IT Security News Daily Summary 2023-03-01

• Work with what you’ve got: Accelerating zero trust deployments

• It’s official: BlackLotus malware can bypass Secure Boot on Windows machines

• TechRepublic Premium editorial calendar: IT policies, checklists, toolkits and research for download

• Main Targets of Ransomware Attacks & What They Look For

• Microsoft Warns of Surge in Token Theft, Bypassing MFA

• BlackLotus is the first bootkit bypassing UEFI Secure Boot on Windows 11

• Offensive Security Is Now OffSec – Refresh Reflects Future of Cybersecurity Learning and Skills Development

• The Impact of AI on Telecoms Fraud Protection Strategies

• Zero Trust Distributed Computing With WebAssembly and WasmCloud

• Why TikTok Is Being Banned on Gov’t Phones in US and Beyond

• Configuring host-level audit logging for AKS VMSS

• Azure Kubernetes Service (AKS) Threat Hunting

• Login Flow With Google Identity Services and Firebase

• Angular vs. React: Which JS Framework Is Better?

• Unpatched, known vulnerabilities still key driver of cyberattacks

• Linux Support Expands Cyber Spy Group’s Arsenal

• CISA advisory details red team attack on critical infrastructure organization

• Cyber criminals are increasingly exploiting cloud environments, report finds

• Dig into feedback on digital services, experts advise

• So You Want to Launch 5G — Is Your 5G Security Strategy Ready?

• Webinar Tomorrow: Entering the Cloud Native Security Era

• What Happened in That Cyberattack? With Some Cloud Services, You May Never Know

• Cybercriminals Targets Law Firms With GootLoader & FakeUpdates

• Google Workspace Adds Client-Side Encryption to Gmail and Calendar

• The Future of Cybersecurity and How Artificial Intelligence Is Changing the Way

• The Importance of Recession-Proofing Security Operations

• Cisco to Acquire Valtix for Cloud Network Security Tech

• Top 10 Security, Operational Risks From Open Source Code

• 8 ways to secure Chrome browser for Google Workspace users

• Lazarus’s Latest Weapons: Wslink Loader and WinorDLL64 Backdoor

• GoDaddy, a Web Hosting Provider Hit Multiple Times by the Same Group

• SEC cyber risk management rule—a security and compliance opportunity

• The Significance of Key Risk Indicators in Organisations

• Could the Pentagon use a little ChatGPT?

• DHS tests show facial recognition tech has varied results, but gaining ground

• Report: Smarter wildfire fighting demands better data quality and sharing

• Two Hacking Groups Seen Targeting Materials Sector in Asia

• Ransomware Attacks: Don’t Let Your Guard Down

• CISA Shares Advice to Improve Networks’ Monitoring and Hardening

• Cyberattackers Double Down on Bypassing MFA

• (ISC)² Security Congress 2023 Begins Call for Presentations

• Third party Cybersecurity risks in securing the supply chain

• Stories from the SOC  – The case for human response actions

• GuLoader – a highly effective and versatile malware that can evade detection

• Belgium admits China hackers behind the attack on European Government MP

• CISA: ZK Java Framework RCE Flaw Under Active Exploit

• The Microsoft Intune Suite fuels cyber safety and IT efficiency

• Upgrading from API v2 to v3: What You Need to Know

• The Digital World is Changing Fast: Data Discovery Can Help

• Creating secure customer experiences with zero trust

• Public SaaS Assets Are a Major Risk For Medium, Large Firms

• Satellite TV giant Dish admitted that the recent outage was caused by a ransomware attack

• Experience the Refreshed OffSec

• Visualize change with an out-of-the-box configuration report

• Google Cloud Platform allows data exfiltration without a (forensic) trace

• US Officials Make Case for Renewing FISA Surveillance Powers

• Several Law Firms Targeted in Malware Attacks

• Without FIDO2, MFA Falls Short

• PlugX RAT Masquerades As Legit Windows Debugger To Slip Past Security

• Investors Pull Around $6 Billion Out Of Binance’s Stablecoin

• TikTok Answers Three Big Cybersecurity Fears About The App

• Dish Network Confirms Cyberattack

• Business and Human Rights Requirements Are on the Rise in 2023

• The Digitalization of the Casino Industry: How Small Online Casinos are Adapting?

• Here is How Toronto-area Police Force Helped Take Down a Russian-linked Hacking Group

• Top 10 open source software risks for 2023

• Cybercriminals Targeting Law Firms with GootLoader and FakeUpdates Malware

• Perception Point Recognized in 2023 Gartner® Market Guide for Email Security for Fourth Year in a Row

• (ISC)² Members Reveal Deep Skepticism About Artificial Intelligence and Machine Learning

• Cybercriminals Use ChatGPT to Ease Their Operations

• Future of the Cloud is Plagued by Security Issues

• The Ukraine Invasion Blew up Russian Cybercrime Alliances

• Google is expanding this ‘next level’ encryption to more Gmail users

• Social Engineering: Definition & 6 Attack Types

• AI-Powered SASE Is Center Stage at Virtual SASE Launch Event

• Google: Client-Side Encryption Added To Gmail And Calendar

• A Stronger European Defense Requires Resetting Cooperation Between the U.K. and Europe

• Microsoft Rolls Out Bing AI To Windows 11

• South American Cyberspies Impersonate Colombian Government in Recent Campaign

• CISO Conversations: Code42, BreachQuest Leaders Discuss Combining CISO and CIO Roles

• Google Workspace Client-Side Encryption Now Generally Available in Gmail, Calendar

• UK sees 35% increase in mobile phishing exposures – Global State of Mobile Phishing Report

• DNS abuse: Advice for incident responders

• U.S. Marshals Service Hacked – Sensitive Information Leaked

• Record Number of Mobile Phishing Attacks in 2022

• Parallax RAT used in attacks aimed at cryptocurrency entities

• Fooling a Voice Authentication System with an AI-Generated Voice

• CISOs Are Stressed Out and It’s Putting Companies at Risk

• BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

• What Printer Can I Use for Sublimation?

• Are New Technologies Revolutionizing the Gambling Industry? The Future of Casino

• Bitwarden passes annual security audit with flying colors

• China Warns Elon Musk Over Wuhan Lab Leak Tweet

• Dish Network Says Outage Caused by Ransomware Attack

• Keylogger on Employee Home PC Led to LastPass 2022 Breach

• Bitwarden passes third annual security audit with flying colors

• How To Reduce Security Risks Posed by Cloud Identities?

• Key tips for helping secure your digital life

• Social Engineering: Definition & 5 Attack Types

• Dish Network Confirms Outage Was Due To Ransomware Attack

• 5 Best Video Editing SDKs for iOS

• Critical Vulnerabilities Patched in ThingWorx, Kepware IIoT Products

• Attacker Breakout Time Drops to Just 84 Minutes

• 3 Reasons for Securing Your Company with Passwordless Login

• Dish Network Confirms Ransomware Outage

• Gmail and Google Calendar Now Support Client-Side Encryption (CSE) to Boost Data Privacy

• Researchers Release MortalKombat Ransomware Decryptor

• 3 Key Takeaways from the 2023 Gartner Market Guide for Email Security

• Bitdefender Releases New Decryptor For MortalKombat Ransomware

• Iron Tiger’s SysUpdate Reappears, Adds Linux Targeting

• Intel Offers Quantum SDK For Developers

• Why performing security testing on your products and systems is a good idea

• Former FTX Engineer Pleads Guilty To Fraud Charges

• Elon Musk Overstated Tesla Autopilot New Lawsuit Alleges

• Parallax RAT Targeting Cryptocurrency Firms with Sophisticated Injection Techniques

• PlugX RAT masquerades as legit Windows debugger to slip past security

• Google Gmail client-side encryption is available globally

• 5 open source Burp Suite penetration testing extensions you should check out

• Developers can make a great extension of your security team

• Provide Your Feedback on the CISSP-ISSEP Exam Outline

• Governance of Zero Trust in manufacturing

• RADIUS server authentication: Old but still relevant

• LastPass becomes a cyber attack victim for the second time from the first time

• Alarming Rise in Mobile Banking Malware – Over 200,000 New Installers Discovered

• Dormant accounts are a low-hanging fruit for attackers

• Covert cyberattacks on the rise as attackers shift tactics for maximum impact

• A modern-day look at AppSec testing tools

• Google Adds Client-Side Encryption to Gmail, Calendar

• AlertEnterprise reveals Guardian AI Chatbot powered by OpenAI ChatGPT

• CIS Hardened Images List

• Infosec products of the month: February 2023

• U.S. Marshals Service hacked in ‘major incident’

• VMware extends SD-WAN to OT with new software client offering

• Veeam Backup for Microsoft 365 v7 strengthens data protection

• How to Choose the Right Data Masking Tool for Your Organization

• Huawei launches ‘world’s best’ ransomware detection system

• Google: You get crypto, you get crypto, almost everyone gets email crypto!

• Optimize Mac Storage can make your files go poof. Ask me how I know

• CISOs Share Their 3 Top Challenges for Cybersecurity Management

• Google adds client-side encryption to Gmail and Calendar. Should you care?

• Video Marketing Software Animker Leaking Trove of User Data

• Keep Your Application Secrets Secret

• Thales and Qualcomm join forces to launch GSMA certified iSIM

• US government sets a 30-day deadline for wiping TikTok from feds’ phones

• How to Use Input Sanitization to Prevent Web Attacks

• Cyolo unveils partner program to accelerate adoption of zero-trust access

• iPhone users targeted in phone AND data theft campaign

• US Marshals Service hit by ransomware and data breach

• Two of The Worst Healthcare Data Breaches in US History Happened Last Year

• Hoxhunt Launches Human Risk Management Platform

• The Bridge to Zero Trust

• Distributed Tracing: A Full Guide

• Security Defects in TPM 2.0 Spec Raise Alarm

• LastPass DevOps Engineer Targeted for Cloud Decryption Keys in Latest Breach Revelation

• US cybersecurity chief: Software makers shouldn’t lawyer their way out of security responsibilities

• IT Security News Monthly Summary – March

• IT Security News Daily Summary 2023-02-28

• How can Vault Vision help secure your company with passwordless login?

• Top benefits of SOAR tools, plus potential pitfalls to consider

• Exfiltrator-22: The Newest Post-Exploitation Toolkit Nipping at Cobalt Strike’s Heels

• Security Architecture Review on a SASE Solution

• House Republicans offer proposal to claw back unemployment modernization funding

• Look for fraudsters to apply COVID-era tricks to new programs

• Texas Public Safety agency sent at least 3,000 driver’s licenses to organized crime group targeting Asian Texans

• LastPass breach tied to hack of engineer’s home computer

• US Marshals Ransomware Hit Is ‘Major’ Incident

• Dish: Someone snatched our data, if you’re wondering why our IT systems went down

• Southern states have the most open cyber exposures, report finds

• Building scalable, cost-effective application security

• The 5 best VPN deals right now: March 2023

• How to export your Bitwarden vault for safekeeping

• Facebook Introduces New Tool To Crack Down On Spread Of Teens’ Intimate Images

• Win for Government Transparency and Immigrant Privacy Rights at Second Circuit

• Understanding Jamstack Security

• How threat intelligence helps SecOps prevent cyberevents before they happen

• U.S. Marshals Service suffers ransomware attack, data breach

• Pig butchering scam explained: Everything you need to know

• Bitdefender released a free decryptor for the MortalKombat Ransomware family

• What is Zero Trust Security? Breaking Down a Zero Trust Architecture

• 5 Challenges Every Engineering Manager Must Overcome

• Embrace SASE With Cisco

• WannaCry Hero & Kronos Malware Author Named Cybrary Fellow

• How to spot and avoid PDF malware

• February 2023 Web Server Survey

• Zero Trust OT Security for Zero Operational Downtime

• Enforce Zero Trust for 5G Security to Work

• Partner Blueprint for Success — Breakaway 1=5

• CrowdStrike 2023 Global Threat Report: Resilient Businesses Fight Relentless Adversaries

• Pen testing report: IT budgets should focus on entire security stack

• LastPass Employee PC Hacked with Keylogger to Access Password Vault

• How SecDevOps Adoption Can Help Save Costs in Software Development

• What Is API-First?

• US Gov. Agencies Have 30 Days to Remove TikTok, Canada Follows Suit

• Pernicious Permissions: How Kubernetes Cryptomining Became an AWS Cloud Data Heist

• Crypto Scammers Game YouTube for Amplification While Keeping Under Radar, Researchers Find

• LastPass breach: Hackers put malware on engineer’s home computer to steal their password

• White House to officially ban TikTok from government devices within 30 days

• Trackd Snags $3.35M Seed Funding to Automate Vuln Remediation

• LastPass Data Stolen in August 2022 Breach Used For December Attack

• First steps in CHERIoT Security Research

• Microsoft Security Experts discuss evolving threats in roundtable chat

• Succession Wealth Fails to Keep Cyber Attackers at Bay

• 7 reasons why Endpoint Security and Response shouldn’t be ignored

• AT&T Cybersecurity announces 2023 ‘Partner of the Year Award’ winners

• NASA tests autonomous aircraft decision tech in Arizona cities

• What’s the best way to ensure your privacy with a web browser?

• Hackers Claim They Breached T-Mobile More Than 100 Times in 2022

• China’s BlackFly Targets Materials Sector in ‘Relentless’ Quest for IP

• U.S. Marshals Service suffers a ransomware attack

• The U.S. Is Now Using Facial Recognition Rigged Drones For Special Ops

• Stupid Patent of the Month: Clocking In To Work—On an App

• Apple iPhone Vulnerability let hackers steal photos, messages and files

• Vulnerabilities Being Exploited Faster Than Ever: Analysis

• Ransomware Attack Hits US Marshals Service

• Ransomware Attack On US Marshalls Compromises Sensitive Information

• LastPass Says Employee’s Home Computer Was Hacked And Corporate Vault Stolen

• Hackers Sat On News Corp For Two Years

• Rapid7’s 2022 Vulnerability Intelligence Report

• Dish Multi-Day Outage Rolls On As Ransomware Fears Grow

• US Chips Act Bars Companies From Expanding In China

• A Tale of Two Insurrections: Lessons for Disinformation Research From the Jan. 6 and 8 Attacks

• On AI-Generated Works, Artists, and Intellectual Property

• U.S. Marshals Service Looking Into Data Theft & Ransomware Attack

• The Buffett test: This chart shows every Club holding’s spending on stock buybacks

• DNA testing biz vows to improve infosec after criminals break into database it forgot it had

• How SMB Protocol Functions and its Susceptibility to Vulnerabilities

• The DoJ Disruption of the Hive Ransomware Group Is a Short-Lived Win

• Our commitment to fighting invalid traffic on Connected TV

• 5 Cybersecurity Trends and Predictions for Secure Online Shopping in 2023 – How to Shop Securely?

• Travelling? These Are 5 Tips For Better Online Safety

• Preventing a USB Killer Threat

• Info-stealer Ransomware hit Government Organisations

• Visa, Mastercard ‘Pause Crypto Partnerships’ Amidst Meltdown

• US Marshals Service Hit By Major Ransomware Attack

• Zero-Day Exploits: The Anatomy of Unexpected Attacks

• Bitdefender Releases Free Decryptor for MortalKombat Ransomware Strain

• New EX-22 Tool Empowers Hackers with Stealthy Ransomware Attacks on Enterprises

• Bitdefender Releases Free MortalKombat Ransomware Decryptor

• LassPass breach: Hackers put malware on engineer’s home computer to steal their password

• ‘Hackers’ Behind Air Raid Alerts Across Russia: Official

• 33 New Adversaries Identified by CrowdStrike in 2022

• New ‘Exfiltrator-22’ Post-Exploitation Framework Linked to Former LockBit Affiliates

• Rapid7: Attackers exploiting vulnerabilities ‘faster than ever’

• LastPass: Keylogger on home PC led to cracked corporate password vault

• Industry Embraces Single-Vendor SASE as Cato Reports Record Growth

• Are our pets leaking information about us?

• Cybersecurity Industry News Review: February 28, 2023

• LastPass breach: Hacker accessed corporate vault by compromising senior developer’s home PC

• The power of community participation with Faye Francy, Executive Director, Auto-ISAC

• What Must You Do Before Uploading Your Sensitive Data to the Cloud?

• Busting Myths Around Cybersecurity Team Training

• Massive Blaze Shuts Down Apple Supplier Plant In India

• How to Obtain EV Code Signing Certificate for Azure?

• How SlashNext is using generative AI to shut down ChatGPT phishing attacks

• Vouched Raises $6.3 Million for Identity Verification Platform

• Apple Users Need to Update iOS Now to Patch Serious Flaws

• China Is Relentlessly Hacking Its Neighbors

• The future of cyber insurance

• The Buffett test: This one chart shows how much every Club holding spends on stock buybacks

• EU Narrows App Store Charges Against Apple

• US Electric Cooperative Association Launches Commercial OT Security Solution

• Vulnerability in Popular Real Estate Theme Exploited to Hack WordPress Websites

• CrowdStrike: Threat actors shifting away from ransomware

• LastPass: The crooks used a keylogger to crack a corporate password vault

• London Honeypots Being Attacked 2000 Times Per Minute

• Application Security vs. API Security: What is the difference?

• CISA adds ZK Java Web Framework bug to Known Exploited Vulnerabilities Catalog

• Meta Forms AI Team To Compete With ChatGPT

• APT-C-36 Strikes Again: Blind Eagle Hackers Target Key Industries in Colombia

• Funding Your Business Expansion in 2023: 4 Considerations and Options

• Foxconn Expands In China’s Henan After Factory Disruption

• Phone Attacks and MFA Bypass Drive Phishing in 2022

• Canada Bans TikTok From Government Devices

• Operational Security: 8 best practices to create a comprehensive OPSEC program

• Deepfakes: What they are and tips to spot them

• Experts Spot Half a Million Novel Malware Variants in 2022

• LastPass DevOps Engineer Breached To Steal Password Vault Data

• Critical Flaws in WordPress Houzez Theme Exploited to Hijack Websites

• London Honeypots Attacked 2000 Times Per Minute

• 15 odd and interesting gift ideas for hackers in 2023

• News Corp outfoxed by IT intruders for years

• Need to improve the detection capabilities in your security products?

• Resecurity identified the investment scam network ‘Digital Smoke’

• Russian hacktivists DDoS hospitals, with pathetic results

• CENTRAL BANK DIGITAL CURRENCIES

• How to safely file your taxes online

• US Marshals Service leaks ‘law enforcement sensitive information’ in ransomware incident

• LastPass Reveals Second Attack Resulting in Breach of Encrypted Password Vaults

• CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability

• Decrypting Cyber Risk Quantification

• Security teams have no control over risky SaaS-to-SaaS connections

• Expert strategies for defending against multilingual email-based attacks

• It only takes one over-privileged identity to do major damage to a cloud

• Ransomware Attack on servers of the US Marshals Service

• LastPass publishes final analysis of hack into password infrastructure

• (ISC)² Research Finds Cybersecurity Professionals to be Least Impacted by Layoffs in 2023

• The ethics of biometric data use in security

• 10 US states that suffered the most devastating data breaches in 2022

• White House: No More TikTok on Gov’t Devices Within 30 Days

• LastPass: The crooks used a keylogger to crack a corporatre password vault

• Vouched raises $6.3 million to enhance its platform

• Red Hat and Samsung partner on new 5G RAN solution

• LiveRamp enhances identity resolution services on Snowflake

• LastPass says employee’s home computer was hacked and corporate vault taken

• SpaceX unveils “V2 Mini” Starlink satellites with quadruple the capacity

• Twitter Payments chief is out as layoffs cut 10% of Twitter staff, report says

• Linux is not exactly “ready to run” on Apple silicon, but give it time

• Facial recognition algorithms hit new accuracy highs in latest NIST test

• Feeling VEXed by software supply chain security? You’re not alone

• Fake ROBLOX and Nintendo game cracks drop ChromeLoader malware

• LastPass: hackers breached the computer of a DevOps engineer in a second attack

• 5 Best Practices for a Multi-Factor Authentication (MFA) Strategy

• 2023 Predictions

• A week in security (February 20 – 26)

• TikTok probed over child privacy practices

• Fighting online censorship, or, encryption’s latest surprise use-case, with Mallory Knodel: Lock and Code S04E05

• How to work from home securely, the NSA way

Generated on 2023-03-01 23:55:33.413425