IT Security News Weekly Summary – Week 36

• IT Security News Daily Summary 2024-09-08

• USENIX Security ’23 – Collide+Power: Leaking Inaccessible Data with Software-based Power Side Channels

• 83% of Businesses Hit by Ransomware – Are You Next?

• Cyberattack Targets Malaysian Officials with Babylon RAT Malware

• Here’s Why Attackers Have a Upper Hand Against CISOs

• Australia’s Proposed Mandatory Guardrails for AI: A Step Towards Responsible Innovation

• 
Python & Notepad++, (Sat, Sep 7th)

• Password Cracking & Energy: More Dedails, (Sun, Sep 8th)

• Feds indicted two alleged administrators of WWH Club dark web marketplace

• 22,000 PyPI Packages Affected by Revival Hijack Supply-Chain Attack

• SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 10

• Addressing Critical Challenges in Responsible Enterprise AI Adoption

• Security Affairs newsletter Round 488 by Pierluigi Paganini – INTERNATIONAL EDITION

• Cyber Resilience: Preparing for the Inevitable in a New Era of Cybersecurity

• (Re)Building the Ultimate Homelab NUC Cluster – Part 1

• How to integrate CTEM into your cybersecurity strategy for continuous threat monitoring and mitigation?

• Week in review: Vulnerability allows Yubico security keys cloning, Patch Tuesday forecast

• Vulnerabilities in IBM Products Let Attackers Exploit & Launch DOS Attack

• IT Security News Daily Summary 2024-09-07

• USENIX Security ’23 – (M)WAIT for It: Bridging the Gap between Microarchitectural and Architectural Side Channels

• Surge in Ransomware Groups Amid Law Enforcement Disruptions in 2024

• U.S. CISA adds Draytek VigorConnect and Kingsoft WPS Office bugs to its Known Exploited Vulnerabilities catalog

• Can VPN Conceal Torrenting? Is it Safe to Torrent With a VPN?

• Planned Parenthood Cyberattack: How Bad Actors Are Targeting Medical Institutions

• OpenStack Ironic Users Advised to Patch Critical Security Vulnerability

• Critical Security Flaw Discovered in LiteSpeed Cache Plugin for WordPress

• Python & Notepad++, (Sat, Sep 7th)

• Bitcoin ATM scams skyrocket – Week in security with Tony Anscombe

• Enterprise Resilience in the Face of Cyber Risk

• Irish Data Protection Commission Halts AI Data Practices at X

• For security, we have to stop picking up the phone

• Despite cyberattacks, water security standards remain a pipe dream

• Hackers Threaten to Leak Planned Parenthood Data

• A flaw in WordPress LiteSpeed Cache Plugin allows account takeover

• Apache fixes critical OFBiz remote code execution vulnerability

• Veeam Backup & Replication Faces RCE Flaw Allows Full System Takeover

• North Korean Threat Actors Deploy COVERTCATCH Malware via LinkedIn Job Scams

• New Stealthy Malware Campaign Dubbed DarkCracks Exploits GLPI and WordPress Sites

• Fog Ransomware Now Targeting the Financial Sector

• FBI Cracks Down on Dark Web Marketplace Managed by Russian and Kazakh Nationals

• CyberVolk Ransomware: A New and Evolving Threat to Global Cybersecurity

• Penpie DeFi platform files reports with FBI, Singapore police after $27 million crypto theft

• Protecting NATO Secret and Foreign Government Information

• Talking DSPM: Episode 4 – Dr. Mohit Tiwari

• Chinese APT Abuses VSCode to Target Government in Asia

• Car rental company Avis discloses a data breach

• School Monitoring Software Sacrifices Student Privacy for Unproven Promises of Safety

• My Journey To CTO for Imperva App Sec

• Google says replacing C/C++ in firmware with Rust is easy

• IT Security News Daily Summary 2024-09-06

• Critical GeoServer Vulnerability Exploited in Global Malware Campaign

• Live Video of Promachoteuthis Squid

• Cyber Security Today – Week In Review for the September 7th, 2024

• Top API risks and how to mitigate them

• Cisco merch shoppers stung in Magecart attack

• Ransomware attacks continue to increase in the US, UK, and Canada

• CISO Series Podcast LIVE in Houston (09-24-24)

• Tenable: 26,500 Cyber Vulnerabilities Risk SE Asia’s Banks

• SonicWall warns that SonicOS bug exploited in attacks

• Top 5 Best Talks from Black Hat USA 2024

• Key Takeaways from the Fortinet Skills Gap Report: Why Cybersecurity Training is Crucial for Mitigating Cyber Risk

• Cyber Insurers Are Not Your Friend – Why a Warranty May Be a Better Option

• Threat Actors Abuse Red Team Tool MacroPack to Deliver Malware

• How to Use A Password Manager: Setup, Benefits & Best Practices in 2024

• You Really Do Have Some Expectation of Privacy in Public

• US Gov Removing Four-Year-Degree Requirements for Cyber Jobs

• Mozilla Released Firefox 130 With Handy AI Chatbot Feature And Security Fixes

• Zyxel Patched Numerous Security Flaws Across Different Products

• AI Firm’s Misconfigured Server Exposed 5.3 TB of Mental Health Records

• One million US Kaspersky customers to be migrated to this lesser-known alternative

• Russian ‘WhisperGate’ Hacks: 5 More Indicted

• Halliburton Hit by Cyberattack, Data Stolen

• Iran Cyber Attack: Fox Kitten Aids Ransomware Operations in the U.S

• SonicWall Urges Users to Patch Critical Firewall Flaw Amid Possible Exploitation

• Critical Arbitrary File Deletion Vulnerability in MP3 Audio Player WordPress Plugin Affects Over 20,000 Sites

• Alternative search engines to Google for achieving data privacy

• Elon Musk’s X Head Of Global Affairs Resigns

• Principles of Modern Data Infrastructure

• The Windows 10 clock is ticking: here are 5 ways to save your old PC in 2025 (most are free)

• ESET Research Podcast: HotPage

• Keeper Security Named a Value Leader in EMA’s 2024 PAM Radar™ Report

• Gen Alpha: Navigating Cybersecurity in an AI-Native World

• Microchip Technology Confirms Private Data Stolen in Ransomware Attack

• GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code

• GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware

• AI Innovation in the Spotlight at Fal.Con 2024

• New global standard aims to build security around large language models

• Ransomware rocked healthcare, public services in August

• 7 Best User & Entity Behavior Analytics (UEBA) Tools

• Transport for London outages drag into weekend after cyberattack

• Building a New Service Offering around Cisco ThousandEyes: A Guide for Managed Service Providers

• YubiKey Side-Channel Attack

• Keeper Security Named a Value Leader in EMA’s 2024 PAM Radar™ Report

• CISA Launches Major Effort to Secure the 2024 U.S. Elections

• Protecting Your Digital Identity: The Impact of EUCLEAK on FIDO Devices

• Predator Spyware Exploiting “one-click” & “zero-click” Flaws

• BBTok Abuses Legitimate Windows Utility Command Tool to Stay Undetected

• How cyber criminals are compromising AI software supply chains

• Keeper Security Named a Value Leader in EMA’s 2024 PAM Radar™ Report

• Microchip Technology Confirms Data Was Stolen in August Cyberattack

• Sami Khoury, Head of Canada’s Cyber Agency, Starts New Role in Government

• New Android SpyAgent Campaign Steals Crypto Credentials via Image Recognition

• OpenStack Ironic Users Urged to Patch Critical Vulnerability

• Exposed: Russian military Unit 29155 does digital sabotage, espionage

• The 2024 Threat Landscape State of Play

• The NSA Has a Podcast—Here’s How to Decode It

• Keeper Security Named a Value Leader in EMA’s 2024 PAM Radar™ Report

• US Posts Indictments, Rewards in Russia’s WhisperGate Hacks Against Ukraine

• Critical Foreman Flaw Exposes Red Hat Satellite to Unauthorized Access

• Hackers Linked to Russia and Belarus Increasingly Target Latvian Websites, Officials Say

• MuddyWater Hijacks RMM Software for Espionage

• Report: 83% of Organizations Experienced at Least One Ransomware Attack in the Last Year

• Recent SonicWall Firewall Vulnerability Potentially Exploited in the Wild

• WazirX Hacker Starts Moving Stolen Ether Anonymously Using Tornado Cash

• Sophos X-Ops Uncovers Major Qilin Ransomware Breach Targeting Chrome Browser Credentials

• Spyware Vendors’ Nebulous Ecosystem Helps Them Evade Sanctions

• CMA Halts Probe Into Microsoft’s Inflection AI Staff Hiring

• 1Password review: A premium password manager well worth the money

• Keeper Security Named a Value Leader in EMA’s 2024 PAM Radar™ Report

• Goffloader: In-Memory Execution, No Disk Required

• CVE-2024-26581 PoC Exploit Released: Linux Systems at Risk of Root Compromise

• Respotter: Open-Source Responder Honeypot

• White House Launches Cybersecurity Hiring Sprint To Help Fill 500,000 Job Openings

• Malvertising Campaign Phishes Lowe’s Employees

• Apache Makes Another Attempt at Patching Exploited RCE in OFBiz

• BIMI Setup Guide for Zoho Mail – Getting the Blue Verified Checkmark

• Therapy Sessions Exposed by Mental Health Care Firm’s Unsecured Database

• Keeper Security Named a Value Leader in EMA’s 2024 PAM Radar™ Report

• Russian Threat Actors Target Critical Infrastructure in the U.S. and Across the World

• Critical Vulnerability Discovered in Progress LoadMaster

• Infosec Spending to Hit 3-Year Growth Peak, Reach $212B Next Year: Gartner

• Use of Predator Spyware Rebounds After a Dip From Biden Sanctions, Researchers Say

• Vulnerability in Tencent WeChat custom browser could lead to remote code execution

• Goodbye Windows Control Panel?

• TIDRONE Targets Military and Satellite Industries in Taiwan

• Telegram’s Pavel Durov Speaks Out Against French Charges

• Keeper Security Named a Value Leader in EMA’s 2024 PAM Radar™ Report

• Webmin/Virtualmin Vulnerability Opens Door to Loop DoS Attacks

• Head Mare Hacktivist Group Targets Russia and Belarus

• LiteSpeed Cache Plugin Vulnerability Exposes Millions of WordPress Sites to Attacks

• Apache OFBiz team patches critical RCE vulnerability (CVE-2024-45195)

• The State of the Virtual CISO Report: MSP/MSSP Security Strategies for 2025

• US and Allies Accuse Russian Military of Destructive Cyber-Attacks

• Cybersecurity News: Planned Parenthood cyberattack, DoJ propaganda takedown, Microchip Technology theft

• SonicWall Access Control Vulnerability Exploited in the Wild

• Fog Ransomware Now Targeting the Financial Sector; Adlumin Thwarts Attack

• NoiseAttack is a Novel Backdoor That Uses Power Spectral Density For Evasion

• Tropic Trooper Attacks Government Organizations to Steal Sensitive Data

• Keeper Security Named a Value Leader in EMA’s 2024 PAM Radar™ Report

• Critical Zero-Click Exploit Discovered in Popular Wi-Fi Chipsets, PoC Published

• Cequence Security partners with Netskope to provide protection for business-critical APIs

• Apache OFBiz for Linux & Windows Vulnerability Allows Unauthenticated Remote Code Execution

• Apache fixed a new remote code execution flaw in Apache OFBiz

• Keeper Security Named a Value Leader in EMA’s 2024 PAM Radar™ Report

• Why and How to Secure GenAI Investments From Day Zero

• Veza and HashiCorp join forces to help prevent credential exposure

• Resecurity gains recognition in Frost & Sullivan’s 2024 Cyber Threat Intelligence report

• Russian Military Hackers Attacking US and Global Critical Infrastructure

• To patch this server, we need to get someone drunk

• Russia-linked GRU Unit 29155 targeted critical infrastructure globally

• Tropic Trooper Expands Targeting: Middle East Government Entity Hit in Strategic Cyber Attack

• Bitdefender Debuts Security Solution for YouTube Content Creators and Influencers

• Keeper Security Named a Value Leader in EMA’s 2024 PAM Radar™ Report

• Frustration Trying to Opt-Out After the National Public Data Breach

• Is Cloud Security Ready for a Pivot to Behavioral Detection & Response

• Overcoming the Challenges of Zero-Trust

• Critical Security Flaw Found in LiteSpeed Cache Plugin for WordPress

• Sales Force acquires cloud based data security startup Own for $1.9 billions

• A Deep Dive into IoT Communication Protocols

• New PyPI Supply Chain Attack Technique Puts 22,000 Packages at Risk

• Keeper Security Named a Value Leader in EMA’s 2024 PAM Radar™ Report

• Fake OnlyFans Tool Backstabs Cybercriminals, Steals Passwords

• Pavel Durov Criticizes Outdated Laws After Arrest Over Telegram Criminal Activity

• Apache OFBiz Update Fixes High-Severity Flaw Leading to Remote Code Execution

• AI – What did you miss this summer? Hasthtag Trending for Friday, September 5th, 2024

• Keeper Security Named a Value Leader in EMA’s 2024 PAM Radar™ Report

• Respotter: Open-source Responder honeypot

• Human firewalls are essential to keeping SaaS environments safe

• September 2024 Patch Tuesday forecast: Downgrade is the new exploit

• Identity verification: The key to the security of sporting events

• Championing the Wins to Improve Wellbeing in the Cyber Workplace

• UK Public Worried About Global Over Reliance on IT Systems

• The GRC Group Strengthens Cybersecurity Offering with Acquisition of Pentest People, Expanding Its Global Reach and Expertise

• Keeper Security Named a Value Leader in EMA’s 2024 PAM Radar™ Report

• 83% of organizations experienced at least one ransomware attack in the last year

• The true cost of cybercrime for your business

• Researchers Unpacked AvNeutralizer EDR Killer Used By FIN7 Group

• Why Are Organizations Losing the Ransomware Battle?

• New infosec products of the week: September 6, 2024

• ISC Stormcast For Friday, September 6th, 2024 https://isc.sans.edu/podcastdetail/9128, (Fri, Sep 6th)

• Enrichment Data: Keeping it Fresh, (Fri, Sep 6th)

• Homeland security hopes to scuttle maritime cyber-threats with port infosec testbed

• Understanding Quantum Threats and How to Secure Data with Post-Quantum Cryptography

• Randall Munroe’s XKCD ‘Lava Lakes’

• Managing Certificate Chaos After Google’s Entrust Distrust

• An Introduction to Trackers and the Data They Collect

• USENIX Security ’23 – UnGANable: Defending Against GAN-based Face Manipulation

• RansomHub Claims Planned Parenthood Hack, Steals 93GB of Sensitive Data

• White House’s new fix for cyber job gaps: Serve the nation in infosec

• BlindEagle Targets Colombian Insurance Sector with BlotchyQuasar

• IT Security News Daily Summary 2024-09-05

• How To Find XSS (Cross-Site Scripting) Vulnerabilities in WordPress Plugins and Themes

• 5 Reasons Why You Need API Discovery

• How AI can help fix this global healthcare challenge

• YubiKeys Are a Security Gold Standard—but They Can Be Cloned

• Uncle Sam charges Russian GRU cyber-spies behind ‘WhisperGate intrusions’

• How to Use a VPN: Complete User Guide

• Veeam fixed a critical flaw in Veeam Backup & Replication software

• Security baseline for Microsoft Edge version 128

• US charges Russian GRU hackers behind WhisperGate intrusions

• Join Us 9-23-24 For a CISO Series Meetup in Houston

• IBM Executive on Future Cybersecurity: Passkeys, Deepfakes & Quantum Computing

• US charges five Russian military hackers with targeting Ukraine’s government with destructive malware

• Cisco Insider Mateusz Frąk is passionate about gaining—and sharing—knowledge.

• Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and Espionage

• How StorageGuard Can Assist With CISA’s Advised Mitigations For Newly Emerged BlackSuit Ransomware

• Storage & Data Protection Trends & Innovations To Watch in 2025

• The best and worst ways to get users to improve their account security

• The AI Security Gap: Protecting Systems in the Age of Generative AI

• Tracelo Data Breach: 1.4 Million Records Exposed

• Russian Military Cyber Actors Target US and Global Critical Infrastructure

• Baxter Connex Health Portal

• Cisco Networking Academy unveils new unified teaching and learning experience on NetAcad.com

• Cisco’s Smart Licensing Utility flaws suggest it’s pretty dumb on security

• The Deception Game: How Cyber Scams Manipulate Trust to Access Sensitive Information

• WordPress Mandates 2FA, SVN Passwords for Plugin, Theme Authors

• Russia’s Most Notorious Special Forces Unit Now Has Its Own Cyber Warfare Team

• Cisco Fixes Root Escalation Vulnerability With Public Exploit Code

• Intricate Babylon RAT Campaign Targets Malaysian Politicians, Government

• Litespeed Cache Flaw Exposes Millions of WordPress Sites to Takeover Attacks

• EFF & 140 Other Organizations Call for an End to AI Use in Immigration Decisions

• Transport for London Faces Ongoing Cyber Security Incident, Works to Safeguard Systems and Data

• IT Manager Faces Charges for Locking Computers to Demand Money

• Veeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical Issues

• Chinese-Speaking Hacker Group Targets Human Rights Studies in Middle East

• Watch our new documentary, “The Light We Keep: A Project PowerUp Story”

• Russia APT28 Cyber Attacks German Air Traffic Control

• Planned Parenthood partly offline after ransomware attack

• Lowe’s employees phished via Google ads

• Why It’s So Hard to Fully Block X in Brazil

• CISA Releases Four Industrial Control Systems Advisories

• New Omdia report offers first of its kind analysis of the industrial edge

• CISO Role Expands as Cybersecurity Becomes Integral to Business Strategy

• PyPI Revival Hijack Puts Thousands of Applications at Risk

• Businesses still ready to invest in Gen AI, with risk management a top priority

• Cicada Ransomware – What You Need To Know

• Australia Proposes Mandatory Guardrails for AI

• Hughes Network Systems WL3000 Fusion Software

• Partnering for Purpose: Join the Movement to Amplify Positive Impact

• Cisco Warns of Backdoor Admin Account in Smart Licensing Utility

• Security boom is over, with over a third of CISOs reporting flat or falling budgets

• Quantum computing is coming – are you ready?

• MIT Database Lists Hundreds of AI Dangers Impacting Human Lives

• Citrine Sleet APT Exploits Chrome Zero-Day Vulnerability for Rootkit Infiltration

• UK Signs Council of Europe AI Convention

• Security Budgets Come Under Pressure as “Hypergrowth” Ends

• Wordfence Intelligence Weekly WordPress Vulnerability Report (August 26, 2024 to September 1, 2024)

• New report shows ongoing gender pay gap in cybersecurity

• EUCLEAK Attack Allows Yubico Security Keys to be Cloned

• The AI Wild West: Unraveling the Security and Privacy Risks of GenAI Apps

• Rise in Ransomware Attacks in Southeast Asia Driven by Rapid Digitalization and Security Gaps

• Vanta empowers GRC teams to make their security and compliance automated

• Earth Lusca adds multiplatform malware KTLVdoor to its arsenal

• Google Fixed Actively Exploited Android Privilege Escalation Flaw (CVE-2024-32896)

• U.S. Seizes 32 Pro-Russian Propaganda Domains in Major Disinformation Crackdown

• Abusix Launches Guardian: Cutting-Edge Security Platform for Email and Network Providers

• Lazarus Hackers Attacking Job-Seekers to Deliver Javascript Malware

• Earth Lusca Using Multiplatform Backdoor to Attack Windows & Linux Machines

• Threat Actors Exploit GeoServer Vulnerability CVE-2024-36401

• Revival Hijack Attack Puts 22,000 PyPI Packages at Risk of Hijack

• Cisco Patches Critical Vulnerabilities in Smart Licensing Utility

• Choosing the Best Cybersecurity Prioritization Method for Your Organization

• RansomHub Emerges in Rapidly Evolving Ransomware Landscape

• RomCom Group’s Underground Ransomware Exploits Microsoft Zero-Day Flaw

• CISA Warns of Three Actively Exploited Vulnerabilities That Demand Immediate Attention

• Fake OnlyFans Checker Tool Infects Hackers with Lummac Stealer Malware

• One League, 32 Teams, One Cisco

• 6 Best Enterprise Antivirus Software Choices in 2024

• Long Analysis of the M-209

• Two Nigerians Sentenced to Prison in US for BEC Fraud

• Proofpoint helps organizations simplify governance of communication data

• Researcher Finds Unfixable Yet Tricky to Exploit Flaw in Yubikeys

• We Hunted Hidden Police Signals at the DNC

• Pool Your Cybersecurity Resources to Build the Perfect Security Ecosystem

• Cloud Access Security Brokers (CASBs): Are They Still Relevant?

• Vestager To Step Down As EU Competition Chief

• US Probes Four-Vehicle Crash Involving AI Driver Assistance

• Growth of Web3 Fuled New Opportunities for Threat Actors to Attack Finance Sectors

• Is Russian group APT28 behind the cyber attack on the German air traffic control agency (DFS)?

• The fingerpointing starts as cyber incident at London transport body continues

• Bitdefender Security for Creators protects YouTube content creators and influencers from hackers

• Hiring Cyber Teenagers with Criminal Records

• Banking Trojans: Mekotio Looks to Expand Targets, BBTok Abuses Utility Command

• US Targets Russian Election Influence Operation With Charges, Sanctions, Domain Seizures

• Revenera OSS Inspector enables developers to assess open source software risks

• NIST Cybersecurity Framework (CSF) and CTEM – Better Together

• Cybersecurity News: Spyware research, Cicada rebrand, MacroPack malware

• EU Seeks Industry Views On Google DMA Compliance

• Quishing, an insidious threat to electric car owners

• Microchip Technology confirms theft of employee data

• OnlyFans Hackers Targeted With Infostealer Malware

• A Powerful Approach to SaaS ITDR – Avoiding False Positives on Improbable Travel

• Skyhigh AI mitigates risks associated with AI applications

• Nvidia Served With Subpoena In US Antitrust Probe

• Nvidia Invests In Japan Start-Up Sakana AI

• China Accused Of Poaching Talent Amidst Chip Plant Drive

• Veeam Backup & Replication Vulnerabilities Let Attackers Execute Remote Code

• Tor Browser 13.5.3 Released, What’s New?

• Tropic Trooper spies on government entities in the Middle East

• Double Trouble: DOJ Exposes Russian AI-Powered Disinformation

• The Six Most Dangerous New Threats Security Teams Need to Know About

• Threat Actors Using MacroPack to Deploy Brute Ratel, Havoc, and PhantomCore Payloads

• FBI Warns Crypto Firms of Aggressive Social Engineering Attacks

• Binarly Transparency Platform 2.5 identifies critical vulnerabilities before they can be exploited

• Malware Attackers Using MacroPack to Deliver Havoc, Brute Ratel, and PhantomCore

• Russian Blamed For Mass Disinformation Campaign Ahead of US Election

• Cisco Smart Licensing Utility Vulnerability Let Attackers Gain Admin Control

• Iran pays millions to stop data leak related to banks

• Phishing Remains Top Cyber Threat Despite Drop in Incidents

• Cisco Warns of Critical Vulnerabilities in Smart Licensing Utility

• New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm

• “Active Listening” software reportedly used to listen in on smart phone conversations. Cyber Security Today for Thursday, September 5, 2024

• Security biz Verkada to pay $3m penalty under deal that also enforces infosec upgrade

• The future of automotive cybersecurity: Treating vehicles as endpoints

• Cisco Fixes Two Critical Flaws in Smart Licensing Utility to Prevent Remote Attacks

• How to gamify cybersecurity preparedness

• ISC Stormcast For Thursday, September 5th, 2024 https://isc.sans.edu/podcastdetail/9126, (Thu, Sep 5th)

• vCISO services thrive, but challenges persist

• Enterprise DSPM for Fortune 500 – 1touch.io is your go-to solution

• Managing Automatic Certificate Management Environment (ACME) in Identity Management (IdM)

• White House seizes 32 domains, issues criminal charges in massive election-meddling crackdown

• Attack Surface [Guest Diary], (Wed, Sep 4th)

• Check Point Software Celebrates Partner Success at the Asia Pacific Partner Conference 2024

• North Korean scammers plan wave of stealth attacks on crypto companies, FBI warns

• News alert: Blackwired launches ‘ThirdWatch?’ — an advanced third-party risk management platform

• News alert: INE Security releases a strategies guide for cyber threat preparedness, response capabilities

• News alert: AI SPERA attains PCI DSS certification for its search engine solution ‘Criminal IP’

• New Supply Chain Attack “Revival Hijack” Risks Massive PyPI Takeovers

• Google fixed actively exploited Android flaw CVE-2024-32896

• U.S. Federal Employees: Plant Your Flag for Digital Freedoms Today!

• Palo Alto takes a big $500M bite out of IBM QRadar

• Palo Alto takes a big bite out of IBM QRadar security

• IT Security News Daily Summary 2024-09-04

• Copilot for Microsoft 365 might boost productivity if you survive the compliance minefield

• That massive Pixel security flaw reported last month has been patched

• Planned Parenthood confirms cyber-attack as RansomHub threatens to leak data

• AWS achieves HDS certification in four additional AWS Regions

• What is a cloud architect and how do you become one?

• X is hiring staff for security and safety after two years of layoffs

• August Recap: New AWS Sensitive Permissions and Services

• White House Wants to Tighten Internet Routing Security

• CISO Series Podcast LIVE in Boca Raton, FL (09-21-24)

• White House unveils plan to improve BGP security

• EFF Calls For Release of Alexey Soldatov, “Father of the Russian Internet”

• FBI Warns of North Korea Attacks Against the Crypto Industry

• 20,000 WordPress Sites Affected by Remote Code Execution Vulnerability in Bit File Manager WordPress Plugin

• That massive Pixel security flaw has been patched

• Use AI threat modeling to mitigate emerging attacks

• US Government Isn’t Ready for Cyber Chaos in the Food and Agriculture Sector

• Microsoft Tackling Windows Logfile Flaws With New HMAC-Based Security Mitigation

• Build a mobile driver’s license solution based on ISO/IEC 18013-5 using AWS Private CA and AWS KMS

• Adapting Cybersecurity Practices to Modern Threats

• Researchers Discover SQL Injection Issue That Can Bypass Airport Security

• Trump Media Shares Hit New Post-IPO Low

• Nvidia Market Value Hit By Historic Single-Day Drop

• DDoS Attacks Hit France Over Telegram’s Pavel Durov Arrest

• “Hello pervert” sextortion scam includes new threat of Pegasus—and a picture of your home

• Iran Cyber Attack: Fox Kitten Facilitates Ransomware in US

• Everything you need to know about the OSCP+

• 28 Zyxel Access Points and Router Vulnerable to OS Command Injection

• Daniel Stori’s Turnoff.US: ‘pid 1’

• Security Analysts Observe Massive Surge in Telegram App Downloads Following Durov Arrest

• Adopting a Connected Mindset: A Strategic Imperative for National Security

• Is Telegram Still a Safe Messaging App? An In-Depth Look

• WordPress XSSplorer Challenge: An Expanded Scope for All Researchers in the Wordfence Bug Bounty Program

• CISA offers Voluntary Cyber Incident Reporting Portal

• Comprehensive Threat Protection Strategies for Google Workspace Environments

• Hacktivists Call for Release of Telegram Founder with #FreeDurov DDoS Campaign

• Deploying Rust in Existing Firmware Codebases

• Dutch Privacy Watchdog Fines Clearview AI $34 Million for ‘Illegal’ Database of Faces

• Researchers Find Over 22,000 Removed PyPI Packages at Risk of Revival Hijack

• Android Users Urged to Install Latest Security Updates to Fix Actively Exploited Flaw

• North Korean Hackers Targets Job Seekers with Fake FreeConference App

• US Government Set Out to Improve Internet Routing Security

• Scans for Moodle Learning Platform Following Recent Update, (Wed, Sep 4th)

• Stopping last year’s data spill becoming today’s headlines

• Rage Stealer Rebranded as Angry Stealer, Now Uses Telegram Bot for Data Theft

• How to avoid election related scams

• 500,000 tokens: How Anthropic’s Claude Enterprise is pushing AI boundaries

• Three myths preventing you from building your lifecycle practice

• Head Mare hacktivist group targets Russia and Belarus

• Discontinued D-Link DIR-846 routers are affected by code execution flaws. Replace them!

• Complying with PCI DSS Requirements by 2025

• Cicada ransomware may be a BlackCat/ALPHV rebrand and upgrade

• USENIX Security ’23 – ProSpeCT: Provably Secure Speculation for the Constant-Time Policy

• North Korea Targeting Crypto Industry, Says FBI

• Criminal IP Secures PCI DSS v4.0 Certification, Enhancing Payment Security with Top-Level Compliance

• 5 Steps To Integrate Istio With OPA

• What is a unique identifier (UID)?

• Microsoft Purview Audit helps IT flush out bad behavior

• How Ransomware Groups Weaponize Stolen Data

• FBI: North Korea Aggressively Hacking Cryptocurrency Firms

• EU’s Initiative to Define ‘Important Data’ in China: A Step Towards Global Data Governance

• AI System Optimise Could Help GPs Identify High-Risk Heart Patients

• Google Confirms CVE-2024-32896 Exploited in the Wild, Releases Android Security Patch

• Malwarebytes review: Solid, free protection with a user-friendly interface

• Worried about the YubiKey 5 vulnerability? Here’s why I’m not

• HHS Drops Appeal of Hospital Web Tracking Decision

• Secure by Demand: Going Beyond Questionnaires and SBOMs

• Yikes, YubiKey Vulnerable — ‘EUCLEAK’ FIDO FAIL?

• trackd AutoPilot leverages historical patch disruption data

• Hackers Hijack 22,000 Removed PyPI Packages, Spreading Malicious Code to Developers

• Warning: New Emansrepo Malware Uses HTML Files to Target Windows Users

• A Comprehensive Guide to Access and Secrets Management: From Zero Trust to AI Integration — Innovations in Safeguarding Sensitive Information

• AI startup You.com raises $50 million, predicts ‘more AI agents than people’ by 2025

• From Threats to Trends: Highlights from Perception Point’s H1 2024 Report

• Crush It, Don’t Get Crushed — Combat SOC Analyst Burnout with AI

• Damn Vulnerable UEFI: Simulate Real-world Firmware Attacks

• Red Teaming Tool Abused for Malware Deployment

• Crypto Vulnerability Allows Cloning of YubiKey Security Keys

• Automatic Burn-In Technology by Sinon Elevates Windows Deception Hosts

• North Korean hackers’ social engineering tricks

• The Importance Of Access Control

• Rethinking “I Have Nothing to Hide”: The Importance of Online Privacy

• Everyday Work at Home Security Tips

• 12 types of Phishing and how to avoid them

• What are APTs, and why are they dangerous?

• How To Conduct Effective Data Security Audits for Big Data Systems

• Leveraging Threat Intelligence in Cisco Secure Network Analytics

• Effective Privileged Access Management Implementation: A Step-by-Step Guide

• Transport for London (TfL) Targeted in Cyberattack

• Swan Bitcoin Alerts Users of Phishing Emails Carrying Fake Data Breach Notice

• Three UK Men Convicted of Running Website Behind Fraud Calls During COVID-19 Lockdown

• INE Security Announces 5 Practical Steps to Elevate Cyber Defense Strategies

• Security Flaw Allows Attackers to Clone YubiKeys by Extract Private Key

• ToddyCat APT Abuses SMB, Exploits IKEEXT A Exchange RCE To Deploy ICMP Backdoor

• Security Researcher Sued for Disproving Government Statements

• FTC: Over $110 Million Lost to Bitcoin ATM Scams in 2023

• Verkada to Pay $2.95 Million for Alleged CAN-SPAM Act Violations

• The New Effective Way to Prevent Account Takeovers

• Clearview AI Fined €30.5m by Dutch Watchdog Over Illegal Data Collection

• Record breaking Ransomware attacks on Schools and Colleges in 2023

• How to Combat APT Cyber Threats: A Comprehensive Guide

• Keeping up With Automated Threats is Becoming Harder

• White House Outlines Plan for Addressing BGP Vulnerabilities

• Prompt Security helps organizations monitor data shared with Microsoft 365 Copilot

• Feminists in South Korea’s fight against Deepfakes

• Trump Media Shares Hit Post-IPO Low

• White House Calls Attention to ‘Hard Problem’ of Securing Internet Traffic Routing

• Proofpoint launches NIST-inspired framework to tackle data loss prevention challenges

• Vulnerability allows Yubico security keys to be cloned

• Cybersecurity News: Halliburton data stolen, Columbus sues researcher, White House protects internet

• Automating Network Alert Investigations with Dropzone AI

• Fake GlobalProtect VPN Downloads Used to Spread WikiLoader Malware

• Mallox ransomware: in-depth analysis and evolution

• Android’s September 2024 Update Patches Exploited Vulnerability

• Halliburton Confirms that Hackers Stolen Data in Cyber Attack

• Zyxel Warns of Critical OS Command Injection Flaw in Routers

• Cthulhu Stealer: New macOS Malware Targets Apple Users’ Data

• Bad Reasons to Update Your Linux Kernel

• Debian Patches Two Dovecot Vulnerabilities

• Clearview AI Faces €30.5M Fine for Building Illegal Facial Recognition Database

• Initial Access Brokers Target $2bn Revenue Companies

• Intel ‘May Be Removed’ From Dow Index

• Goldman Sachs Research Finds AI Could Reduce Oil Prices

• AI Data Centre Boom Driving Huge Emissions Rise, Finds Research

• Starlink Says ‘Complying’ With X Ban In Brazil

• Employee Cybersecurity Awareness Training Strategies for AI-Enhanced Attacks

• Let’s Dance: Securing Access with PIM and PAM to Prevent Breaches

• Samba 4.21 comes with upgraded security features

• Earth Lusca Uses KTLVdoor Backdoor for Multiplatform Intrusion

• PoC Exploit Released For 0-Day Windows Kernel Privilege Escalation Vulnerability

• Connectivity they can count on: Claflin University’s tech revolution

• Can Every Business Afford to Be a Target?

• September is Preparedness Month

• Bluetooth Channel Sounding enhances security of Bluetooth connected devices

• APP Fraud Dominates as Scams Hit All-Time High

• Huawei Plans ‘Trifold’ Phone Launch Hours After Apple Event

• Google Patches Actively Exploited Android 0-day Privilege Escalation Vulnerability

• FBI Warns that North Korean Hackers Aggressively Attacking Employees of Crypto Companies

• Zyxel fixed critical OS command injection flaw in multiple routers

• Webinar: Unveiling Hidden APIs and Securing Vulnerabilities in the Healthcare Sector

• Hackers Use Fake GlobalProtect VPN Software in New WikiLoader Malware Attack

• The Japanese Robot Controversy Lurking in Israel’s Military Supply Chain

• Telegram apologizes to South Korea and takes down smutty deepfakes

• Rubrik Allies to Cisco to Improve Cyber Resiliency

• Protecting national interests: Balancing cybersecurity and operational realities

• OpenBAS: Open-source breach and attack simulation platform

• The Most Misunderstood Data Security Terms in The U.S.

• Ransomware attacks escalate as critical sectors struggle to keep up

• Cybersecurity jobs available right now: September 4, 2024

• ISC Stormcast For Wednesday, September 4th, 2024 https://isc.sans.edu/podcastdetail/9124, (Wed, Sep 4th)

• Ex-senior New York State staffer charged in cash-for-favors scandal with China

• Blackwired Launches ThirdWatch℠, A Paradigm Shift in Cybersecurity

• White House thinks it’s time to fix the insecure glue of the internet: Yup, BGP

• How AI Goes Rogue

• Top five strategies from Meta’s CyberSecEval 3 to combat weaponized LLMs

• Application Detection and Response: Understanding ADR’s Detection and Response Layers | Contrast Security

• Award Finalist: Contrast Security Application Detection and Response

• Apptio: How Australians Are Navigating Economic Pressure Through Strategic IT Investments

• VMware fixed a code execution flaw in Fusion hypervisor

• UK trio pleads guilty to operating $10M MFA bypass biz

• IT Security News Daily Summary 2024-09-03

• Google quietly launches Gemini AI integration in Chrome’s address bar

• Halliburton Confirms Data Stolen in Cyberattack

• Columbus Sues Expert, Fueling Debate About Ransomware Attack

• Victory! California Bill To Impose Mandatory Internet ID Checks Is Dead—It Should Stay That Way

• Randall Munroe’s XKCD ‘Sky Alarm’

• EFF to Tenth Circuit: Protest-Related Arrests Do Not Justify Dragnet Device and Digital Data Searches

• Spamouflage trolls pretend to be American patriots on X, TikTok ahead of US presidential election

• Transport For London Dealing With ‘Ongoing’ Cyber-Attack

• London’s city transport hit by cybersecurity incident

• What is cybercrime and how can you prevent it?

• Americans Are Uncomfortable with Automated Decision-Making

• 6,000 WordPress Sites Affected by Unauthenticated Critical Vulnerability in WP Job Portal WordPress Plugin

• Cyber A.I. Group Announces Global Presentation

• Open Standards for Data Lineage: OpenLineage for Batch and Streaming

• City of Columbus tries to silence security researcher

• VMware ESXi Servers Targeted by New Ransomware Variant from Cicada3301 Group

• Sextortion Scams Now Include Photos of Your Home

• List of Old NSA Training Videos

• What is Threat Hunting?

• Data watchdog fines Clearview AI $33M for ‘illegal’ data collection

• VMware Patches High-Severity Code Execution Flaw in Fusion

• Navigating new regulations and the role of SBOMs in software security

• USENIX Security ’23 – Ultimate SLH: Taking Speculative Load Hardening To The Next Level

• Ransomware Group Brain Cipher Targets French Museums During Olympics

• Cyberattack on TDSB Exposes Student Data, Sparks Parental Concerns

• Top 5 Notable Cyberattacks in Modern Warfare

• Threat Actors Install Backdoor via Fake Palo Alto GlobalProtect Lure

• Civil Rights Groups Call For Spyware Controls

• Cicada linked to ALPHV ransomware says report

• Bridging the Gap: How Developers and Security Professionals Can Collaborate for Better Cybersecurity

• Building Trust Through “Zero Trust:” Transforming Organizational Security Culture

• How to Use Dashlane in 2024: Complete Starter Guide

• U.S. oil giant Halliburton disclosed a data breach

• Vulnerability Summary for the Week of August 26, 2024

• Ping Identity strengthens security for federal agencies and government suppliers

• Rapid Growth of Password Reset Attacks Boosts Fraud and Account Takeovers

• DeFied Expectations — Examining Web3 Heists

• Trio Admits Running “OTP Agency” Enabling Bank Fraud, and 2FA Bypass

• Cost of a data breach: Cost savings with law enforcement involvement

• The waterproof Blink Mini 2 security camera is the best Wyze Cam alternative available

• Google Removing Poor-Quality Android Apps From Play Store to Boost Engagement

• LOYTEC Electronics LINX Series

• CISA Releases One Industrial Control Systems Advisory

• Simone Biles & Cyber Burnout: A Shared Path to Resilience

• Check Point Software Launches New MSSP Portal for Partners: Streamlining Service Delivery and Business Operations

• CISO Conversations: Jaya Baloo From Rapid7 and Jonathan Trull From Qualys

• Snyk Allies With Snowflake to Improve Data Security

• Why NTIA Support of Open-Source AI is Good for Security

• Kara Sprague joins HackerOne as CEO

• Veeam Software expands protection for Microsoft 365

• New Rust-Based Ransomware Cicada3301 Targets Windows and Linux Systems

• Hacktivists Exploits WinRAR Vulnerability in Attacks Against Russia and Belarus

• Active Ransomware Groups Surge by 56% in 2024

• How to Implement Zero Trust on a Budget

• New Fury Stealer Attacking Victims to Steal Login Passwords

• Ransomware attacks continue to increase in the US, UK, and Canada

• Vulnerabilities in Microsoft apps for macOS allow stealing permissions

• Canonical Addresses Critical Linux Kernel AWS Vulnerabilities with New Patches

• SaaS Security: Are You Moving Fast Enough?

• Palo Alto’s GlobalProtect VPN Spoofed to Deliver New Malware Variant

• Unlocking The Context Behind Bot Attacks: Protecting Your Go-To-Market Strategy

• Workload Protection in the Cloud: Why It Matters More Than Ever

• Halliburton confirms data was stolen in ongoing cyberattack

• The Future of Cybersecurity: AI Does Play a Role

• Emansrepo Stealer: Multi-Vector Attack Chains

• Is the “Network” Defendable?

• Critical flaw in Zyxel’s secure routers allows OS command execution via cookie (CVE-2024-7261)

• RCE Vulnerability in D-Link WAP Let Attackers Gain Remote Access

• Verkada to Pay $2.95 Million Over FTC Probe Into Security Camera Hacking

• U.S. Courts Under Cyberattack and the Impact on Justice

• Threat actors using MacroPack to deploy Brute Ratel, Havoc and PhantomCore payloads

• Silicon UK AI For Your Business Podcast: Copyright in the Age of AI

• Researchers Link ManticoraLoader Malware to Ares Malware Developer

• The US Navy Is Going All In on Starlink

• A deep dive into the most interesting incident response cases of last year

• Top 5 CVEs and Vulnerabilities of August 2024: Key Threats and How to Respond

• New ManticoraLoader – Malware Attacking Citrix Users To Steal Data

• Verkada Pay $2.95 Million Failed To Secure Data Lead To Massive Breach

• Researchers Find SQL Injection Flaw to Bypass Airport TSA Security Checks

• City of Columbus Sues Researcher Who Disclosed Impact of Ransomware Attack

• Rocinante Trojan Poses as Banking Apps to Steal Sensitive Data from Brazilian Android Users

• TikTok Parent ByteDance Seeks $9.5bn In Loans

• Binance Executive Renews Nigeria Bail Plea On Health Grounds

• New Custom Malware “Tickler” Attack Satellite Devices

• North Korean Hackers Actively Exploiting Chromium RCE Zero-Day In The Wild

• Head Mare Hacktivist Group Exploit WinRAR Vulnerability To Encrypt Windows And Linux

• 10 Topics Every Cybersecurity Awareness Training Program Should Cover

• The 6 Best Antivirus Software Options for Windows in 2024

• VIVOTEK RealSight Engine improves images clarity in various scenarios

• Red Flag? My Vendor Just Asked for My Mother’s Maiden Name

• Beware Of New Phishing Attack That Mimics ScreenConnect And Zoom

• Chrome Vulnerability Let Attackers Execute Arbitrary Code Remotely

• Researchers Detailed Russian Hacktivist/State Hackers Tactics

• Ransomhub Attacked 210 Victims Since Feb 2024, CISA Released Advisory For Defenders

• The six most dangerous new threats security teams need to know about

• INSIDER THREAT AWARENESS MONTH: Are you prepared?

• Transport for London confirms cyberattack, assures us all is well

• Qilin Ransomware Attack Used To Steal Chrome Browser Data

• TuxCare Completes FIPS 140-3 Certification for AlmaLinux 9.2 Kernel

• Ubuntu Patches Multiple Vim Vulnerabilities

• Transport for London is dealing with a cyber security incident

• Cybersecurity News: London transport cyberattack, German ATC attack, Sweden’s heightened risk

• Starlink Refuses To Block X In Brazil

• Iranian Hackers Using Multi-Stage Malware To Attack Govt And Defense Sectors Via LinkedIn

• Operation Oxidovy, Threat Actors Targeting Government And Military Officials

• Rural Hospitals and Patients Face high Risk from Ransomware Attacks: Report

• ACI Worldwide partners with Red Hat to simplify payment operations

• Three Plead Guilty to Running MFA Bypass Site

• Intel Considers Selling Altera, Splitting Fab Business

• CloudSOC – An OpenSource Project for SOC & Security Analysts

• The Power of Tripwire Enterprise SCM Policies

• Navigating Change: Three Levels to Filter Out the Noise in Tech Environments

• North Korea-linked APT Citrine Sleet Exploit Chrome Zero-Day to Deliver FudModule Rootkit

• Application builders get ready

• Industry Moves for the week of September 2, 2024 – SecurityWeek

• Chrome 128 Updates Patch High-Severity Vulnerabilities

• WordPress Sites at Risk from WPML Flaw

• Honor Tops Samsung In Western Europe Foldables

• China GPU Start-Up Dissolves, Lays Off Staff

• Operation DevilTiger, APT Hackers 0-Day Exploitation Tactics Exposed

• Critical Atlassian Vulnerability Exploited To Connect Servers In Mining Networks

• BlackByte Hackers Exploiting VMware ESXi Auth Bypass Vulnerability

• IT threat evolution Q2 2024

• IT threat evolution in Q2 2024. Mobile statistics

• IT threat evolution in Q2 2024. Non-mobile statistics

• Blooms Today – 3,184,010 breached accounts

• Novel Attack on Windows Spotted in Chinese Phishing Campaign

• Roblox Developers Under Attack by New Malicious NPM Campaign

• Secrets Exposed: Why Your CISO Should Worry About Slack

• TfL Claims Cyber-Incident is Not Impacting Services

• Brazilian Supreme Court Upholds X Ban

• Three men plead guilty to running MFA bypass service OTP.Agency

• Potential Ransomware Threat to Transport for London

• How Cyber Attacks can be a blessing to those buying cybersecurity stocks

• Explaining the OWASP API Security Top 10

• Major Data Breaches: Toronto Schools, TDECU, and Columbus Hacked: Cyber Security Today for Tuesday, September 3rd, 2024

• SLOW#TEMPEST Campaign Targets Chinese Users with Advanced Tactics

• Managing low-code/no-code security risks

• New Flaws in Microsoft macOS Apps Could Allow Hackers to Gain Unrestricted Access

• The attack with many names: SMS Toll Fraud

• How ransomware tactics are shifting, and what it means for your business

• A third of organizations suffered a SaaS data breach this year

• Ex-Engineer Charged in Missouri for Failed $750,000 Bitcoin Extortion Attempt

• ISC Stormcast For Tuesday, September 3rd, 2024 https://isc.sans.edu/podcastdetail/9122, (Tue, Sep 3rd)

• Hacker Leaks Data of 390 Million Users from VK, a Russian Social Network

• Introducing Goffloader: A Pure Go Implementation of an In-Memory COFFLoader and PE Loader

• IT Security News Daily Summary 2024-09-02

• Puter – The Internet OS! Free, Open-Source, and Self-Hostable

• Transport for London (TfL) is dealing with an ongoing cyberattack

• Protected OOXML Text Documents, (Mon, Sep 2nd)

• Cox Media Group To Listen To Users Devices For Ad Targeting

• Cybersecurity Tips For Businesses Using Remote Workers

• Top Cybersecurity Startups You Need to Know in 2024

• Vulnerability Recap 9/2/24 – Big Companies Upgrade vs Risks

• CrowdStrike faces onslaught of legal action from faulty software update

• Innovator Spotlight: Cobalt

• Innovator Spotlight: BackBox

• Innovator Spotlight: Delinea

• Innovator Spotlight: Pentera

• Oil Giant Halliburton Partly Went Offline Following Cyberattack

• High-Severity DoS Flaw Patched In Cisco NX-OS Software

• Tracelo Location Tracker Data Breach: 1.4 Million Users’ Data Dumped Online

• Owners of 1-Time Passcode Theft Service Plead Guilty

• Telegram CEO was ‘too free’ on content moderation, says Russian minister

• The Role of Digital Adoption in Email Deliverability & Security

• Play Ransomware Claims Attack on US Semiconductor Manufacturer Microchip Technology

• Fota Wildlife Park Issues Urgent Warning After Website Cyberattack

• Emailing in Different Languages Just Got Easier— This AI Will Amaze You

• Google issues warning on Russian Cyber Attack on Safari and Chrome browsers

• Best Practices for Salesforce Data Management and Security

• Three Cyber Extortion Schemes Attackers Can Employ Against You

• Irish Wildlife Park Warns Customers to Cancel Credit Cards Following Breach

• From Transparency to the Perils of Oversharing

• Data Breaches for the Month August 2024

• US Authorities Issue RansomHub Ransomware Alert

• Global Phishing Scam Hits Canadian Pizza Chains for Credit Card Data

• Going on a Threat Hunt: Advanced Strategies for Defending the Digital Frontier

• Forrester’s CISO budget priorities for 2025 focus on API, supply chain security

• DevOpsDays Birmingham AL 2024: Guardrails, Immutable Infrastructures, and Community

• Esso Corporate Fleet Programme Hit by Ransomware Attack on Abecha Servers

• RansomHub Ransomware Group Targets 210 Victims Across Critical Sectors

• Boeing Starliner Set For Uncrewed Return Flight This Week

• Crypto Executives Plan Kamala Harris Fundraiser

• For Windows 11 setup, which user account type should you choose? How to decide

• Lockbit gang claims the attack on the Toronto District School Board (TDSB)

• South Korea Police Investigates Telegram Over Deepfake Porn

• Zero Trust and Its Impact on Cybersecurity

• A Macro Look at the Most Pressing Cybersecurity Risks

• The Internet of Things Technological Perspective

• Security Alert for Gmail, Facebook, and Amazon Users

• Verkada Facing $3m Penalty After Hackers Viewed Sensitive Video Footage

• Why Incident Response Planning is Critical for Cybersecurity Resilience

• Passkey Adoption Is Accelerating in APAC — Except for Australia

• The 6 Best Small Business VPNs for 2024

• SQL Injection Attack on Airport Security

• Sinon: Open-Source Automatic Generative Burn-in for Windows Deception Hosts

• GreenCharlie Infrastructure Targeting US Political Entities with Advanced Phishing and Malware

• Uniqkey Raises $5.92M in Funding

• A New Variant of Cicada Ransomware Targets VMware ESXi Systems

• France Arrested Telegram Owner Charging For Criminal Activity Support

• Hackers Implant Backdoor via Fake Palo Alto GlobalProtect Lure

• SafeTech Labs Launches World’s First Comprehensive Digital Legacy Solution for $52B Industry

• Spoofed GlobalProtect Used to Deliver Unique WikiLoader Variant

• Fake Palo Alto GlobalProtect Tool Used as Lure to Backdoor Enterprises

• Ubuntu Fixes Several Linux Kernel AWS Vulnerabilities

• Guardians of the Files: Tracing the Evolution of File Integrity Monitoring

• Tripwire Patch Priority Index for August 2024

• Head Mare: adventures of a unicorn in Russia and Belarus

• CISA Launches Cyber Incident Reporting Portal To Streamline Breach Disclosure

• NIST Releases New Draft of Digital Identity Proofing Guidelines

• Cybersecurity News: Seattle airport woes, aircraft cockpit SQL, North Korea’s FudModule

• Aricell Chief Arrested Over Massive Battery Plant Fire

• Beijing Sets Up $1bn Semiconductor Fund

• Cyber Threats That Shaped the First Half of 2024

• North Korean Cyberattacks Persist: Developers Targeted via npm Packages

• Complying with PCI DSS requirements by 2025

• Webinar: Learn to Boost Cybersecurity with AI-Powered Vulnerability Management

• Cicada3301 Ransomware Group Emerges From the Ashes of ALPHV

• TechRepublic Premium Editorial Calendar: Policies, Hiring Kits, and Glossaries for Download

• OceanLotus APT Group Targeting Vietnamese Human Rights Defenders

• SafeTech Labs Takes Aim at $52B Digital Legacy Industry with World’s First Fully Comprehensive Digital Legacy Solution

• RansomHub Gang Breaches More Than 200 Organisations

• Iran Government-Backed Hackers ‘Making Cash From Ransomware’

• A week in security (August 26 – September 1)

• State-Backed Attackers and Commercial Surveillance Vendors Repeatedly Use the Same Exploits

• Scores of Organizations Hit By Novel Voldemort Malware

• The MadRadar Hack Can Cause Autonomous Cars to Malfunction and Hallucinate

• X Shut Down In Brazil Amidst Supreme Court Spat

• A new variant of Cicada ransomware targets VMware ESXi systems

• Risk Register Templates: Enhancing Your Risk Management Strategy

• Next-Generation Attacks, Same Targets – How to Protect Your Users’ Identities

• Trending Cybersecurity News Headlines on Google

• Essential Cybersecurity Tips for Travelers and Vacationers

• How to Stay One Step Ahead of Data Breaches and Master Cloud Threat Detection

• North Korean Threat Actor Exploits Chrome Zero-Day

• SQL Injection Vulnerability Could Enable Attackers to Bypass Airport Security

• Keeping up with automated threats is becoming harder

• Ransomware crisis deepens as attacks and payouts rise

• Damn Vulnerable UEFI: Simulate real-world firmware attacks

• Malicious npm Packages Mimicking ‘noblox.js’ Compromise Roblox Developers’ Systems

• Novel attack on Windows spotted in phishing campaign run from and targeting China

• Infosec products of the month: August 2024

• IT Security News Weekly Summary – Week 35

• IT Security News Daily Summary 2024-09-01

• New Version of Snake Keylogger Targets Victims Through Phishing Emails

• Introducing the “World’s Most Private VPN” – Now Open for Testers

• Wireshark 4.4: Converting Display Filters to BPF Capture Filters, (Sun, Sep 1st)

• Happy United States Labor Day 2024 / Feliz Fin de Semana del Día del Trabajo de Estados Unidos 2024 / Joyeux Fin de Semaine de la Fête du Travail aux États-Unis 2024

• The Corona Mirai Botnet: Exploiting End-of-Life IP Cameras

• AT&T Claims It Has Fixed Software Bug That Caused An Outage For Some Wireless Users

• New “sedexp” Linux Malware Remained Undetected For Two Years

• Google Confirmed A Now-Patched Chrome Vulnerability As Zero-Day

• Notion Announced Exiting Russia Following US Restrictions

• Microsoft Patched Copilot Vulnerabilities That Could Expose Data

• Malware Botnet Exploits Vulnerable AVTECH IP Cameras

• 7 password rules to live by in 2024, according to security experts

• Massive Data Breach Exposes Sensitive Information Linked to ServiceBridge Platform

• Guide to Securing Your Software Supply Chain: Exploring SBOM and DevSecOps Concepts for Enhanced Application Security

• An air transport security system flaw allowed to bypass airport security screenings

• The Evolution of Device Recognition to Attack Fraud at-Scale

• Hacker Who Took Down North Korea’s Internet Reveals Key Insight

• Security Affairs newsletter Round 487 by Pierluigi Paganini – INTERNATIONAL EDITION

• SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 9

• Market Moveis – 28,220 breached accounts

• Week in review: SonicWall critical firewalls flaw fixed, APT exploits WPS Office for Windows RCE

Generated on 2024-09-08 23:58:20.785904