IT Security News Daily Summary 2023-05-03

• Secure SD-WAN Solution for Communication over Satellite and Networks in Adverse and DDIL Conditions

• Goodbye, old friend 👋🔒

• Smarter local airports via digital twins

• Google Chrome Drops Browser Lock Icon

• Give NotPetya-hit Merck that $1.4B, appeals court tells insurers

• Goodbye, old friend 👋🔒

• Pension systems’ built-in modernization deadline: IT staff retirements

• Tracked by hidden tags? Apple and Google unite to propose safety and security standards…

• FTC Alleges That Facebook Has Violated Children’s Privacy

• DNA Sequencing Equipment Vulnerability Adds New Twist to Medical Device Cyber Threats

• Goodbye, old friend 👋🔒

• Dallas City Hit By Ransomware Assault Affects 2.6 Million People

• How To Survive a Ransomware Attack and Fix Ransomware Breach Face

• T-Mobile Discloses Second Data Breach…This Year

• Goodbye, old friend 👋🔒

• Cloud adoption gains traction in states

• Your phone contains your most personal information. Here’s how to keep it safe

• Chrome’s HTTPS padlock heads to Google Graveyard

• Google rolls out passkeys in service of passwordless future

• Seized: 9 Crypto Laundering Sites Used by Ransomware Gangs

• Goodbye, old friend 👋🔒

• 10 ways ChatGPT and generative AI can strengthen zero trust

• Pentagon network chiefs are putting automation to work

• Court Rejects Merck Insurers’ Attempt to Refuse Coverage for NotPetya Damages

• What’s the Secret to Finding the Next Big Thing in Cybersecurity?

• 9 Cryptocurrency Laundering Sites Seized by Law Enforcement

• Goodbye, old friend 👋🔒

• Passwordless sign-in with passkeys is now available for Google accounts

• What are Residential proxies and what is their use?

• Goodbye, old friend 👋🔒

• Privacy Risk of ChatGPT for Software Developers

• Check Point Software Applauds U.S. Senators for Investigating Use of AI to Create Malicious Phishing Emails with the IRS

• Google now lets you sign in with a passkey instead of a password

• Goodbye, old friend 👋🔒

• U.S. Marshals to unveil ‘fully reconstituted system’ following ransomware attack

• Malware Campaigns Abusing Telegram Bots to Spread Rapidly

• Goodbye, old friend 👋🔒

• New bill would add disclosure requirements for AI in political ads

• Why Observability Alone Is Not Enough to Keep Your Organization Safe

• Goodbye, old friend 👋🔒

• Checks joins Google with LLM-driven mobile app compliance scanner

• The best VPN deals right now: May 2023

• Anatomy of a Malicious Package Attack

• Looking at a penetration test through the eyes of a target

• How to establish network security for your hybrid workplace

• Today’s CISO Insights – How to Tackle the Quantum Threat

• UK’s CMA Denied Appeal Over Apple Ruling

• Goodbye, old friend 👋🔒

• Top Strategies for Effective Mobile App Testing and Quality Assurance

• CISA Advises FCC Covered List For Risk Management

• Avetta releases Cyber Risk Solution for complete supply chain cyber health visibility

• Keysight launches cybersecurity partnership program for MSSPs

• Goodbye, old friend 👋🔒

• The Importance of Software Security

• Apple, Google Propose Standard to Combat Misuse of Location-Tracking Devices

• Court Rules in Favor of Merck in $1.4 Billion Insurance Claim Over NotPetya Cyberattack

• Apple and Google Unveil Industry Specification For Unwanted Tracking

• Forrester names Microsoft a Leader in 2023 Infrastructure-as-a-Service Platform Native Security report

• Goodbye, old friend 👋🔒

• Trust will be key for US Notify—a text message service for state benefits

• Passkeys Support Added to Google Accounts for Passwordless Sign-Ins

• Netgear Vulnerabilities Lead to Credentials Leak, Privilege Escalation

• Studies show ransomware has already caused patient deaths

• Earth Longzhi Uses “Stack Rumbling” to Disable Security Software

• Meta Says ChatGPT-Related Malware Is On The Rise

• Tor Project, LGBTQ Groups, And CDT Sound Alarm Over Efforts To Weaken Encryption

• Microsoft Warns Iran Increasing Its Cyber Influence Operations

• Mirai Botnet Loves Exploiting Your Unpatched TP-Link Routers

• ARM Files For IPO, But Not In London

• Goodbye, old friend 👋🔒

• Hackers are taking advantage of the interest in generative AI to install Malware

• Who Gets the Algorithm? The Bigger TikTok Danger

• A Vision for Regulatory Harmonization to Spur International Research

• Dashlane Passwordless Login eliminates the need to create a master password

• Attackers are trying to exploit old DVR vulnerabilities (CVE-2018-9995, CVE-2016-20016)

• ManageEngine ADSelfService Plus adds offline MFA to improve remote work security

• Vanta Vendor Risk Management automates security reviews and remediates issues

• You can now use passkeys to login into your Google account

• 50 Chinese Hackers for Each FBI Cyber Agent, Bureau Boss Says

• Hackers Leak Photos to Mock Western Digital’s Cyberattack Response

• Twitter To Let Publishers Charge To Read Articles

• New Frontiers for the Contact Centre

• Goodbye, old friend 👋🔒

• Is Your Critical SaaS Data Secure?

• Hackers Promise AI, Install Malware Instead

• Chrome 113 Released With 15 Security Patches

• Chinese Hacker Group Earth Longzhi Resurfaces with Advanced Malware Tactics

• Google Introduces Passwordless Secure Sign-In with Passkeys for Google Accounts

• Google Play Blocked 1.43 Million Malicious Apps in 2022

• Goodbye, old friend 👋🔒

• Meta Expunges Multiple APT, Cybercrime Groups from Facebook, Instagram

• Legitimate Software Abuse: A Disturbing Trend in Ransomware Attacks

• Card Skimmers and ATMs Used to Drain EBT Accounts in SoCal

• Goodbye, old friend 👋🔒

• Hotels at Risk From Bug in Oracle Property Management Software

• Data Leak: Critical Data Being Exposed From Salesforce Servers

• Top 5 Reasons Why Cybersecurity is Essential For Organisations

• Insider Risk: Unconventional Thoughts and Lessons Learned

• New BGP Protocol Flaws Let Attackers Trigger DoS Attacks

• Goodbye, old friend 👋🔒

• Google says goodbye to passwords with passkeys launch

• Palo Alto Networks Unveils New Cloud Firewall for Azure

• Imperva Red Team Discovers Vulnerability in TikTok That Can Reveal User Activity and Information

• DTX & UCX Manchester 2023 Agenda goes live

• So long passwords, thanks for all the phish

• The Dangers of Bluebugging: Andhra Pradesh Police Caution Smartphone Users

• Godfather Of AI, Geoffrey Hinton, Quits Google

• Goodbye, old friend 👋🔒

• Google Is Rolling Out Passkeys, the Password-Killing Tech, to All Accounts

• Meta Moves to Counter New Malware and Repeat Account Takeovers

• Level Finance Crypto Exchange Hacked, After Two Security Audits

• Apple and Google combat unwanted Bluetooth location-tracking

• Immersive Labs Resilience Score strengthens executive decision making in cyber crises

• Goodbye, old friend 👋🔒

• Exploitation of BGP Implementation Vulnerabilities Can Lead to Disruptions

• Chinese APT Uses New ‘Stack Rumbling’ Technique to Disable Security Software

• Open Banking: A Perfect Storm for Security and Privacy?

• Goodbye, old friend 👋🔒

• Download the eBook: What Does it Take to be a Full-Fledged Virtual CISO?

• Operation SpecTor: $53.4 Million Seized, 288 Vendors Arrested in Dark Web Drug Bust

• Join Us for Our Public Sector Ignite Cybersecurity Conference

• BlackBerry To Review Strategic Options

• Goodbye, old friend 👋🔒

• T-Mobile suffers second data breach this year

• Google Chrome will lose the “lock” icon for HTTPS-secured sites

• Goodbye, old friend 👋🔒

• Apple and Google Join Forces to Stop Unauthorized Tracking Alert System

• SolarWinds Detected Six Months Earlier

• Goodbye, old friend 👋🔒

• US, Ukraine Shut Down Cryptocurrency Exchanges Used by Cybercriminals

• SECURITY ALERT: Danish Customers Targeted by Active PostNord DK Phishing Campaign

• The 5 Pillars of IT Security (according to the NHS)

• Three-Quarters of Firms Predict Breach in Coming Year

• Häfele Recovers from Ransomware Attack using SASE

• 3 Tips to Strengthen AWS Container Security

• Cybersecurity in the Cloud: The Challenging Hurdles It Has To Overcome

• Government’s New Fraud Strategy Gets Lukewarm Reception

• How To Install Nudify In PC ( Windows 7, 8, 10, and Mac )

• Dark Web Bust Leads to Arrest of 288 Suspects

• Hackers Exploiting 5-year-old Unpatched Vulnerability in TBK DVR Devices

• Researchers found DoS flaws in popular BGP implementation

• Why performing security testing on your products and systems is a good idea

• T-Mobile Hacked – Attackers Accessed Over 37M Sensitive Data

• Mirror Trading International’s Cornelius Johannes Steynberg and his $3.4 Billion USD Default Judgement

• CISA Issues Advisory on Critical RCE Affecting ME RTU Remote Terminal Units

• FBI Uncovers 9 Crypto Exchanges In Ransomware Laundering

• FBI seizes 9 cryptocurrency exchange websites supporting cyber criminals and ransomware spread

• Who are Cyber Swindlers

• With Imperva’s DRA and ServiceNow, you can avoid burning out your cyber security employees

• Malicious content lurks all over the web

• Tython: Open-source Security as Code framework and SDK

• 5 API security best practices you must implement

• Securing the Edge Ecosystem Global Research released – Complimentary report available

• Veza for SaaS Apps secures sensitive data against breaches, ransomware, and insider threats

• KnectIQ SelectiveTRUST prevents credential misuse

• Security in the cloud with more automation

• The importance of being certified

• Box AI brings intelligence to enterprise content

• CYTRIO unveils privacy UX platform to help businesses with privacy laws

• The Evolution of Data Security Solutions

• Trellix expands AWS integrations to provide users with centralized visibility of their security issues

• Spin.AI partners with Google to reduce the risk of Chrome extensions for SecOps teams

• Is it OK to train an AI on your images, without permission?

• 5 Best SIEM Tools & Software for 2023

• The Kids Online Safety Act is Still A Huge Danger to Our Rights Online

• Apple pushes first-ever ‘rapid’ patch – and rapidly screws up

• Conceal collaborates with Moruga to help organizations detect malicious activity

• Confidential computing primer

• Mirai botnet loves exploiting your unpatched TP-Link routers, CISA warns

• Promising Jobs at the U.S. Postal Service, ‘US Job Services’ Leaks Customer Data

• Space Force focusing on innovative procurement methods for commercial software

• How regions can pivot from carbon- to tech-based economies

• At RSA, Akamai put focus on fake sites, API vulnerabilities

• APT41 Subgroup Plows Through Asia-Pacific, Utilizing Layered Stealth Tactics

• FBI and Ukrainian police seized 9 crypto exchanges used by cybercriminals

• IT Security News Daily Summary 2023-05-02

• Report: New Facebook Malware Campaign Infects Half A Million Users In Three Months

• PrivateGPT Tackles Sensitive Info in ChatGPT Prompts

• Unraveling the Mystery: What Did the Turbo Button Do on Old Computers?

• Apple, Google propose anti-stalking spec for Bluetooth tracker tags

• Making a Business Case for Cyber Threat Intelligence: Unveiling the Value Realization Framework

• Security Tool Integration Isn’t Enough Anymore

• Going into the Darknet: How Cynet Lighthouse Services Keep Cybersecurity Teams One Step Ahead of Hackers

• Spamming democracy

• Infoblox discovers rare Decoy Dog C2 exploit

• password manager

• Apple Debuts Its Rapid Response Security Update Approach

• PornHub Blocked In Utah State Due To SB287 Age Verification Law

• EFF to Congress: Oppose the EARN IT Act and the STOP CSAM Act

• Why Is the U.S. Solicitor General Trying To Change The Law To Benefit Patent Trolls?

• Apple issues first Rapid Security Response for macOS, iOS, iPadOS

• Android Device Migration Tools Bug Let Hackers Steal App Data & Login to Your Accounts

• American College of Pediatricians Leak Exposes 10,000 Confidential Files

• 288 arrested in multinational Monopoly Market takedown

• Fake Websites Impersonating Association To ChatGPT Poses High Risk, Warns Check Point Research

• GitLab turns to Google Cloud and generative AI to accelerate DevSecOps

• Combating threats to employees in digital spaces

• Don’t call it data literacy, it’s data proficiency

• SpecTor operation: 288 individuals arrested in the seizure of marketplace Monopoly Market

• New Decoy Dog Malware Toolkit Targets Enterprise Networks

• EFF letter to Congress: Oppose the EARN IT Act and the STOP CSAM Act

• InfoBlox discovers rare Decoy Dog C2 exploit

• SLP Vulnerability Exposes Devices to Powerful DDoS Attacks

• CrowdStrike focuses on ChromeOS security, rising cloud threats

• Cops Just Revealed a Record-Breaking Dark Web Dragnet

• Where climate change and cyber attacks intersect

• With 288 Arrests, Feds Reveal a Widening Dragnet of Dark-Web Busts

• Healthcare Institutions at Risk Due to Reliance on Technology

• Rationalizing Your Hybrid Cloud Security Tools

• The White House has questions about AI surveillance in the workplace

• Juggling critical infrastructure for data centers, hospitals and more, with an eye on resilience

• Hash-based Message Authentication Code (HMAC)

• North Korean APT Gets Around Macro-Blocking With LNK Switch-Up

• With 288 Arrests, Feds Reveal a Widening Dragnet of Dark Web Busts

• Hackers Take Advantage Of TBK DVR Camera System’s Severe Flaws

• The CPRA compliance checklist every business should follow in 2023

• AresLoader Malware Attacking Citrix Users Through Malicious GitLab Repo

• Bitmarck Halts Operations Due to Cybersecurity Breach

• Mark43 Returns to Compete in 2023 ‘ASTORS’ Homeland Security Awards

• South Korean Lures Used to Deploy ROKRAT Malware

• Google Ads Abused to Lure Corporate Workers to LOBSHOT Backdoor

• BlackCat Ransomware group breaches Australia HWL Ebsworth law firm servers

• ‘Tide is going out’ on election deniers, scrutinized Georgia official says

• IT Services Firm Bitmarck Takes Systems Offline Following Cyberattack

• Global Operation Takes Down Dark Web Drug Marketplace

• Hackers Exploit High Severity Flaw in TBK DVR Camera System

• Researchers Uncover New BGP Flaws in Popular Internet Routing Protocol Software

• Russia’s APT28 Targets Ukraine With Bogus Windows Updates

• AI Godfather Geoffrey Hinton Warns Of Dangers As He Quits Google

• White House To Study Employer Tools That Monitor Workers

• T-Mobile Promises Better Security After Year’s Second Breach

• Apple Uses Rapid Security Response Feature For The First Time

• Appdome and GitLab partner to strengthen mobile app defense

• Easily exploitable flaw in Oracle Opera could spell trouble for hotel chains (CVE-2023-21932)

• iOS Penetration Testing Cheatsheet: Tools, Techniques & Step-by-Step Guide

• Report URI to partner with PCI Security Standards Council

• Singapore, US run cross-border cybersecurity drills to test banks’ resilience

• CISA Issues Warning About Serious Flaws in Illumina DNA Sequencing Systems

• Secure your cloud environment with Cloud Next-Generation Firewall by Palo Alto Networks, an Azure Native ISV Service—now in preview

• Utilising Multiple Solutions Makes Your Zero Trust Strategy More Complex

• Defending Against Adversarial Attacks in Machine Learning: Techniques and Strategies

• KuppingerCole names Check Point A Market Leader in SASE Leadership Compass

• Getting cyber-resilience right in a zero-trust world starts at the endpoint

• FCW Insider Chat: Cybersecurity

• NIST Draft Document on Post-Quantum Cryptography Guidance

• In the face of data disaster

• ChatGPT Confirms Data Breach, Raising Security Concerns

• The best home security systems of 2023: Expert reviewed

• The best security keys of 2023: Expert tested

• 4 Principles for Creating a New Blueprint for Secure Software Development

• The first iPhone Rapid Security Response update released by Apple fails to install

• Can Better Training Reduce the Success Rate of Phishing Attacks?

• How Not to Negotiate With the Taliban

• One Identity Receive Multiple CRN Accolades

• Forum Database Sold Online After Kodi Data Breach

• Infostealer with hVNC capability pushed via Google Ads

• Google and Apple lead initiative for an industry specification to address unwanted tracking

• The Threat of Deepfakes: Hacking Humans

• Illumina: FDA, CISA Warns Against Security Flaw Making Medical Devices Vulnerable to Remote Hacking

• Attack on Security Titans: Earth Longzhi Returns With New Tricks

• Why Telecoms Struggle with SaaS Security

• BouldSpy Android Spyware: Iranian Government’s Alleged Tool for Spying on Minority Groups

• Introducing Cloud NGFW for Azure — On-Prem to Azure, Seamlessly Secure

• Optimising Cyber Security Costs In A Recession

• Apple Puts First Rapid Security Response Patch On iPhones

• Apple starts delivering smaller security updates

• Samsung bans use of A.I. like ChatGPT for employees after misuse of the chatbot

• Critical Vulnerabilities Spotted In Zyxel Firewall

• Mullvad VPN’s Office Raided By Police for User Data

• iPhone Users Report Problems Installing Apple’s First Rapid Security Response Update

• Critical Infrastructure Organizations Urged to Identify Risky Communications Equipment

• T-Mobile Says Personal Information Stolen in New Data Breach

• Fortinet warns of a spike in attacks against TBK DVR devices

• Data loss costs are going up – and not just for those who choose to pay thieves

• APT groups muddying the waters for MSPs

• CISA Warns of Attacks Exploiting Oracle WebLogic Vulnerability Patched in January

• Cybersecurity M&A Roundup: 38 Deals Announced in April 2023

• SolarWinds: The Untold Story of the Boldest Supply-Chain Hack

• 5 Ways CIAM Enables Effective, Secure Business Partner Identity Management

• Fake ChatGPT desktop client steals Chrome login data

• PrivateGPT enables users to share only necessary information with OpenAI

• Onfido unveils identity verification service for Salesforce Financial Services Cloud

• North Korea-linked ScarCruft APT uses large LNK files in infection chains

• How To Install Go90 On PC ( Windows 7, 8, 10, and Mac ) – Step-by-Step Guide

• Leaked Files Show Extent of Ransomware Group’s Access to Western Digital Systems

• Exploitation of 5-Year-Old TBK DVR Vulnerability Spikes

• T-Mobile Reveals Second Breach of the Year

• 4 Lessons from Fortra’s Attack Surface Management Guide

• Allowlisting and Blocklisting: What you need to know

• UK Gun Owners May Be Targeted After Rifle Association Breach

• Targeted Phishing: Your auth password for [ user@host.com ] expires today !

• How To Install Fifa 07 in Windows 7, 8.1, 10, 11, Mac, Linux, and Ubuntu

• Advanced Fee Fraud Surges by Over 600%

• North Korea’s ScarCruft Deploys RokRAT Malware via LNK File Infection Chains

• LOBSHOT: A Stealthy, Financial Trojan and Info Stealer Delivered through Google Ads

• T-Mobile Data Breach, The Second Since The Year 2023

• What Is Privilege Escalation?

• CISA adds TP-Link, Apache, and Oracle bugs to its Known Exploited Vulnerabilities catalog

• Managed Detection and Response in 2022

• Need to improve the detection capabilities in your security products?

• Podcast Episode: Dr. Seuss Warned Us

• New Lobshot hVNC malware spreads via Google ads

• Russia’s APT28 targets Ukraine government with bogus Windows updates

• Data Breach lawsuits against companies increasing in the year 2023

• Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulnerabilities Detected

• The warning signs for security analyst burnout and ways to prevent

• Google Blocked Over 1.4 Million Malicious Apps From Google Play Store

• Watchdog dings GSA’s transactional data reporting pilot

• Data-driven insights help prevent decisions based on fear

• The costly threat that many businesses fail to address

• Why the manufacturing sector needs stronger cyber defenses

• The role of AI in healthcare: Revolutionizing the healthcare industry

• Feds rethink warrantless search stats and – oh look, a huge drop in numbers

• The COVID-19 vaccine mandates for feds and contractors are officially ending

• Those scary warnings of juice jacking in airports and hotels? They’re mostly nonsense

• Apple uses iOS and macOS Rapid Security Response feature for the first time

• Warning of AI’s danger, pioneer Geoffrey Hinton quits Google to speak freely

• At RSA Conference 2023, tales of real-world cyberattacks and warnings of fearsome new threats

• Hacker steals Bitcoins from Russia, destroys them or donates them to Ukraine

• A week in security (April 24 -30)

• How to protect your small business from social engineering

• Microsoft: You’re already using the last version of Windows 10

Generated on 2023-05-03 23:55:29.880505