IT Security News Daily Summary 2023-05-10

• Tech subcommittee chairwoman plans MGT Act rewrite

• Lawmakers tackle VA pharmacy tech woes at hearing

• 5 SBOM tools to start securing the software supply chain

• CISOs face mounting pressures, expectations post-pandemic

• Global Research From Delinea Reveals That 61% of IT Security Decision Makers Think Leadership Overlooks the Role of Cybersecurity in Business Success

• Advice for the Graduating Class of 2023: Qualities of a Modern Day Cybersecurity Professional

• Your Android apps are tracking you. Here’s how to stop them

• Concert Ticket Scams Are On The Rise On Facebook

• Infamous Twitter Hacker Cops to Cybercrimes, Extradited to US for Trial

• Sonatype axes 14 percent of staff, reminds them not to talk to the press

• State and local agencies weigh procurement outsourcing

• Camera, sensor, drone data lights up disaster response

• Cybersecurity firm Dragos shared details about a failed extortion attempt it suffered

• How to enable tracker blocking in Opera One (and why you should)

• Equifax Releases Security and Privacy Controls Framework

• Google Now Lets US Users Search Dark Web for Their Gmail ID

• Dragos discloses blocked ransomware attack, extortion attempt

• Microsoft Fixes Failed Patch for Exploited Outlook Vulnerability

• I/O 2023: What’s new in Android security and privacy

• Signed, Secured, Delivered: Authenticating Digital Agreements in the Time of Web3

• Microsoft reports two Iranian hacking groups exploiting PaperCut flaw

• How government can build secure and frictionless digital identity programs

• Dark Reading Goes Global

• Google Announces New Privacy, Safety, and Security Features Across Its Services

• Feedzai ScamPrevent protects bank customers from financial scams

• Aqua Security strengthens software supply chain security with pipeline integrity scanning

• Red Hat delivers latest releases of Red Hat Enterprise Linux

• Dangerous EARN IT Bill Advances Out of Committee, but Several Senators Offer Objections

• Securing Access, Encryption, and Storage Keys

• How to remove specific cookies from Microsoft Edge

• Sysco Data Breach Exposes Customer, Employee Data

• DownEx cyberespionage operation targets Central Asia

• Verified Facebook Accounts Being Hijacked to Distribute Malware; Here’s How You Can Protect Yourself

• Court Accepts EFF’s Amicus Brief on the Right to Publish Code in Tornado Cash Case

• Microsoft Signs Nuclear Fusion Power Deal

• Op PowerOFF: 13 Domains Linked to DDoS-For-Hire Services Seized

• Dragos Says Ransomware Gang Accessed Limited Data but Failed at Extortion Scheme

• Appeals Court Sides With Corellium in Apple Copyright Case

• Microsoft Patch Tuesday, May 2023 – Fixes for 2 zero-days and 40 vulnerabilities

• Wultra and iProov join forces to bring biometric technology to financial services providers

• TruaID helps consumers keep personal information secure

• Dell Technologies boosts cyber resilience and advances IT efficiency with software innovations

• IBM Quantum Safe technology prepares clients for the post-quantum era

• Twitter adds new DM features, and Musk says E2EE is here, starting today

• An outdated tracking system is a key factor in Texas’ foster care shortcomings

• Twitter Hacker Admits Guilt in New York Court, Extradited from Spain

• Leak of Intel Boot Guard Keys Could Have Security Repercussions for Years

• RapperBot Crew Drops DDoS/CryptoJacking Botnet Collab

• RSAC 2023 | Cybersecurity research on edge computing generates big interest

• Looking at a penetration test through the eyes of a target

• Twitter To Launch Encrypted Direct Messaging

• Dragos Says Ransomware Hackers Failed at Elaborate Extortion Scheme

• Cyber-Criminals Exploit Hardware Wallet to Steal Almost $30,000

• Hacker Pleads Guilty To Twitter’s 2020 Outage, Could Get 70 Years

• IPFS Phishing Attacks: How Cybercriminals Exploit Decentralized File Storage

• Learn How to Use the New Bing AI Image Generator in the Edge Browser

• News on WhatsApp listening to sleeping users and Doctors fraternity raising voice against AI threat to humanity

• State-sponsored actors leading cause of cyber concern in public sector

• Akamai bypasses mitigation for critical Microsoft Outlook flaw

• NSA and Allies Uncover Russian Snake Malware Network in 50+ Countries

• FBI Disables Russian Malware

• Fujitsu Triggers Privacy Breach At Japanese Convenience Stores

• Windows For Gamers Rolls Dice With Your Security

• Briton Pleads Guilty In US To 2020 Twitter Hack

• How One Of Vladimir Putin’s Most Prized Hacking Units Got Pwned By The FBI

• Kasada and Signifyd join forces to combat eCommerce fraud

• Prove Identity partners with Visa to eliminate manual account registration

• Easily bypassed patch makes zero-click Outlook flaw exploitable again (CVE-2023-29324)

• Nutanix Central simplifies management of hybrid multicloud environments

• Cactus Ransomware Infiltrates Networks by Exploiting VPN Flaws

• Emails With HTML Attachments are Still Popular Among Phishing Scammers

• Nearly Half Of Ransomware Victims Pay Up, Sophos Finds

• Western Digital Cyber Attack a ‘Wake Up Call for ASIC Vendors’

• Experts Detail New Zero-Click Windows Vulnerability for NTLM Credential Theft

• Here’s How the FTX Collapse Turned into an Identity Issue

• Cactus: New Ransomware Encrypts Itself to Evade Detection

• Microsoft Flaws Include Secure Boot Bypass, System-Level Takeovers

• Smashing Pumpkins frontman paid ransom to a hacker who threatened to leak the band’s songs

• Revelstoke collaborates with Check Point to automate detection and response solutions

• Codenotary partners with Snyk to ensure the integrity and security of the entire software supply chain

• LogRhythm integrates with Mimecast to defend users against email-based threats

• 23-year-old Brit linked to 2020 Twitter attack and SIM-swap scheme pleads guilty

• What should protection for your 365 data really look like?

• UK’s CMA Approves Viasat Inmarsat Merger

• Capita Says Ransomware Attack Will Cost It Up to $25 Million

• IBM Delivers Roadmap for Transition to Quantum-safe Cryptography

• Webb Raises $7 Million for Blockchain Asset Transfer Privacy System

• SquareX Raises $6 Million for Browser Security Product

• Microsoft Digital Defense Report: Trends In Device and Infrastructure Attacks

• The Industrywide Consequences of Making Security Products Inaccessible

• Sophisticated DownEx Malware Campaign Targeting Central Asian Governments

• Why Attackers Target the Government Industry

• A Decade of Fighting Bad Bots: Key Learnings from the 2023 Imperva Bad Bot Report

• Use Apple HomeKit to automate and secure your home

• NSA Releases New Best Practices for Securing Home Networks

• Free Tool Unlocks Some Encrypted Data in Ransomware Attacks

• Turla’s Snake malware network disrupted by Five Eyes’ authorities

• Nutanix announces data services for Kubernetes and cross-cloud data mobility

• New Startup SquareX Targets Brower-Based Attacks

• 23-year-old Brit linked to 2020 Twitter SIM-swap attack pleads guilty

• Salt Security Achieves AWS WAF Ready Designation

• Warning! New DDoS Botnet Malware Exploits Critical Ruckus RCE Vulnerability

• AI Poses Greater Job Threat Than Automation, Experts Warn

• Enterprise Targeted by Akira Ransomware’s Extortion Techniques

• 3 Tips for Enterprise Patch Management

• Chipmaker Patch Tuesday: Intel, AMD Address Over 100 Vulnerabilities

• SAP Patches Critical Vulnerabilities With May 2023 Security Updates

• CISO Conversations: HP and Dell CISOs Discuss the Role of the Multi-National Security Chief

• Bootkit zero-day fix – is this Microsoft’s most cautious patch ever?

• Why Honeytokens Are the Future of Intrusion Detection

• Phishing Ring Busted, Spanish Police Have Arrested 40 People

• FBI Disables ‘Sophisticated’ Russian Snake Cyberspying Tool

• Never leak secrets to your GitHub repositories again

• How to Reclaim Your Online Privacy

• India To Reopen Applications For $10bn Chip Incentives – Report

• The High-Stakes Game of Cybersecurity: Why Your Data Is a Prime Target for Hackers?

• Professional Services in the World of Cybersecurity

• Capita looking at a bill of £20M over breach clean-up costs

• Mastermind Behind Twitter 2020 Hack Pleads Guilty and Faces up to 70 Years in Prison

• WhatsApp Can’t be Trusted, Warns Elon Musk

• Ransomware Encryption Rates Reach New Heights

• UK man pleads guilty to Twitter hack that compromised accounts of Joe Biden, Elon Musk

• British Man Pleads Guilty To Infamous Twitter Hack

• Twitter Celebrity Hacker Pleads Guilty in US

• A Mysterious New Hacker Group, Red Stinger, Is Lurking in Ukraine’s Cyberspace

• US disrupts Russia-linked Snake implant’s network

• Phishing Ring Bust, Spanish Police Have Arrested 40 People

• Sysco`s System Breached, Customers` and Employees` Data Stolen

• High-Intensity Interval Training (HIIT) Cutting Plan

• Are you eligible for a piece of the $725 million Facebook settlement?

• U.S. Government Neutralizes Russia’s Most Sophisticated Snake Cyber Espionage Tool

• Spanish Police Arrest 40 in Phishing Gang Bust

• SquareX browser-integrated cybersecurity solution keeps consumers’ online activities safe

• How To Install FHX V7 COC New In PC ( Windows 7, 8, 10, and Mac )

• Microsoft Patches Three Zero-Day Bugs This Month

• It’s official: No more COVID vaccine mandate for federal workers and contractors

• SquareX browser-integrated cybersecurity solution keeps consumers online activities safe

• Why performing security testing on your products and systems is a good idea

• Over 600 GB of Fullerton India’s Data Published on the Dark Web

• Twitter to launch encrypted direct messages with voice and video chat to follow, Elon Musk says

• ISACA: Companies Still Face Many Barriers to Achieving Digital Trust

• Microsoft’s May Patch Tuesday Fixes 38 Flaws, Including Active Zero-Day Bug

• Kubernetes Bill of Materials (KBOM) open-source tool enhances cloud security response to CVEs

• Australia TechnologyOne hit by a Cyber Attack

• How do password managers make sense

• Microsoft Patch Tuesday for May 2023 fixed 2 actively exploited zero-day flaws

• Microsoft Defender Antivirus had highest system load impact in latest AV-Test

• 56,000+ cloud-based apps at risk of malware exfiltration

• The security and privacy risks of large language models

• Prevent attackers from using legitimate tools against you

• The CPRA compliance checklist every business should follow in 2023

• Securing the Edge Ecosystem Global Research released – Complimentary report available

• Cyberpress Launches Cybersecurity Press Release Distribution Platform

• Japan’s ubiquitous convenience stores now serving up privacy breaches

• Company executives can’t afford to ignore cybersecurity anymore

• 2023 年 5 月のセキュリティ更新プログラム (月例)

• What Is mTLS? How To Implement It With Istio

• Microsoft Patch Tuesday, May 2023 Edition

• Brightline breach hits at least 964,000 people, US records show

• Ransomware attack on MSI led to compromised Intel Boot Guard private keys

• Fake system update drops Aurora stealer via Invalid Printer loader

• Two Microsoft Windows bugs under attack, one in Secure Boot with a manual fix

• NARA has a plan to tackle its backlog, and its inspector general has thoughts

• Data gaps curtail innovation, digital equity

• Microsoft Patches 2 Zero-Day Vulnerabilities

• Keeper Security Announces Minority Growth Equity Investment From Summit Partners

• Agencies opting for bots see more efficiency—and resistance

• Apple ID: 3 things to remember when changing this password

• Addressing the confusion around shift-left cloud security

• Microsoft Patches Two Zero-Day Vulnerabilities

• The global food distribution giant Sysco discloses a data breach

• IT Security News Daily Summary 2023-05-09

• With updated data profiles, opioid detectors ID latest drugs

• The best VPN services for iPhone and iPad in 2023

• Privoro and Samsung Partner to Provide Trusted Control Over Smartphone Radios and Sensors

• Severe Ruckus RCE Flaws Utilized By Fresh DDoS Botnet Malware

• How the war in Ukraine has been a catalyst in private‑public collaborations

• ESET APT Activity Report Q4 2022­–Q1 2023

• What Is a Passkey? The Future of Passwordless Authentication

• FBI Disarms Russian FSB ‘Snake’ Malware Network

• Creating a Cybersecurity Program That Complies With the FTC Safeguards Rule

• DHS wants software to manage biometrics system requirements

• VERT Threat Alert: May 2023 Patch Tuesday Analysis – Cloned

• US Disrupts Russia’s Sophisticated ‘Snake’ Cyberespionage Malware

• Microsoft Patch Tuesday: 40 Vulnerabilities, 2 Zero-Days

• passkey

• Microsoft fixes two actively exploited bugs, one used by BlackLotus bootkit (CVE-2023-29336, CVE-2023-24932)

• FBI-led Op Medusa slays NATO-bothering Russian military malware network

• A Linux NetFilter kernel flaw allows escalating privileges to ‘root’

• Microsoft disarms push notification bombers with number matching in Authenticator

• GSA tools flag diverse suppliers for procurement officials

• ESET APT Report: Attacks by China-, North Korea-, and Iran-aligned Threat Actors; Russia Eyes Ukraine and the EU

• FBI takes down Russian computer malware network that attacked NATO nations, journalists

• GSA tools flags diverse suppliers for procurement officials

• application blacklisting (application blocklisting)

• Best VPN for streaming TV and movies in 2023

• VentureBeat Q&A: How Airgap CEO Ritesh Agrawal created an innovative cybersecurity startup

• Adobe Patches 14 Vulnerabilities in Substance 3D Painter

• GitHub Secret-Blocking Feature Now Generally Available

• Low-level motherboard security keys leaked in MSI breach, claim researchers

• U.S. Authorities Seize 13 Domains Offering Criminal DDoS-for-Hire Services

• FBI takes down Russian malware network that attacked allies, journalist computers

• Understanding the TikTok Ban: A CISO’s Perspective on the Implications for Enterprises

• How the Economy is Impacting Cybersecurity Teams

• FBI Seized 13 Websites that Offered DDoS-for-hire Services

• Nebulon unveils threat detection solution for cryptographic ransomware

• SAIC EQADR platform accelerates data driven decision making

• Zscaler expands Digital Experience with AI-powered insights to support workforce productivity

• Is Your Cybersecurity “Too” Good?

• The Problem of Old Vulnerabilities — and What to Do About It

• As Platforms Decay, Let’s Put Users First

• Guidance related to Secure Boot Manager changes associated with CVE-2023-24932

• EU proposes spyware Tech Lab to keep Big Brother governments in check

• ICS Patch Tuesday: Siemens, Schneider Electric Address Few Dozen Vulnerabilities

• New Botnet Campaign Exploits Ruckus Wireless Flaw

• Scanning Plans On Europe’s CSAM May Violate International Law

• Alert: NextGen Data Breach Puts 1 Million User Identities at Risk

• Deloitte Launches Blockchain Integration for Digital Credentials

• Study: Artificial Intelligence is Fueling a Rise in Online Voice Scams

• Scans required for PCI DSS compliance

• The role of AI in healthcare: Revolutionizing the healthcare industry

• Only 39% of IT Security Decision-Makers See it As Business Enabler

• Keeper Security Announces Minority Growth Equity Investment from Summit Partners

• CertifID provides identity verification designed to combat seller impersonation fraud

• OneLayer Bridge discovers, assesses, and secures IoT device activity

• Suit by Renowned Saudi Human Rights Activist Details Harms Caused by Export of U.S. Cybersurveillance Technology and Training to Repressive Regimes

• Protecting Your Privacy on ChatGPT: How to Change Your Settings

• Microsoft new ChatGPT to address all privacy concerns

• claims-based identity

• 5 major data backup trends to watch

• CISA, FBI need data from cybercrime victims to support policy

• NextGen Healthcare Data Breach: One Million Patient Records Affected

• PIPEDREAM Malware against Industrial Control Systems

• Services Partner Path — Breakaway 1=5

• CyberGhost VPN Patches Command Injection Vulnerability

• Royal Ransomware Gang Quickly Expands Reign

• Feds Seize 13 More DDoS For Hire Platforms

• Beijing Raids Consultancy, State Sponsored Media Warns More To Come

• WordPress Plugin Hole Puts 2 Million Websites At Risk

• White House addresses AI’s risks and rewards as security experts voice concerns about malicious use

• Certified Cloud Security Professional (CCSP)

• Fortinet warns of a spike of the activity linked to AndoryuBot DDoS botnet

• Kyndryl collaborates with Fortinet to modernize mission-critical networking

• ThreatBlockr integrates with GreyNoise to guard against false positives

• DigiCert and Oracle join forces to help joint customers manage their digital trust initiatives

• Waterfall Security Solutions and Atlantic Data Security improve protection for OT networks

• SafePaaS’ UPAM offering enables discovery, monitoring, and control of privileged accounts

• TikTok Sister Site Douyin Mandates Labels For AI Content

• How To Handle AWS Secrets

• The Biden Administration’s 2023 Cybersecurity Strategy

• Data Protection Startup Optery Raises $2.7 Million in Seed Funding

• Intel BootGuard private keys leaked following MSI hack

• Feds Take Down 13 More DDoS-for-Hire Services

• SideWinder Strikes Victims in Pakistan, Turkey in Multiphase Polymorphic Attack

• the test is here

• Half of npm Packages Vulnerable to Old-School Weapon: the ‘Shift’ Key

• Royal Ransomware Expands to Target Linux, VMware ESXi

• Keep Your Company Cyber Competent Without Adding Cyber Anxiety

• From DevOps to DevSecOps: Strengthen Product Security with Collaborative Tools

• Operation ChattyGoblin: Hackers Targeting Gambling Firms via Chat Apps

• FBI seized 13 domains linked to DDoS-for-hire platforms

• Uncovering the Mystery: How to Find a Person’s Address in 2023

• Pentagon Weapons Systems Have ‘Nearly All’ Vulnerabilities

• Porsche To Add Mobileye Driver Assistance To Future Cars

• Building Automation System Exploit Brings KNX Security Back in Spotlight

• Microsoft: Iranian APTs Exploiting Recent PaperCut Vulnerability

• In Global Rush to Regulate AI, Europe Set to Be Trailblazer

• Patch Tuesday May 2023 – Microsoft Slates for Release 11 Security Fixes for Edge Browser Vulnerabilities

• New Way to Exploit PaperCut Vulnerability Detected

• Scammers Are Hacking Verified Facebook Pages To Trick Users

• Webb Protocol raises $7 million to build interoperable privacy in Web3

• Twitter Apologises For Glitch That Published Private Content

• BEC Campaign via Israel Spotted Targeting Large Multinational Companies

• LinkedIn Displaces 716 Positions, Pulls Out Its China App

• Heimdal® Takes Home Top Honors at Security Excellence Awards for Risk Management

• Iranian Threat Groups Mango Sandstorm and Mint Sandstorm Join the PaperCut Attack Spree

• Twitter To ‘Purge’ Inactive Accounts

• Nextgen Healthcare Hacked – Over 1 Million Customers’ Data Exposed

• US Seizes Domains of 13 DDoS-for-Hire Services

• The SBOM Bombshell

• The Team of Sleuths Quietly Hunting Cyberattack-for-Hire Services

• Microsoft Authenticator push notifications get number matching

• Web3 in 2023 and Beyond: The Trends, Pros and Cons

• Researchers Uncover SideWinder’s Latest Server-Based Polymorphism Technique

• 1-15 April 2023 Cyber Attacks Timeline

• Crypto Exchange Bittrex Files For Bankruptcy After SEC Action

• AndoryuBot DDoS Botnet Exploiting Ruckus AP Vulnerability

• New CACTUS ransomware appeared in the threat landscape

• Is it time for a cyber security hygiene check?

• EU’s Client-Side Scanning Plans Could be Unlawful

• Microsoft Warns of State-Sponsored Attacks Exploiting Critical PaperCut Vulnerability

• OpenVPN DIVE helps admins build ZTNA defined access control policies

• Digital trust can make or break an organization

• Apple Co-Founder Wozniak Warns Over AI Misuse

• CISOs Worried About Personal Liability For Breaches

• Finding bugs in AI models at DEF CON 31

• FCW Insider Chat: Cyber and Tech Policy

• Operation Power Off: 13 More Booter Sites Seized

• Intel BootGuard Secret Keys Compromised During An MSI Breach

• LinkedIn To Shutter China Site, Cut 716 Jobs

• Singapore pitches new law to slow spread of cybercrime

• Five Takeaways From the Russian Cyber-Attack on Viasat’s Satellites

• Beijing raids consultancy, State-sponsored media warns more to come

• Need to improve the detection capabilities in your security products?

• Hacking Groups Rapidly Weaponizing N-Day Vulnerabilities to Attack Enterprise Targets

• Thales 2023 Data Threat Report: Sovereignty, Transformation, and Global Challenges

• How To Combine Cyber Resilience and Cybersecurity for Maximum Cyber Protection

• Iran-linked APT groups started exploiting Papercut flaw

• How To Delete Your Data From ChatGPT

• New Ransomware Strain ‘CACTUS’ Exploits VPN Flaws to Infiltrate Networks

• 13 Additional Domains Linked To DDoS-for-hire Firms Seized By FBI

• Jobs that will be lost for sure with adoption of Artificial Intelligence Technology

• Data Exfiltration Prevention with Zero Trust

• Unattended API challenge: How we’re losing track and can we get full visibility

• How 2022’s threats will impact the global landscape in 2023

• To enable ethical hackers, a law reform is needed

• Get ready for RSA 2023: Stronger Together

• New Bazel Ruleset Helps Developers Build Secure Container Images

• FYI: Intel BootGuard OEM private keys leak from MSI cyber heist

• How To Scan and Validate Image Uploads in Java

• FYI: Intel BootGuard OEM private keys leak from MSI cyber-heist

• Hackers publish MSI private keys, enabling signed malware

• 7 Rules Of Risk Management For Cryptocurrency Users

• Hybrid and remote work: The state of play in 2023

• Drive across this border with a QR code, no passport needed

• How this global company uses SSO and MFA to keep systems and data safe

• LayerX’s Browser Security Survey Reveals: 87% of SaaS Adopters Exposed to Browser-borne Attacks in the Past Year

• A week in security (May 1 – 7)

• The rise of “Franken-ransomware,” with Allan Liska: Lock and Code S04E11

• Ransomware review: May 2023

• Google passkeys are a no-brainer. You’ve turned them on, right?

• Next-gen Apple Watch will reportedly get its first major CPU upgrade in years

• Former head of Roscosmos now thinks NASA did not land on the Moon

• What Really Made Geoffrey Hinton Into an AI Doomer

• Hackers leak images to taunt Western Digital

Generated on 2023-05-10 23:55:30.170903