IT Security News Monthly Summary – May

• IT Security News Daily Summary 2024-04-30

• USENIX Security ’23 – Sherlock on Specs: Building LTE Conformance Tests through Automated Reasoning

• UnitedHealth CEO: ‘Decision to pay ransom was mine’

• FCC Fines Verizon, AT&T and T-Mobile for Sharing User Location Data

• 5 Steps to Make Zero Trust Achievable

• The best travel VPNs of 2024: Expert tested and reviewed

• China Has a Controversial Plan for Brain-Computer Interfaces

• FCC Fines Verizon, AT&T, and T-Mobile for Sharing User Location Data

• How To Set Up a Firewall in 8 Easy Steps + Best Practices

• How To Set Up DMZ on Servers: 7-Step DMZ Configuration

• NSA guy who tried and failed to spy for Russia gets 262 months in the slammer

• Randall Munroe’s XKCD ‘Doppler Effect’

• Unlocking the Prioritization Secrets of Top CISOs

• Brits Ban Default Passwords — and More IoT Stupidity

• Island Secures $175M Investment as Enterprise Browser Startups Defy Tech Giants

• Apptega Raises $15 Million for Cybersecurity Compliance Platform

• Critical Vulnerabilities in Judge0 Lead to Sandbox Escape, Host Takeover

• Docker Hub Users Targeted With Imageless, Malicious Repositories

• Finnish Hacker Gets Prison for Accessing Thousands of Psychotherapy Records and Demanding Ransoms

• Qlik Sense Servers Prone To Cactus Ransomware Threats

• The Dangerous Rise of GPS Attacks

• CISA guidelines to protect critical infrastructure against AI-based threats

• NSA employee who tried and failed to spy for Russia gets 262 months in the slammer

• Announcing the General Availability of Spectra Detect v5.0: Enhancing File Analysis for Advanced Threat Detection

• Introducing the Unified RL Spectra Suite

• Releases Distribution Changes

• Commvault projects Cleanroom Recovery for ransomware thwarting customers

• EDR vs. EPP: What’s the difference?

• Delta Electronics CNCSoft-G2 DOPSoft

• Vulnerability In R Programming Language Could Fuel Supply Chain Attacks

• UK Outlaws Awful Default Passwords On Connected Devices

• Hacker Jailed For Blackmailing Therapy Patients

• Apple’s Incredibly Private Safari Is Not So Private In Europe

• Defending Infrastructure, Securing Systems Key To CISA’s New AI Guidelines

• Sysdig Extends CNAPP Reach to AI Workloads

• Ransomware Rising Despite Takedowns, Says Corvus Report

• Another Day, Another NAS: Attacks against Zyxel NAS326 devices CVE-2023-4473, CVE-2023-4474, (Tue, Apr 30th)

• Redline Malware Using Lua Bytecode to Challenge the SOC/TI Team to Detect

• employee onboarding and offboarding

• How SASE convergence affects organizational silos

• US fines telcos $200M for sharing customer location data without consent

• Guest Blog: Securing K12 Schools with Centripetal and LANRover

• Hacking and Cybersecurity

• FCC Fines Wireless Carriers for Sharing User Locations Without Consent

• YMCA Fined for Data Breach, ICO Raises Concerns About Privacy for People with HIV

• CISA Releases Three Industrial Control Systems Advisories

• Delta Electronics CNCSoft-G2 DOPSoft DPAX

• Microsoft Releases New-Open Source Tool for OT Security

• SSH vs. SSL/TLS: What’s The Difference?

• 3 Ways File Integrity Monitoring Identifies Zero-Day Attacks

• Defense-in-Depth: A Layered Approach for Modern Cybersecurity

• Japanese Authorities Deploy Counterfeit Payment Cards to Alert Victims of Support Scams

• Researchers Discover Coordinated Attacks on Docker Hub to Plant Millions of Malicious Repositories

• KnowBe4 to Acquire Egress

• Malwarebytes Premium Security earns “Product of the Year” from AVLab

• Vulnerability in R Programming Language Could Fuel Supply Chain Attacks

• SafeBase Scores $33M Series B Investment

• Apple ID Shuts Down: Users Panic While Trying to Reset Password

• Banish Browser Clutter: How to Easily Remove Junk Files on Android

• Teachers’ Taxes Fraudulently Filed in Glendale Ransomware Attack

• Adaptive Shield unveils SaaS security for AI

• Analyzing Malware in Binaries and Executables with AI

• AI cybersecurity solutions detect ransomware in under 60 seconds

• Man Who Mass-Extorted Psychotherapy Patients Gets Six Years

• The White House Has a New Master Plan to Stop Worst-Case Scenarios

• Malwarebytes Premium earns “Product of the Year” from AVLab

• Island raises $175 million at $3 billion valuation

• Onyxia launches AI-powered predictive insights to optimize security management

• Millions of Malicious ‘Imageless’ Containers Planted on Docker Hub Over 5 Years

• The internet is now at the mercy of open source vulnerabilities.

• Infinity Global Services’ Cyber Park Introduces “Nemesis” – A Cyber Security Adventure Awaits!

• SafeBase taps AI to automate software security reviews

• Synopsys Introduces Polaris Assist: AI-Powered Application Security Assistant

• Synopsys Polaris Assist automates repetitive, time-consuming tasks for security and development teams

• Millions of Malicious Containers Found on Docker Hub

• Keeper Security Forges Cybersecurity Partnership With Williams Racing

• European Commission starts formal probe of Meta over election misinformation

• Palo Alto firewalls: CVE-2024-3400 exploitation and PoCs for persistence after resets/upgrades

• FCC fines major wireless carriers over illegal location data sharing

• Disinformation: EU Opens Probe Against Facebook and Instagram Ahead of Election

• Why Using Microsoft Copilot Could Amplify Existing Data Quality and Privacy Issues

• LockBit, RAGroup Drive Ransomware Attacks in March

• Guarding Democracy: Assessing Cyber Threats to 2024 Worldwide Elections

• Cisco Talos at RSAC 2024

• Threat Actor Claims Selling of Dell Database with 49M User Records

• How We’re Navigating Parenthood, Careers, and Connection at Cisco

• Computing that’s purpose-built for a more energy-efficient, AI-driven future

• Researchers Unveil Novel Attack Methods Targeting Intel’s Conditional Branch Predictor

• Prompt Fuzzer: Open-Source Tool for Strengthening GenAI Apps

• Cybersixgill Third-Party Intelligence module identifies potential supply chain risks

• Ransom Payments Surge by 500% to an Average of $2m

• Change Healthcare hackers broke in using stolen credentials — and no MFA, says UHG CEO

• UK Enacts IoT Cybersecurity Law

• FBI warns online daters to avoid “free” online verification schemes that prove costly

• Google Blocks 2.28M Malicious Apps Entering The Play Store

• WhatsApp in India

• Muddling Meerkat Hackers Manipulate DNS Using China’s Great Firewall

• Considerations for Operational Technology Cybersecurity

• U.S. Government Releases New AI Security Guidelines for Critical Infrastructure

• Cyber Security Headlines: USPS phishing, UK IoT law, industrial USB attacks

• I Really Shouldn’t Have Agreed to Variable Rate Technical Debt

• New Android Malware Mimic As Social Media Apps Steals Sensitive Data

• LightSpy Malware Actively Targeting MacOS Devices

• ESET launches two MDR subscription tiers for SMBs and enterprises

• OpenAI Hit By Austrian Complaint Over ChatGPT ‘False Data’

• Kaiser Permanente Cyber Attack Exposes 13.4 Million Users Data

• Safari Vulnerability Exposes EU iOS Users to Malicious Marketplaces

• FCC Imposes $200 Million in Fines on Four US Carriers

• ThreatX provides always-active API security from development to runtime

• FCC Fines Carriers $200m For Selling User Location Data

• Darkgate Malware Leveraging Autohotkey Following Teams

• DMARC – The Next Step in Email Hygiene and Security

• Defending Against Supply Chain Spoofing in Critical Manufacturing

• Managed Detection and Response in 2023

• CyberQP unveils solutions to help MSPs proactively prevent security incidents

• Austria Conference Calls For Controls On ‘Killer Robots’

• Beating the Barbarians in the Cloud

• EU Designates Apple’s iPad OS As DMA ‘Gatekeeper’

• Google Rejected 2.28 Million Risky Android Apps From Play Store in 2023

• Google Blocks 2.3 Million Apps From Play Store Listing

• Why space exploration is important for Earth and its future: Q&A with David Eicher

• Security Flaws in IRS Systems Pose Risk to Financial Statements, GAO Says

• The Darkgate Menace: Leveraging Autohotkey & Attempt to Evade SmartScreen

• RSAC 2024 Innovation Sandbox | RAD Security: New Solutions for Cloud-Native Anomaly Detection and Response

• MITRE ATT&CK v15: A Deeper Dive into SaaS Identity Compromise

• KapeKa Backdoor: Russian Threat Actor Group’s Recent Attacks

• Taiwanese Chip Giant Exits China Mainland

• Increasing cybersecurity awareness and skills training across India

• NCSC: New UK law bans default passwords on smart devices

• Apple’s ‘incredibly private’ Safari is not so private in Europe

• Meet the New Exclusive AI Malware Analyst: Gemini 1.5 Pro

• New U.K. Law Bans Default Passwords on Smart Devices Starting April 2024

• An Empty S3 Bucket Can Make Your AWS Bills Explode

• The FCC imposes $200 million in fines on four US carriers for unlawfully sharing user location data

• Tesla wins data security concerns in China

• Tracecat: Open-source SOAR

• Triangulation fraud: The costly scam hitting online retailers

• Why the automotive sector is a target for email-based cyber attacks

• Security analysts believe more than half of tasks could be automated

• Passwords under seven characters can be easily cracked

• MovieBoxPro – 6,009,014 breached accounts

• eBook: Do you have what it takes to lead in cybersecurity?

• ISC Stormcast For Tuesday, April 30th, 2024 https://isc.sans.edu/podcastdetail/8960, (Tue, Apr 30th)

• Tech CEOs Altman, Nadella, Pichai and Others Join Government AI Safety Board Led by DHS’ Mayorkas

• External Penetration Testing: Cost, Tools, Steps, & Checklist

• AT&T, Verizon, Sprint, T-Mobile US fined $200M for selling off people’s location info

• Wireless Network Security: WEP, WPA, WPA2 & WPA3 Explained

• Google blocked 2.3M apps from Play Store last year for breaking the G law

• Fake AI-Generated Images Are Running Wild On Facebook

• IT Security News Daily Summary 2024-04-29

• FCC Fines Major U.S. Wireless Carriers for Selling Customer Location Data

• Vulnerability Recap 4/29/24 – Cisco, Microsoft, Palo Alto & More

• Google prevented 2.28 million policy-violating apps from being published on Google Play in 2023

• Congress Should Just Say No to NO FAKES

• USPS Phishing Scams Generate Almost as Much Traffic as the Real Site

• What Is Integrated Risk Management? Definition & Implementation

• Rubrik Sets Cyber Resiliency Course Following IPO

• Google Meet Now Offers Client-Side Encryption For All Calls

• During National Small Business Week, Take Steps to Secure Your Business

• London Drugs closes all of its pharmacies following ‘cybersecurity incident’

• Vulnerability Summary for the Week of April 22, 2024

• Ford’s hands-free driver system is under investigation after fatal crashes – what to know

• Stop Managing Identities, Segment them Instead

• How TikTok Grew From a Fun App for Teens Into a Potential National Security Threat

• CISA Rolls Out New Guidelines to Mitigate AI Risks to US Critical Infrastructure

• Thoma Bravo to Buy Cybersecurity Firm Darktrace for $5.3 Billion

• Orca Security Allies with ModePUSH for Cloud Incident Response

• Google Prevented 2.28 Million Malicious Apps from Reaching Play Store in 2023

• Tesla Shares Surge On China Advanced Self-Driving Push

• Google Says it Blocked 2.28 Million Apps from Google Play Store

• digital identity

• How Compliance Can Launch Your Risk Program with Vanta

• What is MFA bombing? Apple users were targeted using this phishing technique

• UK to Take Steps in Helping Protect Consumers Against Cyber Threats from Smart Devices

• South Korean iPhone Ban: MDM DMZ PDQ

• Why Shouldn’t You Upload Files So Readily On Your Browser?

• From IcedID to Dagon Locker Ransomware in 29 Days

• Cyber Attack forces London Drugs to close temporarily

• UK Law Aims To Boost Security For ‘Smart’ Devices

• Study Reveals Alarming Levels of USPS Phishing Traffic

• Kaiser Permanente Data Breach Impacts 13.4 Million Patients

• Should Cybersecurity Leadership Finally be Professionalized?

• Managing Generative AI Risk and Meeting M-24-10 Mandates on Monitoring & Evaluation

• USENIX Security ’23 – Instructions Unclear: Undefined Behaviour in Cellular Network Specifications

• Cactus Ransomware Exposes Thousands of Vulnerable Qlik Sense Servers

• Researchers Successfully Sinkhole PlugX Malware Server, Recording 2.5 Million Unique IPs

• SpaceX Data Breach: Hunters International Publishes Alleged Stolen Data

• Judge0 Sandbox Vulnerabilities Expose Systems to Takeover Risk

• $197 Bounty Awarded for Unauthenticated Arbitrary Post Deletion Vulnerability Patched in LeadConnector WordPress Plugin

• UK PSTI Act – New Law To Protect Smart Devices

• Ten Years Of Heartbleed: Lessons Learned

• Meta To Face EU Probe For Not Doing Enough To Stop Russian Disinformation

• Watchdog Reveals Google Privacy Sandbox Worries

• Okta Warns Of Credential Stuffing Attacks Using Tor, Residential Proxies

• OpenAI’s ChatGPT Targeted In Austrian Privacy Complaint

• 91% of ransomware victims paid at least one ransom in the past year, survey finds

• D-Link NAS Device Backdoor Abused, (Mon, Apr 29th)

• Grafana Tool Vulnerability Let Attackers Inject SQL Queries

• CISA and FEMA IPAWS in Partnership with FCC Host Second National Meeting of Alerting Officials

• DDoS Attacks Continue, Post-Election, Against Russian Independent Media Site Meduza

• Honeywell: USB Malware Attacks on Industrial Orgs Becoming More Sophisticated

• Beyond the Buzz: Rethinking Alcohol as a Cybersecurity Bonding Ritual

• Everything you need to know about network penetration testing [+checklist to follow]

• 5 Attack Trends Your Company Should Be Aware Of

• UK enacts IoT cybersecurity law

• China-Linked ‘Muddling Meerkat’ Hijacks DNS to Map Internet on Global Scale

• Financial Business and Consumer Solutions (FBCS) data breach impacted 2M individuals

• More Than 800 Vulnerabilities Resolved Through CISA Ransomware Notification Pilot

• Hackers Tool 29 Days from Initial Hack to Sabotage Ransomware Attack

• Celebrating 5 Years of Excellence with Check Point’s Hacking Point Program

• France willing to buy key Atos assets to keep them French

• Comply-to-Connect and Cisco ISE: Revolutionizing the Department of Defense

• British Intelligence Moves to Protect Research Universities From Espionage

• Voter Registration System Taken Offline in Coffee County Cyber-Incident

• Report: 73% of SME Security Professionals Missed or Ignored Critical Alerts

• Modern Phishing Attacks: Insights from the Egress Phishing Threat Trends Report

• James Nutland studies what makes threat actors tick, growing our understanding of the current APT landscape

• UK lays down fresh legislation banning crummy default device passwords

• Silobreaker empowers users with timely insight into key cybersecurity incident filings

• Navigating the Threat Landscape: Understanding Exposure Management, Pentesting, Red Teaming and RBVM

• OpenAI’s ChatGPT is Breaking GDPR, Says Noyb

• Whale Song Code

• DHS Announces AI Safety Board with OpenAI Founder, CEOs of Microsoft, Nvidia, IBM

• Collection Agency FBCS Says Data Breach Exposed Nearly 2 million People

• Okta Warns of Credential Stuffing Attacks Using Tor, Residential Proxies

• OfflRouter Malware Ukraine: Govt Network Breach Since 2015

• Compounded Crisis: Change Healthcare’s Breach Escalates with New Threats

• Multiple PHP 7.4 Vulnerabilities Addressed in Debian 11

• Cyber Security Today, April 29, 2024 – Credential stuffing attacks are hitting firms using Okta ID management solutions, and more

• Ensuring Robust Security in Multi-Cloud Environments: Best Practices and Strategies

• UK says NO to ransom passwords such as admin, 123456 and qwerty

• Kaiser health insurance leaked patient data to advertisers

• 10 Database Security Best Practices You Should Know

• Machines vs Minds: The Power of Human Ingenuity Against Cyber Threats

• Know-Your-Customer Executive Order Facing Stiff Opposition From Cloud Industry

• Researchers unveil novel attack methods targeting Intel’s conditional branch predictor

• Okta warns customers about credential stuffing onslaught

• Sandbox Escape Vulnerabilities in Judge0 Expose Systems to Complete Takeover

• Cyber Security Headlines: Kaiser Permanente breach, DSH Safety Board, Okta stuffing attack

• Email Provider Complains To EU Over Reduced Google Rankings

• Intel Shares Sink As AI Surge Hits Chip Revenue

• Snap Sees Surge In Users, Ad Revenues

• Google Asks US Court To Dismiss Federal Adtech Case

• Alphabet Value Surges Over $2tn On Dividend Plan

• Fake Chrome Updates Hide Android Brokewell Malware Targeting Your Bank

• Cyber-Partisans hacktivists claim to have breached Belarus KGB

• Watchdog reveals lingering Google Privacy Sandbox worries

• North Korean Hackers Exploit LinkedIn in Targeted Attacks

• Agent Tesla and Taskun Malware Targeting US Education and Govt Entities

• Most People Still Rely on Memory or Pen and Paper for Password Management

• Okta Warns of Unprecedented Scale in Credential Stuffing Attacks on Online Services

• DHS establishes AI Safety and Security Board to protect critical infrastructure

• New UK Smart Device Security Law Comes into Force

• Cyber Security Today, April 29, 2024 – Credential stuffing attacks are hitting firms using Okta ID management solutions, and more

• Chinese Botnet As-A-Service Bypasses Cloudflare & Other DDoS Protection Services

• PoC Exploit Released For Windows Kernel EoP Vulnerability

• Palo Alto Updates Remediation for Max-Critical Firewall Bug

• Japanese police create fake support scam payment cards to warn victims

• New UK Smart Device Security Law Comes into Force Today

• KageNoHitobito Ransomware Attacking Windows Users Around the Globe

• The Los Angeles County Department of Health Services disclosed a data breach

• Analysis of Native Process CLR Hosting Used by AgentTesla

• US Post Office Phishing Sites Get as Much Traffic as the Real One

• Okta Warns Customers of Credential Stuffing Barrage

• 1,200+ Vulnerabilities Detected In Microsoft Products In 2023

• A week in security (April 22 – April 28)

• US Regulator Probes Effectiveness Of Tesla Autopilot Recall

• Multiple Brocade SANnav SAN Management SW flaws allow device compromise

• Android Malware Brokewell With Complete Device Takeover Capabilities

• Okta Warns of Credential Stuffing Attacks Using Proxy Services

• Exploring the Key Sections of a SOC 2 Report (In Under 4 Minutes)

• Fileless .NET Based Code Injection Attack Delivers AgentTesla Malware

• RSAC 2024 Innovation Sandbox | Mitiga: A New Generation of Cloud and SaaS Incident Response Solutions

• Prompt Fuzzer: Open-source tool for strengthening GenAI apps

• How insider threats can cause serious security breaches

• AI is creating a new generation of cyberattacks

• Closing the cybersecurity skills gap with upskilling programs

• Anticipating and addressing cybersecurity challenges

• Discord dismantles Spy.pet site that snooped on millions of users

• The next step up for high-impact identity authorization

• ISC Stormcast For Monday, April 29th, 2024 https://isc.sans.edu/podcastdetail/8958, (Mon, Apr 29th)

• IT Security News Weekly Summary – Week 17

• IT Security News Daily Summary 2024-04-28

• ICICI Bank exposed credit card data of 17000 customers

• USENIX Security ’23 – SandDriller: A Fully-Automated Approach for Testing Language-Based JavaScript Sandboxes

• Hackers Claim to Have Infiltrated Belarus’ Main Security Service

• Deceptive npm Packages Employed to Deceive Software Developers into Malware Installation

• The Tech Landscape: Rubrik, TikTok, and Early-Stage Startups

• Okta warns of unprecedented scale in credential stuffing attacks on online services

• How to Erase The Personal Details Google Knows About You

• What Would a TikTok Ban Mean?

• Okta Warns of Unprecedented Surge in Proxy-Driven Credential Stuffing Attacks

• 9 Best Password Managers (2024): Features, Pricing, and Tips

• Security Affairs newsletter Round 469 by Pierluigi Paganini – INTERNATIONAL EDITION

• RSAC 2024 Innovation Sandbox | Antimatter: A Comprehensive Data Security Management Tool

• Good Security Is About Iteration, Not Perfection.

• TCS CEO Predicts AI Revolution to Decimate India’s Call Center Industry in Just One Year

• Safeguarding Your Digital Future: Navigating Cybersecurity Challenges

• Targeted operation against Ukraine exploited 7-year-old MS Office bug

• Week in review: Two Cisco ASA zero-days exploited, MITRE breach, GISEC Global 2024

• Cybercriminals Exploit Web Hosting Platforms to Spread Malware

• IT Security News Daily Summary 2024-04-27

• USENIX Security ’23 – Beyond Typosquatting: An In-depth Look at Package Confusion

• Godfather Banking Trojan Multiplies, Spreading to 1.2K Variants in 57 Nations

• Hackers may have accessed thousands of accounts on the California state welfare platform

• Here’s How NFTs Can Transform Asset Management

• Junk Ransomware: Getting the Job Done For Hackers

• Major phishing-as-a-service platform disrupted – Week in security with Tony Anscombe

• Breaking Down Cybersecurity: The Real Meaning Behind the Jargon

• GitGuardian Researchers Find Thousands of Leaked Secrets in PyPI (Python Package Index) Packages

• The GuptiMiner Attack: Lessons Learned from a Five-Year Security Breach

• Cryptocurrency Chaos: El Salvador’s Bitcoin Wallet Code Leaked, Privacy at Risk

• Ukraine Targeted in Cyberattack Exploiting 7-Year-Old Microsoft Office Flaw

• School Employee Allegedly Framed a Principal With Racist Deepfake Rant

• Russia Vetoed a UN Resolution to Ban Space Nukes

• What is General Data Protection Regulation Act (GDPR)?

• Thousands of Qlik Sense Servers Open to Cactus Ransomware

• Brokewell Android malware supports an extensive set of Device Takeover capabilities

• FBI: Fraudsters Using Fake Online Dating Verification Apps to Scam Lovers

• DHS Establishes AI Safety Board with Tech Titans and Experts

• Zero-Day from 2017 Used Along With Cobalt Strike Loader in Unholy Alliance

• Bogus npm Packages Used to Trick Software Developers into Installing Malware

• Cloud Monitor Automation Improves K-12 Cybersecurity Training & Awareness

• PREVIEW: CISO Series Game Show During RSA Week

• Tracking Energy Consumption at the Cisco Store

• Computer scientists unveil novel attacks on cybersecurity

• IT Security News Daily Summary 2024-04-26

• Security review for Microsoft Edge version 124

• USENIX Security ’23 – UVSCAN: Detecting Third-Party Component Usage Violations in IoT Firmware

• Facebook Blasted By Regulators For Holding Onto Sensitive User Data For Too Long

• Kaiser Permanente handed over 13.4M people’s data to Microsoft, Google, others

• 7-Year-Old 0-Day in Microsoft Office Exploited to Drop Cobalt Strike

• Risk & Repeat: Change Healthcare’s bad ransomware bet

• Cyber Security Today, Week in Review for week ending Friday, April 26, 2024

• Mitigating the biggest threats in supply chain security

• Cybersecurity in the Healthcare Sector: Best Practices for Preventing Today’s Attacks

• The best security keys of 2024: Expert tested

• BeyondTrust Report: Microsoft Security Vulnerabilities Decreased by 5% in 2023

• Kaiser Permanente shared 13.4M people’s data with Microsoft Bing, Google, others

• USENIX Security ’23 – Union Under Duress: Understanding Hazards of Duplicate Resource Mismediation in Android Software Supply Chain

• Bridging the Gap: Uniting Development and AppSec

• Understanding Cybersecurity Vulnerabilities

• Network Security Architecture: Best Practices & Tools

• Experience Eco-Friendly Data Center Efficiency with Cisco’s Unified Computing System (UCS)

• What makes Starmus unique? A Q&A with award-winning filmmaker Todd Miller

• April 2024 Web Server Survey

• How to Get into Cybersecurity: A Beginner’s Guide

• Hackers Utilize Antivirus Update Mechanism to Deploy GuptiMiner Malware

• Google Enterprise Security Program offers enhanced Malware and Phishing protection

• UK AI Security Firm Darktrace Acquired By Private Equity Group

• Second time lucky for Thoma Bravo, which scoops up Darktrace for $5.3B

• Is Online Banking Truly Safe? Understanding the Safety Loopholes in Bank Websites

• UnitedHealth Paid Ransom After Massive Change Healthcare Cyber Assault

• DPRK Hackers Compromise South Korean Defense Contractors

• Banking Malware “Brokewell” Hacks Android Devices, Steals User Data

• General Motors Under Fire for Secretly Spying on Drivers

• 750 Million Vulnerable To Snooping From Chinese Keyboard Apps

• Millions Of IPs Remain Infected By USB Worm Years After Its Creators Left It For Dead

• Over 1,400 CrushFTP Instances Vulnerable To Exploited 0-Day

• Powerful Brokewell Android Trojan Allows Device Takeover

• Severe Flaws Disclosed in Brocade SANnav SAN Management Software

• Falcon Fund in Focus: Nagomi Helps Customers Maximize Their Cybersecurity Investments

• Evolving Broadband Networks with Cisco Subscriber Edge

• Despite complaints, Apple hasn’t yet removed an obviously fake app pretending to be RockAuto

• Experts warn of an ongoing malware campaign targeting WP-Automatic plugin

• Self-Spreading PlugX USB Drive Malware Plagues Over 90k IP Addresses

• Over 1,400 CrushFTP Instances Vulnerable to Exploited Zero-Day

• Powerful ‘Brokewell’ Android Trojan Allows Attackers to Takeover Devices

• Microsoft Beats Expectations Thanks To AI Investments

• Feds Bust Privacy-Centric Samourai Wallet Over BTC Money Laundering

• CISA’s Efforts Towards Software Understanding

• Cybersecurity Insights with Contrast CISO David Lindner | 4/26/24

• Agile by Design: Cybersecurity at the Heart of Transformation

• Over 850 Vulnerable Devices Secured Through CISA Ransomware Program

• Ensuring the Security and Efficiency of Web Applications and Systems

• NETGEAR buffer Overflow Vulnerability Let Attackers Bypass Authentication

• 7 Essentials Every Data Security Posture Management (DSPM) Must Have

• APIContext’s Global Cloud API Performance Report Show A Decline In Cloud API Availability

• Enhancing Cybersecurity Defenses: The role of Voice Cloning in Penetration Testing

• Integrated Residential Security Solutions to Employ in 2024

• Thoma Bravo to take UK cybersecurity company Darktrace private in $5B deal

• Cryptocurrencies and cybercrime: A critical intermingling

• New Brokewell Malware Takes Over Android Devices, Steals Data

• Darktrace to be Taken Private in $5.3 Billion Sale to Thoma Bravo

• In Other News: China Hacked Volkswagen, DDoS Service Shutdown, Rubrik IPO

• UK’s Investigatory Powers Bill to become law despite tech world opposition

• 5000+ CrushFTP Servers Hacked Using Zero-Day Exploit

• Kaiser Permanente data breach may have impacted 13.4 million patients

• Long Article on GM Spying on Its Cars’ Drivers

• Cyber Security Today, April 26, 2024 – Patch warnings for Cisco ASA gateways and a WordPress plugin

• ByteDance Would Rather Shutter TikTok US, Than Sell – Report

• AeroNet Wireless Unveils 10Gbps Internet Plan in Puerto Rico, Revolutionising Telecom Industry

• 13,142,840 DDoS Attacks Targeted Organization Around The Globe

• The ultimate cyber spring-cleaning checklist

• Cato Networks to Showcase New Security Evasion Tactics at RSA Conference 2024

• Godfather Banking Trojan Spawns 1.2K Samples Across 57 Countries

• Palo Alto Networks Outlines Remediation for Critical PAN-OS Flaw Under Attack

• New ‘Brokewell’ Android Malware Spread Through Fake Browser Updates

• 10 Critical Endpoint Security Tips You Should Know

• Hackers outsmart smart locks

• Researchers Found 18 Vulnerabilities in Brocade SANnav

• Critical WordPress Automatic Plugin Vulnerability Exploited to Inject Backdoors

• Cyber Security Headlines: Google postpones cookies, Brocade vulnerability warning, ICICI card gaffe

• Hackers Exploit Old Microsoft Office 0-day to Deliver Cobalt Strike

• Autodesk Hosting PDF Files Used in Microsoft Phishing Attacks

• Bitwarden launches passkeys support in mobile apps for Android and iOS

• 8 Binge-Worthy Cybersecurity Podcasts in 2024

• Over 1,400 CrushFTP internet-facing servers vulnerable to CVE-2024-4040 bug

• ThreatLocker Raises $115M in Series D Funding

• Cyber Security Today, April 26, 2024 – Patch warnings for Cisco ASA gateways and a WordPress plugin

• Researchers Sinkhole PlugX Malware Server With 2.5 Million Unique IPs

• Ring to Pay Out $5.6m in Refunds After Customer Privacy Breach

• Implementing ISO 27001:2022 Annex A.18 – Compliance

• Four trends to top the CISO’s packed agenda

• Microsoft Publicly Releases MS-DOS 4.0 Source Code

• Sweden’s liquor supply severely impacted by ransomware attack on logistics company

• Google Facebook ads are deceptive and information stealing

• Navigating the Rising Tide of Cyber Attacks: Lessons from recent Cyber Incidents

• New SSLoad Malware Combined With Tools Hijacking Entire Network Domain

• Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites

• Flaws in Chinese keyboard apps leave 750 million users open to snooping, researchers claim

• What is Network Pen Testing?

• Unveiling Ubuntu Noble Numbat- A Deep Dive into Desktop 24.04 LTS

• LSA Whisperer: Open-source tools for interacting with authentication packages

• Most people still rely on memory or pen and paper for password management

• What AI can tell organizations about their M&A risk

• Piping Rock – 2,103,100 breached accounts

• Breaking down the numbers: Cybersecurity funding activity recap

• New infosec products of the week: April 26, 2024

• ISC Stormcast For Friday, April 26th, 2024 https://isc.sans.edu/podcastdetail/8956, (Fri, Apr 26th)

• How to Migrate from FedRAMP Rev 4 to FedRAMP Rev 5

• OpenAI’s GPT-4 Can Autonomously Exploit 87% of One-Day Vulnerabilities, Study Finds

• How to change your IP address, why you’d want to – and when you shouldn’t

• NodeZero: Testing for Exploitability of Palo Alto Networks CVE-2024-3400

• Cops cuff man for allegedly framing colleague with AI-generated hate speech clip

• North American Developers Optimistic About Generative AI and Code Security

• IT Security News Daily Summary 2024-04-25

• Ring dinged for $5.6M after, among other claims, rogue insider spied on ‘pretty girls’

• AeroNet Wireless Launches 10Gbps Internet Plan: A Landmark Moment in Puerto Rico’s Telecommunications Industry

• Rubrik’s shares end trading up almost 16% on the company’s public debut

• Health insurance giant Kaiser will notify millions of a data breach after sharing patients’ data with advertisers

• CISA adds Cisco ASA and FTD and CrushFTP VFS flaws to its Known Exploited Vulnerabilities catalog

• What makes Starmus unique? – A Q&A with award-winning filmmaker Todd Miller

• Health insurance giant Kaiser notifies millions of a data breach

• Oracle Plans To Relocate HQ To Nashville

• USENIX Security ’23 – LibScan: Towards More Precise Third-Party Library Identification for Android Applications

• These SMBs are hot threat targets but they’re shrugging off security help

• AI Adoption Prompts Security Advisory from NSA

• N.A. Developers Optimistic About Generative AI and Code Security

• Net neutrality has been restored

• The Role of Threat Intelligence in Financial Data Protection

• The private sector probably isn’t coming to save the NVD

• disaster recovery (DR)

• North Korea’s Lazarus Group Deploys New Kaolin RAT via Fake Job Lures

• Cyber Hygiene Helps Organizations Mitigate Ransomware-Related Vulnerabilities

• Rubrik’s shares climb 20% in its public debut

• Two cuffed in Samourai Wallet crypto dirty money sting

• Meta Declines On Heavy AI Spending Plans, Despite Strong Q1

• Analyze Malicious Powershell Scripts by Running Malware in ANY.RUN Sandbox

• Women in Cybersecurity: ISC2 Survey Shows Pay Gap and Benefits of Inclusive Teams

• Is Your VPN Safe? Or Can It be Hacked?

• Wordfence Intelligence Weekly WordPress Vulnerability Report (April 15, 2024 to April 21, 2024)

• Facebook end to end encryption a Boon or a Bane

• Google Delays Removal Of Third-Party Cookies, Again

• “Junk gun” ransomware: the cheap new threat to small businesses

• A Five-Phase Strategy for Embracing Industry 4.0 with Cisco

• The CISO’s Top Priority: Elevating Data-Centric Security

• Predictive Security Startup BforeAI Raises $15 Million

• It’s All About Data: How to Drive Secure Use of AI

• ToddyCat APT Is Siphoning Data on ‘Industrial Scale’

• Discord Users’ Privacy at Risk as Billions of Messages Sold Online

• The P25 Steering Committee, the Compliance Assessment Process and Procedures Task Group (CAPPTG), and the Joint SAFECOM-NCSWIC P25 User Needs Working Group (UNWG) release Project 25 Link Layer Encryption Informational Session

• The best VPN routers of 2024

• CISA Releases Eight Industrial Control Systems Advisories

• Hitachi Energy MACH SCM

• Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC

• Multiple Vulnerabilities in Hitachi Energy RTU500 Series

• Siemens RUGGEDCOM APE1808 Devices Configured with Palo Alto Networks Virtual NGFW

• Salt Security Enhances API Security Platform with OAuth Protection Package

• Ransomware Roundup – KageNoHitobito and DoNex

• How HTTP/2 Persistent Connections Help Improve Performance and User Experience

• Phishing Campaigns Targeting USPS See as Much Web Traffic as the USPS Itself

• Tesla Posts Biggest Revenue Drop Since 2012

• Navigating the Evolving Threat Landscape: Addressing 2024 CISO and Security Team Goals with MixMode

• Check Point Awarded AI Security Innovator of the Year at GISEC

• 3 ways AI is transforming cloud security, according to experts

• CISA adds Microsoft Windows Print Spooler flaw to its Known Exploited Vulnerabilities catalog

• Russia, Iran Pose Most Aggressive Threat To 2024 Election

• Palo Alto Networks Shares Remediation Advice

• FTC Sending $5.6 Million To Ring Customers Over Security Failures

• Nation-State Hackers Exploit Cisco Firewall Zero Days To Backdoor Government Networks

• Ring agrees to pay $5.6 million after cameras were used to spy on customers

• Autodesk Drive Abused in Phishing Attacks

• Palo Alto Networks Shares Remediation Advice for Hacked Firewalls

• US Takes Down Illegal Cryptocurrency Mixing Service Samourai Wallet

• NDR in the Modern Cybersecurity Landscape

• NIST’s role in the global tech race against AI

• How to turn on Private DNS Mode on Android (and why you should)

• Russia, Iran pose most aggressive threat to 2024 elections, say infoseccers

• Cyberattack Fallout: UnitedHealth Reveals Personal Data Breach Impact

• Unveiling Vulnerabilities in Microsoft PlayReady DRM: Impact on Streaming Platforms

• Stellar Cyber and Acronis team up to provide optimized threat detection solutions for MSPs

• Google Patches Critical Chrome Vulnerability and Additional Flaws

• Beware! Zero-click RCE Exploit for iMessage Circulating on Hacker Forums

• DOJ arrested the founders of crypto mixer Samourai for facilitating $2 Billion in illegal transactions

• Interview: Cydea’s Risk Management Platform, Understanding Not Eliminating Risk

• Female Tech Duo take Flight to Dubai to Launch the future of Cyber Leadership

• State-Sponsored Espionage Campaign Exploits Cisco Vulnerabilities

• The Importance of Data Hygiene with OpenText

• Mastering VirusTotal: Certification Course

• New DragonForce Ransomware Emerged From The Leaked LOCKBIT Builder

• Ex-NSA hacker and ex-Apple researcher launch startup to protect Apple devices

• The Student-Centric Experience: Technologies

• Data Breach Search Engines

• IBM to buy HashiCorp in $6.4 billion cash deal, expanding cloud portfolio

• Edgio Client-Side Protection enables organizations to secure critical customer data

• Endpoint Security Firm ThreatLocker Raises $115 Million in Series D Funding

• Vulnerabilities Expose Brocade SAN Appliances, Switches to Hacking

• FTC Sending $5.6 Million in Refunds to Ring Customers Over Security Failures

• WhyLabs AI Control Center offers teams real-time control over their AI applications

• Dropzone AI raises $16.85 million to combat advanced AI attacks

• Talos IR trends: BEC attacks surge, while weaknesses in MFA persist

• Popular File Transfer Software CrushFTP Hit by Zero-Day Exploit

• India’s ICICI Bank exposed thousands of credit cards to ‘wrong’ users

• Coalition Finds More Than Half of Cyber Insurance Claims Originate in the Email Inbox

• AI-driven cyber attacks to be the norm within a year, say security leaders

• How a YouTube Content Filter Can Give Your District More Control

• ESET integrates with Arctic Wolf to provide greater security visibility

• Network Threats: A Step-by-Step Attack Demonstration

• Apple iPhone Q1 Sales In China Fall 19 Percent, Says Counterpoint

• JudgeO Online Code Editor Flaw Let Attackers Execute Code as Root User

• The Rise of Large-Language-Model Optimization

• Sublime Security secures $20 million to strengthen cloud email security and visibility

• DOJ Arrests Founders of Crypto Mixer Samourai for $2 Billion in Illegal Transactions

• DragonForce Ransomware Group Uses LockBit’s Leaked Builder

• Attackers Leverage Black Hat SEO Techniques to Distribute Info-Stealer Malware

• IBM Acquiring HashiCorp for $6.4 Billion

• 56% of cyber insurance claims originate in the email inbox

• 11% of Cybersecurity Teams Have Zero Women

• Cyber Security Headlines: Chinese keyboard flaws, hacked news story, TikTok on the clock

• Should CISOs Be More Empathetic Towards Salespeople?

• Dropbox announces a number of security and data protection features

• Anatomy IT’s new Security Suite targets healthcare cybersecurity threats, improves incident response

• President Biden Signs TikTok Ban Or Divest Bill Into Law

• Vulnerabilities in Microsoft’s PlayReady DRM Could Enable Illegal Movie Downloads From Streaming Services

• Ring Customers Get $5.6 Million in Privacy Breach Settlement

• What to do in the age of the critical breach

• Appdome upgrades MOBILEBot Defense for tailored WAF integration

• AuditBoard AI automates important tasks for security teams

• Online Banking Security Still Not Up to Par, Says Which?

• Cyber Attack Defenders Up For Battle: Huge Uptick In Timely Detections

• Get a Lifetime Subscription of FastestVPN for just $40

• Cyber Attack Defenders Up For Battle: Huge Uptick In Timely Attack Detections

• Google fixed critical Chrome vulnerability CVE-2024-4058

• A System Administrator’s Challenges in Patch Management

• MITRE Breached – Hackers Chained 2 Ivanti Zero-days to Compromise VPN

• Patch Now! CrushFTP Zero-day Lets Attackers Download System Files

• Report: Security Leaders Braced for Daily AI-Driven Attacks by Year-End

• ArcaneDoor Hackers Exploit Cisco Zero-Days to Breach Government Networks

• Nagomi Security raises $30 million to help security teams improve their level of protection

• Fireblocks expands DeFi suite with threat detection features

• BEC and Fund Transfer Fraud Top Insurance Claims

• Alert! Cisco Releases Critical Security Updates to Fix 2 ASA Firewall 0-Days

• Feds Accuse Founders of Cryptocurrency Mixer of ‘Large-Scale Money Laundering’

• BforeAI raises $15 million to prevent attacks before they occur

• Pakistani APT Hackers Attacking Indian Govt Entities With Weaponized Shortcut Files

• Maping NIS2 requirements to the ISO 27001:2022 framework

• “You Can’t Protect What You Can’t See” Still Rings True. Why Observability Now.

• ITDR vs ISPM: Which Identity-first Product Should You Explore?

• New Microsoft Incident Response guide helps simplify cyberthreat investigations

• 5 ways a CNAPP can strengthen your multicloud security environment

• High Performance Podcast Duo to Unveil Secrets of Success at Infosecurity Europe 2024

• Unplugging PlugX: Sinkholing the PlugX USB worm botnet

• Indian bank’s IT is so shabby it’s been banned from opening new accounts

• State-Sponsored Hackers Exploit Two Cisco Zero-Day Vulnerabilities for Espionage

• Google Postpones Third-Party Cookie Deprecation Amid U.K. Regulatory Scrutiny

• Authorities Warned that Hackers Are Exploiting Flaws in CISCO ASA VPNs

• Maximum Severity Flowmon Bug has a Public Exploit, Patch Now

• Hackers Exploit Cisco Firewall Zero-Days to Hack Government Networks

• CISA Warns of Cisco and CrushFTP Vulnerabilities Being Actively Exploited

• Ransomware Attacks Shake Automotive and Beverage Industries

• Google Meet opens client-side encrypted calls to non Google users

• Applying DevSecOps principles to machine learning workloads

• Chinese, Russian Espionage Campaigns Increasingly Targeting Edge Devices

• Sifting through the spines: identifying (potential) Cactus ransomware victims

• 25 cybersecurity AI stats you should know

• Overcoming GenAI challenges in healthcare cybersecurity

• What is Penetration Testing: A comprehensive business guide

• 73% of SME security pros missed or ignored critical alerts

• Cisco Systems Joins Microsoft, IBM in Vatican Pledge to Ensure Ethical Use and Development of AI

• ISC Stormcast For Thursday, April 25th, 2024 https://isc.sans.edu/podcastdetail/8954, (Thu, Apr 25th)

• Facebook Has Repeatedly “Interfered” With US Elections Since 2008

• Australia’s spies and cops want ‘accountable encryption’ – aka access to backdoors

• Australia’s spies and cops want ‘accountable encryption’ – aka backdoors

• Does it matter if iptables isn’t running on my honeypot?, (Thu, Apr 25th)

• Transforming Tech: Why Leadership Must Start with Our Girls in STEM

• Governments issue alerts after ‘sophisticated’ state-backed actor found exploiting flaws in Cisco security boxes

• Critical CrushFTP zero-day vulnerability under attack

• Cradlepoint Adds SASE Platform for 5G Wireless Networks

• The vision behind Starmus – A Q&A with the festival’s co-founder Garik Israelian

• How technology drives progress – A Q&A with Nobel laureate Michel Mayor

• IT Security News Daily Summary 2024-04-24

• IBM Cyber Security Report 2024 – New

• Nation-state actors exploited two zero-days in ASA and FTD firewalls to breach government networks

• IBM Cyber Security Report: Unveiling the Evolving Threat Landscape

• Driving fast or braking hard? Your connected car may be telling your insurance company

• Retail Tech Deep-Dive: Meraki Switching

• Shouldn’t Teams, Zoom, Slack all interoperate securely for the Feds? Wyden is asking

• USENIX Security ’23 – Token Spammers, Rug Pulls, and Sniper Bots: An Analysis of the Ecosystem of Tokens in Ethereum and in the Binance Smart Chain (BNB)

• 7 Top Threat Intelligence Platforms & Software in 2024

• CoralRaider Group Delivers Three Infostealers via CDN Cache

• Security bugs in popular phone-tracking app iSharing exposed users’ precise locations

• Helping the health of our planet, one bottle at a time

• Cisco Raises Alarm for ‘ArcaneDoor’ Zero-Days Hitting ASA Firewall Platforms

• HelloKitty Ransomware Renames to ‘HelloGookie,’ Unveils CD Projekt and Cisco Data

• Hackers backdoored Cisco ASA devices via two zero-days (CVE-2024-20353, CVE-2024-20359)

• UnitedHealth Group Pays Ransom After Cyberattack: What You Need to Know

• CISA Adds Three Known Exploited Vulnerabilities to Catalog

• Cisco Releases Security Updates Addressing ArcaneDoor, Vulnerabilities in Cisco Firewall Platforms

• UK CMA Seeks Feedback On Microsoft, Amazon AI Partnerships

• Coalition: Insurance claims for Cisco ASA users spiked in 2023

• Security Bugs in a Popular Phone-Tracking App Exposed Users’ Precise Locations

• Microsoft cannot keep its own security in order, so what hope for its add-ons customers?

• Google Fires More Staff Over Israel Protest

• Prompt Hacking, Private GPTs, Zero-Day Exploits and Deepfakes: Report Reveals the Impact of AI on Cyber Security Landscape

• ‘ArcaneDoor’ Cyberspies Hacked Cisco Firewalls to Access Government Networks

• Google Ad for Facebook Redirects to Scam

• KnowBe4 Plans to Acquire Egress for Email Security Tech

• USENIX Security ’23 – Snapping Snap Sync: Practical Attacks on Go Ethereum Synchronising Nodes

• DirectDefense Report Sees Shifts in Cyberattack Patterns

• Here’s How to Remove Unnecessary Files from Your Android Phone’s Web Browser

• Where Hackers Find Your Weak Spots: A Closer Look

• ArcaneDoor – New espionage-focused campaign found targeting perimeter network devices

• Ransomware testing being done on developing countries

• Google yet again delays killing third-party cookies in Chrome. Here’s what you need to know

• GitHub vulnerability leaks sensitive security reports

• Iran Dupes US Military Contractors, Gov’t Agencies in Cyber Campaign

• Australian PM Hits Out At Elon Musk Over Knife Attack Video

• Celebrating a New Era in Partnering: NTT DATA and Cisco

• Expert Insight: ‘Minding the Gap’: How can we work to make cyber accessible for women?

• North Korean Hackers Hijack Antivirus Updates for Malware Delivery

• Navigating Vendor Speak: A Security Practitioner’s Guide to Seeing Through the Jargon

• Malware Author Lures Child Abusers Into Honeytrap to Extort Them

• Stock Market Scam in Bengaluru: Businessman Loses Rs 5.2 Crore

• Dark Web Nightmare: Scots NHS Patient Data Breach Exposes Medical Files

• US SEC Seeks $5.3 Billion Fine From Terra’s Do Kwon

• Phishing Attacks Rise By 58% As The Attackers Leverage AI Tools

• Management company settles for $18.4M after nuclear weapons plant staff fudged their timesheets

• Traditional MFA isn’t enough, phishing-resistant MFA is key

• Google cools on cookie phase-out while regulators chew on plans

• The Next Chapter of Behavioral Threat Assessment for Ontic and SIGMA

• 1Kosmos CSP enables government agencies to digitally verify resident identity

• CoralRaider Hacker Evade Antivirus Detections Using Malicious LNK File

• Multiple MySQL2 Flaw Let Attackers Arbitrary Code Remotely

• Hackers hijacked the eScan Antivirus update mechanism in malware campaign

• Tines Bags $50 Million Funding for Security Workflow Automation

• Cyberint platform enhancements boost protection against external threats

• US Congress Passes Bill to Ban TikTok

• Researchers develop malicious AI ‘worm’ targeting generative AI systems

• US charges Iranians with cyber snooping on government, companies

• 5 Best VPN Services (2024): For Routers, PC, iPhone, Android, and More

• Security bugs in a popular phone-tracking app exposed users’ precise locations

• Report: Attacker Dwell Time Down, Ransomware up in 2023

• Major Security Flaws Expose Keystrokes of Over One Billion Chinese Keyboard App Users

• Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt Strike

• U.S. Treasury Sanctions Iranian Firms and Individuals Tied to Cyber Attacks

• US Sanctions Iranian “Fronts” for Cyber-Attacks on American Entities

• Multiple Vulnerabilities Found In Forminator WordPress Plugin

• Spyroid RAT Attacking Android Users to Steal Confidential Data

• Check Point Named Strategic Leader in AV-Comparatives EPR Report

• Hackers Publish Fake Story About Ukrainians Attempting To Assassinate Slovak President

• Threat Actor Uses Multiple Infostealers in Global Campaign

• CISA Warns of Windows Print Spooler Flaw After Microsoft Sees Russian Exploitation

• Nagomi Security Emerges From Stealth With $30 Million in Funding

• Amplifier Security Emerges From Stealth With AI Copilot, Human-in-the-Loop Automation

• Google Patches Critical Chrome Vulnerability

• Nigeria, Romania, Russia, U.S. Among Top Cybercrime Nations

• Zero Networks unveils identity segmentation solution to prevent credential theft

• Capture the CISO S2E2: HYAS, Nudge Security, and SlashNext

• Dexalot Announces Launch of Its Central Limit Order Book DEX on Arbitrum

• KnowBe4 acquires UK’s Egress to create advanced AI-driven platform to manage human risk

• Report: Fifth of UK Companies Admit Staff Leaked Data via GenAI

• Cybersecurity Trends and Predictions for 2024

• Tines taps $50M to expand its workflow automation beyond security teams

• US Gov Slaps Visa Restrictions on Spyware Honchos

• TikTok comes one step closer to a US ban

• Russian APT28 Exploiting Windows Vulnerability with GooseEgg Tool

• Cyber Security Today, April 24, 2024 – Good news/bad news in Mandiant report, UnitedHealth admits paying a ransomware gang, and more

• PoC for critical Progress Flowmon vulnerability released (CVE-2024-2389)

• Leeds Talent Pool Attracts BlueVoyant’s First UK Security Operations Center

• Researchers Uncover that UK.GOV Websites Sending Data to Chinese Ad Vendor Analysts

• Dan Solove on Privacy Regulation

• Veeam Acquires Coveware to Boost its Ransomware Protection Capabilities

• Prophet Security Emerges From Stealth Mode With $11 Million in Funding

• New Password Cracking Analysis Targets Bcrypt

• SD-WAN: Don’t Build a Dead End, Prepare for Future-Proof Secure Networking

• Comcast Business MDR limits the impact of cyber threats

• Global attacker median dwell time continues to fall

• Microsoft Launches Smallest AI Model, Phi-3-mini

• Popular Keyboard Apps Leak User Data: Billion Potentially Exposed

• FTC Commercial Surveillance Rules Could Arrive Within Months, Sources Say

• North Korean Hackers Targeted Dozens of South Korean Defense Companies

• New Relic AI monitoring helps enterprises use AI with confidence

• Security Leaders Braced for Daily AI-Driven Attacks by Year-End

• ShotSpotter Keeps Listening for Gunfire After Contracts Expire

• US Treasury Sanctions Iranians Linked to Government Cyberattacks

• GISEC Global 2024 video walkthrough

• Secureworks enables users to view known vulnerabilities in the context of threat data

• Cyber Security Headlines: Iranian hackers charged, Siemens fixing Palo bug, Russia hacks water plant

• US Senate Passes TikTok Ban Or Divestment Bill

• Autodesk hosting PDF files used in Microsoft phishing attacks

• Assessing the Y, and How, of the XZ Utils incident

• Siemens Working on Fix for Device Affected by Palo Alto Firewall Bug

• The 5 Best Practices for PCI DSS Compliance

• Binarly releases Transparency Platform v2.0 to improve software supply chain security

• CISO Perspectives on Complying with Cybersecurity Regulations

• Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App Users

• Cyber Security Headlines: RedLine GitHub connection, MITRE Ivanti breach, E-ZPass spoof sites

• Cyber Security Headlines: TikTok ban update, Sandworm hits Ukraine, North Korean streaming animators

• We’ll Invest in Resilience as Soon as the Ransom Payment Clears

• Cyber Security Today, April 22, 2024 – Vulnerability found in CrushFTP file transfer software, security updates for Cisco’s controller management application, and more

• Cyber Security Today, April 24, 2024 – Good news/bad news in Mandiant report, UnitedHealth admits paying a ransomware gang, and more

• Google’s Core Update is ‘Biggest’ Algorithm Update in History

• Swedish Signals Intelligence Agency to Take Over National Cybersecurity Center

• People Doubt Their Own Ability to Spot AI-Generated Deepfakes

• 5 Ways to Step Up Your AD Hygiene with Silverfort

• Prophet Security emerges from stealth and raises $11 million

• Photos: GISEC Global 2024

• Fifth of CISOs Admit Staff Leaked Data Via GenAI

• Ransomware Victims Who Opt To Pay Ransom Hits Record Low

• January 2024 Cyber Attacks Statistics

• Pentagon Launches DIB Vulnerability Disclosure Program

• Understanding and Responding to Distributed Denial-of-Service Attacks

• IBM Nearing Talks to Acquire Cloud-software Provider HashiCorp

• Back to Security Basics

• North Korean Hackers Target Dozens of Defense Companies

• Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan

• “All for One and One for All”: The EU Cyber Solidarity Act Strengthens Digital Defenses

• UK IT Leaders Are Prioritizing Cybersecurity: But Is This a Good Thing?

• Implementing ISO 27001:2022 Annex A.17 – Information Security Aspects of Business Continuity Management

• eScan Antivirus Update Mechanism Exploited to Spread Backdoors and Miners

• Overcoming security alert fatigue

• Rewards Up to $10 Million for Information on Iranian Hackers

• If Britain is so bothered by China, why do these .gov.uk sites use Chinese ad brokers?

• The street lights in Leicester City cannot be turned off due to a cyber attack

• US offers a $10 million reward for information on four Iranian nationals

• Study: GPT-4 Agent can Exploit Unpatched Vulnerabilities

• T2 – 94,584 breached accounts

• Change healthcare faces data leak threat despite paying $22 million as ransom

• Strategies for Building Resilient Cloud Security in Small and Medium Enterprises (SMEs)

• CoralRaider Malware Campaign Exploits CDN Cache to Spread Info-Stealers

• $10 Million Bounty on Iranian Hackers for Cyberattacks on US Gov, Defense Contractors

• GenAI can enhance security awareness training

• Four ways to make yourself a harder target for cybercriminals

• Cybersecurity jobs available right now: April 24, 2024

• AI set to play key role in future phishing attacks

• The relationship between cybersecurity and work tech innovation

• eBook: Cloud security skills

• ISC Stormcast For Wednesday, April 24th, 2024 https://isc.sans.edu/podcastdetail/8952, (Wed, Apr 24th)

• API Rug Pull – The NIST NVD Database and API (Part 4 of 3), (Wed, Apr 24th)

• This tiny chip can safeguard user data while enabling efficient computing on a smartphone

• Miggo Unfurls Real-Time Application Detection and Response Platform

• IT Security News Daily Summary 2024-04-23

• Google ad for Facebook redirects to scam

• HHS Strengthens Privacy of Reproductive Health Care Data

• Dutch Government Might Leave Facebook Over Privacy Concerns

• $10 Million Bounty on Iranian Hackers for Cyber Attacks on US Gov, Defense Contractors

• North Korea-linked APT groups target South Korean defense contractors

• Screen Printing 101: EFF’s Spring Speakeasy at Babylon Burning

• Speaking Freely: Obioma Okonkwo

• Analyzing Forest Blizzard’s custom post-compromise tool for exploiting CVE-2022-38028 to obtain credentials

• UnitedHealth: Ransomware Attackers Stole Huge Amount of Data

• Cyber Attack Hits UK’s Carpetright, Affecting Customer Orders

• Wells Fargo Data Breach: Safeguarding Customer Information in a Digital Age

• CCNA in the Age of AI

• GuptiMiner: Hijacking Antivirus Updates for Distributing Backdoors and Casual Mining

• CISA to Issue List of Software Products Critical to Agency Security by End of September

• Spain Reopens a Probe Into a Pegasus Spyware Case After a French Request to Work Together

• U.S. cracks down on commercial spyware with visa restrictions

• Oak Ridge, McCrary Institute Establish Cybersecurity Center Focused on Electrical Grid

• MITRE Breach: State Hackers Exploit Ivanti Zero-Days

• The best free VPNs of 2024: Expert tested

• Nespresso Domain Hijacked in Phishing Attack Targeting Microsoft Logins

• US Imposes Visa Restrictions on Alleged Spyware Figures

• Veeam acquires Coveware to boost its ransomware protection

• 0G and OnePiece Labs Collaborate to Create Crypto x AI Incubator

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• The best VPN for streaming in 2024: Expert tested and reviewed

• The best free VPNs

• TuxCare Names Glen Kuhne as Vice President of Enterprise Sales

• CISA Releases Two Industrial Control Systems Advisories

• CISA Adds One Known Exploited Vulnerability to Catalog

• New Cisco Defense Orchestrator (CDO) API

• How Cisco is Redefining Security and Our Partner Experience

• Full Stack Observability: Everything, everywhere, all at once

• Infrastructure Automation and Defense: Introducing DevSecOps Essentials

• Expert Insight: Outdated Recruitment Methods Are Impeding The Global Cyber Army

• Indian Banks Mull New Move for Faster Freezing of Scammers’ Accounts

• Invicti Predictive Risk Scoring identifies highest-risk applications

• Apache Cordova App Harness Targeted in Dependency Confusion Attack

• End-to-End Encryption Sparks Concerns Among EU Law Enforcement

• $493 Bounty Awarded for Arbitrary Options Update Vulnerability Patched in WP Datepicker WordPress Plugin

• Over A Million Neighbourhood Watch Members Exposed

• Microsoft DRM Hack Could Allow Movie Downloads From Streaming

• UnitedHealth Admits Breach Could Cover Substantial Proportion Of People In America

• Windows Vulnerability Reported By The NSA Exploited To Install Russian Malware

• Authorities Investigate LabHost Users After Phishing Service Shutdown

• AI is Revolutionizing Phishing for Both Sides. What will make the Difference?

• “Substantial proportion” of Americans may have had health and personal data stolen in Change Healthcare breach

• UnitedHealth Says Patient Data Exposed in Change Healthcare Cyberattack

• Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations

• The Battle Continues: Mandiant Report Shows Improved Detection But Persistent Adversarial Success

• Survey Finds Two-Thirds of Leading Pharmas Restrict ChatGPT Usage, While Many in Life Sciences Industry Deem AI ‘Overrated’

• Entrust protects users against fraud, phishing and other account takeover attacks

• Forcepoint DSPM safeguards sensitive information by examining data context and content

• Millions of Americans’ Data Potentially Exposed in Change Healthcare Hack

• Passwords, passkeys and familiarity bias

• Netwrix 1Secure enhancements accelerate threat detection

• Mandiant’s M-Trends Report Reveals New Insights from Frontline Cyber Investigations

• Resilient Together with Priority Telecommunications Services (PTS)

• Russian hackers’ custom tool exploits old Windows Print Spooler flaw (CVE-2022-38028)

• Vulnerability Exploitation on the Rise as Attackers Ditch Phishing

• WordPress PWA – how to protect your Progressive Web Apps

• GitHub Comments Abused to Spread Malware in Fake Microsoft Repositories

• Tracing the Steps of Cyber Intruders: The Path of Lateral Movement

• PoC Exploit Released For Critical Oracle VirtualBox Vulnerability

• Protecting Against DDoS Tsunami Attacks

• Key Findings from the 2024 Cloud Security Report

• Fraudsters Exploit Telegram’s Popularity for Toncoin Scam

• Mandiant: Orgs are detecting cybercriminals faster than ever

• DTEX i3 Threat Advisory Provides Detections for LOTL, C2 Abuse

• The Boosters: Don’t Get Used to the Boost

• The Only API Penetration Testing Checklist You Need

• Women in Cybersecurity Face Continued Pay Disparities

• Veritas enhances cyber resilience with AI-powered solutions

• Struts “devmode”: Still a problem ten years later?, (Tue, Apr 23rd)

• UnitedHealth admits breach could ‘cover substantial proportion of people in America’

• Suspected CoralRaider continues to expand victimology using three information stealers

• U.S. to Impose Visa Restrictions on 13 Individuals Involved in Commercial Spyware Operations

• Can a VPN Be Hacked?

• Grab 9 Ethical Hacking Courses for $30 and Improve Your Business Security

• Mandiant: Attacker dwell time down, ransomware up in 2023

• Microsoft Warns of North Korean Hackers Turning to AI-Fueled Cyber Espionage

• Nespresso Domain Serves Up Steamy Cup of Phish, No Cream or Sugar

• Data Breach at Real America’s Voice: User Information Compromised

• Veeam acquires Coveware to boost its ransomware protection capabilities

• Drop in ransomware payment, 2024 Q1 sees a record low of 28%

• Stellar Cyber launches MITRE ATT&CK Coverage Analyzer

• Webinar: Learn Proactive Supply Chain Threat Hunting Techniques

• Vulnerability Exploitation on the Rise as Attacker Ditch Phishing

• How a new law protects your thoughts from tech companies – and why it matters

• Microsoft and Security Incentives

• HHS Beefs Up Privacy Protection for Reproductive Health Info

• Russian Sandworm Hackers Targeted 20 Critical Organizations in Ukraine

• Behavioral Patterns of Ransomware Groups are Changing

• Leicester streetlights take ransomware attack personally, shine on 24/7

• Microsoft DRM Hack Could Allow Movie Downloads From Popular Streaming Services

• Ransomware Gang Leaks Data Allegedly Stolen From Government Contractor

• Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability

• This Website is Selling Billions of Private Messages of Discord Users

• Volkswagen Group’s Systems Hacked: 19,000+ Documents Stolen

• Server Inventory Checklist (Free Download)

• German Authorities Issue Arrest Warrants for Three Suspected Chinese Spies

• Police Chiefs Call for Solutions to Access Encrypted Data in Serious Crime Cases

• Unmasking the True Cost of Cyberattacks: Beyond Ransom and Recovery

• GitLab Affected by GitHub-Style CDN Flaw Allowing Malware Hosting

• Feds Issue Guide for Change Health Breach Reporting Duties

• CrushFTP zero-day exploited by attackers, upgrade immediately! (CVE-2024-4040)

• Cloud Companies Reject Broadcom VMware Pricing Changes

• Raimondo Downplays Huawei Smartphone Chip

• Free and Downloadable Account Management Policy Template

• Cloud Console Cartographer: Open-Source Tool Helps Security Teams Transcribe Log Activity

• Trellix Email Security for Microsoft Office 365 improves email defense

• Russian Sandworm Group Hit 20 Ukrainian Energy and Water Sites

• Leading the charge against GuptiMiner

• University Cybersecurity Clinics Can Now Use the New CISA Resource Guide

• Enhancing Endpoint Security with Advanced Host-Based Intrusion Detection Capabilities

• Majority of Businesses Worldwide are Implementing Zero Trust, Gartner Finds

• GitHub Comments Abused to Push Malware via Microsoft Repository URLs

• Over a million Neighbourhood Watch members exposed through web app bug

• Russian APT28 Group in New “GooseEgg” Hacking Campaign

• Meta Opens Quest VR OS To Third Party Gadget Makers

• UK Lawsuit Claims Grindr Shared HIV Status

• Hacker Offers Upto $300 To Mobile Networks Staff For Illegal SIM Swaps

• Critical Apache HugeGraph Flaw Let Attackers Execute Remote Code

• U.S. Gov imposed Visa restrictions on 13 individuals linked to commercial spyware activity

• Uncertainty is the Most Common Driver of Noncompliance

• Critical Flaw with Popular API Portal Let Attackers Launch SSRF Attacks

• Atera vs. ConnectWise: Head-to-Head Comparison (And Alternative)

• Cyber Insurance Gaps Stick Firms With Millions in Uncovered Losses

• Researchers Warn Windows Defender Attack can Delete Databases

• Align introduces ransomware prevention feature, powered by Adlumin

• U.S. Imposes Visa Restrictions on 13 Linked to Commercial Spyware Misuse

• EU Prepares Action Against ‘Addictive’ TikTok Lite Features

• Europol calls for Tech Giants to Get Lawful Access To end-to-end Encryption

• A cyber attack paralyzed operations at Synlab Italia

• Sharp Stealer: New Info-stealer Malware Targets Gamers, Crypto Enthusiasts

• Podcast Episode: Right to Repair Catches the Car

• Executive summary: NIS2 Directive for the EU members (updated)

• Response to CISA Advisory (AA24-109A): #StopRansomware: Akira Ransomware

• Russian cyber forces cyber attack water tower just to make it overflow

• Is Your Password Strong Enough? Brute Force Attack on the Rise!

• Misconfigured cloud server leaked clues of North Korean animation scam

• Russia’s APT28 Exploited Windows Print Spooler Flaw to Deploy ‘GooseEgg’ Malware

• The rising influence of AI on the 2024 US election

• People doubt their own ability to spot AI-generated deepfakes

• 10 colleges and universities shaping the future of cybersecurity education

• Change Healthcare Finally Admits It Paid Ransomware Hackers—and Still Faces a Patient Data Leak

• Behavioral patterns of ransomware groups are changing

• What is multi-factor authentication (MFA), and why is it important?

• ToddyCat Hacker Group Uses Advanced Tools for Industrial-Scale Data Theft

• ISC Stormcast For Tuesday, April 23rd, 2024 https://isc.sans.edu/podcastdetail/8950, (Tue, Apr 23rd)

• Old Windows print spooler bug is latest target of Russia’s Fancy Bear gang

• USENIX Security ’23 – The Case for Learned Provenance Graph Storage Systems

• UnitedHealth says Change hackers stole health data on ‘substantial proportion of people in America’

• IT Security News Daily Summary 2024-04-22

• Facebook AI Makes Creepy Comment That It Has A Gifted, Disabled Child

• Russia-linked APT28 used post-compromise tool GooseEgg to exploit CVE-2022-38028 Windows flaw

• U.S. Senate and Biden Administration Shamefully Renew and Expand FISA Section 702, Ushering in a Two Year Expansion of Unconstitutional Mass Surveillance

• FBI and friends get two more years of warrantless FISA Section 702 snooping

• Russian FSB Counterintelligence Chief Gets 9 Years in Cybercrime Bribery Scheme

• Vulnerability Recap 4/22/24 – Cisco, Ivanti, Oracle & More

• Vulnerability Summary for the Week of April 15, 2024

• 5 Best Practices to Secure AWS Resources

• US government says security flaw in Chirp Systems’ app lets anyone remotely control smart home locks

• Europol now latest cops to beg Big Tech to ditch E2EE

• BreachRx Gets $6.5 Million to Automate Security Incident Response

• Mitre breached by nation-state threat actor via Ivanti flaws

• Biometrics: A Flash Point in AI Regulation

• Three Ways Organizations Can Overcome the Cybersecurity Skills Gap

• Rise In Cybercrime: Dark Web Fueling Credential Attacks

• CISA Releases Physical Security Checklist to Help Election Officials Secure Polling Locations

• TikTok Says New US Ban Effort Would ‘Trample Free Speech’

• AI, toll fraud and messaging top the list of UC security concerns

• The Next US President Will Have Troubling New Surveillance Powers

• From Water to Wine: An Analysis of WINELOADER

• Malicious PyPI Package Attacking Discord Users to Steal Credentials

• Tesla Cuts Prices Across Major Markets

• Europol becomes latest law enforcement group to plead with big tech to ditch E2EE

• Dependency Confusion Vulnerability Found in an Archived Apache Project

• More companies refuse to pay ransom in 2024

• Tinder’s ‘Share My Date’ feature will let you share date plans with friends and family

• The 7 Best iPhone VPNs (Recommended for 2024)

• It’s Earth Day! Let’s talk Circularity, Growth and Profitability!

• Find Your Path to Unmatched Security and Unified Experiences

• Customers Praise the Surprising Longevity and Adaptability of Cisco UCS

• Using Legitimate GitHub URLs for Malware

• #MIWIC2024: Melissa Chambers, CEO and Co-Founder of Sitehop

• Picking fights and gaining rights, with Justin Brookman: Lock and Code S05E09

• Germany arrests trio accused of trying to smuggle naval military tech to China

• UN Agency Faces Data Crisis: Ransomware Hack Exposes Extensive Data Theft

• Numerous LastPass Users Fall Victim to Highly Convincing Scam, Losing Master Passwords

• Anonymous Hackers Threaten To Publish IDF’s ‘Top Secret Projects’

• Russian Hacker Group ToddyCat Uses Advanced Tools for Industrial-Scale Data Theft

• Fraudsters Exploit Telegram’s Popularity For Toncoin Scam

• chief privacy officer (CPO)

• Research Shows How Attackers Can Abuse EDR Security Products

• Crafting AI’s Future: Decoding the AI Executive Order

• Citrix UberAgent Flaw Let Attackers Elevate Privileges

• Beware Of Weaponized Zip Files That Deliver WINELOADER Malware

• Malicious PyPI Package Attacking Discord Users To Steal Credentials

• The Role of Cybersecurity Training in Compliance

• Hackers Group Claims To Have Broke Into IDF & Stolen Documents

• Watchdog tells Dutch govt: ‘Do not use Facebook if there is uncertainty about privacy’

• CVEs Targeting Remote Access Technologies

• CrushFTP Patches Exploited Zero-Day Vulnerability

• Rural Texas Towns Report Cyberattacks That Caused One Water System to Overflow

• The Future of Automated Testing with DAQ

• Taking Steps Toward Achieving FedRAMP

• Getting to Know Netzer Shohet

• Hackers threaten to leak a copy of the World-Check database used to assess potential risks associated with entities

• Malware Developer Lures Child Exploiters Into Honeytrap to Extort Them

• Story 1: Removing super-admin tokens across 33 GitHub tenants in 2 hours

• Cloud Security Stories: From Risky Permissions to Ransomware Execution

• The 10 Women in Cybersecurity You Need to Follow

• Tech Outages: Exposing the Web’s Fragile Threads

• Binary Defense enhances BDVision to improve security for SMBs

• apexanalytix Passkeys protects data with biometric authentication

• Dependency Confusion Vulnerability Found in Apache Project

• US House of Representatives passes new TikTok ban bill to Senate

• Transforming Operations to Eliminate Technical Debt

• TA547 Phishing Attack: German Companies Hit With Infostealer

• GUEST ESSAY: Here’s why securing smart cities’ critical infrastructure has become a top priority

• The Essential KVM Cheat Sheet for System Administrators

• Understanding Spectre V2: A New Threat to Linux Systems

• Thousands of Palo Alto Firewalls Potentially Impacted by Exploited Vulnerability

• Cybercriminals Threaten Release of Stolen World-Check Database, Exposing Millions to Financial Risk

• MITRE breached by nation-state threat actor via Ivanti zero-days

• Trend Micro launches AI-driven cyber risk management capabilities

• Malvertising: Fake Popular Software Ads Deliver New MadMxShell Backdoor

• Windows MagicDot Path Flaw Lets Attackers Gain Rootkit-Like Abilities

• VMware ESXi Shell Service Exploit on Hacking Forums: Patch Now

• UK Cyber Agency NCSC Announces Richard Horne as its Next Chief Executive

• Ukrainian Soldiers’ Apps Increasingly Targeted for Spying, Cyber Agency Warns

• Billions of scraped Discord messages up for sale

• UK data watchdog questions how private Google’s Privacy Sandbox is

• MITRE Corporation Breached by Nation-State Hackers Exploiting Ivanti Flaws

• Pentera’s 2024 Report Reveals Hundreds of Security Events per Week, Highlighting the Criticality of Continuous Validation

• IT Security News Weekly Summary – Week 17

• Alert! Zero-day Exploit For WhatsApp Advertised On Hacker Forums

Generated on 2024-05-01 00:01:31.978523