IT Security News Daily Summary 2023-04-24

• Analysis paralysis: When too much data reduces decision-making

• Security Experts Warn About New Scam Involving Hackers Who Impersonate Facebook

• California Bill to Stop Dragnet Surveillance of People Seeking Reproductive and Gender-Affirming Care Passes Key Committees

• ZScaler and Robrik CEOs on securing the cloud through new partnership

• How fiends abuse an out-of-date Microsoft Windows driver to infect victims

• DHS outlines cyber priorities in release of delayed review

• How a shift to the cloud streamlined one state’s professional licensing

• Google Workspace Extends Enterprise-Grade Security and Device Management for Hybrid Work With Okta and VMware

• Beyond Anti-Virus ‘Shark Nets’: Why Current Approaches to Cybersecurity Need to Change

• ImmuniWeb AI Platform

• How this gang abuses an out-of-date Microsoft Windows driver to infect victims

• NIST sets sights on implementing identity provisions from the CHIPS Act

• Misconfigured Registries: Security Researchers Find 250 Million Artifacts Exposed

• First US Appellate Court to Decide Finds Geofence Warrant Unconstitutional

• How Cyber Insurance Changed Cybersecurity

• Is the Biden administration’s management agenda getting back on track?

• Investors Place Early $4 Million Bet on Stack Identity

• Experts released PoC Exploit code for actively exploited PaperCut flaw

• SPanel: Taking Website Security to the Next Level

• If you haven’t patched Microsoft Process Explorer, prepare to be pwned

• AI-generated spam may soon be flooding your inbox – and it will be personalized to be especially persuasive

• North Korean Foreign Trade Bank Representative Charged in Crypto Laundering Conspiracies

• KuCoin Twitter Account Hacked, Losses $22.6K In Crypto Scam

• Huntress: Most PaperCut Installations Not Patched Against Already-Exploited Security Flaw

• Adrian Stone Joins Moderna as CISO

• Double zero-day in Chrome and Edge – check your versions now!

• #RSAC: Computer Science Courses Must Teach Cybersecurity to Meet US Government Goals

• Intel Let Google Cloud Hack Its New Secure Chips and Found 10 Bugs

• Don’t let manual processes hold you back, automate your AppSec

• Google Authenticator now supports Google Account synchronization

• Stay compliant and protect sensitive data with Zero Trust security

• Securing the Edge Ecosystem Global Research released – Complimentary report available

• Microsoft launches bug bounty program for the new Bing

• Scammers Impersonate Meta in Facebook Campaign With 3200 Profiles

• Google Cloud Announces New Security AI Workbench and Ecosystem Expansion at RSAC 2023

• Proton Launches ProtonPass Password Manager With E2E Encryption

• Mullvad VPN Received Data Warrant – Had None To Share

• Introducing VirusTotal Code Insight: Empowering threat analysis with generative AI

• Google releases security LLM at RSAC to rival Microsoft’s GPT-4-based copilot

• Incident response policy

• RSA Conference 2023 highlights strength through alliances

• US Navy Contractor Fincantieri Marine Group Hit by Cyber-attack

• ZeroFox to Acquire LookingGlass, Broadening Global Attack Surface Intelligence Capabilities

• Akamai Brand Protector defends against phishing attacks and fake websites

• Flashpoint Ignite accelerates cross-functional risk mitigation and prevention

• D3 Security MSSP Client Portal simplifies information sharing between MSSPs and clients

• DNS Layer Security Explained. How It Stops Ransomware and Other Cyberattacks

• Getting started with the CDMC framework—Microsoft’s guide to cloud data management

• How to make sure the reputation of your products and company is good

• SSD with in-built ransomware prevention capabilities

• DHS announces first-ever AI task force

• Gmail App Passwords: What they are, how to create one, and why to use them

• Tomiris and Turla APT Groups Collaborate to Target Government Entities

• Cisco Unveils Solution to Rapidly Detect Advanced Cyber Threats and Automate Response

• Avoiding Mandatory Transparency’s Pitfalls in Online Safety Legislation

• The Supreme Court’s Halkbank Decision Explained

• Tourist Cyber Threats Exposed: Where and When to Use a Travel VPN

• ChatGPT: A Game-Changer or a Cybersecurity Threat

• The IRS is Deploying Four Investigators Across the Globe to Combat Cybercrime

• The Needs of a Modernized SOC for Hybrid Cloud

• SentinelOne experiments with GPT-4 as part of new threat hunting platform

• North Korean Hackers Target Mac Users With New ‘RustBucket’ Malware

• New Data Sharing Platform Serves as Early Warning System for OT Security Threats

• Capita Admits Data Stolen During Cyberattack

• Pro-Russian Hackers Target European Air Traffic Control

• GhostToken Vuln Could Permanently Expose Data Of Google Users

• If You Haven’t Patched Microsoft Process Explorer, Prepare To Get Pwned

• The Incidence of EvilExtractor Malware Rises Across Europe and the U.S.

• EFF and ECNL’s Comment to the Meta Oversight Board on the Term ‘Shaheed’

• 10 Best Practices for Using Kubernetes Network Policies

• Ransomware Hackers Using AuKill Tool to Disable EDR Software Using BYOVD Attack

• Russian Hackers Tomiris Targeting Central Asia for Intelligence Gathering

• 3CX breach linked to previous supply chain compromise

• Organizations are stepping up their game against cyber threats

• Trellix Threat Intelligence enhancements accelerate threat analysis and response

• How To Build Your Online Course And Get Some Profit Out Of It?

• UK Government Pledges £100m For AI Taskforce

• These two countries are teaming up to develop AI for cybersecurity

• Cybersecurity Survival: Hide From Adversarial AI

• EvilExtractor, a new All-in-One info stealer appeared on the Dark Web

• China To Explore 3D Printing For Moon Base

• CrowdStrike Introduces CrowdStream to Accelerate and Simplify XDR Adoption

• Palo Alto Networks Takes Aim At Cyberattacks With the Expansion of Unit 42’s Digital Forensics & Incident Response Service Globally

• Rethinking Safer AI: Can There Really Be a ‘TruthGPT’?

• Zimperium Launches Unified Mobile Security Platform for Threat Detection, Visibility, and Response

• Hackers Abuse Outdated Eval PHP WordPress Plugin To Deploy Backdoors

• Machine Learning and Deep Learning with GPU servers

• Evil Extractor Infostealer Targets Windows In Recent Phishing Campaign

• Attackers Abuse Kubernetes RBAC to Deploy Persistent Backdoor

• Hackers Exploit Outdated WordPress Plugin to Backdoor Thousands of WordPress Sites

• Study: 84% of Companies Use Breached SaaS Applications – Here’s How to Fix it for Free!

• Russian cybercrime group likely behind ongoing exploitation of PaperCut flaws

• Cato Networks Introduces Instant RBI Featuring Single-Click Activation

• Enterprise-Attacking Malware Toolkit Analyzing 70 Billion DNS Queries Daily

• 5 Years On: What did we learn from the Government Cryptojacking Attack?

• External Signs of Narcissism – Raising Awareness to Avoid Collateral Damage

• SolarWinds Platform Update Patches High-Severity Vulnerabilities

• Critical Flaw in Inea ICS Product Exposes Industrial Organizations to Remote Attacks

• Yellow Pages Canada Alerts of Cyberattack As Black Basta Leaks Data

• Threat Actors Can Use Old Routers’ Data to Breach Corporate Networks

• US Urges South Korea Not To Fill Micron Shortfall In China

• Silicon In Focus Podcast: How Green is Your Tech Budget?

• Former OpenSea Employee Faces Criminal Charges Over NFT Trades

• If you haven’t patched Microsoft Process Explorer, prepare to get pwned

• Outpost24 Appoints New Chief Strategy Officer

• VMware plugs security holes in VMware Aria Operations for Logs (CVE-2023-20864, CVE-2023-20865)

• Securing Your Business Through Advanced Detection Technology

• The Future Of ‘fortnite’ Is In The Hands Of Its Players

• Ireland is the next country to ban TikTok

• ViperSoftX Updates Encryption, Steals Data

• UK Threatens End-to-End Encryption

• Does my local police station use face recognition?

• 38 Countries Take Part in NATO’s 2023 Locked Shields Cyber Exercise

• 7 Security Tips When Setting Up Your Smart Home

• Lockbit Ransomware Aims To Target macOS Systems – But May Not Be As Successful

• GhostToken Zero-Day Vulnerability Found In Google Cloud

• Budget Shopping App Temu Launches In Europe

• Ghosttoken – A Zero-Day Bug Let Hackers Create Invisible Google Accounts

• Cloud Complexity Means Bugs Are Missed in Testing

• Ofcom Finds Millions Missing Out On Cheaper Broadband

• Twitter Restores Blue Ticks For High-Profile Users

• The K-12 Report: A Cybersecurity Assessment of the 2021-2022 School Year

• Spring is the Perfect Season for a Digital Declutter

• American Bar Association Breach Hits 1.5 Million Members

• Hackers can hack organizations using data found on their discarded enterprise network equipment

• How product security reached maturity

• Resecurity to showcase innovative cybersecurity solutions at RSA Conference 2023

• 3CX Hackers Also Compromised Critical Infrastructure Firms

• Tomiris called, they want their Turla malware back

• Software developers, how secure is your software?

• New All-in-One “EvilExtractor” Stealer for Windows Systems Surfaces on the Dark Web

• Tails Operating System: The Means To Privacy and Security On Internet

• Russian Hackers Suspected in Ongoing Exploitation of Unpatched PaperCut Servers

• A third-party’s perspective on third-party InfoSec risk management

• Unlocking the passwordless era

• Lung Cancer detection possible 10 Years prior with AI

• What is offensive Cyber Capabilities

• Over 70 billion unprotected files available on unsecured web servers

• How CISOs navigate security and compliance in a multi-cloud world

• MEO – 8,227 breached accounts

• Study of past cyber attacks can improve organizations’ defense strategies

• That 3CX supply chain attack keeps getting worse: More victims found

• Expel Vulnerability Prioritization identifies critical and‌ damaging vulnerabilities

• Patented.ai releases LLM Shield to safeguard sensitive info from chatbots

• Chinese scientists calculate the Milky Way’s mass as 805 billion times that of our Sun

• Biden’s cybersecurity strategy is bold, but it may get held up in Congress

• Health insurer Point32Health suffered a ransomware attack

• IT Security News Weekly Summary – Week 16

• IT Security News Daily Summary 2023-04-23

• Zero Trust Network for Microservices With Istio

• What is Single Sign-on (SSO) ? – Solution to Ensure Your Company Data Security

• Linux Malware Set to Be Deployed by North Korean APT Group

• Experts spotted first-ever crypto mining campaign leveraging Kubernetes RBAC

• Can Messaging Apps Locate You? Here’s All You Need to Know

• Why Security Assistance Often Fails

• Deepfake Apps Remain Popular in China Despite Crackdown

• Shadow IT, SaaS Pose a High Security Threat for Businesses

• Do RFID blocking cards actually work? My Flipper Zero revealed the truth

• Hacker Group Names Are Now Absurdly Out of Control

• Security Affairs newsletter Round 416 by Pierluigi Paganini – International edition

• Week in review: 5 free online cybersecurity resources for SMBs, AI tools might fuel BEC attacks

• Cyber Security Management System (CSMS) for the Automotive Industry

• Terravision – 2,075,625 breached accounts

• Cordoniq Newest Competitor in 2023 ‘ASTORS’ Homeland Security Awards

Generated on 2023-04-24 23:55:20.699459