IT Security News Weekly Summary – Week 45

• It’s the Senate’s last chance to pass the PRESS Act

• Growing Use of Winos4.0 Toolkit Poses New Threat to Windows Users

• Windows PCs at Risk as SteelFox Malware Targets Driver Vulnerabilities

• Game Emulation: Keeping Classic Games Alive Despite Legal Hurdles

• 
zipdump & Evasive ZIP Concatenation, (Sat, Nov 9th)

• zipdump & PKZIP Records, (Sun, Nov 10th)

• Extend ServiceNow ITSM to Manage Shadow SaaS Risk | Grip

• Go Without MFA or Data Backups: Which is Worse? | Grip

• ZKP Emerged as the “Must-Have” Component of Blockchain Security.

• How to Protect Your Brand from Malvertising: Insights from the NCSC

• Data Breaches are a Dime a Dozen: It’s Time for a New Cybersecurity Paradigm

• Security Affairs newsletter Round 497 by Pierluigi Paganini – INTERNATIONAL EDITION

• SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 19

• CFPB Rule Changes Presents New Open Banking Challenge – Ensuring Compliance with API Standards

• Unleashing the Power of Purple Teaming: A Collaborative Approach to Cybersecurity

• U.S. agency cautions employees to limit phone use due to Salt Typhoon hack of telco providers

• DDoS Attacks Targeting ISPs are Different – Here’s How

• Fortinet Expands Generative AI Integration Across Cybersecurity Portfolio to Enhance Security Operations

• The 249th United States Marine Corps Birthday: A Message From The Commandant Of The Marine Corps

• Week in review: Zero-click flaw in Synology NAS devices, Google fixes exploited Android vulnerability

• AsyncRAT’s Infection Tactics via Open Directories: Technical Analysis

• Mazda Connect flaws allow to hack some Mazda vehicles

• IT Security News Daily Summary 2024-11-09

• FBI: Spike in Hacked Police Emails, Fake Subpoenas

• iPhones might be harder for police to unlock, thanks to new reboot feature

• Veeam Backup & Replication exploit reused in new Frag ransomware attack

• DEF CON 32 – Taming the Beast: Inside Llama 3 Red Team Process

• Chinese Botnet Quad7 Targets Global Organizations in Espionage Campaign

• Google Cloud to Enforce Multi-Factor Authentication for Enhanced Security in 2025

• Fake Invoices Spread Through DocuSign’s API in New Scam

• Hackers Use Excel Files to Deliver Remcos RAT Variant on Windows

• FBI Cautioned Gmail Users Regarding Cookie Theft

• Cisco Fixes Critical CVE-2024-20418 Vulnerability in Industrial Wireless Access Points

• Uncovering the Gaps in Cyberthreat Detection & the Hidden Weaknesses of SIEM

• Auto-Rebooting iPhones Are Causing Chaos for Cops

• It’s Award Season, Again

• Palo Alto Advises Securing PAN-OS Interface Amid Potential RCE Threat Concerns

• zipdump & Evasive ZIP Concatenation, (Sat, Nov 9th)

• Bitcoin Fog Founder Sentenced to 12 Years for Cryptocurrency Money Laundering

• SANS Holiday Hack Challenge 2024, (Sat, Nov 9th)

• Mozilla’s GenAI Bug Bounty And Education Program – Serious Exploits: Interview With Marco Figueroa, GenAI Bug Bounty Program Manager for Mozilla’s ODIN Project. Cyber Security Today Weekend for Nov 9, 2024

• Celebrating a Milestone – Over 1.5 Billion Daily Queries on Our IP to ASN Mapping Service

• Identity management in 2025: 4 ways security teams can address gaps and risks

• Creators of This Police Location Tracking Tool Aren’t Vetting Buyers. Here’s How To Protect Yourself

• Flare-On 11 Challenge Solutions

• Upwind, an Israeli cloud cybersecurity startup, is raising $100M at a $850-900M valuation, say sources

• Celebrating the Life of Aaron Swartz: Aaron Swartz Day 2024

• Hello again, FakeBat: popular loader returns after months-long hiatus

• Texas oilfield supplier Newpark Resources suffered a ransomware attack

• EFF to Second Circuit: Electronic Device Searches at the Border Require a Warrant

• IT Security News Daily Summary 2024-11-08

• Friday Squid Blogging: Squid-A-Rama in Des Moines

• DEF CON 32 – Securing CCTV Cameras Against Blind Spots – Jacob Shams

• Week in Review: Sophos Chinese hacker warning, AI flaws and vulnerabilities

• HackerOne: Nearly Half of Security Professionals Believe AI Is Risky

• 3 key generative AI data privacy and security concerns

• The Human Side of Incident Response

• Closing 2024 with Style at Cisco Live Melbourne

• Palo Alto Networks warns of potential RCE in PAN-OS management interface

• DEF CON 32 – Smishing Smackdown: Unraveling the Threads of USPS Smishing and Fighting Back

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #312 – Appraisal

• How OpenAI’s New AI Agents Are Shaping the Future of Coding

• An explanation of ransomware

• Big Tech’s Data-Driven AI: Transparency, Consent, and Your Privacy

• US Gov Agency Urges Employees to Limit Phone Use After China ‘Salt Typhoon’ Hack

• 28,000 WordPress Sites Affected by Arbitrary File Read and Deletion Vulnerability in WPLMS WordPress Theme

• In Other News: China Hacked Singtel, GuLoader Attacks on Industrial Firms, Phone Use Warning in US Agency

• Hackers Can Access Mazda Vehicle Controls Via System Vulnerabilities

• TikTok ordered to close Canada offices following “national security review”

• FBI says hackers are sending fraudulent police data requests to tech giants to steal people’s private information

• IPConsul automates operations with Cisco’s industrial IoT secure networking

• Upcoming Webinar – Working with X.509 Keys and Certificates

• BlueOLEx 2024 exercise: EU-CyCLONe test its cyber crisis response preparedness

• Google To Make MFA Mandatory for Google Cloud in 2025

• How to maximize cybersecurity ROI

• Innovator Spotlight: Push Security

• Pro-Russian Hacktivists Target South Korea as North Korea Joins Ukraine War

• American Oilfield supplier Newpark Resources hit by ransomware attack

• Google Jarvis AI Extension Leaked On Chrome Store

• Cash App user have a few days left to claim up to a $2,500 settlement payout

• Clearing the Clutter: Simplifying Security Operations with Tool Consolidation

• AI Summit Vancouver 2024: Exploring AI’s Role, Risks, and Transformative Power

• Mastering the 3-2-1 Backup Approach: What It Is and Why It Works

• Finding Solutions to Meet PCI DSS v4.0 Requirements 6.4.3 and 11.6.1

• Smart holiday shopping—How to safely secure deals and discounts for the hottest gifts

• SpyAgent malware targets crypto wallets by stealing screenshots

• Scattered Spider, BlackCat claw their way back from criminal underground

• Threat Actors Hijack Windows Systems Using the New SteelFox Malware

• Malwarebytes Acquires VPN Provider AzireVPN

• Check Point Uncover Pakistan-Linked APT36’s New Malware Targeting Indian Systems

• Why Small Businesses Are Major Targets for Cyberattacks and How to Defend Against Them

• AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services

• New Campaign Uses Remcos RAT to Exploit Victims

• Unpatched Vulnerabilities Allow Hacking of Mazda Cars: ZDI

• Operation Synergia II: A Global Effort to Dismantle Cybercrime Networks

• Ciso Playbook: Cyber Resilience Strategy

• Nokia Says Impact of Recent Source Code Leak Is Very Limited

• Amazon Mulls New Multi-Billion Dollar Investment In Anthropic – Report

• Incident Response Readiness Journey

• Leveraging Threat Intelligence in Cisco Secure Network Analytics, Part 2

• Converge Your WAN and Security With Cisco Firewall

• The AT&T Phone Records Stolen

• IcePeony and Transparent Tribe Target Indian Entities with Cloud-Based Tools

• FTX’s Caroline Ellison Begins Her Two Year Prison Sentence

• iPhones in a law enforcement forensics lab mysteriously rebooted losing their After First Unlock (AFU) state

• AI Industry is Trying to Subvert the Definition of “Open Source AI”

• US Prison Sentences for Nigerian Cybercriminals Surge in Recent Months

• Opera Browser Vulnerability Could Allow Exploits Via Browser Extensions

• HPE Patches Critical Vulnerabilities in Aruba Access Points

• UIUC Researchers Expose Security Risks in OpenAI’s Voice-Enabled ChatGPT-4o API, Revealing Potential for Financial Scams

• Critical Palo Alto Networks Expedition bug exploited (CVE-2024-5910)

• The vCISO Academy: Transforming MSPs and MSSPs into Cybersecurity Powerhouses

• Major Oilfield Supplier Hit by Ransomware Attack

• How to Evaluate and Improve Your Organisation’s Data Security Posture

• AI can drive business growth in Southeast Asia. But some big challenges remain

• How to Build a Healthy Patch Management Program

• Why having too many cybersecurity point solutions is risky

• Palo Alto Networks Expedition Vulnerability Exploited in Attacks, CISA Warns

• Observability in Security: Strategies for the Modern Enterprise

• Webinar: Learn How Storytelling Can Make Cybersecurity Training Fun and Effective

• North Korean Actor Deploys Novel Malware Campaign Against Crypto Firms

• QSC: A multi-plugin framework used by CloudComputating group in cyberespionage campaigns

• Recent improvements in Red Hat Enterprise Linux CoreOS security data

• Secure cloud bursting: Leveraging confidential computing for peace of mind

• More value, less risk: How to implement generative AI across the organization securely and responsibly

• Breaking Down Earth Estries’ Persistent TTPs in Prolonged Cyber Operations

• Steps Organizations Can Take to Improve Cyber Resilience

• The CISO Evolution: From Tactical Defender to Strategic Business Partner

• Columbus Data Breach Affects 500,000 in Recent Cyberattack

• Mirantis provides support offerings for Harbor Registry and KubeVirt

• Top Vulnerability Management Tools: Reviews & Comparisons 2024

• AppOmni partners with Cisco to extend zero trust to SaaS

• Interlock targets healthcare, Canada dissolves TikTok, HP critical flaws

• New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus

• Canada Orders TikTok To Close Operations: Cyber Security Today for Friday, November 8th, 2024

• Digital Arrest: How Even The Educated Become Victims

• CISA Warns of Critical Palo Alto Networks Vulnerability Exploited in Attacks

• Apple’s 45-day certificate proposal: A call to action

• New Malware “ToxicPanda” Targets Android Devices to Steal Banking Information

• Credential Abuse Market Flourishes Despite Setbacks

• Large-Scale Phishing Campaign Exposed Using New Version of Rhadamanthys Malware

• Am I Isolated: Open-source container security benchmark

• CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability

• A closer look at the 2023-2030 Australian Cyber Security Strategy

• Why AI-enhanced threats and legal uncertainty are top of mind for risk executives

• New infosec products of the week: November 8, 2024

• Driving social impact at work: A rewarding collaboration with WWF-Australia

• Winos4.0 abuses gaming apps to infect, control Windows machines

• DEF CON 32 – QuickShell Sharing Is Caring About RCE Attack Chain On QuickShare – Or Yair, Shmuel Cohen

• Highlights from the InCyber Montreal Forum

• ISC Stormcast For Friday, November 8th, 2024 https://isc.sans.edu/podcastdetail/9214, (Fri, Nov 8th)

• Imperva: A Leader in WAAP

• New SteelFox Malware Posing as Popular Software to Steal Browser Data

• EFF to Court: Reject X’s Effort to Revive a Speech-Chilling Lawsuit Against a Nonprofit

• U.S. CISA adds Palo Alto Expedition, Android, CyberPanel and Nostromo nhttpd bugs to its Known Exploited Vulnerabilities catalog

• The Future of Work: Understanding AI Agents and Digital Coworkers

• IT Security News Daily Summary 2024-11-07

• Wordfence Price Increases Coming December 5th, 2024

• Stronger Together: Cisco and Splunk’s strategic push for digital resilience

• Don’t open that ‘copyright infringement’ email attachment – it’s an infostealer

• How to create an enterprise cloud security budget

• CISA Kicks Off Critical Infrastructure Security and Resilience Month 2024

• 764 Terror Network Member Richard Densmore Sentenced to 30 Years in Prison

• North Korean Hackers Target macOS Users

• Mistral AI takes on OpenAI with new moderation API, tackling harmful content in 11 languages

• The Global Effort to Maintain Supply Chain Security | Part Two

• Jane Goodall: Reasons for hope | Starmus highlights

• More Layoffs For iRobot Staff After Abandoned Amazon Deal

• Smishing: The elephant in the room

• Fabrice Malware on PyPI Has Been Stealing AWS Credentials for 3 Years

• Google DORA issues platform engineering caveats

• How to Build a Healthy Patch Management Program?

• North Korean Hackers Target macOS Users with Fake Crypto PDFs

• Bot Attacks Are Coming to Town: How to Safeguard Your Customers’ Holiday Travel

• How to build a Python port scanner

• JPCERT Explains How to Identify Ransomware Attacks from Windows Event Logs

• UK Watchdog Urges Data Privacy Overhaul as Smart Devices Collect “Excessive” User Data

• Mozilla Foundation Confirms Layoffs, Eliminates Advocacy Division

• Hacker says they banned ‘thousands’ of Call of Duty gamers by abusing anti-cheat flaw

• DPRK-linked BlueNoroff used macOS malware with novel persistence

• AppOmni and Cisco Partner to Extend SaaS Security with End-to-End Zero Trust From Endpoint to the Application

• Fortinet Extends Generative AI Reach Across Portfolio

• Androxgh0st Botnet Adopts Mozi Payloads, Expands IoT Reach

• Google To Make MFA Mandatory Next Year

• CISA Adds Four Known Exploited Vulnerabilities to Catalog

• Delta Electronics DIAScreen

• Beckhoff Automation TwinCAT Package Manager

• CISA Releases Three Industrial Control Systems Advisories

• Bosch Rexroth IndraDrive

• Air fryers are the latest surveillance threat you didn’t consider

• Fast-Track Your AI Revenue: 4 Game-Changing Solutions Partners Need Now

• Prompt Injection Defenses Against LLM Cyberattacks

• Fortinet Partners with European Governments to Drive Cyber Resiliency Globally

• Adversary AI Threat Intelligence Content Added to the Tidal Cyber Knowledge Base

• A Beginner’s Guide to PCI DSS 4.0: Requirements 1-4

• The Growing Concern Regarding Privacy in Connected Cars

• NCSC Unveils “Pigmy Goat” Malware Targeting Sophos Firewalls in Advanced Chinese Cyberattack

• Interlock Ransomware Targets US Healthcare, IT and Government Sectors

• Google Cloud makes MFA mandatory for all global users by 2025

• UK Government Launch AI Safety Platform For Businesses

• The Biggest Inhibitor of Cybersecurity: The Human Element

• Akamai’s Behavioral DDoS Engine: A Breakthrough in Modern DDoS Mitigation

• Androxgh0st Botnet Integrates Mozi, Expands Attacks on IoT Vulnerabilities

• Fortinet expands GenAI capabilities across its portfolio with two new additions

• Exploring DORA: How to manage ICT incidents and minimize cyber threat risks

• Java(Script) Drive-By, Hacking Without 0days

• Permiso Adds Three More Open Source Cybersecurity Tools

• Malwarebytes acquires AzireVPN to boost security for customers

• Wordfence Intelligence Weekly WordPress Vulnerability Report (October 28, 2024 to November 3, 2024)

• Australia Plans Social Media Ban For Children Under 16

• Strata Cloud Manager: One Interface, Complete Network Security Control

• Cyber Risks for Government Agencies Are on the Rise. Why Security Is Still an Uphill Battle

• Malwarebytes acquires AzireVPN to fuel additional VPN features and functionalities

• Drawbridge simplifies cyber governance for alternative investment firms

• North Korean Hackers Use Fake News to Spread ‘Hidden Risk’ Malware

• Evasive ZIP Concatenation: Trojan Targets Windows Users

• Runtime security in multi-cloud environments: best practices and importance

• AudioEye Accessibility Protection Status identifies high-impact areas for improvement

• Industrial companies in Europe targeted with GuLoader

• Meeting CISA’s Memory Safety Mandate: The Role of OT Software Buyers and Manufacturers

• Tackling Cyberbullying with Cyber security to defend the Digital Playground

• Embed Security Raises $6 Million to Help Overworked Analysts

• SonicWall Unveils Cutting-Edge Security Solution for Branch and Small Office Environments

• AI-Assisted Attacks Top Cyber Threat for Third Consecutive Quarter, Gartner Finds

• Asking for your feedback: ENISA technical guidance for the cybersecurity measures of the NIS2 Implementing Act

• NetSecOPEN: Cisco Firewall Outperforms Competition in Real-World Testing

• ‘SteelFox’ Miner and Information Stealer Bundle Emerges

• How to comply with PCI DSS 4’s Req 6.4.3 and 11.6.1 in 4 minutes or less?

• A Hacker’s Guide to Password Cracking

• North Korean Hackers Target Crypto Firms with Hidden Risk Malware on macOS

• Canada Orders Shutdown Of TikTok’s Canadian Business

• Cisco Desk Phone Series Vulnerability Lets Remote Attacker Access Sensitive Information

• Subverting LLM Coders

• Cisco Patches Critical Vulnerability in Industrial Networking Solution

• UK Regulator Urges Stronger Data Protection in AI Recruitment Tools

• Hackers and AI – Should we be worried?

• Cisco scores a perfect CVSS 10 with critical flaw in its wireless system

• North Korean hackers employ new tactics to compromise crypto-related businesses

• Canada orders shutdown of TikTok offices over security risks (but won’t block app)

• Canada Orders Shutdown of Local TikTok Branch Over Security Concerns

• Unwrapping the emerging Interlock ransomware attack

• Silent Skimmer Gets Loud (Again)

• Canada Orders TikTok’s Canadian Business to Be Dissolved but Won’t Block App

• Cyberattack on Microlise Disables Tracking in Prison Vans, Courier Vehicles

• Gmail Under Attack: Secure a Backup Account

• Malicious PyPI Package ‘Fabrice’ Found Stealing AWS Keys from Thousands of Developers

• SteelFox and Rhadamanthys Malware Use Copyright Scams, Driver Exploits to Target Victims

• 5 Most Common Malware Techniques in 2024

• NCSC Publishes Tips to Tackle Malvertising Threat

• Android Banking Trojan ToxicPanda Targets Europe

• UK Cybersecurity Wages Soar Above Inflation as Stress Levels Rise

• It’s Time To Have A Real Conversation About The Quality Of Digital Life

• Critical vulnerability in Cisco industrial wireless access points fixed (CVE-2024-20418)

• A Snapshot of Cyber Threats: Highlights from the ENISA Threat Landscape 2024 Report

• Top 10 PowerDMARC Alternatives and Competitors: Detailed Feature Comparison

• Zywave enhances Cyber Quoting to provide insight into coverage limit adequacy and potential loss gaps

• Defenders Outpace Attackers in AI Adoption

• Canada ordered ByteDance to shut down TikTok operations in the country over security concerns

• Cisco Releases Patch for Critical URWB Vulnerability in Industrial Wireless Systems

• Nokia investigates breach claims, Nigerian cybercrime bust, SelectBlinds e-skimmer breach

• Steam Account Checker Poisoned with Infostealer, (Thu, Nov 7th)

• PRODUCT REVIEW: TXONE NETWORKS FOR PROACTIVE OT DEFENSE

• Critical bug in Cisco UWRB access points allows attackers to run commands as root

• Securing SMBs in a Cloud-Driven World: Best Practices for Cost-Effective Digital Hygiene Through Verified Authentication

• Network Penetration Testing in the Age of Automation: A Conversation with an Ethical Hacker

• Real-Time Protection: How Deep Packet Inspection Enhances Detection and Response

• Telegram new content surveillance policy and Cyber Attack on South Korea Defense

• Cisco Flaw Let Attackers Run Command as Root User

• New Malware Campaign Targets Windows Users Through Gaming Apps

• JFrog Uncovers Critical Vulnerabilities in Machine Learning Platforms

• Fry Another Day: The Hidden Surveillance Powers of Smart Appliances

• Using Human Risk Management to Detect and Thwart Cyberattacks

• Google Cloud to Mandate Multi-Factor Authentication for All Users by 2025

• Earth 2 – 420,961 breached accounts

• AWS security essentials for managing compliance, data protection, and threat detection

• How AI will shape the next generation of cyber threats

• Consumer privacy risks of data aggregation: What should organizations do?

• Canada Orders TikTok to Shut Down Canadian Operations Over Security Concerns

• ​​Zero Trust Workshop: Advance your knowledge with an online resource

• Officials warn of Russia’s tech-for-troops deal with North Korea amid Ukraine conflict

• ISC Stormcast For Thursday, November 7th, 2024 https://isc.sans.edu/podcastdetail/9212, (Thu, Nov 7th)

• When Should You Prepare Your Java State for DORA Compliance? (Hint: NOW)

• Large eBay malvertising campaign leads to scams

• Protecting privacy without hurting RAG performance

• IT Security News Daily Summary 2024-11-06

• AI-Assisted Attacks Top Cyber Threat For Third Consecutive Quarter, Gartner Finds

• INTERPOL: Operation Synergia II disrupted +22,000 malicious IPs

• Increasing Awareness of DNS Hijacking: A Growing Cyber Threat

• Video: 2.9 Billion Records Compromised in NPD Breach – Recap

• Cybercrooks are targeting Bengal cat lovers in Australia for some reason

• Video: How Hackers Steal Your Cookies & How to Stop Them

• Video: Top Cybersecurity Threats That You Need to Fix

• Memorial Hospital and Manor suffered a ransomware attack

• CISA on 2024 election security: ‘Good news’ for democracy

• The 2024 U.S. Election is Over. EFF is Ready for What’s Next.

• Google Cloud: MFA Will Be Mandatory for All Users in 2025

• What is machine identity management?

• Scammers Target BASE and Ethereum with Political Meme Coins and Rug Pulls

• Amazon Boss Denies Return To Office Mandate Is ‘Backdoor Layoff’

• Columbus Ransomware Attack Exposes 500,000+ Residents’ Data: How to Stay Safe

• Winos 4.0 Malware Infects Gamers Through Malicious Game Optimization Apps

• VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware

• IntelBroker Claims Selling Nokia’s Source Code on BreachForums

• Apple Set To Be Fined Under EU’s Tough DMA – Report

• Researchers Develop Blockchain-Based Federated Learning Model to Boost IoT Security

• Donald Trump Election Victory, And Implications For Tech Sector

• Schneider Electric Confirms Ransom Hack — Hellcat Demands French Bread as ‘Joke’

• INTERPOL Arrests 41, Takes Down 22,000 Malicious IPs and 59 Servers

• The best VPN routers of 2024

• Interpol Operation Shuts Down 22,000 Malicious Servers

• Crypto Bull Market Targeted: The Lottie-Player Security Breach

• Rails Without Derails: Thwarting Code Injection Attacks

• Uncovering a Large-Scale Campaign Using the Latest Version of The Rhadamanthys Stealer: Rhadamanthys.07

• Facebook, Nvidia Push SCOTUS to Limit Investor Lawsuits

• New Flaws in Fortinet, SonicWall, and Grafana Pose Significant Threats

• How to Protect Yourself Against Phishing Extortion Scams Involving Personal Data

• Cyber-Attack on Microlise Disrupts DHL and Serco Tracking Services

• Statement from CISA Director Easterly on the Security of the 2024 Elections

• Serco Hit by Cyber Attack, Disrupting Prisoner Tracking and Transport Operations

• New Winos4.0 Malware Targeting Windows via Fake Gaming Apps

• Interlock Ransomware Specifically Targets FreeBSD Servers

• Google Cloud Rolling Out Mandatory MFA for All Users

• IRISSCON: Organizations Still Falling Victim to Predictable Cyber-Attacks

• (In)tuned to Takeovers: Abusing Intune Permissions for Lateral Movement and Privilege Escalation in Entra ID Native Environments

• Serco Tracking Devices On Prison Vans Disabled After Cyberattack

• Operation Synergia II sees Interpol swoop on global cyber crims

• What Telegram’s recent policy shift means for cyber crime

• Prioritising eHealth cybersecurity against emerging challenges

• Atakama introduces DNS filtering designed for MSPs

• All Google Cloud users will have to enable MFA by 2025

• New Winos 4.0 Malware Infects Gamers Through Malicious Game Optimization Apps

• Shaking Up Security — The Power of AI-Native SOCs

• Threat Campaign Spreads Winos4.0 Through Game Application

• 8 security tips for small businesses

• In The News | The Importance of Securing School Bus Wi-Fi Networks

• Spectra Assure Malware Detection in ML and LLM Models

• Winos4.0 Malware Found in Game Apps, Targets Windows Users

• CrowdStrike to Acquire Adaptive Shield in Reported $300 Million Deal

• Massive Nigerian Cybercrime Bust Sees 130 Arrested

• UK Orders Chinese Entity To Sell Stake In Scottish Chip Firm FTDI

• Update your Android: Google patches two zero-day vulnerabilities

• Go Beyond with Cisco Customer Experience at Cisco Live

• Cyber Threat Intelligence (CTI) for Supply Chain Monitoring

• HookBot Malware Use Overlay Attacks Impersonate As Popular Brands To Steal Data

• CRON#TRAP Campaign Attacks Windows Machine With Weaponized Linux Virtual Machine

• North Korean Hackers Employing New Tactic To Acruire Remote Jobs

• Rise Of Ransomware-As-A-Service Leads To Decline Of Custom Tools

• Researchers Detailed Credential Abuse Cycle

• South Korea fined Meta $15.67M for illegally collecting and sharing Facebook users

• IoT Devices in Password-Spraying Botnet

• Cyberattackers stole Microlise staff data following DHL, Serco disruption

• Microchip Technology Reports $21.4 Million Cost From Ransomware Attack

• What Is a VPN? Definition, How It Works, and More

• Cyberattack Blamed for Statewide Washington Courts Outage

• 9 Steps to Get CTEM on Your 2025 Budgetary Radar

• Watchdog Says Vodafone, Three Merger Could Proceed With Certain Remedies

• Ransomware Attack Disrupts Georgia Hospital’s Access to Health Records

• GoZone ransomware accuses and threatens victims

• Schneider Electric ransomware attack to cost $125k and more in Baguettes

• The Most Notorious Cyber Threat Groups: A Global Overview

• Heimdal and COOLSPIRiT Team Up to Strengthen UK Business Cybersecurity

• Google Cloud to Mandate Multifactor Authentication by 2025

• CIS Control 14: Security Awareness and Skill Training

• How to Integrate FIM with SOAR Platforms

• Synology fixed critical flaw impacting millions of DiskStation and BeePhotos NAS devices

• INTERPOL Disrupts Over 22,000 Malicious Servers in Global Crackdown on Cybercrime

• Snowflake Hacking Suspect Arrested in Canada

• Azure API Management Vulnerabilities Let Attackers Escalate Privileges

• New SteelFox Trojan mimics software activators, stealing sensitive data and mining cryptocurrency

• PLCHound Aims to Improve Detection of Internet-Exposed ICS

• Authlete 3.0 empowers organizations to improve how they issue and manage user credentials

• Global Operation Takes Down 22,000 Malicious IPs

• South Korea Fines Meta $15 Million for Illegally Collecting Information on Facebook Users

• Symbiotic provides developers with real-time feedback on potential security vulnerabilities

• Google Patches High-Severity Vulnerabilities in Chrome

• Holiday Shopping Readiness: How is Retail Data Security Holding Up?

• ElizaRAT hits India, Washington court outage, Snowflake hacker arrested

• South Korea Fines Meta $15.67M for Illegally Sharing Sensitive User Data with Advertisers

• AI Finds Zero Day Vulnerability For First Time: Cyber Security Today for Wednesday, November 6, 2024

• CISA’s Cyber Hygiene Services

• Google’s Big Sleep AI Tool Finds Zero-Day Vulnerability

• LightSpy Update Expands Surveillance on iOS Devices

• Google Cloud to Enforce Multi-Factor Authentication by 2025 for All Users

• Attackers Exploit DocuSign API to Send Fraudulent Invoices, Bypassing Security Filters

• Scammers Impersonate Thunder Bay RCMP in New Phone Spoofing Scheme

• The cybersecurity gender gap: How diverse teams improve threat response

• Osmedeus: Open-source workflow engine for offensive security

• [Guest Diary] Insights from August Web Traffic Surge, (Wed, Nov 6th)

• Key cybersecurity predictions for 2025

• Identity-related data breaches cost more than average incidents

• China’s Volt Typhoon reportedly breached Singtel in ‘test-run’ for US telecom attacks

• ISC Stormcast For Wednesday, November 6th, 2024 https://isc.sans.edu/podcastdetail/9210, (Wed, Nov 6th)

• Scumbag puts ‘stolen’ Nokia source code, SSH and RSA keys, more up for sale

• Schneider Electric Investigates Cybersecurity Incident

• IT Security News Daily Summary 2024-11-05

• ToxicPanda Android banking trojan targets Europe and LATAM, with a focus on Italy

• Dennis Kirk – 1,356,026 breached accounts

• Canadian Man Accused of Snowflake Data Breach Arrested

• How to Become a Chief Information Officer: CIO Cheat Sheet

• AI in Criminal Justice Is the Trend Attorneys Need to Know About

• Schneider Electric ransomware crew demands $125k paid in baguettes

• Russia Is Going All Out on Election Day Interference

• DEF CON 32 – Open Sesame: How Vulnerable Is Your Stuff In Electronic Lockers

• Check Point Software Strengthens Cyber Security Training for Enterprises with OffSec’s Advanced Learning Platform

• The TechCrunch Cyber Glossary

• A Kansas pig butchering: CEO who defrauded bank, church, friends gets 24 years

• Mozilla Foundation lays off 30% staff, drops advocacy division

• CISA Unveils Guidelines to Combat AI-Driven Cyber Threats

• Amazon Inspector suppression rules best practices for AWS Organizations

• Your Android device is vulnerable to attack and Google’s fix is imminent

• Man Arrested for Snowflake Hacking Spree Faces US Extradition

• What the Chainsmokers bring to the cap table for cybersecurity startup Chainguard

• Criminals open DocuSign’s Envelope API to make BEC special delivery

• Google Cloud to roll out mandatory MFA for all users

• Canada Arrests Suspected Hacker Linked to Snowflake Data Breaches

• Canadian Man Arrested in Snowflake Data Extortions

• Flaw in Right-Wing ‘Election Integrity’ App Exposes Voter-Suppression Plan and User Data

• EFF Lawsuit Discloses Documents Detailing Government’s Social Media Surveillance of Immigrants

• Fortinet Adds Data Loss Prevention Capability Following Acquistion of Next DLP

• Rising Bank Fraud: Steps You Can Take to Safeguard Your Money

• FBI Seeks Public Help to Identify Chinese Hackers Behind Global Cyber Intrusions

• ClickFix Exploits Users with Fake Errors and Malicious Code

• Announcing The Wordfence Audit Log: Off-Site Real-Time Security Event Logging for WordPress

• Meet the startup that just won the Pentagon’s first AI defense contract

• Flaw in Right-Wing ‘Election Integrity’ App Exposes Voter-Suppression Plan and User Data

• Google Cloud to make multi-factor authentication mandatory in 2025

• Why PKIaaS is a Smarter and Secure Alternative to On-Premises PKI

• Google Uses Its Big Sleep AI Agent to Find SQLite Security Flaw

• Tech Expert Warns AI Could Surpass Humans in Cyber Attacks by 2030

• VMware Explore Barcelona 2024: Tanzu Platform 10 Enters General Availability

• Check Point Software Partners with OffSec to Elevate Cybersecurity Training for IGS Customers

• Overcoming Cybersecurity Integration Roadblocks

• Ongoing typosquatting campaign impersonates hundreds of popular npm packages

• Sanitize Client-Side: Why Server-Side HTML Sanitization is Doomed to Fail

• ToxicPanda Malware Targets Banking Apps on Android Devices

• Implement effective data authorization mechanisms to secure your data used in generative AI applications

• Nokia starts investigating source code data breach claims

• NordVPN vs ExpressVPN: Which VPN Should You Choose?

• The 7 Best Encryption Software Choices for 2024

• VMWare Explore Barcelona 2024: VMWAre Tanzu Platform 10 Enters General Availability

• Canadian authorities say they arrested hacker linked to Snowflake data breaches

• Canadian Authorities Arrest Suspected Snowflake Hacker

• Skills shortage directly tied to financial loss in data breaches

• Washington courts grapple with statewide outage after ‘unauthorized activity’

• Suspected Snowflake Hacker Arrested in Canada

• Advanced Persistent Teenagers: A Rising Security Threat

• Balancing Act: Russia’s New Data Decree and the Privacy Dilemma

• Warning: Hackers could take over your email account by stealing cookies, even if you have MFA

• Enhance customer experiences with Generative AI

• Top Three Ways Organizations Were Unprepared for Cyberattacks in 2023

• DocuSign Abused to Deliver Fake Invoices

• Beware of phishing emails delivering backdoored Linux VMs!

• Lumifi acquires Critical Insight to boost incident response capabilities

• US Voters Urged to Use Official Sources for Election Information

• Hackers Deploy CRON#TRAP for Persistent Linux System Backdoors

• Check Point Further Enhances Cyber Security Training for IGS Customers with OffSec’s Learn Enterprise

• U.S. CISA adds PTZOptics camera bugs to its Known Exploited Vulnerabilities catalog

• Cybersecurity M&A Roundup: 37 Deals Announced in October 2024

• Securing Generative AI: Tackling Unique Risks and Challenges

• Spotlight on Dashlane

• Spotlight on Onyxia

• New Android Banking Malware ‘ToxicPanda’ Targets Users with Fraudulent Money Transfers

• Team Europe wins the International Cybersecurity Challenge 2024!

• Canadian authorities arrested alleged Snowflake hacker

• AIs Discovering Vulnerabilities

• Google Patches Two Android Vulnerabilities Exploited in Targeted Attacks

• Strengthen Cyber Resilience: A Checklist for ITOps and SecOps Collaboration

• ClickFix Exploits GMeet & Zoom Pages to Deliver Sophisticated Malware

• Researcher Discloses 36 Vulnerabilities Found in IBM Security Verify Access

• Recovering From a Breach: 4 Steps Every Organization Should Take

• Nvidia, Meta Ask Supreme Court To Axe Investor Lawsuits

• James Dyson Says ‘Spiteful’ Budget Will Kill Start-Ups

• EU To Assess Apple’s iPad Compliance Plans

• OpenAI In Talks With California Over For-Profit Shift

• Real Estate Fraud is Running Rampant in the US

• Tripwire Patch Priority Index for October 2024

• Google patches actively exploited Android vulnerability (CVE-2024-43093)

• Pakistani Hackers Targeted High-Profile Indian Entities using Custom RAT

• APT36 Hackers Attacking Windows Deevices With ElizaRAT

• How Microsoft Defender for Office 365 innovated to address QR code phishing attacks

• Report: Voice of Practitioners 2024 – The True State of Secrets Security

• Leveraging Wazuh for Zero Trust security

• Hackers Created 100+ Fake Web Stores To Steal Millions Of Dollars From Customers

• Hackers Using AV/EDR Bypass Tool From Cybercrime Forums To Bypass Endpoints

• Schneider Electric Launches Probe After Hackers Claim Theft of User Data

• Oasis Fans Losing Up to £1000 Each to Ticket Scammers

• Leveraging Tabletop exercises to Enhance OT security maturity

• Three ‘Must Solve” Challenges Hindering Cloud-Native Detection and Response

• Synology Urges Patch for Critical Zero-Click RCE Flaw Affecting Millions of NAS Devices

• Toyota-Backed Joby Flies ‘Air Taxi’ In Japan

• Nvidia To Replace Intel On Dow Jones Industrial Average

• Android flaw CVE-2024-43093 may be under limited, targeted exploitation

• 10 Best Darktrace Alternatives & Competitors in 2024 [Features, Pricing & Reviews]

• BigID DSPM Starter App enhances data security posture for Snowflake customers

• Chinese Air Fryers May Be Spying on Consumers, Which? Warns

• Python RAT with a Nice Screensharing Feature, (Tue, Nov 5th)

• Nvidia Asked SK Hynix To Advance Next-Gen AI Memory Production

• How Cybersecurity Training Must Adapt to a New Era of Threats

• ClickFix tactic: Revenge of detection

• Is the UK government about to ban smartphones in schools?

• Google Patched 40 Security Vulnerabilities Along With Two Zero-Days

• Altenen – 1,267,701 breached accounts

• The Role of Secrets Management in Securing Financial Services

• Hackers Exploit DocuSign APIs for Phishing Campaign

• Schneider Electric breached again, Russia behind fake video, Ohio’s ransomware lawsuits

• 500,000 Affected in Columbus Data Breach, Followed by Lawsuit Against Security Researcher

• Google claims Big Sleep ‘first’ AI to spot freshly committed security bug that fuzzing missed

• Canadian Suspect Arrested Over Snowflake Data Breach and Extortion Attacks

• Malware Campaign Uses Ethereum Smart Contracts to Control npm Typosquat Packages

• Threat Actor IntelBroker Claims Leak of Nokia’s Source Code

• Three UK Council websites hit by DdoS Cyber Attacks

• How to Make SaaS Backups More Secure than Production Data

• AI & API Security

• What is a Cyber Range?

• Bitdefender’s Perspective on Weaponized AI and Its Impact on Cybersecurity

• Open-source software: A first attempt at organization after CRA

• Maximizing security visibility on a budget

• AI learning mechanisms may lead to increase in codebase leaks

• Cybersecurity jobs available right now: November 5, 2024

• Google Warns of Actively Exploited CVE-2024-43093 Vulnerability in Android System

• SOC Around the Clock: World Tour Survey Findings

• ISC Stormcast For Tuesday, November 5th, 2024 https://isc.sans.edu/podcastdetail/9208, (Tue, Nov 5th)

• Joint ODNI, FBI, and CISA Statement

• Joint Statement from CISA and EAC in Support of State and Local Election Officials

• CISA: U.S. election disinformation peddled at massive scale

• July 2024 ransomware attack on the City of Columbus impacted 500,000 people

• Automatically Detecting DNS Hijacking in Passive DNS

• Judge’s Investigation Into Patent Troll Results In Criminal Referrals

• IT Security News Daily Summary 2024-11-04

• FIDO: Consumers are Adopting Passkeys for Authentication

• DEF CON 32 – OH MY DC Abusing OIDC All The Way To Your Cloud

• MDR vs. MSSP: Making the Right Choice for Your Business

• Vulnerability Recap 11/4/24 – Fourteen-Year Bug Finally Gets Patched

• UC San Diego, Tsinghua University researchers just made AI way better at knowing when to ask for help

• Software Makers Encouraged to Stop Using C/C++ by 2026

• Randall Munroe’s XKCD ‘Disposal’

• Hackers Leak 300,000 MIT Technology Review Magazine User Records

• Exploring Artificial Intelligence: Is AI Overhyped?

• How AI Is Changing the Cloud Security and Risk Equation

• Gartner Report: How to Respond to the Threat Landscape in a Volatile, Complex and Ambiguous World

• Celebrating Connections and Launching the New Cisco 360 Partner Program

• DEF CON 32 – The Edges Of Surveillance System And Its Supply Chain

• PCI DSS v4.0.1 Changes | Application Security PCI Compliance Requirements | Contrast Security

• Vulnerability Summary for the Week of October 28, 2024

• Columbus Ransomware Attack Exposes Data of 500,000 Residents

• City of Columbus breach affects around half a million citizens

• Why your vote can’t be “hacked,” with Cait Conley of CISA (Lock and Code S05E23)

• Columbus, Ohio, confirms 500K people affected by Rhysida ransomware attack

• Crooks bank on Microsoft’s search engine to phish customers

• Cambodia-Based Cybercriminals Exploit Digital Arrest Scam on Indian Victims

• Meta Struggles to Curb Misleading Ads on Hacked Facebook Pages

• Behind the Search Bar: How Google Algorithm Shapes Our Perspectives

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• KnowBe4 Named as One of Newsweek’s Top UK Most Loved Workplaces For 2024

• Cybercriminals Exploit DocuSign APIs to Send Fake Invoices

• ChatGPT new search engine features cause data sanctity concerns

• Hackers Claim Access to Nokia Internal Data, Selling for $20,000

• 10 API security testing tools to mitigate risk

• Partnering for Purpose Winners: 7th Global Partner Innovation Challenge

• Nigerian Handed 26-Year Sentence for Real Estate Phishing Scam

• Nigerian man Sentenced to 26+ years in real estate phishing scams

• Wild, Weird, and Secure: SecureWV 2024’s Cryptid-Themed Conference

• Misinformation is Ruining our Elections. Here’s How we can Rescue Them.

• Google Researchers Claim First Vulnerability Found Using AI

• ENISA Cybersecurity Resilience and Market Conference: Joining forces for a cyber-secure and resilient digital single market

• Columbus says ransomware gang stole personal data of 500,000 Ohio residents

• Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning

• 210,000 Impacted by Saint Xavier University Data Breach

• Millions of Synology NAS devices vulnerable to zero-click attacks (CVE-2024-10443)

• Unauthorized tactic spotlight: Initial access through a third-party identity provider

• Scammers Use DocuSign API to Evade Spam Filters with Phishing Invoices

• Microsoft Warns of Russian Spear-Phishing Campaign Targeting Multiple Organizations

• US Says Russia Behind Fake Haitian Voters Video

• Is the Digital Transformation of Businesses Complete?

• How the 2024 US presidential election will determine tech’s future

• Overview of Cybersecurity Regulations in the Middle East Region, Part 1

• US Sentences Nigerian to 26 Years in Prison for Stealing Millions Through Phishing

• Monitoring Distributed Microservices

• New Windows Zero-Day Vulnerability Let Attackers Steal Credentials From Victim’s Machine

• Chinese Hackers Attacking Microsoft Customers With Sophisticated Password Spray Attacks

• Sophisticated Phishing Attack Targeting Ukraine Military Sectors

• Massive Midnight Blizzard Phishing Attack Using Weaponized RDP Files

• Evasive Panda Attacking Cloud Services To Steal Data Using New Toolkit

• The Evolution of Transparent Tribe’s New Malware

• SYS01 InfoStealer Malware Attacking Meta Business Page To Steal Logins

• THN Recap: Top Cybersecurity Threats, Tools, and Practices (Oct 28 – Nov 03)

• German Police Disrupt DDoS-for-Hire Platform dstat[.]cc; Suspects Arrested

• Sophos Versus the Chinese Hackers

• FBI Seeking Information on Chinese Hackers Targeting Sophos Firewalls

• Singapore’s Government Directed ISPs To Block Access To Ten Inauthentic Websites

• Embargo Ransomware Actors Abuses Safe Mode To Disable Security Solutions

• Russian Hackers Attacking Ukraine Military With Malware Via Telegram

• A Massive Hacking Toolkit From “You Dun” Threat Group Developed To Lauch Massive Cyber Attack

• Russia, Iran, And China Influence U.S. Elections, Microsoft Warns

• Top Traceable API Security Alternative: Escape vs. Traceable

• What is Enterprise Compliance and Why is It Important?

• Cybersecurity and AI Challenges: How Companies Must Evolve to Stay Secure and Competitive

• Supply Chain Attack Uses Smart Contracts for C2 Ops

• Huawei Sees Sales Surge, But Profits Fall

• Google Maps Steers Into Local Information With AI Chat

• OpenAI Adds ChatGPT Search Features

• Craig Wright Faces Contempt Claim Over Bitcoin Lawsuit

• Inside the Massive Crime Industry That’s Hacking Billion-Dollar Companies

• Russian disinformation campaign active ahead of 2024 US election

• Why the long name? Okta discloses auth bypass bug affecting 52-character usernames

• Google’s AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine

• Cyber Threats That Could Impact the Retail Industry This Holiday Season (and What to Do About It)

• City of Columbus Ransomware Attack Impacts 500,000 People

• Okta Verify Agent for Windows Flaw Let Attackers Steal User Passwords

• Strategies for Implementing Effective Threat Detection in IIoT

• What Is the ISA/IEC 62443 Framework?

• Public sector cyber break-ins: Our money, our lives, our right to know

• Binance Co-Founder CZ Does Not Want To Return To Company

• Apple Posts China Sales Decline, Ramping Pressure On AI Strategy

• Siemens and Rockwell Tackle Industrial Cybersecurity, but Face Customer Hesitation

• UK Council Sites Recover Following Russian DDoS Blitz

• MediaTek High Severity Vulnerabilities Let Attackers Escalate Privileges

• A week in security (October 28 – November 3)

• Industry Moves for the week of November 4, 2024 – SecurityWeek

• Businesses Worldwide Targeted in Large-Scale ChatGPT Phishing Campaign

• China’s BYD Overtakes Tesla On Quarterly Sales

• Entra MFA mandatory, German pharma cyberattack, LightSpy iPhone enhancements

• DSPM vs. Traditional Data Protection: What’s the Difference?

• Heimdal® Supports MSP Compliance Efforts with Fourth Consecutive ISAE 3000 SOC 2 Type II Certification

• IRISSCON 2024 to address AI’s dual impact on cybersecurity

• China is an increasing threat in Cyber Security: Cyber Security Today for Monday, November 4, 2024

• International law enforcement operation shut down DDoS-for-hire platform Dstat.cc

• Proactive Ways To Bridge The Cybersecurity Talent Gap

• New FakeCall Malware Variant Hijacks Android Devices for Fraudulent Banking Calls

• Analyzing an Encrypted Phishing PDF, (Mon, Nov 4th)

• Threat Actors Allegedly Claiming Leak of Dell Partner Portal Data

• Advanced Variant of FakeCall Malware Targets Mobile Users with Sophisticated Vishing Attacks

• Gmail Security Challenges Amid Rising Phishing Scams

• How Safe Are AI-Powered Laptops When It Comes to Onboard Data Security?

• Securing Your SaaS Application Security

• Microsoft Warns of Major Credential Theft by Chinese Hackers Via Covert Network Attacks

• Hiring guide: Key skills for cybersecurity researchers

• Cybersecurity in crisis: Are we ready for what’s coming?

• Whispr: Open-source multi-vault secret injection tool

• Z-lib – 9,737,374 breached accounts

• Quadrant Launches Free Dark Web Reports to Help Organizations Identify Leaked Credentials and Sensitive Information

• Strong privacy laws boost confidence in sharing information with AI

• ISC Stormcast For Monday, November 4th, 2024 https://isc.sans.edu/podcastdetail/9206, (Mon, Nov 4th)

• NAKIVO Backup for MSP: Best Backup Solution for MSPs

• IT Security News Weekly Summary – Week 44

• IT Security News Daily Summary 2024-11-03

• Half of Online Child Grooming Cases Now Happen on Snapchat, Reports UK Charity

• Redline And Meta Infostealers Targeted in Operation Magnus

• 6 IT contractors arrested for defrauding Uncle Sam out of millions

• Strava’s Privacy Flaws: Exposing Sensitive Locations of Leaders and Users Alike

• DEF CON 32 – Where’s The Money-Defeating ATM Disk Encryption

• Cybersecurity Beyond Phishing: Six Underrated Threats

• Security Affairs newsletter Round 496 by Pierluigi Paganini – INTERNATIONAL EDITION

• SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 18

• FBI Warns of Cybercriminals Stealing Cookies to Bypass Security

• Windows Recall Release Pushed Back, Microsoft Sets December Date

• Critical Security Vulnerability Found in LiteSpeed Cache Plugin: Urgent Update Advised for WordPress Users

• US Election 2024 – FBI warning about fake election videos

• Chinese threat actors use Quad7 botnet in password-spray attacks

• Week in review: Windows Themes spoofing bug “returns”, employees phished via Microsoft Teams

• ANY.RUN Discovers Tricky Phishing Attack Using Fake CAPTCHA

• How to protect against supply chain cyber risk with automation

• 2024 Application Security Report -Fortinet

• Chenlun’s New Phishing Schemes Target Big-Name Brands

Generated on 2024-11-10 23:58:09.592623