IT Security News Daily Summary 2023-03-25

• 4 Best dApp Frameworks for First-Time Ethereum Developers

• NCA infiltrates the cybercriminal underground with fake DDoS-for-hire sites

• Update – New Process for (ISC)² Exam Registration

• Pwn2Own Vancouver 2023 awarded $1,035,000 and a Tesla for 27 0-days

• GitHub Introduces the AI-powered Copilot X, which Uses OpenAI’s GPT-4 Model

• How to Shield Yourself From Malicious Websites

• Kimsuky’s Attacks Alerted German and South Korean Agencies

• Hackers Inject Weaponized JavaScript (JS) on 51,000 Websites

• Cropping Apps Can Expose Photos Online

• New Report on Current and Emerging Cyber Threats to Healthcare

• Password Hash Leakage

• India Shut Down Mobile Internet in Punjab Amid Manhunt for Amritpal Singh

• Okta Post-Exploitation Method Reveals User Passwords

• The “Why” Behind Tactics

• Rundown Of News And Events That Happened This Week

• The Impact of Technology and Digitalization on Global Business Mobility Visas – 2023 Guide

• U.K. National Crime Agency Sets Up Fake DDoS-For-Hire Sites to Catch Cybercriminals

• Build or Buy your own antivirus product

• Microsoft Warns of Stealthy Outlook Vulnerability Exploited by Russian Hackers

• OpenAI Reveals Redis Bug Behind ChatGPT User Data Exposure Incident

• Opti9 launches Observr ransomware detection and managed services for Veeam

• US Charges 20-Year-Old Head of Hacker Site BreachForums

• McAfee and Mastercard expand partnership to improve security for small businesses

• CISA announced the Pre-Ransomware Notifications initiative

• IT Security News Daily Summary 2023-03-24

• 4 Tips for Better AWS Cloud Workload Security

• Prevent Ransomware with Cybersecurity Monitoring

• Pack it Secretly: Earth Preta’s Updated Stealthy Strategies

• Diffusion models can be contaminated with backdoors, study finds

• DevSecOps puts security in the software cycle

• CyberSecure Announces Strategic Alliance

• Online Dating and Privacy: 6 Tips for Protecting Yourself in the Digital Age – 2023 Guide

• Why Tackling Financial Crime Calls for A Privacy-First Approach

• Why You Can’t Have True Zero Trust Without API Security

• Even after armed with defense tools, CISOs say successful cyberattacks are ‘inevitable’: New study

• GitHub’s Private RSA SSH Key Mistakenly Exposed in Public Repository

• Tesla Model 3 Hacked in Less Than 2 Minutes at Pwn2Own Contest

• China-linked hackers target telecommunication providers in the Middle East

• Friday Squid Blogging: Creating Batteries Out of Squid Cells

• ChatGPT Bug Exposed Payment Details of Paid Users

• 8 Best User & Entity Behavior Analytics (UEBA) Tools for 2023

• CISA gives ransomware victims a heads-up

• SMS pumping attacks and how to mitigate them

• How hackers outwit facial ID

• Zoom Zoom: ‘Dark Power’ Ransomware Extorts 10 Targets in Less Than a Month

• Yet Another Health Network Is Sued For Sharing Sensitive Patient Data With Facebook

• Malicious ChatGPT Extensions Add to Google Chrome Woes

• City of Toronto is one of the victims hacked by Clop gang using GoAnywhere zero-day

• CISA unleashes Untitled Goose Tool to honk at danger in Microsoft’s cloud

• How to slam the brakes on account takeover fraud

• Senators try again to advance software license bill

• UK’s NCA infiltrates cybercrime market with fake DDoS sites

• LinusTechTips YouTube channels hacked to promote cryptoscams

• New USP 5.0 Can Run 10K Cameras on Single System with Max Uptime

• Tesla Hacked Twice at Pwn2Own Exploit Contest

• Victory at the Ninth Circuit: Twitter’s Content Moderation is Not “State Action”

• Consumer Product Safety Commission failed to complete mandated future of work plan, report says

• WooCommerce Payments plugin for WordPress has an admin-level hole – patch now!

• Google and Microsoft are bringing AI to Word, Excel, Gmail and more. It could boost productivity for us – and cybercriminals

• CISA Unveils Ransomware Notification Initiative

• Food Giant Dole, Victim of a Ransomware Attack [Updated]

• WooCommerce Patches Critical Plugin Flaw Affecting Half a Million Sites

• Red Teaming at Scale to Uncover Your Big Unknowns

• GitHub publishes RSA SSH host keys by mistake, issues update

• AV-Comparatives Anti-Phishing Test | Avast

• Hacker demonstrates security flaws in GPT-4 just one day after launch

• ManageEngine AD360 New Nominee in 2023 ‘ASTORS’ Awards Program

• CISA Ships ‘Untitled Goose Tool’ to Hunt for Microsoft Azure Cloud Infections

• GitHub Updates Security Protocol For Operations Over SSH

• Journalist Plugs In Unknown USB Drive Mailed To Him – It Exploded In His Face

• Github Publishes RSA SSH Keys By Mistake, Issues Update

• French Parliament Says Oui To AI Surveillance For 2024 Olympics

• Fugitive Cryptocrash Boss Arrested In Montenegro

• House Leaders Don’t Want CISA’s Reach To Exceed Its Grasp

• Rewind brings ChatGPT into your personal life, but at what cost?

• GitHub Replaces Exposed RSA SSH Key To Keep Git Operations

• Myopenmath Answers: Tech Tips And Strategies For Success

• Killnet targeting healthcare apps hosted on Microsoft Azure

• Gambling is a tech industry. Are Nevada regulators up for the challenge?

• Critical WooCommerce Payments Vulnerability Leads to Site Takeover

• 8 cybersecurity conferences to attend in 2023

• three-factor authentication (3FA)

• Critical flaw in WooCommerce Payments plugin allows site takeover

• What Is Quishing: QR Code Phishing Explained

• Splunk Adds New Security Observability Features

• D.C. Circuit Hears Oral Argument in Bahlul v. United States

• Export Control is Not a Magic Bullet for Cyber Mercenaries

• Synopsys discover new vulnerability in Pluck Content Management System

• Cengage Mindtap Answers: A Guide To Improving Your Online Learning Experience

• Bill Gates Says AI is the Biggest Technological Advance in Decades

• Unpatched ICS Flaws in Critical Infrastructure: CISA Issues Alert

• Data Breach: Data of 168 Million Citizens Stolen and Sold, 7 Suspects Arrests

• Malicious ChatGPT Chrome Extension Steal Facebook Accounts

• Apple Supplier Pegatron Explores Second Factory In India – Report

• Journalist Targeted in USB Drive Bombing Attack

• Stop Using Spring Profiles Per Environment

• CISA Gets Proactive With New Pre-Ransomware Alerts

• PoC Exploit Published for Just-Patched Veeam Data Backup Solution Flaw

• Application Security Requires More Investment in Developer Education

• Malicious Python Package Uses Unicode Trickery to Evade Detection and Steal Data

• CISA releases free tool for detecting malicious activity in Microsoft cloud environments

• All Batman: Arkham Games in Order of Release Date – A Complete List

• Github publishes RSA SSH host keys by mistake, issues update

• New Attack Targets Online Customer Service Channels

• The right corporate structure is key to balancing risk and user experience

• WooCommerce Payments Plugin Patches Critical Vulnerability

• Chinese Hackers Infiltrate Middle Eastern Telecom Companies

• Find Out What Is a Logic Bomb. Definition, Characteristics, and Protection Measures

• Hacking contest Pwn2Own: Ubuntu, Tesla, macOs and Windows 11 cracked

• Understanding Managed Detection and Response and what to look for in an MDR solution

• Dole confirms employee data was breached following February ransomware attack

• Turning the Unamazing into the Amazing

• Terra Co-Founder Do Kwon Arrested In Montenegro

• TikTok CEO Grilled by Skeptical Lawmakers on Safety, Content

• Watch on Demand: Supply Chain & Third-Party Risk Summit Sessions

• THN Webinar: Inside the High Risk of 3rd-Party SaaS Apps

• Intel vPro platform unveils advanced security measures

• The Most Prevalent Types of Ransomware You Need to Know About

• GitHub Swiftly Replaces Exposed RSA SSH Key to Protect Git Operations

• Enhanced Version of the BlackGuard Stealer Spotted in the Wild

• Analysis: Will ChatGPT’s Perfect English Change the Game For Phishing Attacks?

• Is Private 5G the Future of Business Connectivity?

• Pwn2Own Vancouver 2023 Day 2: Microsoft Teams, Oracle VirtualBox, and Tesla hacked

• Exploding USB Sticks

• Silicon In Focus Podcast: The Cybersecurity Skills Gap

• Key Takeaways From TikTok’s CEO Grilling In US Congress

• Reliable SD-WAN Connectivity with Enterprise-Grade Security—The Best of Both Worlds

• Researchers Uncover Chinese Nation State Hackers’ Deceptive Attack Strategies

• The City of Toronto, Among This Week’s Victims of GoAnywhere Attacks

• The Importance Of Collaboration: A Look Into The Web Design Agency Process

• City Of Toronto Admits Data Theft, Clop Takes Blame

• Now UK Parliament Bans TikTok from its Network and Devices

• IRS Phishing Emails Used to Distribute Emotet

• Drive-by Download Attack – What It Is and How It Works

• Fifth of Execs Admit Security Flaws Cost Them New Biz

• Critical WooCommerce Payments Plugin Flaw Patched for 500,000+ WordPress Sites

• LATEST CYBERTHREATS AND ADVISORIES – MARCH 24, 2023

• Understanding metrics to measure SOC effectiveness

• Top ways attackers are targeting your endpoints

• New infosec products of the week: March 24, 2023

• MITRE’s System of Trust risk model manager improves supply chain resiliency

• Biggest data theft in world history takes place in India

• French parliament says oui to AI surveillance for 2024 Paris Olympics

• Streaming Platform Gaint Lionsgate Exposes Over 37m Users’ Data

• In uncertain times, organizations prioritize tech skills development

• Why organizations shouldn’t fold to cybercriminal requests

• TheGradCafe – 310,975 breached accounts

• Vectra Match helps security teams accelerate threat hunting and investigation workflows

• Zenoss improves security for user credentials with identity management capabilities

• mTLS Everywere

• Do Kwon, Founder of Terraform Labs, Arrested in Montenegro

• Brivo expands mobile credentials by adding employee badge to Apple Wallet

• Kasm collaborates with OCI to offer Workspaces for Oracle

• SecureAuth and HashiCorp join forces to deliver passwordless continuous authentication

• BlackBerry partners with Adobe to deliver secure forms with electronic signatures on mobile

• Uncle Sam reveals it sent cyber-soldiers to Albania to hunt for Iranian threats

• The TikTok Hearing Revealed That Congress Is the Problem

• Converting String to Enum at the Cost of 50 GB: CVE-2020-36620

• Beware: Fake IRS tax email delivers Emotet malware

• BreachForums to be shut down after all for fear of law enforcement infiltration

• Sophos XGS vs Fortinet FortiGate: Top NGFWs Compared

• The D.C. Circuit Gets Weird in the Mar-a-Lago Investigation

Generated on 2023-03-25 23:55:26.945308