IT Security News Daily Summary 2023-04-19

• GlobalFoundries Sues IBM, Again

• Coro raises $75M for all-in-one platform to tackle SOC complexity

• Portnox Cloud: NAC Product Review

• European Union Finalises €43bn Chips Act

• The top 20 zero-trust startups to watch in 2023

• Inside one state’s decade-long effort to map broadband availability

• IoT network insights drive smart city planning

• Risk management through resilient technology

• How to prepare for a cybersecurity audit

• Facebook Scores Rare Win In Privacy Case

• CrowdStrike turns to managed XDR to help orgs navigate the cyber skills gap

• House Democrats bring back customer experience bill targeting student loan, passport updates

• CrowdStrike Announces Managed XDR to Close the Cybersecurity Skills Gap, Expands MDR Portfolio

• Coro Raises an Additional $75M Bringing the Total Raised to $155M in 12 Months

• Spyware slinger QuaDream’s reported demise may be the canary in the coal mine

• Point32Health confirms service disruption due to ransomware

• Dashlane releases ‘first’ SSO powered by confidential computing

• The Hacker Who Hijacked Matt Walsh’s Twitter Was Just ‘Bored’

• The Hacker Who Hijacked Matt Walsh’s Twitter Was Just ‘Bored’

• Want a Flipper Zero without paying inflated prices? Now’s your chance

• Google fixed the second actively exploited Chrome zero-day of 2023

• Guidance on network and data flow diagrams for PCI DSS compliance

• Chinese fraudsters: evading detection and monetizing stolen credit card information

• Security at the Masters

• cloud workload protection

• How to defend against TCP port 445 and other SMB exploits

• OT Zero Trust

• Diving Into Cloud Infrastructure: An Exploration of Its Different Components

• The best VPN trials of 2023: Top VPNs to test for free

• #CYBERUK23: Threat Posed by ‘Irresponsible’ Use of Commercial Hacking Tools Increasing, NCSC Warns

• Iranian Nation-State Actor “Mint Sandstorm” Weaponizes N-day Flaws

• Gary Bowser, Former Nintendo Hacker, Released From Prison

• Dominion v. Fox is Just the Beginning

• If you have a tell-a-friend feature on your website, disable it right now

• GitHub debuts pedigree check for npm packages via Actions

• Investors Bet Big on Safe Security for Cyber Risk Management

• Raspberry Robin Adopts Unique Evasion Techniques

• Blind Eagle Cyber Espionage Group Strikes Again: New Attack Chain Uncovered

• Google TAG Warns of Russian Hackers Conducting Phishing Attacks in Ukraine

• Auditing Algorithms for Responsible AI

• Kidnapping Scam Implicates AI Cloning

• Simplified endpoint management with Microsoft Intune Suite: Adopting a long-term approach with intelligence and automation

• Facebook introduces new AI model capable of detecting objects in images

• US must be more aware of ‘adversarial side’ of AI, DHS official warns

• Nurse Call Systems, Infusion Pumps Riskiest Connected Medical Devices

• Call for Papers: The University of Texas at Austin Announces the 2023 “Bobby R. Inman Award” for Student Scholarship on Intelligence

• Google Chrome Hit By Second Zero-Day Attack, Urgent Patch Update Released

• These medical IoT devices carry the biggest security risks

• Dasera Scores $12M Funding for Cloud Data Security

• Russian Man Who Laundered Money for Ryuk Ransomware Gang Sentenced

• Popular Fitness Apps Leak Location Data Even When Users Set Privacy Zones

• US and UK agencies warn of Russia-linked APT28 exploiting Cisco router flaws

• Google Chrome Hit By Second Zero-Day Attack – Urgent Patch Update Released

• Tornado vs. FastAPI: Why We Made the Switch

• firewall

• Akamai Technologies to Acquire API Security Company Neosec

• Imperva and Kong Partner to Bring API Security to the Gateway for Enhanced API Management

• How to Spot and Avoid Phishing Scams While Gambling Online

• Google’s Pixel Fold, Set For June Launch – Report

• Hackers Storing Malware in Google Drive as Encrypted ZIP Files To Evade Detection

• 9 Top Network Access Control (NAC) Solutions for 2023

• How to Prevent 2 Common Attacks on MFA

• Google Chrome Hit by Second Zero-Day Attack – Urgent Patch Update Released

• The Mentality That Finland’s Mandatory Military Service Brings to NATO

• ChatGPT’s Cybersecurity Threats and How to Mitigate Them

• The Importance of Accessible and Inclusive Cybersecurity

• Enterprises Exposed to Hacker Attacks Due to Failure to Wipe Discarded Routers

• NSO Group Escalates Spyware Tactics With 3 New iPhone Zero-Click Exploit Chains

• Four Charged With Pushing Pro-Kremlin Disinfo, Election Interference

• Russian Snoops Just Love Invading Unpatched Cisco Gear, America And UK Warn

• Russia-linked Hackers Want To ‘Destroy’ UK, Minister Warns

• #CYBERUK23: NCSC Urges International Collaboration to Build Cyber Resilience

• Oracle Releases 433 New Security Patches With April 2023 CPU

• Google Patches Second Chrome Zero-Day Vulnerability of 2023

• Pakistani Hackers Use Linux Malware Poseidon to Target Indian Government Agencies

• Top 7 data loss prevention tools for 2023

• APT28 Russian Hackers Inject Routers with Jaguar Tooth Custom Malware

• US Company CommScope Hit by Ransomware

• Are public USB charging stations to be trusted?

• How ChatGPT—and Bots Like It—Can Spread Malware

• Uncovering (and Understanding) the Hidden Risks of SaaS Apps

• Iran-linked Mint Sandstorm APT targeted US critical infrastructure

• Electric Vs. Manual Gaming Desks: Which Is Right For You – 2023 Guide

• US, UK: Russia Exploiting Old Vulnerability to Hack Cisco Routers

• Microsoft: Iranian Hackers Moved From Recon to Targeting US Critical Infrastructure

• Coro Raises $75 Million for Mid-Market Cybersecurity Platform

• U.S. and U.K. Warn of Russian Hackers Exploiting Cisco Router Flaws for Espionage

• EFF on the UN Cybercrime Treaty

• Prioritize what matters most

• UK Government To Deliver Crypto Laws In Next 12 Months – Report

• Hackers Using Old Nokia 3310 Phone to Start Car Without Key

• Police Escape $1.2m Fine For Secretly Recording Phone Calls

• Why Cybercriminals Love The Rust Programming Language

• Privilege Elevation and Delegation Management (PEDM) Explained: Definition, Benefits and More

• Microsoft’s new naming convention for threat groups sound like an order at a cocktail bar

• EPA Has ‘New Rules’ for Protecting Public Drinking Water

• Electrical Grid Security: NERC CIP, Cyber Threats and Key Challenges

• Triple-digit Increase in API and App Attacks on Tech and Retail

• Researchers discover sensitive corporate data on decommissioned routers

• How To Install Shqiperia Chat In PC ( Windows 7, 8, 10, and Mac )

• Netflix Ends DVD By Post, Amid Password-Sharing Crackdown

• These medical IoT devices carry biggest security risks

• NCSC Warns of Destructive Russian Attacks on Critical Infrastructure

• Why performing security testing on your products and systems is a good idea

• Iranian Government-Backed Hackers Targeting U.S. Energy and Transit Systems

• Auto-GPT: New autonomous ‘AI agents’ Can Act Independently & Modify Their Own Code

• The State of Kubernetes Security in 2023

• 5 free online cybersecurity resources for small businesses

• Over 25 billion email address and phone numbers available on dark web and Putin hacking British Power Network

• Is it time to move to a Passwordless future

• PWNYOURHOME, FINDMYPWN, LATENTIMAGE: 3 iOS Zero-Click exploits used by NSO Group in 2022

• Critical Flaws in vm2 JavaScript Library Can Lead to Remote Code Execution

• Quantifying cyber risk vital for business survival

• Ransomware reinfection and its impact on businesses

• Security beyond software: The open source hardware security evolution

• 10 Reasons why businesses need mobile device management (MDM)

• Versa Zero Trust Everywhere strengthens security posture for onsite, remote and hybrid workers

• Tight budgets and burnout push enterprises to outsource cybersecurity

• Veracode Fix helps organizations tackle software security issues

• Phylum adds OPA and continuous reporting to its policy engine

• Armis enables enterprises to identify gaps in security controls with CAASM enhancements

• LastPass University improves password management habits

• Edgio Advanced Bot Management protects users against bot attacks

• Goldoson Android Malware Found in 60 Apps with 100M Downloads

• SIMS a Returning ‘ASTORS’ Sponsor: ‘State of 2023 Facility Security Officer’

• BlackCat (ALPHV) Gang Claims Ransomware Attack on NCR Data Center

• Payment giant’s point-of-sale outage caused by ALPHV ransomware

• Spring cleaning tips for your browser

• Avoid this “lost injured dog” Facebook hoax

• Swatting-as-a-Service is a growing and complicated problem to solve

• LockBit ransomware on Mac: Should we worry?

• Styra appoints Mark Pundsack as CEO

• DigiCert launches new partner program to deliver digital trust

• Allurity acquires CloudComputing and Securix to expand into new markets

• Swimlane collaborates with AWS to accelerate investigation and response when threats occur

• US citizens charged with pushing pro-Kremlin disinfo, election interference

• Scammers target older people online. Here are the 3 warning signs to watch for

• ‘ASTORS’ Sponsor SIMS Software ‘State of 2023 Facility Security Officer’

• Report: Facebook Ignored Reported Hate Speech That Led To Murder

• Netwrix Annual Security Survey: 68% of Organizations Experienced a Cyberattack Within the Last 12 Months

• Report: Over Half of North American Consumers Are Open to Passwordless

• Cyberattacks Can Cost Enterprises Up to 30% of Operating Income According to ThreatConnect

• IT Security News Daily Summary 2023-04-18

• NSO Group is Back in Business With 3 New iOS Zero-Click Exploits

• Marlinspike Adds Charles Carmakal to its Advisory Board

• KnowBe4 Phishing Test Results Reveal IT and Online Services Emails Drive Dangerous Attack Trend

• Giving a Face to the Malware Proxy Service ‘Faceless’

• Russian snoops just love invading unpatched Cisco gear, America and UK warn

• What is Spear Phishing Attack? – Guide for Motives, Techniques & Prevention Methods

• Wanted: 3D mapping drones for indoor search and rescue

• QBot Expands Initial Access Malware Strategy With PDF-WSF Combo

• DoNot APT Hackers Attack Individuals Using Android Malware via Chatting Apps

• GAO says Army procurement plans to replace aging helicopter fleet don’t have credible cost estimates

• Not all encryption is created equal

• Breaking the Wall Between Dev, Sec, and Ops

• Learn To Become a Web3 Developer by Exploring the Web3 Stack

• EU Cyber Solidarity Act aims to establish a ‘European cybersecurity shield’

• New York City to weigh strict facial recognition ban

• Microsoft opens up Defender threat intel library with file hash, URL search

• 10 best antivirus software for businesses in 2023

• Researchers Discover First Ever Major Ransomware Targeting macOS

• OpenShift vs. Kubernetes: The Unfair Battle

• Cybersecurity Consolidation — What It Is and Why You Should Care

• New DDoS attacks on Israel’s enterprises, infrastructure should be a wake-up call

• Experts temporarily disrupted the RedLine Stealer operations

• Microsoft Vulnerability Severity Classification for Online Services Publication

• Payments firm accused of aiding ‘contact Microsoft about a virus’ scammers must cough $650k

• Report: Security teams take an average of 6 days to resolve alerts

• Standardized data collection methods can help fight cybercrime

• Where There’s No Code, There’s No SDLC

• On Tax Day, it’s time for a more equitable and accessible way to file

• Tanium Helps to Increase Employee Satisfaction and Productivity with DEX

• Ex-CEO of breached pyschotherapy clinic gets prison sentence for bad data security

• APT41 Taps Google Red Teaming Tool in Targeted Info-Stealing Attacks

• Goldoson Malware Hits 100 Million Downloads On Google Play Store

• Demystifying Data Fabric Architecture: A Comprehensive Overview

• Secure-by-Design: A 2023 Cybersecurity Prime

• GSA unveils new USA.gov websites

• Virginia election officials change process for removing dead people from voter rolls

• New ‘Domino’ Malware Linked to FIN7 Group, Ex-Conti Members

• Takedown of GitHub Repositories Disrupts RedLine Malware Operations

• Why Your Anti-Fraud, Identity & Cybersecurity Efforts Should Be Merged

• Chrome, Edge Browsers Targeted In Zaraza Bot Malware Attacks

• The Car Thieves Using Tech Disguised Inside Of Old Nokia Phones And Bluetooth Speakers

• New Lockbit Variant Targets MacOS, Another Relies On Conti Source Code

• Hikvision Denies Leaked Pentagon Spy Claim

• Digital Rights Updates with EFFector 35.5

• The best home automation systems of 2023

• Goldoson Malware Found in Dozens of Google Play Store Apps

• ‘Goldoson’ Malware Sneaks into Google Play Apps, Racks Up 100M Downloads

• KOTRA and KISIA will showcase 10 Korean cybersecurity companies at RSA Conference 2023

• Securely Hosting User Data in Modern Web Applications

• Cyber Attack news headlines trending on Google

• New resources to defend public health systems against cyber threats

• NSO Group Used at Least 3 iOS Zero-Click Exploits in 2022: Citizen Lab

• SpecterOps Scores $25M Funding to Secure ID Attack Paths

• MuddyWater Uses SimpleHelp to Target Critical Infrastructure Firms

• Armis Identifies the Riskiest Medical and IoT Devices in Clinical Environments

• Payment Processing Giant NCR Global Hit By Ransomware Attack

• NSO Group’s Pegasus Spyware Found on High-Risk iPhones

• Armis Announces Significant Business Momentum in Healthcare

• You Should Be Concerned Regarding Browser Modifiers; Here’s Why

• Elon Musk Says He’ll Create ‘TruthGPT’ to Counter AI ‘Bias’

• Hackers Exploit Action1 RMM in Ransomware Attacks

• Latitude Financial Breaches Customer Data, Coles Warns

• Nation-state threat actor Mint Sandstorm refines tradecraft to attack high-value targets

• Microsoft shifts to a new threat actor naming taxonomy

• New DDoS attacks on Israel’s enterprises should be a wake-up call

• YouTube Videos Distributing Aurora Stealer Malware via Highly Evasive Loader

• The Manhattan District Attorney Sued Jim Jordan. Why? And What Now?

• Water Wars: AUKUS Goes Nuclear

• Beyond CVEs: The Key to Mitigating High-Risk Security Exposures

• CISA adds bugs in Chrome and macOS to its Known Exploited Vulnerabilities catalog

• Phishing Operations Escalating As Threat Actors Utilize AI Tools

• How Online Casinos Partner With Video Game Developers To Create Unique Gaming Experiences ?

• Brit cops rapped over app that recorded 200k phone calls

• Swedish Radio Quits Twitter, Joining Others

• Securing Your Remote Workforce: How to Reduce Cyber Threats

• Lockr Raises $2.5 Million for Identity and Data Protection Platform

• Mandiant 2023 M-Trends Report Provides Factual Analysis of Emerging Threat Trends

• Recycled Core Routers Exposed Sensitive Corporate Network Info

• Alibaba Integrates AI Chatbot Into Collaboration App

• Mandiant: 63% of breaches were discovered externally in 2022

• Cyber Intrusion Detection Time at an All-Time Low

• ZeroFox Acquires LookingGlass

• As Consumer Privacy Evolves, Here’s How You Can Stay Ahead of Regulations

• New Solution: Learn Enterprise

• Guarding Against Insider Threats

• 10 Best Anonymous Instagram Story Viewer Apps (Free and Legal)

• Cyberinsurance Backstop: Can the Industry Survive Without One?

• Used Routers Often Come Loaded With Corporate Secrets

• Goldoson Android Malware Infects Over 100 Million Google Play Store Downloads

• SpecterOps raises $25M for attack path analysis to show hacker’s perspective

• DFIR via XDR: How to expedite your investigations with a DFIRent approach

• Apple MacOS Devices Now Subject Of LockBit Ransomware

• TUC Warns Workers Left Exposed To AI-Made Decisions

• WhatsApp, Signal Claim Online Safety Bill Threatens User Privacy and Safety

• Using LLMs to Create Bioweapons

• Wrong time to weaken encryption, UK IT chartered institute tells government

• Tim Cook Opens First Apple Store In India

• Retail Giant Walmart Ranks First in List of Brands Most Likely to be Imitated in Phishing Attempts in Q1 2023

• Cybersecurity M&A Roundup for April 1-15, 2023

• CISA Adds Chrome, macOS Bugs to Known Exploited Vulnerabilities Catalog

• Rheinmetall Suffers Another Cyberattack – Company Operations Still Functional

• New ”Domino” Malware Strain Targets Corporate Networks

• Iranian Hackers Using SimpleHelp Remote Support Software for Persistent Access

• Malware found in James Webb Space Telescope revealed by US President Joe Biden

• Hikvision Denies Illegally Supplying US Government

• Embracing Automation to Unlock New Innovations

• Cloud Security Alerts Take Six Days to Resolve

• The intricate relationships between the FIN7 group and members of the Conti ransomware gang

• Creative Software Maker Affinity Informs Customers of Forum Breach

• An Analysis of the BabLock (aka Rorschach) Ransomware

• 5 Types of Cyber Crime Groups

• WhatsApp, Other Messaging Firms Urge Online Safety Bill ‘Rethink’

• Digital Home Hygiene Checklist | Avast

• Fortra: Your Cybersecurity Ally

• A Day in the Life of a SOC Team

• Conversational Attacks Fastest Growing Mobile Threat

• How To Install Happymod In PC ( Windows 7, 8, 10, 11, and Mac )

• UK’s SMEs to Benefit From New Cyber Advisors

• March 2023 Cyber Attacks Statistics

• Ransomware Hackers Steal Sensitive Charity Data

• Quest Software Podcast: The Democratisation of Data: Episode 3: Management, Trust, and Visibility

• After BlackCat Ransomware Attack, NCR Suffers Aloha POS Outage

• Need to improve the detection capabilities in your security products?

• LockBit Ransomware Now Targeting Apple macOS Devices

• RSA Conference 2023: Meet Thales Where the World Talks Security!

• Podcast Episode: Safer Sex Work Makes a Safer Internet

• Capita IT breach gets worse as Black Basta claims it’s now selling off stolen data

• Phishing Attacks Surge as Threat Actors Leverage New AI Tools

• New Android Malware Infecting 60 Google Play Apps with Over 100M Installs

• Israeli surveillance firm QuaDream is shutting down amidst spyware accusations

• Wargaming an effective data breach playbook

• US alleges China created troll army that tried to have dissidents booted from Zoom

• Implementing a zero-trust system that uses workload identity across a service mesh in Kubernetes

• Imperva is an Overall Leader in the 2023 KuppingerCole Leadership Compass Data Security Platforms Report

• Pre-pandemic techniques are fueling record fraud rates

• Balancing cybersecurity with business priorities: Advice for Boards

• Military helicopter crash blamed on failure to apply software patch

• D3 Security Smart SOAR improves response to incidents

• Battery Bird protects customers from vulnerabilities in public Wifi networks

• Zyxel SCR 50AXE boosts network security for small businesses and remote workers

• Imperva collaborates with Fortanix to provide end-to-end data security

• LockBit Ransomware Expands Attack Spectrum to Mac Devices

• Woman tracks down and turns table on Airbnb scammer

• Update Chrome now! Google patches actively exploited flaw

• Beware: Fake IRS tax email wants your Microsoft account

• Ransomware in Germany, April 2022 – March 2023

• Living Off the Land (LOTL) attacks: Detecting ransomware gangs hiding in plain sight

Generated on 2023-04-19 23:55:25.453116