IT Security News Daily Summary 2023-03-07

• Research shows two-thirds of orgs have had breaches caused by remote working

• FedRAMP, StateRAMP cultivate small biz providers

• Tips for multicloud public health IT operations

• How data breaches lead to fraud risk

• GSA officials misled agencies about Login-dot-gov

• Akamai Technologies Releases New Service and Tools to Stop Advanced Threats and Drive Zero Trust Adoption

• Combating Ransomware: A Roadmap for Progress

• NIH automated biomedical office teases small biz cybersecurity contract

• Hiatus Campaign Infects DrayTek Routers for Cyber Espionage, Proxy Control

• Virtual Event Tomorrow: Ransomware Resilience & Recovery Summit

• Pre-Deepfake Campaign Targets Putin Critics

• Hiatus Campaign Infects DrayTek Gear for Cyber Espionage, Proxy Control

• EFF Tells Supreme Court: Trademark Law Doesn’t Trump the First Amendment

• Dependency Injection and Ways to Inject It Using .NET Core API

• Acer Confirms Data Offered Up for Sale Was Stolen

• What Is Penetration Testing? Complete Guide & Steps

• Hacker Cracks Toyota Customer Search Tool

• Serious DJI Drones Flaws Could Crash Drones Mid-flight

• Acting national cyber director offers new details on upcoming cyber workforce strategy

• The best VPN services for iPhone and iPad in 2023

• Vishing attacks increasing, but AI’s role still unclear

• Employees Are Feeding Sensitive Biz Data to ChatGPT, Raising Security Fears

• ManageEngine Launches Security and Risk Posture Management in its SIEM Solution

• EFF Comments to NTIA on Privacy and Civil Rights

• Meeting Today’s Complex Data Privacy Challenges

• Serious Security: TPM 2.0 vulns – is your super-secure data at risk?

• Transparent Tribe Hackers Disseminate CapraRAT via Trojanized Messaging Apps

• Foxconn To Construct Factory In India – Report

• OWASP Kubernetes Top 10

• Sharp Panda Target Southeast Asia in Espionage Campaign Expansion

• Palo Alto Survey Reveals 90% of Organizations Cannot Resolve Cyberthreats Within an Hour

• 99% of Cybersecurity Leaders Are Stressed About Email Security

• Scams Security Pros Almost Fell For

• Chinese Sharp Panda Group Unleashes SoulSearcher Malware

• Alphabet’s Sundar Pichai Admits Some Google Offices Are Like ‘Ghost Town’

• CrowdStrike: Attackers focusing on cloud exploits, data theft

• Shein App Accessed Clipboard Data on Android Devices

• Ransomware Attack Against Barcelona Hospital Disrupts Operations

• Remcos RAT Spyware Scurries Into Machines via Cloud Servers

• Acer discloses a new data breach, 160 GB of sensitive data available for sale

• Shein App Caught Sending Clipboard Info To External Servers

• HiatusRAT Malware Attack Routers to Gain Remote Access & Download Files

• fuzz testing (fuzzing)

• Criminal justice algorithms still discriminate

• Delinea Adds New features for its Privilege Manager and DevOps Secrets Vault

• XDR vs EDR – A Comparison

• LastPass Releases New Security Incident Disclosure and Recommendations

• New Phishing Scam Targets User’s With Fake ChatGPT Platform

• DDoS attack hits Mastodon, the Twitter rival

• Appointments Cancelled After Ransomware Attack On Barcelona Hospital

• Tesla Cuts US Prices Of Model S, Model X

• Want data security? Concentrate on cybersecurity training, RangeForce raises $20M

• Russia’s Cyber Tactics in Ukraine Shift to Focus on Espionage

• Expert released PoC exploit code for critical Microsoft Word RCE flaw

• Acer’s Sensitive Data Allegedly For Sale On A Hacker Forum

• SOAR, SIEM, SASE and Zero Trust: How They All Fit Together

• Creating responsible AI presents ‘major technical challenges,’ NIST official says

• Acer Confirms Breach After Hacker Offers to Sell Stolen Data

• Vulnerability in Toyota Management Platform Provided Access to Customer Data

• Cyber Security Works to Rebrand As Securin Inc.

• Optiv Launches Full Suite of Operational Technology Services

• Ransomware’s Favorite Target: Critical Infrastructure and Its Industrial Control Systems

• Advanced Malware Being Used To Backdoor Routers

• Stealthy UEFI Malware Bypassing Secure Boot Enabled By Unpatchable Windows Flaw

• Ukraine, Germany Take Down DoppelPaymer Gang

• BidenCash Card Shop Leaks 2 Million Payment Card Records

• SYS01stealer: New Threat Using Facebook Ads to Target Critical Infrastructure Firms

• Gun Control and Statutory Interpretation: Controversy Over the ATF’s Ban on Bump Stocks

• Germany To Ban Huawei, ZTE From 5G Networks – Report

• Secure APIs: Best Practices and Measures

• Getting to Know Francisco Criado, Check Point’s New VP, Global Partner Ecosystem Organization

• Transparent Tribe APT weaponising Android messaging apps to target officials in India and Pakistan with romance scams

• Can a Barista Become Your Next SOC Analyst?

• Exploitation of Bitrix CMS Vulnerability Drives ICS Attack Surge in Russia

• Edgeless Systems Raises $5m for Trustworthy Data Processing

• Talking Cyberinsurance With Munich Re

• Just 10% of Firms Can Resolve Cloud Threats in an Hour

• The Potential Consequences for Africa of an FTO Designation of the Wagner Group

• Silicon In Focus Podcast: International Women’s Day

• The Road to a Role in Tech Begins Early

• Women in CleanTech is Just One Way We’re Dealing with the Climate Challenge

• How Businesses are Putting Gender Equality Back in the Tech Sector

• 5 Ways to Secure a Virtual Machine in Cloud Computing

• Here are the Countries That Have Imposed TikTok Ban

• 7 Essential Tips to Ensure Your Wi-Fi Security and Protect Your Personal Information

• Law Enforcement Using Facebook Chat Logs to Prosecute Abortion Seekers

• Major Twitter Outage Caused By Single Engineer – Report

• How is CIAM different from IAM?

• Prompt Injection Attacks on Large Language Models

• Cloud Security Capability Guide

• Android’s March 2023 Updates Patch Over 50 Vulnerabilities

• Exploitation of Critical Vulnerability in End-of-Life VMware Product Ongoing

• Brazilian Conglomerate Suffers 3TB Data Breach: Report

• Russian Disinformation Campaign Records High-Profile Individuals on Camera

• How Denmark’s Welfare State Became a Surveillance Nightmare

• Why Healthcare Can’t Afford to Ignore Digital Identity

• Transparent Tribe Hackers Distribute CapraRAT via Trojanized Messaging Apps

• Hospital Clinic de Barcelona Suffered a Ransomware Attack

• Core Members of the DoppelPaymer Ransomware Gang Detained by the Europol

• The Secretive Side of Texting: The Ethics of Sending Anonymous SMS Messages 2023

• Air Fryers are Offered by Scammers as a ‘Free’ Kitchen Gadget

• LastPass hack caused by an unpatched Plex software on an employee’s PC

• Cloud-Native Security Survey: Patterns and Tipping Points in New Report

• Cybersecurity Industry News Review: March 7, 2023

• Meta Planning Thousands More Job Cuts – Report

• “Sharp Panda”: Check Point Research puts a spotlight on Chinese origined espionage attacks against southeast asian government entities

• What to Know About Business Email Compromise (BEC) Scams

• Why API Security is a Growing Concern for UK Companies

• YouTube Videos Not Playing – 6 Ways to Fix

• Ransomware Hits Major Barcelona Hospital, Appointments Canceled

• Find Out More About the New HiatusRAT Router Malware

• AI Image Generators: A Novel Cybersecurity Risk

• Zoom Boss Greg Tomb Fired ‘Without Cause’

• Diving Deeper Into Windows Event logs for Security Operation Center (SOC) – Guide

• Pro-Putin scammers trick politicians and celebrities into low-tech hoax video calls

• Two-Thirds of European Firms Have Started Zero Trust

• Need to improve the detection capabilities in your security products?

• Shein’s Android App Caught Transmitting Clipboard Data to Remote Servers

• LastPass Hack: Engineer’s Failure to Update Plex Software Led to Massive Data Breach

• Podcast Episode: Making the Invisible Visible

• Preventing corporate data breaches starts with remembering that leaks have real victims

• China-aligned APT is exploring new technology stacks for malicious tools

• Vulnerability in DJI drones may reveal pilot’s location

• Ransomware Attack news headlines trending on Google

• Palo Alto Networks enhances cybersecurity capabilities with AI-powered ITDR module

• Advanced Persistent Threat Groups Behind DDoS Attacks on Danish Hospitals

• EPA orders US states to check cyber security of public water supplies

• F5 and Visa join forces to enhance security throughout the customer experience

• Machine Learning Improves Prediction of Exploited Vulnerabilities

• Resecurity appoints Akash Rosen to lead digital forensics practice

• Zero Day Threat Protection for Your Network

• Security Patch Management Strengthens Ransomware Defense

• A week in security (February 27 – March 5)

• 8 cybersecurity tips to keep you safe when travelling

• National Cybersecurity Strategy Document: What you need to know

• Intel CPU vulnerabilities fixed. But should you update?

• Ransom House ransomware attack hit Hospital Clinic de Barcelona

• Acer Data Breach? Hacker Claims to Sell 160GB Trove of Stolen Data

• Why machine identity management should be your focus in 2023

• IT Security News Daily Summary 2023-03-06

• The best travel VPNs of 2023: Expert reviews

• EPA orders US states to check cybersecurity of public water supplies

• Police raids target ‘core’ DoppelPaymer ransomware members

• NSF watchdog warns of ‘other transaction’ pitfalls as funding decisions loom

• Shein Shopping App Glitch Copies Android Clipboard Contents

• DoppelPaymer ransomware suspects cuffed, alleged ringleaders escape

• National cyber strategy ‘promising’ for state, local governments

• Alert: Scammers Pose as ChatGPT in New Phishing Scam

• VR trains responders for mass casualty events

• Police Raid Rounds Up Core Members of DoppelPaymer Ransomware Gang

• Former FBI cyber agent urges all consumers to demand data privacy action

• Modernizing identity access management with zero trust

• Cyberattack Hits Major Hospital in Spanish City of Barcelona

• An Essential Guide To Threat Modeling Cloud Platform

• GuLoader – a highly effective and versatile malware that can evade detection

• What is firewall optimization?

• Meta Cuts Prices For VR Headsets

• Top members of DoppelPaymer Ransomware gang arrested

• Product Security (DevSecOps Practices)

• Sketching out the rules for offensive cyber operations

• This 18-course ethical hacking bundle is under $50

• Police Looking for Russian Suspects Following DoppelPaymer Ransomware Crackdown

• NIST’s Quantum-Proof Algorithm Has a Bug, Analysts Say

• WhatsApp promises to make its usage terms less confusing

• Republicans want to incentivize states to recover stolen unemployment benefits

• New National Cybersecurity Strategy: resilience, regs, collaboration and pain (for attackers)

• SANS Institute Partners With Google to Launch Cloud Diversity Academy

• Faced with likelihood of ransomware attacks, businesses still choosing to pay up

• How to avoid the double-hop problem with PowerShell

• Online Therapy Company Fined For Sharing Private Consumer Data With Facebook

• Hackers Begin Publishing Data Of Oakland City Workers

• EPA releases water systems cyber requirement in tandem with national strategy

• DoppelPaymer ransomware supsects arrested in Germany and Ukraine

• Almost Half of Industrial Sector Computers Affected By Malware in 2022

• In the fragmented insurance landscape, let’s unify customer experience

• Understanding and Resolving a Common Error

• Three ways federal agencies can align with the equity executive order

• How to create an incident response playbook

• EPA Calls For Cybersecurity Improvements in Public Water Systems

• Business-grade routers compromised in low-key attack campaign

• How to make sure the reputation of your products and company is good

• Everything that you Need to Know About Securely Trading on Amazon

• Amazon Pauses Construction At Second HQ In Virginia

• EPA: States must evaluate cybersecurity of public water systems

• Ransomware payments decreased in 2022 as criminals used other extortion tactics

• DoppelPaymer Ransomware Gang Members Busted in Germany, Ukraine

• European police dismantled the DoppelPaymer ransomware gang

• Play Ransomware Starts Leaking Oakland City Data

• Earn CPE Credits For Reading (ISC)² News and Insights With Our Quiz

• Thousands of Websites Attacked Via Compromised FTP Credentials

• Here’s what makes cybersecurity giant Palo Alto Networks tick and why we like the stock so much

• Attack on Oakland City attributed to Play Ransomware

• Southeastern Louisiana University & Tennessee State Hit by Breaches

• Data Exfiltration taking place on Google Cloud Platform without trace

• Apple Lends Globalstar $252m To Aid Satellite-Connected iPhones

• New ATM Malware ‘FiXS’ Emerges

• New HiatusRAT Malware Targets Business-Grade Routers to Covertly Spy on Victims

• GoodRx, Health Data Brokerage, and the Limits of HIPAA

• Where the New National Cybersecurity Strategy Differs From Past Practice

• The Role of Marketing and PR in Incident Response

• The Role of Verifiable Credentials In Preventing Account Compromise

• From Disinformation to Deep Fakes: How Threat Actors Manipulate Reality

• GoAnywhere MFT Zero Day Disclosures Seem Slow

• The Sketchy Plan To Build A Russian Android Phone

• Secret Service, ICE Break The Law Over And Over Again With Fake Cell Tower Spying

• Chick-fil-A Hack Spells Indigestion For 71K Customers

• FTC: BetterHelp Pushed Users To Share Mental Health Info Then Gave It To Facebook

• Consumers of Chick-fil-A had Grievances Following Account Takeovers

• Information of European Hotel Chain’s Customers Discovered in Unprotected Server

• Zoom Abruptly Fires President Greg Tomb

• Suprbay.org, The Pirate Bay Web Forum Down amid Cyberattack

• New Tool Made by Microsoft and Mitre Emulates Attacks on Machine Learning Systems

• US government orders States to conduct cyber security audits of public water systems

• European Police, FBI Bust International Cybercrime Gang

• Law Enforcement Triumphs DoppelPaymer Ransomware Gang

• PS4 Controller Won’t Charge – 10 Easy Fixes

• Visa Bolsters Cybersecurity Defenses with AI and Machine Learning

• Law enforcement teams score major win against DoppelPaymer ransomware gang

• What Is Domain Generation Algorithm? Definition and Role in Malware Attacks

• BetterHelp Accused of Sharing Mental Health Data with Advertisers

• Europe Envies America’s Cybersecurity Industry. What Can We Learn from It?

• Expanding Macroeconomic Pressure And Attack Surface Will Drive Security Automation In 2023

• ARM Disappoints UK With Decision To List Only In New York

• 557 CVEs Added to CISA’s Known Exploited Vulnerabilities Catalog in 2022

• Cybercrime Marketplace Leaks Over 2.1 Million Payment Cards

• BetterHelp Shared Users’ Sensitive Health Data, FTC Says

• Ransomware Operators Leak Data Allegedly Stolen From City of Oakland

• Core Members of DoppelPaymer Ransomware Gang Targeted in Germany and Ukraine

• Top Proxy Vendors USA 2023

• Why Your Business Needs IT Management

• This Algorithm Could Ruin Your Life

• New National Cybersecurity Strategy

• Experts Reveal Google Cloud Platform’s Blind Spot for Data Exfiltration Attacks

• Cloud-Native Threats in 2023

• How to Access and Sign In to an Old Hotmail Account – 7 Easy Steps

• Ericsson Pleads Guilty Over Bribery Charges, Axes 8,500 Jobs

• Cybersecurity M&A Roundup: 35 Deals Announced in February 2023

• Hatch Bank data breach caused by the exploitation of the GoAnywhere MFT zero-day

• PoC exploit for recently patched Microsoft Word RCE is public (CVE-2023-21716)

• BidenCash Leaks Database with Over 2 Million Stolen Credit Cards

• Prevention-focused SASE Solution is Here: Check Point leads the way, per new Miercom Report

• What is Malware as a Service (MaaS)?

• Stop Working in Silos: Integrating with APIs

• City of Oakland Faces Major Data Leak

• Critical Vulnerabilities Allow Hackers to Take Full Control of Wago PLCs

• UK Government Plans Skills Boost for Public Sector Fraud Fight

• Threat landscape for industrial automation systems for H2 2022

• TPM 2.0 Library Flaws May Affect Billions Of IoT Devices

• FTC Proposes $7.8m Fine for BetterHelp

• Experts Discover Flaw in U.S. Govt’s Chosen Quantum-Resistant Encryption Algorithm

• Software developers, how secure is your software?

• Colour-Blind, a fully featured info stealer and RAT in PyPI

• How to achieve and shore up cyber resilience in a recession

• 6 cybersecurity and privacy Firefox add-ons you need to know about

• Eye4Fraud – 16,000,591 breached accounts

• Third party Cybersecurity risks in securing the supply chain

• Stories from the SOC  – The case for human response actions

• Cisco to acquire Valtix

• Popular fintech apps expose valuable, exploitable secrets

• XIoT risk and the vulnerability landscape

• MQsTTang – Chinese Hackers Using Custom Malware To Evade AV Detection

• OneTrust Certification Automation helps businesses transcend traditional compliance barriers

• iD Tech – 415,121 breached accounts

• Where are the women in cyber security? On the dark side, study suggests

• Understanding Academic Software Solutions

Generated on 2023-03-07 23:55:25.899622