IT Security News Daily Summary 2023-05-05

• Friday Squid Blogging: “Mediterranean Beef Squid” Hoax

• It’s generative AI models vs. hackers at DEF CON’s AI Village

• Army wants help with safeguarding datasets for AI use

• Cloud move takes city’s GIS from rough to ready

• How local governments can protect themselves against third-party threats

• Dump these insecure phone adapters because we’re not fixing them, says Cisco

• Best Patch Management Software & Tools for 2023

• Satori Unveils Universal Data Permissions Scanner, A Free Open-Source Tool that Sheds Light on Data Access Authorization

• KnowBe4 Launches Password Kit to Celebrate World Password Day

• Pro-Russia group NoName took down multiple France sites, including the French Senate one

• Browser Isolation Adapts to Remote Work, Greater Cloud Usage

• NITAAC extends CIO-SP3 contracts amid protests of follow-on vehicle

• Transferring WhatsApp Data Between Android and iPhone [2023]

• A right Royal pain in the Dallas: City IT systems crippled by ransomware

• 3 core principles for secure data integration

• Apple Patches Bluetooth Flaw in AirPods, Beats

• Judge Spares Former Uber CISO Jail Time Over 2016 Data Breach Charges

• Buyer beware: Avoid immature AI solutions

• FTC Proposes Ban on Meta Profiting Off Children’s Data

• How to start handling Azure network security

• How to implement principle of least privilege in Azure AD

• Former Uber CSO Joe Sullivan avoids jail for breach cover-up

• Attackers Route Malware Activity Over Popular CDNs

• Doctors Behind Mifepristone Ban Called ‘Christians’ a Top Threat

• The Pentagon wants to peer inside its cloud providers’ infrastructure

• AI exemplifies the ‘free rider’ problem – here’s why that points to regulation

• Constellation Struck By Ransomware Attack, ALPHV Lays Claim

• PHP Packagist supply chain poisoned by hacker “looking for a job”

• Dallas Police Department Compromised in Ransomware Attack

• Mirantis k0s updates simplify management of Kubernetes clusters

• Introducing rules_oci

• Making authentication faster than ever: passkeys vs. passwords

• CSO sentenced to 3 years imprisonment for Uber Data Breach cover up

• Application Programming Interface (API) testing for PCI DSS compliance

• Prediction: 2023 will be a ‘very active’ hurricane season

• Pro-Russian Hackers Claim Downing of French Senate Website

• North Korean APT Kimsuky Launches Global Spear-Phishing Campaign

• New White House AI Initiatives Include AI Software-Vetting Event at DEF CON

• Senator Asks Big Banks How They’re Going To Stop AI Cloned Voices From Breaking Into Banks

• Tennessee Health System Stops All Operations Amid Cyberattack Recovery

• China Labels USA Empire Of Hacking Based On Old Wikileaks Dump

• Cisco Warns RCE Bug In EOL IP Phone Adapters Won’t Get Patched

• Capita Admits Some Pension Data Likely Accessed In March Breach

• Religious Institutions Become the Latest Focus of Cybercrime Groups

• “Kekw” Malware in Python Packages Could Steal Data and Hijack Crypto

• Online Predators are Targeting Children Webcams

• AutoCrypt KEY provides the key management features needed for automotive production

• Royal Ransomware Targets the City of Dallas in Ransomware Attack

• Fight over Kids Online Safety Act Sparks Debate, as Bill Gains Support in Congress

• Cryptocurrency Exchanges Linked to Ransomware

• Google Launches New Cybersecurity Analyst Training Program

• New Android Trojans Infected Many Devices in Asia via Google Play, Phishing

• New Android Malware ‘FluHorse’ Targeting East Asian Markets with Deceptive Tactics

• 8 Top Authenticator App For iOS and Andriod In 2023

• VPN Encryption: How it Works and Why it Matters – 2023 Guide

• RIP World Password Day

• The (Security) Cost of Too Much Data Privacy

• 2 Years After Colonial Pipeline, US Critical Infrastructure Still Not Ready for Ransomware

• What Is Patch Management? Definition, Importance, Key Steps, and Best Practices

• Identity and Access Management Best Practices

• OpenAI changed its plans and won’t train on customer data, Sam Altman says

• Why Robot Vacuums Have Cameras (and What to Know About Them)

• Vulnerability in Oracle Property Management Software Puts Hotels at Risk

• Fortinet Patches High-Severity Vulnerabilities in FortiADC, FortiOS

• Google Expands Passkey Support With Passwordless Authentication

• North Korea-linked Kimsuky APT uses new recon tool ReconShark

• Jack Dorsey Withdraws Support For Elon Musk As Twitter Boss

• Hackers Targeting Italian Corporate Banking Clients with New Web-Inject Toolkit DrIBAN

• Former Uber CSO avoids prison for concealing data breach

• Capita admits some pension data ‘likely’ to have been accessed in March breach

• Azure API Management Vulnerabilities Allowed Unauthorized Access

• Biden, Harris Meet With CEOs About AI Risks

• Google Expands Passkey Support with Passwordless Authentication

• US Warns Of Economic Damage If China Invades Taiwan

• Generative AI brings new risks to everyone. Here’s how you can stay safe

• Tripwire Patch Priority Index for April 2023

• Facebook Issues Warning About Malware Campaigns Targeting Businesses

• Lack of Visibility: The Challenge of Protecting Websites from Third-Party Scripts

• N. Korean Kimsuky Hackers Using New Recon Tool ReconShark in Latest Cyberattacks

• ReconShark – Kimsuky’s Newest Recon Tool

• Apple Depressed Results Beat Expectations, Thanks To iPhone Sales

• Critical Siemens RTU Vulnerability Could Allow Hackers to Destabilize Power Grid

• Vulnerability Could Have Been Exploited for ‘Unlimited’ Free Credit on OpenAI Accounts

• Events Ripper Updates

• Fleckpe Android malware totaled +620K downloads via Google Play Store

• Cisco Issues Urgent Security Warning For End-of-Life Phone Adapters

• Packagist Repository Hacked: Over a Dozen PHP Packages with 500 Million Compromised

• Edgecore Networks and Wedge Networks partner to offer next-generation network security

• Critical RCE vulnerability in Cisco phone adapters, no update available (CVE-2023-20126)

• Cyber Patrols Lead to Seizure of Stolen Artefacts

• What Is IPAM in Networking and Cybersecurity?

• How To Install Freeflix HQ In PC ( Windows 7, 8, 10, and Mac )

• Android Security Update Patches Kernel Vulnerability Exploited by Spyware Vendor

• Ransomware Actors Extort University Via Alert System

• Users complain over UK state-owned bank’s services as Atos eyes the exit

• Cisco Umbrella® Now Integrates With Protective DNS

• An overview of the OSI model and its security threats

• Subscription Trojan Downloaded 600K Times From Google Play

• Fleckpe Android Malware Sneaks onto Google Play Store with Over 620,000 Downloads

• OneTrust’s AI-driven document classification enhances data discovery and governance

• Edgecore Networks and Wedge Networks partner to offer a next-generation network security

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Silicon Pulse: Your Tech News Update: Episode 1

• May 2023 Patch Tuesday forecast: Dealing with End-of-Support (EOS)

• Inside the Carrington Mortgage Services Ransomware Attack: Compromised Data and Cybersecurity Measures

• Cisco Warns of Vulnerability in Popular Phone Adapter, Urges Migration to Newer Model

• Information Security News headlines trending on Google

• 10 Effective Ways to Protect Your Privacy Online

• Universal Data Permissions Scanner: Open-source tool to overcome data authorization blindspots

• New infosec products of the week: May 5, 2023

• Guidance on network and data flow diagrams for PCI DSS compliance

• New Weaponized Android Apps With 1M Installs Steals 2FA Codes & Passwords

• Hackers use WinRAR as a Cyberweapon to Conduct Destructive Cyberattacks

• Think your data has no value? Scammers disagree

• Organizations brace for cyber attacks despite improved preparedness

• Atomic Stealer: Thieving Mac malware sold via Telegram

• China labels USA ‘Empire of hacking’ based on old Wikileaks dumps

• $10M Is Yours If You Can Get This Guy to Leave Russia

• Former Uber CSO Joe Sullivan Avoids Prison Time Over Data Breach Cover-Up

• World Password Day must die

• The one and only password tip you need

• How small businesses can secure employees’ mobile devices

• AI-powered content farms start clogging search results with ad-stuffed spam

• Scammers get sneaky: New malware distribution tactics revealed in Avast Threat Report

• Identifying Compromised Data Can Be a Logistical Nightmare

• Ex-Uber CSO gets probation for covering up theft of data on millions of people

• RustBucket: APT group targets Macs with PDF Trojan malware

• Protecting Your Server Room: 5 Best Practices for Physical Security

• Databricks Ventures Invests in Data Security Leader Immuta

• Autocrypt Releases Comprehensive Key Management Solution for Automotive Manufacturing

• Finding the right drone for the job

• Google adds passkey option to replace passwords on Gmail and other account services

• Dallas City Systems Taken Down by Royal Ransomware

• IT Security News Daily Summary 2023-05-04

• DISA wants to take Thunderdome pilot to full production in ’30 to 60 days,’ director says

• OneTrust Enhances Data Discovery and Governance by Introducing AI-Powered Document Classification

• InsightCyber Launches Platform to Provide Cyber Threat Management and Security to Global Critical Infrastructure

• As Utah’s porn law kicks in, adult site blocks access in the state

• HackerOne: How the economy is impacting cybersecurity teams

• Netskope: Attackers Double Down on Social Engineering Techniques and Malicious Functionalities

• Cisco EoL SPA112 2-Port Phone Adapters are affected by critical RCE

• The Importance Of Endpoint Security When Implementing Zero Trust

• Apple uses iOS and macOS Rapid Security Response feature for the first time

• Warning of AI’s danger, pioneer Geoffrey Hinton quits Google to speak freely

• At RSA Conference 2023, tales of real-world cyberattacks and warnings of fearsome new threats

• Hacker steals Bitcoins from Russia, destroys them or donates them to Ukraine

• Mastering Patch Management: 10 Essential Best Practices for Optimal Security

• ChatGPT and You

• Pentagon CIO warns against pause in AI development

• Cybersecurity execs ponder software liability implementation

• Ransomware attack disrupts Dallas police, city services

• S3 Ep133: Apple takes “tight-lipped” to a whole new level

• Policing the wild frontiers of digital communications

• ‘Cybersickness’ from VR headsets hits women more often

• Gmail gets blue verification checks to protect against spoofing and phishing

• Ubuntu Pro now available on Amazon Web Services

• Ransomware gangs display ruthless extortion tactics in April

• Google Launches Cybersecurity Career Certificate Program

• Best SIEM Tools List For SOC Team – 2023

• Building innovation through marketplace

• Top Victim of AI Voice Scams with 83% Losing Money

• Cyberpress Launches Cybersecurity Press Release Distribution Platform

• Conversational query: Kinetica builds ChatGPT front end to SQL database

• Google Launches Passkeys in Major Push for Passwordless Authentication

• Microsoft Opens Up AI-Featured Bing Search Engine To All Users

• Are Recommender Systems Fair? A Critical Look at the Challenges and Solutions

• Absolute’s 2023 Resilience Index: America’s Cybersecurity

• AI pioneer Geoffrey Hinton says AI is a new form of intelligence unlike our own. Have we been getting it wrong this whole time?

• The best travel VPNs of 2023: Expert reviewed

• How Public-Private Information Sharing Can Level the Cybersecurity Playing Field

• #World Password Day: Protecting corporate social media passwords

• Apple issues first Rapid Security Response for macOS, iOS

• Apple’s First Rapid Security Response, New Mac Malware, and Insecure Google Authenticator Sync – Intego Mac Podcast Episode 290

• What “Beginner” Skills do Security Leaders Need to Refresh?

• Brightline Hack Exposes Data of Over 780,000 Child Mental Health Patients

• #WorldPasswordDay – Solo, Boba, and Leia among most breached Star Wars passwords

• Strike three: FTC says Meta still failing to protect user privacy

• Businesses Must Stay up With Cybercriminals, as They Become More Sophisticated

• The impact of blockchain technology on the future of finance

• Google Deploys Passkeys, Cites ‘Beginning Of End’ For Passwords

• 2023-05-02 – Quick post: obama259 Qakbot (Qbot) infection with Dark Cat VNC

• Why APIs Will Be This Year’s Most Targeted Service

• Proposals floated for streamlining broadband permitting

• Creating strong, yet user‑friendly passwords: Tips for your business password policy

• Meta Tackles Malware Posing as ChatGPT in Persistent Campaigns

• Experts devised a new exploit for the PaperCut flaw that can bypass all current detection

• Google Implements Passkeys For Secured Sign-in To Google Accounts

• Google Ads Exploited to Tempt Corporate Employees Into Installing LOBSHOT Backdoor

• Facebook Meta uncovers Social Media Espionage

• UK’s CMA Launches Review Of AI Market

• How to make SSH even easier to use with config files

• Fraud Detection Startup Moonsense Raises $4.2 Million in Seed Funding

• Android Spyware BouldSpy Linked to Iranian Government

• Survey: State of cybersecurity in the UK

• Facebook warns of a new information-stealing malware dubbed NodeStealer

• Silicon Insights: The Past, Present and Future of Account Based Marketing: Part 1

• Meta Swiftly Neutralizes New ‘NodeStealer’ Malware

• Using Threat Intelligence to Get Smarter About Ransomware

• Microsoft Expands AI Access to Public

• Satori Releases Open Source Data Permissions Scanner for Enterprises

• World Password Day: 2 + 2 = 4

• Researchers Uncover New Exploit for PaperCut Vulnerability That Can Bypass Detection

• Researchers Discover 3 Vulnerabilities in Microsoft Azure API Management Service

• Go Ahead, Forget That Password. Use A Passkey Instead, Says Google

• Facebook Cracks Down On Malware Actors Targeting Biz Accounts

• FTC Says Facebook Broke Terms Of $5B Data Privacy Settlement

• Operation SpecTor Smashes Global Dark Web Drug Empire

• Google Will Retire Chrome’s HTTPS Padlock Icon Because No One Knows What It Means

• CVE-2023-29552: Abusing the SLP Protocol to Launch Massive DDoS Amplification Attacks

• AppOmni releases Salesforce Community Cloud Scanner

• City of Dallas hit by ransomware

• Airgap Networks enhances its Zero Trust Firewall with ThreatGPT

• HUB Security raises up to $16 million to fuel technology development

• AI Spera launches Criminal IP FDS plugin to prevent fraudulent login attempts on WordPress

• To fight cyber extortion and ransomware, shift left

• Actionable Threat Intel (I) – Crowdsourced YARA Hub

• PentestGPT – A ChatGPT Powered Automated Penetration Testing Tool

• Goodbye, old friend 👋🔒

• Overriding HTTP Response Headers in Chrome Dev Tools

• Protecting your password: Create an unbreakable one

• What is IT Asset Management (ITAM)? Definition, Benefits & Types

• Famine to Feast and Back: Startups Adjust to Economic Realities

• 1Password: Passkey support is coming in June

• Quarter of Staff Duplicate Passwords, Survey Finds

• Goodbye, old friend 👋🔒

• 79% of Cyber Pros Make Decisions Without Threat Intelligence

• HUMAN Security Newest Competitor in 2023 Homeland Security Awards

• Patch now! The Mirai IoT botnet is exploiting TP-Link routers

• Drive Managed Service Bookings and Better Business Outcomes

• Google Announced Game-changing Passwordless Authentication “Passkeys”

• Goodbye, old friend 👋🔒

• Why Backup Jira: Is There Any Risk of Data Loss?

• Apple Releases First-Ever Security Updates for Beats, AirPods Headphones

• Harris to Meet With CEOs About Artificial Intelligence Risks

• US Announces Takedown of Card-Checking Service, Charges Against Russian Operator

• Cisco Warns of Critical Vulnerability in EoL Phone Adapters

• Microsoft Patches Serious Azure Cloud Security Flaws

• Arthur Shield tackles safety and performance issues in large language models

• How Microsoft can help you go passwordless this World Password Day

• Goodbye, old friend 👋🔒

• Meta Unravels Social Media Cyber Espionage Operations In South Asia

• Goodbye, old friend 👋🔒

• Is it time to ‘shield’ AI with a firewall? Arthur AI thinks so

• Meta Uncovers Massive Social Media Cyber Espionage Operations Across South Asia

• Why the Things You Don’t Know about the Dark Web May Be Your Biggest Cybersecurity Threat

• ChatGPT Privacy Concerns are Addressed by PrivateGPT

• Marshals’ Computer System Still Down 10 Weeks After Hack

• Hackers Sell Coinbase Accounts for as low as $610 on Dark Web

• Uncovering the Decoy Dog C2 Exploit: Infoblox’s Finds Dangerous Threat

• Authorities Dismantled the Card-Checking Platform Try2Check

• Goodbye, old friend 👋🔒

• How to Handle SSL Certificates In Selenium WebDriver?

• Intelligent Waves’ Returns to Compete in Third Consecutive ‘ASTORS’

• Appeals Court Dismisses Lawsuit To Break Up Meta

• Goodbye, old friend 👋🔒

• FluHorse – Check Point Research Exposes Newly Discovered Malware Disguised as Legitimate and Popular Android Apps Targeting East Asia

• Russia-linked Sandworm APT uses WinRAR in destructive attacks on Ukraine’s public sector

• Large Language Models and Elections

• Intruder launches continuous attack surface monitoring for SMBs

• Protecto boosts privacy protection with GPU technology from NVIDIA

• Apricorn introduces Aegis NVX hardware-encrypted USB storage device

• ChatGPT and other AI-themed lures used to deliver malicious software

• Goodbye, old friend 👋🔒

• Meet Thales at the KuppingerCole European Identity and Cloud Conference 2023

• Apple’s First Rapid Security Response, New Mac Malware, and Insecure Google Authenticator Sync

• Goodbye, old friend 👋🔒

• AV-Comparatives reveals top anti-phishing solutions

• A practical guide to React Native authentication

• Cybersecurity – Change is coming and that’s a good thing

• Meta Takes Down Malware Campaign That Used ChatGPT as a Lure to Steal Accounts

• Not quite an Easter egg: a new family of Trojan subscribers on Google Play

• Apple, Google Submit Proposal To Tackle AirTag Stalking

• Goodbye, old friend 👋🔒

• OMB preps guidance on AI in government

• Protect your business by developing valuable cybersecurity skills for just $40

• Consumer Group Slams Bank App Fraud Failings

• US Government Disengages Try2check Platform On The Dark Web

• Maximising Security in a Digital Age: World Password Day Insights

• BSidesLjubljana 0x7E7 CFP is still open!

• Goodbye, old friend 👋🔒

• Malicious HTML Attachment Volumes Surge

• City of Dallas shut down IT services after ransomware attack

• European Data at Risk With Tick-box GDPR Compliance and High Cyberattack Volumes

• FBI Seizes 9 Virtual Currency Exchange Services to Block Ransom Payments

• Goodbye, old friend 👋🔒

• US Authorities Dismantle Dark Web “Card Checking” Platform

• Password Manager Dashlane wants to eliminate the master password

• Goodbye, old friend 👋🔒

• Australia to restore dedicated privacy role amid growing data security threats

• The Pros And Cons Of Shopping On E-commerce Websites

• Do you know what your supply chain is and if it is secure?

• Goodbye, old friend 👋🔒

• Goodbye, old friend 👋🔒

• Godfather of AI quits Google to save the world

• Cyber Attack on Sweden Parliament just before Ukraine drone attack on Moscow Kremlin

• Goodbye, old friend 👋🔒

• Goodbye, old friend 👋🔒

• Goodbye, old friend 👋🔒

• How AI is reshaping the cybersecurity landscape

• Goodbye, old friend 👋🔒

• Goodbye, old friend 👋🔒

• Improving your bottom line with cybersecurity top of mind

• Goodbye, old friend 👋🔒

• Unpaid open source maintainers struggle with increased security demands

• Top API vulnerabilities organizations can’t afford to ignore

• Amazon Inspector allows search of its vulnerability intelligence database

• Goodbye, old friend 👋🔒

• Goodbye, old friend 👋🔒

• Ransomware Attack Affects Dallas Police, Court Websites

• Goodbye, old friend 👋🔒

• Goodbye, old friend 👋🔒

• Best Amazon security camera deals of May 2023: Ring and Blink sales

• Goodbye, old friend 👋🔒

• Goodbye, old friend 👋🔒

• Go ahead, forget that password. Use a passkey instead, says Google

• Goodbye, old friend 👋🔒

• Best Amazon security camera deals in May 2023: Ring and Blink sales

• Goodbye, old friend 👋🔒

• Upcoming webinar: Is EDR or MDR better for your business?

• Google Authenticator WILL get end-to-end encryption. Eventually.

• Google takes CryptBot to the wood shed

• Oracle WebLogic Server vulnerability added to CISA list as “known to be exploited”

• How to keep your ChatGPT conversations out of its training data

• Meta does the ‘We found baddies and crushed them’ thing again – this time for AI

Generated on 2023-05-05 23:55:33.573717