IT Security News Monthly Summary – September

• IT Security News Daily Summary 2023-08-31

• UN: Southeast Asia Gangs Are Trafficking Cybercrime Workers

• 3 out of 4 Cyberattacks in the Education Sector Are Associated With a Compromised On‑Premises User or Admin Account

• Insurance Costs Rise, Coverage Shrinks, But Policies Remain Essential

• Apple’s Decision to Kill Its CSAM Photo-Scanning Tool Sparks Fresh Controversy

• Cybercriminals Team Up to Upgrade ‘SapphireStealer’ Malware

• Kremlin-backed Sandworm strikes Android devices with data-stealing Infamous Chisel

• UK Agrees to Support Kuwait’s Cybersecurity Center

• Publisher’s Spotlight: Normalyze: Data Security for Everything You Build and Run in The Cloud

• Cisco Patched Multiple NX-OS And FXOS Vulnerabilities

• Paramount Admits Data Breach – Report

• Hackers Launch MiTM Attack to Bypass VMware Tools SAML Authentication

• Apple iPhone 14 Pro Offered Up to the Hacking Masses

• Paramount, Forever 21 Data Breaches Set Stage for Follow-On Attacks

• Forever 21 data breach affects half a million people

• Deploying AI Code: Safety Goggles Needed

• Assessing Generative AI’s Impact on Cyber Risk

• How companies can get a grip on ‘business email compromise’

• Ransomware Gangs are Evolving: Cryptocurrency Flaws Could be Their Next Target

• FBI Leads Takedown Of Qakbot Malware Infecting 700,000 Computers

• 10 best antivirus software for businesses in 2023

• 5 ways CISOs can prepare for generative AI’s security challenges and opportunities

• Leveraging AT&T Cybersecurity Consulting for a robust Zero Trust Center of Excellence

• Hackers Exploit Adobe ColdFusion Vulnerabilities to Deploy Malware

• Do you need an anti-spy camera finder and bug detector? How they work

• LogicMonitor customers hit by hackers, because of default passwords

• Navigating privacy in a data-driven world with Microsoft Priva

• BYOD Security Gap: Survey Finds 49% of European Firms Unprotected

• Akira Ransomware gang targets Cisco ASA without Multi-Factor Authentication

• Plug these vulnerabilities in VMware, Cisco products

• New Russian Android malware targets Ukraine’s military devices: Report

• LockBit Ransomware targets a province in Quebec Canada

• Publisher’s Spotlight: Cycode: Secure Code to Cloud – Application Security Posture Management (ASPM) at Scale

• Max Schrems’ Noyb Files Privacy Complaint Against Fitbit

• CockroachDB TIL: Volume 13

• 4 Zoom alternatives with better video conferencing privacy policies

• New Research Exposes Airbnb as Breeding Ground For Cybercrime

• PagerDuty strengthens analytics capabilities and expands generative AI offerings

• AgentSmith HIDS – Host Based Intrusion Detection

• Elon Musk’s X To Offer Audio, Video Calling

• Vulnerability in WordPress Migration Plugin Exposes Websites to Attacks

• Energy Department Offering $9M in Cybersecurity Competition for Small Electric Utilities

• Risk & Repeat: Digging into Microsoft security criticisms

• Cyberattackers Swarm OpenFire Cloud Servers With Takeover Barrage

• The Power of Threat Intelligence in Cyber Defense

• Barracuda Thought It Drove 0-Day Hackers From Customer Networks

• Claroty’s 2023 Global Healthcare Cybersecurity Study Exposes Widespread Vulnerabilities and Impact

• Google Cloud Introduces Duet AI To Revolutionize Cybersecurity Operations

• Alert fatigue: A 911 cyber call center that never sleeps

• SapphireStealer Malware: A Gateway to Espionage and Ransomware Operations

• Malwarebytes lays off 100 employees ahead of business split

• Palo Alto Networks Empowers MSPs with Prisma SASE Enhancements

• FBI Dismantles QakBot Botnet In Largest-Ever Cybercrime Operation

• Rackspace has Spent $11 Million on Ransomware Cleanup So Far

• Emerging Phishing Campaigns Aim FTX Users After Kroll Data Breach

• Boosting Business Efficiency: OpenAI Launches ChatGPT for Enterprises

• Multiple Splunk Enterprise Flaws Let Attackers Execute Arbitrary Code

• Applications and SaaS Plugins: Data Exfiltrations

• A Brief History of ICS-Tailored Attacks

• IBM partners with Salesforce to drive productivity and growth with generative AI

• Weaknesses in Cisco ASA SSL VPNs Exploited Through Brute-Force Attacks

• Apple Preparing iPhone 14 Pro Phones for 2024 Security Research Device Program

• Adversaries Ride RocketMQ Bug to DreamBus Bot Resurgence

• North Korean Hackers Deploy New Malicious Python Packages in PyPI Repository

• Microsoft To Unbundle Teams To Satisfy EU Antitrust Concerns

• Splunk Patches High-Severity Flaws in Enterprise, IT Service Intelligence

• Five Eyes Report: New Russian Malware Targeting Ukrainian Military Android Devices

• Facebook Accounts Targeted by Vietnamese Threat Groups

• Chinese Group Spreads Android Spyware via Trojan Signal, Telegram Apps

• 3 out of 4 cyberattacks in the education sector are associated with a compromised on premises user or admin account

• Cisco VPNs with no MFA enabled hit by ransomware groups

• The Best FPS Games on Android In 2023: Popular by Demand

• Cisco BroadWorks Application Software Flaw Let Attackers conduct XSS Attack

• Harnessing Security by Adopting Zero Trust Architecture

• Numbers Don’t Lie: Exposing the Harsh Truths of Cyberattacks in New Report

• Paramount Global disclosed a data breach

• Google DeepMind Trials Watermarks For AI Images

• MalDoc in PDF Attack: Hackers Hiding Malicious Word Files within PDFs

• Lawsuit Accuses University of Minnesota of Not Doing Enough to Prevent Data Breach

• GRU Blamed for Infamous Chisel Malware Targeting Ukraine’s Military Phones

• Own Your Own Government Surveillance Van

• Google Fixes Serious Security Flaws in Chrome and Android

• Axio and Cyentia Institute join forces to boost data-driven cyber risk quantification for enterprises

• Notorious QakBot Malware Dismantled: $8.6M Seized and 700K Computers Freed

• Heimdal’s MXDR Adapt, an Innovative Adaptive Control for Enhanced Threat Detection and Response

• Zero-Day Alert! Critical Flaw in Citrix ADC and Gateway Exploited in the Wild (Updated)

• Paramount Media Hacked: Attackers Obtain Access to User Personal Information

• Earth Estries’ Espionage Campaign Targets Governments and Tech Titans Across Continents

• Trojanized Signal, Telegram apps found on Google Play, Samsung Galaxy Store

• Apple offers security researchers specialized iPhones to tinker with

• Unlocking Digital Resources: A Guide for Modern Healthcare Practitioners

• Dangling DNS Used to Hijack Subdomains of Major Organizations

• 500k Impacted by Data Breach at Fashion Retailer Forever 21

• Russian APT Intensifies Cyber Espionage Activities Amid Ukrainian Counter-Offensive

• How to add a custom problematic site block list in Opera

• Protect Your Email With This Top-Rated Tool — Just $40 for Labor Day

• National Safety Council data leak: Credentials of NASA, Tesla, DoJ, Verizon, and 2K others leaked by workplace safety organization

• Working with a Reliable Partner for Cybersecurity Success

• Multiple Flaws in ArubaOS Switches Let Attackers Execute Remote Code

• Abusing Windows Container Isolation Framework to avoid detection by security products

• Do you know what your supply chain is and if it is secure?

• The bright side of data privacy compliance: 5 value-driven opportunities for retailers

• Phished Data via CERT Poland – 67,943 breached accounts

• Dismantling Qakbot Botnet – FBI’s Largest Cyber Operation Ever

• Court asks DPC to reinvestigate massive Google Data Breach

• Pampling – 383,468 breached accounts

• What does optimal software security analysis look like?

• The power of passive OS fingerprinting for accurate IoT device identification

• ChatGPT on the chopping block as organizations reevaluate AI usage

• The secret habits of top-performing CISOs

• PlayCyberGames – 3,681,753 breached accounts

• How to Fix a Water-Damaged Phone in 7 Steps

• Google Cloud Next keynote places spotlight on firm’s GenAI efforts

• Social Security Numbers leaked in ransomware attack on Ohio History Connection

• 3 reasons why your endpoint security is not enough

• How “EDR Extra Strength” simplifies traditional EDR complexity

• FBI-Led Global Effort Takes Down Massive Qakbot Botnet

• Barracuda gateway attacks: How Chinese snoops keep a grip on victims’ networks

• Cybercriminals Already Using AI in Email Attacks, New Report Confirms

• Crooks Using Stealers and Stolen Cookies to Hack Airbnb Accounts

• Microsoft ain’t happy with Russia-led UN cybercrime treaty

• Chinese Group Spreads Android Spyware Via Trojan Signal, Telegram Apps

• IT Security News Daily Summary 2023-08-30

• biometric authentication

• How to verify encryption in Google Messages

• APT Attacks From ‘Earth Estries’ Hit Gov’t, Tech With Custom Malware

• FBI, Justice Department dismantle Qakbot malware

• Facebook Rejects Censorship Decision From Its Own Oversight Board

• Chinese GREF APT distributes spyware via trojanized Signal and Telegram apps on Google Play and Samsung Galaxy stores

• New York Times Spoofed to Hide Russian Disinformation Campaign

• Publisher’s Spotlight: CrowdSec: Real-time & Crowdsourced Protection

• A Deep Dive into OffSec Cyber Range

• Microsoft angry over Russian-led UN cybercrime treaty

• Beware: Government’s Alert on Smishing Scam Threat

• Qakbot Botnet Disrupted, Infected 700,000 Computers Globally

• How to Go Passwordless with NordPass Passkeys

• Unmasking Trickbot, One of the World’s Top Cybercrime Gangs

• Hackers Can Exploit Windows Container Isolation Framework to Bypass Endpoint Security

• With Beijing’s green light, mobility unicorns Zeekr and WeRide inch closer to US IPOs

• Why Web3 Penetration Testing is Vital for Protecting Decentralized Systems

• Google Chrome Security Update: High-Severity Vulnerability Patched

• Software Engineering in the Age of Climate Change: A Testing Perspective

• Apple Planning Major iPad Pro Upgrade – Report

• 4 Strategies to Safeguard the Finance Industry Against Deepfake Onslaught

• Harnessing the Power of Cyber Ranges: A Deep Dive into OffSec Cyber Range

• Podcast Episode Rerelease: Securing the Vote

• Navigating economic uncertainty with managed security services

• AT&T Cybersecurity wins SC Media Award for Best Threat Intelligence

• Top Challenges Threat Hunting Teams Face in 2023 and How to Overcome Them

• DarkGate Loader Delivered Through Stolen Email Threads to Lure Victims

• CrowdStrike CTO: ‘Rookie mistakes’ are hurting cloud security

• Flaw Exposes WP Migration Plugin to Hacks

• Performance-Enhanced Android MMRat Scurries onto Devices Via Fake App Stores

• Duet AI invades Google Workspace, takes notes, attends meetings, crafts email for $30/month

• Unveiling Network and Security Architectures: SD-WAN, SASE, SSE, and Zero Trust

• Enhancing Higher Education Security: The Role of Security Service Edge

• Foxconn Founder Bids To Become Taiwan’s President

• Email Authentication Protocols: SPF, DKIM, and DMARC – A Detailed Guide

• Chinese APT Group GREF Use BadBazaar in Android Espionage

• MMRat Android Trojan Executes Remote Financial Fraud Through Accessibility Feature

• Threat actors started exploiting Juniper flaws shortly after PoC release

• Barracuda Email Hack leaks government emails in America

• Meta Shuts Down Huge Chinese Disinformation Campaign

• Apple To Unveil iPhone 15 At Wonderlust Event

• iOS 16 Cheat Sheet: Complete Guide for 2023

• Healthcare Organizations Hit by Cyberattacks Last Year Reported Big Impact, Costs

• ‘Earth Estries’ Cyberespionage Group Targets Government, Tech Sectors

• Chinese Hackers Target US, Other Govts With Barracuda Flaw

• Apple Security Boss Faces iPads For Gun Permits Bribery Charge Again

• University Cuts Itself Off From Internet After Mystery Security Snafu

• Recent Juniper Flaws Chained In Attacks Following PoC Exploit Publication

• BGP Flaw Can Be Exploited For Prolonged Internet Outages

• British Officials Say AI Chatbots Could Carry Cyber Risks

• Tenable unveils web application and API scanning capabilities for Nessus Expert

• Exabeam and Google Cloud join forces to modernize security operations

• ComplyCube Field Redaction removes sensitive fields from documents

• 47,000 London Metropolitan Police Personnel Impacted by Data Breach

• Ransomware Vendetta: Rhysida Group Strikes Prospect Medical, Warns of Auctioning Stolen Data

• Duolingo Data Breach: Hackers Posts Scrapped Data on Hacking Forum

• Should Senior IT Professionals Be Accountable for Professional Decisions?

• Ransomware Actor Linked to Attacks Against Citrix NetScaler System

• Google Urges Gmail Users Set Up 2FA for Enhanced Security

• China-Linked BadBazaar Android Spyware Targeting Signal and Telegram Users

• Recent Juniper Flaws Chained in Attacks Following PoC Exploit Publication

• When Apps Go Rogue

• Korea Blockchain Week 2023: Presenting Web3’s Leading Voices

• Hackers Exploiting Juniper RCE Flaw Following PoC Release

• Cost of a data breach 2023: Financial industry impacts

• In Airbnb, Cybercriminals Find a Comfortable Home for Fraud

• Netskope Proactive DEM enables organizations to anticipate potential problems

• Stealthy Android Malware Attacking Mobile Users Via Fake App Stores

• Why are we seeing such a huge demand for AI at the moment?

• BGP Flaw Can Be Exploited for Prolonged Internet Outages

• GitHub Enterprise Server Gets New Security Capabilities

• Malicious npm Packages Aim to Target Developers for Source Code Theft

• How to Prevent ChatGPT From Stealing Your Content & Traffic

• NCSC issues warning over chatbot cyber risks

• VMware fixes critical vulnerability in Aria Operations for Networks (CVE-2023-34039)

• MixMode enhances Generative AI Platform to improve threat detection

• The removal of Qakbot from infected computers is just the first step

• Cyber Security Today, August 30, 2023 – More ransomware and MOVEit attack numbers, and an attack on a Rust repository

• No More Band-Aids: It’s Time for IT and OT Security Convergence

• NCSC Warns Over AI Chatbot Cyber Risks

• FBI-Led Operation Duck Hunt Shuts Down QakBot Malware

• Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New Exploits

• QVANTUM Expands into the US Market, Empowering Precise Workforce Planning with Customized Cost Solutions

• Fianu Labs Emerges From Stealth With $2 Million in Seed Funding

• High-Severity Memory Corruption Vulnerabilities Patched in Firefox, Chrome

• DreamBus Botnet Exploiting RocketMQ Vulnerability to Delivery Cryptocurrency Miner

• How Quantum Computing Will Impact Cybersecurity

• Critical RCE flaw impacts VMware Aria Operations Networks

• Meter collaborates with Cloudflare to launch DNS Security

• Met Police Contractor Hack Places Officer Data At Risk

• OpenAI Promises Enterprise-Grade Security with ChatGPT for Business

• Enhancing Cybersecurity: How XDR Software Empowers CISOs

• DreamBus Malware Exploits Unpatched RocketMQ Servers

• Earth Estries Targets Government, Tech for Cyberespionage

• NCSC Issues Cyber Warning Over AI Chatbots

• IT threat evolution in Q2 2023

• IT threat evolution in Q2 2023. Mobile statistics

• IT threat evolution in Q2 2023. Non-mobile statistics

• Google launches tool to identify AI-generated images

• GhostSec Claim Breaching Iranian Govt Surveillance Software Tool

• Block Unwanted Calls With AI for Just $50 Until Labor Day Sale Ends 11:59 PM PST 9/4

• With Beijing’s greenlight, mobility unicorns Zeekr and WeRide inch closer to US IPOs

• An evolved LockBit variant emerges

• What is Static Network Address Translation?

• Understanding Firewalls – Types, Configuration, and Best Practices for Effective Network Security

• Updated NCSC Report Highlights Key Threats for the UK Legal Sector

• FBI: Operation ‘Duck Hunt’ dismantled the Qakbot botnet

• Threat Actors Abuse Google Groups to Send Fake order Notifications

• Why performing security testing on your products and systems is a good idea

• Critical Vulnerability Alert: VMware Aria Operations Networks at Risk from Remote Attacks

• Hackers Can Exploit Skype Vulnerability to Find User IP Address

• Hackers Abuse Azure AD Abandoned Reply URLs to Escalate Privilege

• The Latest in Cybersecurity Incidents making to Google Headlines

• Decoding the Naming Conventions of Ransomware Malware

• How to protect your personal data when using ChatGPT and generative AI

• FBI Dismantles QakBot Malware, Frees 700,000 Computers, Seizes $8.6 Million

• How Thales and Red Hat Secure Kubernetes Data in a 5G World

• Is the new OWASP API Top 10 helpful to defenders?

• Volatility Workbench: Empowering memory forensics investigations

• Velociraptor: Open-source digital forensics and incident response

• A closer look at the RFI on open-source software security

• Toyota Japan back on the road after probably-not-cyber attack halted production

• Rising cyber incidents challenge healthcare organizations

• Qakbot Botnet Disrupted in Operation ‘Duck Hunt’

• Meta reckons China’s troll farms could learn proper OpSec from Russia’s fake news crews

• Meal delivery service PurFoods announces major data breach

• Cisco VPNs without MFA are under attack by ransomware operator

• “An influx of Elons,” a hospital visit, and magic men: Becky Holmes shares more romance scams: Lock and Code S04E18

• FBI confirms Barracuda patch is not effective for exploited ESG appliances

• 6 Ways AI Can Revolutionize Digital Forensics

• Everest Group Research: C-Suite Must Recognize Critical Difference Between Cybersecurity and Cyber Resilience

• Facebook Announces Takedown Of World’s Largest Spam Campaign

• Delinea Research Reveals a Cyber Insurance Gap

• Unpatched Citrix NetScaler Devices Targeted by Ransomware Group FIN8

• SPHERE Appoints Former Johnson & Johnson CISO Marene Allison to Board of Directors

• TechCrunch Disrupt 2023 Startup Battlefield 200: AI and Security edition

• University cuts itself off from internet after mystery security snafu

• IT Security News Daily Summary 2023-08-29

• PurFoods Mom’s Meals Reports Data Breach Exposing Social Security Numbers of Over 1.2 Million Consumers

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Check Point Shares Analysis of Qakbot Malware Group

• Operation ‘Duck Hunt’: Qakbot Malware Disrupted, $8.6 Million in Cryptocurrency Seized

• Meta Cripples China’s Massive ‘Spamouflage’ Influence Op

• MOVEit Was a SQL Injection Accident Waiting to Happen

• Sprawling Qakbot Malware Takedown Spans 700,000 Infected Machines

• Qakbot – the takedown and the remediation

• UNC4841 threat actors hacked US government email servers exploiting Barracuda ESG flaw

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Apple security boss faces iPads-for-gun-permits bribery charge… again

• Microsoft Teams attack exposes collab platform security gaps

• FBI-led Operation Duck Hunt shoots down Qakbot

• Authorities take down Qakbot infrastructure, issue commands to delete the malware

• When kids fly the nest, secure your digital nest eggs

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• VMware Patches Major Security Flaws in Network Monitoring Product

• ISPs Should Not Police Online Speech—No Matter How Awful It Is.

• The Other Russian War – What Can We Do?

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Quantum threats loom in Gartner’s 2023 Hype Cycle for data security

• DEF CON Generative AI Hacking Challenge Explored Cutting Edge of Security Vulnerabilities

• Cisco VPNs under attack via Akira, LockBit ransomware

• IT audit (information technology audit)

• The Most Devastating Data Breaches of the Decade

• Microsoft: Chinese APT Flax Typhoon uses legit tools for cyber espionage

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• U.S. Hacks QakBot, Quietly Removes Botnet Infections

• Somalia Orders ISPs to Block Telegram and TikTok

• South African Department of Defence Denies Stolen Data Claims

• Qakbot botnet disrupted, malware removed from 700,000+ victim computers

• Bridging AI and Ethics: Comprehensive Solutions in Healthcare Implementation

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Rackspace Faces Massive Cleanup Costs After Ransomware Attack

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Google Applies Generative AI Tools to Cloud Security

• OpenAI Turns to Security to Sell ChatGPT Enterprise

• New ‘MMRat’ Android Trojan Targeting Users in Southeast Asia

• Mom’s Meals issues “Notice of Data Event”: What to know and what to do

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• FBI operation tricked thousands of computers infected by Qakbot into uninstalling the malware

• In an Attack on WebDetective’s Servers, Hackers Deleted Victim Data

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Addressing Cybersecurity’s Talent Shortage & Its Impact on CISOs

• Android Goes All-in on Fuzzing

• Is Cybersecurity as a Service (CSaaS) the answer: Move faster | Do more

• New MMRat Android Trojan Uses Fake App Stores for Bank Fraud

• Role of C# in Building Dynamic and Secure Web Applications

• Abnormal Security: Microsoft Tops List of Most-Impersonated Brands in Phishing Exploits

• Okta for Global 2000 gives CEOs flexibility to centralize or decentralize their business strategy

• Tanium Vulnerability Risk and Compliance for ServiceNow accelerates security investigations

• Descope unveils third-party connectors for no-code app journey personalization

• Mom’s Meals Warns of Major Data Breach Affecting Over 1.2 Million Individuals

• Worldcoin: Ldcoin’s Token Value Falls by More Than 50% as Privacy Concerns Grow

• critical infrastructure

• LockBit 3.0 Ransomware Variants Surge Post Builder Leak

• More UK Cops’ Names And Photos Exposed In Supplier Breach

• Meta Fights Sprawling Chinese Spamouflage Operation

• Cybersecurity Experts Say The West Has Failed To Learn Lessons From Ukraine

• Google Tests Watermark To Identify AI Images

• US Spy Satellite Agency Isn’t So Silent About New Silent Barker Mission

• Criminals hack radio commands to stop Poland Trains

• How to turn on Private DNS Mode on Android (and why you should)

• New Ransomware Campaign Targets Citrix NetScaler Flaw

• Nordic Users Targeted by National Danish Police Phishing Attack

• How to Manage XDR Alerts with Heimdal

• What’s new in Gartner’s Hype Cycle for data security in 2023

• Kroll’s Crypto Breach Highlights SIM-Swapping Risk

• DarkGate Malware Activity Spikes as Developer Rents Out Malware to Affiliates

• Chinese Hacking Group Exploits Barracuda Zero-Day to Target Government, Military, and Telecom

• Mom’s Meals says data breach affects 1.2 million customers

• Hackers infiltrated Japan’s National Center of Incident Readiness and Strategy for Cybersecurity (NISC) for months

• Police Federation: Metropolitan IT System Breach Could Have Serious Consequences

• Chinese APT Was Prepared for Remediation Efforts in Barracuda ESG Zero-Day Attack

• UN Warns Hundreds of Thousands in Southeast Asia Roped Into Online Scams

• Did Microsoft Just Upend the Enterprise Browser Market?

• The Reality of Cyberinsurance in 2023

• Report Reveals Growing Disparity in Cyber Insurance Landscape

• The UK and the US Build a ‘Data Bridge’ to Facilitate Personal Data Movements

• SAP and Google Cloud join forces to provide customers with generative AI capabilities

• Fortinet enhances its SASE solution to help organizations prevent data leaks

• LogRhythm and Cimcor collaborate to enhance cyberattack protection for organizations

• Quid Pro Quo Attacks: Cyber Threat to Watch Out For

• Barracuda email gateways in US, Canadian government departments hit: Report

• Mom’s Meals Breached: Over 1.2 Million Consumers Data Exposed

• Here’s What Your Breach Response Plan Might Be Missing

• Can a private internet co-exist with the internet we know?

• Cyberattacks Targeting Government Agencies on the Rise

• Meta Fights Sprawling Chinese ‘Spamouflage’ Operation

• Black Hat USA 2023 NOC: Network Assurance

• Google debuts Duet AI to tackle new cybersecurity challenges in the cloud

• Personal, Health Information of 1.2 Million Stolen in PurFoods Ransomware Attack

• The Weird, Big-Money World of Cybercrime Writing Contests

• Swissbit introduces D1200 data center SSD

• Ransomware group exploits Citrix NetScaler systems for initial access

• Ciphertex strengthens data security with SecureNAS CX-160KSSD-X

• Meta says it has disrupted a massive disinformation campaign linked to Chinese law enforcement

• Security Team Huddle: Using the Full NIST Cybersecurity Framework for the Win

• Survey Provides Takeaways for Security Pros to Operationalize their Remediation Life Cycle

• Google is bringing generative AI to its security tooling

• More UK cops’ names and photos exposed in supplier breach

• Identity Theft from 1965 Uncovered through Face Recognition

• Easy-to-exploit Skype vulnerability reveals users’ IP address

• Cisco partners with Nutanix to accelerate hybrid multicloud deployments

• Intel Says Upcoming Data Centre Chip More Than Doubles Efficiency

• Judge Looks To Decertify Google Play Class-Action Lawsuit

• Microsoft Power Platform API Threatened Due To Reply URL Flaw

• How To Hide Browsing History – Complete Guide

• Microsoft Warns of Adversary-in-the-Middle Uptick on Phishing Platforms

• Citrix NetScaler Alert: Ransomware Hackers Exploiting Critical Vulnerability

• FIN8-linked actor targets Citrix NetScaler systems

• Start-Up Xpeng Buys Didi Global’s Electric Car Unit

• BYD Reports 200 Percent EV Profit Jump Amidst Tesla Price War

• Four in Five Cyber-Attacks Powered by Just Three Malware Loaders

• Which Is Better For File Security: Cloud Or NAS Backup?

• How to Implement an XDR Software?

• Two Men Arrested Following Poland’s Railway System Signals Hack

• OpenAI Launches ChatGPT For Large Businesses

• EV Start-Up VinFast Becomes Third Most Valuable Automaker

• Silicon UK In Focus Podcast: Your Virtual Strategy

• WHICH IS BETTER FOR FILE SECURITY: CLOUD OR NAS BACKUP?

• Need to improve the detection capabilities in your security products?

• Hong Kong-Licensed Crypto Exchange Accepts Retail Investors

• Microsoft Edge Privilege Escalation Flaw – Update Now!

• Japan’s JPCERT warns of new ‘MalDoc in PDF’ attack technique

• Phishing-as-a-Service Gets Smarter: Microsoft Sounds Alarm on AiTM Attacks

• How Do Microsoft Azure and Amazon AWS Differ From One Another?

• Rackspace spends $10m in ransomware cleanup costs

• 11 search engines for cybersecurity research you can use right now

• Is the cybersecurity community’s obsession with compliance counter-productive?

• What makes a good ASM solution stand out

• ProxyNation: The dark nexus between proxy apps and malware

• IT leaders alarmed by generative AI’s SaaS security implications

• 4 Popular Cybersecurity Myths vs. Facts

• How to Protect Your CI/CD Pipeline

• Book Review: Effective Threat Investigation for SOC Analysts

• 5 Effective Web Design Strategies to Increase Your ROI

• A week in security (August 21 – August 27)

• 2.6 million DuoLingo users have scraped data released

• Google strengthens its Workplace suite protection

• Antivirus Software: The Best Deals, Coupons and Discounts

• Poland Arrests 2 Suspected Hackers for Train Disruption

• OpenAI Debuts ChatGPT Enterprise, Touting Better Privacy for Business

• Apple, Long a Critic of Right to Repair, Comes Out in Support of California Bill

• Health, payment info for 1.2M people feared stolen from Purfoods in IT attack

• IT Security News Daily Summary 2023-08-28

• OpenAI Debuts ChatGPT Enterprise, touting better privacy for business

• BreachLock Intelligence Report Reveals Critical Insights From Thousands of Penetration Tests

• Honeywell to Acquire SCADAfence, Strengthening Its Cybersecurity Software Portfolio

• Motherboard Mishaps Undermine Trust, Security

• Attackers can discover IP address by sending a link over the Skype mobile app

• Cybercriminals Harness Leaked LockBit Builder in Wave of New Attacks

• Imperva Clinches 2023 SC Media Trust Award for Best Database Security Solution: A Back-to-Back Victory

• Navigating the Challenges of Selective Data Extraction and Migration in Company Acquisitions

• 10 Keys To Securing Software Release and Delivery

• 8 Best Identity and Access Management (IAM) Solutions for 2023

• Vulnerability Summary for the Week of August 21, 2023

• Weekly Vulnerability Recap – August 28, 2023 – Windows, Ivanti, Adobe Hit By Flaws

• Cyber Centre again warns Canadian firms not to ignore cybercrime

• Researchers published PoC exploit code for Juniper SRX firewall flaws

• AI-Powered SOC Automation: A New Era in Security Operations

• ISACA

• Financial Firms Breached in MOVEit Cyberattacks Now Face Lawsuits

• Publisher’s Spotlight: ZeroFox: Protecting You Beyond Your Perimeter

• API Breaches Are Rising: To Secure the Future, We Need to Learn from the Past

• Reducing the Productivity Tax in Open Source Software Security – A Deep Dive with Varun Badhwar of Endor Labs

• Met Police Investigates Alleged Data Breach of Officer Information

• What is Software Asset Management? And why you should care

• Shadow APIs and Zombie APIs are Common in Every Organizations’ Growing API Attack Surface

• School District Sues Facebook For Allegedly Harming Children’s Mental Health

• London Police Warned to Stay Vigilant Amid Major Data Breach

• 3 ransomware detection techniques to catch an attack

• Should companies make ransomware payments?

• Enterprise dark web monitoring: Why it’s worth the investment

• Honeywell’s acquisition of cybersecurity provider sets sights on manufacturing sector’s deep IoT vulnerabilities

• Acquisition Chatter Swirls Around SentinelOne, BlackBerry

• 5 Ways to Prepare for Google’s 90-Day TLS Certificate Expiration

• Experts Uncover How Cybercriminals Could Exploit Microsoft Entra ID for Elevated Privilege

• Biden’s IoT Cybersecurity initiative

• San Antonio’s Top Five Cybersecurity Companies To Know

• Malware loader lowdown: The big 3 responsible for 80% of attacks so far this year

• How can Small Businesses Protect Themselves From Cyber Threats?

• Smoke Loader Uses New Whiffy Recon Malware To Triangulate Device Locations

• Understanding the E-Commerce Marketplaces in Europe

• Navigating London’s Free Electric Car Charging Points

• Lockbit 3.0 Builder Leaked: Anyone Can Blend Ransomware

• Hackers Embed Weaponized Word File into a PDF to Evade Detection

• Developers Beware: Malicious Rust Libraries Caught Transmitting OS Info to Telegram Channel

• NightOwl App is Targeting Older Macs to Siphon User Data

• How to make sure the reputation of your products and company is good

• Cyber Attack blame to UK Airspace Chaos

• Authentication Outage Underscores Why ‘Fail Safe’ Is Key

• Global Privacy Agencies Urge Social Media to Protect User Data from Scraping

• Scarab Ransomware Toolkit: Unveiling the Ingenious Weaponry

• Cryptocurrency Giants FTX, BlockFi, and Genesis Hit by Kroll Hack

• Reply URL Flaw Allowed Unauthorized MS Power Platform API Access

• Advanced analytics can help detect insider threats rapidly

• Signs of Malware Attack Targeting Rust Developers Found on Crates.io

• 10 Million Likely Impacted by Data Breach at French Unemployment Agency

• LockBit Code Leak Sparks Wave Of RaaS Attacks

• Malware Attack Targeting Rust Developers Found On Crates.io

• Best Practices To Prevent Organizational Data Theft From Employees

• Legal Liability for Insecure Software Might Work, but It’s Dangerous

• Kroll SIM-Swapping Attack Causes Data Breach at 3 Top Crypto Firms

• Rhysida ransomware group claims the hack of Prospect Medical

• Virtual Closet Assistant: How Technology Can Guide Your Outfit Decisions

• The Investing Club’s top 10 things to watch in the stock market Monday

• Hackers Exploited WinRAR Zero-Day To Target Traders

• Jupiter X Core Plugin Flaws Threatened 172K Websites With Account Hijacking

• Leaseweb Hosting Provider Admits Security Breach Following Downtime

• Two Men Arrested Following Poland Railway Hacking

• 3 Malware Loaders Detected in 80% of Attacks: Security Firm

• Kroll SIM-swap attack: FTX, BlockFi and Genesis clients’ info exposed

• August 2023 Web Server Survey

• Cyberattacks Targeting E-commerce Applications

• UK Air Traffic Control System Collapses, Causing Travel Chaos

• Ohio History Organization Says Personal Information Stolen in Ransomware Attack

• Leaseweb Reports Cloud Disruptions Due to Cyberattack

• Updated Kmsdx botnet targets IoT devices

• Remotely Stopping Polish Trains

• Three Persistent Data Security Challenges Organizations Need To Address Now

• PoC for no-auth RCE on Juniper firewalls released

• Innovative Tools For Online Casino Operators: Boosting Efficiency And User Enjoyment

• Cyber Security Today, August 28, 2023 – SIM card swap led to a Kroll data breach, supplier hack led to a London police data theft, and more

• French Unemployment Agency Announces a Data Breach

• Rise in UK IT degree applicants driven by AI advances

• Ericsson Expects $1bn In IP Revenue After Huawei Deal

• Instacart Reports Revenue Surge Ahead Of IPO

• Hackers Disruptred Poland’s Railway System Signals

• Chinese Chip Equipment Maker Sees Profits Surge

• India ‘Considering’ Tesla Tax Deal To Open Domestic EV Market

• Chinese Tech Firms ‘Shut Down’ Livestream Features Amidst Crackdown

• ECB Official Says Banks Must Be Protected In Digital Euro Launch

• US Treasury Publishes Proposed Crypto Tax Rules

• What is The Network and Information Security 2 Directive (NIS2)?

• How Improved Visibility Helps Achieve Compliance

• 3 Cryptocurrency Firms Suffer Data Breach After Kroll SIM Swapping Attack

• E-learning Across Generations: How Different Age Groups Embrace Online Education?

• Massive MOVEit campaign already impacted at least 1,000 organizations and 60 million individuals

• Software developers, how secure is your software?

• Cisco Nexus 3000 and 9000 Series Switches Flaw Let Attackers Trigger DoS Attack

• Malware Unleashed: Public Sector Hit in Sudden Surge, Reveals New Research

• Better SaaS Security Goes Beyond Procurement

• Data Breach of London Metropolitan Police turns serious

• Best Practices to safeguard Data Across Hybrid Cloud Environments

• KmsdBot Malware Gets an Upgrade: Now Targets IoT Devices with Enhanced Capabilities

• Experts demand clarity as they struggle with cloud security prioritization

• What true diversity in the cybersecurity industry looks like

• Adapting authentication to a cloud-centric landscape

• Uncovering a privacy-preserving approach to machine learning

• Whiffy malware stinks after tracking location via Wi-FI

• Microsoft publishes mitigation instructions for Downfall vulnerability in Windows

• Customizing LLMs for domain-specific tasks

• The Billion Dollar Problem: Securing Business Communication in the Financial Sector

• The Industrial Control Systems and The Internet of Things

• Taiwanese infosec researchers challenge Microsoft’s China espionage finding

• Poland’s authorities investigate a hacking attack on country’s railways

• Leaked LockBit 3.0 ransomware builder used by multiple threat actors

• IT Security News Weekly Summary – Week 34

• IT Security News Daily Summary 2023-08-27

• Rhysida Ransomware Group: Social Security Numbers, Passport Data Compromised in Recent Hospital Attack

• IT Contractor Data Breach Affects 47,000 Met Police Personnel

• Why generative AI is a double-edged sword for the cybersecurity sector

• Security Affairs newsletter Round 434 by Pierluigi Paganini – International edition

• The Cheap Radio Hack That Disrupted Poland’s Railway System

• The weaponization of AI: How businesses can balance regulation and innovation

• Introducing China’s First Blockchain-Based Data Exchange, Revolutionizing Web3 Data Trading

• Here’s How AI Can Revolutionize the Law Practice

• Rapid Ransomware Dwell Time and Persistent RDP Vulnerabilities

• Recovered Stolen Mercedes Offers Glimpse into Hijackers’ Tactics

• AI-Powered Fuzzing: Breaking the Bug Hunting Barrier

• The Next Step: Integrating Yara with RegRipper, pt II

• The Low-Stakes Race to Crack an Encrypted German U-Boat Message

• Cisco fixes 3 high-severity DoS flaws in NX-OS and FXOS software

• Week in review: Security Onion 2.4 released, WinRAR vulnerable to RCE

• Cyber Security Management System (CSMS) for the Automotive Industry

• IT Security News Daily Summary 2023-08-26

• A Brazilian phone spyware was hacked and victims’ devices ‘deleted’ from server

• A Brazilian phone spyware was hacked and victims’ stolen data ‘deleted’

• Cloud and hosting provider Leaseweb took down critical systems after a cyber attack

• Privacy czars urge websites to block data scraping

• Agriculture Industry Should be Prepared: Cyberattacks May Put Food Supply Chain at Risk

• Surge in Ransomware Attacks: Hackers Set Sights on Schools

• Vendors Training AI With Customer Data is an Enterprise Risk

• Efficiency in a Virtualized World: A Deep Dive into Modern IT

• Defying the Dark Arts: Strategies for Countering Cyber Threats

• The 12 Best Endpoint Security Software Solutions and Tools [2023]

• Ransomware’s Alarming Surge and Active Adversaries

• Deepfakes Are Being Used to Circumvent Facial Recognition Systems

• French employment agency Pôle emploi data breach impacted 10M people

• North Korean Hacker Linked to Tornado Cash Laundering

• A Cloud Security Conundrum: Protecting Your Company from Third-Party Software Supply Chain Gaps

• This Tool Lets Hackers Dox Almost Anyone in the US

• Crypto investor data exposed by a SIM swapping attack against a Kroll employee

• How a Telegram bot helps scammers target victims – Week in security with Tony Anscombe

• Lazarus Employs Public ManageEngine Exploit to Breach Internet Firms

• LockBit 3.0 Ransomware Builder Leak Gives Rise to Hundreds of New Variants

• ThousandEyes Pi4 Wireless Deployment at Black Hat USA

• Akira Ransomware Targeting VPNs without Multi-Factor Authentication

• EPSS and Its Role in Cisco Vulnerability Management Risk Scoring

• Tor turns to proof-of-work puzzles to defend onion network from DDoS attacks

• Build or Buy your own antivirus product

• Kroll Suffers Data Breach: Employee Falls Victim to SIM Swapping Attack

• Human Rights Group Demands Facebook Pay For Its Role In Genocide

• Pros and cons of ChatGPT plugin, Code Interpreter, in education, biology, health

• Smart lightbulb and app vulnerability puts your Wi-Fi password at risk

• Update now! Google Chrome’s first weekly update has arrived

• Teenage members of Lapsus$ ransomware gang convicted

• Cisco Talos Research: New Lazarus Group Attack Malware Campaign Hits UK & US Businesses

• IT Security News Daily Summary 2023-08-25

• Genworth Financial Under Investigation for Data Breach

• Tornado Cash Civil Decision Limits the Reach of the Treasury Department’s Actions while Skirting a Full First Amendment Analysis

• Unveil the Paradox of Encryption with TLS 1.3 in Zero Trust Architectures

• Here’s why this cyber leader still has more room to run, despite recent share-price volatility

• China Unleashes Flax Typhoon APT to Live Off the Land, Microsoft Warns

• Publisher’s Spotlight: Mitiga: The Next Generation of Cloud Incident Response

• Cyber Security Today, Week in Review for the week ending Friday, August 25, 2023

• Top 5 Most Abused Brands By Hackers

• Smart Cities: Utopian Dream, Security Nightmare, Or Political Gimmick?

• EU Safety Laws Start To Bite For TikTok, Instagram, And Others

• North Korean APT Hacks Internet Infrastructure Provider Via ManageEngine Flaw

• Biden Administration Reveals New Crypto Tax Reporting Rules

• XLoader Malware Variant Targets MacOS Disguised as OfficeNote App

• Kroll Employee SIM-Swapped for Crypto Investor Data

• Luna Grabber Malware Targets Roblox Gaming Devs

• Flax Typhoon using legitimate software to quietly access Taiwanese organizations

• Ermetic CNAPP Becomes Available on Google Cloud Marketplace

• ‘Whiffy Recon’ Malware Transmits Device Location Every 60 Seconds

• Defending the Virtual Kingdom: Exploring Modern Cybersecurity Landscapes

• Elevating Data Security: Key Considerations When Transferring Your Digital Workspace

• Publisher’s Spotlight: Cigent: Make Your Data Invisible

• The SEC demands more transparency about Cybersecurity incidents in public companies

• Securely implementing Active Directory on Windows Server 2019

• CloudNordic loses most customer data after ransomware attack

• Donald Trump’s Mug Shot Matters in a World of Fakes

• WinRAR users update your software as 0-day vulnerability is found

• The best VPN routers of 2023: Top picks for fast speeds

• The best VPN services for iPhone and iPad in 2023: Tested and reviewed

• In Other News: Africa Cybercrime Crackdown, Unpatched macOS Flaw, Investor Disclosures

• MOVEit, the biggest hack of the year, by the numbers

• China-linked Flax Typhoon APT targets Taiwan

• How to Secure All Your APIs Through Multiple Deployment Options

• Call of Duty Bid: Microsoft Makes New Bid to Acquire Call of Duty Giant

• Social media companies to stop data scraping

• Mastercard Ends Binance Card Partnership

• ClearSale launches Client Portal to help customers view and manage fraud prevention data

• SaaS Application Security: Why It Matters and How to Get It Right

• Tech Firms Must Now Comply With EU Digital Services Act

• Twelve nations urge social media giants to tackle illegal data scraping

• Kyndryl and Cisco expand partnership to help customers respond to cyber incidents

• Akira Ransomware Unleashes a New Wave of Attacks via Compromised Cisco VPNs

• Google Workspace Unveils AI-Powered Security

• Decentralized Network Friend.tech Faces Controversy After Data Breach

• What is the Difference Between Microsoft Azure vs Amazon AWS?

• Two LAPSUS$ Hackers Convicted in London Court for High-Profile Tech Firm Hacks

• Juice jacking: Is it a real issue or media hype?

• North Korean APT Hacks Internet Infrastructure Provider via ManageEngine Flaw

• Is Bias in AI Algorithms a Threat to Cloud Security?

• Byju’s exposed sensitive student data, including loan details

• How to Choose the Best XDR Solution for Your Organization?

• Business email compromise scams getting more sophisticated: Report

• Cyber Security Today, August 25, 2023 – FBI warning about Barracuda ESG gateways and thousands of more US MOVEit victims

• How to close the IT Talent Gap with a SASE Solution

• Friend.Tech Hit by Cyber Attack

• Cypago Raises $13 Million for GRC Automation Platform

• Lazarus Group exploited ManageEngine vulnerability to target critical infrastructure

• Our Risk Perception Is Broken How Do We Fix It?

• Learn How Your Business Data Can Amplify Your AI/ML Threat Detection Capabilities

• Beyond Cold Calls: Ringless Voicemail As A Personalized Customer Engagement Tool

• Google Workspace Introduces New AI-Powered Security Controls

• Europe is Cracking Down on Big Tech. This Is What Will Change When You Sign On

• Lawmaker Wants Federal Contractors to Have Vulnerability Disclosure Policies

• China-Linked Flax Typhoon Cyber Espionage Targets Taiwan’s Key Sectors

• Navigating Legacy Infrastructure: A CISO’s Actionable Strategy for Success

• What Is a Host Intrusion Detection System (HIDS) and How It Works

• How Does XDR Software Help Security Teams

• XDR Security for MSSPs

• Donald Trump Returns To Twitter To Post Mugshot

• Cloud Hosting Provider Lost all Customer Data Following Ransomware Attack

• Cisco NX-OS Software Flaw Let Attacker Trigger a DoS Attack

• Nearly 1,000 Organizations, 60 Million Individuals Impacted by MOVEit Hack

• Privacy Regulator Warns of Surge in “Text Pest” Cases

• Lockbit leak, research opportunities on tools leaked from TAs

• Hacking Food Labeling Laws

• Hackers Continue to Exploit Barracuda ESG Zero-Day Flaw: FBI Flash Alert

• Researchers Discover Reply URL Takeover Issue in Azure

• Urgent FBI Warning: Barracuda Email Gateways Vulnerable Despite Recent Patches

• Whiffy Recon malware triangulates the position of infected systems via Wi-Fi

• Silicon UK Pulse: Your Tech News Update: Episode 15

• FBI: Barracuda Appliances Still Being Exploited By China

• FBI: Patches for Barracuda ESG Zero-Day CVE-2023-2868 are ineffective

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Lazarus Group Targets Internet Infrastructure and Healthcare with ‘QuiteRAT’ Malware

• What will a service provider do when ransomware attack wipes off all its data

• The Emerging Cyber Threat: SEO Poisoning’s Impact on Healthcare Cybersecurity

• Creative QakBot Attack Tactics Challenge Security Defenses

• Google Workspace: New account security, DLP capabilities announced

• Cybersecurity insurance is missing the risk

• Ransomware dwell time hits new low

• IEEE 802.11az provides security enhancements, solves longstanding problems

• New infosec products of the week: August 25, 2023

• Unrealistic expectations exacerbate the cybersecurity talent shortage

• Trump’s Prosecution Is America’s Last Hope

• Trump’s Prosecution Is America’s Last Hope

• Regulations vs. DevSecOps: Requiem

• FBI: Who was going around hijacking Barracuda email boxes? China, probably

• Malwarebytes acquires Cyrus Security

• Cerby Announces $17M in Series A Funding to Secure Nonstandard Applications

• Critical Insight Releases H1 2023 Report

• Fourth Circuit Decision in Marriott Data Breach Case Kicks the Can Down the Road

• Researchers released PoC exploit for Ivanti Sentry flaw CVE-2023-38035

• How do digital signatures work?

• SevenRooms – 1,205,385 breached accounts

• Discord Notifies Users of Data Breach Impacting 180 Accounts

• IT Security News Daily Summary 2023-08-24

• Too good to be true? That online auction price could be triangulation fraud

• Major US Energy Company Hit by QR Code Phishing Campaign

• Malwarebytes Announces Acquisition of Online Privacy Company Cyrus

• Black Hat USA 2023 Closes on Record-Breaking Event in Las Vega

• Local Facebook Groups Are Being Overrun With Hoax Posts

• US Space Industry More Prone to Foreign Espionage, US Agencies Warn

• Kyndryl and Cisco Expand Partnership Focusing on Cyber Resilience

• Cypago Raises $13M and Unveils its Cyber GRC Automation (CGA) Platform to Simplify GRC Processes

• Chinese-backed APT ‘Flax Typhoon’ Hacks Taiwan with Minimal Malware Footprint

• Smoke Loader Botnet Drops Location Tracker Whiffy Recon Malware

• S3 Ep149: How many cryptographers does it take to change a light bulb?

• Ransomware With an Identity Crisis Targets Small Businesses, Individuals

• The Price of Grandeur: Unveiling the Costs Behind Creating a Triple-A Game

• Google AI in Workspace Adds New Zero-Trust and Digital Sovereignty Controls

• University of Minnesota Confirms Data Breach, Says Ransomware Not Involved

• FBI: Suspected Chinese actors continue Barracuda ESG attacks

• Lazarus APT exploits Zoho ManageEngine flaw to target an Internet backbone infrastructure provider

• Russian Hackers Employ Telekopye Toolkit in Broad Phishing Attacks

• eBay Users Beware Russian ‘Telekopye’ Telegram Phishing Bot

• Recent Vulnerability Puts 3,000 Openfire Servers at Risk of Attack

• The Four Big Risk Categories Every SAAS Application Must Address

• Publisher’s Spotlight: Oligo: Protect Your Open Source Libraries

• Traffic Management and Network Resiliency With Istio Service Mesh

• AWS unveils local cloud zones for exclusive customer use

• What the Hive Ransomware Case Says About RaaS and Cryptocurrency

• The Last Hour Before Yevgeny Prigozhin’s Plane Crash

• Lazarus Group Exploits Critical Zoho ManageEngine Flaw to Deploy Stealthy QuiteRAT Malware

• Kingston IronKey Keypad 200C hardware-encrypted USB Type-C drive released

• NETGEAR launches PR60X Pro Router

• MOVEit Attacks Makes Clop the Most-active Ransomware Threat Actor This Summer

• Wireshark 4.0.8 Release: What’s New!

• A simple idea that could make Android more secure

• North Korea ready to cash out more than $40 million in Bitcoin after summer of attacks, warns FBI

• FBI Flags $40M Crypto Cash-Out Plot By North Korean Hackers

• Location Leak: Christie’s Mistakenly Exposes Whereabouts of Consigned Artworks

• Google allows Workstation actions only with two admin authentication

• Bletchley Park To Host Global AI Safety Summit

• Nvidia Reaps AI Chip Demand As Profit Surges

• Mysterious Malware Uses Wi-Fi Scanning to Get Location of Infected Device

• Cisco Patches Vulnerabilities Exposing Switches, Firewalls to DoS Attacks

• Data of 2.6 Million Duolingo Users Leaked on Hacking Forum

• Lessons learned from the Microsoft Cloud breach

• How to Remove a Lost Device From Your Google Account

• New Study Sheds Light on Adhubllka Ransomware Network

• QR Code Red: Quishing Attacks and How to Prevent Them

• Strengthening Your Cybersecurity: The Power of the Three P’s and Team Training

• New Relic enhances its AIOps capabilities with recommended alerts

• Cloud hosting firms hit by devastating ransomware attack

• Talon unveils digital experience capabilities, equipping IT teams with advanced metrics

• Protecting Sensitive Information Within Translation

• Lapsus$ Teen Hackers Convicted: Unraveling the Grand Theft Auto 6 Leak and High-Profile Cyberattacks

• Tornado Cash Crypto Mixer Devs Charged With Money Laundering

• FBI: Patches For Recent Barracuda ESG Zero-Day Ineffective

• Rockwell ThinManager Vulns Could Expose Industrial HMIs To Attacks

• WinRAR 0-Day That Uses Poisoned JPG And TXT Files Under Exploit Since April

• An Interview with Dasha Deckwerth – Stealth ISS Group

• Role of Artificial Intelligence in Preventing Cyberattacks at K-12 Schools

• Password Protection in the Era of AI-Based Attacks

• FBI: Patches for Recent Barracuda ESG Zero-Day Ineffective

• NIST Publishes Draft Post-Quantum Cryptography Standards

• 5 Best Practices for Implementing Risk-First Cybersecurity

• Why It’s Time To Remove Local Admin Rights For The Safety Of Organisations

• Thousands of Openfire Servers at Risk from Critical CVE

• Microsoft Paint To Get AI Makeover – Report

• Secureworks Discovers Vulnerability In Microsoft Identity Solution

• Critical Insight Reports Fewer Cybersecurity Breaches in Health Care, Yet Victim Numbers Are Up in 2023

• Penetration Testing- Shielding the Web Content Against Hacking

• What are Brute Force Attacks, and How to Protect Your APIs Against them?

• Preventing DNS Tunneling with AI Deep Learning

• Rockwell ThinManager Vulnerabilities Could Expose Industrial HMIs to Attacks

• New Telegram Bot “Telekopye” Powering Large-scale Phishing Scams from Russia

• Duolingo Data Breach: 2.6 Million Users At Risk Of Targeted Phishing Attacks

• Ermetic CNAPP available on Google Cloud Marketplace

• Britain to host world’s first AI safety summit at home of World War II codebreakers

• Pulling the strings

• CloudNordic Faces Severe Data Loss After Ransomware Attack

• North Korea’s Lazarus Group Used GUI Framework to Build Stealthy RAT

• WinRAR security issue more wide-reaching than thought

• Sensitive Data of 10 Million at Risk After French Employment Agency Breach

• eSentire Labs Open Sources Project to Monitor LLMs

• Why The Chainsmokers Invest in—and Party With—Niche Cybersecurity Companies

• WinRAR Security Flaw Exploited in Zero-Day Attacks to Target Traders

• New “Whiffy Recon” Malware Triangulates Infected Device Location via Wi-Fi Every Minute

• The Hidden Dangers of Public Wi-Fi

• Cypago, which aims to automate compliance and governance for companies, raises $13M

• Bitwarden launches E2EE Secrets Manager

• Jury Finds Two Teenagers Were Behind Lapsus$ Crime Spree

• Simplify Secure Enterprise Device Management With QR Codes

• UK Court Concludes Teenager Behind Huge Hacking Campaign

• Hosting Provider CloudNordic Loses All Customer Data in Ransomware Attack

• Traders Targeted by Cybercriminals in Attack Exploiting WinRAR Zero-Day

• Digital Identity Protection Firm SpyCloud Raises $110 Million

• Parmesan Anti-Forgery Protection

• University of Minnesota Reports Massive Data Breach

• Ransomware Vs. Malware: What’s The Difference?

• South Africa claims DdoS Cyber Attack from India because of PM Narender Modi

• NoFilter: Tool that Escalates Privilege Abusing Windows Filtering Platform

• Apple Endorses California ‘Right to Repair’ Bill

• Kali Linux 2023.3 Released: What’s New!

• Cyber Mindfulness Corner Company Spotlight: Egress

• Sextortion Scams Surge 178% in a Year

• Thousands of Unpatched Openfire XMPP Servers Still Exposed to High-Severity Flaw

• ImmuniWeb introduces ImmuniWeb Neuron Mobile, an automated mobile app security testing solution

• Into the Heimdalverse

• St Helens Council Warns of Phishing After Ransomware Breach

• Teens Found Responsible For Lapsus$ Cyber-Attacks

• Lapsus$ member has been convicted of having hacked multiple high-profile companies

• Danish Cloud Hosting Companies Ravaged by Ransomware Attacks

• Attack Dwell Times Fall but Threat Actors Are Moving Faster

• Tornado Cash Founders Charged in Billion-Dollar Crypto Laundering Scandal

• Two teens were among those behind the Lapsus$ cyber-crime spree, jury finds

• Do you know what your supply chain is and if it is secure?

• GroundPeony Group Exploiting Zero-day Flaw to Attack Government Agencies

• More than 3,000 Openfire servers exposed to attacks using a new exploit

• Kali Linux 2023.3 released: Kali NetHunter app redesign, 9 new tools, and more!

• Does a secure coding training platform really work?

• Google’s Enhanced Safe Browsing Explained

• Securing your cloud networks: Strategies for a resilient infrastructure

• How digital identity protects connected cars

• AI and the evolution of surveillance systems

• Webinar: The external attack surface & AI’s role in proactive security

• Lack of visibility into cloud access policies leaves enterprises flying blind

• What Is Data Privacy? The Secret to Safe Surfing

• Personal vs. Sensitive Personal Information: Differences & Examples

• 15 Tips to Protect Personal Information Online for 2023

• Prelude Security Tackles Continuous Security Testing in Containers

• U.S. division of CIBC apparently sideswiped by MOVEit hack

• Adobe ColdFusion vulnerability exploited in the wild

• DarkGate reloaded via malvertising and SEO poisoning campaigns

• Ivanti Sentry critical vulnerability—don’t play dice, patch

• Out from the Shadows: SOC Teams Take Their Seat with the “Superheroes”

• DoJ charged Tornado Cash founders with laundering more than $1 billion

• Configuring SSO Using WSO2 Identity Server

• Tornado Cash ‘laundered over $1B’ in criminal crypto-coins

• New Akira Ransomware Targets Businesses via Exploited CISCO VPNs

• OT and IT Visibility and Efficiency Barriers

• 6 Best IT Asset Management (ITAM) Software 2023

• Ransomware Reaches New Heights

• IT Security News Daily Summary 2023-08-23

• Facebook Once Again Says It Will Roll Out End-To-End Encryption By End Of Year

• Threat Actor Exploits Zero-Day in WinRAR to Target Crypto Accounts

• API Misuse: Hacker Exposes 2.6M Duolingo Users’ Emails & Names

• AWS Outages: Is North Virginia the Least Reliable AWS Region and Why?

• Sophos: RDP played a part in 95% of attacks in H1 2023

• FBI Warns of Cryptocurrency Heists by North Korea’s Lazarus Group

• North Korea may be itching to sell $40m of purloined Bitcoin

• network vulnerability scanning

• Meta to roll out end-to-end encryption for Messenger by the end of 2023

• Using WinRAR? Be sure to patch against these code execution bugs…

• FBI identifies wallets holding cryptocurrency funds stolen by North Korea

• Microsoft’s Rise as a Cybersecurity Powerhouse

• Brazil’s Top Escort Service Exposes Millions of Escort and Client Data

• How to Create an Incident Response Plan (+ Free Template)

• Window Snyder talks striking out on her own in cybersecurity at TechCrunch Disrupt

• Danish cloud host says customers ‘lost all data’ after ransomware attack

• The best identity theft protection & credit monitoring services of 2023: Protect your data

• Name That Toon: Swift as an Arrow

• Google plans to bring AI-fueled security enhancements to Google Workspace

• Attackers exploited WinRAR zero-day for months to steal money from brokers (CVE-2023-38831)

• SpyCloud raises $110 million to accelerate identity threat protection

• Google to add more granular security controls to Workspace

• India’s Chandrayaan-3 Lands Successfully On Moon

• Hackers Threaten Patients Following a Massive Cyberattack on a Hospital

• Google introduces 11 new security features for Workspace (some AI-powered)

• What is the Bitwarden Master Password re-prompt and how do you enable it?

• XLoader MacOS Malware Variant Returns With OfficeNote Facade

• The Role of Cryptography in Data Safety

• Google Removes 22 Malicious Android Apps Exposed by McAfee

• U.S. Intelligence Reports: Spies and Hackers are Targeting US Space Industry

• Tesla Data Breach: 75,000 Users Affected Due to Insider Wrongdoing

• Cyberattack Strikes Australian Energy Software Company Energy One

• VMware, NVIDIA team up, launch major GenAI initiative at VMware Explore

• Mobile threat defense or bust

• How Malware Sandboxes Strengthen Your Cybersecurity

• Remote access detection in 2023: Unmasking invisible fraud

• Cybersecurity Companies Report Surge in Ransomware Attacks

• FBI Finds 1,580 Bitcoin in Crypto Wallets Linked to North Korean Hackers

• Smart Cities: Utopian Dream, Security Nightmare, or Political Gimmick?

• Thoma Bravo Merges ForgeRock with Ping Identity

• WinRAR Vulnerability Affects Traders Worldwide

• New HiatusRAT Malware Campaign Targets U.S. Defense Department`s Server

• Headlines about ransomware making waves on Google’s trending news

• Artificial Intelligence and USBs Drive 8% Rise in Cyber-Attacks

• Attackers Dangle AI-Based Facebook Ad Lures to Hijack Business Accounts

• Nagarro-Seclore Secure Collaboration Solution ensures business compliance

• Elon Musk To Axe Headlines From News Links On Twitter

• Salt Security Partners with API Testing Leaders, introduces STEP programme

• An Essential Guide to XDR Software

• Ransomware attacks broke records in July, mainly driven by this one group

• 3,000 Openfire Servers Exposed to Attacks Targeting Recent Vulnerability

• The End of “Groundhog Day” for the Security in the Boardroom Discussion?

• Malwarebytes releases EDR Extra Strength for endpoint protection

• LOKKER launches On-demand Website Privacy Audit for healthcare organizations

• Spear Phishing Prevention: 10 Ways to Protect Your Organization

• 5 Early Warning Indicators That Are Key to Protecting National Secrets

• Learning the lessons from cybersecurity trash fires at TC Disrupt 2023

• Court Finds Teenagers Carried Out Lapsus Hacking Spree

• MacOS Variant Of XLoader Written In C Observed In The Wild

• Guidance On Migrating To Post-Quantum Cryptography Released By US

• Exploitation Of Ivanti Sentry Zero-Day Confirmed

• Surge in Cybercrime: Check Point 2023 Mid-Year Security Report Reveals 48 Ransomware Groups Have Breached Over 2,200 Victims

• Thousands of High-Risk Incidents Neutralized Using AI

• Meta Set to Enable Default End-to-End Encryption on Messenger by Year End

• North Korean Affiliates Suspected in $40M Cryptocurrency Heist, FBI Warns

• St Helens Council Targeted In Suspected Ransomware Attack

• First Weekly Chrome Security Update Patches High-Severity Vulnerabilities

• US Government Publishes Guidance on Migrating to Post-Quantum Cryptography

• How to Talk to Your Kids About Social Media and Mental Health

• FBI says North Korean hackers preparing to cash out after high-profile crypto hacks

• Bogus OfficeNote app delivers XLoader macOS malware

• Surge in identity crime victims reporting suicidal thoughts

• BeyondID launches BeyondID SOC

• Exploring the Top ManageEngine Competitors & Alternatives in 2023

• New Ivanti Zero-Day Vulnerability Allows Hackers to Access Sensitive APIs

• Cyber Security Today, August 23, 2023 – Public exposure doesn’t deter this attacker, and more

• Ensuring Cyber Resilience: The Critical Role of Threat Modeling in Software Security

• FTX’s Sam Bankman-Fried Surviving On ‘Bread And Water’

• Doubling of Identity Theft Victims With Suicidal Thoughts

• Syrian Threat Actor EVLF Unmasked as Creator of CypherRAT and CraxsRAT Android Malware

• Agile Approach to Mass Cloud Credential Harvesting and Crypto Mining Sprints Ahead

• The ‘US Cyber Trust Mark’ finally gives device makers a reason to spend big on security

• Personal Data Privacy: Trends, Challenges, and Solutions

• Researchers Demonstrate Apple Device Spoofing At Def Con 2023

• Microsoft Makes Concession To Win UK Activision Approval

• Carderbee Hacking Group Uses Legitimate Software in Supply Chain Attack

• Canadian PM Trudeau Slams Facebook Amid Wildfire Crisis

• Threat Actors Leak 2.6 Million DuoLingo Users` Data on Hacking Forum

• Choosing the Right Document Format – Business Guide 2023

• Apache XML Graphics Batik Flaw Exposes Sensitive Information

• Open redirect flaws increasingly exploited by phishers

• Security Onion 2.4: Free, open platform for defenders gets huge update

• Meta Releases Web Version Of Threads App

• Spacecolon Toolset Fuels Global Surge in Scarab Ransomware Attacks

• Five processes every organisation needs for successful BizDevOps

• Industrial networks need better security as attacks gain scale

• Exploitation of Ivanti Sentry Zero-Day Confirmed

• Cybersecurity’s Crucial Role Amidst Escalating Financial Crime Risks

• Experian Pays $650,000 to Settle Spam Claims

• Hackers exploit WinRAR zero-day bug to steal funds from broker accounts

• TP-Link Smart Bulb Spills Wi-Fi Passwords

• Carderbee APT targets Hong Kong orgs via supply chain attacks

• Why performing security testing on your products and systems is a good idea

• Over a Dozen Malicious npm Packages Target Roblox Game Developers

• TP-Link Tapo L530E smart bulb flaws allow hackers to steal user passwords

• Criminals go full Viking on CloudNordic, wipe all servers and customer data

• Meta plans to roll out default end-to-end encryption for Messenger by the end of the year

• Facebook users have little time left to make $725m data privacy claims

• Leveraging ChatGPT to Alleviate Stress on Cybersecurity Teams

• Scarabs colon-izing vulnerable servers

• Bitwarden launches Secrets Manager for teams

• Anticipating the next wave of IoT cybersecurity challenges

• How the downmarket impacted enterprise cybersecurity budgets

• Duolingo – 2,676,696 breached accounts

• How to make your phishing campaign a success

• Get the AT&T Cybersecurity Insights Report: Focus on US SLED

• ProxyNation: The dark nexus between proxy apps and malware

• Large-scale breaches overshadow decline in number of healthcare data incidents

• Cybercriminals turn to AI to bypass modern email security measures

• Profile Stealers Spread via LLM-themed Facebook Ads

• CarderBee hacking group targets organizations in Asia

• Threat actor targeted DOD contracting website

• Meta’s “massively multilingual” AI model translates up to 100 languages, speech or text

• How ChatGPT and Large Language Models Can Impact the Future of Cybersecurity

• A New Supply Chain Attack Hit Close to 100 Victims—and Clues Point to China

• Yet Another Glitch In The Matrix

• Update now! WinRAR files can be abused to run malware

• Alert Prioritization and Guided Remediation: The future of EDR

• What is a Managed Security Service Provider? MSSPs Explained

• More Than Half of Browser Extensions Pose Security Risks

• Learning Management System: What is it and Why do you need it?

• How AI brings greater accuracy, speed, and scale to microsegmentation

• Generative AI: Cybersecurity Weapon, But Not Without Adaptable, Creative (Human) Thinkers

• Grip Security Raising $41M Series B Led by Third Point Ventures

• Study: More Than Half of Browser Extensions Pose Security Risks

• ‘Millions’ of spammy emails with no opt-out? That’ll cost you $650K, Experian

• IT Security News Daily Summary 2023-08-22

• Adobe Patches Critical Deserialization Vulnerability, but Exploits Persist

• Absolute Dental Services Notifies Patients of Data Security Incident

• Forescout Joins MISA and Announces Integration With Microsoft Sentinel

• Proposed UN Cybercrime Treaty Threatens to be an Expansive Global Surveillance Pact

• Ivanti issues fix for third zero-day flaw exploited in the wild

• Controversial Cybercrime Law Passes in Jordan

• Fleeceware drains money from account slowly over time – here’s how to spot it

• Lawmakers Blast Facebook For Still Allowing Sale Of Deadly Recalled Product

• EFF Benefit Poker Tournament at DEF CON 31

• Luna Grabber Malware Hits Roblox Devs Through npm Packages

• Newer, Better XLoader Signals a Dangerous Shift in macOS Malware

• Proton debuts VPN for Business, enabling IT departments to control access to content and apps

• Smart light bulbs could give away your password secrets

• Publisher’s Spotlight: Black Hat USA 2023 Closes on Record-Breaking Event in Las Vegas

• How to Prevent Data Breaches: Data Breach Prevention Tips

• Defense contractor Belcan leaks admin password with a list of flaws

• Tourists Give Themselves Away by Looking Up. So Do Most Network Intruders.

• Software Makers May Face Greater Liability in Wake of MOVEit Lawsuit

• Bracing for the AI-Driven Cybersecurity Landscape of Tomorrow

• Akira ransomware gang spotted targeting Cisco VPN products to hack organizations

• SEC fines fintech crypto fund that promised 2,700% returns

• When Leadership Style Is a Security Risk

• What is post-quantum cryptography and why is it important?

• Leveraging AT&T Cybersecurity Consulting for a robust Zero Trust Center of Excellence

• Why is API security the next big thing in Cybersecurity?

• Do It for You: Commit to Cybersecurity Certification Now

• Critical Insight Report: 15% Drop in Breaches, 31% Surge in Victims

• Application Security From Code to Cloud – An Interview with Lotem Guy at Cycode

• New QwixxRAT Windows Malware Spreads Through Telegram And Discord

• Researchers Uncovered the Developer of CypherRAT and CraxsRAT

• Scarab Ransomware Deployed Worldwide Via Spacecolon Toolset

• 16 Remote Access Security Best Practices to Implement

• Bitsight Security Ratings

• Cyber Attacks that impacted billions and millions of online accounts

• US ARPA-H Initiative Counters Healthcare Cyber-Threats

• 90% of Consumers Worry Cybersecurity’s Future Is in Jeopardy if Students Aren’t Exposed to the Field at an Earlier Age

• Kyndryl becomes a VMware Cross-Cloud managed services provider

• Enhanced VMware Cloud helps customers modernize, optimize, and protect their businesses

• SA may Surpass the ‘Nigerian Prince,’ Becoming Africa’s New Cybercrime Capital

• DDoS Attacks in a Kubernetes Environment: Detection and Mitigation

• Ivanti Sentry Flaw: Let Attackers Access Critical APIs Used for Configuration

• One simple way to cut ransomware recovery costs in half

• TP-Link Smart Bulb Vulnerabilities Expose Households to Hacker Attacks

• CISA Warns Of Another Exploited Adobe Coldfusion Vulnerability

• TP-Link Smart Bulb Vulns Expose Households To Hacker Attacks

• Apple’s Defense Against Apps Vandalizing Other Apps Is Still Broken, Developer Claims

• Crypto Botnet On X Is Powered By ChatGPT

• 0-Day In Ivanti’s Sentry Gateway Actively Exploited

Generated on 2023-09-01 00:01:47.398747