IT Security News Daily Summary 2023-05-02

• Report: New Facebook Malware Campaign Infects Half A Million Users In Three Months

• PrivateGPT Tackles Sensitive Info in ChatGPT Prompts

• Unraveling the Mystery: What Did the Turbo Button Do on Old Computers?

• Apple, Google propose anti-stalking spec for Bluetooth tracker tags

• Making a Business Case for Cyber Threat Intelligence: Unveiling the Value Realization Framework

• Security Tool Integration Isn’t Enough Anymore

• Going into the Darknet: How Cynet Lighthouse Services Keep Cybersecurity Teams One Step Ahead of Hackers

• Spamming democracy

• Infoblox discovers rare Decoy Dog C2 exploit

• password manager

• Apple Debuts Its Rapid Response Security Update Approach

• PornHub Blocked In Utah State Due To SB287 Age Verification Law

• EFF to Congress: Oppose the EARN IT Act and the STOP CSAM Act

• Why Is the U.S. Solicitor General Trying To Change The Law To Benefit Patent Trolls?

• Apple issues first Rapid Security Response for macOS, iOS, iPadOS

• Android Device Migration Tools Bug Let Hackers Steal App Data & Login to Your Accounts

• American College of Pediatricians Leak Exposes 10,000 Confidential Files

• 288 arrested in multinational Monopoly Market takedown

• Fake Websites Impersonating Association To ChatGPT Poses High Risk, Warns Check Point Research

• GitLab turns to Google Cloud and generative AI to accelerate DevSecOps

• Combating threats to employees in digital spaces

• Don’t call it data literacy, it’s data proficiency

• SpecTor operation: 288 individuals arrested in the seizure of marketplace Monopoly Market

• New Decoy Dog Malware Toolkit Targets Enterprise Networks

• EFF letter to Congress: Oppose the EARN IT Act and the STOP CSAM Act

• InfoBlox discovers rare Decoy Dog C2 exploit

• SLP Vulnerability Exposes Devices to Powerful DDoS Attacks

• CrowdStrike focuses on ChromeOS security, rising cloud threats

• Cops Just Revealed a Record-Breaking Dark Web Dragnet

• Where climate change and cyber attacks intersect

• With 288 Arrests, Feds Reveal a Widening Dragnet of Dark-Web Busts

• Healthcare Institutions at Risk Due to Reliance on Technology

• Rationalizing Your Hybrid Cloud Security Tools

• The White House has questions about AI surveillance in the workplace

• Juggling critical infrastructure for data centers, hospitals and more, with an eye on resilience

• Hash-based Message Authentication Code (HMAC)

• North Korean APT Gets Around Macro-Blocking With LNK Switch-Up

• With 288 Arrests, Feds Reveal a Widening Dragnet of Dark Web Busts

• Hackers Take Advantage Of TBK DVR Camera System’s Severe Flaws

• The CPRA compliance checklist every business should follow in 2023

• AresLoader Malware Attacking Citrix Users Through Malicious GitLab Repo

• Bitmarck Halts Operations Due to Cybersecurity Breach

• Mark43 Returns to Compete in 2023 ‘ASTORS’ Homeland Security Awards

• South Korean Lures Used to Deploy ROKRAT Malware

• Google Ads Abused to Lure Corporate Workers to LOBSHOT Backdoor

• BlackCat Ransomware group breaches Australia HWL Ebsworth law firm servers

• ‘Tide is going out’ on election deniers, scrutinized Georgia official says

• IT Services Firm Bitmarck Takes Systems Offline Following Cyberattack

• Global Operation Takes Down Dark Web Drug Marketplace

• Hackers Exploit High Severity Flaw in TBK DVR Camera System

• Researchers Uncover New BGP Flaws in Popular Internet Routing Protocol Software

• Russia’s APT28 Targets Ukraine With Bogus Windows Updates

• AI Godfather Geoffrey Hinton Warns Of Dangers As He Quits Google

• White House To Study Employer Tools That Monitor Workers

• T-Mobile Promises Better Security After Year’s Second Breach

• Apple Uses Rapid Security Response Feature For The First Time

• Appdome and GitLab partner to strengthen mobile app defense

• Easily exploitable flaw in Oracle Opera could spell trouble for hotel chains (CVE-2023-21932)

• iOS Penetration Testing Cheatsheet: Tools, Techniques & Step-by-Step Guide

• Report URI to partner with PCI Security Standards Council

• Singapore, US run cross-border cybersecurity drills to test banks’ resilience

• CISA Issues Warning About Serious Flaws in Illumina DNA Sequencing Systems

• Secure your cloud environment with Cloud Next-Generation Firewall by Palo Alto Networks, an Azure Native ISV Service—now in preview

• Utilising Multiple Solutions Makes Your Zero Trust Strategy More Complex

• Defending Against Adversarial Attacks in Machine Learning: Techniques and Strategies

• KuppingerCole names Check Point A Market Leader in SASE Leadership Compass

• Getting cyber-resilience right in a zero-trust world starts at the endpoint

• FCW Insider Chat: Cybersecurity

• NIST Draft Document on Post-Quantum Cryptography Guidance

• In the face of data disaster

• ChatGPT Confirms Data Breach, Raising Security Concerns

• The best home security systems of 2023: Expert reviewed

• The best security keys of 2023: Expert tested

• 4 Principles for Creating a New Blueprint for Secure Software Development

• The first iPhone Rapid Security Response update released by Apple fails to install

• Can Better Training Reduce the Success Rate of Phishing Attacks?

• How Not to Negotiate With the Taliban

• One Identity Receive Multiple CRN Accolades

• Forum Database Sold Online After Kodi Data Breach

• Infostealer with hVNC capability pushed via Google Ads

• Google and Apple lead initiative for an industry specification to address unwanted tracking

• The Threat of Deepfakes: Hacking Humans

• Illumina: FDA, CISA Warns Against Security Flaw Making Medical Devices Vulnerable to Remote Hacking

• Attack on Security Titans: Earth Longzhi Returns With New Tricks

• Why Telecoms Struggle with SaaS Security

• BouldSpy Android Spyware: Iranian Government’s Alleged Tool for Spying on Minority Groups

• Introducing Cloud NGFW for Azure — On-Prem to Azure, Seamlessly Secure

• Optimising Cyber Security Costs In A Recession

• Apple Puts First Rapid Security Response Patch On iPhones

• Apple starts delivering smaller security updates

• Samsung bans use of A.I. like ChatGPT for employees after misuse of the chatbot

• Critical Vulnerabilities Spotted In Zyxel Firewall

• Mullvad VPN’s Office Raided By Police for User Data

• iPhone Users Report Problems Installing Apple’s First Rapid Security Response Update

• Critical Infrastructure Organizations Urged to Identify Risky Communications Equipment

• T-Mobile Says Personal Information Stolen in New Data Breach

• Fortinet warns of a spike in attacks against TBK DVR devices

• Data loss costs are going up – and not just for those who choose to pay thieves

• APT groups muddying the waters for MSPs

• CISA Warns of Attacks Exploiting Oracle WebLogic Vulnerability Patched in January

• Cybersecurity M&A Roundup: 38 Deals Announced in April 2023

• SolarWinds: The Untold Story of the Boldest Supply-Chain Hack

• 5 Ways CIAM Enables Effective, Secure Business Partner Identity Management

• Fake ChatGPT desktop client steals Chrome login data

• PrivateGPT enables users to share only necessary information with OpenAI

• Onfido unveils identity verification service for Salesforce Financial Services Cloud

• North Korea-linked ScarCruft APT uses large LNK files in infection chains

• How To Install Go90 On PC ( Windows 7, 8, 10, and Mac ) – Step-by-Step Guide

• Leaked Files Show Extent of Ransomware Group’s Access to Western Digital Systems

• Exploitation of 5-Year-Old TBK DVR Vulnerability Spikes

• T-Mobile Reveals Second Breach of the Year

• 4 Lessons from Fortra’s Attack Surface Management Guide

• Allowlisting and Blocklisting: What you need to know

• UK Gun Owners May Be Targeted After Rifle Association Breach

• Targeted Phishing: Your auth password for [ user@host.com ] expires today !

• How To Install Fifa 07 in Windows 7, 8.1, 10, 11, Mac, Linux, and Ubuntu

• Advanced Fee Fraud Surges by Over 600%

• North Korea’s ScarCruft Deploys RokRAT Malware via LNK File Infection Chains

• LOBSHOT: A Stealthy, Financial Trojan and Info Stealer Delivered through Google Ads

• T-Mobile Data Breach, The Second Since The Year 2023

• What Is Privilege Escalation?

• CISA adds TP-Link, Apache, and Oracle bugs to its Known Exploited Vulnerabilities catalog

• Managed Detection and Response in 2022

• Need to improve the detection capabilities in your security products?

• Podcast Episode: Dr. Seuss Warned Us

• New Lobshot hVNC malware spreads via Google ads

• Russia’s APT28 targets Ukraine government with bogus Windows updates

• Data Breach lawsuits against companies increasing in the year 2023

• Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulnerabilities Detected

• The warning signs for security analyst burnout and ways to prevent

• Google Blocked Over 1.4 Million Malicious Apps From Google Play Store

• Watchdog dings GSA’s transactional data reporting pilot

• Data-driven insights help prevent decisions based on fear

• The costly threat that many businesses fail to address

• Why the manufacturing sector needs stronger cyber defenses

• The role of AI in healthcare: Revolutionizing the healthcare industry

• Feds rethink warrantless search stats and – oh look, a huge drop in numbers

• The COVID-19 vaccine mandates for feds and contractors are officially ending

• Those scary warnings of juice jacking in airports and hotels? They’re mostly nonsense

• Apple uses iOS and macOS Rapid Security Response feature for the first time

• Warning of AI’s danger, pioneer Geoffrey Hinton quits Google to speak freely

• At RSA Conference 2023, tales of real-world cyberattacks and warnings of fearsome new threats

• Hacker steals Bitcoins from Russia, destroys them or donates them to Ukraine

• A week in security (April 24 -30)

• How to protect your small business from social engineering

• Microsoft: You’re already using the last version of Windows 10

• Mark43 Returns to Compete in 2021 ‘ASTORS’ Homeland Security Awards

• API Security Takes Center Stage: Key Insights from RSA 2023

• Enhancing Productivity with ChatGPT-Powered Wondershare PDFelement

• OPM tests chatbot for retirement services

• Two states get waivers for connected-vehicle tech

• Apple delivers first-ever Rapid Security Response “cyberattack” patch – leaves some users confused

• Enterprise Strategy Group Research Reveals 75% of Organizations Change or Update APIs on a Daily or Weekly Basis

• US Wellness Provides Notification of Data Security Incident

• IT Security News Daily Summary 2023-05-01

• Understanding and Minimizing the Security Risks of the Quantum Revolution in Computing

• DISA seeks toolkit to implement a key piece of its zero trust framework

• AI project targets hidden tax shelters

• Twitter turmoil prompts agencies to plan for social media upsets

• Critical Vulnerabilities Found In Illumina Universal Copy Service Devices

• Configuring the Security Plug-In/Custom Security Providers for WebLogic Resource Protection

• Safeguard Your Code With GitHub Dependabot and IBM Cloud Toolchain

• City Files Lawsuit Against Facebook For Harming Young Users

• FBI Focuses on Cybersecurity With $90M Budget Request

• 1Password execs outline shift to passwordless authentication

• APT28 Employs Windows Update Lures to Trick Ukrainian Targets

• Stay ahead of threats with DevOps security best practices

• Imperva Continues to Innovate With New Features for Online Fraud Prevention

• IT giant Bitmarck shuts down customer, internal systems after cyberattack

• T-Mobile suffered the second data breach in 2023

• Bitmarck shuts down all customer, internal systems after cyberattack

• TechRepublic Premium editorial calendar: IT policies, checklists, toolkits and research for download

• This New macOS Info-stealer in Town is Targeting Crypto Wallets

• Cisco Patched Known Vulnerability In IP Phone 7800 And 8800 Series

• 1Password execs outline shift to passworldless authentication

• Ukrainian Government Targeted with Fake Windows Update

• Cyberpress Launches Cybersecurity Press Release Distribution Platform

• Experts spotted a new sophisticated malware toolkit called Decoy Dog

• UK gun owners at risk after Cyber Attack leads to data breach

• Report shows 92% of orgs experienced an API security incident last year

• Cyber-Attack Sparks Fears That Criminals Could Target UK Gun Owners

• High Severity SLP Bug Could Launch Amplified DoS Attacks

• Sensitive Data Is Being Leaked From Servers Running Salesforce Software

• ChatGPT Accessible Again In Italy

• Targeted: Hackers Exploit Vulnerable Veeam Backup Servers with FIN7 Tactics

• How to make sure the reputation of your products and company is good

• Types of Software Bugs

• Global appeal of NIST cyber framework leads to multiple translations, possible updates

• The Persistent Threat of Ransomware: RSA Conference 2023 Highlights

• Web application firewall (WAF)

• German IT provider Bitmarck hit by cyberattack

• Hackers are Breaking Into AT&T to Steal Cryptocurrency

• How Morris Worm Command and Control Changed Cybersecurity

• New ‘Lobshot’ hVNC Malware Used by Russian Cybercriminals

• Registration Now Open: 2023 ICS Cybersecurity Conference | Atlanta

• Centralized secrets management picks up pace

• Amnesty International Takes a While to Disclose the Data Breach From December

• What the Cybersecurity Industry Can Learn From the SVB Crisis

• Iranian govt uses BouldSpy Android malware for internal surveillance operations

• Reigning in ‘Out-of-Control’ Devices

• Name That Edge Toon: Fare Thee Well

• To Restrict, or Not to Restrict, That Is the Quantum Question

• Countermeasures and the Confiscation of Russian Central Bank Assets

• We’re taking profits on a drugmaker, raising price target and adding to cybersecurity stock

• New Decoy Dog Malware Toolkit Uncovered: Targeting Enterprise Networks

• Russian APT Nomadic Octopus hacked Tajikistani carrier

• This New macOS Info-stealer in Town is Targeting Crypto Wallets

• Survivors Call for Enhanced Online Protection, Wikipedia Rejects Age Checks

• Atomic macOS Malware: New Malware Steals Credit Card Credentials in Chrome

• Multiple Vulnerabilities Spotted In APC Easy UPS Software

• PrivateAI’s PrivateGPT aims to combat ChatGPT privacy concerns

• Wanted Dead or Alive: Real-Time Protection Against Lateral Movement

• ‘BouldSpy’ Android Malware Used in Iranian Government Surveillance Operations

• CISA Asks for Public Opinion on Secure Software Attestation

• Companies Increasingly Hit With Data Breach Lawsuits: Law Firm

• Chatgpt Triumphantly Returns To Italy After Ban Is Lifted

• Google adds account sync for Authenticator, without E2EE

• The High-Stakes Scramble to Stop Classified Leaks

• Vietnamese Threat Actor Infects 500,000 Devices Using ‘Malverposting’ Tactics

• China has 50 hackers against each FBI Cyber Warrior

• How social engineering is related to Cybersecurity

• HiddenAds Adware Target Android Via Minecraft App Clones

• What does ChatGPT know about phishing?

• Silicon UK In Focus Podcast: The Circular Economy

• Post-Pandemic Businesses are Spending on Technologies that Drives Efficiency

• APT28 Targets Ukrainian Government Entities with Fake “Windows Update” Emails

• Google banned 173k developer accounts in 2022

• Your security failure was so bad we have to close the company …. NOT!

• Software developers, how secure is your software?

• ChatGPT Service Back in Italy, After the Ban

• Google Blocks 1.43 Million Malicious Apps, Bans 73,000 Bad Accounts in 2022

• Using just-in-time access to reduce cloud security risk

• Using multiple solutions adds complexity to your zero trust strategy

• Cybercriminals use proxies to legitimize fraudulent requests

• Introducing the book: The VC Field Guide

• DARPA looking for flaws in business systems

• 6 major multibillion dollar tech procurements to watch in 2023

• Infosec products of the month: April 2023

• China has 50 hackers for every FBI cyber agent, says Bureau boss

Generated on 2023-05-02 23:55:25.630378