IT Security News Daily Summary 2023-06-10

• Experts found new MOVEit Transfer SQL Injection flaws

• The University of Manchester suffered a cyber attack and suspects a data breach

• PoC Published for Windows Win32k Flaw Exploited in Assaults

• Atomic Wallet Hit by North Korean Hackers

• Neurotech: ICO Raises Alarms Over the Future of Brain-monitoring Technology

• How SASE Adoption Today – Can Resolve Tomorrow’s Threats

• 9 Years After the Mt. Gox Hack, Feds Indict Alleged Culprits

• New SPECTRALVIPER Backdoor Targeting Vietnamese Public Companies

• “New Crypto Ad Rules: Mandatory 24-Hour Cooling-Off Period Introduced”

• 50+ Network Penetration Testing Tools for Hackers & Security Professionals – 2023

• New Critical MOVEit Transfer SQL Injection Vulnerabilities Discovered – Patch Now!

• Build or Buy your own antivirus product

• Meta removes Facebook content after notification to do so under Singapore online safety law

• Learn How SASE Adoption Today – Can Resolve Tomorrow’s Threats

• VMware patches critical vulnerabilities in Aria Operations for Networks

• Update your Cisco System Secure Client now to fix this AnyConnect bug

• Ransomware review: June 2023

• Former TikTok exec: Chinese Communist Party had “God mode” entry to US data

• Supreme Court Sends Bad Spaniels Back to Obedience School, Leaves Rogers Test Mostly Intact

• Online muggers make serious moves on unpatched Microsoft bugs

• Passkeys See Fresh Momentum With New Pilot Programs

• 2023-06-08 – 30 days of Formbook: Day 4, Thursday 2023-06-08 – “T30K”

• 2023-06-09 – 30 days of Formbook: Day 5, Friday 2023-06-09 – GuLoader Formbook “V16R”

• Firm study predicts big spends on generative AI

• More MOVEit mitigations: new patches published for further protection

• Confidential containers on Azure with OpenShift: setup guide

• Introduction to confidential virtual machines

• BBC, British Airways, Boots hit with hackers’ ultimatum after suffering MOVEit supply-chain attack

• IT Security News Daily Summary 2023-06-09

• Duo vs Microsoft Authenticator (2023): In-depth comparison

• Brand-New Security Bugs Affect All MOVEit Transfer Versions

• DOS Attacks Dominate, but System Intrusions Cause Most Pain

• Russians charged with hacking Mt. Gox exchange and operating BTC-e

• ‘Asylum Ambuscade’ Cyberattackers Blend Financial Heists & Cyber Espionage

• DOS Attacks Dominate, But System Intrusions Cause Most Pain

• Tracing the Path: Unraveling the Full History of Toncoin

• Why address confidentiality programs are broken and how we can fix them

• FBI: FISA Section 702 ‘absolutely critical’ to spy on, err, protect Americans

• Hey Yara, find some vulnerabilities

• Spotlight on Elinadav Heymann: The Innovative Programmer Revolutionizing the Digital Landscape

• Fake Android Apps Ran Adware Campaign For Months

• 3 Elite Communication Skills to Help Security Pros Get Projects Funded

• Are government decisions being made by AI? Lawmakers want to mandate disclosure

• White House efforts to get data equity-ready will also support AI, official says

• Officials tout data centers’ economic benefits

• Is generative AI bad for the environment?

• 5 Best Cloud Native Application Protection Platforms in 2023

• Experts Urge Caution as Cyber Gang Claims to Have Erased Stolen Data in N.S. Breach

• Safeguarding Your Digital Life: Navigating the Evolving Landscape of Cybersecurity

• A Practical Guide for Container Security

• Just 14% of CISOs possess desired traits for cybersecurity-expert board positions: Report

• Thoughts on scheduled password changes (don’t call them rotations!)

• Ransomware scum hit Japanese pharma giant Eisai Group

• Outlook Services Paralyzed: Anonymous Sudan’s DDoS Onslaught

• China Must Release Program Think Blogger Ruan Xiaohuan, Champion of Free Expression Who Spoke Out Against Censorship and Oppression

• Microsoft Uncovers Banking AitM Phishing and BEC Attacks Targeting Financial Giants

• FIRST expands its leadership team

• Introduction to the purpose of AWS Transit Gateway

• Minecraft Community on High Alert as Malware Infects Popular Mods

• Why attackers love to target IoT devices

• Meta ordered to remove Facebook content under Singapore online safety law

• In Other News: AI Regulation, Layoffs, US Aerospace Attacks, Post-Quantum Encryption

• Cl0P Gang Sat on Exploit for MOVEit Flaw for Nearly 2 Years

• Cramer cautions investors to ‘temper your enthusiasm,’ with the market overbought

• Security Expert’s Tweet Prompts Significant Modification to Google Email Authentication

• Exploring Zero-Knowledge Proofs: A Powerful Tool for Cybersecurity

• US Senate concerned about Twitter Data Privacy and Security

• South African Female Students Offered Cyber Scholarship

• Kyndryl’s CSIRF service responds to detected security incidents

• eSentire unveils SaaS-based network traffic disruption for AWS to reduce cloud-based threats

• Replace Barracuda ESG appliances, company urges

• Cyber Criminals Sharing GPT-4 API Keys for Free

• Google Changes Email Authentication After Spoof Shows A Bad Delivery For UPS

• Netflix Sign-Ups Jump As Password Crackdown Kicks Off

• Robinhood Markets Removes Three Crypto Tokens

• Ransomware Gang Clop Prepped Zero Day MOVEit Attacks In 2021

• Guardz launches AI-powered Multilayered Phishing Protection to secure SMEs

• EU Mulls Mandatory 5G Ban For Firms Like Huawei – Report

• Risk & Repeat: Moveit Transfer flaw triggers data breaches

• University of Manchester Suffers Suspected Data Breach During Cyber Incident

• The Automotive industry’s inadequate approach towards software (in the cars)

• Japanese Pharmaceutical giant Eisai hit by a ransomware attack

• Gigamon allows users to gain deep observability into security data with Amazon Security Lake integration

• Insight launches Insight Lens for GenAI

• Clop Ransomware Is Likely Behind the MOVEit Zero-Day Vulnerability Attacks

• Top 12 New Features in iOS 17 and iPadOS 17

• Digital atlas could reveal zoning’s social impact

• Blackpoint Raises $190 Million to Help MSPs Combat Cyber Threats

• How Continuous Monitoring and Threat Intel Can Help Prevent Ransomware

• 5 Tips for Modernizing Your Security Operations Center Strategy

• Asylum Ambuscade: A Cybercrime Group with Espionage Ambitions

• White House makes case for renewed Quantum Initiative Act

• Clop ransomware gang was testing MOVEit Transfer bug since 2021

• Seven steps for using zero trust to protect your multicloud estate

• 3rd-Party Reddit App Apollo Forced to Shut Down Due to API Charges

• Security Awareness Training 101: Which Employees Need It?

• SaaS Ransomware Attack Hit Sharepoint Online Without Using a Compromised Endpoint

• Evidence Suggests Ransomware Group Knew About MOVEit Zero-Day Since 2021

• ‘Asylum Ambuscade’ Group Hit Thousands in Cybercrime, Espionage Campaigns

• Google Introduces SAIF, a Framework for Secure AI Development and Use

• OneTrust announces new features to help organizations automate data discovery and classification

• VanDyke Software releases VShell 4.9 server to expand authentication options for SFTP virtual roots

• Deepwatch partners with Lacework to provide customers with end-to-end cloud security solutions

• Government buyers need training to go green, panel says

• Research : Generative AI Can Save Marketing Professionals 5 Hours Weekly

• Unified Security from Code to Cloud at AWS re:Inforce

• May 2023’s Most Wanted Malware: New Version of Guloader Delivers Encrypted Cloud-Based Payloads

• Brit data watchdog fines sleazy sales ops £250K for ‘bombarding’ folk with calls

• Barracuda Urges Swift Replacement of Vulnerable ESG Appliances

• 5 Reasons Why Access Management is the Key to Securing the Modern Workplace

• How Does Your Snap Score Go Up? 5 Ways to Increase It

• How Much Energy Do Your Gadgets Consume?

• China To Restrict AirDrop, Bluetooth File-Sharing, Citing National Security

• Democrats and Republicans Are Skeptical of US Spying Practices, an AP-NORC Poll Finds

• Google Cloud Now Offering $1 Million Cryptomining Protection

• Security Experts Highlight Exploit for Patched Windows Flaw

• Google Launches Framework to Secure Generative AI

• Blackpoint Cyber raises $190 million to fund further development of its security technology

• Minecraft Users Warned of Malware Targeting Modpacks

• Analyzing the FUD Malware Obfuscation Engine BatCloak

• EU Approves €8 Billion in State Subsidies for Tech Research

• Organizations Urged to Address Critical Vulnerabilities Found in First Half of 2023

• Clop Ransomware Gang Extorts Household Names including BBC, British Airways and Boots

• What Is the Principle of Least Privilege (POLP)?

• Stealth Soldier backdoor used is targeted espionage attacks in Libya

• Unblocking the Web with SOCKS5 Proxies – How Does it Work?

• Silicon UK Pulse: Your Tech News Update: Episode 6

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Fine-grained Authorization: Protecting and controlling user access in a digital-first world

• Revolutionizing Poker: Unveiling the Next Generation Digital Poker Table at the 2023 World Series of Poker

• Unblocking the Web with SOCKS5 Proxies

• Stealth Soldier: A New Custom Backdoor Targets North Africa with Espionage Attacks

• Detecting and mitigating a multi-stage AiTM phishing and BEC campaign

• June 2023 Patch Tuesday forecast: Don’t forget about Apple

• Google offers Cryptomining protection of $1 Million if it fails

• Deepfake: Unveiling the Emerging Cybersecurity Threat

• Employee cybersecurity awareness takes center stage in defense strategies

• Introducing the book: Creating a Small Business Cybersecurity Program, Second Edition

• New infosec products of the week: June 9, 2023

• Three ways agribusinesses can protect vital assets from cyberattacks

• Darkweb credit card marts in decline across Asia, researchers claim

• Factors influencing IT security spending

• Google changes email authentication after spoof shows a bad delivery for UPS

• IoT Botnet DDoS Attacks Threaten Global Telecom Networks, Nokia

• Update Chrome now! Google patches actively exploited zero-day

• Warning: Victims’ faces placed on explicit images in sextortion scam

• Unveiling Nebula’s Report 2.0: A new approach to security reporting

• Robot can rip the data out of RAM chips with chilling technology

Generated on 2023-06-10 23:55:26.946504