IT Security News Daily Summary 2022-09-25

• OSINT and Top 15 Open-source Intelligence Tools

• QUAD Nations to Assist Each Other in Taking Action Against Malicious Cyber Activities

• Attackers impersonate CircleCI platform to compromise GitHub accounts

• How to Overcome the Pitfalls of the Saudi-Iran Dialogue

• Gentoo: GLSA-202209-11: HarfBuzz: Multiple vulnerabilities

• Harley Trojan Affecting the Users by Impersonating the Applications

• Penetration testing is in the eye of the beholder

• SUSE: 2022:3379-1 important: the Linux Kernel (Live Patch 35 for SLE 12 SP5)

• Defenders Be Prepared: Cyberattacks Surge Against Linux Amid Cloud Migration

• The Best Open Source Tools to Secure Your Linux Server

• Malicious Actors Exploit Zero-Day RCE Bug in Sophos Firewall

• Teen Hacking Suspect Arrested by London Police for GTA 6 and Uber Breach

• BIND Updates Patch High-Severity Flaws

• Optus Data Breach: Australia’s Telco Giant Confirms Data of Millions of Users Compromised

• Gentoo: GLSA-202209-12: GRUB: Multiple Vulnerabilities

• Gentoo: GLSA-202209-13: libaacplus: Denial of Service

• Gentoo: GLSA-202209-14: Fetchmail: Multiple Vulnerabilities

• Gentoo: GLSA-202209-15: Oracle JDK/JRE: Multiple vulnerabilities

• The Challenges Facing the Passwordless Future

• New Lawsuit Accuses Facebook Of “Side-Stepping” Apple Privacy Protections To Collect User Data

• SUSE: 2022:3370-1 important: the Linux Kernel (Live Patch 0 for SLE 15 SP4)

• SUSE: 2022:3377-1 important: the Linux Kernel (Live Patch 22 for SLE 15 SP3)

• Bosses spying on you? Here’s the most disastrous truth about surveillance software

• OpIran: Anonymous declares war on Teheran amid Mahsa Amini’s death

• VPN Providers Flee India as a New Data Law Takes Hold

• SUSE: 2022:3373-1 important: the Linux Kernel (Live Patch 26 for SLE 12 SP4)

• SUSE: 2022:3372-1 important: the Linux Kernel (Live Patch 28 for SLE 12 SP4)

• Security Affairs newsletter Round 385

• Week in review: Revolut data breach, ManageEngine RCE flaw, free Linux security training courses

• Noberus ransomware gets info-stealing upgrades, targets Veeam backup software

• Debian LTS: DLA-3119-1: expat security update

• Penetration testing

• UK Police Arrests 17-Yr-Old Teen Hacker Believed to be Behind Uber & Rockstar Hacks

• APIs: Risks and security solutions

• SUSE: 2022:3369-1 important: the Linux Kernel (Live Patch 20 for SLE 15 SP3)

• Fedora 37: thunderbird 2022-b4583f536b

• Kyndryl and Elastic expand partnership to help users enhance data-driven digital transformation initiatives

• Covid antigen test results of 1.7m Indian and foreign nationals leaked online

• Fedora 37: python-nbxmpp 2022-bf1f350185

• Fedora 37: gajim 2022-bf1f350185

• Uber and Rockstar – has a LAPSUS$ linchpin just been busted (again)?

• Saryu Nayyar Named Finalist in 19th Annual Stevie® Awards for Women in Business

• DocuSign hires Allan Thygesen as CEO

• IBM acquires Dialexa to provide end-to-end digital transformation services for clients

• SUSE: 2022:3368-1 important: the Linux Kernel (Live Patch 14 for SLE 15 SP3)

• How to Automate OWASP ZAP

• ISC fixed high-severity flaws in the BIND DNS software

• IT Security News Daily Summary 2022-09-24

• Avoiding the Risks of Ransomware Strikes in Life Sciences

• Building A Layered Plan for Battling Cybercrime

• UK Teen Arrested Amid Uber and GTA 6 Hacking Saga

• The Web2 problem: How the power to create has gone astray

• The Apple security landscape: Moving into the world of enterprise risk

• Ukraine: SSU dismantled cyber gang that stole 30 million accounts

• Hackers Exploited Zero-Day RCE Vulnerability in Sophos Firewall — Patch Released

• Angry Developer Leaks LockBit Ransomware Builder

• Vulnerability in OCI Could Have Put the Data of Customers Exposed to the Attacker

• SecurityScorecard Appoints Former U.S. National Intelligence Deputy Director and Cybersecurity Expert Susan M. Gordon to Board of Directors

• Risk counts for Cyber and here is why

• Noberus Ransomware Has Updated Its Methods

• A Match Made in Heaven: systemd Comes to Windows Subsystem for Linux

• Shield your data from a quantum attack: The path to PQC migration

• Scammers Employing Stolen Credit Card Data to Design Fake Websites

• RCE Bug in ZOHO Products Let Hackers Execute Arbitrary Code Remotely

• London Police arrested a teen suspected to be behind Uber, Rockstar Games breaches

• Alert: 15-year-old Python tarfile Flaw Lurks in ‘Over 350,000’ Code Projects

• Child Predators Mine Twitch to Prey on Kids

• SUSE: 2022:3366-1 important: the Linux Kernel (Live Patch 32 for SLE 15 SP1)

• SUSE: 2022:3359-1 important: the Linux Kernel (Live Patch 30 for SLE 15 SP1)

• CircleCI, GitHub Users Targeted in Phishing Campaign

• Weekly Update 314

• London Police Arrested 17-Year-Old Hacker Suspected of Uber and GTA 6 Breaches

• Build or Buy your own antivirus product

• SUSE: 2022:3362-1 important: the Linux Kernel (Live Patch 32 for SLE 15)

• Morgan Stanley Fined $35 Million For Security Lapses

• Hackers Actively Exploiting New Sophos Firewall RCE Vulnerability

• Steer Clear of the “Pay Yourself Scam” That’s Targeting Online Bank Accounts

• How Often Should You Change Your Passwords?

• Hexnode’s 3rd Global User Conference HexCon22 Wraps Up With Great Success

• What to consider before disposing of personal data – Week in security with Tony Anscombe

• ManageEngine Study Finds Democratization of IT in North America Increased Dramatically Post-COVID

• GrammaTech CodeSentry 4.0 Enables Developers to Identify Security Vulnerabilities Hidden in Third Party Code

• What is Data-as-a-Service (DaaS)? Understanding the benefits, and common use cases

• Critical Magento Vulnerability Let Unauthenticated Attackers to Execute Code

• SUSE: 2022:3360-1 important: the Linux Kernel (Live Patch 28 for SLE 15)

• Check out this Android spyware, says Microsoft, the home of a gazillion Windows flaws

• 15-Year-Old Python Bug Let Hacker Execute Code in 350k Python Projects

• Fedora 35: dokuwiki 2022-8c76e587f7

• Fedora 36: dokuwiki 2022-d048c0dde2

• September 2022 Web Server Survey

• Cyber mandates too costly for water utilities, experts say

• Can smart streetlights kick-start smart city progress? Yes, they can.

• Hey WeLiveSecurity, how does biometric authentication work?

• Malicious npm Package Poses as Tailwind Tool

• Feds Sound Alarm on Rising OT/ICS Threats From APT Groups

• Time to Quell the Alarm Bells Around Post-Quantum Crypto-Cracking

• 2022-09-23 – IcedID (Bokbot) with Cobalt Strike

• BigID provides Snowflake customers with accelerated security controls

• Fedora 37: libofx 2022-cfb44eb79a

• Fedora 37: webkitgtk 2022-0c00617967

• Maak van elke plek een slimme ruimte

• Smart Spaces Experience Guide – Transform Any Place into a Smart Space

• Transformez n’importe quel endroit en un espace intelligent

• Slack’s and Teams’ Lax App Security Raises Alarms

• Welcome to high tech hacking in 2022: Annoying users until they say “yes”

• A first look at the builder for LockBit 3.0 Black

• Malwarebytes recognized as endpoint security leader by G2

Generated on 2022-09-25 23:55:32.507021

Liked it? Take a second to support IT Security News on Patreon!