IT Security News Weekly Summary – Week 28

• IT Security News Daily Summary 2024-07-14

• Amazon Prime Day 2024: Live updates on the 50+ hottest Prime Day deals so far

• How to tell if your online accounts have been hacked

• Google in Advanced Talks to Buy Wiz for $23B: WSJ Report

• AT&T Paid a Hacker $370,000 to Delete Stolen Phone Records

• Data Breach Exposes Millions of mSpy Spyware Customers

• Debunking Common Myths About VPNs

• Google reportedly in talks to acquire cloud security company Wiz for $23B

• Security Affairs Malware Newsletter – Round 2

• USENIX Security ’23 – Bypassing Tunnels: Leaking VPN Client Traffic by Abusing Routing Tables

• Security Affairs newsletter Round 480 by Pierluigi Paganini – INTERNATIONAL EDITION

• Upcoming Speaking Engagements

• Apple Alerts Pegasus-like Attack on Indian Activists and Leaders

• Akira Ransomware: The Need for Rapid Response

• Cyber Criminals Siphoned ‘Almost All’ of AT&T’s Call Logs Over Six Months

• Major Ransomware Attack Targets Evolve Bank, Impacting Millions

• Amazon Prime Day 2024: Live updates on the hottest Prime Day deals so far

• This awesome DeWalt cordless drill and impact driver set is over 42% off on Amazon right now

• Learn a new language with 76% off a Babbel subscription right now

• Guarding Gold: Cybersecurity Challenges Ahead of the Paris Olympics

• Tech leaders offer support, well wishes for Trump following shock assassination attempt

• A Costco membership comes with a free $40 gift card right now – here’s how to sign up

• The Role of Human Error in Data Spillage Incidents

• Get Microsoft Office 2021 for Windows for $40 – lowest price of the year

• Wireshark 4.2.6 Released, (Sun, Jul 14th)

• Samsung Galaxy Z Flip 6 hands-on: The foldable most people should buy gets one key upgrade

• 22 of the best early Prime Day deals on the weirdest tech we could find

• Get a 5-year subscription to AdGuard VPN for $35

• Week in review: RADIUS protocol critical vuln, Microsoft 0-day exploited for a year, AT&T breach

• This Sony Bravia is one of the best-kept secrets in TVs – and it’s on sale for Prime Day

• My favorite Dyson cordless vacuum is $150 off with this Walmart deal – better than Prime Day

• The Evolution of Cybercrime Investigation

• Vyacheslav Igorevich Penchukov was sentenced to prison for his role in Zeus and IcedID operations

• IT Security News Daily Summary 2024-07-13

• Rite Aid disclosed data breach following RansomHub ransomware attack

• Psychological safety can be beneficial (to a point) — here’s where it gets dangerous

• One of the best cheap foldable phones I’ve tested is not a Samsung or OnePlus

• The Morphing of Misinformation in a Super Election Year

• Disney’s Internal Slack Breached? NullBulge Leaks 1.1 TiB of Data

• How to protect your startup from email scams

• USENIX Security ’23 – How Effective is Multiple-Vantage-Point Domain Control Validation?

• Improved ViperSoftX Malware Distributed Through eBooks

• Chinese Expert Confirms Authenticity of Leaked F-35 and F-15 Documents

• How to preorder everything announced at Samsung Unpacked – and the best deals I found

• Three words to send a chill down your spine: Snowflake. Intrusion. Alert

• Dubai Customs Introduces Blockchain Platform to Streamline Commerce

• Houthi-Aligned APT Targets Mideast Militaries With ‘GuardZoo’ Spyware

• The Impact of AI on Society and Science

• England Fans Warned Over ‘Quishing’ Scam Ahed of Euro Final

• Samsung Galaxy Z Flip 6 vs Z Flip 5: Key differences you should know before buying

• Samsung Galaxy Z Fold 6 vs Z Fold 5: Which premium model should you buy?

• Samsung Galaxy Z Flip 6 vs. Motorola Razr+ (2024): I’ve tested both, and the winner is not so obvious

• Electrifying Jackery deals slashes power station prices by over 40%!

• Join BJ’s Wholesale Club for $20, down from $55 with this deal

• Get Microsoft Project Pro or Microsoft Visio Pro for $20 right now

• Samsung Galaxy Ring hands-on: Why I’d ditch my Oura for this competing wearable

• Samsung will give you a $300 gift card when you preorder the Galaxy Z Fold 6 – how to easily qualify

• Upgrade to Windows 11 Pro for $23 – an all-time low price

• Buy a one-year subscription to Microsoft 365 for 35% off

• I went hands-on with Samsung’s Galaxy Z Fold 6 and it made my OnePlus Open feel outdated

• Samsung’s upcoming XR headset was the biggest product teaser at Unpacked July 2024

• Spyware Users Exposed in Major Data Breach

• Every new AI feature coming to Samsung’s Galaxy Z Fold 6 and Z Flip 6 (and how they work)

• What you missed at Samsung Unpacked July 2024: Galaxy Z Fold 6, Watch Ultra, Ring, AI, more

• Why the Galaxy Buds 3 inevitably looked like AirPods, according to Samsung’s design exec

• 16-bit Hash Collisions in .xls Spreadsheets, (Sat, Jul 13th)

• China’s APT41 Crew Adds Stealthy Malware to its Toolbox

• Coyote Banking Trojan Targets LATAM with a Focus on Brazilian Financial Institutions

• AT&T Confirms Data Breach Affecting Nearly All Wireless Customers

• Should ransomware payments be banned? – Week in security with Tony Anscombe

• Malicious NuGet Campaign Uses Homoglyphs and IL Weaving to Fool Devs

• Exim Vulnerability Affecting 1.5M Servers Lets Attackers Attach Malicious Files

• Get a TP-Link Wi-Fi extender for just $20 with this Prime Day deal

• 58 Ransomware Statistics Vital for Security in 2024

• Car dealer software slinger CDK Global said to have paid $25M ransom after cyberattack

• Learn a new language with 76% off a Babbel subscription

• Got Tips?

• Advance Auto Parts: Data of 2.3 Million People Stolen in Breach

• Get a Microsoft Visual Studio Pro license for 92% off

• The battery-powered Arlo Pro 5S 2K outdoor camera is down 52% for Prime Day

• The best wireless video doorbell for Ring fans is only $100 ahead of Prime Day

• Ring’s battery-powered flagship video doorbell is down to $150 ahead of Prime Day

• This Pro-level security camera is unexpectedly impressive and $50 off this Prime Day

• New AT&T data breach exposed call logs of almost all customers

• IT Security News Daily Summary 2024-07-12

• This robot and handheld vacuum combo is $249 off this Prime Day

• The waterproof Blink Mini 2 hit its lowest price for Prime Day at just $20

• Friday Squid Blogging: 1994 Lair of Squid Game

• DeFi Hack Alert: Squarespace Domains Vulnerable to DNS Hijacking

• Get an Echo Pop smart speaker for just $18 with this Prime Day deal

• The 30+ best early anti-Prime Day deals: Best Buy, Walmart, Costco, and more

• The 30 best early Prime Day 2024 deals

• One of the best robot vacuums I’ve tested is $340 with this Prime Day deal

• Buy a Microsoft Office 2021 license for Windows for $40 – lowest price of the year

• White House urged to double check Microsoft isn’t funneling AI to China via G42 deal

• USENIX Security ’23 – One Size Does not Fit All: Quantifying the Risk of Malicious App Encounters for Different Android User Profiles

• Advanced Auto Parts: Data of 2.3 Million People Stolen in Breach

• The best VPN services of 2024: Expert tested and reviewed

• The best Chromebooks for students in 2024: Expert tested and reviewed

• The best travel VPNs of 2024: Expert tested and reviewed

• Apple M2 MacBook Air is still a record-low $849 on Amazon right now

• The best mobile VPNs of 2024: Expert tested and reviewed

• Critical flaw in Exim MTA could allow to deliver malware to users’ inboxes

• The 10 best early Prime Day 2024 kitchen appliance deals

• The 50+ best early Prime Day 2024 gaming deals

• I can’t travel without this Anker charger, and its 29% off ahead of Prime Day

• AT&T breach affects ‘nearly all’ customers’ call, text records

• Overcome AI-Oriented Phishing Attacks with These Sure-Fire Strategies

• AT&T suffers another major data breach, this one affecting ‘nearly all’ wireless customers

• Crooks Steal Phone, SMS Records for Nearly All AT&T Customers

• The Sweeping Danger of the AT&T Phone Records Breach

• Samsung isn’t worried that the Galaxy Buds look like AirPods, and you probably shouldn’t too

• Hackers Steal Phone, SMS Records for Nearly All AT&T Customers

• Poland Pushes for Shorter Drug Data Protection in EU

• CISA broke into a US federal agency, and no one noticed for a full 5 months

• What to Know About CISA’s New Cyber Reporting Rules

• Wake up gently with this sunrise alarm clock that’s $30 off ahead of Prime Day

• Get Prime Day deals, even if you don’t pay for Prime. Here’s how

• Grab Apple’s iPad 10th Gen on sale ahead of Prime Day – here’s where to save

• Massive AT&T Hack Exposed ‘Nearly All’ Customer Phone Numbers

• USENIX Security ’23 – Problematic Advertising and its Disparate Exposure on Facebook

• Randall Munroe’s XKCD ‘Pole Vault’

• Future-proofing Cybersecurity at the Speed of Threats with Automation

• How to defend against zero-click attacks

• AT&T Data Breach: Hackers Steal Call and Text Records for “Nearly All” Customers

• Fake Microsoft Teams for Mac delivers Atomic Stealer

• The best early Amazon Prime Day laptop deals we’ve found

• The best bone conduction headphones of 2024: Expert tested and reviewed

• The 25 best Prime Day 2024 robot vacuum deals

• The 10 best early Amazon Prime Day Kindle deals

• AT&T Admits Data Breach Impacted “Nearly All” Customers

• The 19 best early Amazon Prime Day deals under $100

• The 19 best early Prime Day 2024 Amazon Echo device deals

• This air purifier is a must for pet parents, and it’s $60 off ahead of Prime Day sales

• The best AirPods of 2024: Expert tested and reviewed

• How open source attracts some of the world’s top innovators

• What the AT&T phone records data breach means for you

• Attacks against the “Nette” PHP framework CVE-2020-15227, (Fri, Jul 12th)

• mSpy Faces Major Data Breach Following Cyber Attack

• The Fundamentals to API Security Success

• Dangerous monitoring tool mSpy suffers data breach, exposes customer details

• Forget Prime Day: Get the Apple AirPods Max headphones for $151 off at Walmart

• The 5 best early Prime Day 2024 security camera deals

• FCC to Provide $200 Million to Schools and Libraries Cybersecurity

• Singapore Banks Phasing Out OTPs in Favor of Digital Tokens

• The 22 best early Prime Day 2024 Fire TV deals

• The 30 best Prime Day 2024 deals under $25

• Forget Prime Day: These 50 Walmart deals are even better

• CDK reportedly paid $25 million to end US car dealership cyberattack: 3 things you should know

• This eye massager helps my migraines, and it’s on sale ahead of Prime Day

• AT&T Discloses Breach of Customer Data

• In Other News: Apple’s Spyware Warning, CDK Global Ransom Payment, Sibanye Cyberattack

• DarkGate Malware Exploits Samba File Shares in Short-Lived Campaign

• The most rugged Android I’ve tested also has a battery that lasts for weeks

• This Shure podcast kit has everything you need to up your mic game

• What Is Cloud Database Security? Types, Best Practices & Tools

• Palo Alto Networks fixed a critical bug in the Expedition tool

• Addressing Financial Organizations’ Digital Demands While Avoiding Cyberthreats

• Chinese APT40 Can Exploit Flaws Within Hours of Public Release

• Decrypting DoNex: The Flaw That Brought Down a Ransomware Empire

• Significant Drop in Cyber-Insurance Premiums Makes Coverage More Affordable

• The best early Prime Day 2024 headphone deals

• The 20+ best early Prime Day deals under $50

• The 25 best early Prime Day 2024 tablet deals

• Break-in at ‘third-party cloud platform’ leaked 110M customer records, says AT&T

• Identity: the new security perimeter

• Millions Impacted by Breach at Advance Auto Parts Linked to Snowflake Incident

• Zero-Trust Strategies: Paving the Way for a Secure Future & Sustainable Enterprise Growth

• Brands are changing cybersecurity strategies due to AI threats

• “Nearly all” AT&T customers had phone records stolen in new data breach disclosure

• Red Hat VEX files for CVEs are now generally available

• Hackers Downloaded Call Logs from Cloud Platform in AT&T Breach

• GigaOm names CloudGuard WAF as leader and fast mover for a second year in a row

• AT&T Says 110M Customers’ Data Leaked — Yep, it’s Snowflake Again

• Amazon Prime Day 2024 is days away: Everything to know, plus deals to shop now

• Bluetti is offering fantastic deals on its power stations – but not for long

• AT&T Data Breach: ‘Nearly All’ Wireless Customers Exposed in Massive Hack

• P2PInfect Botnet Using Miner And Ransomware Payload

• 6 Steps to Build an Incident Response Workflow for Your Business

• Musk’s Voice, Likeness Used in Deepfake Scam Targeting the Olympics

• Q-Day Prepping: What Businesses Can Do Now to Address Quantum Security Risks

• Australian Defence Force Private and Husband Charged with Espionage for Russia

• Indiana County Files Disaster Declaration Following Ransomware Attack

• Ticketmaster Breach: Hackers Leak 10M ‘Unrefreshable’ Ticket Barcodes

• There’s now 26% off the price of the most durable power stations I’ve tested, and it’s not made by Anker or Jackery

• One of the most versatile power stations I’ve tested is $450 off right now on Amazon

• Japanese Space Agency Spots Unspecified Zero-Day Attacks

• Year-Old Veeam Vulnerability Exploited in Fresh Ransomware Attacks

• Hackers stole call, text records of “nearly all” of AT&T’s cellular customers

• Elon Musk’s X Breached DSA Rules, EU Finds

• The Jackery Explorer 1000 is one of the best portable power stations you can buy, and it’s now $840

• Macau Government Websites Hit with Cyberattack by Suspected Foreign Hackers

• Lessons from the Ivanti VPN Cyberattack: Security Breaches and Mitigation Strategies

• Info of 2,3+ million individuals stolen in Advance Auto Parts data breach

• mSpy Data Breach: Millions of Customers’ Data Exposed

• The NSA Has a Long-Lost Lecture by Adm. Grace Hopper

• The hidden pitfalls of AI: why implementing AI without a strategic vision could harm your business

• 20 of the best early Prime Day deals on the weirdest tech we could find

• Japan Warns of Attacks Linked to North Korean Kimsuky Hackers

• Ever Wonder How Hackers Really Steal Passwords? Discover Their Tactics in This Webinar

• Japan’s SoftBank Acquires AI Chip Start-up Graphcore

• AT&T says criminals stole phone records of ‘nearly all’ customers in new data breach

• The Stark Truth Behind the Resurgence of Russia’s FIN7

• Cybersecurity News: PHP vulnerability exploit, Auto Parts breach, dark patterns report

• How to Protect Children From Online Predators? | Avast

• What is Online Grooming and How Can I Protect My Kids? | Avast

• How to make the Xfce desktop more user-friendly

• How to log in to the Bitwarden password manager with a passkey

• Snowflake Breach at Advance Auto Parts Hits 2.3 Million People

• Social media platforms that harvest the most personal data

• The Top 4 Forms of AI-Enabled Cyber Threats

• Advance Auto Parts Cyber Attack: Over 2 Million Users Data Exposed

• iPhone users in 98 countries warned about spyware by Apple

• RansomHub Ransomware – What You Need To Know

• Ransomware Gangs Invest in Custom Data Stealing Malware

• Multiple Threat Actors Exploit PHP Flaw CVE-2024-4577 to Deliver Malware

• Gathid identity governance platform enhancements help identify access changes

• How do financial lenders avoid cyber threats?

• Human Risk Management: The Next Step in Mature Security Awareness Programs

• U.S. Seizes Domains Used by AI-Powered Russian Bot Farm for Disinformation

• Simplified Zero Trust security with the Microsoft Entra Suite and unified security operations platform, now generally available

• NATO Set to Build New Cyber Defense Center

• How to use ChatGPT to digitize your handwritten notes for free

• Cytactic Raises $16M in Seed Funding

• Veeam Flaw Becomes Ransomware Vector a Year After Patching

• Forcepoint promotes Ryan Windham to CEO

• Hackers Using ClickFix Social Engineering Tactics to Deploy Malware

• NSFOCUS Recognized as a Leading Innovator in AI-driven Cybersecurity Solutions at WAIC 2024

• Enable Two-Factor Authentication (2FA) with Email Verification on NTA

• October ransomware attack on Dallas County impacted over 200,000 people

• Smishing Triad Is Targeting India To Steal Personal and Payment Data at Scale

• Exploring Compiled V8 JavaScript Usage in Malware

• Tips to defend against Cyberstalking

• What is AI based Cyber Crime

• Coyote Banking Trojan Attacking Windows Users To Steal Login Details

• How to design a third-party risk management framework

• Managing cyberattack fallout: Financial and operational damage

• Singapore’s banks to ditch texted one-time passwords

• Top priorities for compliance leaders this year

• New infosec products of the week: July 12, 2024

• ISC Stormcast For Friday, July 12th, 2024 https://isc.sans.edu/podcastdetail/9050, (Fri, Jul 12th)

• China’s APT41 crew adds a stealthy malware loader and fresh backdoor to its toolbox

• ‘Gay furry hackers’ say they’ve disbanded after raiding Project 2025’s Heritage Foundation

• An In-Depth Look at Crypto-Crime in 2023 Part 2

• CDK breach compromises customer data from 15,000 car dealers

• CrystalRay operations have scaled 10x to over 1,500 victims

• IT Security News Daily Summary 2024-07-11

• How to use Google’s AI-powered NotebookLM to organize your research

• The 45+ best Walmart deals right now

• The best cheap tablets of 2024: Expert tested and reviewed

• The best Apple Watches of 2024: Expert tested and reviewed

• The best earbuds of 2024: Expert tested and reviewed

• Pressure Grows in Congress to Treat Crypto Investigator Tigran Gambaryan, Jailed in Nigeria, as a Hostage

• Most Websites and Apps Use Dark Patterns to Cheat Consumers: FTC

• Akamai?s Perspective on July?s Patch Tuesday 2024

• BlastRADIUS Vulnerability Discovered in RADIUS Protocol Used in Corporate Networks and Cloud

• USENIX Security ’23 – How Library IT Staff Navigate Privacy, Security Challenges and Responsibilities

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #297 – Line Management Deadlock

• Emulating the Long-Term Extortionist Nefilim Ransomware

• Data breach exposes millions of mSpy spyware customers

• OpenSSH bug leaves RHEL 9 and the RHELatives vulnerable

• New FishXProxy Phishing Kit Making Phishing Accessible to Script Kiddies

• Microsoft drops ‘MInference’ demo, challenges status quo of AI processing

• AI stack attack: Navigating the generative tech maze

• The best early Amazon Prime Day Apple deals

• This Sony Bravia is the best TV you’ve never heard of – and it’s on sale for Prime Day

• How to write better ChatGPT prompts in 5 steps

• Join Sam’s Club for $25 – half off the usual price

• How to clear the cache on your TV (and why you should do it)

• What is “Events Ripper”?

• Understanding SSH Honeypot Logs: Attackers Fingerprinting Honeypots, (Thu, Jul 11th)

• Samsung AI-Upgraded Bixby Voice Assistant Coming This Year

• This LG TV has one of the best displays I’ve seen, and it’s not even the newest model

• How to set up read receipts for your iPhone’s text messages

• New Heimdal-HaloPSA Integration Boosts Efficiency for Managed Service Providers

• A Comprehensive Guide to the Digital Operational Resilience Act (DORA)

• Hyperproof Sweeps G2 Summer Awards (Again)

• Microsoft’s Breach Notification Emails Wind Up in Spam Folder

• Ransomware Attack on Patelco Credit Union Disrupts Services for Nearly Half a Million Members

• Yemeni Hackers Unmasked Spying on Middle Eastern Military Phones

• Checking in on the state of cybersecurity and the Olympics

• The best VPN routers of 2024

• The best early Prime Day Samsung deals

• The best early Amazon Prime Day monitor deals

• This Anker MagSafe charger beats Apple’s, and it’s a third of the price right now

• The best laptops for video editing in 2024: Expert tested and reviewed

• Notorious Hacker Kingpin ‘Tank’ Is Finally Going to Prison

• Announcing the CVRF API 3.0 upgrade

• If you’re ready to leave Windows 11 behind, this is the distro for new Linux users

• This Nespresso machine brews barista-quality coffee at home, and it’s 34% off ahead of Amazon Prime Day

• How 5 simple tab tricks make your Firefox browser so much more productive

• How to install Linux on an old laptop to give it new life and purpose

• The Apple Watch SE (2nd Gen) is $60 off right now ahead of Amazon Prime Day

• Next Neuralink Brain Implant Coming Soon, Says Musk

• SiegedSec Hacks Heritage Foundation; Leaks Data Over “Project 2025”

• Get your pup the smart Halo Collar 3 that’s $100 off ahead of Prime Day

• You can now easily move your photos from Google Photos to iCloud Photos. Here’s how

• USENIX Security ’23 – “Millions of people are watching you”: Understanding the Digital-Safety Needs and Practices of Creators

• Buy a Windows 11 Pro license for just $23 – an all-time low price

• Do you need antivirus on Linux?

• Tracebit Raises $5 Million for Threat Deception Solution

• Obsolete Software and Hardware making NHS an easy target to Cyber Attacks

• Create JWT Using DataWeave JWT Library

• Harnessing the Power of Advanced MDR for SIEM Platforms

• Your business is going to rely on hundreds of AI models. Here’s why

• ServiceNow’s 4 key AI principles and why they matter to your business

• Apple sends new warning about mercenary spyware attacks to iPhone users. Should you worry now?

• CASB vs. SASE: What’s the difference?

• Ransomware gangs increasingly exploiting vulnerabilities

• Exein raised $15M Series B to stop robotic arms going haywire

• 60 New Malicious Packages Uncovered in NuGet Supply Chain Attack

• Palo Alto Networks Patches Critical Flaw in Expedition Migration Tool

• Wordfence Intelligence Weekly WordPress Vulnerability Report (July 1, 2024 to July 7, 2024)

• EU Accepts Apple’s Legal Commitments To Open NFC Access

• Prime Day may be a few days away, but the Echo Show 8 already hit an all-time low price

• HMS Industrial Networks Anybus-CompactCom 30

• How to Optimize Remote Work

• Apple Is Alerting iPhone Users of Spyware Attacks

• MixMode: Revolutionizing Threat Detection and Prioritization in Cybersecurity

• The 47 best early Prime Day 2024 gaming deals

• Baseus power banks recalled due to fire hazard – check your model number

• Multiple threat actors exploit PHP flaw CVE-2024-4577 to deliver malware

• ‘CrystalRay’ Expands Arsenal, Hits 1,500 Targets with SSH-Snake and Open Source Tools

• You can now get SpaceX’s Starlink Mini internet antenna that can fit in your backpack

• CISA Releases Advisory Detailing Red Team Activity During Assessment of US FCEB Organization, Highlighting Necessity of Defense-in-Depth

• Siemens Simcenter Femap

• Siemens Remote Connect Server

• Siemens RUGGEDCOM

• Siemens Teamcenter Visualization and JT2Go

• BunkerWeb: Open-Source Web Application Firewall (WAF)

• Decoding the Courts’ Digital Decisions | EFFector 36.9

• 6 Tips for a Successful Security Vendor Consolidation

• The best portable power stations of 2024: Expert tested and reviewed

• The 30 best early Prime Day 2024 TV deals

• ViperSoftX Info-Stealing Malware Being Distributed Through Fake Ebooks

• New Phishing Campaign Using AI generated Emails, Human Live Chat to Target Social Media Business Accounts

• Survey Finds Confidence in Data Security Despite Ransomware Scourge

• 39% of MSPs report major setbacks when adapting to advanced security technologies

• Authy breach exposes data of millions – what to look out for if you use it

• Critical GitLab Bug Lets Attackers Run Pipelines as Other Users

• Risk Escalates as Communication Channels Proliferate

• Advance Auto Parts: 2.3M people’s data accessed when crims broke into our Snowflake account

• Examining the Decrease in Cyber Insurance Rates

• Kanguru’s hardware-based internal SEDs secure data on laptops, tablets, and computers

• CISA Urges Software Makers to Eliminate OS Command Injection Vulnerabilities

• Alphabet Walks Away From HubSpot Deal

• AI-Driven Scam Ads: Deepfake Tech Used to Peddle Bogus Health Products

• Report reveals that three quarters of UK businesses have been impacted by AI-powered cyber threats

• Russian Researchers Identify Alleged Ukrainian Developer of Malicious Remote Access Tool

• Investing in AI? Don’t Forget the Cyber Locks! VCs Advice.

• ScienceLogic enhances AIOps platform to improve security and third-party industry interoperability

• Using Authy? Beware of impending phishing attempts

• Chinese APT41 Upgrades Malware Arsenal with DodgeBox and MoonWalk

• Germany Agrees Deal To Phase Out Huawei, Chinese 5G Kit – Report

• Hackers Created 700+ Fake Domains to Sell Olympic Games Tickets

• Major Security Flaw in WhatsApp and Signal MacOS Apps Puts User Data at Risk

• Unsecured Authy MFA API Exploited For Malicious Phone Number Verification

• Microsoft July 2024 Patch Tuesday Fixed 140+ Vulnerabilities

• The best AirTag wallets of 2024: Expert tested

• Over 16,400 Private and State-Owned Businesses Exposed to RegreSSHion Vulnerability

• Huione Guarantee Exposed as a $11 Billion Marketplace for Cybercrime

• Singapore to Phase Out One-Time Passwords in Banking

• CISA, FBI Urge Immediate Action on OS Command Injection Vulnerabilities in Network Devices

• Adaptive Shield Partners with Deloitte to DeliverHolistic, Comprehensive SaaS Security for Global Organizations

• Fraud Campaign Targets Russians with Fake Olympics Tickets

• Musk Defeats $500m Mass Twitter Layoff Lawsuit

• Google Advanced Protection Program gets passkeys for high-risk users

• Streamlined Security Solutions: PAM for Small to Medium-sized Businesses

• Apple Inc issues warning against Mercenary Spyware Cyber Attacks

• Diversifying Cyber Teams to Tackle Complex Threats

• New Malware Campaign Targeting Spanish Language Victims and the Mining Sector

• Privacy expert put away for 9 years after ‘grotesque’ cyberstalking campaign

• Palo Alto Networks Addresses BlastRADIUS Vulnerability, Fixes Critical Bug in Expedition Tool

• New Poco RAT Targets Spanish-Speaking Victims in Phishing Campaign

• Apple needs to fix this crazy iPhone annoyance

• Universal Code Execution by Chaining Messages in Browser Extensions

• Citrix Fixed Critical and High-Severity Bugs in NetScaler Product

• Telling Stories with Security Metrics

• Impact of data breaches is fueling scam campaigns

• When spear phishing met mass phishing

• Ransomware Surges Annually Despite Law Enforcement Takedowns

• Cybersecurity News: Australia targets foreign tech, banks sunset OTP, Veeam vulnerability exploited

• VMware Fixed Critical SQL Injection Flaw in Aria Automation Platform

• Hard Truths about Remote Access Hardware VPNs

• Japanese Space Agency Spotted zero-day via Microsoft 365 Services

• Train for Entry-Level or Advanced IT Positions for Just $50

• AI-Powered Russia’s bot farm operates on X, US and its allies warn

• Top 10 Active Directory Management Tools – 2024

• 3 ways to interact with Gemini from the MacOS desktop

• Prompt Security introduces GenAI security solution for MSSPs

• Huione Guarantee Marketplace Exposed as Front for Cybercrime

• You had a year to patch this Veeam flaw and now it’s going to hurt

• The Team Sport of Cloud Security: Breaking Down the Rules of the Game

• Samsung Galaxy Watch Ultra hands-on: Key specs, features, and everything you should know

• Every product Samsung unveiled at Unpacked July 2024: Galaxy Z Fold 6, Watch Ultra, Ring, more

• Samsung’s new Galaxy Buds 3 look nearly identical to Apple AirPods – and that’s a good thing

• Survey Sees Modern CISOs Becoming More Comfortable With Risk

• How to recover deleted files on a Mac

• Understanding IoT security risks and how to mitigate them | Cybersecurity podcast

• Japanese space agency spotted zero-day attacks while cleaning up attack on M365

• Why the Ticketmaster Breach is More Dangerous Than You Think

• PHP Vulnerability Exploited to Spread Malware and Launch DDoS Attacks

• Apple warns iPhone users in 98 countries of spyware attacks

• How AI helps decode cybercriminal strategies

• Strengthening cybersecurity preparedness with defense in depth

• GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Jobs

• Amazon updates AI enterprise solutions with guardrails at AWS Summit

• How to clear your Google search cache on Android (and why you should)

• Travel scams exposed: How to recognize and avoid them

• Apple alerts iPhone users in 98 countries to mercenary spyware attacks

• Valuable insights for making the right cybersecurity decisions

• A “Meta” Facebook Phish

• ISC Stormcast For Thursday, July 11th, 2024 https://isc.sans.edu/podcastdetail/9048, (Thu, Jul 11th)

• VMware fixed critical SQL-Injection in Aria Automation product

• UAE’s Lulu Hypermarket Data Breach: Hackers Claim Millions of Customer Records

• Cisco Talos: Top Ransomware TTPs Exposed

• Microsoft fixes 2 zero-days in massive July Patch Tuesday

• IT Security News Daily Summary 2024-07-10

• USENIX Security ’23 – Un-Equal Online Safety?” A Gender Analysis of Security and Privacy Protection Advice and Behaviour Patterns

• AWS achieves third-party attestation of conformance with the Secure Software Development Framework (SSDF)

• CVE-2024-4577 Exploits in the Wild One Day After Disclosure

• DarkGate: Dancing the Samba With Alluring Excel Files

• Randall Munroe’s XKCD ‘Bracket Symbols’

• Google and Apple Move to Strengthen User Protections

• Two clicks from empty – IPFS-powered crypto drainer scams leveraging look-alike CDNs

• The best iPhone deals of July 2024

• The 17 best Prime Day 2024 Fire TV deals

• The best robot vacuum mops of 2024: Expert tested and reviewed

• Google Pixel Watch 3 seen fixing Pixel 2’s key flaws – here’s everything you need to know

• A Guide to Lockdown of Salesforce Links

• Samsung Galaxy Unpacked: New Foldable, Flip Phones, Wearables And AI

• The 14 best Prime Day 2024 Echo device deals

• My favorite budget earbuds are on sale for $42 through this early Prime Day deal

• Samsung says its XR headset coming ‘later this year’ – should we hold our breath?

• The best laptops for graphic designers: Expert tested and reviewed

• Buy a Microsoft Visual Studio Pro license for 92% off

• New TOR Browser 13.5.1 Unveils Major Improvements

• Sign up for a Costco membership and get a free $40 gift card – here’s how

• Preorder Samsung’s Galaxy Z Fold or Z Flip 6 phone and get a $200+ Amazon gift card, free

• Samsung Galaxy Ring vs Ultrahuman Ring Air: Which subscription-free smart ring wins?

• AWS Summit New York 2024: Guardrails for Amazon Bedrock Gains Claude 3 Haiku and Contextual Grounding

• CISA and FBI Release Secure by Design Alert on Eliminating OS Command Injection Vulnerabilities

• Ditch the Checkbox, Use Plain Language, Make It Real: How to Create an Information Security Policy That Works

• AI and Ethics: Expert Insights on the Future of Intelligent Technology

• Snowflake lets admins make MFA mandatory across all user accounts

• VMware Patches Critical SQL-Injection Flaw in Aria Automation

• Ransomware Group Uses Harassment Tactics to Secure Payments

• The 20 best Prime Day 2024 robot vacuum deals

• The Stark Truth Behind the Resurgence of Russia’s Fin7

• AI Provides an Rx for Cybersecurity in Healthcare

• How to Speak to the Board So They Get on Board with Security

• DOJ Shutters Massive Russian Bot Farm Spreading Disinformation

• Smishing Triad Targets India with Fraud Surge

• 15 vulnerabilities discovered in software development kit for wireless routers

• China’s BYD Signs $1bn Deal For Factory In Turkey

• Hacker Leaks Thousands of Microsoft and Nokia Employee Details

• Here’s why Samsung’s new Galaxy Z Fold 6 is a major design success

• The 25 best Prime Day 2024 deals under $25

• Microsoft emails that warned customers of Russian hacks criticized for looking like spam and phishing

• Hackers Use the BlastRADIUS Flaw for Man-in-the-Middle Attacks

• Best Zero Trust Solutions in 2024

• ‘Blast-RADIUS’ Critical Bug Blows Up IT Vacation Plans

• Cybersecurity Expert Warns NHS Still Vulnerable After Major Ransomware Attack

• Latest Ransomware news trending on Google

• Two clicks from empty – IFPS-powered crypto drainer scams leveraging look-alike CDNs

• The 20 best Prime Day 2024 tablet deals

• A Surge in Advanced Fraud Techniques is Eroding Business Trust

• Security Compass helps organizations integrate GenAI into their applications

• How AI-powered software spreads Russian disinformation on X

• Microsoft Outlook Faced Critical Zero-Click RCE Vulnerability

• PC Recovery Continues As Shipments Grow, Says IDC

• Digital solidarity vs. digital sovereignty: Which side are you on?

• Google’s dark web monitoring service will soon be free for all users – here’s how to use it

• The best reading tablets of 2024: Expert tested and recommended

• Google Maps will show speedometer and speed limits on iPhone and CarPlay

• These banks to retire one-time passwords for customers with digital tokens

• The best drawing tablets of 2024: Expert recommended

• Cisco Black Belt Academy Unveils Enhanced Support Tracks

• Citrix fixed critical and high-severity bugs in NetScaler product

• RADIUS Vulnerability

• Mobile Encryption Innovation Aids Criminals, Europol Reports

• Chinese APT40 Attackers Exploit SOHO Routers to Launch Attacks

• Quantum Xchange CipherInsights enhancements identify weaknesses in enterprise cryptography

• Google’s dark web monitoring service will soon be free for users- here’s how to use it

• Aldo Pietropaolo Joins Strata Identity as Field CTO

• Quantum Key Distribution Achieves Breakthrough with Semiconductor Quantum Dots

• DarkMe RAT: Microsoft SmartScreen Vulnerability Explored

• Double-Scam Alert: How Fraudsters Exploit Scam Victims Twice

• IT-Harvest incorporates security scores from Black Kite into its dashboard

• New Ransomware Group Exploiting Veeam Backup Software Vulnerability

• Microsoft, Apple Drop OpenAI’s Board Seats Amid Antitrust Probe

• regreSSHion: Should We Panic About the New OpenSSH Vulnerability?

• Peloton accused of providing customer chat data to train AI

• Google Fi’s ‘Number Lock’ adds protection against SIM swaps – here’s how to enable it

• The best Apple deals of July 2024: iPhones, Apple Watches, iPads, and more

• Multiple cybersecurity agencies warn of China-linked APT40 ‘s capabilities

• US Busts Russian AI-Driven Disinformation Operation

• Malware that is ‘not ransomware’ wormed its way through Fujitsu Japan’s systems

• Citrix Patches Critical NetScaler Console Vulnerability

• Pentera updates RansomwareReady to secure Linux environments

• Five Eyes Alliance Accuses Chinese APT40 for Hacking Government Networks

• New Eldorado Ransomware Attacking Windows And Linux Systems

• Buying a Samsung Galaxy Ring? This model gives you the best battery life

• Buying a Samsung Galaxy Z Fold 6? This exclusive model is the one you should buy

• Prime Day invitation-only deals are back on Amazon. Here’s how to sign up

• How to buy the Samsung Galaxy Ring – and what the sizing process looks like

• Shopify Blames a Compromised Third-Party App for Data Leak

• Regional Transport Office Themed Phishing Campaign Targets Android Users In India

• Avoiding Social Engineering Attacks to Prevent Financial Fraud

• Passkeys Available for Passkeys high-risk Users in the Advanced Protection Program

• How DevSecOps Can Combat Zero-Day Threats

• June 2024’s Most Wanted Malware: RansomHub Takes Top Spot as Most Prevalent Ransomware Group in Wake of LockBit3 Decline

• I went hands-on with Samsung’s Galaxy Z Flip 6, and it’s basically a high-tech fidget spinner

• The three best Samsung Galaxy Z Flip 6 features sold me on flip phones

• Samsung just unveiled its new Galaxy Buds 3. Here are the features I’m most excited about

• Samsung’s $399 Galaxy Ring requires no subscription – Oura, take note

• Here are the best new AI features coming to Samsung’s Galaxy foldable phones

• The Trifecta Effect of Integrating XDR, SIEM, and SOAR

• As CISOs Grapple with the C-Suite, Job Satisfaction Takes a Hit

• Zero-day patched by Microsoft has been exploited by attackers for over a year (CVE-2024-38112)

• Getting Visibility into Your Cyber Horizon with OpenText

• Finding Honeypot Data Clusters Using DBSCAN: Part 1, (Wed, Jul 10th)

• Chinese APT40 Is Ready To Exploit New Vulnerabilities Within Hours Of Release

• The best space heaters of 2024

• US Senate NDAA 2025 Boosts Military Cyber and AI Initiatives

• Ticket Heist Network of 700 Domains Sells Fake Olympic Games Tickets

• CISA Adds Microsoft Windows and Rejetto HTTP File Server Bugs to its Known Exploited Vulnerabilities Catalog

• Why the MoD Breach Calls for a Cybersecurity Overhaul

• True Protection or False Promise? The Ultimate ITDR Shortlisting Guide

• Microsoft’s July Update Patches 143 Flaws, Including Two Actively Exploited

• Smash-and-Grab Extortion

• Hidden between the tags: Insights into spammers’ evasion techniques in HTML Smuggling

• Cyber Confidence at MSPs high, despite falling victim to data breaches

• Microsoft July 2024 Patch Tuesday Fixes 142 Flaws, 4 Zero-Days

• It’s Time to Reassess Your Cybersecurity Priorities

• ICS Patch Tuesday: Siemens, Schneider Electric, CISA Issue Advisories

• Industry Moves for the week of July 8, 2024 – SecurityWeek

• US Disrupts AI-Powered Russian Bot Farm on X

• Ransomware Groups Prioritize Defense Evasion for Data Exfiltration

• National Security Agency Data Leak Exposes 1.4 GB of Data

• Securing Kubernetes: The Risks Of Unmanaged Machine Identities

• 3 Ways to Achieve Zero-Trust With Your PAM Strategy

• Google Is Adding Passkey Support for Its Most Vulnerable Users

• Monocle: Open-Source LLM for Binary Analysis Search

• Blast RADIUS Attack can Bypass Authentication for Clients

• Google removes enrollment barrier for prospective Advanced Protection Program users

• HuiOne Guarantee: The $11 Billion Cybercrime Hub of Southeast Asia

• Google Adds Passkeys to Advanced Protection Program for High-Risk Users

• Russian Media Uses AI-Powered Software to Spread Disinformation

• Keepler, Databricks Partner To Develop Intelligent Data Platforms

• How to Run a Cybersecurity Risk Assessment in 5 Steps

• Social Engineering Awareness Policy

• How CISA Plans to Measure Trust in Open-Source Software

• New Flaw in OpenSSH can Lead to Remote Code Execution

• Inside the ransomware playbook: Analyzing attack chains and mapping common TTPs

• Samsung Workers To Extend Action To Strike ‘Indefinitely’

• Unsecured Database Exposed 39 Million Sensitive Legal Records Online

• Ransomware crews investing in custom data stealing malware

• Microsoft Patch Tuesday for July 2024 fixed 2 actively exploited zero-days

• A new flaw in OpenSSH can lead to remote code execution

• UK Government Advises Best Practices for Embedded Device Security

• Hackers Target WordPress Calendar Plugin Used by 150,000 Sites

• Beyond Checklists: The Rise of Automated Vendor Assessment and Enhanced Security

• Deepfake Threats and Biometric Security Vulnerabilities

• Command Zero emerges from stealth with $21 million in seed funding

• Mirantis OpenStack for Kubernetes 24.2 automates workload distribution

• Cybersecurity News: Russian bot takedown, Burdensome cyber regs, Fujitsu data exposed

• Persistent npm Campaign Shipping Trojanized jQuery

• Command Zero emerges from stealth with $21 Million in seed funding

• Most Security Pros Admit Shadow SaaS and AI Use

• Scammers Offering Fraud-as-a-service to Other Scammers to Drain Victims Funds

• Navigating Compliance: A Guide to the U.S. Government Configuration Baseline

• Sextortion Scams – How They Persuade and What to Watch for

• Microsoft Fixes Four Zero-Days in July Patch Tuesday

• Enzoic Global Partner Program helps combat dark web exposures

• Crypto Analysts Expose HuiOne Guarantee’s $11 Billion Cybercrime Transactions

• Threat Actors Claiming Breach of KFC Database

• The $11 Billion Marketplace Enabling the Crypto Scam Economy

• U.S. CISA adds Microsoft Windows and Rejetto HTTP File Server bugs to its Known Exploited Vulnerabilities catalog

• The Heritage Foundation – 72,004 breached accounts

• 34 Years Supporting the Wild and Weird World Online

• Big Tech’s eventual response to my LLM-crasher bug report was dire

• U.S. Disrupts AI-Powered Russian State-Sponsored Hackers Bot Farm

• What to expect from Samsung Unpacked July 2024 and how to watch today’s livestream

• X-Files Stealer Attacking Windows Users to Steal Passwords

• ViperSoftX variant spotted abusing .NET runtime to disguise data theft

• ViperSoftX Malware Disguises as eBooks on Torrents to Spread Stealthy Attacks

• Microsoft asks employees in China to use iPhones and abandon Android phones

• Strengthening Corporate Cyber Defenses Against Botnets

• Mitigate the Security Challenges of Telecom 5G IoT Microservice Pods Architecture Using Istio

• Securing Your Machine Identities Means Better Secrets Management

• Diversifying cyber teams to tackle complex threats

• How companies increase risk exposure with rushed LLM deployments

• Lessons Learned From Exposing Unusual XSS Vulnerabilities

• BunkerWeb: Open-source Web Application Firewall (WAF)

• New OpenSSH Vulnerability Discovered: Potential Remote Code Execution Risk

• Cybersecurity jobs available right now: July 10, 2024

• RADIUS networking protocol blasted into submission through MD5-based flaw

• 73% of security pros use unauthorized SaaS applications

• To Sixth Circuit: Government Officials Should Not Have Free Rein to Block Critics on Their Social Media Accounts When Used For Governmental Purposes

• Emerging Technology Highlights New Converged Risks and Asymmetric Threats

• ISC Stormcast For Wednesday, July 10th, 2024 https://isc.sans.edu/podcastdetail/9046, (Wed, Jul 10th)

• Critical Windows licensing bugs – plus two others under attack – top Patch Tuesday

• Strategies to Safeguard the Finance Industry Against Deepfake Onslaught

• Critical Windows licensing bugs, plus two others under attack, top Patch Tuesday

• FBI, cyber-cops zap ~1K Russian AI disinfo Twitter bots

• Microsoft Patch Tuesday: Microsoft Patches 142 Critical Vulnerabilities

• Governments issue warning on China’s APT40 attacks

• Evolve Bank data breach impacted over 7.6 million individuals

• IT Security News Daily Summary 2024-07-09

• CPR Warns Threat Actors are Leveraging Internet Explorer in New Zero-Day Spoofing Attack (CVE-2024-38112)

• The best tablets of 2024: Expert tested and reviewed

• 6 Best Cloud Data Management Software in 2024

• CISA Adds Three Known Exploited Vulnerabilities to Catalog

• VERT Threat Alert: July 2024 Patch Tuesday Analysis

• Neiman Marcus – 31,152,842 breached accounts

• The 10 best early Prime Day 2024 kitchen appliance deals

• Microsoft Patch Tuesday, July 2024 Edition

• The 20 best early Prime Day 2024 phone deals

• Microsoft Warns of Windows Hyper-V Zero-Day Being Exploited

• Randall Munroe’s XKCD ‘Alien Theories’

• USENIX Security ’23 – USENIX Security ’23 – AnimateDead: Debloating Web Applications Using Concolic Execution

• USENIX Security ’23 – Minimalist: Semi-automated Debloating of PHP Web Applications through Static Analysis

• China-Backed Threat Group Rapidly Exploits New Flaws: Agencies

• Microsoft fixes two zero-days exploited by attackers (CVE-2024-38080, CVE-2024-38112)

• Last chance to save up to $1,500 on new Samsung Galaxy Z Fold 6 and Z Flip 6 phones – here’s how

• More than 31 million customer email addresses exposed following Neiman Marcus data breach

• Buy a 5-year subscription to AdGuard VPN for $35

• Beyond Pride Month: Protections for LGBTQ+ People All Year Round

• Strategies for achieving least privilege at scale – Part 1

• Strategies for achieving least privilege at scale – Part 2

• Microsoft Patch Tuesday July 2024, (Tue, Jul 9th)

• Largest Patch Tuesday in 3 months includes 5 critical vulnerabilities

• Eldorado Ransomware Targeting Windows and Linux with New Malware

• Samsung Galaxy Ring: Features, price, launch date, and everything else we know

• Why You Need Network Detection & Response Now

• How to save money on groceries with Amazon Prime

• Join BJ’s Wholesale Club for $20 right now, down from $55

• CISA and Partner Agencies Join ASD’S ACSC to Release Advisory on APT40, a Chinese State-Sponsored Group

• Researchers Catch Yemeni Hackers Spying on Middle East Military Phones

• Adobe Issues Critical Patches for Multiple Products, Warns of Code Execution Risks

• Biggest Ever Password Leak — but is ObamaCare’s RockYou2024 Really NEW?

• 7,000 WordPress Sites Affected by Privilege Escalation Vulnerability in ProfileGrid WordPress Plugin

• Reverse-Engineering Ticketmaster’s Barcode System

• UN Draft Surveillance Treaty Dangerously Expands State Surveillance Powers Without Robust Privacy, Data Protection Safeguards

• Cyber-Attack on Evolve Bank Exposed Data of 7.6 Million Customers

• CISA Guidance Strengthens Data Security, Neglects Web Access Security

• Six months into new SEC rulings, can enterprises escape the crossfire?

• Why User Experience Matters In Security Awareness Training

• Trojanized jQuery Infiltrates npm, GitHub, and CDNs: Thousands of Packages at Risk

• The 25 best early Amazon Prime Day 2024 deals

• Learn a new language with a discounted Babbel subscription

• I put the free version of Perplexity.ai through my coding tests – here’s what happened

• Command Zero Emerges From Stealth Mode to Speed Up Cyber Investigations

• BlastRADIUS Attack Exposes Critical Flaw in 30-Year-Old RADIUS Protocol

• Patelco Credit Union Working Diligently to Recover from Security Incident

• New Consumer Privacy Rights for Oregonians: What You Need to Know

• The Shift from VPNs to ZTNA

• Cyber Attack leads to 1.4GB NSA data breach

• Buy a Windows 11 Pro license for $23 – an all-time low price

• Palo Alto Networks a Leader Again in Gartner Single-Vendor SASE Report

• Here’s How to Change IP Address Without VPN

• Eldorado Ransomware Strikes Windows and Linux Networks

• Catch My Drift? How To Easily Manage Configuration Drift In Your Storage & Backup Systems

• SSID Meaning: What Is an SSID and How Can You Find Yours?

• Meta unveils a $25-per-month, interest-free Quest 3 payment plan. Is this deal worth it?

• The best smart rings of 2024: Expert tested and reviewed

• Buy the MacBook Air M1 for just $649 – the lowest price we’ve seen

• The 5 best early Prime Day 2024 security camera deals

• Risk & Repeat: Hacks, lies and LockBit

• The Critical Intersection of AI and Security: A Partnership Imperative

• Limitations of current automatic specification generation tools

• Akamai Launches Early Hints to Further Boost User Experience and SEO

• Enhancing Security With ZTNA in Hybrid and Multi-Cloud Deployments

• This Is How SSL Certificates Work: HTTPS Explained in 15 Minutes

• Ticketmaster says stolen Taylor Swift Eras Tour tickets are useless

• Best Buy dropped the M1 MacBook Air to $649, and you can still grab these savings

• Elexon’s Insight into UK electricity felled by expired certificate

• SAP Patches High-Severity Vulnerabilities in PDCE, Commerce

• Optiv MDR accelerates threat detection and response

• Samsung Galaxy Watch Ultra: The best specs, features, and everything else we know

• The best projectors of 2024: Expert tested and reviewed

• Apple launches iOS 18 Beta 3 – here’s everything you need to know

• Mitsubishi Electric MELIPC Series MI5122-VW

• Johnson Controls Software House C●CURE 9000

• Delta Electronics CNCSoft-G2

• Johnson Controls Illustra Pro Gen 4

• Evolve Bank & Trust confirms LockBit stole 7.6 million people’s data

• Analyzing Ticketmaster Sample Data Breach: Key Insights and Implications

• Supreme Court Directive Mandates Self-Declaration Certificates for Advertisements

• AttackIQ Mission Control simplifies security testing for distributed teams

• A decade of global cyberattacks, and where they left us

• Protecting Your Codebase: Best Practices for Secure Secret Management

• Ransomware Gang Leaks Data Allegedly Stolen from Florida Department of Health

• Evolve Bank Data Breach Impacts 7.6 Million People

• RADIUS Protocol Vulnerability Exposes Networks to MitM Attacks

• Top four ways to improve your Security Hub security score

• I tested Motorola’s new $699 flip phone and it’s full of nostalgic goodness

• Oura unveils AI health advisor a day before Samsung Galaxy Ring’s likely debut

• Evolve Bank says ransomware gang stole personal data on millions of customers

• Developing and prioritizing a detection engineering backlog based on MITRE ATT&CK

• How to Add Cloudflare DMARC, SPF, and DKIM Records? Easy Setup Guide

• Research: Only 61% of top manufacturers have adopted DMARC despite rising cyber attacks

• Skillsoft partners with Microsoft to develop GenAI skilling program

• Nine IT Experts Weigh in On Managed File Transfer (MFT)

• Implementing Digital Rights Management Systems To Safeguard Against Unauthorized Access Of Protected Content

• How to Prepare for ISO 27001:2022’s Threat Intelligence Requirements

• Critical vulnerability in the RADIUS protocol leaves networking equipment open to attack

• GuardZoo spyware used by Houthis to target military personnel

• Hackers Exploiting Jenkins Script Console for Cryptocurrency Mining Attacks

• Chinese State Actor APT40 Exploits N-Day Vulnerabilities “Within Hours”

• How do cryptocurrency drainer phishing scams work?

• New Golang Botnet “Zergeca” Discovered, Delivers Brutal DDoS Attacks

• Use these 6 user authentication types to secure networks

• Around the World with Cisco: From Student to Intern to CX Consulting Engineer

• New Mirai Botnet Variants Observed: How to Identify a Mirai-Style DDoS Attack

• UN Cybercrime Draft Convention Dangerously Expands State Surveillance Powers Without Robust Privacy, Data Protection Safeguards

• Chinese APT40 group swifly leverages public PoC exploits

• Nearly 10 Billion Passwords Leaked in Biggest Compilation of All Time

• Develop Valuable Security and Risk Management Skills for Just $30 Through 7/21

• RockYou2024: 10 BILLION unique passwords exposed – what now?

• Scammers Double-Dip by Offering Prior Victims Help to Recover Stolen Funds

• How to Fix a Dysfunctional Security Culture

• Global Coalition Blames China’s APT40 for Hacking Government Networks

• How to use Copilot Pro to write, edit, and analyze your Word documents

• GuardZoo Malware Targets Over 450 Middle Eastern Military Personnel

• HUMINT: Diving Deep into the Dark Web

• Q1 2024 Cyber Attacks Statistics

• Apache Fixed a Source Code Disclosure Flaw in Apache HTTP Server

• Houthi rebels are operating their own GuardZoo spyware

• Hackers Leak 10 Billion Passwords How Users Should Respond

• Avast Provides DoNex Ransomware Decryptor to Victims

• How to add more eye candy to the GNOME desktop

• The 6 Best Governance, Risk & Compliance (GRC) Tools for 2024

• Cato Networks Named a Leader in the 2024 Gartner Magic Quadrant for Single-Vendor SASE

• Staying Safe During Amazon Prime Day

• How to Get the Most for Yourself Through Altruism

• Universal Code Execution Vulnerability In Browsers Puts Millions Of Users At Risk

• Just a Fifth of Manufacturers Have Strongest Anti-Phishing Protection

• Cybersecurity News: Billions of stolen passwords, cybersecurity regulations even trickier, Apple removes popular apps

• A Deeper Dive into DISA’s Cybersecurity Initiatives

• SQR Wins Isle of Man Government Contract

• Splunk Addresses Critical Vulnerabilities in Enterprise and Cloud Platforms

• UN Cybercrime Draft Convention Dangerously Expands State Surveillance Powers Without Robust Privacy and Data Protection Safeguards

• Stellar Cyber Open XDR platform now supports BYODL

• How to watch Samsung Unpacked Paris 2024 and what we’re expecting to be unveiled

• Avast released a decryptor for DoNex Ransomware and its predecessors

• Update: Network Segmentation Hobbled Midnight Blizzard’s Attack on TeamViewer

• Egnyte Copilot accelerates enterprise content collaboration

• Ticketmaster Extortion Continues, Threat Actor Claims New Ticket Leak

• Critical Infrastructure Providers Seek Guardrails on Scope, Timeline for CIRCIA Rules

• Increase in the Exploitation of Microsoft SmartScreen Vulnerability

• Align strengthens defense against double-extortion ransomware tactics

• Ghostscript Rendering Platform Vulnerability Let Attackers Execute Remote Code

• Outpost24 appoints Ido Erlichman as CEO

• As Cyber Command Evolves, Its Novel Malware Alert System Fades Away

• Microsoft China staff can’t log on with an Android, so Redmond buys them iThings

• Cybersecurity Agencies Warn of China-linked APT40’s Rapid Exploit Adaptation

• Turla Hackers Weaponizing LNK-Files To Deploy Fileless Malware

• HCL Domino Vulnerability Let Attackers obtain Sensitive information

• Unleashing the Power of Next-Gen Agents for Robust Cloud-Native Security

• Scammers double-scam victims by offering to help recover from scams

• China’s APT40 gang is ready to attack vulns within hours or days of public release

• Navigating Authentication Challenges: A Closer Look at Contemporary CIAM

• Minimize Data Breaches with Planning, Transparency and Technology

• Trojanized jQuery Packages Found on npm, GitHub, and jsDelivr Code Repositories

• Cyber Attack to impact 1.5 billion Apple devices

• Exploring the root causes of the cybersecurity skills gap

• Microsoft’s cybersecurity dilemma: An open letter to Satya Nadella

• Shadow engineering exposed: Addressing the risks of unauthorized engineering practices

• China’s APT40 gang is ready to attack vulns within hours or days of public release.

• ISC Stormcast For Tuesday, July 9th, 2024 https://isc.sans.edu/podcastdetail/9044, (Tue, Jul 9th)

• Samsung Galaxy Ring’s best feature would be to not lock my data behind a paywall

• Level Up Your ATO Defenses: Account Protect Delivers Advanced Threat Detection

• What is “Events Ripper”?

• People’s Republic of China (PRC) Ministry of State Security APT40 Tradecraft in Action

• CISA and Partners join ASD’S ACSC to Release Advisory on PRC State-Sponsored Group, APT 40

• AI stack attack: Navigating the generative tech maze

• OpenAI Secrets Stolen in 2023 After Internal Forum Was Hacked

• Microsoft drops ‘MInference’ demo, challenges status quo of AI processing

• Automated Indicator Sharing: Other Ways to Connect

• Exploring Cross-Chain Compatibility in dApp Development

• Enhancing Cloud Security: Integrating DevSecOps Practices Into Monitoring

• Understanding and Mitigating IP Spoofing Attacks

• RockYou2024 compilation containing 10 billion passwords was leaked online

• LockBit’s latest attack shows why fintech needs more zero trust

• IT Security News Daily Summary 2024-07-08

• Buy a Samsung Galaxy Watch 6 on sale and save $130 on a pair of Galaxy Buds 2 Pro

• Save up to $1,500 on new Samsung Galaxy Z Fold 6 and Z Flip 6 phones – here’s how

• The best early Prime Day deals on the weirdest tech we could find

• The best iPhone 15 screen protectors of 2024: Expert tested

• Ransomware hits CDK Global, public sector targets in June

• The best Prime Day 2024 tablet deals

• The 20 best Prime Day 2024 deals under $25

• Microsoft Banning Android Phones for Staff in China

• Context window overflow: Breaking the barrier

• How to Get Rid of a Computer Virus [Mac and PC]

• Stacks L2 Security Soars with Hypernative’s Ecosystem-Wide Protection

• Shopify says stolen customer data was taken in third-party breach

• The best MagSafe wallets of 2024: Expert tested and reviewed

• How AI-driven SOC tech eased alert fatigue: Case study

• How API attacks work, plus 5 common types

• Mastering Efficient Data Processing for LLMs, Generative AI, and Semantic Search

• An In-Depth Look at Crypto-Crime in 2023 Part 1

• The 45+ best Walmart deals right now

• 5 Linux commands for managing users

• $3,094 Bounty Awarded and 150,000 WordPress Sites Protected Against Arbitrary File Upload Vulnerability Patched in Modern Events Calendar WordPress Plugin

• Ticketmaster Hackers Leak 30K Ticket Barcodes, Share Counterfeit Tutorial

• FTC’s non-compete ban almost certainly dead, based on a Texas federal court decision

• The 8 best early Amazon Prime Day Kindle deals

• Apple removes VPN apps at request of Russian authorities, say app makers

• Critical Ghostscript flaw exploited in the wild. Patch it now!

• The best early Amazon Prime Day laptop deals

• The 26 best early Prime Day 2024 Nintendo deals

• Vulnerability Recap 7/8/24 – Intel, Cisco & More Face Risks

• Mandiant Highlights Russian and Chinese Cyber Threats to NATO on Eve of 75th Anniversary Summit

• New Golang-Based Botnet ‘Zergeca’ Discovered

• Proton Docs Arrives As An Encrypted Document Sharing Platform

• The best business internet providers of 2024

• You can get Amazon’s new Echo Spot alarm clock at 40% off through Prime Day

• Grab a Microsoft Visual Studio Pro license for $35

• On the CSRB’s Non-Investigation of the SolarWinds Attack

• Get Microsoft Office for Windows or Mac for $25 right now

• Windows Notepad gets spellcheck and autocorrect, after 41 years

• Amazon’s new Echo Spot makes nightstand clocks cool again with a smart home twist

• Take Your ST 2110 Workflow to the Next Level

• Hundreds of Tech Companies Want to Cash In on Homeland Security Funding. Here’s Who They Are and What They’re Selling.

• TeamViewer: Network segmentation hobbled Midnight Blizzard’s attack

• How to switch from a Microsoft account to a local account, and tricks to avoid a Microsoft account

• What Is a Cybersecurity Platform?

• New APT Group “CloudSorcerer” Targets Russian Government Entities

• Kaspersky Flags Cyberespionage APT ‘CloudSorcerer’ Targeting Russian Government

• Hacked Ethereum Foundation Account Used to Send 35,000 Phishing Emails

• USENIX Security ’23 – Lost in Conversion: Exploit Data Structure Conversion with Attribute Loss to Break Android Systems

• OpenAI Hack Exposes Hidden Risks in AI’s Data Goldmine

• New APT CloudSorcerer Malware Hits Russian Targets

• Twitter Data breach and 10 billion password leak details

• Industrial Cyber Security Basics Can Help Protect APAC Operational Technology Operators: Dragos

• Dark Web Malware Logs Expose 3,300 Users Linked to Child Abuse Sites

• Mekotio Trojan Targets Latin American Banking Credentials

• Apple Removes VPN Apps from Russian App Store as Censorship Tightens

• Continued Progress Towards a Secure Open Source Ecosystem

• New Ghostscript Vulnerability Alarms Experts as Major Breach Threat

• Robot ‘Suicide’ in South Korea Raises Questions About AI Workload

• FIA Confirms Cyberattack Compromising Email Accounts

• BianLian Ransomware Strikes: US Companies Grapple with Data Breach Fallout

• Vulnerability Summary for the Week of July 1, 2024

• New Ransomware-as-a-Service ‘Eldorado’ Targets Windows and Linux Systems

• Microsoft forgets about SwiftKey’s support site

• Cisco Warns regreSSHion Vulnerability Impacts Multiple Products

• AI SPERA Partners with Devcons to Expand ‘Criminal IP’ into the Middle Eastern Market

• Former Nuance Employee Arrested After Geisinger Data Breach Exposed 1.2 Million Records

• Supreme Court Ruling Threatens the Framework of Cybersecurity Regulation

• IoT Vulnerabilities and BotNet Infections: What Executives Need to Know

• Russia Blocks VPN Services in Information Crackdown

• Defend Against Account Abuse in Financial Services

• Check Point – ISC2 Partnership Cross the 4,000 Hours of Training Milestone

• 7 Tips on Keeping Your Data Private When Using AI

• Indian Government Issues Serious Warning on Phishing Scams Alleging Sexual Offenses

• Decryptor for DoNex, Muse, DarkRace, (fake) LockBit 3.0 Ransomware Released

• Avast secretly gave DoNex ransomware decryptors to victims before crims vanished

• Eldorado Ransomware is Targeting Windows, VMware ESXi VMs

• Centrally manage VPC network ACL rules to block unwanted traffic using AWS Firewall Manager

• Major ISP Accused of Mass Malware Attack on Customers

• Apple Removed VPN Services from the Russian AppStore

• New Variation of WordFence Evasion Malware Discovered

• Cloudy with a Chance of Cyberattack: Understanding LOTC Attacks and How ZTNA Can Prevent Them

• Attackers Exploiting Remote Code Execution Vulnerability in Ghostscript

• OWASP Penetration Testing: Methodology, Kit, Checklist (Downloadable)

• Database Penetration Testing: Secure Your Data

• Apple removed 25 VPN apps from the App Store in Russia following Moscow’s requests

• Optimizing IT Team Collaboration – An Innovative Approach to Enhancing Productivity

• Why SPRS Matters and 4 Steps to Improve Your Security Posture

• 5 Key Questions CISOs Must Ask Themselves About Their Cybersecurity Strategy

• Crypto Thefts Double to $1.4 Billion, TRM Labs Finds

• Made in the UK

• ‘RockYou2024’: Nearly 10 billion passwords leaked online

• Cybersecurity Glossary Pack

• Experts Warn of Mekotio Banking Trojan Targeting Latin American Countries

• Answering SEC’s Question of Materiality of a Breach

• Emboldened and Evolving: A Snapshot of Cyber Threats Facing NATO

• Guarding Health: Errol Weiss on Protecting the Healthcare Sector from Cyber Threats

• GAO Urges Stronger Federal Cybersecurity Measures Amid Rising Threats

• AI-Powered Super Soldiers Are More Than Just a Pipe Dream

• Vinted Fined $2.6m Over Data Protection Failure

• Gogs Vulnerabilities May Put Your Source Code at Risk

• Report: 47% of Corporate Data Stored in the Cloud Is Sensitive

• Balancing Security and Convenience with EV Charging

• Decryptor for DoNex, Muse, DarkRace, (fake) LockBit 3.0 ransomware released

• 10 Billion Passwords Leaked on Hacking Forum

• Cybersecurity News: Alabama Education breach, OpenAI secrets breach, Florida Health breach

• Egyptian Health Department Data Breach: 120,000 Users’ Data Exposed

• Europol Concerns Over Privacy Enhancing Technologies Challenge Lawful Interception

• Report: 99% of IoT Exploitation Attempts Rely on Previously Known CVEs

• Cyber Security Today, July 8, 2024 – A New Ransomware Group Is Discovered

• GootLoader is Still Active and Efficient

• Infostealing Malware Masquerading as Generative AI Tools

• Pro-Bangladeshi Hacktivists Enter Global Stage with Matryoshka 424 Alliance

• Navigating Europe’s digital identity crossroads

• Human Vigilance is Required Amid AI-Generated Cybersecurity Threats

• Critical Unpatched Flaws Disclosed in Popular Gogs Open-Source Git Service

• Orcinius Trojan Attacking Users Via Dropbox & Google Docs

• CISA adds Cisco NX-OS Command Injection bug to its Known Exploited Vulnerabilities catalog

• PSA: This Microsoft Update is essential

• A week in security (July 1 – July 7)

• Kunai: Keep an Eye on your Linux Hosts Activity, (Mon, Jul 8th)

• CloudSorcerer – A new APT targeting Russian government entities

• Apple Removes VPN Apps from Russian App Store Amid Government Pressure

• Roblox Data Breach: Email & IP address Details Exposed

• Mobile based cyber threats to watch out for at Paris Olympic Games 2024

• Top 5 Mobile Security Benefits with Samsung Knox

• Selfie-based authentication raises eyebrows among infosec experts

• Continuous Threat Exposure Management for Google Cloud

• July 2024 Patch Tuesday forecast: The end of an AV giant in the US

• How nation-state cyber attacks disrupt public services and undermine citizen trust

• Monocle: Open-source LLM for binary analysis search

• Organizations change recruitment strategies to find cyber talent

• ISC Stormcast For Monday, July 8th, 2024 https://isc.sans.edu/podcastdetail/9042, (Mon, Jul 8th)

• Not-so-OpenAI allegedly never bothered to report 2023 data breach

• Paperclip Maximizers, Artificial Intelligence and Natural Stupidity

• A decade after collapsing, crypto exchange Mt Gox repays some investors

• IT Security News Weekly Summary – Week 27

• IT Security News Daily Summary 2024-07-07

• Husky Owners – 16,502 breached accounts

• Hacker Breaches OpenAI, Steals Sensitive AI Tech Details

• Passkeys Aren’t Foolproof: New Study Reveals Vulnerabilities in Popular Authentication Method

• Apache fixed a source code disclosure flaw in Apache HTTP Server

• USENIX Security ’23 – Notice the Imposter! A Study on User Tag Spoofing Attack in Mobile Apps

• Qilin Attack On London Hospitals Leaves Cancer Patient With No Option

• Security Affairs Malware Newsletter – Round 1

• Critical npm Account Takeover Vulnerability Sold on Dark Web

• The Decline of Serverless Computing: Lessons For Enterprises To Learn

• Applying Bloch’s Philosophy to Cyber Security

• Breaking the Silence: The OpenAI Security Breach Unveiled

• Twilio Alerts Authy Users of Potential Security Risks Involving Phone Numbers

• Security Affairs newsletter Round 479 by Pierluigi Paganini – INTERNATIONAL EDITION

• Alabama State Department of Education suffered a data breach following a blocked attack

• Week in review: A need for a DDoS response plan, human oversight in AI-enhanced software development

Generated on 2024-07-14 23:58:25.550328