IT Security News Weekly Summary – Week 17

• IT Security News Daily Summary 2024-04-28

• ICICI Bank exposed credit card data of 17000 customers

• USENIX Security ’23 – SandDriller: A Fully-Automated Approach for Testing Language-Based JavaScript Sandboxes

• Hackers Claim to Have Infiltrated Belarus’ Main Security Service

• Deceptive npm Packages Employed to Deceive Software Developers into Malware Installation

• The Tech Landscape: Rubrik, TikTok, and Early-Stage Startups

• Okta warns of unprecedented scale in credential stuffing attacks on online services

• How to Erase The Personal Details Google Knows About You

• What Would a TikTok Ban Mean?

• Okta Warns of Unprecedented Surge in Proxy-Driven Credential Stuffing Attacks

• 9 Best Password Managers (2024): Features, Pricing, and Tips

• Security Affairs newsletter Round 469 by Pierluigi Paganini – INTERNATIONAL EDITION

• RSAC 2024 Innovation Sandbox | Antimatter: A Comprehensive Data Security Management Tool

• Good Security Is About Iteration, Not Perfection.

• TCS CEO Predicts AI Revolution to Decimate India’s Call Center Industry in Just One Year

• Safeguarding Your Digital Future: Navigating Cybersecurity Challenges

• Targeted operation against Ukraine exploited 7-year-old MS Office bug

• Week in review: Two Cisco ASA zero-days exploited, MITRE breach, GISEC Global 2024

• Cybercriminals Exploit Web Hosting Platforms to Spread Malware

• IT Security News Daily Summary 2024-04-27

• USENIX Security ’23 – Beyond Typosquatting: An In-depth Look at Package Confusion

• Godfather Banking Trojan Multiplies, Spreading to 1.2K Variants in 57 Nations

• Hackers may have accessed thousands of accounts on the California state welfare platform

• Here’s How NFTs Can Transform Asset Management

• Junk Ransomware: Getting the Job Done For Hackers

• Major phishing-as-a-service platform disrupted – Week in security with Tony Anscombe

• Breaking Down Cybersecurity: The Real Meaning Behind the Jargon

• GitGuardian Researchers Find Thousands of Leaked Secrets in PyPI (Python Package Index) Packages

• The GuptiMiner Attack: Lessons Learned from a Five-Year Security Breach

• Cryptocurrency Chaos: El Salvador’s Bitcoin Wallet Code Leaked, Privacy at Risk

• Ukraine Targeted in Cyberattack Exploiting 7-Year-Old Microsoft Office Flaw

• School Employee Allegedly Framed a Principal With Racist Deepfake Rant

• Russia Vetoed a UN Resolution to Ban Space Nukes

• What is General Data Protection Regulation Act (GDPR)?

• Thousands of Qlik Sense Servers Open to Cactus Ransomware

• Brokewell Android malware supports an extensive set of Device Takeover capabilities

• FBI: Fraudsters Using Fake Online Dating Verification Apps to Scam Lovers

• DHS Establishes AI Safety Board with Tech Titans and Experts

• Zero-Day from 2017 Used Along With Cobalt Strike Loader in Unholy Alliance

• Bogus npm Packages Used to Trick Software Developers into Installing Malware

• Cloud Monitor Automation Improves K-12 Cybersecurity Training & Awareness

• PREVIEW: CISO Series Game Show During RSA Week

• Tracking Energy Consumption at the Cisco Store

• Computer scientists unveil novel attacks on cybersecurity

• IT Security News Daily Summary 2024-04-26

• Security review for Microsoft Edge version 124

• USENIX Security ’23 – UVSCAN: Detecting Third-Party Component Usage Violations in IoT Firmware

• Facebook Blasted By Regulators For Holding Onto Sensitive User Data For Too Long

• Kaiser Permanente handed over 13.4M people’s data to Microsoft, Google, others

• 7-Year-Old 0-Day in Microsoft Office Exploited to Drop Cobalt Strike

• Risk & Repeat: Change Healthcare’s bad ransomware bet

• Cyber Security Today, Week in Review for week ending Friday, April 26, 2024

• Mitigating the biggest threats in supply chain security

• Cybersecurity in the Healthcare Sector: Best Practices for Preventing Today’s Attacks

• The best security keys of 2024: Expert tested

• BeyondTrust Report: Microsoft Security Vulnerabilities Decreased by 5% in 2023

• Kaiser Permanente shared 13.4M people’s data with Microsoft Bing, Google, others

• USENIX Security ’23 – Union Under Duress: Understanding Hazards of Duplicate Resource Mismediation in Android Software Supply Chain

• Bridging the Gap: Uniting Development and AppSec

• Understanding Cybersecurity Vulnerabilities

• Network Security Architecture: Best Practices & Tools

• Experience Eco-Friendly Data Center Efficiency with Cisco’s Unified Computing System (UCS)

• What makes Starmus unique? A Q&A with award-winning filmmaker Todd Miller

• April 2024 Web Server Survey

• How to Get into Cybersecurity: A Beginner’s Guide

• Hackers Utilize Antivirus Update Mechanism to Deploy GuptiMiner Malware

• Google Enterprise Security Program offers enhanced Malware and Phishing protection

• UK AI Security Firm Darktrace Acquired By Private Equity Group

• Second time lucky for Thoma Bravo, which scoops up Darktrace for $5.3B

• Is Online Banking Truly Safe? Understanding the Safety Loopholes in Bank Websites

• UnitedHealth Paid Ransom After Massive Change Healthcare Cyber Assault

• DPRK Hackers Compromise South Korean Defense Contractors

• Banking Malware “Brokewell” Hacks Android Devices, Steals User Data

• General Motors Under Fire for Secretly Spying on Drivers

• 750 Million Vulnerable To Snooping From Chinese Keyboard Apps

• Millions Of IPs Remain Infected By USB Worm Years After Its Creators Left It For Dead

• Over 1,400 CrushFTP Instances Vulnerable To Exploited 0-Day

• Powerful Brokewell Android Trojan Allows Device Takeover

• Severe Flaws Disclosed in Brocade SANnav SAN Management Software

• Falcon Fund in Focus: Nagomi Helps Customers Maximize Their Cybersecurity Investments

• Evolving Broadband Networks with Cisco Subscriber Edge

• Despite complaints, Apple hasn’t yet removed an obviously fake app pretending to be RockAuto

• Experts warn of an ongoing malware campaign targeting WP-Automatic plugin

• Self-Spreading PlugX USB Drive Malware Plagues Over 90k IP Addresses

• Over 1,400 CrushFTP Instances Vulnerable to Exploited Zero-Day

• Powerful ‘Brokewell’ Android Trojan Allows Attackers to Takeover Devices

• Microsoft Beats Expectations Thanks To AI Investments

• Feds Bust Privacy-Centric Samourai Wallet Over BTC Money Laundering

• CISA’s Efforts Towards Software Understanding

• Cybersecurity Insights with Contrast CISO David Lindner | 4/26/24

• Agile by Design: Cybersecurity at the Heart of Transformation

• Over 850 Vulnerable Devices Secured Through CISA Ransomware Program

• Ensuring the Security and Efficiency of Web Applications and Systems

• NETGEAR buffer Overflow Vulnerability Let Attackers Bypass Authentication

• 7 Essentials Every Data Security Posture Management (DSPM) Must Have

• APIContext’s Global Cloud API Performance Report Show A Decline In Cloud API Availability

• Enhancing Cybersecurity Defenses: The role of Voice Cloning in Penetration Testing

• Integrated Residential Security Solutions to Employ in 2024

• Thoma Bravo to take UK cybersecurity company Darktrace private in $5B deal

• Cryptocurrencies and cybercrime: A critical intermingling

• New Brokewell Malware Takes Over Android Devices, Steals Data

• Darktrace to be Taken Private in $5.3 Billion Sale to Thoma Bravo

• In Other News: China Hacked Volkswagen, DDoS Service Shutdown, Rubrik IPO

• UK’s Investigatory Powers Bill to become law despite tech world opposition

• 5000+ CrushFTP Servers Hacked Using Zero-Day Exploit

• Kaiser Permanente data breach may have impacted 13.4 million patients

• Long Article on GM Spying on Its Cars’ Drivers

• Cyber Security Today, April 26, 2024 – Patch warnings for Cisco ASA gateways and a WordPress plugin

• ByteDance Would Rather Shutter TikTok US, Than Sell – Report

• AeroNet Wireless Unveils 10Gbps Internet Plan in Puerto Rico, Revolutionising Telecom Industry

• 13,142,840 DDoS Attacks Targeted Organization Around The Globe

• The ultimate cyber spring-cleaning checklist

• Cato Networks to Showcase New Security Evasion Tactics at RSA Conference 2024

• Godfather Banking Trojan Spawns 1.2K Samples Across 57 Countries

• Palo Alto Networks Outlines Remediation for Critical PAN-OS Flaw Under Attack

• New ‘Brokewell’ Android Malware Spread Through Fake Browser Updates

• 10 Critical Endpoint Security Tips You Should Know

• Hackers outsmart smart locks

• Researchers Found 18 Vulnerabilities in Brocade SANnav

• Critical WordPress Automatic Plugin Vulnerability Exploited to Inject Backdoors

• Cyber Security Headlines: Google postpones cookies, Brocade vulnerability warning, ICICI card gaffe

• Hackers Exploit Old Microsoft Office 0-day to Deliver Cobalt Strike

• Autodesk Hosting PDF Files Used in Microsoft Phishing Attacks

• Bitwarden launches passkeys support in mobile apps for Android and iOS

• 8 Binge-Worthy Cybersecurity Podcasts in 2024

• Over 1,400 CrushFTP internet-facing servers vulnerable to CVE-2024-4040 bug

• ThreatLocker Raises $115M in Series D Funding

• Cyber Security Today, April 26, 2024 – Patch warnings for Cisco ASA gateways and a WordPress plugin

• Researchers Sinkhole PlugX Malware Server With 2.5 Million Unique IPs

• Ring to Pay Out $5.6m in Refunds After Customer Privacy Breach

• Implementing ISO 27001:2022 Annex A.18 – Compliance

• Four trends to top the CISO’s packed agenda

• Microsoft Publicly Releases MS-DOS 4.0 Source Code

• Sweden’s liquor supply severely impacted by ransomware attack on logistics company

• Google Facebook ads are deceptive and information stealing

• Navigating the Rising Tide of Cyber Attacks: Lessons from recent Cyber Incidents

• New SSLoad Malware Combined With Tools Hijacking Entire Network Domain

• Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites

• Flaws in Chinese keyboard apps leave 750 million users open to snooping, researchers claim

• What is Network Pen Testing?

• Unveiling Ubuntu Noble Numbat- A Deep Dive into Desktop 24.04 LTS

• LSA Whisperer: Open-source tools for interacting with authentication packages

• Most people still rely on memory or pen and paper for password management

• What AI can tell organizations about their M&A risk

• Piping Rock – 2,103,100 breached accounts

• Breaking down the numbers: Cybersecurity funding activity recap

• New infosec products of the week: April 26, 2024

• ISC Stormcast For Friday, April 26th, 2024 https://isc.sans.edu/podcastdetail/8956, (Fri, Apr 26th)

• How to Migrate from FedRAMP Rev 4 to FedRAMP Rev 5

• OpenAI’s GPT-4 Can Autonomously Exploit 87% of One-Day Vulnerabilities, Study Finds

• How to change your IP address, why you’d want to – and when you shouldn’t

• NodeZero: Testing for Exploitability of Palo Alto Networks CVE-2024-3400

• Cops cuff man for allegedly framing colleague with AI-generated hate speech clip

• North American Developers Optimistic About Generative AI and Code Security

• IT Security News Daily Summary 2024-04-25

• Ring dinged for $5.6M after, among other claims, rogue insider spied on ‘pretty girls’

• AeroNet Wireless Launches 10Gbps Internet Plan: A Landmark Moment in Puerto Rico’s Telecommunications Industry

• Rubrik’s shares end trading up almost 16% on the company’s public debut

• Health insurance giant Kaiser will notify millions of a data breach after sharing patients’ data with advertisers

• CISA adds Cisco ASA and FTD and CrushFTP VFS flaws to its Known Exploited Vulnerabilities catalog

• What makes Starmus unique? – A Q&A with award-winning filmmaker Todd Miller

• Health insurance giant Kaiser notifies millions of a data breach

• Oracle Plans To Relocate HQ To Nashville

• USENIX Security ’23 – LibScan: Towards More Precise Third-Party Library Identification for Android Applications

• These SMBs are hot threat targets but they’re shrugging off security help

• AI Adoption Prompts Security Advisory from NSA

• N.A. Developers Optimistic About Generative AI and Code Security

• Net neutrality has been restored

• The Role of Threat Intelligence in Financial Data Protection

• The private sector probably isn’t coming to save the NVD

• disaster recovery (DR)

• North Korea’s Lazarus Group Deploys New Kaolin RAT via Fake Job Lures

• Cyber Hygiene Helps Organizations Mitigate Ransomware-Related Vulnerabilities

• Rubrik’s shares climb 20% in its public debut

• Two cuffed in Samourai Wallet crypto dirty money sting

• Meta Declines On Heavy AI Spending Plans, Despite Strong Q1

• Analyze Malicious Powershell Scripts by Running Malware in ANY.RUN Sandbox

• Women in Cybersecurity: ISC2 Survey Shows Pay Gap and Benefits of Inclusive Teams

• Is Your VPN Safe? Or Can It be Hacked?

• Wordfence Intelligence Weekly WordPress Vulnerability Report (April 15, 2024 to April 21, 2024)

• Facebook end to end encryption a Boon or a Bane

• Google Delays Removal Of Third-Party Cookies, Again

• “Junk gun” ransomware: the cheap new threat to small businesses

• A Five-Phase Strategy for Embracing Industry 4.0 with Cisco

• The CISO’s Top Priority: Elevating Data-Centric Security

• Predictive Security Startup BforeAI Raises $15 Million

• It’s All About Data: How to Drive Secure Use of AI

• ToddyCat APT Is Siphoning Data on ‘Industrial Scale’

• Discord Users’ Privacy at Risk as Billions of Messages Sold Online

• The P25 Steering Committee, the Compliance Assessment Process and Procedures Task Group (CAPPTG), and the Joint SAFECOM-NCSWIC P25 User Needs Working Group (UNWG) release Project 25 Link Layer Encryption Informational Session

• The best VPN routers of 2024

• CISA Releases Eight Industrial Control Systems Advisories

• Hitachi Energy MACH SCM

• Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC

• Multiple Vulnerabilities in Hitachi Energy RTU500 Series

• Siemens RUGGEDCOM APE1808 Devices Configured with Palo Alto Networks Virtual NGFW

• Salt Security Enhances API Security Platform with OAuth Protection Package

• Ransomware Roundup – KageNoHitobito and DoNex

• How HTTP/2 Persistent Connections Help Improve Performance and User Experience

• Phishing Campaigns Targeting USPS See as Much Web Traffic as the USPS Itself

• Tesla Posts Biggest Revenue Drop Since 2012

• Navigating the Evolving Threat Landscape: Addressing 2024 CISO and Security Team Goals with MixMode

• Check Point Awarded AI Security Innovator of the Year at GISEC

• 3 ways AI is transforming cloud security, according to experts

• CISA adds Microsoft Windows Print Spooler flaw to its Known Exploited Vulnerabilities catalog

• Russia, Iran Pose Most Aggressive Threat To 2024 Election

• Palo Alto Networks Shares Remediation Advice

• FTC Sending $5.6 Million To Ring Customers Over Security Failures

• Nation-State Hackers Exploit Cisco Firewall Zero Days To Backdoor Government Networks

• Ring agrees to pay $5.6 million after cameras were used to spy on customers

• Autodesk Drive Abused in Phishing Attacks

• Palo Alto Networks Shares Remediation Advice for Hacked Firewalls

• US Takes Down Illegal Cryptocurrency Mixing Service Samourai Wallet

• NDR in the Modern Cybersecurity Landscape

• NIST’s role in the global tech race against AI

• How to turn on Private DNS Mode on Android (and why you should)

• Russia, Iran pose most aggressive threat to 2024 elections, say infoseccers

• Cyberattack Fallout: UnitedHealth Reveals Personal Data Breach Impact

• Unveiling Vulnerabilities in Microsoft PlayReady DRM: Impact on Streaming Platforms

• Stellar Cyber and Acronis team up to provide optimized threat detection solutions for MSPs

• Google Patches Critical Chrome Vulnerability and Additional Flaws

• Beware! Zero-click RCE Exploit for iMessage Circulating on Hacker Forums

• DOJ arrested the founders of crypto mixer Samourai for facilitating $2 Billion in illegal transactions

• Interview: Cydea’s Risk Management Platform, Understanding Not Eliminating Risk

• Female Tech Duo take Flight to Dubai to Launch the future of Cyber Leadership

• State-Sponsored Espionage Campaign Exploits Cisco Vulnerabilities

• The Importance of Data Hygiene with OpenText

• Mastering VirusTotal: Certification Course

• New DragonForce Ransomware Emerged From The Leaked LOCKBIT Builder

• Ex-NSA hacker and ex-Apple researcher launch startup to protect Apple devices

• The Student-Centric Experience: Technologies

• Data Breach Search Engines

• IBM to buy HashiCorp in $6.4 billion cash deal, expanding cloud portfolio

• Edgio Client-Side Protection enables organizations to secure critical customer data

• Endpoint Security Firm ThreatLocker Raises $115 Million in Series D Funding

• Vulnerabilities Expose Brocade SAN Appliances, Switches to Hacking

• FTC Sending $5.6 Million in Refunds to Ring Customers Over Security Failures

• WhyLabs AI Control Center offers teams real-time control over their AI applications

• Dropzone AI raises $16.85 million to combat advanced AI attacks

• Talos IR trends: BEC attacks surge, while weaknesses in MFA persist

• Popular File Transfer Software CrushFTP Hit by Zero-Day Exploit

• India’s ICICI Bank exposed thousands of credit cards to ‘wrong’ users

• Coalition Finds More Than Half of Cyber Insurance Claims Originate in the Email Inbox

• AI-driven cyber attacks to be the norm within a year, say security leaders

• How a YouTube Content Filter Can Give Your District More Control

• ESET integrates with Arctic Wolf to provide greater security visibility

• Network Threats: A Step-by-Step Attack Demonstration

• Apple iPhone Q1 Sales In China Fall 19 Percent, Says Counterpoint

• JudgeO Online Code Editor Flaw Let Attackers Execute Code as Root User

• The Rise of Large-Language-Model Optimization

• Sublime Security secures $20 million to strengthen cloud email security and visibility

• DOJ Arrests Founders of Crypto Mixer Samourai for $2 Billion in Illegal Transactions

• DragonForce Ransomware Group Uses LockBit’s Leaked Builder

• Attackers Leverage Black Hat SEO Techniques to Distribute Info-Stealer Malware

• IBM Acquiring HashiCorp for $6.4 Billion

• 56% of cyber insurance claims originate in the email inbox

• 11% of Cybersecurity Teams Have Zero Women

• Cyber Security Headlines: Chinese keyboard flaws, hacked news story, TikTok on the clock

• Should CISOs Be More Empathetic Towards Salespeople?

• Dropbox announces a number of security and data protection features

• Anatomy IT’s new Security Suite targets healthcare cybersecurity threats, improves incident response

• President Biden Signs TikTok Ban Or Divest Bill Into Law

• Vulnerabilities in Microsoft’s PlayReady DRM Could Enable Illegal Movie Downloads From Streaming Services

• Ring Customers Get $5.6 Million in Privacy Breach Settlement

• What to do in the age of the critical breach

• Appdome upgrades MOBILEBot Defense for tailored WAF integration

• AuditBoard AI automates important tasks for security teams

• Online Banking Security Still Not Up to Par, Says Which?

• Cyber Attack Defenders Up For Battle: Huge Uptick In Timely Detections

• Get a Lifetime Subscription of FastestVPN for just $40

• Cyber Attack Defenders Up For Battle: Huge Uptick In Timely Attack Detections

• Google fixed critical Chrome vulnerability CVE-2024-4058

• A System Administrator’s Challenges in Patch Management

• MITRE Breached – Hackers Chained 2 Ivanti Zero-days to Compromise VPN

• Patch Now! CrushFTP Zero-day Lets Attackers Download System Files

• Report: Security Leaders Braced for Daily AI-Driven Attacks by Year-End

• ArcaneDoor Hackers Exploit Cisco Zero-Days to Breach Government Networks

• Nagomi Security raises $30 million to help security teams improve their level of protection

• Fireblocks expands DeFi suite with threat detection features

• BEC and Fund Transfer Fraud Top Insurance Claims

• Alert! Cisco Releases Critical Security Updates to Fix 2 ASA Firewall 0-Days

• Feds Accuse Founders of Cryptocurrency Mixer of ‘Large-Scale Money Laundering’

• BforeAI raises $15 million to prevent attacks before they occur

• Pakistani APT Hackers Attacking Indian Govt Entities With Weaponized Shortcut Files

• Maping NIS2 requirements to the ISO 27001:2022 framework

• “You Can’t Protect What You Can’t See” Still Rings True. Why Observability Now.

• ITDR vs ISPM: Which Identity-first Product Should You Explore?

• New Microsoft Incident Response guide helps simplify cyberthreat investigations

• 5 ways a CNAPP can strengthen your multicloud security environment

• High Performance Podcast Duo to Unveil Secrets of Success at Infosecurity Europe 2024

• Unplugging PlugX: Sinkholing the PlugX USB worm botnet

• Indian bank’s IT is so shabby it’s been banned from opening new accounts

• State-Sponsored Hackers Exploit Two Cisco Zero-Day Vulnerabilities for Espionage

• Google Postpones Third-Party Cookie Deprecation Amid U.K. Regulatory Scrutiny

• Authorities Warned that Hackers Are Exploiting Flaws in CISCO ASA VPNs

• Maximum Severity Flowmon Bug has a Public Exploit, Patch Now

• Hackers Exploit Cisco Firewall Zero-Days to Hack Government Networks

• CISA Warns of Cisco and CrushFTP Vulnerabilities Being Actively Exploited

• Ransomware Attacks Shake Automotive and Beverage Industries

• Google Meet opens client-side encrypted calls to non Google users

• Applying DevSecOps principles to machine learning workloads

• Chinese, Russian Espionage Campaigns Increasingly Targeting Edge Devices

• Sifting through the spines: identifying (potential) Cactus ransomware victims

• 25 cybersecurity AI stats you should know

• Overcoming GenAI challenges in healthcare cybersecurity

• What is Penetration Testing: A comprehensive business guide

• 73% of SME security pros missed or ignored critical alerts

• Cisco Systems Joins Microsoft, IBM in Vatican Pledge to Ensure Ethical Use and Development of AI

• ISC Stormcast For Thursday, April 25th, 2024 https://isc.sans.edu/podcastdetail/8954, (Thu, Apr 25th)

• Facebook Has Repeatedly “Interfered” With US Elections Since 2008

• Australia’s spies and cops want ‘accountable encryption’ – aka access to backdoors

• Australia’s spies and cops want ‘accountable encryption’ – aka backdoors

• Does it matter if iptables isn’t running on my honeypot?, (Thu, Apr 25th)

• Transforming Tech: Why Leadership Must Start with Our Girls in STEM

• Governments issue alerts after ‘sophisticated’ state-backed actor found exploiting flaws in Cisco security boxes

• Critical CrushFTP zero-day vulnerability under attack

• Cradlepoint Adds SASE Platform for 5G Wireless Networks

• The vision behind Starmus – A Q&A with the festival’s co-founder Garik Israelian

• How technology drives progress – A Q&A with Nobel laureate Michel Mayor

• IT Security News Daily Summary 2024-04-24

• IBM Cyber Security Report 2024 – New

• Nation-state actors exploited two zero-days in ASA and FTD firewalls to breach government networks

• IBM Cyber Security Report: Unveiling the Evolving Threat Landscape

• Driving fast or braking hard? Your connected car may be telling your insurance company

• Retail Tech Deep-Dive: Meraki Switching

• Shouldn’t Teams, Zoom, Slack all interoperate securely for the Feds? Wyden is asking

• USENIX Security ’23 – Token Spammers, Rug Pulls, and Sniper Bots: An Analysis of the Ecosystem of Tokens in Ethereum and in the Binance Smart Chain (BNB)

• 7 Top Threat Intelligence Platforms & Software in 2024

• CoralRaider Group Delivers Three Infostealers via CDN Cache

• Security bugs in popular phone-tracking app iSharing exposed users’ precise locations

• Helping the health of our planet, one bottle at a time

• Cisco Raises Alarm for ‘ArcaneDoor’ Zero-Days Hitting ASA Firewall Platforms

• HelloKitty Ransomware Renames to ‘HelloGookie,’ Unveils CD Projekt and Cisco Data

• Hackers backdoored Cisco ASA devices via two zero-days (CVE-2024-20353, CVE-2024-20359)

• UnitedHealth Group Pays Ransom After Cyberattack: What You Need to Know

• CISA Adds Three Known Exploited Vulnerabilities to Catalog

• Cisco Releases Security Updates Addressing ArcaneDoor, Vulnerabilities in Cisco Firewall Platforms

• UK CMA Seeks Feedback On Microsoft, Amazon AI Partnerships

• Coalition: Insurance claims for Cisco ASA users spiked in 2023

• Security Bugs in a Popular Phone-Tracking App Exposed Users’ Precise Locations

• Microsoft cannot keep its own security in order, so what hope for its add-ons customers?

• Google Fires More Staff Over Israel Protest

• Prompt Hacking, Private GPTs, Zero-Day Exploits and Deepfakes: Report Reveals the Impact of AI on Cyber Security Landscape

• ‘ArcaneDoor’ Cyberspies Hacked Cisco Firewalls to Access Government Networks

• Google Ad for Facebook Redirects to Scam

• KnowBe4 Plans to Acquire Egress for Email Security Tech

• USENIX Security ’23 – Snapping Snap Sync: Practical Attacks on Go Ethereum Synchronising Nodes

• DirectDefense Report Sees Shifts in Cyberattack Patterns

• Here’s How to Remove Unnecessary Files from Your Android Phone’s Web Browser

• Where Hackers Find Your Weak Spots: A Closer Look

• ArcaneDoor – New espionage-focused campaign found targeting perimeter network devices

• Ransomware testing being done on developing countries

• Google yet again delays killing third-party cookies in Chrome. Here’s what you need to know

• GitHub vulnerability leaks sensitive security reports

• Iran Dupes US Military Contractors, Gov’t Agencies in Cyber Campaign

• Australian PM Hits Out At Elon Musk Over Knife Attack Video

• Celebrating a New Era in Partnering: NTT DATA and Cisco

• Expert Insight: ‘Minding the Gap’: How can we work to make cyber accessible for women?

• North Korean Hackers Hijack Antivirus Updates for Malware Delivery

• Navigating Vendor Speak: A Security Practitioner’s Guide to Seeing Through the Jargon

• Malware Author Lures Child Abusers Into Honeytrap to Extort Them

• Stock Market Scam in Bengaluru: Businessman Loses Rs 5.2 Crore

• Dark Web Nightmare: Scots NHS Patient Data Breach Exposes Medical Files

• US SEC Seeks $5.3 Billion Fine From Terra’s Do Kwon

• Phishing Attacks Rise By 58% As The Attackers Leverage AI Tools

• Management company settles for $18.4M after nuclear weapons plant staff fudged their timesheets

• Traditional MFA isn’t enough, phishing-resistant MFA is key

• Google cools on cookie phase-out while regulators chew on plans

• The Next Chapter of Behavioral Threat Assessment for Ontic and SIGMA

• 1Kosmos CSP enables government agencies to digitally verify resident identity

• CoralRaider Hacker Evade Antivirus Detections Using Malicious LNK File

• Multiple MySQL2 Flaw Let Attackers Arbitrary Code Remotely

• Hackers hijacked the eScan Antivirus update mechanism in malware campaign

• Tines Bags $50 Million Funding for Security Workflow Automation

• Cyberint platform enhancements boost protection against external threats

• US Congress Passes Bill to Ban TikTok

• Researchers develop malicious AI ‘worm’ targeting generative AI systems

• US charges Iranians with cyber snooping on government, companies

• 5 Best VPN Services (2024): For Routers, PC, iPhone, Android, and More

• Security bugs in a popular phone-tracking app exposed users’ precise locations

• Report: Attacker Dwell Time Down, Ransomware up in 2023

• Major Security Flaws Expose Keystrokes of Over One Billion Chinese Keyboard App Users

• Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt Strike

• U.S. Treasury Sanctions Iranian Firms and Individuals Tied to Cyber Attacks

• US Sanctions Iranian “Fronts” for Cyber-Attacks on American Entities

• Multiple Vulnerabilities Found In Forminator WordPress Plugin

• Spyroid RAT Attacking Android Users to Steal Confidential Data

• Check Point Named Strategic Leader in AV-Comparatives EPR Report

• Hackers Publish Fake Story About Ukrainians Attempting To Assassinate Slovak President

• Threat Actor Uses Multiple Infostealers in Global Campaign

• CISA Warns of Windows Print Spooler Flaw After Microsoft Sees Russian Exploitation

• Nagomi Security Emerges From Stealth With $30 Million in Funding

• Amplifier Security Emerges From Stealth With AI Copilot, Human-in-the-Loop Automation

• Google Patches Critical Chrome Vulnerability

• Nigeria, Romania, Russia, U.S. Among Top Cybercrime Nations

• Zero Networks unveils identity segmentation solution to prevent credential theft

• Capture the CISO S2E2: HYAS, Nudge Security, and SlashNext

• Dexalot Announces Launch of Its Central Limit Order Book DEX on Arbitrum

• KnowBe4 acquires UK’s Egress to create advanced AI-driven platform to manage human risk

• Report: Fifth of UK Companies Admit Staff Leaked Data via GenAI

• Cybersecurity Trends and Predictions for 2024

• Tines taps $50M to expand its workflow automation beyond security teams

• US Gov Slaps Visa Restrictions on Spyware Honchos

• TikTok comes one step closer to a US ban

• Russian APT28 Exploiting Windows Vulnerability with GooseEgg Tool

• Cyber Security Today, April 24, 2024 – Good news/bad news in Mandiant report, UnitedHealth admits paying a ransomware gang, and more

• PoC for critical Progress Flowmon vulnerability released (CVE-2024-2389)

• Leeds Talent Pool Attracts BlueVoyant’s First UK Security Operations Center

• Researchers Uncover that UK.GOV Websites Sending Data to Chinese Ad Vendor Analysts

• Dan Solove on Privacy Regulation

• Veeam Acquires Coveware to Boost its Ransomware Protection Capabilities

• Prophet Security Emerges From Stealth Mode With $11 Million in Funding

• New Password Cracking Analysis Targets Bcrypt

• SD-WAN: Don’t Build a Dead End, Prepare for Future-Proof Secure Networking

• Comcast Business MDR limits the impact of cyber threats

• Global attacker median dwell time continues to fall

• Microsoft Launches Smallest AI Model, Phi-3-mini

• Popular Keyboard Apps Leak User Data: Billion Potentially Exposed

• FTC Commercial Surveillance Rules Could Arrive Within Months, Sources Say

• North Korean Hackers Targeted Dozens of South Korean Defense Companies

• New Relic AI monitoring helps enterprises use AI with confidence

• Security Leaders Braced for Daily AI-Driven Attacks by Year-End

• ShotSpotter Keeps Listening for Gunfire After Contracts Expire

• US Treasury Sanctions Iranians Linked to Government Cyberattacks

• GISEC Global 2024 video walkthrough

• Secureworks enables users to view known vulnerabilities in the context of threat data

• Cyber Security Headlines: Iranian hackers charged, Siemens fixing Palo bug, Russia hacks water plant

• US Senate Passes TikTok Ban Or Divestment Bill

• Autodesk hosting PDF files used in Microsoft phishing attacks

• Assessing the Y, and How, of the XZ Utils incident

• Siemens Working on Fix for Device Affected by Palo Alto Firewall Bug

• The 5 Best Practices for PCI DSS Compliance

• Binarly releases Transparency Platform v2.0 to improve software supply chain security

• CISO Perspectives on Complying with Cybersecurity Regulations

• Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App Users

• Cyber Security Headlines: RedLine GitHub connection, MITRE Ivanti breach, E-ZPass spoof sites

• Cyber Security Headlines: TikTok ban update, Sandworm hits Ukraine, North Korean streaming animators

• We’ll Invest in Resilience as Soon as the Ransom Payment Clears

• Cyber Security Today, April 22, 2024 – Vulnerability found in CrushFTP file transfer software, security updates for Cisco’s controller management application, and more

• Cyber Security Today, April 24, 2024 – Good news/bad news in Mandiant report, UnitedHealth admits paying a ransomware gang, and more

• Google’s Core Update is ‘Biggest’ Algorithm Update in History

• Swedish Signals Intelligence Agency to Take Over National Cybersecurity Center

• People Doubt Their Own Ability to Spot AI-Generated Deepfakes

• 5 Ways to Step Up Your AD Hygiene with Silverfort

• Prophet Security emerges from stealth and raises $11 million

• Photos: GISEC Global 2024

• Fifth of CISOs Admit Staff Leaked Data Via GenAI

• Ransomware Victims Who Opt To Pay Ransom Hits Record Low

• January 2024 Cyber Attacks Statistics

• Pentagon Launches DIB Vulnerability Disclosure Program

• Understanding and Responding to Distributed Denial-of-Service Attacks

• IBM Nearing Talks to Acquire Cloud-software Provider HashiCorp

• Back to Security Basics

• North Korean Hackers Target Dozens of Defense Companies

• Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan

• “All for One and One for All”: The EU Cyber Solidarity Act Strengthens Digital Defenses

• UK IT Leaders Are Prioritizing Cybersecurity: But Is This a Good Thing?

• Implementing ISO 27001:2022 Annex A.17 – Information Security Aspects of Business Continuity Management

• eScan Antivirus Update Mechanism Exploited to Spread Backdoors and Miners

• Overcoming security alert fatigue

• Rewards Up to $10 Million for Information on Iranian Hackers

• If Britain is so bothered by China, why do these .gov.uk sites use Chinese ad brokers?

• The street lights in Leicester City cannot be turned off due to a cyber attack

• US offers a $10 million reward for information on four Iranian nationals

• Study: GPT-4 Agent can Exploit Unpatched Vulnerabilities

• T2 – 94,584 breached accounts

• Change healthcare faces data leak threat despite paying $22 million as ransom

• Strategies for Building Resilient Cloud Security in Small and Medium Enterprises (SMEs)

• CoralRaider Malware Campaign Exploits CDN Cache to Spread Info-Stealers

• $10 Million Bounty on Iranian Hackers for Cyberattacks on US Gov, Defense Contractors

• GenAI can enhance security awareness training

• Four ways to make yourself a harder target for cybercriminals

• Cybersecurity jobs available right now: April 24, 2024

• AI set to play key role in future phishing attacks

• The relationship between cybersecurity and work tech innovation

• eBook: Cloud security skills

• ISC Stormcast For Wednesday, April 24th, 2024 https://isc.sans.edu/podcastdetail/8952, (Wed, Apr 24th)

• API Rug Pull – The NIST NVD Database and API (Part 4 of 3), (Wed, Apr 24th)

• This tiny chip can safeguard user data while enabling efficient computing on a smartphone

• Miggo Unfurls Real-Time Application Detection and Response Platform

• IT Security News Daily Summary 2024-04-23

• Google ad for Facebook redirects to scam

• HHS Strengthens Privacy of Reproductive Health Care Data

• Dutch Government Might Leave Facebook Over Privacy Concerns

• $10 Million Bounty on Iranian Hackers for Cyber Attacks on US Gov, Defense Contractors

• North Korea-linked APT groups target South Korean defense contractors

• Screen Printing 101: EFF’s Spring Speakeasy at Babylon Burning

• Speaking Freely: Obioma Okonkwo

• Analyzing Forest Blizzard’s custom post-compromise tool for exploiting CVE-2022-38028 to obtain credentials

• UnitedHealth: Ransomware Attackers Stole Huge Amount of Data

• Cyber Attack Hits UK’s Carpetright, Affecting Customer Orders

• Wells Fargo Data Breach: Safeguarding Customer Information in a Digital Age

• CCNA in the Age of AI

• GuptiMiner: Hijacking Antivirus Updates for Distributing Backdoors and Casual Mining

• CISA to Issue List of Software Products Critical to Agency Security by End of September

• Spain Reopens a Probe Into a Pegasus Spyware Case After a French Request to Work Together

• U.S. cracks down on commercial spyware with visa restrictions

• Oak Ridge, McCrary Institute Establish Cybersecurity Center Focused on Electrical Grid

• MITRE Breach: State Hackers Exploit Ivanti Zero-Days

• The best free VPNs of 2024: Expert tested

• Nespresso Domain Hijacked in Phishing Attack Targeting Microsoft Logins

• US Imposes Visa Restrictions on Alleged Spyware Figures

• Veeam acquires Coveware to boost its ransomware protection

• 0G and OnePiece Labs Collaborate to Create Crypto x AI Incubator

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• The best VPN for streaming in 2024: Expert tested and reviewed

• The best free VPNs

• TuxCare Names Glen Kuhne as Vice President of Enterprise Sales

• CISA Releases Two Industrial Control Systems Advisories

• CISA Adds One Known Exploited Vulnerability to Catalog

• New Cisco Defense Orchestrator (CDO) API

• How Cisco is Redefining Security and Our Partner Experience

• Full Stack Observability: Everything, everywhere, all at once

• Infrastructure Automation and Defense: Introducing DevSecOps Essentials

• Expert Insight: Outdated Recruitment Methods Are Impeding The Global Cyber Army

• Indian Banks Mull New Move for Faster Freezing of Scammers’ Accounts

• Invicti Predictive Risk Scoring identifies highest-risk applications

• Apache Cordova App Harness Targeted in Dependency Confusion Attack

• End-to-End Encryption Sparks Concerns Among EU Law Enforcement

• $493 Bounty Awarded for Arbitrary Options Update Vulnerability Patched in WP Datepicker WordPress Plugin

• Over A Million Neighbourhood Watch Members Exposed

• Microsoft DRM Hack Could Allow Movie Downloads From Streaming

• UnitedHealth Admits Breach Could Cover Substantial Proportion Of People In America

• Windows Vulnerability Reported By The NSA Exploited To Install Russian Malware

• Authorities Investigate LabHost Users After Phishing Service Shutdown

• AI is Revolutionizing Phishing for Both Sides. What will make the Difference?

• “Substantial proportion” of Americans may have had health and personal data stolen in Change Healthcare breach

• UnitedHealth Says Patient Data Exposed in Change Healthcare Cyberattack

• Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations

• The Battle Continues: Mandiant Report Shows Improved Detection But Persistent Adversarial Success

• Survey Finds Two-Thirds of Leading Pharmas Restrict ChatGPT Usage, While Many in Life Sciences Industry Deem AI ‘Overrated’

• Entrust protects users against fraud, phishing and other account takeover attacks

• Forcepoint DSPM safeguards sensitive information by examining data context and content

• Millions of Americans’ Data Potentially Exposed in Change Healthcare Hack

• Passwords, passkeys and familiarity bias

• Netwrix 1Secure enhancements accelerate threat detection

• Mandiant’s M-Trends Report Reveals New Insights from Frontline Cyber Investigations

• Resilient Together with Priority Telecommunications Services (PTS)

• Russian hackers’ custom tool exploits old Windows Print Spooler flaw (CVE-2022-38028)

• Vulnerability Exploitation on the Rise as Attackers Ditch Phishing

• WordPress PWA – how to protect your Progressive Web Apps

• GitHub Comments Abused to Spread Malware in Fake Microsoft Repositories

• Tracing the Steps of Cyber Intruders: The Path of Lateral Movement

• PoC Exploit Released For Critical Oracle VirtualBox Vulnerability

• Protecting Against DDoS Tsunami Attacks

• Key Findings from the 2024 Cloud Security Report

• Fraudsters Exploit Telegram’s Popularity for Toncoin Scam

• Mandiant: Orgs are detecting cybercriminals faster than ever

• DTEX i3 Threat Advisory Provides Detections for LOTL, C2 Abuse

• The Boosters: Don’t Get Used to the Boost

• The Only API Penetration Testing Checklist You Need

• Women in Cybersecurity Face Continued Pay Disparities

• Veritas enhances cyber resilience with AI-powered solutions

• Struts “devmode”: Still a problem ten years later?, (Tue, Apr 23rd)

• UnitedHealth admits breach could ‘cover substantial proportion of people in America’

• Suspected CoralRaider continues to expand victimology using three information stealers

• U.S. to Impose Visa Restrictions on 13 Individuals Involved in Commercial Spyware Operations

• Can a VPN Be Hacked?

• Grab 9 Ethical Hacking Courses for $30 and Improve Your Business Security

• Mandiant: Attacker dwell time down, ransomware up in 2023

• Microsoft Warns of North Korean Hackers Turning to AI-Fueled Cyber Espionage

• Nespresso Domain Serves Up Steamy Cup of Phish, No Cream or Sugar

• Data Breach at Real America’s Voice: User Information Compromised

• Veeam acquires Coveware to boost its ransomware protection capabilities

• Drop in ransomware payment, 2024 Q1 sees a record low of 28%

• Stellar Cyber launches MITRE ATT&CK Coverage Analyzer

• Webinar: Learn Proactive Supply Chain Threat Hunting Techniques

• Vulnerability Exploitation on the Rise as Attacker Ditch Phishing

• How a new law protects your thoughts from tech companies – and why it matters

• Microsoft and Security Incentives

• HHS Beefs Up Privacy Protection for Reproductive Health Info

• Russian Sandworm Hackers Targeted 20 Critical Organizations in Ukraine

• Behavioral Patterns of Ransomware Groups are Changing

• Leicester streetlights take ransomware attack personally, shine on 24/7

• Microsoft DRM Hack Could Allow Movie Downloads From Popular Streaming Services

• Ransomware Gang Leaks Data Allegedly Stolen From Government Contractor

• Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability

• This Website is Selling Billions of Private Messages of Discord Users

• Volkswagen Group’s Systems Hacked: 19,000+ Documents Stolen

• Server Inventory Checklist (Free Download)

• German Authorities Issue Arrest Warrants for Three Suspected Chinese Spies

• Police Chiefs Call for Solutions to Access Encrypted Data in Serious Crime Cases

• Unmasking the True Cost of Cyberattacks: Beyond Ransom and Recovery

• GitLab Affected by GitHub-Style CDN Flaw Allowing Malware Hosting

• Feds Issue Guide for Change Health Breach Reporting Duties

• CrushFTP zero-day exploited by attackers, upgrade immediately! (CVE-2024-4040)

• Cloud Companies Reject Broadcom VMware Pricing Changes

• Raimondo Downplays Huawei Smartphone Chip

• Free and Downloadable Account Management Policy Template

• Cloud Console Cartographer: Open-Source Tool Helps Security Teams Transcribe Log Activity

• Trellix Email Security for Microsoft Office 365 improves email defense

• Russian Sandworm Group Hit 20 Ukrainian Energy and Water Sites

• Leading the charge against GuptiMiner

• University Cybersecurity Clinics Can Now Use the New CISA Resource Guide

• Enhancing Endpoint Security with Advanced Host-Based Intrusion Detection Capabilities

• Majority of Businesses Worldwide are Implementing Zero Trust, Gartner Finds

• GitHub Comments Abused to Push Malware via Microsoft Repository URLs

• Over a million Neighbourhood Watch members exposed through web app bug

• Russian APT28 Group in New “GooseEgg” Hacking Campaign

• Meta Opens Quest VR OS To Third Party Gadget Makers

• UK Lawsuit Claims Grindr Shared HIV Status

• Hacker Offers Upto $300 To Mobile Networks Staff For Illegal SIM Swaps

• Critical Apache HugeGraph Flaw Let Attackers Execute Remote Code

• U.S. Gov imposed Visa restrictions on 13 individuals linked to commercial spyware activity

• Uncertainty is the Most Common Driver of Noncompliance

• Critical Flaw with Popular API Portal Let Attackers Launch SSRF Attacks

• Atera vs. ConnectWise: Head-to-Head Comparison (And Alternative)

• Cyber Insurance Gaps Stick Firms With Millions in Uncovered Losses

• Researchers Warn Windows Defender Attack can Delete Databases

• Align introduces ransomware prevention feature, powered by Adlumin

• U.S. Imposes Visa Restrictions on 13 Linked to Commercial Spyware Misuse

• EU Prepares Action Against ‘Addictive’ TikTok Lite Features

• Europol calls for Tech Giants to Get Lawful Access To end-to-end Encryption

• A cyber attack paralyzed operations at Synlab Italia

• Sharp Stealer: New Info-stealer Malware Targets Gamers, Crypto Enthusiasts

• Podcast Episode: Right to Repair Catches the Car

• Executive summary: NIS2 Directive for the EU members (updated)

• Response to CISA Advisory (AA24-109A): #StopRansomware: Akira Ransomware

• Russian cyber forces cyber attack water tower just to make it overflow

• Is Your Password Strong Enough? Brute Force Attack on the Rise!

• Misconfigured cloud server leaked clues of North Korean animation scam

• Russia’s APT28 Exploited Windows Print Spooler Flaw to Deploy ‘GooseEgg’ Malware

• The rising influence of AI on the 2024 US election

• People doubt their own ability to spot AI-generated deepfakes

• 10 colleges and universities shaping the future of cybersecurity education

• Change Healthcare Finally Admits It Paid Ransomware Hackers—and Still Faces a Patient Data Leak

• Behavioral patterns of ransomware groups are changing

• What is multi-factor authentication (MFA), and why is it important?

• ToddyCat Hacker Group Uses Advanced Tools for Industrial-Scale Data Theft

• ISC Stormcast For Tuesday, April 23rd, 2024 https://isc.sans.edu/podcastdetail/8950, (Tue, Apr 23rd)

• Old Windows print spooler bug is latest target of Russia’s Fancy Bear gang

• USENIX Security ’23 – The Case for Learned Provenance Graph Storage Systems

• UnitedHealth says Change hackers stole health data on ‘substantial proportion of people in America’

• IT Security News Daily Summary 2024-04-22

• Facebook AI Makes Creepy Comment That It Has A Gifted, Disabled Child

• Russia-linked APT28 used post-compromise tool GooseEgg to exploit CVE-2022-38028 Windows flaw

• U.S. Senate and Biden Administration Shamefully Renew and Expand FISA Section 702, Ushering in a Two Year Expansion of Unconstitutional Mass Surveillance

• FBI and friends get two more years of warrantless FISA Section 702 snooping

• Russian FSB Counterintelligence Chief Gets 9 Years in Cybercrime Bribery Scheme

• Vulnerability Recap 4/22/24 – Cisco, Ivanti, Oracle & More

• Vulnerability Summary for the Week of April 15, 2024

• 5 Best Practices to Secure AWS Resources

• US government says security flaw in Chirp Systems’ app lets anyone remotely control smart home locks

• Europol now latest cops to beg Big Tech to ditch E2EE

• BreachRx Gets $6.5 Million to Automate Security Incident Response

• Mitre breached by nation-state threat actor via Ivanti flaws

• Biometrics: A Flash Point in AI Regulation

• Three Ways Organizations Can Overcome the Cybersecurity Skills Gap

• Rise In Cybercrime: Dark Web Fueling Credential Attacks

• CISA Releases Physical Security Checklist to Help Election Officials Secure Polling Locations

• TikTok Says New US Ban Effort Would ‘Trample Free Speech’

• AI, toll fraud and messaging top the list of UC security concerns

• The Next US President Will Have Troubling New Surveillance Powers

• From Water to Wine: An Analysis of WINELOADER

• Malicious PyPI Package Attacking Discord Users to Steal Credentials

• Tesla Cuts Prices Across Major Markets

• Europol becomes latest law enforcement group to plead with big tech to ditch E2EE

• Dependency Confusion Vulnerability Found in an Archived Apache Project

• More companies refuse to pay ransom in 2024

• Tinder’s ‘Share My Date’ feature will let you share date plans with friends and family

• The 7 Best iPhone VPNs (Recommended for 2024)

• It’s Earth Day! Let’s talk Circularity, Growth and Profitability!

• Find Your Path to Unmatched Security and Unified Experiences

• Customers Praise the Surprising Longevity and Adaptability of Cisco UCS

• Using Legitimate GitHub URLs for Malware

• #MIWIC2024: Melissa Chambers, CEO and Co-Founder of Sitehop

• Picking fights and gaining rights, with Justin Brookman: Lock and Code S05E09

• Germany arrests trio accused of trying to smuggle naval military tech to China

• UN Agency Faces Data Crisis: Ransomware Hack Exposes Extensive Data Theft

• Numerous LastPass Users Fall Victim to Highly Convincing Scam, Losing Master Passwords

• Anonymous Hackers Threaten To Publish IDF’s ‘Top Secret Projects’

• Russian Hacker Group ToddyCat Uses Advanced Tools for Industrial-Scale Data Theft

• Fraudsters Exploit Telegram’s Popularity For Toncoin Scam

• chief privacy officer (CPO)

• Research Shows How Attackers Can Abuse EDR Security Products

• Crafting AI’s Future: Decoding the AI Executive Order

• Citrix UberAgent Flaw Let Attackers Elevate Privileges

• Beware Of Weaponized Zip Files That Deliver WINELOADER Malware

• Malicious PyPI Package Attacking Discord Users To Steal Credentials

• The Role of Cybersecurity Training in Compliance

• Hackers Group Claims To Have Broke Into IDF & Stolen Documents

• Watchdog tells Dutch govt: ‘Do not use Facebook if there is uncertainty about privacy’

• CVEs Targeting Remote Access Technologies

• CrushFTP Patches Exploited Zero-Day Vulnerability

• Rural Texas Towns Report Cyberattacks That Caused One Water System to Overflow

• The Future of Automated Testing with DAQ

• Taking Steps Toward Achieving FedRAMP

• Getting to Know Netzer Shohet

• Hackers threaten to leak a copy of the World-Check database used to assess potential risks associated with entities

• Malware Developer Lures Child Exploiters Into Honeytrap to Extort Them

• Story 1: Removing super-admin tokens across 33 GitHub tenants in 2 hours

• Cloud Security Stories: From Risky Permissions to Ransomware Execution

• The 10 Women in Cybersecurity You Need to Follow

• Tech Outages: Exposing the Web’s Fragile Threads

• Binary Defense enhances BDVision to improve security for SMBs

• apexanalytix Passkeys protects data with biometric authentication

• Dependency Confusion Vulnerability Found in Apache Project

• US House of Representatives passes new TikTok ban bill to Senate

• Transforming Operations to Eliminate Technical Debt

• TA547 Phishing Attack: German Companies Hit With Infostealer

• GUEST ESSAY: Here’s why securing smart cities’ critical infrastructure has become a top priority

• The Essential KVM Cheat Sheet for System Administrators

• Understanding Spectre V2: A New Threat to Linux Systems

• Thousands of Palo Alto Firewalls Potentially Impacted by Exploited Vulnerability

• Cybercriminals Threaten Release of Stolen World-Check Database, Exposing Millions to Financial Risk

• MITRE breached by nation-state threat actor via Ivanti zero-days

• Trend Micro launches AI-driven cyber risk management capabilities

• Malvertising: Fake Popular Software Ads Deliver New MadMxShell Backdoor

• Windows MagicDot Path Flaw Lets Attackers Gain Rootkit-Like Abilities

• VMware ESXi Shell Service Exploit on Hacking Forums: Patch Now

• UK Cyber Agency NCSC Announces Richard Horne as its Next Chief Executive

• Ukrainian Soldiers’ Apps Increasingly Targeted for Spying, Cyber Agency Warns

• Billions of scraped Discord messages up for sale

• UK data watchdog questions how private Google’s Privacy Sandbox is

• MITRE Corporation Breached by Nation-State Hackers Exploiting Ivanti Flaws

• Pentera’s 2024 Report Reveals Hundreds of Security Events per Week, Highlighting the Criticality of Continuous Validation

• IT Security News Weekly Summary – Week 17

• Alert! Zero-day Exploit For WhatsApp Advertised On Hacker Forums

• Has the ever-present cyber danger just got worse?

• Sharp-Project: New Stealer Family on the Market

• Researchers Find Dozens of Fake E-Zpass Toll Websites After FBI Warning

• Ransomware Double-Dip: Re-Victimization in Cyber Extortion

• CrushFTP File Transfer Vulnerability Lets Attackers Download System Files

• It appears that the number of industrial devices accessible from the internet has risen by 30 thousand over the past three years, (Mon, Apr 22nd)

• EU Set To Approve Apple Plan For Opening NFC Access

• Trump Media Warns Of ‘Potential Market Manipulation’

• Deciphering the Economics of Software Development: An In-Depth Exploration

• Windows DOS-to-NT flaws exploited to achieve unprivileged rootkit-like capabilities

• ACDS Launches Revolutionary OBSERVATORY Solution: Redefining Attack Surface Management

• Report: 51% of Enterprises Experienced a Breach Despite Large Security Stacks

• MITRE Hacked by State-Sponsored Group via Ivanti Zero-Days

• NSA Launches Guidance for Secure AI Deployment

• Concerned About Your Online Privacy in 2024? You Are Not the Only One.

• Apple Removed Numerous Apps From China App Store

• Palo Alto Networks Patched A Pan-OS Vulnerability Under Attack

• CrushFTP Servers Zero-day Under Active Attack: Update Now

• ToddyCat is making holes in your infrastructure

• Critical Flaw in the Forminator Plugin Impacts Hundreds of Thousands of WordPress Sites

• Researchers Uncover Windows Flaws Granting Hackers Rootkit-Like Powers

• NCSC Announces PwC’s Richard Horne as New CEO

• Netflix Reports Profits Surge, But Forecast Disappoints

• Group Supporting Women In Tech Abruptly Closes

• Google Shifts Rules For Contract Firms Amidst Labour Battle

• TSMC Shocks Investors With Lower Chip Growth Forecast

• Victorian Councils Data Exposed in OracleCMS Breach

• Rising Ransomware Issue: English-Speaking Western Affiliates

• Researchers Claim that Windows Defender Can Be Bypassed

• JavaScript Malware Switches to Server-Side Redirects and Uses DNS TXT Records as TDS

• A week in security (April 15 – April 21)

• Google all at sea over rising tide of robo-spam

• Apple Removes WhatsApp & Threads from its App Store for China

• NATO to Launch New Cyber Center to Contest Cyberspace ‘At All Times’

• MITRE Reveals Ivanti Breach By Nation State Actor

• Securing cloud perimeters

• NSA Debuts Top 10 Cloud Security Mitigation Strategies

• Exploring Cybersecurity Risks in Telemedicine: A New Healthcare Paradigm

• HelloKitty Ransomware Rebrands, Releases CD Projekt and Cisco Data

• Rarest, strangest, form of Windows saved techie from moment of security madness

• 10 Essentials Every Anti-Phishing Course Must Have

• Tesla Recalls Thousands Of Cybertrucks Over Accelerator Fault

• North Koreans Secretly Animated Amazon and Max Shows, Researchers Say

• Implementing ISO 27001:2022 Annex A.16 – Information Security Incident Management

• A flaw in the Forminator plugin impacts hundreds of thousands of WordPress sites

• Jury Dishes Out Guilty Verdict in Mango Markets Fraud Case

• The first steps of establishing your cloud security strategy

• Microsoft Warns: North Korean Hackers Turn to AI-Fueled Cyber Espionage

• T2 – 85,894 breached accounts

• Safeguarding Your Gmail Account: Strategies to Defend Against Fraud

• Hellokity Ransomware Actors Returns Under New Name

• What is HSM Integration?

• EASA Alerts Airlines Amid Suspected Cyber-Attacks on UK-Bound Flights

• Cannes Hospital Cancels Medical Procedures Following Cyberattack

• Researchers claim Windows Defender can be fooled into deleting databases

• How to optimize your bug bounty programs

• Fuxnet malware: Growing threat to industrial sensors

• Cloud Console Cartographer: Open-source tool helps security teams transcribe log activity

• Uncertainty is the most common driver of noncompliance

• China creates ‘Information Support Force’ to improve networked defence capabilities

• How to improve response to emerging cybersecurity threats

• ISC Stormcast For Monday, April 22nd, 2024 https://isc.sans.edu/podcastdetail/8948, (Mon, Apr 22nd)

• MITRE admits ‘nation state’ attackers touched its NERVE R&D operation

• USENIX Security ’23 – On the Security Risks of Knowledge Graph Reasoning

• Akira Ransomware Group Takes In $42 million from 250 Attacks in a Year

• IT Security News Weekly Summary – Week 16

• IT Security News Daily Summary 2024-04-21

• Akira ransomware received $42M in ransom payments from over 250 victims

• DuneQuixote campaign targets the Middle East with a complex backdoor

• Cyberattackers Employ Elusive “CR4T” Backdoor to Target Middle Eastern Governments

• New AI Speed Cameras Record Drivers on Their Phones

• Security Affairs newsletter Round 468 by Pierluigi Paganini – INTERNATIONAL EDITION

• Information Stealer Malware Preys on Gamers via Deceptive Cheat Code Baits

• Androxgh0st Malware Compromises Servers Worldwide for Botnet Attack

• Weighing Down Cyberrisk Options: How to Make Objective Cybersecurity Decisions Without Negatively Impacting the Organization’s IT Teams?

• Review: ‘Artificial Intelligence — A Primer for State and Local Governments’

• New RedLine Stealer Variant Disguised as Game Cheats Using Lua Bytecode for Stealth

• Week in review: Palo Alto firewalls mitigation ineffective, PuTTY client vulnerable to key recovery attack

Generated on 2024-04-28 23:58:22.532502