IT Security News Daily Summary 2023-01-28

• Sandworm APT targets Ukraine with new SwiftSlicer wiper

• Extradited Alleged ShinyHunters Hacker Pleads Not Guilty in US Court

• Managing Cybersecurity for Critical National Infrastructure

• Take Steps to Protect Your Enterprise Against the Risks

• No experience, No Problem – (ISC)² Recruits 140,000 Individuals Interested in a Cybersecurity Career

• Real Talk with CCSPs An interview with Vanessa Leite, CCSP, CISSP

• Latest Cyberthreats and Advisories – January 6, 2023

• eSentire: Golden Chickens Malware’s Attacker Uncovered

• This New Python RAT Malware Targets Windows in Attacks

• Telephony fraud and risk mitigation: Understanding this ever-changing threat

• A Catastrophic Mutating Event Will Strike the World in 2 Years, Claims WEF

• Bitwarden Password Manager users are being targeted by phishing ads on Google

• Top 5 stories of the week: Ransomware takes a hit, Intel struggles, CIOs get their own special issue, and more

• A Link to News Site Meduza Can (Technically) Land You in Russian Prison

• ISC fixed high-severity flaws in DNS software suite BIND

• Recent legal developments bode well for security researchers, but challenges remain

• 9 API security tools on the frontlines of cybersecurity

• Eliminating SaaS Shadow IT is Now Available via a Self-Service Product, Free of Charge

• Microsoft Urges Customers to Secure On-Premises Exchange Servers

• North Korean Hackers Target Crypto Users with Phony Job Offers

• Mon Dieu! Suspected French ShinyHunters gang member in the dock

• Build or Buy your own antivirus product

• ISC Releases Security Patches for New BIND DNS Software Vulnerabilities

• Enterprises Don’t Know What to Buy for Responsible AI

• Weekly Update 332

• Enterprises Need to Do More to Assure Consumers About Privacy

• Ukraine Hit with New Golang-based ‘SwiftSlicer’ Wiper Malware in Latest Cyber Attack

• BrandPost: 3 Best Practices for Building Security Resilience

• The CSO guide to top security conferences

• FBI takes down Hive ransomware group in an undercover operation

• Hackers abuse legitimate remote monitoring and management tools in attacks

• BrandPost: Understanding Device and Infrastructure Attacks: Exploring the Microsoft Digital Defense Report 2022

• FBI Hacks Back Hive Ransomware Gang’s Infrastructure – Website Seized

• IronNet Announces Receipt of Continued Listing Standard Notice from NYSE

• Cyberattacks Cost Small Businesses, While Prevention Attracts Customers

• IT/OT convergence and Cybersecurity best practices

• How to Earn Your (ISC)² Certification

• Working with AWS to secure your data against attack

• SwiftSlicer: New destructive wiper malware strikes Ukraine

• Are you in control of your personal data? – Week in security with Tony Anscombe

• Microsoft to enterprises: Patch your Exchange servers

• Compliance Auditing for Data Security Posture Management

• Data Privacy: How the Growing Field of Regulations Impacts Businesses

• OneSpan acquires ProvenDB to address customers’ secure vaulting needs

• Uncle Sam slaps $10m bounty on Hive while Russia ban-hammers FBI, CIA

• What happened in privacy in 2022

• Patch management is crucial to protect Exchange servers, Microsoft warns

• GAO: DOD needs better guidance, resources for contested information environment training

• Friday Squid Blogging: Squid-Inspired Hydrogel

• IT Security News Daily Summary 2023-01-27

• Microsoft Investigates Outage With Teams, Outlook

• Australian man given two-year jail sentence for $69K phishing scams

• Why Most Companies Still Don’t Know What’s on Their Network

• Chip giant ASML sees 2023 sales surge; says China revenue to be steady despite U.S. restrictions

• Cybersecurity professionals upskill in Brazil and Mexico

• Hackers Use RMM Software to Breach Federal Agencies

• Quantum physicists make major nanoscopic advance

• Wireshark 4.0.3 Released – What’s New!

• VMware Releases Patches for Critical vRealize Log Insight Software Vulnerabilities

• LastPass Parent Company GoTo Suffers Data Breach, Customers’ Backups Compromised

• Go to security school, GoTo – theft of encryption keys shows you need it

• Tackling Cyber Threats with Automation & AI in 2023 and Beyond

• Apple releases Ventura 13.2, iOS 16.3, surprise iOS 12.5.7; neglects still-sold Apple Watch Series 3

• Hackers Using Sliver Framework as an Alternative to Cobalt Strike & Metasploit

• Kevin Mitnick Hacked California Law in 1983

• FBI catches up with infosec and crypto communities, blames Lazarus Group for $100 million heist

• Leaders anticipate cyber-catastrophe in 2023, report World Economic Forum, Accenture

• The Pentagon’s innovation shop wants more influence in 2023

• FBI takes down Hive ransomware group

• EDR tools for Windows Server compared

• On Data Privacy Day, Organizations Fail Data Privacy Expectations

• Updates, Compilation

• What is Stakeholder-Specific Vulnerability Categorization?

• A Brief Overview of the Spring Cloud Framework

• GoTo admits: Customer cloud backups stolen together with decryption key

• Skyhawk Security Launches Multicloud Runtime Threat Detection and Response Platform

• ISC Releases Security Advisories for Multiple Versions of BIND 9

• Logfile management is no fun. Now it’s a nightmare thanks to critical-rated VMware flaws

• January 2023 Web Server Survey

• How to use Microsoft KQL for SIEM insight

• Hive ransomware servers shut down at last, says FBI

• ISC Releases Security Advisories for Multiple Versions of BIND 9

• Bitwarden Password Vaults Subject Of Google Ads Phishing

• Energy Dept. makes plans to take its HR system to the cloud

• Philosophers have studied ‘counterfactuals’ for decades. Will they help us unlock the mysteries of AI?

• Michigan embraces ‘Clean Slate’ program without applications

• Critical RCE Lexmark Printer Bug Has Public Exploit

• Speaking Engagements

• FBI smokes ransomware Hive after secretly buzzing around gang’s network for months

• Multiple Vulnerabilities Found In Healthcare Software OpenEMR

• Mark43 continues to put security and reliability first, achieving premier StateRAMP “In Process” Service Provider designation

• Cyware Cyber Fusion Center (CFC) Platform Achieves FedRAMP Ready Designation

• Latest Cyberthreats and Advisories – January 27, 2023

• PlugX Malware Sneaks Onto Windows PCs Through USB Devices

• Survey: CIOs feel elevated, consider themselves ‘changemakers’

• How Florida is looking to build the ‘nation’s first AI university’

• How are you marking data privacy day?

• Gartner report shows zero trust isn’t a silver bullet

• 10 steps every business can take to avoid a cybersecurity breach

• Black Basta Deploys PlugX Malware in USB Devices With New Technique

• Google: Influence Operator Dragonbridge Floods Social Media in Sprawling Cyber Campaign

• Identifying and securing your business’s dark data assets in the cloud

• AT&T Cybersecurity awarded the Palo Alto Networks 2022 Partner of the Year Award

• Are WE the firewall?

• Improve your AWS security posture, Step 3: Encrypt AWS data in transit and at rest

• A new initiative seeks to help small cities access infrastructure funding

• How Noob Website Hackers Can Become Persistent Threats

• Lessons learned from 2022

• Critical Vulnerability Impacts Over 120 Lexmark Printers

• New ‘Pig Butchering’ Scam in West Africa Impersonates US Financial Advisors

• Hacker accused of having stolen personal data of all Austrians and more

• Assessing Impacts of AI on Human Rights: It’s Not Solely About Privacy and Nondiscrimination

• How Can a ‘Digital Emblem’ Help Protect Medical Facilities Against Cyber Operations?

• Russia starts cyber attacks on the West with Germany for supporting Ukraine

• Yandex Denies Hack – Source Code Leaked on Popular Hacking Forum

• U.S. Targets Google’s Online Ad Business in Latest Lawsuit

• Source Code & Private Data Stolen From GoTo

• Why Zero Trust Works When Everything Else Doesn’t

• Here’s how IT budgets should fill cybersecurity moats in 2023

• 3 Ways ChatGPT Will Change Infosec in 2023

• Google Slays Thousands Of Fake News Vids Posted By Dragonbridge

• Russian Hackers Launch Attack On Germany In Leopard Retaliation

• 2 Federal Agencies Hacked With Remote Monitoring

• US Hacks Back Against Hive Ransomware Crew

• Threat Detection and Response (TDR) – An Overview

• 40 Windows CMD Commands that Will Make You Feel Like a Real Hacker

• Apple releases macOS Ventura 13.2, iOS 16.3, and more

• Industry Reactions to Hive Ransomware Takedown: Feedback Friday

• BIND Updates Patch High-Severity, Remotely Exploitable DoS Flaws

• Experts Uncover the Identity of Mastermind Behind Golden Chickens Malware Service

• Latest Cyberthreats and Advisories – January 27, 2023

• Zero Trust Cybersecurity Protocols Slow Companies to “Mask Up”

• The Nominees for the 2023 Cybersecurity Defender of the Year Award in EMEA

• NIST A.I. Risk Management Framework Announcement

• What Is Spyware, What It Does, and How to Block It?

• What Is Kerberos Authentication?

• The top 20 most notable Mac malware threats of 2022

• How to protect your Apple ID account with Security Keys on iPhone, iPad, or Mac

• Brazil’s Telecom Operators Made Strides and Had Shortcomings in Internet Lab’s New Report on User Privacy Practices

• LATEST CYBERTHREATS AND ADVISORIES – JANUARY 27, 2023

• Data Privacy Day: Understanding the Risks of Social Media

• Iranian APT Leaks Data From Saudi Arabia Government Under New Persona

• Microsoft Urges Customers to Patch Exchange Servers

• What Are Some Good Word Games You Can Play Online

• Cyberwarfare Threat Looming Large on Firms Worldwide

• 20 Top Apple Malware Threats in 2022

• The 31 Flavors of Data Lineage and Why Vanilla Doesn’t Cut It

• Researchers Discover New PlugX Malware Variant Spreading via Removable USB Devices

• A Guide to Phishing Attacks

• Aurora Infostealer Malware Deploys Shapeshifting Tactics

• 5 Golden Rules of Threat Hunting

• ADS-B Exchange, the Flight Tracker That Powered @ElonJet, Sold to Jetnet

• British Cyber Agency Warns of Russian and Iranian Hackers Targeting Key Industries

• 3 Lifehacks While Analyzing Orcus RAT in a Malware Sandbox

• How to Choose Between Access Control Models? RBAC vs. ABAC vs. PBAC

• FBI Closes Down Hive Ransomware Gang: What Does This Mean for the Security Landscape?

• Security Flaws Disclosed in Samsung’s Galaxy Store App for Android

• Data Privacy Day: Securing your data with a password manager

• Security is Key to Business Transformation, Say IT Chiefs

• $10M Reward By U.S. For Hive Ransomware Links To Foreign Government

• US Seizes Servers Of Prolific Ransomware Gang Hive

• Global Action “Dismantles” Hive Ransomware Group

• Twitter Partners Ad Verification Firms To Appease Advertisers

• Hackers Abuse Legitimate Remote Monitoring Tools to Steal Banking Data

• US Reiterates $10 Million Reward Offer After Disruption of Hive Ransomware

• Microsoft: Update On-Premises Exchange Server Now

• NASA And DARPA To Develop Nuclear Rocket Engines For Mars

• AI in cybersecurity: The good, the bad, and the ugly

• CVE-2023-23560 flaw exposes 100 Lexmark printer models to hack

• Savvy cybersecurity pros benefit from host of free resources to step up fight against hackers and cyber threats

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• BlackCat Ransomware gang stole secret military data from an industrial explosives manufacturer

• 3 business application security risks businesses need to prepare for in 2023

• New infosec products of the week: January 27, 2023

• UK Cyber Security Centre’s scary new story: One phish, two phish, Russia phish, Iran phish

• Cyber Attack news headlines trending on Google

• BING will not get enhanced with Microsoft AI investment of $10 billion

• 50% of organizations exceed their budgeted spend on cloud storage

• Open source skills continue to be in high demand

• RealDefense Acquires SUPERAntiSpyware From Support.com

• Senhasegura Wins 2022 CyberSecured Award for Best Privileged Access Management (PAM) Solution

• Verimatrix Secure Delivery Platform Marks Its First Year with Billions of Video Viewership Licenses Served

• CFM and NXTsoft Announce Strategic Combination

• Predictions 2023, Part 1: What will the new year bring for the InfoSec Community?

• 12 ways to improve your website security

• AI and Cybersecurity: Some observational implications of the intersection between the two

• Ermetic extends its CNAPP with cloud workload protection capabilities

• Cloud Range for Critical Infrastructure improves operational efficiency of security teams

• Bitdefender Recognized Under XDR, EDR and EPP Categories in 2022 Gartner® Hype Cycle™ for Endpoint Security Report

• Why your data is more valuable than you may realize

• Google slays thousands of fake news vids posted by pro-China group Dragonbridge

• Bitdefender Recognized Under XDR, EDR and EPP Categories in 2022 Gartner® Hype Cycle™ for Endpoint Security Report

• Tech layoffs aren’t hitting this digital job market where over 700,000 workers are needed

• Bitdefender Recognized Under XDR, EDR and EPP Categories in 2022 Gartner® Hype Cycle™ for Endpoint Security Report

• 10 Best Identity and Access Management (IAM) Solutions

• Bitdefender Recognized Under XDR, EDR and EPP Categories in 2022 Gartner® Hype Cycle™ for Endpoint Security Report

• Hive Ransomware Gang Disrupted; Servers and Dark Web Site Seized

• Prove Identity hires Amanda Fennell as CISO and CIO

• Iron Bow acquires GuardSight to enhance its cybersecurity solutions

• “2.6 million DuoLingo account entries” up for sale

• 3 ways Malwarebytes helps you browse securely and privately online

• WhatsApp hijackers take over your account while you sleep

• CISA releases advice on how to safeguard K–12 organizations

• 5 facts about Vice Society, the ransomware group wreaking havoc on the education sector

Generated on 2023-01-28 23:55:31.196802