IT Security News Weekly Summary – Week 31

• IT Security News Daily Summary 2024-08-04

• Google Delays Plan to Replace Cookies, Leaving Users and Industry in Limbo

• USENIX Security ’23 – NeuroPots: Realtime Proactive Defense against Bit-Flip Attacks in Neural Networks

• World’s First AI Law: A Tough Blow for Tech Giants

• Why Automated Incident Response is Essential for Your SOC

• Chinese StormBamboo APT compromised ISP to deliver malware

• Generative AI is Closing The Tech Gap Between Security Teams And Threat Actors

• New Android Malware BingoMod Targets Financial Data and Wipes Devices

• Basta Ransomware Culprits Revealed by Mandiant Investigation

• DoJ and FTC Sue TikTok for Violating Children’s Privacy Laws

• The Value of Trust: How Companies Can Harness Data Responsibly to Drive Growth

• Hackers attempt to sell the personal data of 3 billion people resulting from an April data breach

• Security Affairs newsletter Round 483 by Pierluigi Paganini – INTERNATIONAL EDITION

• Security Affairs Malware Newsletter – Round 5

• New Veeam Data Cloud release delivers Microsoft 365 backup and recovery

• Votiro introduces enhanced data privacy features and integrations

• Binary Defense releases MDR Plus managed security solution

• OOXML Spreadsheets Protected By Verifier Hashes, (Sat, Aug 3rd)

• Week in review: VMware ESXi zero-day exploited, SMS Stealer malware targeting Android users

• Bringing Security Back into Balance

• Top 10 Red Sift OnDMARC Alternatives & Competitors in 2024

• Top 10 Mimecast DMARC Analyzer Alternatives and Competitors in 2024

• Top 10 PowerDMARC Alternatives and Competitors in 2024

• Top 10 Proofpoint Alternatives and Competitors in 2024

• US sued TikTok and ByteDance for violating children’s privacy laws

• IT Security News Daily Summary 2024-08-03

• USENIX Security ’23 – Secure Floating-Point Training

• Adaptive Shield Showcases New ITDR Platform for SaaS at Black Hat USA

• C-Edge Technologies: An In-Depth Look at the Indian Fintech Leader Impacted by a Major Cyberattack

• AI and automation reducing breach costs – Week in security with Tony Anscombe

• CISA Names Lisa Einstein as First Chief AI Officer

• The Use of AI by Sales Teams is Booming

• SonicWall Mid-Year Threat Report Highlights Increase in Cyberattacks – Call for MSPs

• Russia-linked APT used a car for sale as a phishing lure to target diplomats with HeadLace malware

• Black Hat Fireside Chat: ‘Black Girls Hack’ emphasizes diversity as effective force multiplier

• Data Breach: Georgia Voter Information Accidentally Displayed Online

• Ransomware Groups Exploit VMware ESXi Bug for Widespread Attacks

• It Is Time for Smart Cyber Requirements for the Water Sector

• US Hands Over Russian Cybercriminals in WSJ Reporter Prisoner Swap

• DOJ and FTC Sue TikTok for Violating Children’s Privacy Laws

• UK Shuts Down ‘Russian Coms’ Fraud Platform Defrauding Millions

• DARPA suggests turning old C code automatically into Rust – using AI, of course

• Cybersecurity Today Week in Review for August 3rd, 2024 with Terry Cutler, David Shipley and host Jim Love

• Attacks on Bytecode Interpreters Conceal Malicious Injection Activity

• How the theft of 40M UK voter register records was entirely preventable

• Hackers Exploit Misconfigured Jupyter Notebooks with Repurposed Minecraft DDoS Tool

• CMMC Compliance: Customer and Shared Responsibility Matrix

• Planning for Cisco Certification Exam Success

• The Promise and Perils of Building AI Into Your Business Applications

• Millions of US Voter Data Exposed in 13 Misconfigured Databases

• Industrial IoT: Exploring Microcontrollers for Robust Applications

• IT Security News Daily Summary 2024-08-02

• Friday Squid Blogging: Treating Squid Parasites

• EFF to Ninth Circuit: Don’t Shield Foreign Spyware Company from Human Rights Accountability in U.S. Court

• What’s in a Secret? Best Practices for Static, Rotated and Dynamic Secrets

• Akeyless Universal Secrets Connector: A Secrets Manager of Managers

• Investors sued CrowdStrike over false claims about its Falcon platform

• How blockchain can support third-party risk management

• Federal Appeals Court Rules That Fair Use May Be Narrowed to Serve Hollywood Profits

• USENIX Security ’23 – ARMore: Pushing Love Back Into Binaries

• Cybersecurity Compass: An Integrated Cyber Defense Strategy

• Optus and Medibank Data Breach Cases Allege Cyber Security Failures

• Even Linux users should take a look at this Microsoft KB article., (Fri, Aug 2nd)

• Here Are EFF’s Sacramento Priorities Right Now

• Hackers Exploit Security Flaws to Access Millions of UK Voters’ Details

• Randall Munroe’s XKCD ‘Chili Tornado Quake’

• Scammers are impersonating cryptocurrency exchanges, FBI warns

• Sensitive Illinois Voter Data Exposed by Contractor’s Unsecured Databases

• New Panamorfi DDoS Attack Exploits Misconfigured Jupyter Notebooks

• How to prepare for a secure post-quantum future

• Sensitive Illinois Voter Data Exposed by Contractor’s Unsecured Databases

• Israeli hacktivist group brags it took down Iran’s internet

• APT28 Targets Diplomats with HeadLace Malware via Car Sale Phishing Lure

• APT41 Hackers Use ShadowPad, Cobalt Strike in Taiwanese Institute Cyber Attack

• MSSP vs. SOC – Key Considerations When Deciding Your Strategy

• New Jersey City University Targeted by ransomware Outfit Demanding $700K

• Russian ransomware criminals earn $500 million

• What is endpoint security? How does it work?

• TechCrunch Minute: Why did Wiz walk away from $23 billion?

• Remote SMB Security—Protect Your Business While Traveling

• USENIX Security ’23 – SpectrEM: Exploiting Electromagnetic Emanations During Transient Execution

• Prisoner Swap: Huge Russian Hackers Freed — Seleznev and Klyushin

• Apple Beats Expectations, Despite Falling iPhone Sales

• Respect your data, and protect it

• Report: macOS Most Vulnerable to Endpoint Attacks Compared to Windows and Linux

• Hacking Group Exposes Pentagon IT Provider’s Documents

• Domain Validation Bug: DigiCert Revokes TLS Certificates

• Pharma giant Cencora is alerting millions about its data breach

• Avtech camera vulnerability actively exploited in the wild, CISA warns

• Sitting Ducks DNS Attacks Used to Hijack Over 35,000 Domains

• How Advanced Data Protection Revolutionizes Security Analysts’ Workflow

• Google Breaks Promise to Block Third-Party Cookies

• The European Union’s World-First Artificial Intelligence Rules Are Officially Taking Effect

• Opal Security Extends Scope and Reach of Platform for Managing Privileges

• Social Media Firms Fail to Protect Children’s Privacy, Says ICO

• Getting to Know Tim Otis

• OSPAR 2024 report now available with 163 services in scope

• Disaster Recovery Steps Up With New Cisco NERVs

• Iranian Internet Attacked by Israeli Hacktivist Group: Reports

• The Rise of AI: New Cybersecurity Threats and Trends in 2023

• EPA Told to Address Cyber Risks to Water Systems

• Fortune 50 biz coughed up record-breaking $75M ransom to halt leak of stolen data

• Protect AI Raises $60 Million in Series B Funding

• Webinar: Discover the All-in-One Cybersecurity Solution for SMBs

• Government Shelves £1.3 Billion UK Tech, AI Plan

• The C̶a̶k̶e̶ User Location Is a Lie!!!

• StackExchange Abused to Spread Malicious PyPI Packages as Answers

• Looking Past DevOps: AI, ClickOps and Platform Engineering

• Leaked GitHub Python Token

• CrowdStrike Investors File Class Action Suit Following Global IT Outage

• Intel To Cut 15 Percent Of Workforce, Suspends Dividend

• U.S. released Russian cybercriminals in diplomatic prisoner exchange

• UK plans to revamp national cyber defense tools are already in motion

• Cloudflare Tunnels Abused for Malware Delivery

• New Windows Backdoor BITSLOTH Exploits BITS for Stealthy Communication

• Mirai Botnet targeting OFBiz Servers Vulnerable to Directory Traversal

• Fighting Ursa Luring Targets With Car for Sale

• Microsoft Patched a Critical Edge Flaw that Led to Arbitrary Code Execution

• Homebrew Security Audit Finds 25 Vulnerabilities

• Suspects in ‘Russian Coms’ Spoofing Service Arrested in London, as NCA Announces Takedown

• Google Chrome Adds App-Bound Encryption to Block Infostealer Malware

• Threat Intelligence: A Blessing and a Curse?

• Gaming Industry Faces 94% Surge in DDoS Attacks

• NCSC Unveils Advanced Cyber Defence 2.0 to Combat Evolving Threats

• Cybersecurity News: Cencora patient breach, OneDrive phishing campaign, Argentina’s crime predictions

• Credo AI Raises $21M to Help Enterprises Deploy AI Safely and Responsibly

• APT41 Likely Compromised Taiwanese Government-Affiliated Research Institute with ShadowPad and Cobalt Strike

• Malicious Package Hidden in PyPI Discovered

• Over 35k Domains Hijacked in ‘Sitting Ducks’ Attacks

• Hackers Actively Exploiting WordPress Plugin Arbitrary File Upload Vulnerability

• U.S. Releases High-Profile Russian Hackers in Diplomatic Prisoner Exchange

• Russia, Moldova Targeted by Obscure Hacking Group in New Cyberespionage Campaign

• Securonix unveils Cyber Data Fabric and Noise Canceling SIEM in EON suite

• How Cyberthreats Could Disrupt the Olympics

• Cybercriminals Abusing Cloudflare Tunnels to Evade Detection and Spread Malware

• Dark web offers botnets as low as $99

• The Need for Budget Boosts to Combat AI-Generated Cyber Attacks

• NCA Shuts Down Major Fraud Platform that Triggers 1.8 Million Scam Calls

• Infosec Institute Partners with Career.io to Help Students Launch Cybersecurity Careers

• UK crimebusters shut down global call-spoofing outfit that claimed 170K-plus victims

• Microsoft confirms cyber attack cause outage and it’s own defences may have made the impact worse: Cybersecurity Today for Friday, August 2, 2024

• DNS Vulnerability: ‘Sitting Ducks’ Exposes Millions of Domains to Hijacking

• Japan mandates app to ensure national ID cards aren’t forged

• Sitting Ducks attack technique exposes over a million domains to hijacking

• Navigating Indispensable Cybersecurity Practices for Hybrid Working Professionals

• CSMA Starts with Identity A Comprehensive Approach to Modern Cybersecurity

• The Unbreakable Bond: Why Identity and Data Security are Inseparable

• Organizations fail to log 44% of cyber attacks, major exposure gaps remain

• Record-breaking $75 million ransom paid to cybercrime group

• LuLu – 190,506 breached accounts

• Open-source project enables Raspberry Pi Bluetooth Wi-Fi network configuration

• India contemplates compulsory dynamic 2FA for digital payments

• New infosec products of the week: August 2, 2024

• ISC Stormcast For Friday, August 2nd, 2024 https://isc.sans.edu/podcastdetail/9080, (Fri, Aug 2nd)

• U.S. Trades Cybercriminals to Russia in Prisoner Swap

• Victory! D.C. Circuit Rules in Favor of Animal Rights Activists Censored on Government Social Media Pages

• US sends cybercriminals back to Russia in prisoner swap that freed WSJ journo, others

• U.S. Trades 5 Cybercriminals to Russia in Prisoner Swap

• Protect your mini-me—How to prevent child identity theft

• IT Security News Daily Summary 2024-08-01

• The One-Pixel Threat: How Minuscule Changes Can Fool Deep Learning Systems

• The cyberthreat that drives businesses towards cyber risk insurance

• Over 20,000 internet-exposed VMware ESXi instances vulnerable to CVE-2024-37085

• How to assess SOC-as-a-service benefits and challenges

• InfoSec community sounds off on CrowdStrike outage, next steps

• Widespread OTP-Stealing Campaign Targets Android Users

• Federated access to Amazon Athena using AWS IAM Identity Center

• I tested the 3 best VPNs for streaming the Summer Olympics

• Convicted Cybercriminals Included in Russian Prisoner Swap

• Security Risk Advisors Announces Launch of VECTR Enterprise Edition

• CISA Releases Software Acquisition Guide for Government Enterprise Consumers: Software Assurance in the Cyber-Supply Chain Risk Management (C-SCRM) Lifecycle

• What Is OAuth? Meaning + How It Works

• SENIX Security ’23 – Hot Pixels: Frequency, Power, and Temperature Attacks on GPUs and Arm SoCs

• Fraud in the Travel Industry & How to Prevent It

• Too late now for canary updates, says pension fund suing CrowdStrike

• EU Approves Hewlett Packard Enterprise’s $14bn Juniper Acquisition

• What is dynamic application security testing (DAST)?

• The Cisco Store Retail Roundup, Volume 2

• There is no real fix to the security issues recently found in GitHub and other similar software

• HealthEquity Data Breach Exposes Personal Information

• Tracking Proxy Scans with IPv4.Games, (Thu, Aug 1st)

• Google Using Enhanced Encryption to Protect Cookies

• An Analysis of the Rising Cyber Crime Levels Across the Globe

• Elon Musk Sued By Former CNN Anchor Over Cancelled X Deal

• New BingoMod Android Malware Posing as Security Apps, Wipes Data

• The best VPN for streaming in 2024: Expert tested and reviewed

• Microsoft Confirms Global Azure Outage Caused by DDoS Attack

• CrowdStrike, Antitrust, and the Digital Monoculture

• 8 Essential Considerations for Post-Quantum Cryptography Migration

• OAuth and XSS Bugs: Exposing Data of Millions of Users

• Progress Introduces Chef Courier for Simplified Job Management Across Corporate Software Ecosystems

• Top 6 Cloud Computing Certifications Worth Taking

• 8 EDR Best Practices You Need to Pay Attention to in 2024

• Inaugural Pentagon Cyber Policy Chief Nominee Sails Through Senate Armed Services Committee

• Alex Stamos Named CISO at SentinelOne

• Ransomware news trending on Google for this day

• Synchron Embeds Apple Vision Pro With Brain Interface

• Cyber A.I. Group Announces LOI to Acquire Prominent North American Cybersecurity Firm

• Top 39 Cybersecurity Companies You Need to Know 2024

• Pharma Giant Cencora confirmed the theft of personal and health information

• Innovative Approach Promises Faster Bug Fixes

• Scam Platform Shut Down by UK Authorities After 1.8 Million Fraudulent Calls

• Cyber A.I. Group Announces LOI to Acquire Prominent North American Cyber Security Company

• Navigating BNPL Integration: Key Steps and Best Practices for Developers

• $75 Million Record-Breaking Ransom Paid To Cybercriminals, Say Researchers

• Vonets WiFi Bridges

• Johnson Controls exacqVision Web Service

• Johnson Controls exacqVision Server Web Service

• Fortinet’s Progress on its Secure by Design Pledge Commitments

• RansomEXX Group Targets Indian Banking With New Tactics

• CISA Names First Chief Artificial Intelligence Officer

• How to counter adversarial AI

• FBI, CISA remind US voters that DDoS attacks can’t touch election systems

• He Was an FBI Informant—and Inspired a Generation of Violent Extremists

• A Commander’s-Intent-driven Network – Enabling Cyberspace Operations from the Tactical Edge and Beyond

• India’s Digital Sovereignty: Balancing Control and Freedom in the Internet Age

• Here’s How to Safeguard Your Smart Home Connected Devices

• Cicada3301’s Cyberattack on Tri-Star Display Exposes 95GB of Sensitive Data

• Over 1 Million Domains at Risk of ‘Sitting Ducks’ Domain Hijacking Technique

• Wordfence Intelligence Weekly WordPress Vulnerability Report (July 22, 2024 to July 28, 2024)

• Akamai?s Strategic and Transparent Implementation of AI

• Meta Posts Strong Q2 Amid Heavy AI Spending

• How Smart Tech is Teaching Us About Our Oceans, One Catch at a Time

• How Cyberthreats Could Disrupt the Olypmics

• DigiCert Mass-Revoking TLS Certificates Due to Domain Validation Bug

• Hackers Distributing Malicious Python Packages via Popular Developer Q&A Platform

• TgRAT Malware Attacking Linux Servers with New Variant

• Over 20,000 Ubiquiti Cameras and Routers are Vulnerable to Amplification Attacks and Privacy Risks

• US Senate Passes Landmark Bill Protecting Children’s Online Safety and Privacy

• Exploited Vulnerability Could Impact 20k Internet-Exposed VMware ESXi Instances

• Strata Identity to Demonstrate How to Modernize Legacy Identity Systems to Microsoft Entra ID at Black Hat 2024

• New Android Banking Trojan BingoMod Steals Money, Wipes Devices

• AWS completes the first GDV joint audit with participant insurers in Germany

• Insecure File-Sharing Practices in Healthcare Put Patient Privacy at Risk

• The Kaiser Data Breach Should Be a Wake-Up Call for Cybersecurity in Healthcare

• Why geographical diversity is critical to build effective and safe AI tools

• Cisco Innovating a New Era of Security at Black Hat 2024

• Ransomware Attack On Service Provider Hits 300 Small Banks Across India

• Mozilla follows Google in losing trust in Entrust’s TLS certificates

• BingoMod Android RAT Wipes Devices After Stealing Money

• kvmCTF: Google’s $250K Bounty for KVM Zero-Day Vulnerabilities

• Applying Vulnerability Management to Zero Trust: Insights from Fortra’s Tyler Reguly

• APT41 likely compromised Taiwanese government-affiliated research institute with ShadowPad and Cobalt Strike

• AI Plans Hampered By Lack Of Skills, Governance Challenges

• CrowdStrike Sued By Shareholders After Huge IT Outage

• New “Sitting Ducks” DNS Attack Lets Hackers Easy Domain Takeover

• Bitdefender Flaw Let Attackers Trigger Server-Side Request Forgery Attacks

• How To Fix the OWASP Top 10 Vulnerability in Angular 18.1.1v

• The Top 7 NordVPN Alternatives for 2024

• A $500 Open-Source Tool Lets Anyone Hack Computer Chips With Lasers

• Obfuscation: There Are Two Sides To Everything

• How “professional” ransomware variants boost cybercrime groups

• Education in Secure Software Development

• Some Companies Pay Ransomware Attackers Multiple Times, Survey Finds

• Multiplayer.it – 503,957 breached accounts

• SMS Stealer Targeting Several Countries with Over 100,000 Malicious Android Apps

• Cado platform enhances SOC efficiency with AI-driven workflow automation

• Detecting evolving threats: NetSupport RAT campaign

• Beware Of Malicious Crypto Management App That Drains Your Wallet

• April 2024 Cyber Attacks Statistics

• Secretive: Open-Source App for Storing and Managing SSH Keys in the Secure Enclave

• Microsoft Confirms Azure, 365 Outage Linked to DDoS Attack

• Security Flaws at UK Elections Agency Left Door Open for Chinese Hackers, Privacy Watchdog Finds

• DigiCert Revoking 83,000 Certificates of 6,800 Customers

• Best 5 SOC 2 Compliance Software in 2024

• Google Chrome Adds App-Bound Encryption to Protect Cookies from Malware

• Cencora Confirms Patient Data Stolen in Cyber-Attack

• Cybersecurity News: Elections and DDoS, dating apps leak locations, Germany blames China

• What Is a Field CISO?

• Social Media Malvertising Campaign Promotes Fake AI Editor Website for Credential Theft

• Get an Extensive Education in Cybersecurity for Just $40

• Apple Extends Zero-Day Patch to Older Macs, Urges Immediate Update

• E-Commerce Fraud Campaign Uses 600+ Fake Sites

• Where to find Talos at BlackHat 2024

• CrowdStrike & Microsoft to Face Lawsuit from Delta Air Lines Following System Crash

• Voice Over Wi-Fi Vulnerability Let Attackers Eavesdrop Calls And SMS

• EvilProxy Phishing Kit Used in Over One Million Attacks Monthly

• Lineaje Secures $20 Million in Funding To Address Software Supply Chain Issues

• Synack PTaaS platform offers complete security testing suite

• New Microsoft whitepaper shares how to prepare your data for secure AI adoption

• BEC Attacks Surge 20% Annually Thanks to AI Tooling

• Beware of Fake AI Tools Masking a Very Real Malware Threat

• Threat Actor Impersonates Google via Fake Ads for Authenticator

• How SquareX is Redefining Web Security: An In-Depth Discussion with Chief Architect Jeswin Mathai

• Wing Security unveils custom SaaS Threat Intelligence for direct dashboard integration

• Tycoon 2FA Phishing Kit Exploits Amazon SES to Steal User Credentials

• How to spot signs of ransomware in your school district

• Nucleus Vulnerability Intelligence Platform enhances threat assessment and remediation speed

• Facebook Ads Lead to Fake Websites Stealing Credit Card Information

• Germany has accused China of Attack on Critical Infrastructure Since 2021

• BingoMod Android RAT steals money from victims’ bank accounts and wipes data

• Stealer Logs Posted to Telegram – 26,105,473 breached accounts

• Android Mobile Security alert against SMS Stealer Malware

• Germany names China as source of attack on government geospatial agency

• Why CISOs face greater personal liability

• Threat intelligence: A blessing and a curse?

• Practical strategies to mitigate risk and secure SAP environments

• Maritime Cybersecurity: Avoiding the Next DALI

• Airlines are flying blind on third-party risks

• OAuth Vulnerability Exposes 1 Million Websites To XSS Attacks

• Join the Fight: Calling Fintech Leaders to Unite With Federated Learning for Superior Fraud Detection

• Infosec products of the month: July 2024

• ISC Stormcast For Thursday, August 1st, 2024 https://isc.sans.edu/podcastdetail/9078, (Thu, Aug 1st)

• Ransomware infection cuts off blood supply to 250+ hospitals

• Cosmic Bomber is like Bomberman multiplayer meets Web3

• Ransomware infection cuts off blood supply to 250 hospitals

• The Procurement and Operational Benefits of a Cybersecurity Platform

• Understanding the Impact of the CrowdStrike Event

• EDR vs EPP vs Antivirus: Comparing Endpoint Protection Solutions

• A ransomware attack disrupted operations at OneBlood blood bank

• New Jack Henry Banno Integration from Allure Security Strengthens Security Against Phishing and Online Impersonations

• IT Security News Monthly Summary – August

• IT Security News Daily Summary 2024-07-31

• An In-Depth Look at the Cisco CCDE-AI Infrastructure Certification

• More than 83K certs from nearly 7K DigiCert customers must be swapped out now

• Russia takes aim at Sitting Ducks domains, bags 30,000+

• Security review for Microsoft Edge version 127

• USENIX Security ’23 – Oops..! I Glitched It Again! How to Multi-Glitch the Glitching-Protections on ARM TrustZone-M

• Identifying a BOLA Vulnerability in Harbor, a Cloud-Native Container Registry

• What is CrowdStrike? Everything You Need to Know

• The Cisco Store Patching Station

• Introducing the MSRC Researcher Resource Center

• Microsoft: DDoS Attack on Azure Services Exacerbated by Defense Error

• WhatsApp Allows Python, PHP Script Execution on Windows Without Warnings

• Mandrake Android Malware Creeps Up On Google Play Store Again

• Recent SideWinder Campaign Targets Ports And Maritime Facilities

• The big cybersecurity themes at Black Hat 2024 — and why they matter

• State of SaaS Security Report 2024: Key Findings & Tips from Deployments at Scale

• Why You Should Clear Your Android Browser’s Cache and Cookies

• Increased Activity Against Apache OFBiz CVE-2024-32113, (Wed, Jul 31st)

• Microsoft Says Ransomware Groups Are Exploiting the Newly-Patched VMware ESXi Flaw

• Ransomware Attack Hits OneBlood Blood Bank, Disrupts Medical Operations

• US To Exempt Allies From Expanded China Chip Equipment Export Rules

• Global SMS Stealer Targeting Android Users via Malicious Apps and Ads

• Australian Organisations Experiencing Highest Rate of Data Breaches, Reports Rubrik

• Microsoft confirms DDoS attack disrupted cloud services

• Cost of Data Breach in 2024: $4.88 Million, Says Latest IBM Study

• Urgent Email Alert from Amazon UK Customers Must Act Now

• Over 8,000 Exploit Attempts Already Blocked For Recently Patched Unauthenticated Arbitrary File Upload Vulnerability in 简数采集器 (Keydatas) WordPress Plugin

• CISA and FBI Release Joint PSA: Putting Potential DDoS Attacks During the 2024 Election Cycle in Context

• X Leverages Users’ Posts For Training Its Grok AI

• 6 Best Vulnerability Management Software & Systems in 2024

• Texas Wins $1.4 Billion Biometric Settlement Against Meta. It Would Have Happened Sooner With Consumer Enforcement

• Chrome adopts app-bound encryption to stymie cookie-stealing malware

• Report: Amount of Data Being Analyzed by Cybersecurity Teams Rises

• Analysis of Top Infostealers: Redline, Vidar and Formbook

• Meta to pay $1.4 billion over unauthorized facial recognition image capture

• Five takeaways from Forrester’s 2024 state of application security

• Hackers Exploit Vmware ESXi Vulnerability in Ransomware Attacks

• Source Code of Phorpiex Botnet with Anti-AV Capabilities on Sale

• Navigating the Evolving Landscape of Cybersecurity

• CrowdStrike Sued? — Delta Dials David Boies

• Out-of-bounds read vulnerability in NVIDIA driver; Open-source flashcard software contains multiple security issues

• Microsoft Slowdown In Cloud Growth Worries Wall Street

• Oracle challenges cloud giants with new Nvidia AI hardware offerings

• Nearly 7% of Internet Traffic Is Malicious

• Multiple SMTP Servers Vulnerable to Spoofing Attacks, Let Hackers Bypass Authentication

• Our Last Chance to Stop KOSA | EFFector 36.10

• The CISO: A Cornerstone of Private Equity Success

• Urgent Blood Appeal Issued in US After Ransomware Attack

• VMware vulnerability leads ransomware to encrypt mass virtual machines

• Microsoft 365 subscriptions now include a free VPN – here’s how to use it

• What is cyber attribution?

• Unlocking the Future of MSSP Operations with Cisco CDO APIs

• Security Researchers and Journalists at Risk: Why You Should Hate the Proposed UN Cybercrime Treaty

• Embedding AI security from the get go

• Black Hat Preview: CrowdStrike, Disinformation Lead The Narrative

• Passwords Vanish for 15 Million Windows Users, Google Says “Sorry”

• New SMS Stealer Malware Targets Over 600 Global Brands

• UK Investigates Alphabet Partnership With AI Firm Anthropic

• Vulnerabilities Enable Attackers to Spoof Emails From 20 Million Domains

• The Concerning Rise of AI “Undressing” Apps: A Violation of Privacy and Ethics

• SMS Stealer malware targeting Android users: Over 105,000 samples identified

• Take Cover: Securing Games Truly Is a Battle Royale

• Bridging the skills gap to build a secure future for the cloud

• Five months after takedown, LockBit is a shadow of its former self

• Cyberse and the Marketplace Era of Cybersecurity Purchasing

• DigiCert to Revoke 83,000+ SSL Certificates Due to Domain Validation Oversight

• CrowdStrike Shares Plunge Amid Delta Compensation Report

• PR vs cybersecurity teams: Handling disagreements in a crisis

• California digitizes car titles, putting 42 million vehicles on the blockchain

• Malwarebytes vs Bitdefender: Best Cybersecurity Software of 2024

• Addressing communication roadblocks to overcome cybersecurity threats

• Malicious Packages Hidden in PyPI

• Data Breaches for the Month July 2024

• Google Backs Messaging Layer Security for Enhanced Privacy and Interoperability

• North Korea-Linked Malware Targets Developers on Windows, Linux, and macOS

• Meta to Pay Texas $1.4bn for Unlawful Biometric Data Capture

• World Wide Web Consortium Opposed Google’s Decision on Third-party cookies

• Vulnerability Management in DevOps Environments

• Apple fixes Siri vulnerabilities that could have allowed sensitive data theft from locked device. Update now!

• Are You Getting the Most Value from Your Existing CNAPP Solution?

• City of Columbus Says Data Compromised in Ransomware Attack

• New PyPI Package Zlibxjson Steals Discord, Browser Data

• ‘Error’ in Microsoft’s DDoS defenses amplified 8-hour Azure outage

• Can GPT-4o Be Trusted With Your Private Data?

• Apple fixed dozens of vulnerabilities in iOS and macOS

• How to Best Secure Banking Applications – Top Tips from a Mobile Security Expert

• The Challenges and Responsibilities of CISOs with Halcyon

• New Specula Tool Turning Outlook as a C2 Server by Leveraging Registry

• The best travel VPNs of 2024: Expert tested and reviewed

• Don’t Let Your Domain Name Become a “Sitting Duck”

• Tenable Considering a Potential Sale: Report

• “There is no business school class that would ever sit down and design Talos”

• Protect Against Adversary-in-the-Middle with Cisco’s User Protection Suite

• The Transformational Opportunity of AI on ICT Jobs

• DigiCert Revokes 83,267 TLS Certificates Due to DNS Check Problem

• Top CVEs of July 2024: Key Vulnerabilities and Mitigations

• How To Get the Most From Your Security Team’s Email Alert Budget

• Chinese Hackers Target Japanese Firms with LODEINFO and NOOPDOOR Malware

• Tesla Using Full Self Driving In Crash Kills Biker, Amid Another Recall

• Phishing Attack Steals Donations from Trump Voters Using Fake Websites

• Meta paid a $1.4 Billion Settlement for the Unauthorized Capture of Personal Biometric Data

• Cybercriminals Target Polish Businesses with Agent Tesla and Formbook Malware Delivered by ModiLoader

• DigiCert Revoking Many Certificates Due to Verification Issue

• Microsoft: DDoS defense error amplified attack on Azure, leading to outage

• Clutch Security launches to transform management of NHIs

• GDPR Consent Request Forms: Sample Text

• Can ChatGPT-4o Be Trusted With Your Private Data?

• New Specula Tool Uses Outlook for Remote Code Execution in Windows

• Report: 40% of Environments Exposed to Full Take Over

• How Bots and AI are Fueling Disinformation

• Fortanix expands Key Insight to enhance cryptographic security across hybrid environments

• Cyber Espionage Group XDSpy Targets Companies in Russia and Moldova

• Cybercriminals Deploy 100K+ Malware Android Apps to Steal OTP Codes

• Join Us 08-16-24 for “Hacking the Demo” – Super Cyber Friday

• Intel To Cut Thousands Of Jobs – Report

• AI-powered ‘narrative attacks’ a growing threat: 3 defense strategies for business leaders

• Phishing campaigns target SMBs in Poland, Romania, and Italy with multiple malware families

• How AI is Shaping Fraud: VIPRE Reveals 40% of BEC Emails Are Now AI-Generated

• Cost of a Data Breach Surges 10% on Shadow Data Challenge

• DDoS Attack Triggers New Microsoft Global Outage

• Cybersecurity News: Delta’s legal maneuver, Record-breaking ransom, Meta $1.4B settlement

• 6% of All Published CVEs Have Been Exploited in the Wild, Report Finds

• AnimeLeague – 192,134 breached accounts

• From Geopolitics to Boardrooms: The Impact of the Kaspersky Ban

• Cycode unveils Cycode AI to enhance ASPM platform with advanced security features

• #TripwireBookClub – From its Origins to its Future: How AI Works

• IBM: Cost of a Breach Reaches Nearly $5 Million, With Healthcare Being Hit the Hardest

• UK Electoral Commission slapped for basic cybersecurity fails

• Innovative approach promises faster bug fixes

• Researchers Uncover Largest Ever Ransomware Payment of $75m

• Lineaje secures $20 million in funding to address software supply chain issues

• Enabling new service models with SSDP

• Chrome Security Update: Patch for Critical Flaw that Leads to Exploitation

• Bumble and Hinge allowed stalkers to pinpoint users’ locations down to 2 meters, researchers say

• Building bridges, feeding people and empowering students: How new technologies are changing lives

• A Fortune 50 company paid a record-breaking $75 million ransom

• Email Attacks Surge, Ransomware Threat Remains Elevated

• Meta Agrees to $1.4B Settlement With Texas in Privacy Lawsuit Over Facial Recognition

• Can Negotiations Yield Success in Ransomware Attacks

• Devo Technology launches data orchestration and SOC enhancements

• DDoS Attack on Microsoft Azure Cloud leads to another global IT Outage

• Cohesity unveils enhanced GenAI capabilities for faster threat detection and recovery

• Microsoft world wide outage: Cybersecurity Today for Wednesday, July 31, 2024

• How AI is Shaping Fraud: Vipre Reveals 40% of BEC Emails Are Now AI-Generated

• IBM: Cost of Data Breach on Average Reaches $4.9 Million

• If You are Reachable, You Are Breachable, and Firewalls & VPNs are the Front Door

• NSFOCUS RSAS New Features Unleashed

• Proficio launches ProBAS service to help organizations better prepare and respond to cyber attacks

• Meta Settles for $1.4 Billion with Texas Over Illegal Biometric Data Collection

• Dark Angels gang scores a record-breaking $75 million ransom

• What CISOs need to keep CEOs (and themselves) out of jail

• Leveraging dynamic configuration for seamless and compliant software changes

• Cybersecurity jobs available right now: July 31, 2024

• Secretive: Open-source app for storing and managing SSH keys in the Secure Enclave

• ISC Stormcast For Wednesday, July 31st, 2024 https://isc.sans.edu/podcastdetail/9076, (Wed, Jul 31st)

• DigiCert gives unlucky folks 24 hours to replace doomed certificates after code blunder

• Ubook – 699,908 breached accounts

• Lineaje raises $20M to help organizations combat software supply chain threats

• ThreatLabz Ransomware Report: Unveiling a $75M Ransom Payout Amid Rising Attacks

• DigiCert Certificate Revocations

• Calls Mount—from Principal UN Human Rights Official, Business, and Tech Groups—To Address Dangerous Flaws in Draft UN Surveillance Treaty

• CISA adds VMware ESXi bug to its Known Exploited Vulnerabilities catalog

• Certbot Use Continues to Grow

• IT Security News Daily Summary 2024-07-30

• Proofpoint Platform Exploited to Send Millions of Spoofed Phishing Emails

• How to Get Started in Cybersecurity: Steps, Skills & Resources

• Mandrake Android spyware found in five apps in Google Play with over 32,000 downloads since 2022

• Building A SOC: Key Considerations And Strategies

• Google Workspace Authentication Vulnerability Allowed Thousands of Emails to be Compromised

• It took some serious nerve for Wiz to walk away from Google’s $23B offer

• AI Pulse: Brazil Gets Bold with Meta, Interpol’s Red Flag & more

• AI-Powered Deepfake Tools Becoming More Accessible Than Ever

• Delta Air Lines dials up Microsoft’s legal nemesis over CrowdStrike losses

• Empowering WordPress Bug Bounty Hunters: Meet the New Wordfence Bug Bounty Program Researcher Dashboard

• Microsoft need to be transparent about customer impacting DDoS attacks

• Ransomware Attacks Are Attracting Record Payouts in Australia. Should You Pay the Ransom?

• Microsoft, SecOps pros weigh kernel access post-CrowdStrike

• Cloud Security Challenges Extend Beyond Technology

• The best Bluetooth trackers of 2024: Expert tested

• HealthEquity data breach affects 4.3M people

• Apple Patches Everything. July 2024 Edition, (Tue, Jul 30th)

• $75 Million Ransom Paid to Dark Angels Ransomware Group

• Threat actor impersonates Google via fake ad for Authenticator

• Meta’s AI Safety System Manipulated by Space Bar Characters to Enable Prompt Injection

• The KOSA Internet Censorship Bill Just Passed The Senate—It’s Our Last Chance To Stop It

• NTLM Deprecation is Giving Us XP EOL Flashbacks: Are You Protected?

• US State Department Says UN Cybercrime Treaty Must Include Human Rights Protections

• With the Olympics underway, Attendees and Spectators at Risk of Cyberattacks

• SAFECOM Releases New Resource for Cloud Adoption

• IT leaders worry the rush to adopt Gen AI may have tech infrastructure repercussions

• SideWinder Utilizes New Infrastructure to Target Ports and Maritime Facilities in the Mediterranean Sea

• Ransomware actors pivot away from major brands in Q2 2024

• Extending Resilience: Reducing Stress and Burnout for Cybersecurity Teams

• Crypto Exchange Gemini Confirms Third-Party Data Breach

• Balancing Privacy and Authenticity in the Digital Age

• Google’s New Feature to Protect Users From Fake Calls

• How to deploy an Amazon OpenSearch cluster to ingest logs from Amazon Security Lake

• Proficio Launches New ProBAS Breach and Attack Simulation Service

• Food Fraud: The Top Three Scams Impacting the Food Delivery Industry

• Apple Releases Security Updates for Multiple Products

• CISA Adds One Known Exploited Vulnerability to Catalog

• SideWinder phishing campaign targets maritime facilities in multiple countries

• New PowerShell Backdoor Linked to Zloader Malware

• Change Healthcare Begins to Notify Millions Affected by Hack

• Western Maryland Community Colleges Receive Edwards Fund Grant for Cyber Ranges

• The US States Most at Risk of Cyberattacks

• Australia wants companies disclose ransomware payments

• Microsoft: Ransomware gangs exploiting VMware ESXi flaw

• European Central Bank Concludes Banking Cyber Stress Test

• Cowbell Secures $60 Million Series C Funding From Zurich Insurance Group

• Google Cloud CISO Phil Venables: ‘I’m short-term pessimistic, long-term optimistic’

• Sophisticated Phishing Campaign Targets Microsoft OneDrive Users

• Crowdstrike preliminary report as sourced from Richard Ford

• Salvador Technologies sees growth in maritime cybersecurity

• Price Drop: This Complete Ethical Hacking Bundle is Now $40

• HealthEquity data breach affects 4.3 million people

• HealthEquity Data Breach Compromises Customer Information

• Massive Phishing Campaign Exploiting Proofpoint’s Email Protection to Dispatch Millions of Perfectly Spoofed Emails

• Crafty ClickFix-Style Phishing Campaign Targets Microsoft OneDrive Users

• ‘LockBit of phishing’ EvilProxy used in more than a million attacks every month

• Adaptive Shield Showcases New ITDR Platform for SaaS at Black Hat USA

• Why (and How) APIs and Web Applications Are Under Siege

• Google Workspace Vulnerability Allowed Hackers to Access 3rd-Party Services

• A Senate Bill Would Radically Improve Voting Machine Security

• The Unyielding Struggle of Cybersecurity and Its Paradoxical Dilemma

• Indian APT Targeting Mediterranean Ports and Maritime Facilities

• New Mandrake Spyware Found in Google Play Store Apps After Two Years

• Stolen GenAI Accounts Flood Dark Web With 400 Daily Listings

• Progress Patched New MOVEit File Transfer Flaw that Allows Privilege Escalation

• Weak Human Rights Protections: Why You Should Hate the Proposed UN Cybercrime Treaty

• Fortanix Extends Encyption Key Discovery to On-Premises IT Platforms

• Ukraine Hacks ATMs Across Russia in Massive Cyberattack

• Listening to the Voice of the Customer: Cisco’s 2024 State of Industrial Networking Report

• Accenture and SandboxAQ Expand Cybersecurity Partnership

• The Power and Peril of RMM Tools

• ubook Suffered Data Breach, 710,000 Users’ Data Exposed

• Why Do We Need to Keep Our Builds Green?

• Embracing Diversity and Growth: My Cisco Internship Experience

• Average data breach cost jumps to $4.88 million, collateral damage increased

• Critical OpenSSH “regreSSHion” Vulnerability Impacted macOS  Systems, Patch Now

• Threat Actor Allegedly Claiming Hack of Microsoft Employee’s Device

• Hackers Exploiting ESXi Hypervisor Auth Bypass Flaw For Ransomware Attacks

• Proofpoint’s Email Protection Let Attackers Send Millions Of Phishing Emails

• Microsoft Warns of Ransomware Gangs Abusing VMware ESXi Authentication Bypass in Attacks

• OCI Customers Can Now Externally Manage Encryption Keys from a Cloud-Based Service

• Adaptive Shield unveils ITDR platform for SaaS

• SocGholish Malware Attacking Windows Users Using Fake Browser Update

• Providing Security Updates to Automobile Software

• The Most Common DNS Security Risks in 2024 (And How to Mitigate Them)

• Ransomware gangs are loving this dumb but deadly make-me-admin ESXi vulnerability

• Cyber Threat Intelligence: Illuminating the Deep, Dark Cybercriminal Underground

• Cybercriminals Target Polish Businesses with Agent Tesla and Formbook Malware

• ICO Slams Electoral Commission for Basic Security Failings

• South Korea To Support Businesses Amidst E-Commerce Crisis

• China Sees Slowdown In Foreign-Branded Smartphone Growth

• Telegram-Controlled TgRat Trojan Targets Linux Servers

• Threat Actor Allegedly Claiming Breach of Cyepr

• AcidPour Malware Attacking Linux Data Storage Devices To Wipe Out Data

• IPVanish vs NordVPN (2024): Which VPN Is Better?

• 16-30 April 2024 Cyber Attacks Timeline

• VMware ESXi auth bypass zero-day exploited by ransomware operators (CVE-2024-37085)

• Hacker Attacking Bank Users With AI-powered Phishing Tools and Android Malware

• Surging data breach disruption drives costs to record highs

• What is sudo in Linux and why is it so important?

• Cyber Insurance Provider Cowbell Raises $60 Million

• Incident Response Is So Important We Might Try Getting Good At It

• 8 Daily Practices to Avoid Cybersecurity Burnout

• Re-Extortion: How Ransomware Gangs Re-Victimize Victims

• Just One in 10 Attacks Flagged By Security Tools

• Cybersecurity News: HealthEquity data breach, CrowdStrike impact grows, Proofpoint exploit

• Microsoft Expected To Report 31 Percent Azure Growth Amidst AI Pressure

• People Overconfident in Password Habits, Overwhelmed by Too Many Passwords

• Attackers Bypassed Google’s Email Verification to Create Workspace Accounts, Access Third-Party Services

• Ubuntu Fixes Two OpenVPN Vulnerabilities

• HealthEquity Breach Hits 4.3 Million Customers

• Millions of Spoofed Emails Bypass Proofpoint Security in Phishing Campaign

• SpaceX ‘In Talks’ To Recover Starship Rocket In Australia

• Silicon UK In Focus Podcast: Connecting the Machines

• A crafty phishing campaign targets Microsoft OneDrive users

• Apple Rolls Out Security Updates for iOS, macOS

• Xiaomi Buys $116m Plot To Expand Bejing EV Factory

• HPE $14bn Juniper Acquisition Set For ‘Unconditional’ EU Approval

• Microsoft 365 Users Targeted by Phishers Abusing Microsoft Forms

• New SideWinder Cyber Attacks Target Maritime Facilities in Multiple Countries

• 5 Bitwarden features that make it my favorite password manager

• Malware Campaign Lures Users With Fake W2 Form

• ZeroTier Raises $13.5 Million in Series A Funding

• Report: An 18% Increase in Ransomware Attacks Includes $75M Payment

• Hacked Blood Testing Provider Expects Autumn Recovery Date

• DigiCert to Revoke Thousands of Certificates Following Domain Validation Error

• The Critical Role of Response Time in Cybersecurity

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Detecting Externally Facing Resources

• OneDrive Phishing Scam Tricks Users into Running Malicious PowerShell Script

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Proofpoint phishing palaver plagues millions with ‘perfectly spoofed’ emails from IBM, Nike, Disney, others

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• VMware ESXi Flaw Exploited by Ransomware Groups for Admin Access

• X allows users to turn off GROK AI Training due to data concerns

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• 2024-07-30 – Traffic analysis exercise: You dirty rat!

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Review: Action1 – Simple and powerful patch management

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Coding practices: The role of secure programming languages

• Securing remote access to mission-critical OT assets

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Insecure file-sharing practices in healthcare put patient privacy at risk

• Malaysia is working on an internet ‘kill switch’, says minister

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• ISC Stormcast For Tuesday, July 30th, 2024 https://isc.sans.edu/podcastdetail/9074, (Tue, Jul 30th)

• Ostrich Cyber-Risk Recognized in 2024 Gartner® Hype Cycle™ for Cyber-Risk Management

• Hacker Scrapes and Publishes 100,000-Line CrowdStrike IoC List

• This tool tests AI’s resilience to ‘poisoned’ data

• ManageEngine: Australian SMEs Aim to Reduce IT Costs Amid Growing Technology Complexity

• iOS gets an AI upgrade: Inside Apple’s new ‘Intelligence’ system

• 6 types of DNS attacks and how to prevent them

• Ransomware gangs exploit recently patched VMware ESXi bug CVE-2024-37085

• Senators Expose Car Companies’ Terrible Data Privacy Practices

• IT Security News Daily Summary 2024-07-29

• Progress Telerik Report Server Vulnerability Allows RCE Attacks

• ServiceNow Remote Code Execution Vulnerabilities Under Attack

• Docker Engine Vulnerability Could Allow AuthZ Bypass

• Google Chrome Password Manager Flaw Triggered Outage

• GitHub Design Flaw Retains Deleted, Private Repos

• Meta’s AI safety system defeated by the space bar

• US border cops really must get a warrant in NY before searching your phones, devices

• USENIX Security ’23 – Device Tracking via Linux’s New TCP Source Port Selection Algorithm

• Windows Security best practices for integrating and managing security tools

• Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption

• The Top 4 CrowdStrike Alternatives & Competitors in 2024

• US border cops really must get a warrant in NY before searching phones, devices

• Apple Joins Voluntary U.S. Government Commitment to AI Safety

• How to opt out of facial recognition at airports (if you’re American)

• Secure, Simple, Superior: The Advantages of Tokenized Payment Cards by Wallester

• EFF’s Concerns About the UN Draft Cybercrime Convention

• Microsoft Says Ransomware Gangs Exploiting Just-Patched VMware ESXi Flaw

• AWS revalidates its AAA Pinakes rating for Spanish financial entities

• What is SSH (Secure Shell) and How Does It Work?

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #299 — Motivation and Reality

• XSS and OAuth Combo Threatens Millions of Users Due to Hotjar Flaw

• Yes, Americans can opt out of airport facial recognition. Here’s how

• Understanding VPN Protocols: Ensuring Your Data Security

• FBCS Data Breach Affects 4.2 Million Americans

• Guarding Privacy: Cutting-Edge Technologies for Data Protection

• Vulnerability Recap 7/29/24 – Multiple Old Security Flaws Reappear

• Why You Should Hate the Proposed UN Cybercrime Treaty

• Critical Flaw in Acronis Cyber Infrastructure Exploited in the Wild

• India Cybersecurity: Key Government Initiatives for Cybersecurity

• Some good may come out of the CrowdStrike outage

• Don’t Get Hacked! Essential Cybersecurity Tips You Need To Know

• Optical fibers fit for the age of quantum computing

• HealthEquity: 4.3 Million People Affected by Data Breach

• Accelerate incident response with Amazon Security Lake – Part 2

• Ransomware attacks are inevitable on Paris Olympics 2024

• LockBit Lies Prove Another Reason to Never Pay the Ransom

• July 2024 Web Server Survey

• SIEM is not storage, with Jess Dodson (Lock and Code S05E16)

• How the Change Healthcare attack may affect cyber insurance

• What is GDPR? Compliance and conditions explained

• Acronis Cyber Infrastructure bug actively exploited in the wild

• Mandiant: North Korean Hackers Are Targeting Naval Tech

• Nine Individuals Apprehended in Cavite for Alleged Voice Phishing Activities

• Vulnerability Summary for the Week of July 22, 2024

• Mandrake Spyware Infects 32,000 Devices Via Google Play Apps

• VPN Usage Increased 5016% in Bangladesh Amidst Online Censorship

• US senators ask FTC to investigate car makers’ privacy practices

• With Open Source Artificial Intelligence, Don’t Forget the Lessons of Open Source Software

• CISA Adds Three Known Exploited Vulnerabilities to Catalog

• Security Flaws Found in Hotjar, Potentially Affecting Sensitive Data of Millions Utilising Major Global Brands

• Mitigating Data Breaches with AI-Driven Security Solutions

• Crowdstrike outage: Growing scams amid global outage

• USENIX Security ’23 – Did the Shark Eat The Watchdog In The NTP Pool? Deceiving The NTP Pool’s Monitoring System

• WTH? Google Auth Bug Lets Hackers Login as You

• Mandrake Spyware Infects 32,000 Devices via Google Play Apps

• The Aftermath of the WordPress.org Supply Chain Attack: New Malware and Techniques Emerge

• Strategies for Mitigating the Human Element of Cyber Risk

• Unlock the Potential of AI/ML Workloads with Cisco Data Center Networks

• Bitsight for Insurance Services

• UNC4393 Goes Gently into the SILENTNIGHT

• Threat Actots Leveraging ChatGPT To Craft Sophisticated Attacks

• Apple reportedly delays the first Apple Intelligence features until October

• Beware of AI ‘model collapse’: How training on synthetic data pollutes the next generation

• Top Tech Conferences & Events to Add to Your Calendar in 2024

• Taking action: how to combat the financial repercussions of a cyber incident

• Report: Russian Ransomware Gangs Account for 69% of all Ransom Proceeds

• The Dual Nature of Ransomware Attacks

• Millions of Websites Susceptible to XSS Attack via OAuth Implementation Flaw

• The NIS2 Directive: Implications for Your Organization

• Keep Your Tech Flame Alive: Akamai Trailblazer Elizabeth Padley

• Ukraine Hacked Russian Banks, Leading Major Disruption

• One of the best productivity laptops I’ve tested is not a Lenovo ThinkPad or MacBook

• Most people worry about deepfakes – and overestimate their ability to spot them

• Saboteurs Cut Internet Cables in Latest Disruption During Paris Olympics

• Effective change management practices in IT environments: a guide

• Despite Bans, AI Code Generation Tools Widely Used in Organizations

• Intruders at HealthEquity rifled through storage, stole 4.3M people’s data

• Walmart Discovers New PowerShell Backdoor Linked to Zloader Malware

• Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails

• Google apologizes for breaking password manager for millions of Windows users with iffy Chrome update

• Cato Networks Surpasses $200 Million, Doubles ARR in Under Two Years

• WhatsApp for Windows Lets Python, PHP Scripts Execute with no Warning

• Senators to FTC: Car Companies’ Data Privacy Practices Must be Investigated

• DDoS Attacks Disrupt Major Russian Banks: Ukraine Claims Responsibility

• Critical Acronis Cyber Infrastructure vulnerability exploited in the wild (CVE-2023-45249)

• Hotjar, Business Insider Vulnerabilities Expose OAuth Data Risks

• How Infostealers Pillaged the World’s Passwords

• National Vulnerability Backlog Could Surge to 30,000 by 2025

• The Other Lesson from the XZ Utils Supply-Chain Attack

• Millions of Websites Susceptible XSS Attack via OAuth Implementation Flaw

• How iOS 18 will impact your iPhone’s battery health – and what you can do about it

• The best mobile VPNs of 2024: Expert tested and reviewed

• How Searchable Encryption Changes the Data Security Game

• Acronis Warns of Cyber Infrastructure Default Password Abused in Attacks

• RaspAP Flaw Let Hackers Escalate Privileges with Raspberry Pi Devices

• New Research in Detecting AI-Generated Videos

• What Every Business Needs to Know About Ransomware

• Gh0stGambit Dropper Used to Deploy Gh0st RAT Against Chinese Users

• Data From Deleted Github Repositories May Not Actually be Deleted

• Ukraine Claims Cyber Attack Disrupted Russian ATMs and Banking System

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• US border agents must get warrant before cell phone searches, federal court rules

• AI-Generated Deepfake Attacks Force Companies To Reassess Cybersecurity

• 4.3 Million Impacted by HealthEquity Data Breach

• Amazon Faces Double Tax Fraud Probes In Italy

• How to Build an Effective Security Operations Center

• The Top 5 1Password Alternatives for 2024

• Targeted PyPI Package Steals Google Cloud Credentials from macOS Devs

• eBook: 20 tips for secure cloud migration

• How to Write a Generative AI Cybersecurity Policy

• JPMorgan Rolls Out AI Chatbot To Staff

• Malicious Python Package Attacking macOS Developers To Steal Google Cloud Logins

• Mandrake spyware sneaks onto Google Play again, flying under the radar for two years

• Most CISOs Feel Unprepared for New Compliance Regulations

• Industry Moves for the week of July 29, 2024 – SecurityWeek

• Selenium Grid Instances Exploited for Cryptomining

• Less Than Half of European Firms Have AI Controls in Place

• Cybersecurity News: PyPi package targets MacOS, Columbus, Ohio suffers cyber incident, Windows July update problems

• SK Hynix To Invest $6.8bn In Yongin Memory Chip Plant

• White House, CISA Name Key Cybersecurity Officials as National Resilience Strategy Rollout Continues

• Microsoft 365 users targeted by phishers abusing Microsoft Forms

• Russia Throttles YouTube Over ‘Anti-Russian Policy’

• North Korean Onyx Sleet Using Group Of Malware And Exploits to Gain Intelligence

• Hackers Attacking Users Searching For W2 Form

• PKfail, Critical Firmware Supply-Chain Issue Let Attackers Bypass Secure Boot

• Meta Nukes Massive Instagram Sextortion Network of 63,000 Accounts

• Russia-Backed Brute-Force Campaign Targets Microsoft Infrastructure in EU

• Why Biometrics are Key to a Safe Paris Olympics

• US Crypto Exchange Gemini Reveals Breach

• Hollywood Video Game Performers Strike Over AI Fears

• Apple Signs White House AI Safeguards

• LinkedIn To Pay $6.625m In Ad Lawsuit Settlement

• Cisco Patches the Products Impacted by RADIUS Protocol Vulnerability

• Navigating PCI DSS 4.0: Your Guide to Compliance Success

• Dazz Snaps up $50M for AI-Based, Automated Cloud Security Remediation

• French Police Push PlugX Malware Self-Destruct Payload to Clean PCs

• Hallucination Control: Benefits and Risks of Deploying LLMs as Part of Security Processes

• A week in security (July 22 – July 28)

• NVIDIA Patches Flaw in Jetson Software Used in AI-Powered Systems

• Fighting Fire with Fire: Using AI to Thwart Cybercriminals

• ‘Stargazer Goblin’ Creates 3,000 Fake GitHub Accounts for Malware Spread

• French Govt Investigating Recent Malware Attack that Compromised 3,000 Machines

• Report: 95% of Organizations Face Severe Software Supply Chain Risk

• Deepfakes, AI, and the Future of Cybersecurity: Insights from Dan DeCloss of PlexTrac

• North Korean Hackers Target USA Critical Infrastructure and Military Bases

• Microsoft admits 8.5 million CrowdStruck machines estimate was lowballed

• Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome Site

• Google’s Password Bug Hits Millions: Cybersecurity Today for Monday, July 29, 2024

• How Software Updates Can Lead to Cyber Attacks

• Belarus-linked APT Ghostwriter targeted Ukraine with PicassoLoader malware

• Fake Falcon crash reporter installer used to target German Crowdstrike users

• China ponders creating a national ‘cyberspace ID’

• Microsoft CrowdStrike Software Update leading to Phishing Attacks

• Enhancing threat detection for GenAI workloads with cloud attack emulation

• Cirrus: Open-source Google Cloud forensic collection

• The cost of cybersecurity burnout: Impact on performance and well-being

• Why a strong patch management strategy is essential for reducing business risk

• The gap between business confidence and cyber resiliency

• Whitepaper: DevSecOps Blueprint

• ISC Stormcast For Monday, July 29th, 2024 https://isc.sans.edu/podcastdetail/9072, (Mon, Jul 29th)

• Secure Boot useless on hundreds of PCs from major vendors after key leak

• 
Quickie: Password Cracking & Energy, (Sun, Jul 28th)

• CrowdStrike Outage Themed Maldoc, (Mon, Jul 29th)

• Quickie: Password Cracking & Energy, (Sun, Jul 28th)

• IT Security News Weekly Summary – Week 30

• IT Security News Daily Summary 2024-07-28

• French authorities launch disinfection operation to eradicate PlugX malware from infected hosts

• USENIX Security ’23 – Bilingual Problems: Studying the Security Risks Incurred by Native Extensions in Scripting Languages

• KnowBe4 Avoids Data Breach After Hiring North Korean Hacker

• Eliminating the Last Mile Between Security Data and Decision Making

• Security Affairs Malware Newsletter – Round 4

• Security Affairs newsletter Round 482 by Pierluigi Paganini – INTERNATIONAL EDITION

• Indian Govt Confirms BSNL User Data Breach

• Report: Spyware Maker’s Data Leak Exposes Malware Used on Windows, Mac, Android, and Chromebook Devices

• CyberCartel: Latest Banking Trojan Threat in Chrome Extensions

• Cyber Heist: Rs 40 Crore Taken from IndusInd Bank

• The best laptop docking stations in 2024: Expert tested and reviewed

• Artificial Intelligence in 2024

• Apple may be cooking something big with its new Game Mode. Here are 3 things we know

• One of the best e-readers I’ve tested is an Android phone dupe that’s full of wonder

• One of the best rugged Android phones I’ve tested is also one of the cheapest

• Week in review: CrowdStrike-triggered outage insights, recovery, and measuring cybersecurity ROI

Generated on 2024-08-04 23:58:23.556476