IT Security News Daily Summary 2023-08-12

• An Apple Malware-Flagging Tool Is ‘Trivially’ Easy to Bypass

• Power Management Vulnerabilities Could Shut Down Data Centers: Researchers

• Python URL parsing function flaw can enable command execution

• Police dismantled bulletproof hosting service provider Lolek Hosted

• Dissecting the UN Cybercrime Convention’s Threat to Coders’ Rights at DEFCON

• Emerging Technology Facilitating Increased Vehicle Thefts and Accidents by Criminals

• The impact of blockchain technology on the future of shipping and logistics

• How to Implement Deception Technology

• Decoupling Storage and Compute: Have We Gone Too Far?

• 10 Benefits of Cloud Computing for SMBs

• DBS Bank Reveals Big ‘Data Challenges’ With AI Use

• Defending Against Stealer Log Cyber Threats

• Encryptionless Ransomware Attacks and Defense Strategies: An Interview with Zscaler’s Deepen Desai

• Building Cyber Resilience in an Age of Growing Threats

• How the FBI goes after DDoS cyberattackers

• Safeguarding Personal Data in the Wake of Hacks and Leaks

• CISA Advises Firms to Adopt Passwordless Security in LAPSUS$ Report

• Encryptionless Ransomware Attacks and Defense Strategies: An Interview with Zscaler’s Deepen Desai

• Hackers Compromised ChatGPT Model with Indirect Prompt Injection

• Black Hat USA 2023: Complete AI Briefings Roundup

• The best VPN deals for August 2023

• The Next Step: Expanding RegRipper

• A New Attack Reveals Everything You Type With 95 Percent Accuracy

• Zoom ZTP & AudioCodes Phones Flaws Uncovered, Exposing Users to Eavesdropping

• Notorious Global Phishing Platform Neutralized in Cross-Border Operation

• Google Chrome to shield encryption keys from promised quantum computers

• UK govt contractor MPD FM leaks employee passport data

• Don’t Jump to Conclusions on Zero Trust Adoption

• Build or Buy your own antivirus product

• Lolek Bulletproof Hosting Servers Seized, 5 Key Operators Arrested

• Power Generator in South Africa hit with DroxiDat and Cobalt Strike

• New Python URL Parsing Flaw Enables Command Injection Attacks

• Persistent volume support with peer-pods: Solution overview

• What may be lurking behind that QR code

• Chrome Supports Key Pinning on Android to Improve Security

• Ransomware in 2023: Emerging Threats, New Targets, and How Organizations Can Protect Themselves

• Google’s “browse privately” is nothing more than a word play, lawyers say

• YouTube makes sweeping changes to tackle spam on Shorts videos

• Old exploit kits still kicking around in 2023

• Several hospitals still counting the cost of widespread ransomware attack

• Zoom clarifies user consent requirement when training its AI

• 2023 Ransomware Trends

• Hackers Leak PII Data and Photos of Brazilian Plastic Surgery Patients

• China closes record number of personal data breaches, moots facial recognition law

• FTX crypto-clown Sam Bankman-Fried couldn’t even do house arrest. Now he’s in jail

• IT Security News Daily Summary 2023-08-11

• SandboxAQ unveils Sandwich, an open-source meta-library of cryptographic algorithms

• Black Hat USA 2023 Panel: Used Correctly, Generative AI is a Boon for Cybersecurity

• Security Pressures Mount Around AI’s Promises & Peril

• ‘Bulletproof’ hosting site that allegedly enabled 400 ransomware attacks seized, founder indicted

• DARPA Taps RTX to Attune AI Decisions to Human Values

• MoustachedBouncer Hackers Caught Spying on Embassies

• Microsoft: Codesys PLC bugs could be exploited to ‘shut down power plants’

• Fortinet Announces Free Security Awareness Curriculum for K-12 Students Tied to White House’s Cyber Initiatives

• Microsoft says Codesys bugs in ‘millions’ of PLCs could ‘shut down power plants’

• Get a one-year subscription to Norton 360 Standard and LifeLock Identity Advisor for $25

• Threat Intelligence Efforts, Investment Lagging, Says Opswat

• As Phishing Gets Even Sneakier, Browser Security Needs to Step Up

• Cyber Security Today, Week in Review for the week ending Friday, August 11, 2023

• Dependency Confusion Attacks: New Research Into Which Businesses are At Risk

• The Evolution of API: From Commerce to Cloud

• Federal Judge Upholds Arizonans’ Right to Record the Police

• Maker of Chrome extension with 300,000+ users tells of constant pressure to sell out

• XWorm, Remcos RAT Evade EDRs to Infect Critical Infrastructure

• Alberta dental plan administrator paid ransomware gang after attack

• Phishing 3.0: Crooks Leverage AWS in Deceptive Email Campaigns

• Gurucul Brings Generative AI Capabilities (Sme) to Next-Gen SIEM

• Best Encryption Software and Tools for 2023

• Downfall Vulnerability Affects Millions of Intel CPUs With Strong Data Leak Impact

• What is SASE? Secure Access Service Service Edge Explained

• GitHub’s Hardcore Plan to Roll Out Two-Factor Authentication (2FA)

• Image steganography: Concealing secrets within pixels

• Check Point Partners with the White House on National Cyber Workforce and Education Strategy

• Multiple Flaws Found in the Avada WordPress Theme and Plugin

• New Study Claims Facebook Does Not Cause Psychological Harm

• US cyber board to investigate Microsoft hack of government emails

• Revolutionizing Everyday Life: The Transformative Potential of AI and Blockchain

• Ditch SMS-based MFA, urges board investigating Lapsus$ gang’s successful attacks

• How to enable DNS over HTTPS in Opera

• iOS 17 cheat sheet: Release date, supported devices and more

• Evaluate the risks and benefits of AI in cybersecurity

• DroxiDat-Cobalt Strike Duo Targets Power Generator Network

• The MOVEit mass hacks hold a valuable lesson for the software industry

• Digital Disaster: Electoral Commission Data Breach Leaves 40 Million UK Voters Exposed

• Google Cloud launched Chronicle Cybershield

• Lapsus$ Hacker Group Exposed in Latest CSRB Report

• Researchers Uncover Years-Long Cyber Espionage on Foreign Embassies in Belarus

• Novel Downfall Bug is Targeting Intel CPUs to Steal Encryption Keys, and Data

• DHS to Review Microsoft’s Security in Chinese Email Hack

• The U.S. Government Wants To Control Online Speech to “Protect Kids”

• Chip Shortage In Germany To Last Years, Warns Audi Head

• In Other News: macOS Security Reports, Keyboard Spying, VPN Vulnerabilities

• Researchers Uncover Decade-Long Cyber Espionage on Foreign Embassies in Belarus

• Crash Test: REST API vs. SOAP Security

• North Korean Hackers Breach Russia’s Top Missile Maker’s Data

• This bank’s new app security feature irks customers

• What CISA and NSA Guidance Means for Critical Infrastructure Security

• Cyber Mindfulness Corner Company Spotlight: Mimecast

• Multiple high severity vulnerabilities in CODESYS V3 SDK could lead to RCE or DoS

• 75% of businesses are implementing or considering bans on ChatGPT

• Understanding Risk-Based Authentication (RBA)

• Mobb Wins Black Hat Startup Spotlight Competition

• How Teenagers Hacked Some Of The World’s Biggest Targets

• Gootloader SEO Watering Hole Malware Targets Law Firms

• AI Evil Twins May Already Be Manipulating Human Nature

• Microsoft Discloses 16 Vulnerabilities In CodeSys Products

• How to Backup Amazon EC2 Instance

• 66% of Organisations in UK Set to Ban ChatGPT and Generative AI Apps on Work Devices

• 1 in 5 CIOs Believe Cyber Security Ops Are Not An Immediate Priority

• Major Story – Data Breach Exposes Sensitive Police Data In Northern Ireland

• Black Hat USA 2023 – Announcements Summary

• Northern Ireland’s Top Police Officer Apologizes for ‘Industrial Scale’ Data Breach

• Microsoft Discloses Codesys Flaws Allowing Shutdown of Industrial Operations, Spying

• Enhancing TLS Security: Google Adds Quantum-Resistant Encryption in Chrome 116

• BigID Access Intelligence Remediation defends users against unauthorized exposure

• Black Hat USA 2023 video walkthrough

• Are You Being Tracked by an AirTag? Here’s How to Check

• Electoral Commission had internet-facing server with unpatched vuln

• Cyber Security Today, August 11, 2023 – Employee mistake leads to Northern Ireland police data breach, why employee awareness training is vital, and more.

• MoustachedBouncer Attacking Foreign Embassies Using NightClub and Disco Hacking Tools

• The Inability to Simultaneously Verify Sentience, Location, and Identity

• Microsoft Role To Be Investigated After US Government Breach

• Email Hacking Reigns as Top Cybersecurity Threat, Indusface Study

• India Passes Data Protection Legislation in Parliament. Critics Fear Privacy Violation

• New SystemBC Malware Variant Targets Southern African Power Company

• Researchers Shed Light on APT31’s Advanced Backdoors and Data Exfiltration Tactics

• CommScope SYSTIMAX Constellation allows enterprises to build and augment IP networks

• UK, EU, Mull Tighter China Controls After New US Restriction

• #BHUSA: Security Risks to Boom in the Era of Widespread Generative AI Adoption

• Magento shopping cart attack targets critical vulnerability revealed in early 2022

• New SystemBC Malware Variant Targets South African Power Company

• A totaled Tesla was sold for parts in the U.S. but came back online in Ukraine — here’s how

• MoustachedBouncer: Foreign Embassies in Belarus Likely Targeted via ISPs

• UK Government Slammed For Encryption Mistruths

• Researchers Suggest Ways to Tackle Thermal Attacks

• CISA: New Whirlpool Backdoor Used in Barracuda ESG Campaign

• A totaled Tesla was sold for parts in the US but came back online in Ukraine — here’s how

• Gafgyt botnet is targeting EoL Zyxel routers

• 2023 Threat Report – Dramatic Surge in Social Engineering and Web Attacks

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Researchers Uncover Series of Ransomware Attacks that Follow Same Pattern

• Charming Kitten APT is targeting Iranian dissidents in Germany

• Connecticut school loses millions in Spoofing Cyber Attack

• Ensuring HIPAA Compliance on Mobile Devices: A Vital Guide

• 16 New CODESYS SDK Flaws Expose OT Environments to Remote Attacks

• How to handle API sprawl and the security threat it poses

• US Cyber Command boss says China’s spooky cyber skills still behind

• 15 New CODESYS SDK Flaws Expose OT Environments to Remote Attacks

• How digital content security stays resilient amid evolving threats

• Photos: Black Hat USA 2023

• New infosec products of the week: August 11, 2023

• US Cyber Command boss says China’s spooky cyber-skills trail America’s

• CISA Adds Microsoft .NET Vulnerability to KEV Catalog Due to Active Exploitation

• Threat intelligence’s key role in mitigating malware threats

• Cybersecurity as a global, multi-sector activity with Mihoko Matsubara

• How executives’ personal devices threaten business security

• How to accelerate and access DDoS protection services using GRE

• Microsoft Expands Cloud Security Posture Management to Google Cloud

• 2023-08-03 – .msix file –> IcedID (Bokbot) –> BackConnect and Keyhole VNC

• What’s in New York’s ‘First Ever’ Cyber Strategy?

• Proposed Cybercrime Treaty’s International Cooperation Provisions Could Let Tyrants Run Amok

• Reshaping the API Security Landscape: Graylog Acquires Resurface

• #BHUSA: White House, DARPA and CISA Ask for Help in Securing Open Source Software

• Statc Stealer, a new sophisticated info-stealing malware

• A totaled Tesla came was sold for parts in the US but came back online in Ukraine — here’s how

• The EVM Compatibility Chronicles Part II

• August Patch Tuesday stops actively exploited attack chain and more

• Ransomware review: August 2023

• NSA: Codebreaker Challenge Helps Drive Cybersecurity Education

• Rightbiz – 65,376 breached accounts

Generated on 2023-08-12 23:55:08.940676