IT Security News Daily Summary 2023-06-16

• 19 Top Breach and Attack Simulation (BAS) Tools in 2023

• Clop Hacking Rampage Hits US Agencies and Exposes Data of Millions

• Friday Squid Blogging: Squid Can Edit Their RNA

• Palo Alto is shifting into ‘its next gear of growth’, says Wedbush’s Dan Ives

• Facebook Criticized For “Tsunami” Of Fraud On Its Platforms

• Getting Over the DNS Security Awareness Gap

• Data Loss Prevention in an API-Driven World

• How one state tracks down cartographic ‘phantoms’

• Pure Signal Scout May Finally be the Tool to Help Threat Hunters Move from Reactive to Proactive

• Tech panel champions near-term quantum efforts in must-pass defense bill

• Killnet Threatens Imminent SWIFT, World Banking Attacks

• The Infrastructure Security Engineer Is a Unicorn Among Thoroughbreds

• Security LeadHER Wraps Groundbreaking Inaugural Conference for Women in Security

• Here’s our internal debate about what to do with stocks making all-time highs

• Lawmakers propose shoring up nuclear cyber standards ahead of NDAA markup

• Security and Human Behavior (SHB) 2023

• LockBit suspect’s arrest sheds more light on ‘trustworthy’ gang

• Bringing Transparency to Confidential Computing with SLSA

• Louisiana driver’s licenses, auto registrations targeted in massive data breach

• 3 simple steps to improve digital government

• Third MOVEit Transfer Vulnerability Disclosed by Progress Software

• Using AI for Loans and Mortgages is Big Risk, Warns EU Boss

• Opioid settlement payouts to localities made public for first time

• There is Nothing Fair About the European Commission’s “Fair Share” Proposal

• Dodgy Microlending Apps Stalk MEA Users, Highlighting Cyber Maturity Gaps

• Hassan, Cornyn try again with IT modernization bill

• U.S. government agencies breached via MoveIt Transfer flaw

• Russian National Arrested in Connection With LockBit Ransomware

• Cyber Attack projected on US and European Banking Systems

• Using social media as a tool to share knowledge on day-to-day Cybersecurity risks

• Three ways agribusinesses can protect vital assets from cyberattacks

• NASA steps closer to perfecting super-fast internet in deep space

• Akamai’s new study: Bots, phishing and server attacks making commerce a cybersecurity hotspot

• New Version of Android GravityRAT Spyware Targets WhatsApp Backups

• Oil and gas giant Shell is another victim of Clop ransomware attacks

• Feds Arrest, Charge Russian National In Arizona For LockBit Attacks

• Hacker Gang Clop Publishes Victim Names On Dark Web

• Intel To Start Shipping A Quantum Processor

• Progress Software Rushes To Patch Another MOVEit SQL Vulnerability

• Cost-of-Living Crisis increasing changes of Insider threats

• Security Guidance from the Front Lines of Cloud Incident Response

• Russia-affiliated Shuckworm Intensifies Cyber-Attacks on Ukraine

• Attackers Create Synthetic Security Researchers to Steal IP

• The Importance of Securing Remote Access: Insights from CISA’s Latest Guide

• LockBit Ransomware Extorted $91 Million Dollars in 1,700 U.S. Attacks

• Strengthening Cyber Defense: China’s Actions Against AirDrop and Bluetooth File Sharing

• WordPress: Strip Payment Plugin Flaw Exposes Customers’ Order Details

• Hackers Use New Exploit Technique to Hijack S3 Buckets

• Doppl: The Latest AI Twin Product is About to Transform the Future Of Digital Branding

• How Do Some Companies Get Compromised Again and Again?

• Amazon’s $1.7bn iRobot Acquisition Cleared By UK’s CMA

• Cybercrime Doesn’t Take a Vacation

• ChamelDoH: New Linux Backdoor Utilizing DNS-over-HTTPS Tunneling for Covert CnC

• Russian Hackers Using USB-Spreading Malware in Attacks on Ukrainian Government, Military

• Russian National Arrested, Charged in US Over Role in LockBit Ransomware Attacks

• In Other News: Linux Kernel Exploits, Update on BEC Losses, Cybersecurity Awareness Act

• Close Quarters Encounters with Third Generation Malware Compels UK and Danish Municipalities to Remodel Vulnerability Management Safeguards

• Clop’s MOVEit Hack Hits US Government, As Other Victims Are Named

• Capita faces first legal Letter of Claim over mega breach

• How Do I Protect My API Keys From Appearing in Search Results?

• HashiCorp Expands PAM, Secrets Management Capabilities

• Virtana acquires OpsCruise to help users manage complex modern environments

• Best practices for patch management

• More 3CX Data Exposed! Third-Party Vendor to Blame for the Leak

• How to Turn Off Phone Without Power Button (Android and iPhone) – A Complete Guide

• Progress fixed a third flaw in MOVEit Transfer software

• Photos: BSidesLjubljana 0x7E7

• Insufficient Investments Impede Progress in Identity Security Measures

• Activities in the Cybercrime Underground Require a New Approach to Cybersecurity

• Top EU official urges more countries to ban China’s Huawei, ZTE from 5G networks

• PyPI Suspends New Registrations After Malicious Python Script Attack

• Preventing Cyber Attacks is Critical to Improve Healthcare Outcomes

• MDR vs. MSSP: Decoding the Differences Between Cybersecurity Solutions

• Microsoft Reaches $2.6 Trillion Valuation Thanks To AI

• New Survey Reveals Critical Data Security Gap In the Financial Services Industry

• Shell Global Hacked using Flaw in the MOVEit File Transfer System

• Preparing Travel and Hospitality Companies for Cybersecurity in The Wake Of Travel Technologies

• Approximately 9 million dental patients in the USA affected by a data breach

• US Government Hit By Clop In MOVEit Global Cyberattack

• Ransomware Group Starts Naming Victims of MOVEit Zero-Day Attacks

• Barracuda Zero-Day Exploited by Chinese Actor

• Updated Android spyware GravityRAT steals WhatsApp Backups

• Cyber-Criminals Are Using Mining Pools to Launder Crypto

• 20-Year-Old Russian LockBit Ransomware Affiliate Arrested in Arizona

• Clop Starts MOVEit Extortion as New Bug is Discovered

• #InfosecurityEurope: How DORA Will Force Financial Firms to Adopt Cyber Resilience

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Silicon UK Pulse: Your Tech News Update: Episode 7

• Microsoft: Russia sent its B team to wipe Ukrainian hard drives

• Almost all US Fed Agencies fell prey to Cyber Attack

• Understanding the Importance of Cyberthreat Analysis Training Programs

• New infosec products of the week: June 16, 2023

• Red teaming can be the ground truth for CISOs and execs

• Insight on Vulnerabilities in MOVEit Transfer

• Third Flaw Uncovered in MOVEit Transfer App Amidst Cl0p Ransomware Mass Attack

• Introducing the book: Visual Threat Intelligence

• Cybersecurity culture improves despite the dark clouds of the past year

• Cybercriminals return to business as usual in a post-pandemic world

• 2023-06-15 – 30 days of Formbook: Day 11, Thursday 2023-06-14 – “GA94”

• Need To Know Data Redaction Software

• EU boss Breton: There’s no Huawei that Chinese comms kit is safe to use in Europe

• The US government buys your user data. Here’s what it does with it

• EU boss Breton: there’s no Huawei that Chinese comms kit is safe to use in Europe

• LockBit ransomware advisory from CISA provides interesting insights

• CISA advisory on LockBit: $91 million extorted from 1,700 attacks since 2020

• How Do I Protect My API Keys From Appearing in GitHub Search Results?

• MOVEit mayhem 3: “Disable HTTP and HTTPS traffic immediately”

• US government hit by Russia’s Clop in MOVEit mass attack

• New Diicot Threat Group Targets SSH Servers with Brute-Force Malware

• LockBit Affiliate Arrested, as Extortion Totals Reach $91M Since 2020

• Action1 Announces $20M Investment in Its Patch Management Platform

• Keytos Uncovers 15,000 Vulnerable Subdomains per Month in Azure Using Cryptographic Certificates

• Coalition Releases Security Vulnerability Exploit Scoring System

• Critical Barracuda ESG Zero-Day Linked to Novel Chinese APT

• Vulcan Cyber Is a Launch Partner for Wiz Integrations (WIN) Platform

• Thales Proposes to Acquire Tesserent, Expanding its Global Cybersecurity Leadership

• Unreleased Music Stolen and Sold on Dark Web: Hacker Fined

• Chinese nation-state actor behind Barracuda ESG attacks

• Barracuda ESG zero-day exploited by China-linked APT

• How to automatically clear the Bitwarden clipboard for better security

• 5 Stages of the Vulnerability Management Lifecycle

• Relaunched electric grid caucus plans to highlight security, tech improvements

• Man Sues Facebook For Blocking His Account And Wins

• DOD lacks performance targets, cybersecurity plans on some major IT programs, GAO says

• In Healthcare Organizations, Data Security Risks Persist Despite HIPAA Compliance

• Anonymous Sudan, MOVEit, and Cl0p

• Integrating Essbase Cubes With OBIEE for Advanced Reporting

• Cyberattack hits ‘several’ federal agencies, drawing an ‘all-hands’ call for response

• States need better tech, training to keep repeat drunk drivers off the roads

• US Government Agencies Hit In Global Cyber Attack

• Russian ransomware hacker extorted millions from U.S. businesses, prosecutors say

• Chinese spies blamed for data-harvesting raids on Barracuda email gateways

• CISA, NSA Share Guidance on Hardening Baseboard Management Controllers

• Oracle and Cohere Collaborate for New Gen AI Service

• Virginia transit agencies get access to planning software

• Coalition ESS helps enterprises mitigate their most critical risks

• MIT-based AI apps startup aims to block supply chain attacks with advanced cybersecurity

• S3 Ep139: Are password rules like running through rain?

• Free Training’s Role in Cybersecurity

• Ransomware Hackers and Scammers Utilizing Cloud Mining to Launder Cryptocurrency

• Megaupload Staff Jailed For Role In Kim Dotcom Business

• European Countries Right To Ban Huawei, ZTE – EU Official

• Congress ‘doesn’t know what the hell it’s doing‘ in AI regulation, Ted Cruz says

• With $1.4 billion investment, Texas hopes to sprint to the front of the microchip manufacturing race

• You can get a share of Google’s $23 million dollar settlement. Here’s how

• Content Moderation Tech Startup Trust Lab Snags $15M Investment

• Hackers Set Up Fake GitHub Repos to Deliver Malware Posing as Zero-day

• CISA and NSA Publish BMC Hardening Guidelines

• The US Navy, NATO, and NASA Are Using a Shady Chinese Company’s Encryption Chips

• Salesforce Unveils AI Cloud, Empowering Enterprises with Reliable Generative AI Capabilities

• LockBit siphoned $91 million in US alone and so tops the list

• Data de-identification: Best practices in the new age of regulation

• The Future of Software: Building Products with Privacy at the Core

• CISA Order Highlights Persistent Risk at Network Edge

• Study Reveals Ransomware as Most Popular Cybercrime Service

• Microsoft Names Russian Threat Actor “Cadet Blizzard”

• Angola Marks Technology Advancements With Cybersecurity Academy Plans

• Chinese UNC4841 Group Exploits Zero-Day Flaw in Barracuda Email Security Gateway

• Russia-linked APT Gamaredon update TTPs in recent attacks against Ukraine

• LockBit Victims In The US Alone Paid Over $90m In Ransoms Since 2020

• Russia Hackers Unleash New USB-Based Malware On Ukraine’s Military

• Is The US Trying To Kill Crypto?

• XSS Vulnerabilities In Azure Led To Unauthorized Access In User Sessions

• Barracuda Zero Day Attacks Attributed To Chinese Cyberespionage Group

• New Russian APT Group Responsible for Wiper Attacks in Ukraine Exposed

• Microsoft Patch Tuesday June Arrived With 77 Vulnerability Fixes

• Going Up! How to Handle Rising Cybersecurity Costs

• TikTok To Invest Billions In Southeast Asia For E-Commerce Push

• 10 Ways To Keep Your Java Application Safe and Secure

• Fake Security Researcher Accounts Pushing Malware Disguised as Zero-Day Exploits

• SquareX Launches Bug Bounty Program for Browser Security Product

• Barracuda Zero-Day Attacks Attributed to Chinese Cyberespionage Group

• XSS Vulnerabilities in Azure Led to Unauthorized Access to User Sessions

• OT Security Firm Shift5 Adds $33 Million in Funding

• ‘Shampoo’ ChromeLoader Variant Difficult to Wash Out

• Russia-linked APT Gamaredon update TTPs in recent attacks against Ukraine

• The best travel VPNs of 2023: Expert tested and reviewed

• Borderless Data vs. Data Sovereignty: Can They Co-Exist?

• Zacks Data Breach Exposes 8 Million Users’ Personal Information

• MSP Cybersecurity: What You Should Know

• Government has a policy-over-people problem, civic tech leader argues

• #InfosecurityEurope: EMEA Retailers Experience Surge in Web Attacks, With Germany Heavily Targeted

• Vidar Malware Using New Tactics to Evade Detection and Anonymize Activities

• T-Mobile partners with Google Cloud to bring next generation 5G capabilities to life

• anecdotes Risk Manager updates provide users with data-powered risk management

• OneSpan Notary enhancements secure digital identities

• A Shady Chinese Firm’s Encryption Chips Got Inside the US Navy, NATO, and NASA

• Warning: GravityRAT Android Trojan Steals WhatsApp Backups and Deletes Files

• Palo Alto Networks Achieves Cyber Essentials Plus Certification in the UK

• Microsoft sued for alleged misuse of stolen Dark Web credentials

• Researchers Discover Landmark Ransomware Extortion: Automated SaaS Ransomware

• New Supply Chain Attack Exploits Abandoned S3 Buckets to Distribute Malicious Binaries

• New Research: 6% of Employees Paste Sensitive Data into GenAI tools as ChatGPT

• Twitter Sued For $250 Million By Music Publishers

• New Report Reveals Shuckworm’s Long-Running Intrusions on Ukrainian Organizations

• FBI Alerts Gmail and Outlook Users Regarding Malicious Email That Drains Bank Account

• When “Good Enough” Isn’t Good Enough for Cloud Migration Security

• EU Parliament Approves Draft AI Regulations

• Massive global scale phishing campaign using malicious PDFs, identified and blocked by new ThreatCloud AI engine

• How Europe is Leading the World in the Push to Regulate AI

• How Shady Chinese Encryption Chips Got Into the Navy, NATO, and NASA

• VMware fixes critical flaws in Aria Operations for Networks (CVE-2023-20887)

• Own it, don’t trade it or book profits on a big winner? Cramer’s Monthly Meeting advice is clear

• Vietnamese Public Companies Targeted by SPECTRALVIPER Backdoor

• AEI Reports: Threat Actors are Targeting High-profile Companies

• New Bitwarden update fix a huge vulnerability on Windows…. update now!

• 5 Malware Trends on the Horizon

• #InfosecurityEurope: New Study Takes a Deep Dive Into Lookalike Attacks

• Understanding Malware-as-a-Service

• SeroXen Incorporates Latest BatCloak Engine Iteration

• Attack Surface Management Strategies

• Meet Your New AI Assistant: Introducing Trend Vision One™ – Companion

• To Fight Cyber Extortion and Ransomware, Shift Left

• Most Reddit Forums Still Dark, After CEO Doubles Down

• #InfosecurityEurope: Cost-of-Living Crisis Drives Insider Threat Concerns

• Microsoft Warns of New Russian State-Sponsored Hacker Group with Destructive Intent

• Trend Micro brings generative AI to Vision One cybersecurity platform

• LockBit Makes $91m From US Victims in Two Years

• #InfosecurityEurope: Breaches Down as Security Culture Improves

• Cybersecurity agencies published a joint LockBit ransomware advisory

• IT Security Guru study shows over one in ten Brits are willing to engage in ‘illegal or illicit’ online behaviour as the Cost of Living crisis worsens

• LockBit Ransomware Gang Earned $91 Million Ever Since It Discovered

• LockBit Makes $91m from US Victims in Two Years

• Private Data Compromised in Healthcare Breach

• New EMFI Attack Against Drones Leads to Complete Take Over

• Do you know what your supply chain is and if it is secure?

• Chinese Hackers Exploit VMware ESXi Zero-Day to Execute Privileged Commands

• A Guide to Key Management as a Service

• Crypto trading firm freezes accounts due to a Cyber Attack

• How cybercriminals target energy companies

• How secure is your vehicle with digital key technology?

• LockBit Ransomware Extorts $91 Million from U.S. Companies

• Cyber debt levels reach tipping point

• Fiddler Auditor: Open-source tool evaluates the robustness of large language models

• SeroXen RAT for sale

• What is a browser doing at Infosecurity Europe 2023?

• Small organizations outpace large enterprises in MFA adoption

• North Korea created very phishy evil twin of Naver, South Korea’s top portal

• Network-Security Testing Standard Nears Prime Time

• Cryptocurrency Attacks Quadrupled as Cybercriminals Cash In

• Ticket scammers target Taylor Swift tour

• Update Chrome now! Google fixes critical vulnerability in Autofill payments

• Microsoft fixes six critical vulnerabilities in June Patch Tuesday

• Microsoft links Cadet Blizzard APT to Russia’s military intelligence GRU

• Decision to hold women-in-cyber events in abortion-banning states sparks outcry

Generated on 2023-06-16 23:55:30.562281