IT Security News Weekly Summary – Week 24

• IT Security News Daily Summary 2024-06-16

• Security Affairs newsletter Round 476 by Pierluigi Paganini – INTERNATIONAL EDITION

• Phishing Attack Abuses Windows Search Protocol to Deploy Malware

• Identity Verification Becomes Crucial in the Digital Age

• What is Identity Threat Detection And Response (ITDR)

• Protecting Your Business from Snowflake Platform Exploitation by UNC5537

• Confidential NHS Patient Data Discovered in Jesmond Alleyway

• Combating Cyber-attacks with Threat-Intelligence

• Ascension Breached Due to Employee Downloading Malicious File

• Researchers Find ChatGPT’s Latest Bot Behaves Like Humans

• Mastering the Art of Digital Management: Potential Risks and Business Best Practices

• Apple Briefly Overtakes Microsoft For Market Crown On AI Plans

• How to Spot a Business Email Compromise Scam

• The ROI of Doing Nothing: What to know as new demands are placed on networks

• The High Cost of Ransomware: Change Healthcare’s $22 Million Payout and Its Aftermath

• Let Slip the Robot Dogs of War

• Five Data Security Challenges CISOs Face Today

• Five Strategies for IT and Security Leaders to Defend Against AI-Powered Threats

• ASUS fixed critical remote authentication bypass bug in several routers

• Week in review: JetBrains GitHub plugin vulnerability, 20k FortiGate appliances compromised

• Inside Identity 2024

• U.K. Hacker Linked to Notorious Scattered Spider Group Arrested in Spain

• New Malware Campaign Exploits Windows Search to Spread

• Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested

• Time to challenge yourself in the 2024 Google CTF

• IT Security News Daily Summary 2024-06-15

• The best VPN routers of 2024

• London hospitals canceled over 800 operations in the week after Synnovis ransomware attack

• Arid Viper’s AridSpy Trojan Hits Android Users in Palestine, Egypt

• Microsoft Accepts Responsibility for U.S. Government Security Breaches

• Data in Danger: Analyzing the Alleged Data Broker Breach

• USENIX Security ’23 – Exploring the Unknown DTLS Universe: Analysis of the DTLS Server Ecosystem on the Internet

• Ascension Ransomware Attack: Worker Error Leads to Data Breach and Recovery Efforts

• How to Design a Zero Trust Strategy for Remote Workers

• STR RAT: A Persistent Remote Access Trojan

• Android 15’s Lockdown Mode Safeguards Your Phone Against “Juice Jacking”

• The TikTok Ban Spells Trouble for Chinese IoT

• A Guide to RCS, Why Apple’s Adopting It, and How It Makes Texting Better

• European Telecom Industry at the Forefront of Quantum Technology Adoption

• Ukrainian Sailors Are Using Telegram to Avoid Being Tricked Into Smuggling Oil for Russia

• Grandoreiro Banking Trojan Hits Brazil as Smishing Scams Surge in Pakistan

• Overview of My Tools That Handle JSON Data, (Sat, Jun 15th)

• Ransomware Attacks Are Getting Worse

• Security and safety of AI systems

• Meta Pauses AI Training on EU User Data Amid Privacy Concerns

• Pakistani Hackers Use DISGOMOJI Malware in Indian Government Cyber Attacks

• Meta Halts AI Training on EU User Data Amid Privacy Concerns

• ESET Research Podcast: APT Activity Report Q4 2023–Q1 2024

• How Arid Viper spies on Android users in the Middle East – Week in security with Tony Anscombe

• Cyber Security Today, Week in Review for week ending Friday June 14, 2024

• FedRAMP vs. ISO 27001: How They Compare and Which Do You Need?

• Liquidmatrix Security Digest Podcast – Episode 79

• Vermont Governor Vetoes Data Privacy Bill, Saying State Would be Most Hostile to Businesses

• Microsoft answered Congress’ questions on security. Now the White House needs to act

• Generative AI security requires a solid framework

• Crypter Specialist Involved in the Conti and LockBit Attack Arrested

• The Top 7 Unified Endpoint Management Tools in 2024

• Nvidia’s ‘Nemotron-4 340B’ model redefines synthetic data generation, rivals GPT-4

• Keeper vs LastPass (2024 Comparison): Which Is Right for You?

• Stanford Internet Observatory wilts under legal pressure during election year

• IT Security News Daily Summary 2024-06-14

• Friday Squid Blogging: Squid Cartoon

• Meta won’t train AI on Euro posts after all, as watchdogs put their paws down

• Meta won’t train AI on Euro posts after all as watchdogs put their paws down

• Veeam executives discuss data protection trends, future IPO

• Nigerian faces up to 102 years in the slammer for $1.5M phishing scam

• USENIX Security ’23 – Keep Your Friends Close, but Your Routeservers Closer: Insights into RPKI Validation in the Internet

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• Criminal IP Unveils Innovative Fraud Detection Data Products on Snowflake Marketplace

• Microsoft Delays Recall Launch, Seeking Community Feedback First

• chief trust officer

• Congress grills Microsoft president over security failures

• A New Tactic in the Rapid Evolution of QR Code Scams

• DORA Compliance Strategy for Business Leaders

• Ransomware Roundup – Shinra and Limpopo Ransomware

• Truist bank confirms data breach

• Proactive Intelligence Against Infostealers: Lessons from the Snowflake Data Breach

• Apple Introduces Exclusive AI Features for Newest Devices

• How to create a pipeline for hardening Amazon EKS nodes and automate updates

• Ransomware payments work in some cases say experts

• Upcoming Speaking Engagements

• Securing a Dynamic World: The Future of Cybersecurity Operations

• Musk’s X Lawsuit Against Nazi Report Author Slated For 2025 Trial

• 5 Tips for Making the Most Out of Your Next Business Trip

• Cisco Live 2024: Inspiring to Go Beyond

• What CISOs Need to Know About Secure By Design

• The UN Cybercrime Draft Convention is a Blank Check for Surveillance Abuses

• Conducting Third Party Security Assessment: A Step-by-Step Strategy

• Recall ‘Delayed Indefinitely’ — Microsoft Privacy Disaster is Cut from Copilot+ PCs

• How Healthcare Providers Should Think About Balancing Innovation Efforts with Cybersecurity Goals

• Akamai?s Perspective on June?s Patch Tuesday 2024

• How VPNs Will Adapt to Evolving Threats in the Future

• Microsoft President Grilled By US Lawmakers After China, Russia Hacks

• Building an Internal TLS and SSL Certificate Monitoring Agent: From Concept to Deployment

• Security review for Microsoft Edge version 125

• Security review for Microsoft Edge version 126

• In Other News: Fuxnet ICS Malware, Google User Tracking, CISA Employee Scams

• Ascension Says Personal, Health Information Stolen in Ransomware Attack

• Edge Devices: The New Frontier for Mass Exploitation Attacks

• OpenAI Appoints Former NSA Director Paul Nakasone to Board of Directors

• Pakistani Threat Actors Caught Targeting Indian Gov Entities

• TellYouThePass Ransomware Exploits Recent PHP RCE Vulnerability to Compromise Servers

• Ransomware Attackers Target Canada’s Largest School Board

• Dutch Intelligence Warns of Extensive Chinese Cyber-Espionage Campaign

• Google’s Privacy Sandbox Accused of User Tracking by Austrian Non-Profit

• A Bring Your Own Algorithms (BYOA) Approach to Crypto-Agility Addressing Quantum Threats

• Protect Yourself from Summer Vacation Scams: Stay Cyber Aware During Your Vacation

• Beware of Trading Bot Scams

• Ukrainian Cops Collar Kyiv Programmer Believed To Be Conti, LockBit Linchpin

• Microsoft Delaying Recall Feature To Improve Security

• Life360 Says Hacker Stole Customer Data

• GenAI An Enhancement For Cyberattackers And Defenders

• Ukraine busts SIM farms targeting soldiers with spyware

• UK General Election: Tech Policy Expert Calls for Law Overhaul to Combat Deepfakes

• CISA, JCDC, Government and Industry Partners Conduct AI Tabletop Exercise

• How can AI be used to keep customer data secure?

• AI Can Bridge the Gap of Ineffective MDR Tools

• Microsoft delays Windows Recall rollout, more security testing needed

• Location Tracker Firm Tile Hit by Data Breach, Hackers Access Internal Tools

• Chinese Threats Aim for Government Sector

• Learn to Secure Petabyte-Scale Data in a Webinar with Industry Titans

• Sleepy Pickle Exploit Let Attackers Exploit ML Models And Attack End-Users

• The UN Cybercrime Draft Convention is a Blank Check for Unchecked Surveillance Abuses

• French state bidding for piece of Atos, offers €700M

• SASE Market Growth Continues, Led by Cisco, Zscaler

• Why Regulated Industries are Turning to Military-Grade Cyber Defenses

• If Not Amended, States Must Reject the Flawed Draft UN Cybercrime Convention Criminalizing Security Research and Certain Journalism Activities

• Penetration-Testing-as-a-Service: An Essential Component of the Cybersecurity Toolkit

• Elon Musk Wins Shareholder Vote On Pay, Texas Incorporation

• Threat Actor Claiming Leak Of 5 Million Ecuador’s Citizen Database

• Smishing Triad Hackers Attacking Online Banking, E-Commerce AND Payment Systems Customers

• SolarWinds Serv-U Vulnerability Let Attackers Access sensitive files

• Microsoft Delaying Recall Feature to Improve Security

• CISA Warns of Progress Telerik Vulnerability Exploitation

• Rockwell Automation Patches High-Severity Vulnerabilities in FactoryTalk View SE

• The “Spammification” of Business Email Compromise Spells Trouble for Businesses Around the Globe

• CISA adds Android Pixel, Microsoft Windows, Progress Telerik Report Server bugs to its Known Exploited Vulnerabilities catalog

• YetiHunter: Open-source threat hunting tool for Snowflake environments

• Microsoft Admits Security Failings Allowed China to Access US Government Emails

• Cybersecurity News: Cyberinsurance claims increase, NATO’s Russia vigilance, Remcos RAT phishing

• Cyber Security Headlines Week in Review: New York Times theft, Club Penguin hack, NHS wants blood

• AI vs. Developers: A Modern-Day Conundrum

• IRONSCALES boosts email security with GPT-powered training feature

• Cyber Security Today, June 14, 2024 – Employee downloaded file that led to hospital chain’s ransomware attack

• Price Drop: This Complete Ethical Hacking Bundle is Now $40

• Survey Finds Growing Number of Tech Tools Makes Cybersecurity Professionals Feel “Out of Control”

• Oscilar’s AI-powered ACH Fraud Detection identifies and prevents fraudulent transactions

• Cyberattack on Swedish Gambling Site During Eurovision Highlights Strategic Threats

• CyberLink launches FaceMe Security version 7.15

• ZKTeco Biometric System Found Vulnerable to 24 Critical Security Flaws

• Cloud Migration Strategy

• Ascension Hack Caused By an Employee Who Downloaded a Malicious File

• Watch Out! CISA Warns It Is Being Impersonated By Scammers

• FBI Botnet Takedown: 911 S5 With 19 Million Infected Devices

• North Korean Hackers Target Brazilian Fintech with Sophisticated Phishing Tactics

• AWS Announces Authentication and Malware Protection Enhancements

• Event Preview: AI Risk Summit + CISO Forum at the Ritz-Carlton, Half Moon Bay | June 25-26, 2024

• Easily Exploitable Critical Vulnerabilities Found in Open Source AI/ML Tools

• Pyte Raises $5 Million for Secure Data Collaboration Solutions

• French Bug Bounty Platform YesWeHack Raises $28 Million

• Microsoft email servers hack could have been prevented

• Understanding the Vital Role of Indicators of Compromise (IOCs) in Cybersecurity

• AWS Announced Malware Detection Tool For S3 Buckets

• A Deep Dive Into the Economics and Tactics of Modern Ransomware Threat Actors

• Arid Viper poisons Android apps with AridSpy

• Two Ukrainians accused of spreading Russian propaganda and hack soldiers’ phones

• City of Cleveland still working to fully restore systems impacted by a cyber attack

• Microsoft Delays AI-Powered Recall Feature for Copilot+ PCs Amid Security Concerns

• The biggest downsides of digital ID adoption

• Modern fraud detection need not rely on PII

• New infosec products of the week: June 14, 2024

• Solving the systemic problem of recurring vulnerabilities

• ISC Stormcast For Friday, June 14th, 2024 https://isc.sans.edu/podcastdetail/9024, (Fri, Jun 14th)

• Microsoft delays broad release of Recall AI feature due to security concerns

• Microsoft bigwig says the Feds catching Chinese spies in Exchange Online is the cloud working as intended

• AI Could Turn the Next Recession into a Major Economic Crisis, Warns IMF

• US Space Force wanted $77M to reinforce GPS – and Congress shot it down

• IT Security News Daily Summary 2024-06-13

• Unlock Advanced Threat Correlation

• Apple iOS 18 Cheat Sheet: Release Date, RCS Integration and More

• USENIX Security ’23 – ACORN: Input Validation for Secure Aggregati

• Intel 471 Sets New Standard in Intelligence-Driven Threat Hunting

• Oracle Ads have had it: $2B operation shuts down after dwindling to $300M

• How Sigma Is Empowering Devs, Engineers, and Architects With Cloud-Native Analytics

• 5 cybersecurity risks and challenges in supply chain

• Japan Passes Law To Allow Third Party App Stores, Payments

• How Singapore is creating more inclusive AI

• Top Takeaways from the Cisco Live 2024 DevNet Zone: AI, Programmability, and More

• Top Developer Takeaways from Cisco Live 2024: AI, Programmability, and More

• Netcraft Uses Its AI Platform to Trick and Track Online Scammers

• How we can separate botnets from the malware operations that rely on them

• X (Twitter) Now Hides Posts Liked By Users

• Securing the Future: The Role of Post-Quantum Cryptography

• Q1 2024: A Wake-up Call for Insider Threats

• Tile/Life360 Breach: ‘Millions’ of Users’ Data at Risk

• Navigating the API Threat Landscape in Finance

• Chinese ‘Smishing Triad’ Group Targets Pakistanis with SMS Phishing

• secure access service edge (SASE)

• Excellence in the essentials of cybersecurity – below the ‘poverty line’

• Ukrainian cops collar Kyiv programmer believed to be Conti, LockBit linchpin

• The Road to CTEM, Part 2: The Role of Continuous Validation

• USENIX Security ’23 – DiffSmooth: Certifiably Robust Learning via Diffusion Models and Local Smoothing

• AI-Powered Transformation: Optimizing B2B SaaS for Efficiency and Growth (Without Sacrificing Your Team)

• Wordfence Intelligence Weekly WordPress Vulnerability Report (June 3, 2024 to June 9, 2024)

• Switzerland government websites hit by DDoS Cyber Attack

• The Rise of Universal ZTNA

• Expert comment: Apple AI safety & security

• US Mulls Additional AI Chip Restrictions For China – Report

• Top 4 use cases of non-human identity security: Live event recap

• Effortless Credential Management in Azure: The Power of Managed Identities

• Motorola Solutions Vigilant License Plate Readers

• Guest Blog: Ox Security on learning from the Recent GitHub Extortion Campaigns

• Here’s How to Solve Top Challenges in Data Storage

• SpaceX, Elon Musk Sued By Engineers For Unfair Firings, Sex Bias

• Siemens Mendix Applications

• Siemens TIA Administrator

• Siemens SIMATIC S7-200 SMART Devices

• Revelations from Cisco Live: The Future of AI and Integrated Security

• Ascension Attack Caused by Employee Downloading Malicious File

• Exploring the Role of Data Analytics in SOC Alert Tuning

• Google fixed an actively exploited zero-day in the Pixel Firmware

• How Fear Tactics Led to a Pune Woman’s Financial Ruin: Insights into Cyber Fraud

• From Civilians to Cyber Warriors: China’s MCF Program Ignites a Western Typhoon

• Signs Your Home Network Has Been Hacked and How to Protect Yourself

• Arid Viper Launches Mobile Espionage Campaign with AridSpy Malware

• New Attack Technique ‘Sleepy Pickle’ Targets Machine Learning Models

• Arid Viper Hackers Spy in Egypt and Palestine Using Android Spyware

• UNC3944 Targets SaaS Applications

• Why Security Awareness Training is Your Best Defense

• Update now! Google Pixel vulnerability is under active exploitation

• Men’s Mental Health Week: Resource Guide

• How ThreatCloud AI’s Threat Emulation Engine Prevents DLL Sideloading (Trojan) Attacks

• Google’s Privacy Sandbox more like a privacy mirage, campaigners claim

• VMware Carbon Black vs CrowdStrike Falcon (2024): Which Tool Is Best For Your Business?

• Eclypsium Joins the Joint Cyber Defense Collaborative

• Connecticut Has Highest Rate of Health Care Data Breaches: Study

• Tech Giants Aid Rural Hospitals in Cybersecurity Battle

• SailPoint introduces AI-powered application onboarding capability

• Beware WARMCOOKIE Backdoor Knocking Your Inbox

• 0-day Vulnerability In 10,000 Web Apps Exploited Using XSS Payloads

• Hackers Exploiting MS Office Editor Vulnerability to Deploy Keylogger

• Keeper vs 1Password: 2024 Password Manager Comparison

• Education 4.0: The Role of AI in Transforming Education

• White House Report Dishes Deet On All 11 Major Government Breaches From 2023

• Apple Patches Possibly The First Ever Spatial Computing Hack

• Prevalence And Impact Of Password Exposure Vulns In ICS/OT

• Kaspersky Researchers Punch Holes In Biometrics Hardware Security

• Black Basta Exploits Patched Windows Privilege Escalation Bug

• The “Non-Trend” of “Full Automation” Workflows in Cybersecurity: A Reality Check

• Indian Ex-Employee Jailed for Wiping 180 Virtual Servers in Singapore

• cloud security

• NetSPI acquires Hubble to address asset and exposure management challenges

• Operationalizing our custom “SOC in a Box” at the RSA Conference 2024

• Bolster SaaS Security Posture Management with Zero Trust Architecture

• Embracing New Additions With Cisco’s Child Bonding Leave

• Strength in Unity: The Power of Cybersecurity Partnerships

• PHP command injection flaw exploited to deliver ransomware (CVE-2024-4577)

• Why SaaS Security is Suddenly Hot: Racing to Defend and Comply

• JetBrains GitHub Plugin Vulnerability Affects IntelliJ IDEs

• SEC Reaches $4.5bn Settlement With Bankrupt Terraform Labs

• Ivanti EPM SQL Injection Flaw Let Attackers Execute Remote Code

• Student’s flimsy bin bags blamed for latest NHS data breach

• Fortinet: CVE 2024-21754: Passwords on a Silver Platter

• Kaspersky Finds 24 Flaws in Chinese Biometric Hardware Provider

• The Security Step Too Many Companies Ignore: Tips for Micro-Segmenting into Your Network

• AI and the Indian Election

• Cybercriminals Employ PhantomLoader to Distribute SSLoad Malware

• Pakistan-linked Malware Campaign Evolves to Target Windows, Android, and macOS

• WeWork Emerges From Bankruptcy Protection

• Cyber Insurance Claims Hit Record High in North America

• Cybersecurity News: Life360 faces extortion attempt, White House reports increase in federal attacks, Black Basta exploits zero-day flaw in windows

• What Makes a Successful CISO?

• Operation Celestial Force employs mobile and desktop malware to target Indian entities

• The future of online document signing in the era of digital transformation

• CISA Warns of Scammers Impersonating as CISA Employees

• Flipping the script on pig butchering – $45 million is just the tip of the iceberg

• Cinterion EHS5 3G UMTS/HSPA Module Research

• Elevating SaaS App Security in an AI-Driven Era

• Multiple flaws in Fortinet FortiOS fixed

• Netskope extends security and data protection for Google Workspace users

• Urgently needed: AI governance in cyber warfare

• Ukrainian Cyber Police Identify Suspected LockBit and Conti Member

• UK Strengthens Cybersecurity with New Law Targeting Default Passwords

• Microsoft Windows Ntqueryinformationtoken Flaw Let Attackers Escalate Privileges

• The Team Sport of Cloud Security: Breaking Down the Rules of the Game

• Ukraine Police Arrest Suspect Linked to LockBit and Conti Ransomware Groups

• 5 Ways to Thwart Ransomware With an Identity-First Zero Trust Model

• Prosimo and Palo Alto Networks join forces to improve cloud infrastructure security

• CISA Warns Phone Scammers Are Impersonating its Staff

• Don’t fall for the trap: The sneaky tactics of business email scammers revealed

• Google Warns of Pixel Firmware Security Flaw Exploited as Zero-Day

• How to Analyze Malware in 5 Steps

• Hand me the flashlight. I’ll be right back…

• New Surge in Risky Business Email Compromise Phishing Attacks

• 256,000+ Publicly Exposed Windows Servers Vulnerable to MSMQ RCE Flaw

• New Cross-Platform Malware ‘Noodle RAT’ Targets Windows and Linux Systems

• Indian National Jailed For Hacked Servers Of Company That Fired Him

• Ascension Ransomware attack occurred due to employee mistake

• Microsoft Incident Response tips for managing a mass password reset

• How businesses can integrate token technology into existing payment systems

• Time to zero in on Zero Trust?

• GenAI keeps cybersecurity pros on high alert

• Maximizing productivity with Copilot for Microsoft 365: A security perspective

• The Next Big Thing in Identity Security: Identity Fabrics

• The Art of JQ and Command-line Fu [Guest Diary], (Thu, Jun 13th)

• ISC Stormcast For Thursday, June 13th, 2024 https://isc.sans.edu/podcastdetail/9022, (Thu, Jun 13th)

• Crooks crack customer info at tracking device vendor Tile, issue ‘extortion’ demands

• What is Continuous Authority to Operate (cATO)?

• What is ISO 27001 Compliance?

• 2024-06-11 – Traffic example of a CVE-2024-4577 probe

• 2024-06-12 – KoiLoader/KoiStealer infection

• Financial Institutions Must Reexamine Their Technology Setup

• CISA adds Arm Mali GPU Kernel Driver, PHP bugs to its Known Exploited Vulnerabilities catalog

• EFF to Ninth Circuit: Abandoning a Phone Should Not Mean Abandoning Its Contents

• Ransomware crew may have exploited Windows make-me-admin bug as a zero-day

• Encode Justice NC – the Movement for a Safe, Equitable AI

• IT Security News Daily Summary 2024-06-12

• Join Cisco at the SEAT Conference: A Hub for Sports Industry Innovation and Insights

• Ukraine Police arrested a hacker who developed a crypter used by Conti and LockBit ransomware operation

• The Next Generation of Cell-Site Simulators is Here. Here’s What We Know.

• Microsoft June 2024 Patch Tuesday Update Fixed ~50 Vulnerabilities

• Proactive Application Security: Learning from the Recent GitHub Extortion Campaigns

• USENIX Security ’23 – Precise and Generalized Robustness Certification for Neural Networks

• Ukraine Arrests Cryptor Specialist Aiding Conti and LockBit Ransomware

• Mandiant Report: Snowflake Users Targeted for Data Theft and Extortion

• AWS touts security culture, AI protections at re:Inforce 2024

• Tech Groups Call On US DoJ To Investigate YouTube Monopoly

• Know Your Digital Rights at the Airport | Avast

• Tern AI wants to reduce reliance on GPS with low-cost navigation alternative

• Google Warns of Pixel Firmware Zero-Day Under Limited, Targeted Exploitation

• Israeli Researchers Expose Security Flaws in Visual Studio Code Marketplace

• Port 1801 Traffic: Microsoft Message Queue, (Wed, Jun 12th)

• Black Basta Ransomware Suspected of Exploiting Windows 0-day Before Patch

• National Internet Safety Month: This June, Take 4 Easy Steps to Stay Safe Online

• Streamlining CLI Authentication: Implementing OAuth Login in Python

• Daniel Stori’s ‘Just Touch It’

• Self-replicating Morris II worm targets AI email assistants

• Cleveland Cyberattack Turns Public Services Offline for Days

• MSMQ Vulnerability Allows Hackers to Takeover Microsoft Servers

• Data Security Firm Cyberhaven Raises $88 Million at $488 Million Valuation

• Fortinet Patches Code Execution Vulnerability in FortiOS

• Ransomware Group May Have Exploited Windows Vulnerability as Zero-Day

• Microsoft Patches Zero-Click Outlook Vulnerability That Could Soon Be Exploited

• EU To Impose Tariffs Up To 38 Percent On Chinese EVs

• Phone Scammers Impersonating CISA Employees

• ANSSI-BP-028 security recommendations updated to version 2.0

• Automating secrets management with HashiCorp Vault and Red Hat Ansible Automation Platform

• Creating a Web Application Firewall in Red Hat OpenShift

• Spotlight on Riskassure

• White House report dishes deets on all 11 major government breaches from 2023

• How to achieve cloud-native endpoint management with Microsoft Intune

• Some specifics regarding Fog Ransomware and TellYouThePass Ransomware

• No AI training in newly distrusted Terms of Service, Adobe says

• Ransomware Group Jumps on PHP Vulnerability

• Introducing the 0-day Threat Hunt Bug Bounty Promo Through July 11th, 2024!

• Tesla Investor Slams Elon Musk’s $56bn Pay Deal, Amid Another Lawsuit

• Hackers Exploiting Linux SSH Services to Deploy Malware

• Critical Flaw In Apple Ecosystems Let Attackers Gain Unauthorized Access

• JetBrains Warns of GitHub Plugin that Exposes Access Tokens

• Job Seekers Aware: Phishing Attacks On The Rise

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• Couple’s ₹47.7 Lakh Loss Amid Two-Week Digital Harassment and Arrest

• AWS unveils new and improved security features

• WithSecure Reveals Mass Exploitation of Edge Software and Infrastructure Appliances

• privacy impact assessment (PIA)

• Navigating the Summer Beat: Insights from Cisco Live and our Partners

• Stay Secure: How to Prevent Zero-Click Attacks on Social Platforms

• Building Cyber Resilience in Manufacturing: Key Strategies for Success

• Chinese Threat Actors Leveraging ‘Noodle RAT’ Backdoor

• Splunk’s security innovations boost threat detection and response

• Cryptojacking Campaign Targets Misconfigured Kubernetes Clusters

• Scattered Spider Now Affiliated with RansomHub Following BlackCat Exit

• CIOs Admit AI Is Investment Priority, Just Ahead Of Security, Cloud

• Businesses’ cloud security fails are ‘concerning’ – as AI threats accelerate

• China’s FortiGate attacks more extensive than first thought

• Prevalent adds AI-powered enhancements to reduce risk assessment time

• Firefox 127 Released With patch for 15 Vulnerabilities

• Acronis XDR enhances EDR with comprehensive cybersecurity for MSPs

• The Evolution of QR Code Phishing: ASCII-Based QR Codes

• Verizon exec reveals responsible AI strategy amid ‘Wild West’ landscape

• A Closer Look at Recent Changes to New York State Department of Financial Services (NYSDFS) Cybersecurity Regulation

• CORL Companion automates the security assessment response for healthcare vendors

• 70% of Cybersecurity Pros Often Work Weekends, 64% Looking for New Jobs

• Where Can We Win Against Ransomware with Halcyon

• New backdoor BadSpace delivered by high-ranking infected websites

• GitHub Paid Out Over $4 Million via Bug Bounty Program

• When Vendors Overstep – Identifying the AI You Don’t Need

• Acronis XDR expands endpoint security capabilities for MSPs

• Cisco ISE 3.4 begins June with a bang

• Advancing Innovation and Harnessing AI to Secure the Homeland

• 2024’s Best RMM Solutions for MSPs: Top 10 Remote IT Management Tools

• Black Basta Ransomware May Have Exploited MS Windows Zero-Day Flaw

• Lessons from the Ticketmaster-Snowflake Breach

• Chinese Hackers Leveraging ‘Noodle RAT’ Backdoor

• Insights on Cyber Threats Targeting Users and Enterprises in Brazil

• Nvidia Completes Stock Split To Make Shares More Affordable

• JetBrains fixed IntelliJ IDE flaw exposing GitHub access tokens

• 20,000 FortiGate appliances compromised by Chinese hackers

• Charon Android Botnet Made a Comeback With New Weapons

• 6 Best VPNs for Australia in 2024

• Medical-Targeted Ransomware Is Breaking Records After Change Healthcare’s $22M Payout

• Using AI for Political Polling

• Elon Musk Drops OpenAI Lawsuit, Threatens Apple Ban

• Chrome 126, Firefox 127 Patch High-Severity Vulnerabilities

• Facebook, Meta, Apple, Amazon Most Impersonated in Phishing Scams

• Another step forward towards responsible vulnerability disclosure in Europe

• Microsoft launches cybersecurity program to tackle attacks, protect rural hospitals

• Major cybersecurity upgrades announced to safeguard American healthcare

• Cybersecurity News: Snowflake hack update, BreachForums down again, Cylance data for sale

• ICS Patch Tuesday: Advisories Published by Siemens, Schneider Electric, Aveva, CISA

• Ransomware Group Exploits PHP Vulnerability Days After Disclosure

• The Future of Security Compliance: How Emerging Technologies are Setting New Rules

• China-Backed Hackers Exploit Fortinet Flaw, Infecting 20,000 Systems Globally

• New Phishing Campaign Deploys WARMCOOKIE Backdoor Targeting Job Seekers

• Microsoft Patches One Critical and One Zero-Day Vulnerability

• Cyber Security Today, June 12, 2024 – More Snowflake storage victims found, Microsoft issues new Windows patches, and more

• Critical Outlook RCE Vulnerability Exploits Preview Pane – Patch Now!

• Pure Storage Data Breach Following Snowflake Hack: LDAP Usernames, Email Addresses Exposed

• Breaking Compliance into Bite-Sized Portions

• 4 Things a Good Vulnerability Management Policy Should Include

• Cisco Tees off at 2024 Championship Season

• What is Defense in Depth Security?

• How Quantum Computing Can Change the Cybersecurity Landscape

• Lacework’s visibility enhancements give businesses real time insight into resource inventory

• AuthenticID introduces deep fake and generative AI detection solution

• Chinese FortiGate Espionage Campaign Snares 20,000+ Victims

• Upgrade Your PHP Installations for A Critical RCE Flaw Patch

• UK Trails Behind Europe in Technical Skills Proficiency, Coursera Report Finds

• Splunk unveils AI tools across its product portfolio

• Unit21 automates the check investigation process for financial institutions

• SentinelOne strengthens cloud security for AWS customers

• FBI offers thousands of free LockBit decryption keys

• London Tech Week 2024

• Microsoft Urges Windows Admins to Patch Microsoft Message Queuing RCE Flaw

• Obsidian Security and Databricks collaborate to protect sensitive business data

• Cleveland City Closes Offices Following Attack on IT Systems

• Microsoft Urges Windows Admins to Patch Microsoft Message Queuing RCE flaw

• Microsoft Patch Tuesday security updates for June 2024 fixed only one critical issue

• AI integration into iPhones raises data security concerns for X

• The Risks of Sharing Business Data with AI

• PHP CGI Windows Platform Remote Code Execution Vulnerability (CVE-2024-4577) Advisory

• Open-source security in AI

• Microsoft Issues Patches for 51 Flaws, Including Critical MSMQ Vulnerability

• Security and privacy strategies for CISOs in a mobile-first world

• Six months of SEC’s cyber disclosure rules

• Cybersecurity jobs available right now: June 12, 2024

• ISC Stormcast For Wednesday, June 12th, 2024 https://isc.sans.edu/podcastdetail/9020, (Wed, Jun 12th)

• Downtime Costs World’s Largest Companies $400 Billion a Year, According to Splunk Report

• How AI and LLMs are revolutionizing cyber insurance

• Let’s kick off our summer with a pwn-me-by-Wi-Fi bug in Microsoft Windows

• What We Know So Far about the Snowflake “Breach”

• Using AI in Business Security Decision-Making: Enhancing Protection and Efficiency

• AI Brings A New Era of Cyber Threats – Are We Ready?

• Securing Online Business Transactions: Essential Tools and Practices

• Patch Tuesday, June 2024 “Recall” Edition

• Creating Secure CRM Pipelines in Construction: Best Practices and Essential Strategies

• Smart Network Onboarding: Revolutionizing Connectivity With AI and Automation

• Cisco Recognized for Global Leadership in LGBTQ+ Inclusion

• TellYouThePass Ransomware Exploits Critical PHP Flaw, Patch NOW

• VERT Threat Alert: June 2024 Patch Tuesday Analysis

• Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing

• Mastering the Art of Incident Response: From Chaos to Control

• IT Security News Daily Summary 2024-06-11

• The Surprising Supporter Behind the Push to Modernize GSOCs: The C-Suite

• Patch Tuesday Update – June 2024

• digital profiling

• The best security keys of 2024: Expert tested

• The best AirTag wallets of 2024: Expert tested

• Microsoft fixes RCE vulnerabilities in MSMQ, Outlook (CVE-2024-30080, CVE-2024-30103)

• Microsoft Patch Tuesday June 2024, (Tue, Jun 11th)

• AWS completes Police-Assured Secure Facilities (PASF) audit in the Europe (London) Region

• Revolutionizing API Security in the Era of GenAI: An Architect’s Perspective

• Adobe Plugs Code Execution Holes in After Effects, Illustrator

• Appian CEO Matt Calkins challenges AI industry to prioritize trust, proposes new era of responsible development

• Cylance confirms the legitimacy of data offered for sale in the dark web

• The TIDE: Threat-Informed Defense Education (Qilin, RansomHub, BlackSuit)

• Network Equipment, IoT Devices are Big Security Risks: Forescout

• Only one critical issue disclosed as part of Microsoft Patch Tuesday

• Pure Storage pwned, claims data plundered by crims who broke into Snowflake workspace

• At last, Apple’s Messages app will support RCS and scheduling texts

• Implementing a compliance and reporting strategy for NIST SP 800-53 Rev. 5

• SASE vs. SSE: Explaining the differences

• How Cynet Makes MSPs Rich & Their Clients Secure

• Finance Phantom Review – A Crypto Trading Robot that Can Be Your Guardian Too

• Is Your Business Under Attack From AI?

• Cylance clarifies data breach details, except where the data came from

• US Leaders Dodge Questions About Israel’s Influence Campaign

• Cloud Security related acquisition news trending on Google

• Elon Musk Sounds Alarm on Apple’s Deep Integration with OpenAI, Citing Security Concerns

• From “Hello World” to “Hi AI”

• Cisco Simplifies Cloud Security with AWS Cloud WAN Service Insertion

• The role of unstructured data and Large Language Models in securing data

• Microsoft, Google Come to the Aid of Rural Hospitals

• Two Arrested in UK for Smishing Campaign Powered by Homemade SMS Blaster

• Ticketmaster is Tip of Iceberg: 165+ Snowflake Customers Hacked

• CloudGuard Network Security integrates with AWS Cloud WAN Service Insertion at launch to improve the operational efficiency of cloud security teams

• AVEVA PI Web API

• Intrado 911 Emergency Gateway

• Rockwell Automation ControlLogix, GuardLogix, and CompactLogix

• CISA Releases Six Industrial Control Systems Advisories

• AVEVA PI Asset Framework Client

• Cisco Secure Connect: The Turn-Key SASE Solution for Managed Service Providers

• Verizon DBIR 2024: The rise in software supply chain attacks explained

• Tech Giant Apple Launches Its Own Password Manager App

• Ransomware Attack on Pathology Services Vendor Disrupts NHS Care in London

• Chinese Actor SecShow Conducts Massive DNS Probing on Global Scale

• Phishing Attacks Targeting US and European Organizations Double

• Passkeys enhance security and usability as AWS expands MFA requirements

• The mystery of an alleged data broker’s data breach

• Risks of poor PKI management

• How to Use 1Password: A Guide for Beginners

• Forrester Names Palo Alto Networks a Leader in OT Security

• Mandiant Links Snowflake Breaches To Infostealer Infections

• Arm Warns Of Exploited Kernel Driver Vulnerability

• VSCode Extensions With Malicious Code Installed 229M Times

• Why Passwords Still Matter In The Age Of AI

• Ransomware Gangs Are Adopting More Brutal Tactics Amidst Crackdowns

• UK and Canada’s data chiefs join forces to investigate 23andMe mega-breach

• Multiple Vulnerabilities Plague Discontinued Netgear WNR614 Routers

• Apple Patches Vision Pro Vulnerability Used in Possibly ‘First Ever Spatial Computing Hack’

• Enhancing Home Security with Advanced Technology

• Threat Actor Breaches Snowflake Customers, Victims Extorted

• Arm zero-day in Mali GPU Drivers actively exploited in the wild

• Diligent AI enables leaders to better manage and respond to risk

• Protecto improves data security and privacy for GenAI apps in Databricks environments

• Applied Human Threat Management in Cyber Industry

• BlackBerry Cylance Data Offered for Sale on Dark Web

• Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051)

• SSLoad Malware Employs MSI Installer To Kick-Start Delivery Chain

• Remcos RAT Distributed As UUEncoding (UUE) File To Steal Logins

• Supreme Court Will Take Up Meta’s Bid to End Lawsuit Over Cambridge Analytica Privacy Scandal

• Dangerous Liaisons: The Interaction Between Threat Actors and High-Risk Devices

• SAP Patches High-Severity Vulnerabilities in Financial Consolidation, NetWeaver

• Recent glibc Vulnerabilities and How to Protect Your Linux System

• 23andMe data breach under joint investigation in two countries

• Strategies to Manage and Reduce Alert Fatigue in SOCs

• Apple Launches Private Cloud Compute for Privacy-Centric AI Processing

• Top 10 Critical Pentest Findings 2024: What You Need to Know

• Chinese Hackers using New Noodle RAT to Attack Linux Servers

• Google’s Chrome changes make life harder for ad blockers

• When things go wrong: A digital sharing warning for couples

• Software Supply Chain Risks ⎪Cassie Crossley (VP Supply Chain Security, Schneider Electric)

• XONA raises $18 million to accelerate product development

• Google makes life hard for ad blockers by changes in Chrome

• Apple Integrates OpenAI’s ChatGPT into Siri for iOS, iPadOS, and macOS

• UK Police Arrest Two People for Smishing via Fake Cell Tower

• Xona Raises $18 Million for OT Remote Access Platform

• Arm Warns of Exploited Kernel Driver Vulnerability

• Apple’s AI Features Demand More Power: Not All iPhones Make the Cut

• Who You Gonna Call? LEGAL COUNSEL!

• OpenAI Appoints Sarah Friar As First Finance Chief

• Clean Desk Policy

• Rebooting Europe’s Sustainable Growth and Connectivity with Cisco’s Policy Roadmap

• Cybersecurity News: Rural hospital support, 23andMe investigation, Snowflake breach notices

• Intel Halting Construction Of Israel Plant, Says Report

• Expert released PoC exploit code for Veeam Backup Enterprise Manager flaw CVE-2024-29849. Patch it now!

• Apple announces security updates across its platforms

• NVIDIA and Arm Urge Customers to Patch Bugs

• Noodle RAT: Reviewing the New Backdoor Used by Chinese-Speaking Groups

• A CISO game plan for cloud security

• China-Linked ValleyRAT Malware Resurfaces with Advanced Data Theft Tactics

• UK and Canadian Privacy Regulators Investigate 23andMe

• Chinese Autonomous Driving Start-Up Files For HK Flotation

• US Supreme Court To Hear Facebook Shareholder Suit Appeal

• Arm Warns Of Mali GPU Kernel Driver Flaws Exploited In The Wild

• RSAC Fireside Chat: Ontinue ups the ‘MXDR’ ante — by emphasizing wider automation, collaboration

• Enterprise Browser vs Remote Browser Isolation (RBI): Key Difference

• Hackers Weaponizing MSC Files In Targeted Attack Campaign

• QR code SQL injection and other vulnerabilities in a popular biometric terminal

• Shhh. Did you hear that?

• YesWeHack raises €26 million to expand its international growth

• UK Retailers Sue Amazon For £1bn Claiming Data Misuse

• Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers

• Snowflake Breach Exposes 165 Customers’ Data in Ongoing Extortion Campaign

• Microsoft and Google pledge to offer cybersecurity support to Rural Hospitals

• Hackers Used Homemade Mobile Antenna To Send Thousands Of Smishing Text

• WeLiveSecurity wins Best Cybersecurity Vendor Blog award!

• Cloud migration expands the CISO role yet again

• Preparing for a career in cybersecurity? Check out these statistics

• GDPR turns six: Expert discusses AI impact

• Snowflake customers not using MFA are not unique – over 165 of them have been compromised

• Security providers view compliance as a high-growth opportunity

• ISC Stormcast For Tuesday, June 11th, 2024 https://isc.sans.edu/podcastdetail/9018, (Tue, Jun 11th)

• Cyber attack flattens Japanese vid-sharing site Niconico and others

• Apple’s PCC an ambitious attempt at AI privacy revolution

• Growing Cyber Threats Amid Israel-Palestine Tensions

• Cloud Penetration Testing: Tools, Methodology & Prerequisites

• What is Mobile Application Penetration Testing: Benefits & Tools

• A Comprehensive Guide to API Penetration Testing

• Japanese video-sharing platform Niconico was victim of a cyber attack

• Apple Brings ChatGPT To iPhones, Macs In AI Push

• Why Choose Bug Bounty Programs? (Benefits and Challenges Explained)

• Elon Musk threatens Apple ban over OpenAI integration, cybersecurity experts raise alarms

• Ghostwriter v4.2

• IT Security News Daily Summary 2024-06-10

• UK NHS call for O-type blood donations following ransomware attack on London hospitals

• Apple set to launch a new password management app for iPhone and Mac Users

• Quit Using EmailGPT as Vulnerability Risks Users Data

• 2024-06-10 – Malspam pushing OriginLogger (AgentTesla)

• Apple’s OpenAI partnership: A boost for Siri or a trojan horse for Microsoft?

• Breach Debrief Series: Snowflake MFA Meltdown Creates Data Leak Blizzard

• Is CVSS Alone Failing Us? Insights From Our Webinar With Verizon

• Analysis of Flubot Malware on Android OS

• communications intelligence (COMINT)

• Hackers Leak 270GB of New York Times Data and Source Code on 4Chan

• The best VPN for streaming in 2024: Expert tested and reviewed

• New Extortion Scheme Targets GitHub Repositories

• Vulnerability Recap 6/10/24 – RCE Attacks in Major Platforms

• Christie’s confirms RansomHub crooks stole data on 45K clients

• Snowflake Attacks: Mandiant Links Data Breaches to Infostealer Infections

• Mandiant says hackers stole a ‘significant volume of data’ from Snowflake customers

• News about Facebook Data Breach and FBI alert on Akira Ransomware

• NHS Calls For Blood Donations After Ransomware Attack

• Ransomware Rampage in Canada: Can New Security Laws Stop It?

• Vulnerability Summary for the Week of June 3, 2024

• More_eggs Malware Disguised as Resumes Targets Recruiters in Phishing Attack

• Want free and anonymous access to AI chatbots? DuckDuckGo’s new tool is for you

• UK and Canada privacy watchdogs investigating 23andMe data breach

• Fortinet Expands Cloud Security Portfolio with Lacework Acquisition

• Fortinet to Expand AI, Cloud Security with Lacework Acquisition

• Criminal IP Unveils Fraud Detection Data Products on Snowflake Marketplace

• Navigating the Digital Future: Cisco’s Vision for the UK’s Tech-Led Growth

• Transforming Security: Latest Innovations Driving Partner Growth

• 9 out of 10 businesses seek AI-led threat detection and vulnerability management

• Free Android VPNs Suffering Encryption Failures, New Report

• Unit 42 — A Leader in The Forrester Wave for Cybersecurity Incident Response

• A European Summer of Sports is Upon Us – What Does it Mean for Security?

• Critical PyTorch Vulnerability Can Lead to Sensitive AI Data Theft

• Microsoft Revises AI Feature After Privacy Concerns

• Club Penguin Fans Target Disney Server, Exposing 2.5 GB of Internal Data

• KELA’s TPRM module identifies software supply chain risks

• Compliance Scorecard enhances its CaaS platform to improve MSPs’ cybersecurity posture

• Ransomware Is ‘More Brutal’ Than Ever in 2024

• Elevating threat detection and response to a new level

• 1-15 March 2024 Cyber Attacks Timeline

• Tips to prevent data breaches

• Criminal IP Unveils Innovative Fraud Detection Data Products on Snowflake Marketplace

• Radare2 : UNIX-like Reverse Engineering Framework And Command-line Toolset

• New York Times Responds to Source Code Leak

• PHP Patches Critical Remote Code Execution Vulnerability

• UNC5537 Targets Snowflake Customer Instances for Data Theft and Extortion

• Apache Log4j2 Vulnerability Remains A Threat For Global Finance

• Docker Hub Services No More Available In Russia

• Cox Modem Vulnerabilities Risked Modems To Hacking

• Critical Auth Bypass Flaw Affected Progress Telerik Report Server

• May 2024’s Most Wanted Malware: Phorpiex Botnet Unleashes Phishing Frenzy While LockBit3 Dominates Once Again

• Crowdstrike vs Trellix (2024): What Are The Main Differences?

• New York Times Source Code Leaks Online Via 4chan

• Microsoft Bows To Public Pressure, Disables Controversial Windows Recall By Default

• Christie’s Says Ransomware Attack Impacts 45,000 People

• PHP Updates Urged Over Critical Vuln That Could Lead To RCE

• FCC Approves $200 Million For Cybersecurity In Schools

• Cloud Control: Strategic Insights for Securing Your Digital Infrastructure

• Nvidia Patches High-Severity GPU Driver Vulnerabilities

• DataBee EntityViews accelerates zero trust architecture deployment

• The number of known Snowflake customer data breaches is rising

• Google Takes Down Influence Campaigns Tied to China, Indonesia, and Russia

• Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers

• Cybersecurity CPEs: Unraveling the What, Why & How

• IoT Vulnerabilities Skyrocket, Becoming Key Entry Point for Attackers

• Snowflake tells customers to enable MFA as investigations continue

• Christie’s data breach impacted 45,798 individuals

• Using Electronic Health Records (EHRs) for Healthcare Data Extraction

• Malicious Node on ComfyUI Steals Data from Crypto, Browser Users

• Poc Exploit Released For Veeam Authentication Bypass Vulnerability

• Cisco Builds on the CNAPP Movement to Secure and Protect the Cloud Native Application Estate

• Two arrested in UK over fake cell tower-powered smishing campaign

• 22 Chinese Nationals Sentenced to Long Prison Terms in Zambia for Multinational Cybercrimes

• Cisco Finds 15 Vulnerabilities in AutomationDirect PLCs

• Severe blood shortage hits NHS due to ransomware attack

• Six 6 Essential Security Practices for Protecting Cloud Data

• #MIWIC2024 One To Watch: Jasmine Eskenzi, Founder and CEO of The Zensory

• DuckDuckGo Launches Anonymous Chatbot Service to Protect User Privacy

• Can someone tell if I block their number?

• Microsoft ‘Recalls’ AI Screenshots After Backlash

• LinkedIn Disables Ad Feature In Europe Over Targeting Concerns

• Sticky Werewolf targets the aviation industry in Russia and Belarus

• Colorado Privacy Act (CPA)

• RSAC Fireside Chat: Jscrambler levels-up JavaScript security, slows GenAI-fueled privacy loss

• Utah Consumer Privacy Act (UCPA)

• Identity Data Automation: The What and Why

• Does the Business Understand the Current State of Your Security Program?

• Bypassing 2FA with phishing and OTP bots

• Christie’s Says Ransomware Attack Impacts 45,000 People

• Entrust Citizen Identity Orchestration enhances citizen adoption of digital public services

• Cybersecurity News: Microsoft resets Recall, LastPass outage update, New York Times breach

• Boeing Starliner Docks With Space Station In Historic Flight

• Nio Sees EV Sales Surge Amidst Price War

• Huawei Claims AI Chip Equals Nvidia

• Google Will Not Face Jury In US Adtech Trial

• ALPHV Ransomware Deployment Started With RDP Access And ScreenConnect Installations

• Threat Actor Claims to Leak 270GB of New York Times Data

• Cyber Security Today, June 10, 2024 – Microsoft backs down on Recall

• X now allows adult content

• Duckduckgo Launches Anonymous AI Chatbots

• Mind the Gap: Strengthening Cybersecurity Through Behavioral Awareness

• How Your Business Can Benefit from a Network Security Policy

• NHS Appeals For Blood and Volunteers After Cyber-Attack

• Meta Plan To Train AI With EU, UK User Data Spurs Complaints

• A week in security (June 3 – June 9)

• Beware of Fake KMSPico Activators that Deliver Vidar Stealer Malware

• Sticky Werewolf Expands Cyber Attack Targets in Russia and Belarus

• Ticketmaster Data Breach and Rising Work from Home Scams

• Radare: Open-source reverse engineering framework

• AI’s role in accelerating vulnerability management

• Cybersecurity pros change strategies to combat AI-powered threats

• Why CISOs need to build cyber fault tolerance into their business

• Protecting identity in a world of deepfakes and social engineering

• ISC Stormcast For Monday, June 10th, 2024 https://isc.sans.edu/podcastdetail/9016, (Mon, Jun 10th)

• IcedID Brings ScreenConnect and CSharp Streamer to ALPHV Ransomware Deployment

• Frontier Communications data breach impacted over 750,000 individuals

• IT Security News Weekly Summary – Week 23

• IT Security News Daily Summary 2024-06-09

• Attacker Probing for New PHP Vulnerablity CVE-2024-4577, (Sun, Jun 9th)

• Cybersecurity 101: Understanding the Basics of Online Protection

• New Ransomware Variant “Fog” Targets U.S. Education and Recreation Sectors

• Attackers Exploit 2018 ThinkPHP Vulnerabilities to Install ‘Dama’ Web Shells

• Software Supply Chain Attacks: A Major Strategy for Cybercriminals

• New macOS Malware Threat: What Apple Users Need to Know

• PHP addressed critical RCE flaw potentially impacting millions of servers

• eSIM Connections: Redefining Mobile Service and Flexibility

• Akira: Perhaps the next big thing in ransomware, says Tidal threat intelligence chief

• The Evolving Cyber Landscape: Insights from 2024 Reports

• 5 Signs Your Wi-Fi Has Been Hacked: Protect Your Bank Details

• Security Affairs newsletter Round 475 by Pierluigi Paganini – INTERNATIONAL EDITION

• Seccomp for Kubernetes workloads

• FBI Reveals 7,000 Decryption Keys to Combat LockBit Ransomware

• Week in review: Atlassian Confluence RCE PoC, new Kali Linux, Patch Tuesday forecast

• Ticketmaster and Santander Breaches Expose Cloud Security Flaws

Generated on 2024-06-16 23:58:21.639871