IT Security News Daily Summary 2023-08-25

• Genworth Financial Under Investigation for Data Breach

• Tornado Cash Civil Decision Limits the Reach of the Treasury Department’s Actions while Skirting a Full First Amendment Analysis

• Unveil the Paradox of Encryption with TLS 1.3 in Zero Trust Architectures

• Here’s why this cyber leader still has more room to run, despite recent share-price volatility

• China Unleashes Flax Typhoon APT to Live Off the Land, Microsoft Warns

• Publisher’s Spotlight: Mitiga: The Next Generation of Cloud Incident Response

• Cyber Security Today, Week in Review for the week ending Friday, August 25, 2023

• Top 5 Most Abused Brands By Hackers

• Smart Cities: Utopian Dream, Security Nightmare, Or Political Gimmick?

• EU Safety Laws Start To Bite For TikTok, Instagram, And Others

• North Korean APT Hacks Internet Infrastructure Provider Via ManageEngine Flaw

• Biden Administration Reveals New Crypto Tax Reporting Rules

• XLoader Malware Variant Targets MacOS Disguised as OfficeNote App

• Kroll Employee SIM-Swapped for Crypto Investor Data

• Luna Grabber Malware Targets Roblox Gaming Devs

• Flax Typhoon using legitimate software to quietly access Taiwanese organizations

• Ermetic CNAPP Becomes Available on Google Cloud Marketplace

• ‘Whiffy Recon’ Malware Transmits Device Location Every 60 Seconds

• Defending the Virtual Kingdom: Exploring Modern Cybersecurity Landscapes

• Elevating Data Security: Key Considerations When Transferring Your Digital Workspace

• Publisher’s Spotlight: Cigent: Make Your Data Invisible

• The SEC demands more transparency about Cybersecurity incidents in public companies

• Securely implementing Active Directory on Windows Server 2019

• CloudNordic loses most customer data after ransomware attack

• Donald Trump’s Mug Shot Matters in a World of Fakes

• WinRAR users update your software as 0-day vulnerability is found

• The best VPN routers of 2023: Top picks for fast speeds

• The best VPN services for iPhone and iPad in 2023: Tested and reviewed

• In Other News: Africa Cybercrime Crackdown, Unpatched macOS Flaw, Investor Disclosures

• MOVEit, the biggest hack of the year, by the numbers

• China-linked Flax Typhoon APT targets Taiwan

• How to Secure All Your APIs Through Multiple Deployment Options

• Call of Duty Bid: Microsoft Makes New Bid to Acquire Call of Duty Giant

• Social media companies to stop data scraping

• Mastercard Ends Binance Card Partnership

• ClearSale launches Client Portal to help customers view and manage fraud prevention data

• SaaS Application Security: Why It Matters and How to Get It Right

• Tech Firms Must Now Comply With EU Digital Services Act

• Twelve nations urge social media giants to tackle illegal data scraping

• Kyndryl and Cisco expand partnership to help customers respond to cyber incidents

• Akira Ransomware Unleashes a New Wave of Attacks via Compromised Cisco VPNs

• Google Workspace Unveils AI-Powered Security

• Decentralized Network Friend.tech Faces Controversy After Data Breach

• What is the Difference Between Microsoft Azure vs Amazon AWS?

• Two LAPSUS$ Hackers Convicted in London Court for High-Profile Tech Firm Hacks

• Juice jacking: Is it a real issue or media hype?

• North Korean APT Hacks Internet Infrastructure Provider via ManageEngine Flaw

• Is Bias in AI Algorithms a Threat to Cloud Security?

• Byju’s exposed sensitive student data, including loan details

• How to Choose the Best XDR Solution for Your Organization?

• Business email compromise scams getting more sophisticated: Report

• Cyber Security Today, August 25, 2023 – FBI warning about Barracuda ESG gateways and thousands of more US MOVEit victims

• How to close the IT Talent Gap with a SASE Solution

• Friend.Tech Hit by Cyber Attack

• Cypago Raises $13 Million for GRC Automation Platform

• Lazarus Group exploited ManageEngine vulnerability to target critical infrastructure

• Our Risk Perception Is Broken How Do We Fix It?

• Learn How Your Business Data Can Amplify Your AI/ML Threat Detection Capabilities

• Beyond Cold Calls: Ringless Voicemail As A Personalized Customer Engagement Tool

• Google Workspace Introduces New AI-Powered Security Controls

• Europe is Cracking Down on Big Tech. This Is What Will Change When You Sign On

• Lawmaker Wants Federal Contractors to Have Vulnerability Disclosure Policies

• China-Linked Flax Typhoon Cyber Espionage Targets Taiwan’s Key Sectors

• Navigating Legacy Infrastructure: A CISO’s Actionable Strategy for Success

• What Is a Host Intrusion Detection System (HIDS) and How It Works

• How Does XDR Software Help Security Teams

• XDR Security for MSSPs

• Donald Trump Returns To Twitter To Post Mugshot

• Cloud Hosting Provider Lost all Customer Data Following Ransomware Attack

• Cisco NX-OS Software Flaw Let Attacker Trigger a DoS Attack

• Nearly 1,000 Organizations, 60 Million Individuals Impacted by MOVEit Hack

• Privacy Regulator Warns of Surge in “Text Pest” Cases

• Lockbit leak, research opportunities on tools leaked from TAs

• Hacking Food Labeling Laws

• Hackers Continue to Exploit Barracuda ESG Zero-Day Flaw: FBI Flash Alert

• Researchers Discover Reply URL Takeover Issue in Azure

• Urgent FBI Warning: Barracuda Email Gateways Vulnerable Despite Recent Patches

• Whiffy Recon malware triangulates the position of infected systems via Wi-Fi

• Silicon UK Pulse: Your Tech News Update: Episode 15

• FBI: Barracuda Appliances Still Being Exploited By China

• FBI: Patches for Barracuda ESG Zero-Day CVE-2023-2868 are ineffective

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Lazarus Group Targets Internet Infrastructure and Healthcare with ‘QuiteRAT’ Malware

• What will a service provider do when ransomware attack wipes off all its data

• The Emerging Cyber Threat: SEO Poisoning’s Impact on Healthcare Cybersecurity

• Creative QakBot Attack Tactics Challenge Security Defenses

• Google Workspace: New account security, DLP capabilities announced

• Cybersecurity insurance is missing the risk

• Ransomware dwell time hits new low

• IEEE 802.11az provides security enhancements, solves longstanding problems

• New infosec products of the week: August 25, 2023

• Unrealistic expectations exacerbate the cybersecurity talent shortage

• Trump’s Prosecution Is America’s Last Hope

• Trump’s Prosecution Is America’s Last Hope

• Regulations vs. DevSecOps: Requiem

• FBI: Who was going around hijacking Barracuda email boxes? China, probably

• Malwarebytes acquires Cyrus Security

• Cerby Announces $17M in Series A Funding to Secure Nonstandard Applications

• Critical Insight Releases H1 2023 Report

• Fourth Circuit Decision in Marriott Data Breach Case Kicks the Can Down the Road

• Researchers released PoC exploit for Ivanti Sentry flaw CVE-2023-38035

• How do digital signatures work?

• SevenRooms – 1,205,385 breached accounts

• Discord Notifies Users of Data Breach Impacting 180 Accounts

• IT Security News Daily Summary 2023-08-24

• Too good to be true? That online auction price could be triangulation fraud

• Major US Energy Company Hit by QR Code Phishing Campaign

• Malwarebytes Announces Acquisition of Online Privacy Company Cyrus

• Black Hat USA 2023 Closes on Record-Breaking Event in Las Vega

• Local Facebook Groups Are Being Overrun With Hoax Posts

• US Space Industry More Prone to Foreign Espionage, US Agencies Warn

• Kyndryl and Cisco Expand Partnership Focusing on Cyber Resilience

• Cypago Raises $13M and Unveils its Cyber GRC Automation (CGA) Platform to Simplify GRC Processes

• Chinese-backed APT ‘Flax Typhoon’ Hacks Taiwan with Minimal Malware Footprint

• Smoke Loader Botnet Drops Location Tracker Whiffy Recon Malware

• S3 Ep149: How many cryptographers does it take to change a light bulb?

• Ransomware With an Identity Crisis Targets Small Businesses, Individuals

• The Price of Grandeur: Unveiling the Costs Behind Creating a Triple-A Game

• Google AI in Workspace Adds New Zero-Trust and Digital Sovereignty Controls

• University of Minnesota Confirms Data Breach, Says Ransomware Not Involved

• FBI: Suspected Chinese actors continue Barracuda ESG attacks

• Lazarus APT exploits Zoho ManageEngine flaw to target an Internet backbone infrastructure provider

• Russian Hackers Employ Telekopye Toolkit in Broad Phishing Attacks

• eBay Users Beware Russian ‘Telekopye’ Telegram Phishing Bot

• Recent Vulnerability Puts 3,000 Openfire Servers at Risk of Attack

• The Four Big Risk Categories Every SAAS Application Must Address

• Publisher’s Spotlight: Oligo: Protect Your Open Source Libraries

• Traffic Management and Network Resiliency With Istio Service Mesh

• AWS unveils local cloud zones for exclusive customer use

• What the Hive Ransomware Case Says About RaaS and Cryptocurrency

• The Last Hour Before Yevgeny Prigozhin’s Plane Crash

• Lazarus Group Exploits Critical Zoho ManageEngine Flaw to Deploy Stealthy QuiteRAT Malware

• Kingston IronKey Keypad 200C hardware-encrypted USB Type-C drive released

• NETGEAR launches PR60X Pro Router

• MOVEit Attacks Makes Clop the Most-active Ransomware Threat Actor This Summer

• Wireshark 4.0.8 Release: What’s New!

• A simple idea that could make Android more secure

• North Korea ready to cash out more than $40 million in Bitcoin after summer of attacks, warns FBI

• FBI Flags $40M Crypto Cash-Out Plot By North Korean Hackers

• Location Leak: Christie’s Mistakenly Exposes Whereabouts of Consigned Artworks

• Google allows Workstation actions only with two admin authentication

• Bletchley Park To Host Global AI Safety Summit

• Nvidia Reaps AI Chip Demand As Profit Surges

• Mysterious Malware Uses Wi-Fi Scanning to Get Location of Infected Device

• Cisco Patches Vulnerabilities Exposing Switches, Firewalls to DoS Attacks

• Data of 2.6 Million Duolingo Users Leaked on Hacking Forum

• Lessons learned from the Microsoft Cloud breach

• How to Remove a Lost Device From Your Google Account

• New Study Sheds Light on Adhubllka Ransomware Network

• QR Code Red: Quishing Attacks and How to Prevent Them

• Strengthening Your Cybersecurity: The Power of the Three P’s and Team Training

• New Relic enhances its AIOps capabilities with recommended alerts

• Cloud hosting firms hit by devastating ransomware attack

• Talon unveils digital experience capabilities, equipping IT teams with advanced metrics

• Protecting Sensitive Information Within Translation

• Lapsus$ Teen Hackers Convicted: Unraveling the Grand Theft Auto 6 Leak and High-Profile Cyberattacks

• Tornado Cash Crypto Mixer Devs Charged With Money Laundering

• FBI: Patches For Recent Barracuda ESG Zero-Day Ineffective

• Rockwell ThinManager Vulns Could Expose Industrial HMIs To Attacks

• WinRAR 0-Day That Uses Poisoned JPG And TXT Files Under Exploit Since April

• An Interview with Dasha Deckwerth – Stealth ISS Group

• Role of Artificial Intelligence in Preventing Cyberattacks at K-12 Schools

• Password Protection in the Era of AI-Based Attacks

• FBI: Patches for Recent Barracuda ESG Zero-Day Ineffective

• NIST Publishes Draft Post-Quantum Cryptography Standards

• 5 Best Practices for Implementing Risk-First Cybersecurity

• Why It’s Time To Remove Local Admin Rights For The Safety Of Organisations

• Thousands of Openfire Servers at Risk from Critical CVE

• Microsoft Paint To Get AI Makeover – Report

• Secureworks Discovers Vulnerability In Microsoft Identity Solution

• Critical Insight Reports Fewer Cybersecurity Breaches in Health Care, Yet Victim Numbers Are Up in 2023

• Penetration Testing- Shielding the Web Content Against Hacking

• What are Brute Force Attacks, and How to Protect Your APIs Against them?

• Preventing DNS Tunneling with AI Deep Learning

• Rockwell ThinManager Vulnerabilities Could Expose Industrial HMIs to Attacks

• New Telegram Bot “Telekopye” Powering Large-scale Phishing Scams from Russia

• Duolingo Data Breach: 2.6 Million Users At Risk Of Targeted Phishing Attacks

• Ermetic CNAPP available on Google Cloud Marketplace

• Britain to host world’s first AI safety summit at home of World War II codebreakers

• Pulling the strings

• CloudNordic Faces Severe Data Loss After Ransomware Attack

• North Korea’s Lazarus Group Used GUI Framework to Build Stealthy RAT

• WinRAR security issue more wide-reaching than thought

• Sensitive Data of 10 Million at Risk After French Employment Agency Breach

• eSentire Labs Open Sources Project to Monitor LLMs

• Why The Chainsmokers Invest in—and Party With—Niche Cybersecurity Companies

• WinRAR Security Flaw Exploited in Zero-Day Attacks to Target Traders

• New “Whiffy Recon” Malware Triangulates Infected Device Location via Wi-Fi Every Minute

• The Hidden Dangers of Public Wi-Fi

• Cypago, which aims to automate compliance and governance for companies, raises $13M

• Bitwarden launches E2EE Secrets Manager

• Jury Finds Two Teenagers Were Behind Lapsus$ Crime Spree

• Simplify Secure Enterprise Device Management With QR Codes

• UK Court Concludes Teenager Behind Huge Hacking Campaign

• Hosting Provider CloudNordic Loses All Customer Data in Ransomware Attack

• Traders Targeted by Cybercriminals in Attack Exploiting WinRAR Zero-Day

• Digital Identity Protection Firm SpyCloud Raises $110 Million

• Parmesan Anti-Forgery Protection

• University of Minnesota Reports Massive Data Breach

• Ransomware Vs. Malware: What’s The Difference?

• South Africa claims DdoS Cyber Attack from India because of PM Narender Modi

• NoFilter: Tool that Escalates Privilege Abusing Windows Filtering Platform

• Apple Endorses California ‘Right to Repair’ Bill

• Kali Linux 2023.3 Released: What’s New!

• Cyber Mindfulness Corner Company Spotlight: Egress

• Sextortion Scams Surge 178% in a Year

• Thousands of Unpatched Openfire XMPP Servers Still Exposed to High-Severity Flaw

• ImmuniWeb introduces ImmuniWeb Neuron Mobile, an automated mobile app security testing solution

• Into the Heimdalverse

• St Helens Council Warns of Phishing After Ransomware Breach

• Teens Found Responsible For Lapsus$ Cyber-Attacks

• Lapsus$ member has been convicted of having hacked multiple high-profile companies

• Danish Cloud Hosting Companies Ravaged by Ransomware Attacks

• Attack Dwell Times Fall but Threat Actors Are Moving Faster

• Tornado Cash Founders Charged in Billion-Dollar Crypto Laundering Scandal

• Two teens were among those behind the Lapsus$ cyber-crime spree, jury finds

• Do you know what your supply chain is and if it is secure?

• GroundPeony Group Exploiting Zero-day Flaw to Attack Government Agencies

• More than 3,000 Openfire servers exposed to attacks using a new exploit

• Kali Linux 2023.3 released: Kali NetHunter app redesign, 9 new tools, and more!

• Does a secure coding training platform really work?

• Google’s Enhanced Safe Browsing Explained

• Securing your cloud networks: Strategies for a resilient infrastructure

• How digital identity protects connected cars

• AI and the evolution of surveillance systems

• Webinar: The external attack surface & AI’s role in proactive security

• Lack of visibility into cloud access policies leaves enterprises flying blind

• What Is Data Privacy? The Secret to Safe Surfing

• Personal vs. Sensitive Personal Information: Differences & Examples

• 15 Tips to Protect Personal Information Online for 2023

• Prelude Security Tackles Continuous Security Testing in Containers

• U.S. division of CIBC apparently sideswiped by MOVEit hack

• Adobe ColdFusion vulnerability exploited in the wild

• DarkGate reloaded via malvertising and SEO poisoning campaigns

• Ivanti Sentry critical vulnerability—don’t play dice, patch

• Out from the Shadows: SOC Teams Take Their Seat with the “Superheroes”

Generated on 2023-08-25 23:55:20.273930