IT Security News Daily Summary 2023-07-07

• Truebot Malware Variants Abound, According to CISA Advisory

• Meta’s Rush to Topple Twitter Sets Up Looming Privacy Debate

• Friday Squid Blogging: Giant Squid Nebula

• A man has been charged with a cyber attack on the Discovery Bay water treatment facility

• 8 Best Penetration Testing Tools and Software for 2023

• Top Suspect in 2015 Ashley Madison Hack Committed Suicide in 2014

• Microsoft Defender for Endpoint is ranked number one in market share in the IDC Worldwide Corporate Endpoint Security Market Shares report, 2022

• The five-day job: A BlackByte ransomware intrusion case study

• EDM Council Survey: Management of Cloud Data Deployment is Lacking

• Spyware Gamed 1.5M Users of Google Play Store

• Microsoft Edge cheat sheet

• Government Officials Banned From Contacting Facebook In Free Speech Case

• MOVEit Transfer Faces Another Critical Data-Theft Bug

• Vishing Goes High-Tech: New ‘Letscall’ Malware Employs Voice Traffic Routing

• Live Training: Dallas, TX, USA

• Live Training: Miami, FL, USA

• Industrial Solar Panels Face Critical RCE Bugs

• OpenAI Faces Lawsuit for Exploiting User Data to Train ChatGPT, DALL-E

• Amazon Brushing Scam: What It Is And How To Avoid It

• Educational Institutions Under Attack: Ransomware Criminals Leak Students’ Sensitive Data Online

• Data Leak Affects 425,000 Swiss Addresses

• How the FBI Hacked Hive and Saved Victims

• After Zero-Day Attacks, MOVEit Turns to Security Service Packs

• 10 ways SecOps can strengthen cybersecurity with ChatGPT

• network intrusion protection system (NIPS)

• Enterprise risk management should inform cyber-risk strategies

• Progress warns customers of a new critical flaw in MOVEit Transfer software

• What is an incident response plan (IRP) and how effective is your incident response posture?

• Chinese Spyware Discovered on Google Play Store

• mobile authentication

• Twitter User Exposes Nickelodeon Data Leak

• Settled Human Rights Standards as Building Blocks for Platform Accountability and Regulation: A Contribution to the Brazilian Debate

• Rising Costs of Cyberattacks: Ransomware Victims Paying More, Finds Report

• Fujitsu Cloud Security rebuked by Japan and Nickelodeon Data Breach

• Iranian Cyberspies Target US-Based Think Tank With New macOS Malware

• Former Contractor Employee Charged for Hacking California Water Treatment Facility

• In Other News: Healthcare Product Flaws, Free Email Security Testing, New Attack Techniques

• New Campaigns Use Malicious npm Packages to Support Phishing Kits

• Ex-Employee Charged For Hacking Water Treatment Facility

• Secure and Scalable Cloud Networking with Oracle Cloud Intra-VCN Routing and Check Point CloudGuard

• Another Critical Unauthenticated SQLi Flaw Discovered in MOVEit Transfer Software

• Sticky Sessions With Apache APISIX — The Demo

• OpenAI Is Hiring Researchers to Wrangle ‘Superintelligent’ AI

• Can Generative AI Be Trusted to Fix Your Code?

• Mastodon Social Network Patches Critical Flaws Allowing Server Takeover

• StackRot: A New Linux Kernel Flaw Allows Privilege Escalation

• AI in Cybersecurity – Take the Survey

• Hackers Exploit Netwrix Auditor RCE Flaw in Truebot Malware Attack

• Security Firm Finds Over 130k Internet-Exposed Photovoltaic Diagnostics Systems

• OWASP SwSec 5D Tool Provides SDLC Maturity Ratings, Aids Software Supply Chain

• Vulnerabilities in PiiGAB Product Could Expose Industrial Organizations to Attacks

• 4 Best VPN Services (2023): For Routers, PC, iPhone, Android, and More

• Before You Deploy Advanced Tech, Consider the Hidden Cyberthreats

• From AI-driven Defense to Dark Web Threat Intelligence

• Bluesky Surpasses One Million Downloads

• Evolving DORA Metrics: Discussing Emerging Trends and Advancements in DORA Metrics, Such as Incorporating Security and Quality Metrics Into the Assessment Framework

• AWS Exec: Generative AI can create a flywheel effect for business growth

• Top Data Breaches in 2023: Alarming Incidents Impacting Companies

• Malicious Insider Explained: The Call is Coming from Inside the House

• Tailing Big Head Ransomware’s Variants, Tactics, and Impact

• Generative AI Policy Must Be Precise, Careful, and Practical: How to Cut Through the Hype and Spot Potential Risks in New Legislation

• Capita staffers told attackers stole data from its own pension fund

• Global Translation Service Exposed Highly Sensitive Records Online

• Two Apps Hosted on Google Play Caught Sending User Data to Chinese Servers

• How To Tell If You’ve Been DDoSed: 5 Signs of a DDoS Attack

• CISA, FBI: A New Version of the Truebot Malware Is Actively Used in Attacks

• Close Security Gaps with Continuous Threat Exposure Management

• The AI Dividend

• How Digitalization Has Revolutionized The Process Of Obtaining A Second Passport

• Broadcom Signals $1 Billion Investment In Spain

• ENISA: Ransomware Makes Up Over Half of Healthcare Cyber-Threats

• July 2023 Patch Tuesday forecast: A month of instability and uncertainty

• Meduza Stealer Targets Password Managers

• 10 Email Security Best Practices in 2023

• Kubernetes: Advantages and Disadvantages

• BlackByte 2.0 Ransomware: Infiltrate, Encrypt, and Extort in Just 5 Days

• Twitter Threatens Lawsuit Over Threads App

• US and Canadian Authorities Warn of Increased Truebot Activity

• Cybersecurity Agencies Sound Alarm on Rising TrueBot Malware Attacks

• JumpCloud Resets API Keys Amid Ongoing Cybersecurity Incident

• Google Releases Android Patch Update for 3 Actively Exploited Vulnerabilities

• Decoding the Algorithms: How Online Casinos Are Programmed to Operate – 2023 Guide

• Printing the Future: The State of Additive Manufacturing

• HSBC Joins Quantum-Secure Network

• Strengthening the Security of Embedded Devices

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Silicon UK Pulse: Your Tech News Update: Episode 10

• StackRot – New Linux kernel Privilege Escalation Vulnerability

• BlackByte 2.0 Ransomware Employs Wide Range of Tools in 5 Days

• CISA and FBI warn of Truebot infecting US and Canada based organizations

• Minneapolis Public Schools Faces Data Leak Following Ransomware Attack

• Unmasking the Threat: Understanding Fileless Attacks

• Startup Spotlight: Endor Labs Focuses on Reachability

• Next-Generation Firewalls: A comprehensive guide for network security modernization

• Benefits of Using NFV with SASE

• API tools and services are fueling revenue growth

• Is your browser betraying you? Emerging threats in 2023

• Scammers using AI voice technology to commit crimes

• How We Found Another GitHub Action Environment Injection Vulnerability In A Google Project

• Mastodon Fixes Critical TootRoot Vuln Allowing Node Jacking

• Iranian Hacking Group Impersonating Nuclear Experts To Gain Intel From Western Think Tanks

• RAM-Ramming Rowhammer Is Back To Uniquely Fingerprint Devices

• LockBit Louts Unload At Japan’s Most Prolific Cargo Port

• North Korean Satellite Had No Military Unit For Spying, Says South Korea

• Update Android now! Google patches three actively exploited zero-days

• Warning issued over vulnerability in cardiac devices

• How Threads’ Privacy Policy Compares to Twitter’s (and Its Rivals’)

• Cisco warns of a flaw in Nexus 9000 series switches that allows modifying encrypted traffic

• Nickelodeon probes claims of massive data leak as SpongeBob fans rejoice

• Microsoft puts out Outlook fire, says everything’s fine with Teams malware flaw

• China-Linked Spyware Found in Google Play Store Apps, 2m Downloads

• OPM identifies over 50 skill sets to look for in federal AI workers

• How cities can navigate their state’s broadband preemption laws

• Black Hat Announces Maria Markstedter, Jen Easterly, Viktor Zhora, and Kemba Walden As Keynote Speakers for Black Hat USA 2023

• IT Security News Daily Summary 2023-07-06

• StackRot Linux Kernel Bug Has Exploit Code on the Way

• Microsoft puts out Outlook fire, says ‘everything’s fine’ with Teams malware flaw

• New court ruling may hinder federal information sharing efforts, experts warn

• CISA: Truebot malware infecting networks in U.S., Canada

• Penetration Testing vs Vulnerability Scanning: What’s the Difference?

• Expanding Broadband in Portland, The Time Is Now

• Truebot Hackers Exploiting Netwrix Auditor Flaw: CISA, FBI Alert

• Patchless Cisco Flaw Breaks Cloud Encryption for ACI Traffic

• Hashed Emergent Announces India Blockchain Week (IBW) Conference

• Shell Becomes Latest Cl0p MOVEit Victim

• Nexo Achieves Type 2 SOC 2 Audit, Reinforces Data Security Compliance

• Retail Wins with Umbrella

• single-factor authentication (SFA)

• Don’t Join Threads—Make Instagram’s ‘Twitter Killer’ Join You

• 6 steps to securing operational technology in critical infrastructure

• New Malware Targets 97 Browser Variants, 76 Crypto Wallets & 19 Password Managers

• S3 Ep142: Putting the X in X-Ops

• Experts Criticize New Facebook Privacy Features For Kids

• Don’t Join Threads—Make Meta’s Instagram-Linked Twitter Alternative Join You

• Now’s the Time for a Pragmatic Approach to New Technology Adoption

• JumpCloud invalidates API keys in response to ongoing incident

• Iranian Hackers’ Sophisticated Malware Targets Windows and macOS Users

• Microservices Security in a Nutshell

• Privacy Woes Hold Up Global Instagram Threads Launch

• StackRot, a new Linux Kernel privilege escalation vulnerability

• TikTok Seeks To Block Montana 1 January 2024 Ban

• TeamTNT Launches Widespread Attacks Against Cloud Infrastructures

• Meta’s Threads Surpasses 30 Million Signups

• Looking to create a LLM-based chatbot that harnesses your company’s data? — Join me at VB Transform and find out how

• TMF announces 5 new digital services and cybersecurity investments

• Hackers already infiltrate EV chargers. It could only get worse.

• 8 Best Password Managers for Business & Enterprises in 2023

• Cybersecurity’s Future Hinges on Stronger Public-Private Partnerships

• Rustbucket Malware Targeting MacOS Devices Silently

• ‘Cyber Battlefield’ Map Shows Attacks Being Played in Real Time

• Ransomware Attacks on the Rise in Manufacturing Industry

• Federal Report Highlights Steps for Enhancing Software Code Pipeline Security Amid App Attacks

• Open Standards & Open-Source Software: What do these solutions mean, and why are they relevant for Digital ID systems?

• Here are 11 of the best technology podcasts you should listen to

• ChatGPT, the new rubber duck

• Blacktail: Unveiling the tactics of a notorious cybercrime group

• Ongoing Incident Prompts JumpCloud to Reset API Keys

• Nurturing the Internet Freedom Movement 🌱

• The U.S. Patent Office Should Drop Proposed Rules That Favor Patent Trolls

• Data Protection: Utilizing the Power of SIEM and CASB

• Cisco Enterprise Switch Flaw Exposes Encrypted Traffic

• Nurturing the Internet Freedom Movement 🌱

• Horse Riding details of 10k users leaked by Ransomware group

• NHTSA Squeezes Tesla For More Records In Autopilot Probe

• Unpatched SolarView Systems Vulnerable to Exploits

• Google Searches for ‘USPS Package Tracking’ Leads to Banking Theft

• Nurturing the Internet Freedom Movement 🌱

• Embracing DevSecOps: Staying Ahead of the Curve for Enhanced Software Security

• Understanding Cloud-Native Application Protection Platforms: A Comprehensive Overview

• Human coding error identified as cause of digital bank service outage

• Android Security Updates Patch 3 Exploited Vulnerabilities

• JumpCloud Says All API Keys Invalidated to Protect Customers

• Dig Security adds OCR capabilities to detect sensitive customer data in image files

• Nurturing the Internet Freedom Movement 🌱

• June 2023’s Most Wanted Malware: Qbot Most Prevalent Malware in First Half of 2023 and Mobile Trojan SpinOk Makes its Debut

• RedEnergy Stealer Ransomware: A New Threat Targeting Critical Infrastructure

• Nurturing the Internet Freedom Movement 🌱

• User Data Goldmine: Google’s Ambitious Mission to Scrape Everything for AI Advancement

• Here’s Why Twitter is Limiting the Number of Tweets You May View

• China Releases Open Source Operating System

• Beware of the Growing Scourge of Job Recruitment Scams

• Decryption tool for Akira ransomware available for free

• Botnets Send Exploits Within Days to Weeks After Published PoC

• CISOs Find ‘Business as Usual’ Shows the Harsh Realities of Cyber-Risk

• How to Configure the Most Secure Settings for Microsoft Defender

• Preliminary Injunction Limiting Government Communications with Platforms Tackles Illegal “Jawboning,” But Fails to Provide Guidance on What’s Unconstitutional

• Canadian Government Halts Advertising On Facebook, Instagram

• 6 Steps To Outsmart Business Email Compromise Scammers

• ISACA joins ECSO to strengthen cybersecurity and digital skills in Europe

• TXOne Networks introduces Stellar to secure OT/ICS devices from malware and abuse threats

• Critical RCE Bugs Expose Hundreds of Solar Power Stations

• Shell Confirms MOVEit-Related Breach After Ransomware Group Leaks Data

• 28,000 Impacted by Data Breach at Pepsi Bottling Ventures

• Critical RCE Vulnerability Puts 330,000 Fortinet Firewalls at Risk

• Cisco Switch Flaw Let Attack Reads Encrypted Traffic

• Interpol: Key Member of Major Cybercrime Group Arrested in Africa

• StackRot Linux Kernel Vulnerability Shows Exploitability of UAFBR Bugs

• Silentbob Campaign: Cloud-Native Environments Under Attack

• How Pen Testing can Soften the Blow on Rising Costs of Cyber Insurance

• Researchers Uncover New Linux Kernel ‘StackRot’ Privilege Escalation Vulnerability

• Surviving the 800 Gbps Storm: Gain Insights from Gcore’s 2023 DDoS Attack Statistics

• May 2023 Cyber Attacks Statistics

• Belgian Tax Hack

• SMUGX Campaign Targets European Entities

• Meta Launches Twitter Rival Threads

• Exploit Released For Barracuda Shell Command Injection Vulnerability

• How To Secure RESTful Web Services

• The Urban Gardener’s Guide to Growing Plants in Small Spaces with Concrete Planters (2023)

• Vulnerability in Cisco Enterprise Switches Allows Attackers to Modify Encrypted Traffic

• Human Error the Leading Cause of Cloud Data Breaches

• Risks and Best Practices: Navigating Privacy Concerns When Interacting with AI Chatbots

• How to delete saved addresses and credit cards in Firefox for improved security and privacy

• INTERPOL Nabs Hacking Crew OPERA1ER’s Leader Behind $11 Million Cybercrime

• Why Do Scientists Use ELN Notebooks to Improve Productivity, Research Data Integrity, and Team Collaboration?

• 12 Essential Tips for Keeping Your Email Safe

• Experts Warn of Impending TeamTNT Docker Attacks

• Internal Threats: A Major Risk to Any Business

• Linux Ransomware Exposed: Not Just a Windows Problem Anymore

• Ransomware Attackers Dump Students’ Data Online After School Hacks

• Police Arrest Suspected OPERAE1R Cybercrime Kingpin

• The rising risk of eavesdropping

• Suspicious Email Reports Up a Third as NCSC Hails Active Defense

• DSA Must Follow a Human-Rights Centered Enforcement Process, With Regulators Engaging International Civil Society Voices

• Do you know what your supply chain is and if it is secure?

• Thales payShield receives the French Cartes Bancaires HSM certification

• Four Must-haves to Strengthen Your Endpoint Security

• CVE-2022-29303 flaw in SolarView product can be exploited in attacks against the energy sector

• Ransomware accounts for 54% of cyber threats in the health sector

• Google Authenticator – what is it and why should you use it?

• TeamsPhisher Tool Exploits Microsoft Teams Flaw to Send Malware to Users

• Gmail client-side encryption: A deep dive

• India Union Cabinet approves Digital Personal Data Protection Bill

• Top five things to do in Amsterdam

• Turning fridges into SIM cards: An ecological SIM portfolio

• What is the difference between incident response & threat hunting?

• Stories from the SOC: Fighting back against credential harvesting with ProofPoint

• How to cultivate a culture of continuous cybersecurity improvement

• Cybercriminals can break voice authentication with 99% success rate

• ChatGPT’s unknown potential keeps us guessing

• Promoting responsible AI: Balancing innovation and regulation

• Startup Spotlight: Gomboc.ai Balances Cloud Infrastructure Security

• LockBit louts unload ransomware at Japan’s most prolific cargo port

• Potential 500GB Nickelodeon Data Leak: Unreleased Shows and Scripts at Risk

• Former boss who stole $10M from Amazon using fake vendor invoices is jailed for 16 years

• North Korean satellite had no military utility for spying, says South Korea

• Self-driving cars are a privacy issue, says security expert

• Google plans to scrape everything you post online to train its AI

• Malicious ad for USPS fishes for banking credentials

• Actively exploited vulnerability threatens hundreds of solar power stations

• Russian railway site allegedly taken down by Ukrainian hackers

Generated on 2023-07-07 23:55:27.596117