IT Security News Weekly Summary – Week 27

• IT Security News Daily Summary 2024-07-07

• Husky Owners – 16,502 breached accounts

• Hacker Breaches OpenAI, Steals Sensitive AI Tech Details

• Passkeys Aren’t Foolproof: New Study Reveals Vulnerabilities in Popular Authentication Method

• Apache fixed a source code disclosure flaw in Apache HTTP Server

• USENIX Security ’23 – Notice the Imposter! A Study on User Tag Spoofing Attack in Mobile Apps

• Qilin Attack On London Hospitals Leaves Cancer Patient With No Option

• Security Affairs Malware Newsletter – Round 1

• Critical npm Account Takeover Vulnerability Sold on Dark Web

• The Decline of Serverless Computing: Lessons For Enterprises To Learn

• Applying Bloch’s Philosophy to Cyber Security

• Breaking the Silence: The OpenAI Security Breach Unveiled

• Twilio Alerts Authy Users of Potential Security Risks Involving Phone Numbers

• Security Affairs newsletter Round 479 by Pierluigi Paganini – INTERNATIONAL EDITION

• Alabama State Department of Education suffered a data breach following a blocked attack

• Week in review: A need for a DDoS response plan, human oversight in AI-enhanced software development

• Russian-Linked Cybercampaigns put a Bull’s-Eye on France. Their Focus? The Olympics and Elections

• CVE-2024-6387: New OpenSSH RegreSSHion Vulnerability Gives Hackers Root Access on Linux Servers – 700,000+ Linux Boxes Potentially at Risk

• Researchers Track Identities and Locations of CSAM Users via Malware Logs

• IT Security News Daily Summary 2024-07-06

• Three critical steps to close the cybersecurity talent gap, once and for all

• GootLoader is still active and efficient

• Ministry of Justice Workers’ Online Comments Highlight Workplace Communication Risks

• Hackers Attack HFS Servers to Install Malware and Mine Monero

• Behind the Scenes: How Patelco Responded to the Ransomware Threat

• Millions of Twilio Authy Users Potentially Exposed in Data Breach.

• USENIX Security ’23 – The OK Is Not Enough: A Large Scale Study of Consent Dialogs in Smartphone Applications

• Ransomware Extortion Demands Increase to $5.2 Million Per Attack

• Researchers Discover Cache of Billion Stolen Passwords

• New Mallox Ransomware Variant Targets Linux Systems

• New Snailload Attack Demonstrates Exposed User Activities Due to Network Latency

• Hackers Leaking Taylor Swift Tickets? Don’t Get Your Hopes Up

• Fintech Frenzy as Affirm and Others Emerge as Victims in Evolve Breach

• Indonesia’s Worst Cyber Attack Exposes Critical IT Policy Failures

• The Problem With Bug Bounties

• Latest Ghostscript Vulnerability Haunts Experts as the Next Big Breach Enabler

• Traeger Security Bugs Threatening Grillers’ Hard Work

• New Eldorado Ransomware Targets Windows, VMware ESXi VMs

• Passkey Redaction Attacks Subvert GitHub, Microsoft Authentication

• Hackers stole OpenAI secrets in a 2023 security breach

• Cyber Security Today, Week in Review for week ending July 5, 2024

• Roblox Developer Conference (2024) – 10,386 breached accounts

• Cloudflare Details 1.1.1.1 Service Outage Following BGP Hijack

• 10 Security Tips for Business Travellers This Summer

• Friday Squid Blogging: Newly Discovered Vampire Squid

• Devs claim Apple is banning VPNs in Russia ‘more effectively’ than Putin

• IT Security News Daily Summary 2024-07-05

• Simplifying Infrastructure Management with Imperva’s Terraform Module for Cloud WAF

• USENIX Security ’23 – Eye-Shield: Real-Time Protection of Mobile Device Screen Information from Shoulder Surfing

• Ticketmaster hackers release stolen ticket barcodes for Taylor Swift Eras Tour

• OpenAI breach is a reminder that AI companies are treasure troves for hackers

• Enhance IaC Security With Mend Scans

• Chrome to Block Entrust Certificates in November 2024

• CISA Releases Guide to Operational Security for Election Officials

• YouTube: A Prime Target for Cybercriminals

• Strengthening Web Application Security With Predictive Threat Analysis in Node.js

• How do cybercriminals steal credit card information?

• 15 Alarming Cyberbullying Statistics and Facts for 2024

• 16 common types of cyberattacks and how to prevent them

• cyber attack

• Randall Munroe’s XKCD ‘Routine Maintenance’

• Cancer patient forced to make terrible decision after Qilin attack on London hospitals

• Hacker Stole Secrets From OpenAI

• ‘Polyfill’ Supply Chain Threat: 4x Worse Than We Thought

• Cisco Patches NX-OS Zero-Day Exploited by Chinese Attackers

• Ticketmaster Breach: ShinyHunters Leak 440K Taylor Swift Eras Tour Ticket Data

• OpenAI Kept Mum About Hack of Sensitive AI Research

• Airtel India denies 370 million user data breach

• Cybersecurity in Healthcare: An In-Depth Guide by Heimdal®

• Best Automated Patch Management Software in 2024

• HealthEquity Hit by Data Breach: Protected Information Exposed

• Gen Z’s Payment Preferences are Transforming Retail and Dining

• Step-By-Step Guide: Configuring IPsec Over SD-WAN on FortiGate and Unveiling Its Benefits

• What Is a Man-in-the-Middle (MITM) Attack? Prevention + 7 Types

• Mastering YouTube Visibility: Essential Hacks for Success

• EU Tariffs On Chinese EVs Come Into Force

• Meet Brex, Google Cloud, Aerospace and more at Disrupt 2024

• Wise and Evolve Data Breach Highlights Risks of Third-Party Partnerships

• Singapore is working on technical guidelines for securing AI systems

• Hackers leak 170k Taylor Swift’s ERAS Tour Barcodes

• Inside the Ticketmaster Hack: 440,000 Taylor Swift Fans at Risk

• OVHcloud Hit with Record 840 Million PPS DDoS Attack Using MikroTik Routers

• Webinar Alert: Learn How ITDR Solutions Stop Sophisticated Identity Attacks

• The World’s Most Popular 3D-Printed Gun Was Designed by an Aspiring Terrorist

• Latest Ghostscript vulnerability haunts experts as the next big breach enabler

• Overlooked Domain Name Resiliency Issues: Registrar Communications, (Fri, Jul 5th)

• AI and Cybersecurity: Mitigating Risks and Safeguarding Digital Assets

• Cloudflare Details 1.1.1.1 Service Outage Incident

• Polyfill.io Supply Chain Attack: 384,773 hosts still embedding a polyfill JS script linking to the malicious domain

• OVHcloud Sees Record 840 Mpps DDoS Attack

• In Other News: Microsoft Details ICS Flaws, Smart Grill Hacking, Predator Spyware Activity

• How Intelligence Sharing Can Help Keep Major Worldwide Sporting Events on Track

• This New Ransomware Group Uses Phone Calls to Pressure Victims

• Blueprint for Success: Implementing a CTEM Operation

• Vinted Fined €2.3m Over Data Protection Failure

• Hacker Stole OpenAI Internal Documents – Report

• Editorial: Labour Wins: A New Tech Strategy for Britain?

• Mekotio Banking Trojan Attacking American Users To Steal Financial Data

• Get Advanced Ad Blocking and Superior Data Privacy Tools for Just $11 Until 7/21

• New Golang Zergeca Botnet appeared in the threat landscape

• Amazon To Discontinue Astro Security Robot

• Kimusk’s HappyDoor Executed Via regsvr32 File To Evade Detection

• New Golang-based Zergeca Botnet appeared in the threat landscape

• Some Data Is ‘Breached’ During a Hacking Attack on the Alabama Education Department

• EU Opens Applications for Cybersecurity and Digital Skills Funding

• Hackers Compromised Ethereum’s Mailing List to Drain Their Crypto Funds

• CVE-2024-6387 – regreSSHion Remote Code Execution vulnerability seen in OpenSSH

• GootLoader Malware Still Active, Deploys New Versions for Enhanced Attacks

• Cybersecurity News: Senator pressures CISA, Velvet Ant exploits Cisco, Europol crushes Cobalt

• Cyber Security Today, July 5, 2024 – Prepare for business email compromise attacks

• Turning Jenkins Into a Cryptomining Machine From an Attacker’s Perspective

• Microsoft discloses 2 flaws in Rockwell Automation PanelView Plus

• Malicious QR Reader App in Google Play Delivers Anatsa Banking Malware

• Turla: A Master of Deception

• The Pros and Cons of Secure Access Service Edge (SASE)

• India’s Airtel dismisses data breach reports amid customer concerns

• Turla: A Master’s Art of Evasion

• Europol says mobile roaming tech is making its job too hard

• HubSpot Investigates Limited Security Breach Affecting Customer Accounts

• Hackers compromised Ethereum mailing list and launched a crypto draining attack

• Understanding API Key Verification

• Extending the Reach and Capabilities of Digital Signing With Standards

• Twilio data breach exposes millions of contact numbers

• Understanding the Risks to SaaS Data Security

• Threat Actor Claiming 2FA Bypass Vulnerability in HackerOne Bug Bounty Platform

• Smashing Silos With a Vulnerability Operations Center (VOC)

• Social media and teen mental health – Week in security with Tony Anscombe

• Infostealing malware masquerading as generative AI tools

• Polyfill[.]io Attack Impacts Over 380,000 Hosts, Including Major Companies

• 47% of corporate data stored in the cloud is sensitive

• 99% of IoT exploitation attempts rely on previously known CVEs

• New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks

• Organizations weigh the risks and rewards of using AI

• Hackers Abused Twilio API To Verify Phone Numbers used For MFA

• New infosec products of the week: July 5, 2024

• Ticketmaster Breach: ShinyHunters Leak 440,000 Taylor Swift Eras Tour Tickets

• IT Security News Daily Summary 2024-07-04

• Amazon Prime Day 2024: Cyber criminals Are Ready – Are You?

• RSA Conference 2024: Exploring our Current Cybersecurity Realities Amidst AI Myths

• Volcano Demon Ransomware Gang Makes Phone Calls to Victim for Ransom

• Building an Effective Zero Trust Security Strategy for End-To-End Cyber Risk Management

• The Runtime Secrets’ Security Gap

• OVHcloud mitigated a record-breaking DDoS attack in April 2024

• Craig Newmark Philanthropies Matches EFF’s Monthly Donors

• Privacy-Enhanced Data Sharing: How to Drive Business Growth by Protecting Your Data

• RBI Issues Advisory to Support Cybersecurity in Banks

• RSA Conference 2024 Highlights: Cutting-Edge Cybersecurity Innovations

• Vodafone, Virgin Media O2 Extend Network Sharing Deal

• Maintaining Sanity Amidst Unnecessary CVE Reports

• California Advances Unique Safety Regulations for AI Companies Despite Tech Firm opposition

• Cyber Insurance Premiums Are Declining Worldwide as Businesses Improve Security, Howden Insurance Broker Report Finds

• New Intel CPU Vulnerability ‘Indirector’ Found

• Europol Warns of Home Routing Challenges For Lawful Interception

• IBM and Microsoft pledge to offer Cloud Data Protection

• Threads Hits 175 Million Users, One Year After Launch

• Operation Morpheus Disrupts 593 Cobalt Strike Servers Used for Ransomware

• Addressing the Challenges of Scaling GenAI

• Volcano Demon Ransomware Group Rings Its Victims To Extort Money

• Meta Faces Suspension of AI Data Training in Brazil

• Russia’s Central Bank Tells Businesses To Use Crypto To Avoid Sanctions

• Keeper Security Launches Zero-Knowledge Remote Browser Isolation in Keeper Connection Manager

• Compliance, Security and the Role of Identity

• Rethinking Cybersecurity in the Age of AI

• A World of Novel Risks: Stress-Testing Security Assumptions

• Comparitech Report Reveals Average Ransom Demands of Over $5.2 Million in Early 2024

• SEBI Circular Forces Stock Gaming Apps to Shut Down and Reevaluate

• Hackers attack HFS servers to drop malware and Monero miners

• Breach Debrief Series: Twilio’s Authy Breach is a MFA Wakeup Call

• Over $1bn in Cryptocurrency Lost to Web3 Cyber Incidents in 2024

• ShinyHunters Leak 33M Twilio Authy Phone Numbers, Neiman Marcus and Truist Bank Data

• Authy phone numbers accessed by cybercriminals, warns Twilio

• Healthcare fintech firm HealthEquity disclosed a data breach

• Gamers’ Data Exposed in RPG Platform Roll20 Breach

• Alert: French Diplomats Targeted By Russian Cyber Attacks

• Ghostscript Vulnerabilities Patched in Recent Ubuntu Updates

• New Android Spyware Steals Data from Gamers and TikTok Users

• IT Security Responsibilities for Online Start-Ups

• ASML Veldhoven Expansion Gains Dutch Court Approval

• How Apple Intelligence’s Privacy Stacks Up Against Android’s ‘Hybrid AI’

• Brazil data protection authority bans Meta from training AI models with data originating in the country

• Security vulnerability reporting: Who can you trust?

• Microsoft Uncovers Critical Flaws in Rockwell Automation PanelView Plus

• Fisker Seeks Approval For Firesale Of Remaining EVs

• OVHcloud blames record-breaking DDoS attack on MikroTik botnet

• Jeff Bezos To Sell $5 Billion Worth Of Amazon Shares

• Mekotio Banking Trojan Threatens Financial Systems in Latin America

• Splunk fixed tens of flaws in Splunk Enterprise and Cloud Platform

• New Ransomware Group Phones Execs to Extort Payment

• 384,000 sites pull code from sketchy code library recently bought by Chinese firm

• Europol nukes nearly 600 IP addresses in Cobalt Strike crackdown

• United States of America, Independence Day 2024

• Avoid malware while streaming UEFA EURO 2024 and Copa America CONMEBOL

• UK’s NCA Leads Major Cobalt Strike Takedown

• Safeguarding the Olympic Data Legacy: Sensitive Information Supply Chain Risks in the Digital Age

• Over 380,000+ Hosts Embedding Polyfill JS script Linking to Malicious Domain

• FakeBat Malware Weaponizing AnyDesk, Zoom, Teams & Chrome

• New ‘Pryx’ Ransomware Hijacked 30,000 University Applications

• Hackers obtained user data from Twilio-owned 2FA authentication app Authy

• Hackers abused API to verify millions of Authy MFA phone numbers

• Infostealer malware logs used to identify child abuse website members

• Twilio Confirms Data Breach After Hackers Leak 33M Authy User Phone Numbers

• Brazil Halts Meta’s AI Data Processing Amid Privacy Concerns

• Threat Actors Selling Shopify Commerce Platform Data on Dark Web

• The Metadata Minefield: Protecting All Your Sensitive Data

• FireTail Unveils Free Access for All to Cutting-Edge API Security Platform

• Ransomware scum who hit Indonesian government apologizes, hands over encryption key

• Ransomware news trending on Google

• Hackers steal millions of Authy 2FA phone numbers

• 4 key steps to building an incident response plan

• Global Police Operation Shuts Down 600 Cybercrime Servers Linked to Cobalt Strike

• Organizations use outdated approaches to secure APIs

• Twilio’s Authy App Breach Exposes Millions of Phone Numbers

• Only 13% of organizations are cyber mature

• Flask Web Application for Smart Honeypot Deployment Using Reinforcement Learning

• Careful with your marshmallows 🔥

• It’s Time For Lawmakers to Listen to Courts: Your Law Regulating Online Speech Will Harm Internet Users’ Free Speech Rights

• Emulating the Sabotage-Focused Russian Adversary Sandworm– Part 2

• Securing Supply Chains After Baltimore

• What’s new in the MSRC Report Abuse Portal and API

• Dissecting GootLoader With Node.js

• Careful with your marshmallows 🔥

• IT Security News Daily Summary 2024-07-03

• HealthEquity says data breach is an ‘isolated incident’

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Announcing initial services available in the AWS European Sovereign Cloud, backed by the full power of AWS

• Careful with your marshmallows 🔥

• CVE of the month, the supply chain attack hidden for 10 years CVE-2024-38368

• Roll20, an online tabletop role-playing game platform, discloses data breach

• Careful with your marshmallows 🔥

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• Careful with your marshmallows 🔥

• Europol Announces Crackdown on Cobalt Strike Servers Used by Cybercriminals

• Operation Morpheus took down 593 Cobalt Strike servers used by threat actors

• Careful with your marshmallows 🔥

• Randall Munroe’s XKCD ‘Bad Map Projection: Exterior Kansas’

• Guidance on the Critical OpenSSH Vulnerability regreSSHion

• Careful with your marshmallows 🔥

• Protecting the Mental Health of Cybersecurity Leaders

• Best 7 SOC 2 Compliance Software in 2024

• Understanding Properties of Zero Trust Networks

• The importance of compliance officers

• ISO 27001:2022 and TISAX: overlaps and differences

• Careful with your marshmallows 🔥

• CocoaPods Security Alert: Critical Bugs Expose Millions of Apps

• How to Combat Financial Crime and Achieve Business Success with KYB

• Careful with your marshmallows 🔥

• New Online Scam: Fraudsters Pose as Police Officers to Extort Money

• You’re Telling Me That Ad Was Fake? Malvertising Is Sneakier Than Ever | Avast

• The Not-So-Secret Network Access Broker x999xx

• Careful with your marshmallows 🔥

• The Scourge of Ransomware

• CISO Panel: How Security Teams Are Evolving Their Strategies in 2024

• UK law firms feeling pressure to prioritise business continuity over cybersecurity

• Careful with your marshmallows 🔥

• Traeger security bugs bad news for grillers with neighborly beef

• Australian Man Arrested for Evil Twin Wi-Fi Attacks on Domestic Flights

• The Growing Cybersecurity Concerns of Generative Artificial Intelligence

• New Rules for Quantum Encryption Unveiled by Cryptographers

• WordPress Plugins at Risk From Polyfill Library Compromise

• Ransomware gang starts threatening victims via phone

• EU Proposes Import Duties On China’s Temu, Shein, AliExpress – Report

• UN and DFINITY Partner on MSME Blockchain Project for Secure Funding

• Minister of Foreign Affairs of Latvia, Ms Baiba Braže, and a delegation of high-level cybersecurity officials from Moldova visited ENISA headquarters in Athens

• Careful with your marshmallows 🔥

• Wordfence Intelligence Weekly WordPress Vulnerability Report (June 24, 2024 to June 30, 2024)

• ASUS and NordVPN Partner to Integrate VPN Service into Routers

• Does your business have an AI blind spot? Navigating the risks of shadow AI

• Twilio says hackers identified cell phone numbers of two-factor app Authy users

• New Open SSH Vulnerability

• RegreSSHion Vulnerability Exposes Linux Systems to RCE Attacks

• RCE, DoS Exploits Found in Rockwell PanelView Plus: Patch Now

• Careful with your marshmallows 🔥

• EU Claims Meta’s Paid Ad-Free Option Violates Digital Competition Rules

• Exploring Fake-Bat Loaders: Distribution Tactics and Cybercrime Networks

• Microsoft Uncovers Major Flaws in Rockwell PanelView Plus

• Biden Administration Revoked Eight Licences For Huawei In 2024

• Millions of Apple Applications Were Vulnerable to CocoaPods Supply Chain Attack

• LockBit group claims the hack of the Fairfield Memorial Hospital in the US

• New Ransomware Group Uses Phone Calls to Pressure Victims, Researchers Say

• Vulnerabilities in CocoaPods: The Achilles’ Heel of the Apple App Ecosystem

• Secator: Open-Source Pentesting Swiss Army Knife

• Careful with your marshmallows 🔥

• Salesforce Shareholders Reject CEO Marc Benioff’s Compensation Plan

• The latest from Black Hat USA 2024

• Understanding the FakeBat Loader: Distribution Tactics and Cybercriminal Infrastructure

• Careful with your marshmallows 🔥

• RegreSSHion CVE-2024-6387: A Targeted Exploit in the Wild

• Cyber Extortion Soars: SMBs Hit Four Times Harder

• Sustainability and ESG: Understanding the Difference and Why It Matters

• Tesla Sales Fall For Second Straight Quarter

• US car dealerships are recovering from massive cyberattack: 3 things you should know

• Protecting our data in a world of rising cyber attacks

• Blurred lines: Securing the physical and digital sides of business

• Careful with your marshmallows 🔥

• Odaseva Raises $54 Million for Salesforce Enterprise Data Security Platform

• Over 380k Hosts Still Referencing Malicious Polyfill Domain: Censys

• LockBit Hits Croatia’s Biggest Hospital, Demands Ransom for Data

• TotalEnergies Cyber Attack: Data of 210,715 Customers Exposed

• Harnessing the Power of Managed CNAPP by Check Point

• Fear and Silence: 50% of Employees Hesitant to Report Security Errors

• Careful with your marshmallows 🔥

• The Growing Dichotomy of AI-Powered Code in Cloud-Native Security

• Feds Hit Health Entity With $950K Fine in Ransomware Attack

• Careful with your marshmallows 🔥

• Patelco Credit Union Scrambling to Restore Systems Following Ransomware Attack

• 300k Affected by Year-Old Data Breach at Florida Community Health Centers

• Brazil Data Regulator Bans Meta From Mining Data to Train AI Models

• Cybersecurity M&A Roundup: 29 Deals Announced in June 2024

• Survey Surfaces Growing Lack of Cybersecurity Confidence

• Half of Employees Fear Punishment for Reporting Security Mistakes

• Join Us 07-19-24 for “Hacking SOC Automation” – Super Cyber Friday

• Hiap Seng Industries Servers Attacked by Ransomware

• Gogs Vulnerabilities Let Attackers Hack Instances And Steal Source Code

• Juniper SRX Vulnerability Allows Attackers Trigger DoS Condition

• Careful with your marshmallows 🔥

• The Emerging Role of AI in Open-Source Intelligence

• Industry Groups Ask HHS for Guidance on Massive Change Breach Reports

• Careful with your marshmallows 🔥

• Dozens of Arrests Disrupt $2.7m Vishing Gang

• Careful with your marshmallows 🔥

• Affirm says Evolve Bank data breach also compromised some of its customers

• Bitwarden vs KeePass (2024): Battle of the Best – Who Wins?

• American Patelco Credit Union suffered a ransomware attack

• Supposed Grasshopper Operators Impersonate Israeli Government and Private Companies to Deploy Open-Source Malware

• Careful with your marshmallows 🔥

• Apple To Gain Observer Role On OpenAI’s Board – Report

• Proton Is Launching Encrypted Documents to Take On Google Docs

• Careful with your marshmallows 🔥

• regreSSHion OpenSSH Flaw: Potential Exploitation Attempts Seen, but Mass Attacks Unlikely

• Intel Says No New Mitigations Required for Indirector CPU Attack

• How Sekoia.io Uses the MITRE ATT&CK Framework to Enhance SOC Capabilities

• Japan’s Government Ends Use Of Floppy Disks

• Evolve Bank Data Breach Puts Affirm Cardholders Info at Risk

• How to Manage User Passwords on Linux

• In a major update, Proton adds privacy-safe document collaboration to Drive, its freemium E2EE cloud storage service

• Careful with your marshmallows 🔥

• Microsoft MSHTML Flaw Exploited to Deliver MerkSpy Spyware Tool

• Cybersecurity News: Evolve breach update, Patelco cyberattack, LockBit claims Croatian cyberattack

• IoT Security Regulations: A Compliance Checklist – Part 2

• Cybersecurity Best Practices for SOX Compliance

• Careful with your marshmallows 🔥

• Man-In-The-Middle Attacks are Still a Serious Security Threat

• APP Fraud Singled Out as Biggest Financial Crime Threat

• New RUSI Report Exposes Psychological Toll of Ransomware, Urges Action

• Cyber Security Today, July 3, 3034 – Beware of advanced attack tactics

• How Web Control and Parental Monitoring Work

• Polish government investigates Russia-linked cyberattack on state news agency

• The Impossibility of “Getting Ahead” in Cyber Defense

• Careful with your marshmallows 🔥

• How to Achieve Crypto Resilience for a Post-Quantum World

• Critical WordPress Plugin Flaw Exposes 90,000+ WordPress Sites

• One in ten Brits targeted by scammers this summer

• FCC Drafts Rules to Strengthen Cyber of Emergency Systems

• Careful with your marshmallows 🔥

• Regula Forensic Studio updates improve the accuracy of forensic examinations

• Dozens of Arrests Disrupt €2.5m Vishing Gang

• Polyglot Files Enable Cyber Attack Chains and Methods for Detection & Disarmament

• Cybersecurity is Now a Top Concern for Auto Industry, Report Finds

• Careful with your marshmallows 🔥

• The Secret Threat Hiding in Your SaaS Stack: Shadow IT

• US Supreme Court Ruling on Chevron Doctrine May Upend Future Cybersecurity Regulation

• Careful with your marshmallows 🔥

• Boardroom Blindspot: How New Frameworks for Cyber Metrics are Reshaping Boardroom Conversations

• FakeBat Loader Malware Spreads Widely Through Drive-by Download Attacks

• Hackers Claiming of Sandbox Escape RCE in 0-DAY Google Chrome

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• UK soldiers banking details leaked to China says Barings Law

• Harnessing AI to Thwart Ransomware Threats: A Strategic Approach

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Maintaining human oversight in AI-enhanced software development

• South Korean ERP Vendor’s Server Hacked to Spread Xctdoor Malware

• Israeli Entities Targeted by Cyberattack Using Donut and Sliver Frameworks

• Careful with your marshmallows 🔥

• Cybersecurity jobs available right now: July 3, 2024

• Secator: Open-source pentesting Swiss army knife

• Rafel RAT Attacking Android Devices To Gain Unauthorized Access

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• How do you assess the risk of AI within your operations?

• Companies spend more on cybersecurity but struggle to track expenses

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• USENIX Security ’23 – Efficient 3PC for Binary Circuits with Application to Maliciously-Secure DNN Inference

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• IT Security News Daily Summary 2024-07-02

• 5 ChromeOS settings you should change for a more secure Chromebook – here’s how

• Newsletter writer covering Evolve Bank’s data breach says the bank sent him a cease and desist letter

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Careful with your marshmallows 🔥

• Evolve Bank data breach impacted fintech firms Wise and Affirm

• Careful with your marshmallows 🔥

• Affirm fears customer info pilfered during ransomware raid at Evolve Bank

• Threat Brief: CVE-2024-6387 OpenSSH RegreSSHion Vulnerability

• How to secure Azure Functions with Entra ID

• Careful with your marshmallows 🔥

• Affirm admits customer info pilfered during ransomware raid at Evolve Bank

• Vulnerabilities in PanelView Plus devices could lead to remote code execution

• Yieldstreet says some of its customers were affected by the Evolve Bank data breach

• Careful with your marshmallows 🔥

• Latest OpenSSH Vulnerability Might Impact 14M Linux Systems

• Tech Giants Face Backlash Over AI Privacy Concerns

• Rapid7 To Acquire Attack Surface Management Startup Noetic Cyber

• Careful with your marshmallows 🔥

• Outsmarting Cyber Threats: How Large Language Models Can Revolutionize Email Security

• The CDK Global outage: Explaining how it happened

• Careful with your marshmallows 🔥

• ‘Perfect 10’ Apple Supply Chain Bug — Millions of Apps at Risk of CocoaPods RCE

• Careful with your marshmallows 🔥

• The Future of Cybersecurity Jobs in an AI-Driven World

• Mobile Political Spam Surges Threefold For 2024 Election

• US Renewable Energy Sector vulnerable to cyber threats says FBI

• Careful with your marshmallows 🔥

• How Patch Management Software Solves the Update Problem

• Life at Fortinet: Product Marketing Innovation

• Strengthening Cybersecurity – Transforming in the Age of Healthcare Digitalization

• RansomHub and RansomHouse: Unmasking the Culprits Behind Italy’s Attacks

• Chrome Update Will Block Entrust Certificates by November 2024

• CISA Releases the Marine Transportation System Resilience Assessment Guide

• Almost Every Apple Device Vulnerable To CocoaPods Supply Chain Attack

• TeamViewer Hack Officially Attributed To Russian Cyberspies

• Splunk Patches High-Severity Vulnerabilities In Enterprise Product

• Google Patches 25 Android Flaws, Including Critical Privilege Escalation Bug

• Australia Warns Of Rogue Wi-Fi At Airports

• A Deep Dive into the EU Cybersecurity Certification Scheme on Common Criteria (EUCC)

• mySCADA myPRO

• CISA Releases Seven Industrial Control Systems Advisories

• Johnson Controls Kantech Door Controllers

• ICONICS and Mitsubishi Electric Products

• CDK Cyberattack Traced to BlackSuit Hackers: U.S. Auto Industry Under Siege

• LockBit Ransomware Attack on Infosys McCamish Systems Exposes Sensitive Data of Over Six Million Individuals

• Deepwatch appoints John DiLullo as CEO

• Ransomware Attack Demands Reach a Staggering $5.2m in 2024

• Google Launches $250,000 kvmCTF Bug Bounty Program for KVM Exploits

• It all adds up: Pretexting in executive compromise

• DeepBrand Clustering – an Evolution in Brand Spoofing Prevention

• Over 14M servers may be vulnerable to OpenSSH’s regreSSHion RCE flaw. Here’s what you need to do

• Best Parental Control App for Parents in 2024

• It’s World UFO Day! Defend Against Unidentified File Objects (UFOs) with Votiro

• Five Challenges to Adoption of Liquid Cooling in Data Centers

• Zero Trust Is Revolutionizing API Security in Financial Services

• Hackers Using Polyglot Files In the Wild, Here Comes PolyConv For Detection

• Prudential Financial data breach impacts 2.5 million people, not 36,000 as first thought

• New Orcinius Trojan Uses VBA Stomping to Mask Infection

• Preparing for Q-Day as NIST Nears Approval of PQC Standards

• Affirm admits customer info pwned in ransomware raid at Evolve Bank

• Critical CocoaPods Flaws Exposed Many iOS, macOS Apps to Supply Chain Attacks

• Splunk Patches High-Severity Vulnerabilities in Enterprise Product

• Evolve Bank Shares Data Breach Details as Fintech Firms Report Being Hit

• Google to offer $250,000 for Full VM Escape Zero-day Vulnerability

• CapraRAT Spyware Variant Disguised as Popular Apps to Target Android Users

• How Hacked YouTube Channels Spread Scams and Malware

• Building Resilience in the Chip Supply Chain

• Dev Rejects CVE Severity, Makes his GitHub Repository Read-Only

• Meme Stock GameStop Sinks On Lawsuit News

• US Supreme Court Sidesteps Decision On Social Media Laws

• Google Adds AI Disclosure Requirements For Political Ads

• The Tech Crash Course That Trains US Diplomats to Spot Threats

• Public Surveillance of Bars

• Report: Cyber Workforce Grows 15% at Large Organizations

• From the SOC to Everyday Success: Data-Driven Life Lessons from a Security Analyst

• Cyberinsurance Premiums are Going Down: Here’s Why and What to Expect

• New Intel CPU Vulnerability ‘Indirector’ Exposes Sensitive Data

• How MFA Failures are Fueling a 500% Surge in Ransomware Losses

• Prudential Financial data breach impacted over 2.5 million individuals

• March 2024 Cyber Attacks Statistics

• Latest Intel CPUs Impacted by New Indirector Side-Channel Attack

• Is Your Cloud Security a Mess? Five Problems CNAPP Can Cure

• Critical Vulnerabilities Found in Emerson Gas Chromographs Expose Systems

• CapraRAT Mimics As Popular Android Apps Attacking Android Users

• Surfshark vs IPVanish (2024): Which VPN Should You Choose?

• Deepfakes: Distorted Reality and the Growing Threat

• Indonesia Arrests Over 100 Foreigners in Bali Suspected of Participating in Cybercrime

• How Mobile ID Verification is Shaping the Future of Digital Payments

• Who Owns AI Risk? NOT IT!

• Hackers Using Dropbox And Google Docs To Deliver Orcinius Malware

• Superior Integrity Monitoring: Getting Beyond Checkbox FIM

• Tripwire Patch Priority Index for June 2024

• Australian man charged for Evil Twin Wi-Fi attacks on domestic flights

• CISOs Becoming More Comfortable With Risk Levels

• Cybersecurity News: 14 million Linux systems threatened, critical patch for Juniper routers, millions impacted by Prudential breach

• Critical Flaw in PTC License Server Can Allow Lateral Movement in Industrial Organizations

• Cisco Patches NX-OS Zero-Day Exploited by Chinese Cyberspies

• NordVPN File Checker protects users from infected files

• Health Tech Execs Get Jail Time For $1bn Fraud Scheme

• Rapid7 to Acquire Noetic Cyber to Enhance Attack Surface Visibility

• How evolving AI regulations impact cybersecurity

• China’s ‘Velvet Ant’ Hackers Caught Exploiting New Zero-Day in Cisco Devices

• Industrial cyberattacks fuel surge in OT cybersecurity spending

• National Australia Bank Raises Alarm About Cyber Threats to Major Banks

• 7 Steps To Secure Critical Infrastructure

• LogRhythm’s enhancements boost analyst efficiency

• China’s Premium EV Makers See Deliveries Surge In June

• Microsoft Shutters China Retail Stores

• France Prepares Formal Nvidia Antitrust Charges

• Grasshopper Hackers Mimic As Penetration Testing Service To Deploy Malware

• Water Sigbin Exploiting Oracle WebLogic Server Flaw

• Sanctioned and Exposed, Predator Spyware Maker Group Has Gone Awfully Quiet

• Brighton Park Capital Invests $112 Million in PortSwigger to Fuel Innovation and Product Development

• Cisco Patches Zero-Day Bug Used by Chinese Velvet Ant Group

• Exposing FakeBat loader: distribution methods and adversary infrastructure

• Cisco NX-OS Zero-Day Command Injection Vulnerability Let Hackers Gain Root Access

• regreSSHion – OpenSSH RCE Vulnerability Impacts 700K Linux Systems

• China-linked APT exploited Cisco NX-OS zero-day to deploy custom malware

• Korean ERP Vendor’s Update Systems Subverted to Spew Malware

• Poland to Probe Russia-Linked Cyberattack on State News Agency

• ‘Almost every Apple device’ vulnerable to CocoaPods supply chain attack

• SEC Disclosure Inconsistencies Amid Snowflake Breach | Kovrr

• IBM Consulting partners with Microsoft to help clients modernize security operations

• Podcast Episode: Fighting Enshittification

• TeamViewer Confirms that Russian Actors Behind the Recent Hack

• AuthZed Raises $12 Million to Accelerate Permissions Systems in Series A Funding

• Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware

• Meta’s ‘Pay or Consent’ Approach Faces E.U. Competition Rules Scrutiny

• Australia looses $3 billion every year to Cyber Crime

• Baddies hijack Korean ERP vendor’s update systems to spew malware

• OpenSSH Remote Code Execution Vulnerability (CVE-2024-6387) Notification

• Leveraging no-code automation for efficient network operations

• Australian Man Charged for Fake Wi-Fi Scam on Domestic Flights

• An Identity Love Story: Hardware vs Software Security Tokens

• The impossibility of “getting ahead” in cyber defense

• Deepfakes and voice clones are undermining election integrity

• Inside the minds of CISOs

• Imperva Client-Side Protection Mitigates the Polyfill Supply Chain Attack

• Infostealers on the Rise: A New Wave of Major Data Breaches?

• Deepfakes will cost $40 billion by 2027 as adversarial AI gains momentum

• The Evolution of Phishing Attacks: Beyond Email and How to Protect Your Organization

• A Playbook for Detecting the OpenSSH Vulnerability – CVE-2024-6387 – regreSSHion

• CISA Report Finds Most Open-Source Projects Contain Memory-Unsafe Code

• Nasty regreSSHion bug in OpenSSH puts roughly 700K Linux boxes at risk

• IT Security News Daily Summary 2024-07-01

• Top Tech Conferences & Events to Add to Your Calendar in 2024

• Keep The Momentum Going for The Right to Repair

• regreSSHion: Critical Vulnerability in OpenSSH Exposes Millions of Servers

• Integration Testing With Keycloak, Spring Security, Spring Boot, and Spock Framework

• Vulnerability Recap 7/1/24 – Apple, GitLab, AI Platforms at Risk

• Critical OpenSSH vulnerability could affect millions of servers

• Upcoming Book on AI and Democracy

• 3 New State-Backed Gangs Target Govt Sectors with HEAT Attack Methods

• Victory! Supreme Court Rules Platforms Have First Amendment Right to Decide What Speech to Carry, Free of State Mandates

• PortSwigger Scores Hefty $112 Million Investment

• Cyber A.I. Group Announces Substantial Expansion of Acquisition Pipeline

• 5G Vulnerabilities Expose Mobile Devices to Serious Threats

• Inside the Espionage: How Nobelium Targets French Diplomatic Staff

• Brain Cipher Ransomware Targets Indonesia’s National Data Center in Major Cyberattack

• Vulnerability Summary for the Week of June 24, 2024

• Patch These Compromised WordPress Plugins Asap To Avoid Attacks

• New Snowblind Android Malware Emerges As A Potent Datastealer

• The biggest data breaches in 2024: 1 billion stolen records and rising

• Fintech company Wise says some customers affected by Evolve Bank data breach

• Cyberattack by BlackSuit Targets Kadokawa and CDK Global

• Critical Flaws in CocoaPods Expose iOS and macOS Apps to Supply Chain Attacks

• SSH “regreSSHion” Remote Code Execution Vulnerability in OpenSSH., (Mon, Jul 1st)

• Australian Man Arrested for “Evil Twin” Wi-Fi Scam Targeting Travelers

• OpenID Connect Flows: From Implicit to Authorization Code With PKCE and BFF

• Personal data stolen from unsuspecting airport visitors and plane passengers in “evil twin” attacks, man charged

• Top 10 cybersecurity interview questions and answers

• Kasada’s Reflections on the Q3 2024 Forrester Wave™ – Bot Management Evaluation

• ‘Russia’ Breaches TeamViewer — ‘No Evidence’ Billions of Devices at Risk

• WordPress Security Research Series: WordPress Request Architecture and Hooks

• WordPress Security Research: A Beginner’s Series

• Personal data stolen from unsuspecting airport visitors and plane passengers in “evil twin” attacks, man arrested

• Hacker Conversations: Chris Evans, Hacker and CISO

• HubSpot Warns of Ongoing Cyberattacks Targeting Customer Accounts

• Kasada’s Reflections on the Q3 2024 Forrester Wave™ – Bot Management Evaluation

• HubSpot data breach and Twitter X new data security concerns

• EU Finds Meta Subscription Plan Violates DMA Rules

• The SFPD’s Intended Purchase of a Robot Dog Triggers Board of Supervisors’ Oversight Obligations

• EFF’s Statement on the Netchoice Decisions

• Kasada’s Reflections on the Q3 2024 Forrester Wave™ – Bot Management Evaluation

• Juniper Issues Emergency Patches For Perfect 10 Router Vuln

• regreSSHion: Remote Unauthenticated Code Execution Vulnerability In OpenSSH Server

• Google Offering $250k For Full VM Escape In New KVM Bug Bounty Program

• Landmark Admin Discloses Data Breach Of Medical Info

• Apple CocoaPods Bugs Expose Millions of Apps to Code Injection

• Now The EU Council Should Finally Understand: No One Wants “Chat Control”

• Kasada’s Reflections on the Q3 2024 Forrester Wave™ – Bot Management Evaluation

• Microsoft Announces New Deadlines for Windows Updates

• Top Data Breaches and Cyber Attacks in 2024

• Meta’s ‘Pay or Consent’ Data Model Breaches EU Law

• Busted for book club? Why cops want to see what you’re reading, with Sarah Lamdan (Lock and Code S05E14)

• Do you still need to pay for antivirus software in 2024?

• Critical unauthenticated remote code execution flaw in OpenSSH server

• Startup Odaseva Raises $54M to Bolster Global Expansion, R&D

• Nasty regreSSHion bug in OpenSSH puts around 700K Linux boxes at risk

• Google Offering $250,000 for Full VM Escape in New KVM Bug Bounty Program

• Landmark Admin Discloses Data Breach Impacting Personal, Medical Information

• Social Media Monitoring and Rogue App Detection in Akamai Brand Protector

• ChatGPT 4 can exploit 87% of one-day vulnerabilities

• Looking Ahead to Better Prepare Today

• SCYTHE 4.3 enables organizations to test and validate their defenses

• Russian Hacker Wanted for Crippling Cyberattacks on Ukraine, $10M Reward

• TeamViewer Says Russia’s ‘Cozy Bear’ Hackers Attacked Corporate IT System

• Indian Software Firm’s Products Hacked to Spread Data-Stealing Malware

• CapraRAT Spyware Disguised as Popular Apps Threatens Android Users

• Report: 75% of New Vulnerabilities Exploited Within 19 Days

• Korean ISP Accused of Installing Malware to Block Torrent Traffic

• Critical OpenSSH Flaw Enables Full System Compromise

• Meta Considers Facebook News Ban In Australia

• Renault-Backed EV Start-Up BeyonCa Sets Up In Hong Kong

• EU Focuses On Microsoft-OpenAI Deal In New Probe

• SEC Files Lawsuit Against Crypto Firm Consensys

• Multiple Vulnerabilities Found in Gas Chromatographs

• Millions of OpenSSH Servers Potentially Vulnerable to Remote regreSSHion Attack

• Hackers Target Vulnerability Found Recently in Long-Discontinued D-Link Routers

• What is the Role of Explainable AI (XAI) In Security?

• AI Transcript, Fake School Website: Student’s US Scholarship Scam Exposed on Reddit

• Monti gang claims the hack of the Wayne Memorial Hospital in Pennsylvania

• New ‘regreSSHion’ Remote Unauthenticated Code Execution Vulnerability Discovered in OpenSSH Server

• Web Scraping is Not Just a Security or Fraud Problem

• Juniper Networks flings out emergency patches for perfect 10 router vuln

• New OpenSSH Vulnerability Could Lead to RCE as Root on Linux Systems

• End-to-End Secrets Security: Making a Plan to Secure Your Machine Identities

• Fake IT Support Sites Push Malicious PowerShell Scripts as Windows Fixes

• Police Allege ‘Evil Twin’ In-Flight Wi-Fi Used to Steal Information

• Prudential Financial Data Breach Impacts 2.5 Million

• Juniper Networks Warns of Critical Authentication Bypass Vulnerability

• Cyber Trust Mark: The Impacts and Incentives of Early Adoption

• Threat Actor IntelBroker Claims Leak of Cognizant OIPA Database

• The Problem the US TikTok Crackdown and Kaspersky Ban Have in Common

• Poyfill.io claims reveal new cracks in supply chain, but how deep do they go?

• A Look at Container Security Through the Lens of DevOps

• Get a Lifetime of 1TB Cloud Storage for Only $80 With FolderFort

• AVG Secure VPN vs Surfshark (2024): Which VPN Is Better?

• Update: Polyfill.io, BootCDN, Bootcss, Staticfile Attack Traced to one Operator

• CISA director: US is ‘not afraid’ to shout about Big Tech’s security failings

• Cybersecurity Workforce Sustainability has a Problem. DEI Could be the Solution.

• Australian Police Arrest Suspect in Fake Wi-Fi Scam Targeting Airport Passengers

• Cybersecurity News: TeamViewer breach update, HubSpot customer attacks, Cyber insurance problems

• Meet Brain Cipher — The New Ransomware Behind Indonesia’s Data Center Attack

• Cyber-Insurance Premiums Decline as Firms Build Resilience

• Cyber Security Today, July 1, 2024 – A critical patch for GitLab

• New Hacker Group Attacking Systems With 10 Malware At Same Time

• Microsoft Alerts More Users in Update to Midnight Blizzard Hack

• Hackers Using Google Ads To Deliver ‘Poseidon’ Mac Stealer

• Cybersecurity Frameworks: What Do the Experts Have to Say?

• TechRepublic Premium Editorial Calendar: Policies, Checklists, Hiring Kits and Glossaries for Download

• Juniper Networks fixed a critical authentication bypass flaw in some of its routers

• TeamViewer Hack Officially Attributed to Russian Cyberspies

• Over Six Million Hit by Ransomware Breach at Infosys McCamish Systems

• Silicon UK In Focus Podcast: The Age of Additive Manufacturing

• Threat Actors Actively Exploit D-Link DIR-859 Router Flaw

• Troubled EV Maker Rivian Lays Out Path To Profitability

• Alibaba Cloud To Shut Down Australia, India Data Centres

• A week in security (June 24 – June 30)

• Threat actors actively exploit D-Link DIR-859 router flaw CVE-2024-0769

• Juniper Releases Out-of-Cycle Fix for Max Severity Authentication Bypass Flaw

• India Investigates After Report Claims Apple Supplier ‘Excluded Married Women’

• Juniper Releases Out-Of-Cycle Critical Update for Smart Routers

• Remote Rigor: Safeguarding Data in the Age of Digital Nomads

• Juniper Networks Releases Critical Security Update for Routers

• How to protect data at rest and in transit

• Sony Enters Crypto Exchange Arena with Acquisition of Amber

• Cyber Insurance demand fall as businesses bolster their cybersecurity infrastructure

• Police allege ‘evil twin’ of in-flight Wi-Fi used to steal passenger’s credentials

• Indonesian government didn’t have backups of ransomwared data, because DR was only an option

• Product showcase: Protect digital identities with Swissbit’s iShield Key Pro

• Portainer: Open-source Docker and Kubernetes management

• Why every company needs a DDoS response plan

• Microsoft tells yet more customers their emails have been stolen

• Preparing for Q-Day as NIST nears approval of PQC standards

• Infosec products of the month: June 2024

• Generative AI is new attack vector endangering enterprises, says CrowdStrike CTO

• Cyber Security Today, Week in Review for week ending Friday, June 28, 2024

• IT Security News Monthly Summary – July

• IT Security News Weekly Summary – Week 26

• IT Security News Daily Summary 2024-06-30

• The dangers of voice fraud: We can’t detect what we can’t see

• USENIX Security ’23 – Beyond The Gates: An Empirical Analysis of HTTP-Managed Password Stealers and Operators

• Russia-linked Midnight Blizzard stole email of more Microsoft customers

• Kadokawa Group Hit by Major Ransomware Attack

• Pipeline Hijacking: GitLab’s Security Wake-Up Call

• Phishing And The Threats of QR Codes

• Montgomery County, Md.’s Chatbot Shows GenAI in Action

• Kimsuky Unleashes TRANSLATEXT Malware on South Korean Academic Institutions

• TeamViewer’s Corporate Network Compromised in Suspected APT Hack

• 37signals Boosts Profits by Over $1 Million by Exiting Cloud Computing

• Russia-linked group APT29 likely breached TeamViewer’s corporate network

• Security Affairs newsletter Round 478 by Pierluigi Paganini – INTERNATIONAL EDITION

• Week in review: MOVEit auth bypass flaws quitely fixed, open-source Rafel RAT targets Androids

• USENIX Security ’23 – A Plot is Worth a Thousand Words: Model Information Stealing Attacks via Scientific Plots

• Staying Ahead of Adversarial AI with Incident Response Automation

Generated on 2024-07-07 23:58:17.529951