IT Security News Daily Summary 2023-08-18

• ExpressVPN Review (2023): Features, Pricing and Alternatives

• Facebook Slammed For “Dangerous” News Ban During Wildfire Emergency

• CISA Committee Tackles Remote Monitoring and Management Protections

• ProjectDiscovery Announces $25M Series A Financing and Launch of Cloud Platform

• CyCognito Finds Large Volume of Personal Identifiable Information in Vulnerable Cloud and Web Applications

• Top 5 Disaster Recovery as a Service Providers for 2023

• About 2000 Citrix NetScalers Were Compromised in Massive Attack Campaigns

• Cyber Security Today, Week in Review for the week ending Friday, August 18, 2023

• Four Practical Ways To Make Your Software More Secure

• Combatting the OpenSSH Vulnerability

• Phishing Attack Targets Hundreds of Zimbra Customers in Four Continents

• DEF CON 31: US DoD urges hackers to go and hack ‘AI’

• Expand Your Definition of ‘Endpoint,’ Get a Better Handle On Cloud Threats

• Tel Aviv Stock Exchange CISO: Making Better Use Of Your SIEM

• #OpFukushima: Anonymous group protests against the plan to dump Fukushima RADIOACTIVE wastewater into Pacific

• Best VPN for streaming in 2023: Unblock your favorite streaming services now

• African Cybercrime Operations Shut Down in Law Enforcement Operation

• Electronic Discovery Reference Model (EDRM)

• Massive phishing campaign targets users of the Zimbra Collaboration email server

• Harnessing the Power of Cyber Ranges

• How to conduct a cloud security assessment

• QR Code Campaign Targets Major Energy Firm

• Media Briefing: As UN Cybercrime Treaty Negotiations Enter Final Phase, Time is Running Short to Bolster Human Rights Protections

• Class action against Government of Canada advances following 2020 CRA privacy breach

• Africa Cyber Surge II law enforcement operation has led to the arrest of 14 suspects

• GitLab vulnerability leads to Proxyjacking malware Campaign

• The Current Security State of Private 5G Networks

• Cuba Ransomware Armed with New Weapons to Attack U.S Infrastructure

• Cybersecurity Study Reveals Web App Vulnerability Crisis

• The Vanishing Data Loss Prevention (DLP) Category

• Ransomware Attack Disrupts Real Estate Property Listing Services in US

• Rising Concerns as Discord.io Data Breach Compromises 760,000 Users

• In Other News: US Hacking China, Unfixed PowerShell Gallery Flaws, Free Train Tickets

• Interpol-Led Africa Cyber Surge II Nets 14 Cybercrime Suspects

• With the market oversold, we’re going to hold our noses and do some buying

• Decoding Cybercriminals’ Motives for Crafting Fake Data Leaks

• Monti Ransomware Strikes Government Systems Again

• Cuba ransomware gang looking for unpatched Veeam installations: Report

• Better securing the frontlines: Leveraging Ansible Automation Platform and AIDE for DoD file integrity

• Add Writing Malware To The List Of Things AI Is Not Very Good At

• Companies Respond To Downfall Intel CPU Vulnerability

• Jenkins Patches High Severity Vulnerabilities In Multiple Plugins

• Our Health Care System May Soon Receive A Much Needed Cybersecurity Boost

• BlackCat Sphynx: The Ransomware Operation Evolves Once Again

• Phishing campaign tries to evade defences with QR codes

• It’s Time to Approach The Cybersecurity Skills Gap Differently

• Infostealer Malware Exposes Over 100K Accounts From Hacking Forums

• The Number of MSPs Offering Virtual CISO Services Will Grow Fivefold By Next Year: Cynomi Study

• Why Whac-A-Mole is not a strategy for defending against ransomware attacks

• Stealthy ‘LabRat’ Campaign Abuses TryCloudflare to Hide Infrastructure

• Jenkins Patches High-Severity Vulnerabilities in Multiple Plugins

• Unveiling the Hidden Risks of Routing Protocols

• What Is Next-Generation Antivirus (NGAV) and How Does It Work?

• How We Grew Revenue by Strengthening Cybersecurity

• New Wave of Attack Campaign Targeting Zimbra Email Users for Credential Theft

• The Vulnerability of Zero Trust: Lessons from the Storm 0558 Hack

• 14 Suspected Cybercriminals Arrested Across Africa in Coordinated Crackdown

• Companies Respond to ‘Downfall’ Intel CPU Vulnerability

• Fastly Launches Certainly CA

• Cyber Security Today, August 18, 2023 – CISA urges action on a Citrix ShareFile vulnerability, and more

• Artificial Airplane Mode – New iOS 16 Hack Blocks All Apps Except Attackers Online

• Seeing the Forest for the Trees: Data Preservation Starts With a Keen Eye

• ISC2 Announces Major Milestone as Community Grows to Half a Million Strong

• The Rising Risks and Opportunities in API Security

• Federally Insured Credit Unions Required to Report Cyber Incidents Within 3 Days

• Israel, US to Invest $4 Million in Critical Infrastructure Security Projects

• New BlackCat Ransomware Variant Adopts Advanced Impacket and RemCom Tools

• Edge Data Platforms, Real-Time Services, and Modern Data Trends

• Short Staffed in Cybersecurity? It’s Time for MXDR!

• Ongoing Phishing Campaign Targets Zimbra Collaborations Email Servers Worldwide

• X Backtracks After Auschwitz Complaint About Anti-Semetic Account

• What you need to know about protecting your data across the hybrid cloud

• Singapore cautions against security risks ahead of presidential election

• Publisher’s Spotlight: THREATX – A Cloud-Native Solution for Runtime API & App Protection

• Southampton FC Renews Partnership with Acronis

• DEF CON 31: Robot vacuums may be doing more than they claim

• UK’s AI Safety Summit Scheduled For Early November

• 4 ways simulation training alleviates team burnout

• Advancing Battery Testing: How Test Chambers Ensure Reliable Performance

• Centralized cloud security is now a must-have

• Proxyjacking and Cryptomining Campaign Targets GitLab

• Chinese Hackers Use DLL Hijacking to Target Asian Gamblers

• Bronze Starlight targets the Southeast Asian gambling sector

• Creating a SQL Azure Database Backup and Restore

• Alex Tray: A Multifaceted Talent in System Engineering, Freelance Writing, and Cybersecurity Expertise

• Zimbra users in Europe, Latin America face phishing threat

• The Quest for Connection: Overcoming Obstacles in Online Dating

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Silicon UK Pulse: Your Tech News Update: Episode 14

• Google Chrome’s New Feature Alerts Users About Auto-Removal of Malicious Extensions

• Slack outage not caused by Cyber Attack

• Vulnerability Comparison: Android vs. iOS in the Face of Cyber Attacks

• Fantastic Advice To Protect Data Privacy

• New infosec products of the week: August 18, 2023

• Reinventing OT security for dynamic landscapes

• 30% of phishing threats involve newly registered domains

• A closer look at the new TSA oil and gas pipeline regulations

• Confusion Surrounds SEC’s New Cybersecurity Material Rule

• Federal agencies gear up for zero trust executive order deadline

• Add ‘writing malware’ to the list of things generative AI is not very good at doing

• APT29 is targeting Ministries of Foreign Affairs of NATO-aligned countries

• Citrix NetScalers backdoored in widespread exploitation campaign

• Catching up with WoofLocker, the most elaborate traffic redirection scheme to tech support scams

• Digital Rights Updates with EFFector 35.10

• ProjectDiscovery Lands $25M Investment for Cloud Security Tech

• SEC Rule Sparks Reimagining of Cybersecurity Operations

• Adaptive Shield Unveils Identity Threat Detection and Response (ITDR): A New Era in SaaS Security

• JWT Token Authentication in Angular 14 and .NET Core 6 Web API

• Securing your cloud networks: Strategies for a resilient infrastructure

• Edge computing’s role in healthcare

• A massive campaign delivered a proxy server application to 400,000 Windows systems

• iMenu360 – 3,425,860 breached accounts

• Portland’s TA3M: Expanding the Scope of Their Work in PDX

• Sophos: ‘Royal’ Is Trying to Make Itself the King of Ransomware

• Don’t just patch your Citrix gear, check for intrusion: Two bugs exploited in wild

• IT Security News Daily Summary 2023-08-17

• Big Medical Privacy Case Against Facebook Advances In Court

• What Is Cloud Security Posture Management (CSPM)?

• CNAP Platforms: The All-in-One Solution for Cloud Security

• Normalyze: How Focusing On Data Can Improve Cloud Security

• TXOne: How to Improve Your Operational Technology Security Posture

• Foretrace Announces Launch of “Tim,” Generative AI Analyst for Assessing and Responding to Data Leaks

• ISC2 Announces Milestone As Community Grows to Half a Million

• Israel-US Binational Industrial R&D Foundation to Invest $3.85M in Critical Infrastructure Cybersecurity Projects

• Karma Catches Up to Global Phishing Service 16Shop

• CISA, vendors warn Citrix ShareFile flaw under attack

• White House Orders Federal Agencies to Bolster Cyber Safeguards

• Cybersecurity ‘still number one on the agenda in boardrooms,’ Cramer says as Palo Alto reports

• 5 Types of Cyber Crime Groups

• APIs in Motion: Keep Your APIs Up-To-Date

• Experts devise an exploit for Apple iOS 16 that relies on fake Airplane Mode

• Alarming lack of cybersecurity practices on world’s most popular websites

• Google Brings AI Magic to Fuzz Testing With Eye-Opening Results

• Researchers Trick an iPhone Into Faking Airplane Mode

• NoFilter Attack: Sneaky Privilege Escalation Method Bypasses Windows Security

• AI Growth Prompts Job Takeover Fears, Corndel Finds

• Control Access To Private Data Using Azure Storage Shared Access Signatures

• 31% of Organizations Using Generative AI Ask It To Write Code

• LinkedIn Suffers ‘Significant’ Wave of Account Hacks

• An Overview of Dubai’s First and Second Cybersecurity Strategy

• Cynomi Study Reveals Number of MSPs Providing Virtual CISO Services Will Grow Fivefold By Next Year

• WhatsApp Adds Support For HD Photos

• Cyber Criminals Attacking Web Services to Breach Organisations

• LinkedIn under attack, malicious hackers seize accounts

• Malicious QR Codes Used in Phishing Attack Targeting US Energy Company

• Rapid7 Says ROI for Ransomware Remains High; Zero-Day Usage Expands

• S3 Ep148: Remembering crypto heroes

• Critical Flaws in PowerShell Gallery Enable Malicious Exploits

• CISA Launches Joint Initiative to Secure RMM Software

• ‘Play’ Ransomware Group Targeting MSPs Worldwide in New Campaign

• China-Linked Bronze Starlight Group Targeting Gambling Sector with Cobalt Strike Beacons

• Enterprise Secrets Management Explained: Best Practices, Challenges, and Tool Selection

• ProjectDiscovery raises $25M to launch a cloud version of its threat-scanning platform

• List of countries that issued TikTok ban due to data security concerns and benefits

• Quarter Of IT Professionals Consider Quitting, Ivanti Finds

• Exploitation Of Citrix ShareFile Vulnerability Spikes As CISA Issues Warning

• Malicious QR Codes Used In Phishing Attack Targeting US Energy Company

• Man Arrested In Northern Ireland Police Data Leak

• Grooming Cases Reach Unprecedented Heights Amidst Regulatory Delays

• New York City Bans TikTok On Government Devices

• Google paves way for FIDO2 security keys that can resist quantum computer attacks

• Phishing Spree Targets Zimbra Collaboration Account Holders

• New LABRAT Campaign Exploits GitLab Flaw for Cryptojacking and Proxyjacking Activities

• New Apple iOS 16 Exploit Enables Stealthy Cellular Access Under Fake Airplane Mode

• 7 Ways to Access Safe Mode in Windows 10 (2023 Update)

• International Cyber Expo Launches ‘Grab the Mic: Women in Cyber’ Event

• Zen 1 Vulnerability AMD Patchwork Proved Weak, Second Pass Issued

• The great Flipper Zero shortage of 2023 has finally come to end

• The link between home, family and company security

• Top 20 cloud native application protection platforms of 2023

• How to Retrieve and Generate Google 2FA Backup Codes

• Thousands of Systems Turned Into Proxy Exit Nodes via Malware

• How Innovation Accelerators Are at Work on the Dark Side

• Cyber Alert: Global Campaign Targets LinkedIn Accounts

• Multiple Severe Flaws Uncovered in CyberPower and Dataprobe Products

• Ransomware Surges With 1500 Confirmed Victims This Year

• Key Notes for Comprehensive Rank Tracking

• The Enterprise Browser: A Security-Hardened Productivity Platform for the Future of Remote Work

• Cyber Defenders Lead the AI Arms Race for Now

• CISA says hackers are exploiting a new file transfer bug in Citrix ShareFile

• BT joins line-up for Wales Tech Week

• How poor cybersecurity policies disrupt business continuity

• Man arrested in Northern Ireland police data leak as more incidents come to light

• Cato Networks Named a “Leader” in Zero Trust Edge (ZTE) Report by Leading Research Firm

• Citrix ShareFile vulnerability actively exploited (CVE-2023-24489)

• Gozi strikes again, targeting banks, cryptocurrency and more

• Cybersecurity M&A Roundup for August 1-15, 2023

• CISA Releases Cyber Defense Plan to Reduce RMM Software Risks

• Why You Need Continuous Network Monitoring?

• Detecting “Violations of Social Norms” in Text with AI

• Lessons From the 2023 National Risk Register Report

• Raccoon Stealer 2.3.0 Malware – A Stealthier Comeback

• Two Brands Suspend Twitter/X Advertising After Pro-Nazi Ad Placement

• HHS Launches ‘Digiheals’ Project to Better Protect US Hospitals From Ransomware

• Phishers use QR codes to target companies in various industries

• Hackers Selling SMS Bomber Attack Tools on Underground Forums

• Cisco Unified Communications Manager Flaw Let Attacker Launch SQL Injection Attacks

• Russian Hackers Use Zulip Chat App for Covert C&C in Diplomatic Phishing Attacks

• PayPal To Pause UK Crypto Sales Until 2024

• Banks defending their right to security are missing the point about consumer trust

• Exploitation of Citrix ShareFile Vulnerability Spikes as CISA Issues Warning

• CISA Urges Patching of Actively Exploited Citrix Bug

• Cyber Mindfulness Corner Company Spotlight: Netskope

• 5-Step Guide on Securing Serverless Architectures in the Cloud with RASP

• Quick Glossary: Cybersecurity Countermeasures

• AnonFiles Shuts Down After Massive User Abuse

• WordPress Security Checklist

• Google Fixes 26 Bugs Amid Fake Update Warning

• Stay Informed: A Guide to ‘Juice Jacking’ Risks Before Your Next Airport Journey

• Do you know what your supply chain is and if it is secure?

• Cleaning Products manufacturer Clorox Company took some systems offline after a cyberattack

• HPE Aruba Networking Product Vulnerabilities Allow File Overwrite

• Back-to-school cybersecurity tips for parents and children

• Why you need to protect your smartphone with mobile security software

• Proton Sentinel: next level account security protection for (almost) everyone

• CISA Adds Citrix ShareFile Flaw to KEV Catalog Due to In-the-Wild Attacks

• Kubernetes clusters face widespread attacks across numerous organizations

• The road ahead for ecommerce fraud prevention

• Japan’s digital minister surrenders salary to say sorry for data leaks

• Findlargedir: Find all “blackhole” directories with a huge amount of filesystem entries

• Heavy workloads driving IT professionals to resign

• What Is a Data Breach + How Do You Prevent It?

• Vietnam admits it has just ten percent of the infosec pros it needs

• Canadian marketing company hit by data breach, says Ontario liquor board

• Beware malware posing as beta versions of legitimate apps, warns FBI

• Malvertisers up their game against researchers

• Discord.io confirms theft of 760,000 members’ data

Generated on 2023-08-18 23:55:19.890293