IT Security News Daily Summary 2023-04-21

• Friday Squid Blogging: More on Squid Fishing

• Most multicloud troubles are self-inflicted, security researchers say

• How local governments can rise to the infrastructure complexity challenge

• Shields Health Breach Exposes 2.3M Users’ Data

• American Bar Association (ABA) suffered a data breach,1.4 million members impacted

• 7 Database Security Best Practices: Database Security Guide

• SSE Decoded: Answers to Your Questions About Secure Service Edge

• Common Vulnerability Scoring System (CVSS)

• ‘EvilExtractor’ All-in-One Stealer Campaign Targets Windows User Data

• North Korea’s Kimsuky APT Keeps Growing, Despite Public Outing

• TSA wants automated ID verification, ML detection algorithms at security gates

• API security becoming C-level cybersecurity concern

• Symantec: North Korean 3CX Hackers Also Hit Critical Infrastructure Orgs

• Intel Prioritizes Security in Latest vPro Chips

• EvilExtractor Infostealer Campaign Targeting Windows OS

• Chromium vulnerabilities threaten Electron app security

• How to vet your vendors: Ensuring data privacy and security compliance

• How Veza helps companies map data access and stop insider threats

• Transit agency’s cloud-based customer service boosts efficiency, visibility

• GhostToken GCP Bug Gives Entry To Attackers Into Google Accounts

• VMware patches break-and-enter hole in logging tools: update now!

• Hacking Pickleball

• Halcyon Secures $50M Funding for Anti-Ransomware Protection Platform

• China Building Cyberweapons To Hijack Enemy Satellites, Says US Leak

• DHS Announces AI Task Force, Security Sprint On China Related Threats

• WhatsApp Used In BEC Scam To Pilfer $6.4M

• APT Mint Sandstorm Quickly Exploits New PoC Hacks

• Shadow IT, SaaS Pose Security Liability for Enterprises

• Criminal Records Service Still Not Working Four Weeks After Cyber Attack

• A Corporate Secret is not Destroyed, it’s Discarded: Threat of Old Routers

• CFPB Employee Sends 256,000 Consumers’ Data to Personal Email

• Indian ICICI Bank data breach exposes 3.8 million customer information

• Identity and Access Management (IAM) in Payment Card Industry (PCI) Data Security Standard (DSS) environments.

• AI/ML advancements outpacing government policies, cyber experts warn

• Evil Extractor Targets Windows Devices to Steal Sensitive Data

• Arizona Teachers’ Sensitive Data Stolen in Ransomware Attack on TUSD

• Hackers are Employing This Top Remote Access Tool to Get Unauthorised Access to Your Company’s Networks

• DevSecOps: AI is reshaping developer roles, but it’s not all smooth sailing

• Trojanized Installers Used to Distribute Bumblebee Malware

• Security a top priority in the software development process, report finds

• Google Cloud Platform Vulnerability Led to Stealthy Account Backdoors

• Five Eyes Agencies Issue Cybersecurity Guidance for Smart Cities

• Abandoned WordPress Plugin Abused for Backdoor Deployment

• How to create an SBOM, with example and template

• Kubernetes RBAC Exploited in Large-Scale Campaign for Cryptocurrency Mining

• Pro-Russia hackers launched a massive attack against the EUROCONTROL agency

• Using the iPhone Recovery Key to Lock Owners Out of Their iPhones

• Cisco and VMware Issues Security Updates For Critical Flaws

• How the Talent Shortage Impacts Cybersecurity Leadership

• The Tangled Web of IR Strategies

• The Black Sea Grain Deal: Fragile Cooperation Between Ukraine and Russia

• Celebrities Lose Blue Ticks, As Twitter Purges Legacy Verified Accounts

• Open Questions After Halkbank

• ICICI Bank Data Leak – Millions of Customers’ Sensitive Data Exposed

• Malware is proliferating, but detection measures bear fruit: Mandiant

• 14 Kubernetes and Cloud Security Challenges and How to Solve Them

• GhostToken Flaw Could Let Attackers Hide Malicious Apps in Google Cloud Platform

• Alphabet To Merge AI Units Deepmind And Google Brain

• Stay Ahead of Cyberthreats with Proactive Threat Hunting

• US Medical Service Data Breach Impacts 2.3M People

• GitHub Announces New Security Improvements

• #CYBERUK23: Five Takeaways From the NCSC Conference on the UK’s Cyber Strategy

• Q1 2023 Cyber Attacks Statistics

• The Rise Of Online Betting Houses In Japan: A Threat To Society Or An Economic Opportunity?

• Microsoft To Remove Twitter From Advertising Platform, Musk Threatens Lawsuit

• Securing our Sustainable Future

• Top Considerations for Securing AWS Lambda, part 1

• Capita Confirms Data Breach After Ransomware Group Offers to Sell Stolen Information

• House Committee Hears Testimony on DC Health Data Breach

• The War on Passwords Enters a Chaotic New Phase

• N.K. Hackers Employ Matryoshka Doll-Style Cascading Supply Chain Attack on 3CX

• Cisco fixed critical flaws in the Industrial Network Director and Modeling Labs solutions

• Cybercriminals Abusing an Abandoned WordPress Plugin for Malicious Code Injection

• International cops urge Meta not to implement secure encryption for all

• The Best Crypto Games For Winning Big

• 3CX Cyber Attack: It Was The Aftermath Of Another Supply-Chain Attack

• 6 Best Marketing Data Extractor Tools for Your Business Needs

• Russian APT28 Group Exploiting Vulnerabilities in Cisco Routers

• Operation DreamJob – New Linux Malware Linked With 3CX Supply-Chain Attack

• Millions of Records With Sensitive Data Leaked by ICICI Bank

• Russia-linked APT28 Group Exploiting Vulnerabilities in Cisco Routers

• Government Agencies Release Blueprint for Secure Smart Cities

• China Developing Anti-Satellite Weapons – Report

• Intro to phishing: simulating attacks to build resiliency

• Healthcare organisations urged to improve system security

• Capita: Data Was Taken in March Cyber Incident

• The Ultimate Guide To Building A Passive Income Portfolio 2023

• 5 Best Airflow PC Cases to Buy in 2023 – Beat the Heat

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Is Twitter Blue Tick removal a data security concern

• Understanding the Different Types and How to Detect Them

• Thanks for fixing the computer lab. Now tell us why we shouldn’t expel you?

• Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products

• Scammers using social media to dupe people into becoming money mules

• New infosec products of the week: April 21, 2023

• The staying power of shadow IT, and how to combat risks related to it

• How Can You Identify and Prevent Insider Threats?

• Bugcrowd’s new self-serve PTaaS enable buyers to manage pen tests directly online

• Cofense Protect+ defends mid-size organizations from cyber threats

• Armorblox releases Graymail and Recon Attack Protection to stop malicious emails

• Sotero Ransomware Protection encrypts data to prevent theft and extortion

• Top three factors leading to burnout at work

• We’ve built A.I. and machine learning into our platform instead of ‘bolting’ them on: Software firm

• Catalyst Award

• Industry Eagle Award

• Government Eagle Award

• Infamous ransomware gang is now trying to target Mac users

• ChatGPT won’t take over from humans for now, says Infosys founder

• 3CX Breach Was a Double Supply Chain Compromise

• ChatGPT won’t take over from humans for now, says founder of Indian tech giant

• Talon Cyber Security collaborates with Microsoft to provide ChatGPT access

• Dashlane launches Confidential SSO powered by AWS Nitro Enclaves

• Intruder joins Google Cloud Partner Advantage program

• Orange Cyberdefense strengthens position in healthcare security sector

• Fancy Bear known to be exploiting vulnerability in Cisco routers

• FTC tackles tech support scams by chasing payment processor firms

• QBot changes tactic, remains a menace to business networks

• What your peers said: G2 comparison of top Endpoint Security vendors

• Multinational ICICI Bank leaks passports and credit card numbers

• Bitsight Expands into Integrated Cyber-Risk Management

• Infoblox Uncovers DNS Malware Toolkit & Urges Companies to Block Malicious Domains

• VMware fixed a critical flaw in vRealize that allows executing arbitrary code as root

• ‘GhostToken’ Opens Google Accounts to Permanent Infection

• Major US CFPB Data Breach Caused by Employee

• 3CX Supply Chain Attack Tied to Financial Trading App Breach

• Red Canary Announces Readiness

• Lazarus APT group employed Linux Malware in recent attacks and was linked to 3CX supply chain attack

• IT Security News Daily Summary 2023-04-20

• New Google Chrome Zero-Day Bug Actively Exploited in Wide – Emergency Update!

• One city’s unexpected open-data benefits

• International Law Enforcement Agencies Condemn Facebook Encryption Plans

• ChatGPT’s other risk: Oversharing confidential data

• Cyberattack accelerates county’s modernization, cloud push

• Fortra completes GoAnywhere MFT investigation

• Cybersecurity still ‘high risk’ in GAO’s book after over 25 years

• Best VPN for streaming TV and movies in 2023

• VMware Patches Pre-Auth Code Execution Flaw in Logging Product

• The Double-edged Sword of Hybrid Work

• Why data gravity is helping cloud providers become cybersecurity companies

• Report highlights procurement innovation hubs that may help achieve White House equity goals

• 6 Mac antivirus options to improve internet security

• S3 Ep131: Can you really have fun with FORTRAN?

• Trigona Ransomware Trolling for ‘Poorly Managed’ MS-SQL Servers

• SECURITY ALERT: Heimdal® Detects Massive MitID Smishing Campaign Targeting Nordea Bank Customers

• EU Agrees Comprehensive Framework For Crypto Regulation

• Data Encryption: Benefits, Types, and Methods

• Microsoft Will Name Threat Actors After Weather Events

• Tech Insight: Dangers of Using Large Language Models Before They Are Baked

• New Ransomware Attack Hits Health Insurer Point32Health

• Fletch raises $12.5 million for NLP engine to scan cyber threat landscape

• AI/ML advancements outpacing federal policies, cyber experts warn

• DC Health Link breach caused by misconfigured server

• Twitter’s 2FA Policy Is a Call for Passkey Disruption

• Experts disclosed two critical flaws in Alibaba cloud database services

• The EARN IT Bill Is Back, Seeking To Scan Our Messages and Photos

• Malware is proliferating, but defenses are stronger: Mandiant

• Microsoft Will Name APTs Actors After Weather Events

• North Korean Hacker Suspected in 3CX Software Supply Chain Attack

• Get ready for RSA 2023: Stronger Together

• SpaceX Starship Rocket Explodes After Launch

• What’s in Your Policy: Insurance Markets and Nation State Cyberattacks

• How prompt injection can hijack autonomous AI agents like Auto-GPT

• US charges three men with six million dollar business email compromise plot

• Daggerfly APT Targets African Telecoms Firm With New MgBot Malware

• Global Spyware Attacks Spotted Against Both New & Old iPhones

• ‘AuKill’ Malware Hunts & Kills EDR Processes

• Google TAG warns of Russia-linked APT groups targeting Ukraine

• Criminal Records Service Still Disrupted 4 Weeks After Hack

• Experts Warn Patching Won’t Protect Critical Infrastructure Against New Age Malware

• Another Supply Chain Attack Discovered During 3CX Investigation

• Crime Agencies Condemn Meta’s Encryption Plans

• Dragos OT-CERT Celebrates One Year of Service

• ChatGPT may be Able to Forecast Stock Movements, Finance Professor Demonstrates

• Microsoft Entra delivers 240 percent ROI, according to new Forrester study

• Cost of state cyber attacks not to be covered under insurance says Lloyd

• US teams up with partner nations to release smart city cyber guidance

• Ransomware Attack Hits Health Insurer Point32Health

• ChatGPT-Related Malicious URLs on the Rise

• Pillars of Threat Blocking-as-a-Service

• Triple Extortion and Erased Data are the New Ransomware Norm

• What Is a Vulnerability Assessment? Types, Steps & Benefits

• Two Critical Flaws Found in Alibaba Cloud’s PostgreSQL Databases

• Daggerfly Cyberattack Campaign Strikes African Telecom Providers

• Companies Affected by Ransomware [2022-2023]

• Sports And Fitness: How Fitness Apps Make Exercise Management Easier

• Jack Dorsey’s Twitter Clone, Bluesky, Launches On Android

• 3 iOS Zero-Click Exploits Exploited by NSO Group to Deploy Spyware

• ChatGPT Unbound

• How to Strengthen your Insider Threat Security

• LockBit Operators Target Apple MacOS Devices

• Air Force Unit in Document Leaks Case Loses Intel Mission

• Cisco Patches Critical Vulnerabilities in Industrial Network Director, Modeling Labs

• Cascading Supply Chain Attack: 3CX Hacked After Employee Downloaded Trojanized App

• Phylum Adds Open Policy Agent to Open Source Analysis Engine

• #CYBERUK23: UK Strengthens Cybersecurity Audits for Government Agencies

• GPT-4 Provides Improved Answers While Posing New Questions

• The Role Of Artificial Intelligence In Detecting And Preventing Problem Gambling In Online Casinos

• Domino Backdoor Malware Created by FIN7 and Ex-Conti

• Tesla Likely To Launch Full Self-Drive ‘This Year’, Says Elon Musk

• The best VPN services for iPhone and iPad in 2023

• Capita has ‘evidence’ customer data was stolen in digital burglary

• The Value of CYBERFORCE — Breakaway 1=5

• Iranian Hackers Target U.S. Energy and Transit Systems

• Seagate hit with $300 million penalty for $1 billion relationship with blacklisted firm Huawei

• Zaraza Malware Exploits Web Browsers To Steal Stored Passwords And Data

• APT43: An investigation into the North Korean group’s cybercrime operations

• Seagate To Pay $300m Penalty Over Huawei Exports

• Newer Authentication Tech a Priority for 2023

• Lazarus Group Adds Linux Malware to Arsenal in Operation Dream Job

• Beyond Traditional Security: NDR’s Pivotal Role in Safeguarding OT Networks

• The Developing Law of AI Regulation: A Turn to Risk Regulation

• UK government employees receive average of 2,246 malicious emails per year

• The Huge 3CX Breach Was Actually 2 Linked Supply Chain Attacks

• Raspberry Robin Adopts Initiates Evasion Techniques

• An earlier supply chain attack led to the 3CX supply chain attack, Mandiant says

• Mandiant: 3CX breach caused by second supply chain attack

• ChatGPT’s Data Protection Blind Spots and How Security Teams Can Solve Them

• Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks

• Russian Hacktivists Shifting Interest to Business Sector, UK Cyber-agency Warns

• Fortra Completes Investigation Into GoAnywhere Zero-Day Incident

• PaperCut Warns of Exploited Vulnerability in Print Management Solutions

• UK Warns of Russian Hackers Targeting Critical Infrastructure

• Proton Pass: new password manager announced

• Meta Lays Off Technical Staffers, In Another Workforce Blow

• Cloud Risk Mitigation: Putting it in Context

• FTC accuses payments firm of knowingly assisting tech support scammers

• Daggerfly Cyberattack Campaign Hits African Telecom Services Providers

• New Zero-Click Exploits Against iOS

• Top 5 Infrastructure as Code Security Challenges

• Cyber Threat Intelligence: The Power of Data

• How to update your router’s firmware (and why you should be doing it regularly)

• NSO Group Used 3 Zero-Click iPhone Exploits Against Human Rights Defenders

• Trigona Ransomware Deployed Through Vulnerable Microsoft SQL Servers

• What is a Customer Data Platform and How Does It Work?

• Google Patched Second Chrome Zero-Day Within A Week

• Preventing Malware & Cyber Attacks: Simple Tips for Your Computer

• Ex-Conti and FIN7 Hackers Team Up To Develop Domino Backdoor Malware

• Salt Security Announce New Investigation Capabilities to Help API Threat Detection

• Revamp Remote Working: The Ultimate Guide To Developing A Comprehensive Digital Communications Strategy

• Sideloading on iOS, Lockbit Ransomware on Mac, and Zero-Day Chrome Vulnerabilities – Intego Mac Podcast Episode 288

• DC Health Link Data Breach Blamed on Human Error

• #CYBERUK23: Russian Cyber Offensive Exhibits ‘Unprecedented’ Speed and Agility

• Recycled Network Devices Exposing Corporate Secrets

• The importance of independent third-party testing of anti-malware solutions

• Designing user management for machine-to-machine interactions

• Critical Infrastructure Firms Concerned Over Insider Threat

• SIEM vs XDR: A Comparison of Two Advanced Detection and Response Solutions

• AI defenders ready to foil AI-armed attackers

• Commscope Ransomware Attack Exposes Sensitive Employee Data

• Small Business Interest in Cyber-Hygiene is Waning

• Protect the Industrial Control Systems (ICS)

• Trigona Ransomware targets Microsoft SQL servers

• Do you know what your supply chain is and if it is secure?

• Protecting Gig Identities – The 7 CIAM Capabilities You Need

• PCI DSS reporting details to ensure when contracting quarterly CDE tests

• ChatGPT Account Takeover Bug Allows Hackers To Gain User’s Online Account

• Trending Google news headlines on Ransomware, Penalties and Espionage

• The biggest data security blind spot: Authorization

• 1Password ending support for classic browser extensions

• Used Routers Fully Loaded With Corporate Secrets for Just $100

• CISOs struggling to protect sensitive data records

• How companies are struggling to build and run effective cybersecurity programs

• Urgent: 2nd Chrome zero-day vulnerability patched in 5 days

• Venafi Firefly enhances the security of machine identities for cloud-native applications

• NICE Actimize launches SAM-10 to detect suspicious activity while reducing false positives

• Picus Security expands its CTEM solution with CAASM and CSPM capabilities

• IT and business services market shows resilience with positive growth outlook

• Outdated cybersecurity practices leave door open for criminals

• Tentacle AI Control Mapping enables organizations to centralize security information

• VMware Cross-Cloud managed services helps customers secure multi-cloud environments

• Daon unveils TrustX platform for identity proofing and authentication

• Oracle updates Fusion Cloud Applications Suite with automation capabilities

• Digi WAN Bonding delivers bonded Gigabit internet speeds and improved connection reliability

• Web3 Onboarding Is Terrible: How To Make It Better With Account Abstraction and Flow

• Dominion v. Fox Is Just the Beginning

• LogRhythm and Zscaler integration streamlines website access control

• Instagram scam promises money in exchange for your image

• Malware authors join forces and target organisations with Domino Backdoor

• Introducing the Malwarebytes Admin app: Endpoint security at your fingertips

Generated on 2023-04-21 23:55:26.285230