cyber Attacks to New Frontiers: Africa and the Caribbean

• WhatsApp Chats Vulnerable To Government Monitoring – Report

• Moroccan Cybercrime Group Storm-0539 Exploits Gift Card Systems with Advanced Phishing Attacks

• What is GPS Jamming, a Rising Concern for Global Aviation?

• Tonic Textual extracts, governs, and deploys unstructured data for AI development

• Breach Forums Return to Clearnet and Dark Web Despite FBI Seizure

• Will Australia Ever Dig Itself Out of the Cybersecurity Skills Shortage?

• Auction house Christie’s confirms criminals stole some client data

• INE Security Enables CISOs to Secure Board Support for Cybersecurity Training

• From Phish to Phish Phishing: How Email Scams Got Smart

• Get 3 Years of Rock-Solid Protection With Surfshark VPN for $67.20 by 5/31

• Top 5 Cloud Trends U.K. Businesses Should Watch in 2024

• Indian National Pleads Guilty to $37 Million Cryptocurrency Theft Scheme

• Bridging The Gap: Diversity Cyber Council and The Emergence of Tech as The New Opportunity Frontier

• Private Equity Firm Hg Acquires AuditBoard for $3 Billion

• Christie’s Confirms Data Breach After Ransomware Group Claims Attack

• US Drug Distributor Cencora Reveals Major Cyberattack, Sensitive Medical Data Breached

• TeaBot Banking Trojan Activity on the Rise, Zscaler Observes

• Adaptive Shield unveils platform enhancements to improve SaaS security

• Multiple Vulnerabilities Found In Cacti Network Monitoring Tool

• Zoom Rolls Out Post-Quantum End-to-End Encryption For Safer Chats

• GitLab XSS Vulnerability Could Allow Account Takeover

• Google Patched Another Chrome Zero-Day Under Active Attack

• Fake Antivirus Sites Spread Malware Disguised as Avast, Malwarebytes, Bitdefender

• Researchers Exploited Nexus Repository Using Directory Traversal Vulnerability

• How Researchers Cracked an 11-Year-Old Password to a $3 Million Crypto Wallet

• Navigating DORA (Digital Operational Resilience Act) with Secure Workload

• Finding My Place, Part Three: Translating Military Skills to Cybersecurity Leadership

• AI Powers Sabre’s Enhanced Threat Detection & Response

• The Link Between Cybersecurity and Reputation Management for Executives

• 4-Step Approach to Mapping and Securing Your Organization’s Most Critical Assets

• Courtroom Recording Software Vulnerable to Backdoor Attacks

• DDNS Service In Fortinet Or QNAP Embedded Devices Exposes Sensitive Data, Researchers Warn

• 6 Best VPNs for Canada in 2024 (Free & Paid VPNs)

• Ransomhub’s Latest Attack Raises Alarms for Industrial Control Systems (ICS) Security

• EFF Submission to the Oversight Board on Posts That Include “From the River to the Sea”

• Vendor Risk Management Best Practices in 2024

• #Infosec2024: What to Expect at Infosecurity Europe 2024

• What is an Infosec Audit and Why Does Your Company Need One?

• 2.8 Million Impacted by Data Breach at Prescription Services Firm Sav-Rx

• Data Stolen From MediSecure for Sale on Dark Web

• Researchers Warn of CatDDoS Botnet and DNSBomb DDoS Attack Technique

• AWS In Talks To Invest Billions In Italy Amidst AI Spending Surge

• EU Adopts Law To Spur Green Tech Manufacturing

• CatDDoS Exploiting 80+ Vulnerabilities, Attacking 300+ Targets Daily

• PoC Exploit Released For macOS Privilege Escalation Vulnerability

• CERT-UA Warns of Malware Campaign Conducted by Threat Actor UAC-0006

• Ransomware? Why’d It Have to Be Ransomware? (Live in San Francisco)

• Cops Are Just Trolling Cybercriminals Now

• Trusted relationship attacks: trust, but verify

• SingCERT Warns Critical Vulnerabilities Found in Multiple WordPress Plugins

• Attackers are probing Check Point Remote Access VPN devices

• Cybersecurity News: Ransomware uses BitLocker, pharmacy supplier breach, ATM malware threat

• Proxy-Advisory Firm Advises Against Musk Tesla Pay Deal

• Musk’s xAI ‘To Build Nvidia Supercomputer’

• WordPress Plugin abused to install e-skimmers in e-commerce sites

• Digital ID Adoption: Implementation and Security Concerns

• Check Point VPN Targeted for Initial Access in Enterprise Attacks

• Update: Threat Actors Created Rogue VMs to Evade Detection During December 2023 Attack on MITRE

• US Extends Probe Into Applied Materials Over Alleged China Shipments

• China Premier Welcomes Foreign Tech Investment

• Cloud Sprawl: How to Tidy It Up

• Measuring the Effectiveness of File Integrity Monitoring Tools

• Take two APIs and call me in the morning: How healthcare research can cure cyber crime

• White House Announces Plans to Revamp Data Routing Security by Year-End

• #Infosec2024: Why Human Risk Management is Cybersecurity’s Next Step for Awareness

• Human Error Still Perceived as the Achilles’ Heel of Cybersecurity

• #Infosec2024: Charity Bridges Digital Divide and Fuels New Cyber Talent

• China Forms Biggest-Ever Chip Investment Fund

• TP-Link Archer C5400X gaming router is affected by a critical flaw

• Phishing with Cloudflare Workers: Transparent Phishing and HTML Smuggling

• Black Basta Ransomware Attack: Microsoft Quick Assist Flaw

• TP-Link Gaming Router Vulnerability Exposes Users to Remote Code Attacks

• WordPress Plugin Exploited to Steal Credit Card Data from E-commerce Sites

• ATM malware developed to target Europe

• How to combat alert fatigue in cybersecurity

• The evolution of security metrics for NIST CSF 2.0

• D3 Is Security Automation that Makes Your Team Better

• Current State of Transport Layer Security (TLS) Post-Quantum Cryptography

• Cybersecurity teams gear up for tougher challenges in 2024

• Widespread data silos slow down security response times

• 34% of organizations lack cloud cybersecurity skills

• ISC Stormcast For Tuesday, May 28th, 2024 https://isc.sans.edu/podcastdetail/8998, (Tue, May 28th)

• Best Practices for Cloud Computing Security

• IT Security News Daily Summary 2024-05-27

• Sav-Rx data breach impacted over 2.8 million individuals

• Jumpstart your studies for ENNA with Network Assurance Prep

• Analysis of BloodAlchemy Malware: A New Evolution of Deed RAT

• Alert: Google Chrome Zero-Day Patch Fixes Critical Flaw

• City of Helsinki Data Breach: What You Need to Know

• Vulnerability Recap 5/27/24 – Google, Microsoft & GitLab Fixes

• Microsoft to roll out AI powered PCs concerningly in coming years

• Fake Antivirus websites now delivering malware

• Securing Cloud Environments: Safeguarding Against Cyber Threats

• How’s Uncle Sam getting on with Biden’s AI exec order? Pretty good, we’re told

• Ascension Cyber Attack Leaves Healthcare Sector Reeling

• New Apple Wi-Fi Vulnerability Exposes Real-Time Location Data

• Massive Data Breach Exposes Sensitive Information of Indian Law Enforcement Officials

• New Ransomware Uses BitLocker To Encrypt Victim Data

• Bayer And Other Drug Companies Caught Up In Cencora Data Loss

• Best Buy / Geek Squad Most Impersonated By Scammers In 2023

• Man Behind Deepfake Biden Robocall Indicted On Felony Charges, Faces $6 Million Fine

• Beyond Code: Harnessing AI for Advanced Cybersecurity Solutions

• Rising Like A Phoenix, ShowMeCon 2024 Resurrects A Security Community In The Midwest

• Continuous Threat Exposure Management (CTEM) – The Ultimate Guide for CISOs

• GNOME Remote Desktop Vulnerability Let Attackers Read Login Credentials

• Get 9 Courses on Ethical Hacking for Just $50

• New ShrinkLocker Ransomware Exploits BitLocker to Encrypt Files

• Machine Identities Pose Major Threat to Indian Organizations: CyberArk

• SentinelOne vs Palo Alto: Compare EDR software

• TikTok Cuts ‘Hundreds’ Of Jobs

• Elon Musk’s xAI In Funding Round Valuing It At $24bn

• Travel, Retail Firms Say EU Rules Slash Their Google Traffic

• Boeing Starliner Set For 1 June Crewed Launch

• Google Invests $350m In India’s Flipkart

• Hajj Pilgrimage Hit by Extensive Phishing and Data Theft Scams

• The Impact of Remote Work and Cloud Migrations on Security Perimeters

• Australian Telecom Watchdog Sues Optus Over 2022 Data Breach

• Detectify platform enhancements address growing attack surface complexity

• Essential Features of Cybersecurity Management Software for MSPs

• Kesakode: A Remote Hash Lookup Service To Identify Malware Samples

• Empowering Women Through Mentoring: Meet Rebecca Frizzarin

• Moroccan Cybercrime Group Steals Up to $100K Daily Through Gift Card Fraud

• Message board scams

• Best Password Generators of 2024 to Secure Your Accounts

• Important Security Update – Enhance your VPN Security Posture!

• New ATM Malware family emerged in the threat landscape

• Worried About Job Security, Cyber Teams Hide Security Incidents

• Malicious PyPI Packages Targeting Highly Specific MacOS Machines

• One in Three Healthcare Providers at Risk, Report Finds

• Guarding Against SQL Injection: Securing Your Cisco Firepower Management Center

• Hackers Phish Finance Organizations in the US and Europe Using Trojanized Minesweeper Clone

• Report: The Dark Side of Phishing Protection

• Seizing Control of the Cloud Security Cockpit

• EU Wants Universities to Work with Intelligence Agencies to Protect Their Research

• Fake Antivirus Websites Used to Distribute Info-Stealer Malware

• Cisco Firepower Vulnerability Let Attackers Launch SQL Injection Attacks

• Ebury: A Long-Lived Linux Botnet Still Lurking in the Shadows

• Arc Browser’s Windows Launch Targeted by Google Ads Malvertising

• Threat landscape for industrial automation systems, Q1 2024

• New Tricks in the Phishing Playbook: Cloudflare Workers, HTML Smuggling, GenAI

• Cybersecurity News: Arc browser sabotaged, Cencora pharma breach, Albany County breach

• AI Governance

• Cyber Security Today, May 27, 2024 – Security controversy over a new Microsoft tool, a new open source threat intelligence service

• How Criminals Are Leveraging AI to Create Convincing Scams

• Achieving Automated TISAX Compliance

• High-Severity Flaw Affects Cisco Firepower Management Center

• The Importance of Patching Vulnerabilities in Cybersecurity

• Learn how to Protect your Business with this $30 Cybersecurity Training

• CISA’s travel cybersecurity tips

• Hackers Exploit WordPress Plugin to Steal Credit Card Data

• Pakistan-linked Hackers Deploy Python, Golang, and Rust Malware on Indian Targets

• Frustration Mounts Over False Results In Google’s ‘AI Overviews’

• A high-severity vulnerability affects Cisco Firepower Management Center

• A week in security (May 20 – May 26)

• Files with TXZ extension used as malspam attachments, (Mon, May 27th)

• Google Patches Chrome Zero-Day: Type Confusion in V8 JavaScript

• Human error still perceived as the Achilles’ heel of cybersecurity

• Chronon: Open-source data platform for AI/ML applications

• Digital ID adoption: Implementation and security concerns

• Hackers Created Rogue VMs in Recent MITRE’s Cyber Attack

• Bayer and 12 other major drug companies caught up in Cencora data loss

• Ransomware operators shift tactics as law enforcement disruptions increase

• IT Security News Weekly Summary – Week 21

• IT Security News Daily Summary 2024-05-26

• Becoming Resilient to The Cyber Incidents of Today And Tomorrow

• Shut the back door: Understanding prompt injection and minimizing risk

• Anatomy Of an Endpoint Attack: How A Cyberattack Can Compromise an Enterprise Network

• CERT-UA warns of malware campaign conducted by threat actor UAC-0006

• 4 Reasons Why SaaS Security Must Change | Grip

• OpenSSL Is Hiring

• USENIX Security ’23 – ARGUS: Context-Based Detection of Stealthy IoT Infiltration Attacks

• Don’t Be a Victim: How to Avoid Digital House Arrest

• Google Issues Emergency Update for New Chrome Vulnerability

• Truecaller Introduces AI Voice Feature for Personalized Call Responses

• Invest in Future-Proofing Your Cybersecurity AI Plan

• Adapting Cybersecurity Policies to Combat AI-Driven Threats

• Microsoft Uncovers Moroccan Cybercriminals Exploiting Gift Card Scams

• Security Affairs newsletter Round 473 by Pierluigi Paganini – INTERNATIONAL EDITION

• Navigating the AI Revolution: The Global Battle for Tech Supremacy

• YARA 4.5.1 Release, (Sun, May 26th)

• What is Azure Identity Protection and 7 Steps to a Seamless Setup

• Week in review: Google fixes yet another Chrome zero-day exploit, YouTube as a cybercrime channel

• Malware-laced JAVS Viewer deploys RustDoor implant in supply chain attack

• Fake AV websites used to distribute info-stealer malware

• pcTattletale – 138,751 breached accounts

• IT Security News Daily Summary 2024-05-25

• USENIX Security ’23 – Network Detection of Interactive SSH Impostors Using Deep Learning

• The modern CISO: Scapegoat or value creator?

• Grab the best weatherproof Wyze Cam alternative for just $40 this Memorial Day right now

• Spyware app pcTattletale was hacked and its website defaced

• PSNI Faces £750,000 Fine for Major Data Breach

• Gurugram: Deputy Manager Arrested For Providing Bank Details To Cyber Thieves

• Massive Cyber Attack on MoD Raises Job Concerns for Army Staff

• Microsoft’s Windows 11 Recall Feature Sparks Major Privacy Concerns

• Enhancing Cyber Resilience in Banking: Leveraging Live Patching to Combat Rising Threats

• Data Leak Exposes 500GB of Indian Police, Military Biometric Data

• The OG of Instant Messaging ICQ Shutting Down

• Top Cyber Security Companies in Bangalore

• Hidden Cyber Threat Exposed After Six Years

• Securing Trust: How to Partner With Customers to Build World-Class Cybersecurity Solutions

• Microsoft’s New Recall AI Tool May Be a ‘Privacy Nightmare’

• MITRE December 2023 attack: Threat actors created rogue VMs to evade detection

• Experts Find Flaw in Replicate AI Service Exposing Customers’ Models and Data

• csvkit, (Sat, May 25th)

• Cybercriminals Exploit Cloud Storage for SMS Phishing Scams

• Beware of HTML Masquerading as PDF Viewer Login Pages

• NSA Issues Guidance for Maturing Application, Workload Capabilities Under Zero Trust; Dave Luber Quoted

• Cyber Signals: Inside the growing risk of gift card fraud

• Sharp Dragon Expands Towards Africa and The Caribbean

• Mandatory reporting for ransomware attacks? – Week in security with Tony Anscombe

• Man behind deepfake Biden robocall indicted on felony charges, faces $6M fine

• Courtroom Recording Software Compromised in Supply Chain Attack

• Best Buy and Geek Squad were most impersonated orgs by scammers in 2023

• How to Recover Deleted Emails from Exchange Server?

• IT Security News Daily Summary 2024-05-24

• An XSS flaw in GitLab allows attackers to take over accounts

• ShrinkLocker Ransomware Leverages BitLocker for File Encryption

• Suspected supply chain attack backdoors courtroom recording software

• Cyber Security Today, Week in Review for week ending May 24, 2024

• USENIX Security ’23 – Detecting Union Type Confusion in Component Object Model

• Top Cloud Services Used for Malicious Website Redirects in SMS Scams

• Resolving the Zero Trust Encryption Paradox

• The best VPN for streaming in 2024: Expert tested and reviewed

• Apple explains why iOS 17.5 restored your deleted photos – and what you can do now

• The Rise and Risks of Shadow AI

• Black Basta Ascension Attack Redux — can Patients Die of Ransomware?

• Case Study: Implementing an Anti-Phishing Product and Take-Down Strategy

• Attempts to Regulate AI’s Hidden Hand in Americans’ Lives Flounder in US Statehouses

• Evolving Detection Engineering Capabilities with Breach & Attack Simulation (BAS)

• Understanding the SOC 2 Certification

• Beware: These Fake Antivirus Sites Spreading Android and Windows Malware

• Hackers Created Rogue VMs to Evade Detection in Recent MITRE Cyber Attack

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• Cisco Meraki Secures the Postman “Best API Award”

• New Ransomware Gang exploits Microsoft Bitlocker to lockup databases

• US Probe Of Waymo Uncovers More Incidents – Report

• How FHE Technology Is Making End-to-End Encryption a Reality

• USENIX Security ’23 – Mitigating Security Risks in Linux with KLAUS: A Method for Evaluating Patch Correctness

• APT41 Strikes Again: Attacks Italian Industry Via Keyplug Malware

• Mike Lynch Defends Himself At HP-Autonomy Trial In US

• Fake Accounts Proliferating On X, Study Warns

• BloodAlchemy Malware Used to Target Government Agencies in Southern and Southeastern Asia

• CISOs Pursuing AI Readiness Should Start by Updating Their Email Security Policy

• Cybersecurity Insights with Contrast CISO David Lindner | 5/24/24

• Shadow IT Surge Poses Growing Threat to Corporate Data Security

• Cloud Security Fundamentals: Understanding the Basics

• Cisco Releases May 2024 Cisco ASA, FMC, and FTD Software Security Publication

• Three-Year-Old Apache Flink Flaw Now Under Active Attack

• Bugcrowd Buys Informer to Enhance Attack Surface Management

• Morocco-based Cybercriminals Cashing in on Bold Gift Card Scams

• The Critical Role of Training and Phishing Testing in Safeguarding Financial Data

• US pharma giant Cencora says Americans’ health information stolen in data breach

• Google fixes eighth actively exploited Chrome zero-day this year, the third in a month

• High-Severity GitLab Flaw Lets Attackers Take Over Accounts

• Wanna Make Big Tech Monopolies Even Worse? Kill Section 230

• Have You Been Defrauded? This Scam Survival Toolkit Can Help You Recover

• YouTube Emerging as a Hotspot for Cyber Threats: Avast Report

• EPA Report Reveals Cybersecurity Risks in U.S. Water Systems

• AI Seoul Summit: 4 Key Takeaways on AI Safety Standards and Regulations

• Get a Lifetime of 1TB Cloud Storage for Only $80 With FolderFort

• US drug maker Cencora says Americans’ health information stolen in data breach

• Cyber Force Provision Gets House Committee’s Approval

• Fake Antivirus Websites Deliver Malware to Android and Windows Devices

• Health Information Published Online After MediSecure Ransomware Attack

• 5 Patch Management Best Practices for Success in 2024

• CISOs in Australia Urged to Take a Closer Look at Data Breach Risks

• Machine Identities Lack Essential Security Controls, Pose Major Threat

• Google Fixes Eighth Actively Exploited Chrome Zero-Day This Year

• Averlon Emerges From Stealth Mode With $8 Million in Funding

• JAVS Courtroom Audio-Visual Software Installer Serves Backdoor

• Hackers Weaponizing Microsoft Access Documents To Execute Malicious Program

• Unveiling CNAPP+P: The Extra Mile in Cyber Defense

• AI and Automation in the Race to Reduce Attack Dwell Time

• Monetize Magnet – Understanding What This Crypto CPA Network Provides to Affiliate Marketers

• Courtroom Recording Software Compromised With Backdoor Installer

• A Transformative Landscape in Legal Technology: From the Past to AI-Powered Future

• Chinese Hackers Stay Hidden On Military And Government Networks For Six Years

• NSA Releases Guidance On Zero Trust Maturity To Secure Application From Attackers

• Kinsing Malware Attacking Apache Tomcat Server With Vulnerabilities

• Microsoft Warns Of Storm-0539’s Aggressive Gift Card Theft

• White House Seeks Critical Cyber Assistance for Water Utilities, Healthcare

• In Other News: China’s Undersea Spying, Hotel Spyware, Iran’s Disruptive Attacks

• Russian Hackers Shift Tactics, Target More Victims with Paid Malware

• DNSBomb : A New DoS Attack That Exploits DNS Queries

• Ireland Police Facing Nearly a Million-Dollar Fine After Data Breach Exposes Officers’ Details

• Chinese Cyberespionage Campaign Targets Governmental Entities in the Middle East, Africa, and Asia

• SoSafe Human Risk OS reduces human-related security risks

• How Do Hackers Blend In So Well? Learn Their Tricks in This Expert Webinar

• Malicious PyPI & NPM Packages Attacking MacOS Users

• CISA adds Apache Flink flaw to its Known Exploited Vulnerabilities catalog

• On the Zero-Day Market

• APT41 Deploys KeyPlug Backdoor Against Italian Industries

• Chinese State-Backed Hackers Turn to Massive ORB Proxy Networks to Evade Detection

• What are the Hallmarks of Strong Software Security?

• CISO Cite Human Error as Top IT Security Risk

• Google Detects 4th Chrome Zero-Day in May Actively Under Attack – Update ASAP

• DevOps Dilemma: How Can CISOs Regain Control in the Age of Speed?

• Mike Lynch Defends Himself At HP, Autonomy Trial In US

• 11 Cloud Security Best Practices & Tips in 2024 + Free Checklist

• Bolster Raises $14M Led by Microsoft’s M12

• LockBit Ransomware Gang Claims Responsibility for London Drugs Cyberattack

• US retailers under attack by gift card-thieving cyber gang

• Microsoft: Gift Card Fraud Rising, Costing Businesses up to $100,000 a Day

• Cyberattacks are Good for Security Vendors, and Business is Booming

• Japanese Experts Warn of BLOODALCHEMY Malware Targeting Government Agencies

• Courtroom Software Backdoored to Deliver RustDoor Malware in Supply Chain Attack

• Cybersecurity News: Chinese hack military, search engine outage, Mattis speaks out

• Usage of TLS in DDNS Services leads to Information Disclosure in Multiple Vendors

• US Man Gets 10 Years for Laundering Cash From Online Fraud

• Google Patches Fourth Chrome Zero-Day in Two Weeks

• Ekran System Enhances Privileged Access Management: New Workforce Password Management Feature

• Huntress adds Active Remediation and macOS coverage to its EDR solution

• Cyber Security Today, May 24, 2024 – A threat actor leverages Windows BitLocker in ransomware attacks, beware of ORB networks, and more

• Beware Of HTML That Masquerade As PDF Viewer Login Pages

• Get a Lifetime Subscription of FastestVPN for just $32

• UK Government in $10.8m Bid to Tackle AI Cyber-Threats

• Why Shareable SBOMs are Essential for Software Security

• Fake Pegasus Spyware Strains Populate Clear and Dark Web

• Recall feature in Microsoft Copilot+ PCs raises privacy and security concerns

• Pakistani-Aligned APT36 Targets Indian Defense Organizations

• Optimizing CI/CD Security: Best Practices for a Robust Software Delivery Pipeline

• Illumio and Netskope join forces to strengthen enterprise resilience against cyberattacks

• Google fixes yet another Chrome zero-day exploited in the wild (CVE-2024-5274)

• Picus Security introduces security validation for Kubernetes

• Introducing Nimfilt: A reverse-engineering tool for Nim-compiled binaries

• Microsoft President Set to Testify Before Congress on ‘Security Shortcomings’

• Code42 partners with Mimecast to protect organizations from data leaks

• Operation SpecTor: Authorities Seized Dark Markets Offering Illicit Goods

• Gift Card Fraud on the Rise: Storm-0539 and Their Deceptive Techniques

• Cryptojacking Alert: GhostEngine Disables Endpoint Protections

• Leveraging Data Consolidation to Strengthen Cybersecurity: A Comprehensive Approach

• Product showcase: Alert – Data breach detector for your email, credit card, and ID

• US to stop GPS data communication from Foreign Satellites

• Fail2Ban: Ban hosts that cause multiple authentication errors

• Worried about job security, cyber teams hide security incidents

• Despite increased budgets, organizations struggle with compliance

• Effective GRC programs rely on team collaboration

• New infosec products of the week: May 24, 2024

• ISC Stormcast For Friday, May 24th, 2024 https://isc.sans.edu/podcastdetail/8996, (Fri, May 24th)

• 6 Factors to Consider When Choosing a SIEM Solution

• 2024: The Year of Secure Design

• Ad Protect: Mastering the Detection of Bot-Driven Ad Fraud

• Three-year-old Apache Flink flaw under active attack

• Three-year-old Apache Flink flaw now under active attack

• Stark Industries Solutions: An Iron Hammer in the Cloud

• NETMundial+10 Multistakeholder Statement Pushes for Greater Inclusiveness in Internet Governance Processes

• IT Security News Daily Summary 2024-05-23

• Efficient Document Merging Strategies for Professionals

• Here’s yet more ransomware using BitLocker against Microsoft’s own users

• Leading LLMs Insecure, Highly Vulnerable to Basic Jailbreaks

• Compromised courtroom recording software was served from vendor’s official site

• The SEC slaps NYSE’s parent company with a $10M fine for not immediately reporting a hack

• Casino cyberattacks put a bullseye on Scattered Spider – and the FBI is closing in

• Anthropic’s Generative AI Research Reveals More About How LLMs Affect Security and Bias

• Apple API Allows Wi-Fi AP Location Tracking

• Elon Musk Disagrees With US Tariffs On Chinese EVs

• Google guru roasts useless phishing tests, calls for fire drill-style overhaul

• IBM X-Force Report: Grandoreiro Malware Targets More Than 1,500 Banks in 60 Countries

• US Intelligence Agencies’ Embrace of Generative AI Is at Once Wary and Urgent

• GitHub Issues Patch for Critical Exploit in Enterprise Server

• Apple and Google are taking steps to curb the abuse of location-tracking devices — but what about others?

• WhatsApp Engineers Fear Encryption Flaw Exposes User Data, Memo

• He Trained Cops to Fight Crypto Crime—and Allegedly Ran a $100M Dark-Web Drug Market

• CISA Warns of Actively Exploited Apache Flink Security Vulnerability

• Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming Pattern

• Former Cybersecurity Boss Warns UK Not Heeding China Threat

• He Trained Crypto Cops to Fight Crypto Crime—and Allegedly Ran a $100M Dark Web Drug Market

• Randall Munroe’s XKCD ‘Exponential Growth’

• Sharenting: What parents should consider before posting their children’s photos online

• The 10 most common ERP security issues and ways to fix them

• Cisco Live Customer Experience Activations and Sweepstakes

• New Bitcoin Token Protocol “Runes” Carries Potential Phishing Risk

• How I got started: AI security researcher

• The WAF Oath: Primum Non Nocere | Impart Security

• Cybercriminals Exploit Cloud Storage For SMS Phishing Scams

• Deepfakes turn into second most common cybersecurity incident

• 93% of vulnerabilities unanalyzed by NVD since February

• A Leak of Biometric Police Data Is a Sign of Things to Come

• What America’s Federal Privacy Bill Means for Data Protection

• YouTube Threatens To Block Russian Protest Group’s Anti-War Content

• 8 Best Penetration Testing Tools and Software

• Cybercriminals are Targeting Elections in India With Influence Campaigns

• Defending Digital Frontiers: Strategies for Organizations in an Unstable World

• Indian Election Faces Cyber-Attacks, Data Leaks on Dark Web

• Wordfence Intelligence Weekly WordPress Vulnerability Report (May 13, 2024 to May 19, 2024)

• Guntech 2.5 to Launch in Upland’s Gaming Ecosystem

• AutomationDirect Productivity PLCs

• Navigating Multicloud Security: How MSPs Can Leverage the Cloud Protection Suite to Secure their Customers

• Chinese Hackers Hide on Military and Government Networks for Six Years

• Veeam says critical flaw can’t be abused to trash backups

• Compromised recording software was served from vendor’s official site, threat researchers say

• New Frontiers, Old Tactics: Chinese Espionage Group Targets Africa & Caribbean Govts

• 55,000 Impacted By Cyberattack On California School Association

• Veeam Patches Critical Flaw That Puts Enterprise Backups At Risk

• 70% Of CISOs Worry Their Org Is At Risk Of A Material Cyber Attack

• VMware Abused In Recent MITRE Hack For Persistence, Evasion

• How Apple Wi-Fi Positioning System Can Be Abused To Track People Around The Globe

• Microsoft’s Recall Stokes Security and Privacy Concerns

• VMware Abused in Recent MITRE Hack for Persistence, Evasion

• Hospitals Hacked: Urgent Care Needed

• Beyond the Basics: Exploring Uncommon NTLM Relay Attack Techniques

• Breach Forums Plans Dark Web Return Despite FBI Crackdown

• ICO Warns PSNI It Faces £750k Fine Over Data Breach

• Analog Launches Testnet, Allocates 2% Token Supply for Participants

• Consumer Industries at Cisco Live 2024

• U.S. House Panel Takes on AI Security and Misuse

• Keylogger Malware Campaign Exploits Microsoft Exchange Server Flaws to Hit Over 30 Victims

• 70% of CISOs worry their org is at risk of a material cyber attack

• Chinese Espionage Campaign Expands to Target Africa and The Caribbean

• Estimate the financial benefits of using CloudGuard Network Security

• 10 Years in Prison for $4.5 million BEC Scammer Who Bought Ferrari to Launder Money

• APT41: The threat of KeyPlug against Italian industries

• CLOUD#REVERSER Campaign Leverages Cloud Storage for Malware Delivery

• Cybersecurity Labeling for Smart Devices Aims to Help People Choose Items Less Likely to be Hacked

• 55,000 Impacted by Cyberattack on California School Association

• Bolster Raises $14 Million for AI-Powered Phishing Protection

• Ransomware Fallout: 94% Experience Downtime, 40% Face Work Stoppage

• Major Security Flaw Discovered in Popular Cloud Logging Tool

• NVD Leaves Exploited Vulnerabilities Unchecked

• Snowflake’s Anvilogic Investment Signals Changes in SIEM Market

• Consumer-Grade Spyware App Found on US Hotel Check-in Computers

• Legacy Windows OSes Fall Prey to Rapid Online Attacks

• LastPass Rolls Out URL Encryption In Password Vaults

• Demystifying Multicloud Networking with Cisco Multicloud Defense

• ShrinkLocker: Turning BitLocker into ransomware

• Creating a Security Program with Less Complexity and More Visibility

• Apple’s Wi-Fi Positioning Can Be System Abused To Track Users

• Inside Operation Diplomatic Specter: Chinese APT Group’s Stealthy Tactics Exposed

• Are Your SaaS Backups as Secure as Your Production Data?

• Bugcrowd, the crowdsourced white-hat hacker platform, acquires Informer to ramp up its security chops

• Critical SQL Injection flaws impact Ivanti Endpoint Manager (EPM)

• Heimdal to Showcase Widest Cybersecurity Tech Stack at Infosecurity Europe 2024

• Apple Wi-Fi Positioning System Open to Global Tracking Abuse

• Rockwell Automation Urges Disconnection of ICS from the Internet

• NYSE Operator Intercontinental Exchange Gets $10M SEC Fine Over 2021 Hack

• 400,000 Impacted by CentroMed Data Breach

• Newly Detected Chinese Group Targeting Military, Government Entities

• Why We Need to Get a Handle on AI

• Zero-Day Attacks and Supply Chain Compromises Surge, MFA Remains Underutilized: Rapid7 Report

• EU Data Centers to Report Energy and Water Use Under New Rules

• National Records of Scotland Data Breached in NHS Cyber-Attack

• Apple Appeals Against EU’s $2bn Music Streaming Fine

• Spyware App Found Running on Multiple US Hotel Check-In Computers

• OpenText Acquires Cybersecurity MDR Platform for MSPs

• Personal AI Assistants and Privacy

• Former White House Cyber Official Jeff Greene to Join CISA

• How AI will change your credit card behind the scenes

• My 5 must-have extensions for Firefox on Android (and what I use them for)

• Using AI, Mastercard Expects to Find Compromised Cards Quicker, Before They Get Used by Criminals

• GitHub fixes maximum severity Enterprise Server auth bypass bug (CVE-2024-4985)

• How Do We Build a Security Program to Thwart Deepfakes?

• Operation Diplomatic Specter: An Active Chinese Cyberespionage Campaign Leverages Rare Tool Set to Target Governmental Entities in the Middle East, Africa and Asia

• OpenAI Agrees Content Deal With News Corp

• SEC Fines NYSE Owner ICE for Delay in Reporting VPN Breach

• Ivanti Patches Critical Remote Code Execution Flaws in Endpoint Manager

• Cybersecurity News: NY Stock Exchange owner fined, $50 million towards hospital security, LockBit no longer reigns supreme

• Chinese actor ‘Unfading Sea Haze’ remained undetected for five years

• Scammers are Selling Fake NSO Pegasus Spyware

• OpenText Boosts MDR Offering for MSPs With Pillr Acquisition

• Watch on Demand: Threat Detection and Incident Response (TDIR) Summit

• OneTrust helps organizations meet the framework requirements

• GitHub Fixes Maximum Severity Flaw in Enterprise Server

• A journey into forgotten Null Session and MS-RPC interfaces

• UK data watchdog wants six figures from N Ireland cops after 2023 data leak

• RSAC Fireside Chat: Qwiet AI leverages graph-database technology to reduce AppSec noise

• Dota2 – 1,907,205 breached accounts

• PSNI Faces £750,000 Data Breach Fine After Spreadsheet Leak

• SOCRadar raises $25.2 million to accelerate investments in key areas

• What happens when AI goes rogue (and how to stop it)

• A consumer-grade spyware app found in check-in systems of 3 US hotels

• Server-Side Credit Card Skimmer Lodged in Obscure Plugin

• HHS pledges $50M for autonomous vulnerability management solution for hospitals

• Microsoft Replacing VBScript With JavaScript & PowerShell

• How Apple Wi-Fi Positioning System can be abused to track people around the globe

• Would you buy Pegasus spyware from this scammer?

• The End of an Era: Microsoft Phases Out VBScript for JavaScript and PowerShell

• Cyber Threat news headlines trending on Google

• Frida-JIT-unPacker: An Imperva Contribution to the Security Research Community, Presented at Black Hat Asia 2024

• CISOs pursuing AI readiness should start by updating the org’s email security policy

• Strategies for transitioning to a SASE architecture

• Ransomware fallout: 94% experience downtime, 40% face work stoppage

• ‘China-aligned’ spyware slingers operating since 2018 unmasked at last

• Machine identities lack essential security controls, pose major threat

• 2024 sees continued increase in ransomware activity

• The Crux of Android 14 Application Migration and Its Impact

• ISC Stormcast For Thursday, May 23rd, 2024 https://isc.sans.edu/podcastdetail/8994, (Thu, May 23rd)

• Human Error and AI Emerge as Key Challenges in Survey of CISOs

• BTS #30 – Systems Of Trust – Robert Martin

• Lawmakers advance bill to tighten White House grip on AI model exports

• Analysis of ?redtail? File Uploads to ICS Honeypot, a Multi-Architecture Coin Miner [Guest Diary], (Wed, May 22nd)

• Nominations Open for 2024 EFF Awards!

• Go after UnitedHealth, not us, 100+ medical groups urge Uncle Sam

• 15 Best DevSecOps Tools for Seamless Security in 2024

• IT Security News Daily Summary 2024-05-22

• Microsoft Build 2024: Copilot AI Will Gain ‘Personal Assistant’ and Custom Agent Capabilities

• New APT Group “Unfading Sea Haze” Hits Military Targets in South China Sea

• How to find out if an AirTag is tracking you

• USENIX Security ’23 – PET: Prevent Discovered Errors from Being Triggered in the Linux Kernel

• Prompt Injection Threats Highlight GenAI Risks

• ISPM & ITDR Synergize for AI-Based Identity Security

• Sustainability 101: What is a resilient ecosystem?

• SOCRadar Raises $25M Series B for Threat Intel Tech

• Canada’s London Drugs confirms ransomware attack after LockBit demands $25M

• NYSE parent gets $10M wrist tap for failing to report 2021 systems break-in

• How to change your IP address, why you’d want to – and when you shouldn’t

• Security Compliance 101: What It Is and How to Master It

• 15 Best DevSecOps Tools For Seamless Security in 2024

• Spyware found on US hotel check-in computers

• Critical Veeam Backup Enterprise Manager authentication bypass bug

• Ransomware, BEC, GenAI Raise Security Challenges

• CFO Deepfake Redux — Arup Lost $26M via Video

• Microsoft Recall Triggers Enquiry From UK Data Regulator

• AttackGen- A MITRE ATT&CK framework For Cybersecurity Incident

• The best identity theft protection and credit monitoring services of 2024

• The best travel VPNs of 2024: Expert tested and reviewed

• Laundering cash from healthcare, romance scams lands US man in prison for a decade

• Hackers Sell Fake Pegasus Spyware on Clearnet and Dark Web

• Cybercriminals are targeting elections in India with influence campaigns

• What You Need to Know About SEC Compliance Requirements

• Upcoming Honor Smartphones To Feature Google AI Tech

• Confused by the SEC’s breach reporting rules? Read this

• Top things to do at InfoSecurity Europe 2024 – Learn, Explore and Have Fun

• Virtual Event Now Live: Threat Detection and Incident Response (TDIR) Summit

• Cybersecurity Risks and Solutions for Millennials and Gen Z

• Patient Privacy at Risk: Experts React to Health Company Data Leak

• Enhancing Workplace Security and Productivity with Effective Web Filtering

• Report Reveals 341% Rise in Advanced Phishing Attacks

• Google shows Microsoft Cybersecurity failures to US Government to gain business

• Amazon To Refresh Alexa With AI, Charge Monthly Subscription – Report

• Ikaruz Red Team Leveraging LockBit Builder To Launch Ransomware Attacks

• Turla Hackers Leveraging Microsoft Build Engine To Deliver Malware Stealthily

• Why IT Leaders Are Evolving the Network into a High-Performance Digital Engine

• Congo Lawyers Say They Have New Evidence On Apple’s Minerals Supply Chain

• LockBit Dethroned As Ransomware Leader Since Takedown

• Uncle Sam To Inject $50M Into Auto-Patcher For Hospital IT

• Microsoft’s AI Recall Feature Raises Security, Privacy Concerns

• Researchers Spot Cryptojacking Attack That Disables Endpoint Protections

• USENIX Security ’23 – USENIX Security ’23 – Content-Type: multipart/oracle – Tapping into Format Oracles in Email End-to-End Encryption

• Researchers Warn of Chinese-Aligned Hackers Targeting South China Sea Countries

• UserPro Plugin Vulnerability Allows Account Takeover

• Up to 30X Faster PHP Malware Scans with Wordfence CLI 4.0.1

• Top 7 generative AI development companies

• Electric Vehicles Twice As Likely To Hit Pedestrians – Study

• As tech evolves at full tilt, power skills are critical for IT leaders

• Stopping ransomware in multicloud environments

• Arctic Wolf CPO: Most AI deployment is generic, ‘pretty weak’

• Bolster, creator of the CheckPhish phishing tracker, raises $14M led by Microsoft’s M12

• Fortifying Digital Health Against Cyber Attacks

• Indian Govt Targets Cyber Criminals: DoT To Deactivate 1.8 Million SIMs

• Chinese Hackers Rely on Covert Proxy Networks to Evade Detection

• An ongoing malware campaign exploits Microsoft Exchange Server flaws

• BeyondTrust vs. Delinea: Which Is Best for Privileged Access Management?

• Strengthening Cyber Defense with Threat Intelligence Operations

• Strike Graph VerifyAI gives businesses flexibility and control for audits

• IOC Extinction? China-Nexus Cyber Espionage Actors Use ORB Networks to Raise Cost on Defenders

• Breaking Down the WebTPA Data Breach: Expert Analysis and Perspectives

• Teslas Can Still Be Stolen With a Cheap Radio Hack—Despite New Keyless Tech

Generated on 2024-06-01 00:01:26.239797