IT Security News Daily Summary 2023-02-01

• Check Point Software takes 1st Place in Independent Test of Top Network Firewalls

• Hoyer takes up post as top Dem on key approps subcommittee

• Dashboard helps city track diversity, equity, inclusion progress

• The headache of changing passwords

• Digital Health Company Allegedly Sold Sensitive Health Information To Facebook

• CISA to Open Supply Chain Risk Management Office

• Pro-Russia Killnet group hit Dutch and European hospitals

• Why you still need security alongside your API Gateway

• Malicious Reward Apps Trick Over 2 Million Android Users

• Google Fi User Data Breached Through T-Mobile Hack

• How endpoint management can transform retail

• Government watchdog warns on cyber weakness

• Inside Killnet: Pro-Russia Hacktivist Group’s Support and Influence Grows

• 10 steps to future water sustainability

• Greater Incident Complexity, Shift in How Threat Actors Use Stolen Data, Will Drive the Cyber Threat Landscape in 2023, Says Beazley Report

• No experience, No Problem – (ISC)² Recruits 140,000 Individuals Interested in a Cybersecurity Career

• Real Talk with CCSPs An interview with Vanessa Leite, CCSP, CISSP

• New cybersecurity BEC attack mimics vendors

• Vista Equity Partners Completes Acquisition of KnowBe4

• Radiant Logic Signs Definitive Agreement to Acquire Brainwave GRC

• Researchers Uncover New Bugs in Popular ImageMagick Image Processing Utility

• Data sharing initiatives slowly gaining traction

• Flipper Zero: How to install third-party firmware (and why you should)

• OneNote documents spread malware in several countries

• What reverse shell attacks are and how to prevent them

• Password-stealing “vulnerability” reported in KeePass – bug or feature?

• Reduce Data Breaches by Adding a Data Privacy Vault to Your HealthTech App Architecture

• Cybersecurity organizations fight back against rise of emotet and omnatuor malvertising

• How APIs are shaping zero trust, and vice versa

• R&D funding vehicle could supercharge small biz innovation programs

• Singapore, EU digital pact to cover ‘all areas’ of bilateral cooperation

• Microsoft sweeps up after breaking .NET with December security updates

• Taking the next step: OSS-Fuzz in 2023

• Civil Society Organizations Call on the House Of Lords to Protect Private Messaging in the Online Safety Bill

• Working with AWS to secure your data against attack

• IoT, connected devices biggest contributors to expanding application attack surface

• BrandPost: Is Your Organization Security Resilient? Here’s How to Get There

• Why you might not be done with your January Microsoft security patches

• US DOJ applies carrot-and-stick approach to Foreign Corrupt Practices Act policy

• Misconfiguration and vulnerabilities biggest risks in cloud security: Report

• Cybersecurity sees rise of emotet and the omnatuor malvertising

• Va. regulators propose easing emission limits for data centers over power transmission concerns

• How to use BeEF, the Browser Exploitation Framework

• Beating the Odds: 3 Challenges Women Face in the Cybersecurity Industry

• It Was Smart for an AI

• C can be memory-safe

• Ransomware Attack Forces Closure of Nantucket Schools

• Attackers Abuse Microsoft’s Verified Publisher Status To Steal Data

• Apple’s Focus On Secrecy Violated Employee Rights

• SBF Barred From Contacting FTX Employees Via Signal

• Netflix’s New Password Sharing Restrictions Are Confusing

• DarkTrace’s Shares Dive As Short Sellers Circle

• Vulnerability in Cisco industrial appliances is a potential nightmare (CVE-2023-20076)

• Security in Style: Perimeter 81 Releases Limited Edition Fashion Capsule

• IT staff systems and data access policy

• 98% of Firms Have a Supply Chain Relationship That Has Been Breached: Analysis

• VMware Confirms Exploit Code Released for Critical vRealize Logging Vulnerabilities

• Malicious NPM, PyPI Packages Stealing User Information

• VMware Releases Security Update for VMware vRealize Operations

• The Unheard Story of a Crippling Ransomware

• Is it forensics or is it junk science?

• Microsoft: We are tracking these 100 active ransomware gangs using 50 types of malware

• Google Fi Confirms Data Breach, Hints At Link to T-Mobile Hack

• VMware Releases Security Update for VMware vRealize Operations

• Secure APIs to Drive Digital Business

• Security in gaming: How to Recognize and Prevent Social Engineering Attacks in Gaming

• Table Stakes Security Services for 2023

• cPacket Networks Experienced Hyper Growth in 2022

• GuidePoint Security Adds Fortress as the Latest Technology Partner in the Company’s Federal Emerging Cyber Vendor Program

• SecurityScorecard Research Shows 98% of Organizations Globally Have Relationships With At Least One Breached Third-Party

• Praetorian Appoints Peter Kwan as Vice President of Engineering

• The top 8 Cybersecurity threats facing the automotive industry heading into 2023

• Gem Security Emerges From Stealth With $11M, Unveils Cloud TDIR Platform for Faster Response to Cloud Threats

• Updates, Compilation

• Server-Side Request Forgery Attack Explained: Definition, Types, Protection

• Where Do the Most Ransomware Attacks Take Place in the United States?

• Ransomware attack shuts down Nantucket Public Schools and University of Iowa Hospitals

• Anker Confirms Eufy Cameras Not Fully Encrypted, Raising Concerns

• Key Firefox and Android updates you need to be aware of

• Hackers Abuse Microsoft’s ‘Verified Publisher’ OAuth Apps to Hack Organizations Cloud

• Ransomware Leads to Nantucket Public Schools Shutdown

• Gem Security Gets $11 Million Seed Investment for Cloud Incident Response Platform

• Dutch, European Hospitals ‘Hit by Pro-Russian Hackers’

• Researchers Claim High-Risk Vulnerabilities Found in 87% of All Container Images

• Contrast Security Launches Alliance Program to Change the Way Customers Scale Their Security Solutions

• Command-Injection Bug in Cisco Industrial Gear Opens Devices to Complete Takeover

• New Prilex PoS Malware evolves to target NFC-enabled credit cards

• Hacking Group: Darkweb Developers Are In High Demand

• Insider Attacks Becoming More Frequent, And Difficult Gurucul Report

• UK Government Details Plan To Regulate Crypto, Post FTX

• Fortra’s Terranova Security 2022 Gone Phishing Tournament Results Reveal Large Organizations at Highest Risk of Compromising Data

• What Is Ethical Hacking? An Introduction to the Concept

• How Can Technology Help Reduce Carbon Emissions?

• North Korean Cybercriminals Attempt to Steal $27M in ETH

• Northern European Criminals Copy the Lockbit Gang

• Titan-Stealer: A New Golang-based Info-Stealer Malware

• Introduction to Azure Data Lake Storage Gen2

• Red Hat gives an ARM up to OpenShift Kubernetes operations

• Gem Security shows detection and response key to cloud security, raises $11M

• Google Fi Users Caught Up in T-Mobile Breach

• ManageEngine Study Finds United States Enterprises Hit by Short-Staffed Security Operations Centers

• KnowBe4 to Offer $10,000 to Black Americans in Cybersecurity Scholarship

• Application Security Must Be Nonnegotiable

• How are you marking data privacy day?

• Key software updates you need to be aware of

• Apple To Launch ‘Folding iPad’ In 2024 – Report

• Contain Breaches and Gain Visibility With Microsegmentation

• Stop, Collaborate and Listen: Disrupting Cybercrime Networks Requires Private-Public Cooperation and Information Sharing

• Checkmarx Launches Threat Intelligence for Open Source Packages

• Central Bank Immunity, Afghanistan, and Judgments Against the Taliban

• Safer Internet Day: Experts Reveal 7 Tips To Avoid DeepFake Scams

• How Crypto & Blockchain Technology Changed the Way Casinos Do Business

• Microsoft warning: These phishing attackers used fake OAuth apps to steal email

• The dark side of Optimize Mac Storage: What you need to know if you rely on it

• Boxx Insurance Raises $14.4 Million in Series B Funding

• Almost all Organizations are Working with Recently Breached Vendors

• Experts Warn of ‘Ice Breaker’ Cyberattacks Targeting Gaming and Gambling Industry

• Hive Ransomware: A Detailed Analysis

• New Versions of Prilex POS Malware Can Block Contactless Transactions

• Russian Hacktivists Target US and Dutch Hospitals

• Improve your AWS security posture, Step 3: Encrypt AWS data in transit and at rest

• Lessons learned from 2022

• Why confidential computing will be critical to (not so distant) future data security efforts

• Unpatched Econolite Traffic Controller Vulnerabilities Allow Remote Hacking

• BEC Group Uses Open Source Tactics in Hundreds of Attacks

• Digital Project Design Brief: A Key to Effective Partnership

• Strengthening security on my Apple account!

• The New DevOps Performance Clusters

• ChatGPT: Is its use of people’s data even legal?

• Cyber Insights 2023: ICS and Operational Technology

• Cyber Insights 2023: The Geopolitical Effect

• Cyber Insights 2023: Criminal Gangs

• 30k Internet-Exposed QNAP NAS Devices Affected by Recent Vulnerability

• Prilex PoS Malware Blocks NFC Transactions to Steal Credit Card Data

• New SH1MMER Exploit for Chromebook Unenrolls Managed ChromeOS Devices

• New SH1MMER ChromeOS Exploit Jailbreaks Chromebooks

• Maximize Security with Bitwarden’s Latest Update: 600,000 Server-Side Iterations

• KeePass Password Manager Vulnerability: Is Your Data at Risk?

• China “Deeply Concerned” At US Halt Of Export Licences For Huawei

• Enter the Hunter Satellites Preparing for Space War

• Amazon Still Selling T95 TV Box with Pre-Installed Malware

• GitHub Breach – Hackers Stole Code Signing Certificates From Repositories

• The State of the US National Cybersecurity Strategy for the Electric Grid

• New LockBit Green ransomware variant borrows code from Conti ransomware

• Anker admits its Eufy security cameras were not end-to-end encrypted

• Google Fi Data Breach Reportedly Led to SIM Swapping

• Video walkthrough: Cybertech Tel Aviv 2023

• Threat Actors Gained Access to Google Fi Customers’ Information

• The Rise of the Code Package Threat

• Firms fear software stack breach as attack surface widens

• Thriving Dark Web Trade in Fake Security Certifications

• Prilex PoS Malware Evolves to Block Contactless Payments to Steal from NFC Cards

• Nevada Ransomware Has Released Upgraded Locker

• ​​Key Insights From the Guide to Cybersecurity Trends and Predictions for 2022-23

• PayPal To Axe 7 Percent Of Workforce

• Auditing Kubernetes with Open Source SIEM and XDR

• Photos: Cybertech Tel Aviv 2023

• US Official Confirms Japan, Netherlands Joined US China Chip Sanctions

• Nearly 30,000 QNAP Devices Exposed Via New Bug

• 29,000 QNAP Devices Unpatched In Critical Vulnerabilities

• Why performing security testing on your products and systems is a good idea

• Intel Cuts Pay For Staff, Executives

• ESET APT Activity Report T3 2022

• TrickGate, a packer used by malware to evade detection since 2016

• Data Privacy Capability Guide

• Hackers Abused Microsoft’s “Verified Publisher” OAuth Apps to Breach Corporate Email Accounts

• KeePass Password Manager vulnerability: what you need to know

• Attackers abuse Microsoft’s ‘verified publisher’ status to steal data

• Building a Quantum-Safe Blockchain Today

• As the anti-money laundering perimeter expands, who needs to be compliant, and how?

• Hackers Abused Microsoft’s “Verified Publisher” OAuth Apps to Hack Corporate Email Accounts

• Involta DRaaS+ secures critical business systems and data

• Ransomware Attacks on the Small and Medium Businesses are on the Rise

• Google Fi Customer Information leaked in a Cyber Attack

• 70% of CIOs anticipate their involvement in cybersecurity to increase

• The future of vulnerability management and patch compliance

• ERI Brings Carbon Neutral, SOC 2 Compliant Circular Economy Innovations to Indiana Businesses

• Bridge Security Advisors Names Brian Jeffords Chief Revenue Officer

• AppOmni Names Tina Hawk Chief People Officer

• Matt DeFrain Promoted to Managing Director and CORe Practice Leader at MorganFranklin Consulting

• SentinelOne and KPMG Announce Alliance to Accelerate Cyber Investigations and Response

• ThreatSpike Red makes offensive cybersecurity accessible to more organizations

• OTAVA releases Security as a Service to protect users against all attack vectors

• Trulioo identity verification platform helps businesses achieve regulatory compliance

• GroupSense VIP Monitoring service enables enterprises to proactively protect executives

• Mix of legacy OT and connected technologies creates security gaps

• Additional Supply Chain Vulnerabilities Uncovered in AMI MegaRAC BMC Software

• GitHub Reports Code-Signing Certificate Theft in Security Breach

• Writing a Modern HTTP(S) Tunnel in Rust

• How Can Disrupting DNS Communications Thwart a Malware Attack?

• 2023-01-31 – BB12 Qakbot (Qbot) with Cobalt Strike and VNC traffi

• BOXX Insurance raises $14.4 million to help customers stay ahead of cyber threats

• Red Hat and Oracle expand collaboration to standardize cloud operations

• Hackerman [Comic]

• Zero-trust security: A cheat sheet (free PDF)

• New data wipers deployed against Ukraine

• Google sponsored ads malvertising targets password manager

• 40% of online shops tricking users with “dark patterns”

• Check Point Software takes 1st Place in Independent Test of Top Network Firewalls Miercom NGFW Benchmark 2023

• Tribal broadband grants need better metrics

• Urban heat map reveals priority spots for cooling efforts

• 15 odd and interesting gift ideas for hackers in 2023

• Facebook Bug Discovered That Allowed Anyone To Bypass Two-Factor Authentication

• Firmware Flaws Could Spell ‘Lights Out’ for Servers

• IT Army of Ukraine gained access to a 1.5GB archive from Gazprom

• IT Security News Monthly Summary – February

• IT Security News Daily Summary 2023-01-31

• House lawmakers want VA’s $20 billion-plus electronic health record program to improve or else

• NASA SEWP director echoes concerns over looming deadlines for software providers

• Risk & Repeat: The FBI’s Hive ransomware takedown

• The FCC Broadband Maps: Meet the New Maps, Same as the Old Maps

• Energy Department wants national labs to drive regional innovation

• Critical VMware RCE Vulnerabilities Targeted by Public Exploit Code

• ‘Ghost buses’ haunt transit agencies and frustrate riders

• Tribal broadband grants needs better metrics

• Microsoft upgrades Defender to lock down Linux gear for its own good

• Singapore can now order social media sites to block access, as ‘online safety’ law kicks in

• Microsoft upgrades Defender to lock down Linux devices for their own good

• Measuring for management

• What cybersecurity consolidation means for enterprises

• Phishers Trick Microsoft Into Granting Them ‘Verified’ Cloud Partner Status

• EFF Files Amicus Briefs in Two Important Geofence Search Warrant Cases

• Setting the Record Straight: EFF Statement in Support of FCC Nominee Gigi Sohn

• ChatGPT Clone Apps Collecting Personal Data on iOS, Play Store

• Poser Hackers Impersonate LockBit in SMB Cyberattacks

• Experts released VMware vRealize Log RCE exploit for CVE-2022-31706

• John the Ripper: Password Cracking Tutorial and Review

• Vulnerability Summary for the Week of January 23, 2023

• What Makes ReactJS Good for Logistics Applications in 2023?

• Will Cybersecurity Remain Recession-Proof in 2023?

• Two Steps Forward, One Step Back on Vaccine Privacy in New York

• Zero trust security: A cheat sheet (free PDF)

• Horizon3.ai releases POC exploit for VMware vulnerabilities

• GitHub Says Hackers Cloned Code-Signing Certificates In Breached Repository

• Threats to VoIP Security Are Rising

• The 12 Biggest Android App Development Trends in 2023

• CIOs hold greater organizational leadership status

• GitHub Confirms Signing Certificates Stolen in Cyber-Attack, Revokes Them

• Crystal Group Joins the vPAC Alliance as Charter Member

• USPS signs data management contract worth up to $70M with Veritas Technologies

• Sentra Raises $30 Million for DSPM Technology

• OffSec Yearly Recap 2022

• U.S. Stops Granting Export Licenses For China’s Huawei

• KeePass Disputes Report Of Flaw That Could Exfiltrate A Database

• Chromebook SH1MMER Exploit Promises Admin Jailbreak

• Bill Targets Suicide Hotline Vulnerabilities After Cyberattack On Intrado

• South Korea Makes Crypto Crackdown A National Justice Priority

• DOD instructs acquisition teams to prioritize small business engagement over best-in-class contracts

• DocuSign Brand Impersonation Attack Bypasses Security Measures, Targets Over 10,000

• CISA Releases One Industrial Control Systems Advisory

• ManageEngine Study Finds United States Enterprises Hit by Short-staffed Security Operations Centers

• Advanced IT Concepts (AITC) Names New Chief of Cyber and Technology Programs

• Menlo Security Cloud Security Platform Receives FedRAMP® Authorization

• Stories from the SOC – RapperBot, Mirai Botnet – C2, CDIR Drop over SSH

• Russia Killnet launches DDoS attack on Netherlands and the United States

• Tech Nation To Shut Down After Government Pulls Grant

• The Data Leakage Nightmare in AI

• New Survey Reveals 40% of Companies Experienced a Data Leak in the Past Year

• NanoLock Addresses Global Industrial & OT Cyber Demand with Expansions into Europe and North America

• CISA Releases One Industrial Control Systems Advisory

• Hackers Stole GitHub Desktop and Atom Code-Signing Certificates

• Amid FTX’s burning wreckage, Japan outpost promises asset withdrawals in February

• Qwant or DuckDuckGo: Which Search Engine is More Private?

• Password Changes are Required for LastPass Customers

• US Justice Department Requests Tesla Self-Driving Documents

• DevSecOps Benefits and Challenges

• Microsoft’s Verified Publisher Status Abused in Email Theft Campaign

• Cyber Insights 2023: Artificial Intelligence

• Cyber Insights 2023: Cyberinsurance

• Cyber Insights 2023: Attack Surface Management

• Financial Services Targeted in 28% of UK Cyber-Attacks Last Year

• Sentra Raises $30 Million Series A Financing to Meet Growing Demand for Data Security in the Cloud

• Aura and Nonprofit Cyversity Partner to Support a More Inclusive Cyber Workforce

• GitHub to revoke stolen code signing certificates for GitHub Desktop and Atom

• Conti Source Code & Everything API Employed by Mimic Ransomware

• US Hospitals DDoS Attack, Websites Taken Down By Russian Hackers

• Attackers used malicious “verified” OAuth apps to infiltrate organizations’ O365 email accounts

• TSA U.S. ‘No Fly List’ Gets Leaked On Hacking Forum

• 10 Ways Digitalisation is Improving the UK Immigration Process

• FBI Takes Down the Infamous Ransomware Gang’s Website

• China Start-Up ‘Delivers Quantum Computer’

• CEO, CIO or CFO: Who Should Your CISO Report To?

• Critical QNAP Vulnerability Leads to Code Injection

• How the Atomized Network Changed Enterprise Protection

• Guardz Emerges From Stealth Mode With $10 Million in Funding

• Are Your Employees Thinking Critically About Their Online Behaviors?

• Understanding Business Email Compromise to better protect against it

• 10 Surprises of Remote Work from Security Engineers

• Cybersecurity Industry News Review – 31 January 2023

• Spotify Beats Estimates, But Losses Soar

• The U.N. Cybercrime Convention Should Not Become a Tool for Political Control or the Watering Down of Human Rights

• The Lessons of the Electoral Count Reform Act: Next Steps in Reform

• Why Attackers Target the Financial Services Industry

• The Future of Online Shopping – What to Expect

• Phishing attacks are getting scarily sophisticated. Here’s what to watch out for

• Pro-Palestine hackers threaten Israeli chemical companies

• Perception Point Announces New Record Year, Protecting Over 2,000 Organizations, Doubling Annual Recurring Revenue, and Expanding Portfolio into Web Security

• What Is Dynamic Host Configuration Protocol (DHCP)?

• 10 Million JD Sports Customers Had Their Data Exposed in a Data Breach

• Why Cybersecurity Business Needs a Real-Time Collaboration Tool

• You Don’t Know Where Your Secrets Are

• Facebook & Instagram Flaw Let Anyone Bypass Two-factor Authentication

• SAST: How Code Analysis Tools Look for Security Flaws

• New year, new storage challenge

• GitHub Revokes Code Signing Certificates Following Cyberattack

• Saviynt Raises $205M; Founder Rejoins as CEO

• OpenVEX Spec Adds Clarity to Supply Chain Vulnerability Warnings

• Critical QNAP NAS vulnerability fixed, update your device ASAP! (CVE-2022-27596)

• GitHub code-signing certificates stolen (but will be revoked this week)

• You Really Need to Update Firefox and Android Right Now

• Porsche Stops NFT Launch While Phishing Sites Fills The Space

• Gartner Sees Further Smartphone, PC Sales Slide In 2023

• Oversight Chairman Comer: ‘We’re two years behind in oversight’

• Cyber Insurance Companies Require Enhanced Security from Clients

• Researchers Uncover Packer Used by Several Malware to Evade Detection for 6 Years

• New Report Reveals NikoWiper Malware That Targeted Ukraine Energy Sector

• 1-15 January 2023 Cyber Attacks Timeline

• Samsung Chip Business Posts Profit Plunge

• C++ creator Bjarne Stroustrup defends its safety

• 11 Questions to Ask When Choosing an Application Security Vendor

• Saviynt raises $205M and affirms that IAM must be cloud-friendly

• Microsoft Investigation – Threat actor consent phishing campaign abusing the verified publisher process

• Killnet Attackers DDoS US and Dutch Hospitals

• US ‘Stops Providing’ Huawei Export Licences

• Two US Doctors Convicted of $30m Medicare Fraud

• $27,000 Awarded By Meta As Bounty For 2FA Bypass Vulnerability

• QNAP: Patch Critical Remote Code Injection Bug

• 4 Ways Artificial Intelligence Is Making Virtual Casinos Safer for Users

• Bitwarden to increase its server-side iterations to 600,000; here’s how to set it manually

• Pro-Russia group Killnet targets US healthcare with DDoS attacks

• Budget constraints force cybersecurity teams to do more with less

• Is President Biden’s National Cybersecurity Strategy a good idea?

• DigiCert releases new unified approach to trust management

• 3 ways to stop cybersecurity concerns from hindering utility infrastructure modernization efforts

• Need to improve the detection capabilities in your security products?

• Sentra raises $30M to streamline data securely across the public cloud

• Prilex modification now targeting contactless credit card transactions

• CyberSecurity Tools: 21 Research Tools For Threat Intelligence

• BlackCat Ransomware targets Indian Military weapons maker and Yandex Data Breach

• The Hidden Threat: 1Password Password Manager Phishing Ads on Google

• Amid FTX’s burning wreckage, Japanese outpost promises asset withdrawals in February

• Russian Millionaire on Trial in Hack, Insider Trade Scheme

• Fiserv Looks to Support New Payment Flows with Major Payment Institution License from Monetary Authority of Singapore

• Coalition Launches Coalition Insurance Company

• TD SYNNEX Announces Closing of Secondary Public Offering of Common Stock and Concurrent Share Repurchase

• South Korea makes crypto crackdown a national justice priority

• QNAP Fixes Critical Vulnerability in NAS Devices with Latest Security Updates

• GitHub Breach: Hackers Stole Code-Signing Certificates for GitHub Desktop and Atom

• ShardSecure partners with Entrust to address data security challenges

• Perimeter 81 collaborates with AVANT to expand access to SASE solutions

• KELA launches cyber intelligence platform to empower proactive digital crime prevention

• Cyber Security Managed Services 101

• Planet Ice – 240,488 breached accounts

• Soft Skills: Writing

• What’s Next for Data Security in 2023

• How to implement MVP and its key benefits

• House bill would scrap VA’s $20 billion-plus electronic health record program

• A private moment, caught by a Roomba, ended up on Facebook. Eileen Guo explains how: Lock and Code S04E03

• Update your LearnPress plugins now!

• Riot Games refuses to pay ransom to avoid League of Legends leak

• Analyzing and remediating a malware infested T95 TV box from Amazon

• Republicans announce new congressional cyber subcommittee leadership

• i-PRO New Multi-Sensor Lineup, PTZ Cameras & New Analytics at ISC West

• QNAP addresses a critical flaw impacting its NAS devices

Generated on 2023-02-01 23:55:32.054593