IT Security News Daily Summary 2023-08-30

• biometric authentication

• How to verify encryption in Google Messages

• APT Attacks From ‘Earth Estries’ Hit Gov’t, Tech With Custom Malware

• FBI, Justice Department dismantle Qakbot malware

• Facebook Rejects Censorship Decision From Its Own Oversight Board

• Chinese GREF APT distributes spyware via trojanized Signal and Telegram apps on Google Play and Samsung Galaxy stores

• New York Times Spoofed to Hide Russian Disinformation Campaign

• Publisher’s Spotlight: CrowdSec: Real-time & Crowdsourced Protection

• A Deep Dive into OffSec Cyber Range

• Microsoft angry over Russian-led UN cybercrime treaty

• Beware: Government’s Alert on Smishing Scam Threat

• Qakbot Botnet Disrupted, Infected 700,000 Computers Globally

• How to Go Passwordless with NordPass Passkeys

• Unmasking Trickbot, One of the World’s Top Cybercrime Gangs

• Hackers Can Exploit Windows Container Isolation Framework to Bypass Endpoint Security

• With Beijing’s green light, mobility unicorns Zeekr and WeRide inch closer to US IPOs

• Why Web3 Penetration Testing is Vital for Protecting Decentralized Systems

• Google Chrome Security Update: High-Severity Vulnerability Patched

• Software Engineering in the Age of Climate Change: A Testing Perspective

• Apple Planning Major iPad Pro Upgrade – Report

• 4 Strategies to Safeguard the Finance Industry Against Deepfake Onslaught

• Harnessing the Power of Cyber Ranges: A Deep Dive into OffSec Cyber Range

• Podcast Episode Rerelease: Securing the Vote

• Navigating economic uncertainty with managed security services

• AT&T Cybersecurity wins SC Media Award for Best Threat Intelligence

• Top Challenges Threat Hunting Teams Face in 2023 and How to Overcome Them

• DarkGate Loader Delivered Through Stolen Email Threads to Lure Victims

• CrowdStrike CTO: ‘Rookie mistakes’ are hurting cloud security

• Flaw Exposes WP Migration Plugin to Hacks

• Performance-Enhanced Android MMRat Scurries onto Devices Via Fake App Stores

• Duet AI invades Google Workspace, takes notes, attends meetings, crafts email for $30/month

• Unveiling Network and Security Architectures: SD-WAN, SASE, SSE, and Zero Trust

• Enhancing Higher Education Security: The Role of Security Service Edge

• Foxconn Founder Bids To Become Taiwan’s President

• Email Authentication Protocols: SPF, DKIM, and DMARC – A Detailed Guide

• Chinese APT Group GREF Use BadBazaar in Android Espionage

• MMRat Android Trojan Executes Remote Financial Fraud Through Accessibility Feature

• Threat actors started exploiting Juniper flaws shortly after PoC release

• Barracuda Email Hack leaks government emails in America

• Meta Shuts Down Huge Chinese Disinformation Campaign

• Apple To Unveil iPhone 15 At Wonderlust Event

• iOS 16 Cheat Sheet: Complete Guide for 2023

• Healthcare Organizations Hit by Cyberattacks Last Year Reported Big Impact, Costs

• ‘Earth Estries’ Cyberespionage Group Targets Government, Tech Sectors

• Chinese Hackers Target US, Other Govts With Barracuda Flaw

• Apple Security Boss Faces iPads For Gun Permits Bribery Charge Again

• University Cuts Itself Off From Internet After Mystery Security Snafu

• Recent Juniper Flaws Chained In Attacks Following PoC Exploit Publication

• BGP Flaw Can Be Exploited For Prolonged Internet Outages

• British Officials Say AI Chatbots Could Carry Cyber Risks

• Tenable unveils web application and API scanning capabilities for Nessus Expert

• Exabeam and Google Cloud join forces to modernize security operations

• ComplyCube Field Redaction removes sensitive fields from documents

• 47,000 London Metropolitan Police Personnel Impacted by Data Breach

• Ransomware Vendetta: Rhysida Group Strikes Prospect Medical, Warns of Auctioning Stolen Data

• Duolingo Data Breach: Hackers Posts Scrapped Data on Hacking Forum

• Should Senior IT Professionals Be Accountable for Professional Decisions?

• Ransomware Actor Linked to Attacks Against Citrix NetScaler System

• Google Urges Gmail Users Set Up 2FA for Enhanced Security

• China-Linked BadBazaar Android Spyware Targeting Signal and Telegram Users

• Recent Juniper Flaws Chained in Attacks Following PoC Exploit Publication

• When Apps Go Rogue

• Korea Blockchain Week 2023: Presenting Web3’s Leading Voices

• Hackers Exploiting Juniper RCE Flaw Following PoC Release

• Cost of a data breach 2023: Financial industry impacts

• In Airbnb, Cybercriminals Find a Comfortable Home for Fraud

• Netskope Proactive DEM enables organizations to anticipate potential problems

• Stealthy Android Malware Attacking Mobile Users Via Fake App Stores

• Why are we seeing such a huge demand for AI at the moment?

• BGP Flaw Can Be Exploited for Prolonged Internet Outages

• GitHub Enterprise Server Gets New Security Capabilities

• Malicious npm Packages Aim to Target Developers for Source Code Theft

• How to Prevent ChatGPT From Stealing Your Content & Traffic

• NCSC issues warning over chatbot cyber risks

• VMware fixes critical vulnerability in Aria Operations for Networks (CVE-2023-34039)

• MixMode enhances Generative AI Platform to improve threat detection

• The removal of Qakbot from infected computers is just the first step

• Cyber Security Today, August 30, 2023 – More ransomware and MOVEit attack numbers, and an attack on a Rust repository

• No More Band-Aids: It’s Time for IT and OT Security Convergence

• NCSC Warns Over AI Chatbot Cyber Risks

• FBI-Led Operation Duck Hunt Shuts Down QakBot Malware

• Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New Exploits

• QVANTUM Expands into the US Market, Empowering Precise Workforce Planning with Customized Cost Solutions

• Fianu Labs Emerges From Stealth With $2 Million in Seed Funding

• High-Severity Memory Corruption Vulnerabilities Patched in Firefox, Chrome

• DreamBus Botnet Exploiting RocketMQ Vulnerability to Delivery Cryptocurrency Miner

• How Quantum Computing Will Impact Cybersecurity

• Critical RCE flaw impacts VMware Aria Operations Networks

• Meter collaborates with Cloudflare to launch DNS Security

• Met Police Contractor Hack Places Officer Data At Risk

• OpenAI Promises Enterprise-Grade Security with ChatGPT for Business

• Enhancing Cybersecurity: How XDR Software Empowers CISOs

• DreamBus Malware Exploits Unpatched RocketMQ Servers

• Earth Estries Targets Government, Tech for Cyberespionage

• NCSC Issues Cyber Warning Over AI Chatbots

• IT threat evolution in Q2 2023

• IT threat evolution in Q2 2023. Mobile statistics

• IT threat evolution in Q2 2023. Non-mobile statistics

• Google launches tool to identify AI-generated images

• GhostSec Claim Breaching Iranian Govt Surveillance Software Tool

• Block Unwanted Calls With AI for Just $50 Until Labor Day Sale Ends 11:59 PM PST 9/4

• With Beijing’s greenlight, mobility unicorns Zeekr and WeRide inch closer to US IPOs

• An evolved LockBit variant emerges

• What is Static Network Address Translation?

• Understanding Firewalls – Types, Configuration, and Best Practices for Effective Network Security

• Updated NCSC Report Highlights Key Threats for the UK Legal Sector

• FBI: Operation ‘Duck Hunt’ dismantled the Qakbot botnet

• Threat Actors Abuse Google Groups to Send Fake order Notifications

• Why performing security testing on your products and systems is a good idea

• Critical Vulnerability Alert: VMware Aria Operations Networks at Risk from Remote Attacks

• Hackers Can Exploit Skype Vulnerability to Find User IP Address

• Hackers Abuse Azure AD Abandoned Reply URLs to Escalate Privilege

• The Latest in Cybersecurity Incidents making to Google Headlines

• Decoding the Naming Conventions of Ransomware Malware

• How to protect your personal data when using ChatGPT and generative AI

• FBI Dismantles QakBot Malware, Frees 700,000 Computers, Seizes $8.6 Million

• How Thales and Red Hat Secure Kubernetes Data in a 5G World

• Is the new OWASP API Top 10 helpful to defenders?

• Volatility Workbench: Empowering memory forensics investigations

• Velociraptor: Open-source digital forensics and incident response

• A closer look at the RFI on open-source software security

• Toyota Japan back on the road after probably-not-cyber attack halted production

• Rising cyber incidents challenge healthcare organizations

• Qakbot Botnet Disrupted in Operation ‘Duck Hunt’

• Meta reckons China’s troll farms could learn proper OpSec from Russia’s fake news crews

• Meal delivery service PurFoods announces major data breach

• Cisco VPNs without MFA are under attack by ransomware operator

• “An influx of Elons,” a hospital visit, and magic men: Becky Holmes shares more romance scams: Lock and Code S04E18

• FBI confirms Barracuda patch is not effective for exploited ESG appliances

• 6 Ways AI Can Revolutionize Digital Forensics

• Everest Group Research: C-Suite Must Recognize Critical Difference Between Cybersecurity and Cyber Resilience

• Facebook Announces Takedown Of World’s Largest Spam Campaign

• Delinea Research Reveals a Cyber Insurance Gap

• Unpatched Citrix NetScaler Devices Targeted by Ransomware Group FIN8

• SPHERE Appoints Former Johnson & Johnson CISO Marene Allison to Board of Directors

• TechCrunch Disrupt 2023 Startup Battlefield 200: AI and Security edition

• University cuts itself off from internet after mystery security snafu

• IT Security News Daily Summary 2023-08-29

• PurFoods Mom’s Meals Reports Data Breach Exposing Social Security Numbers of Over 1.2 Million Consumers

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Check Point Shares Analysis of Qakbot Malware Group

• Operation ‘Duck Hunt’: Qakbot Malware Disrupted, $8.6 Million in Cryptocurrency Seized

• Meta Cripples China’s Massive ‘Spamouflage’ Influence Op

• MOVEit Was a SQL Injection Accident Waiting to Happen

• Sprawling Qakbot Malware Takedown Spans 700,000 Infected Machines

• Qakbot – the takedown and the remediation

• UNC4841 threat actors hacked US government email servers exploiting Barracuda ESG flaw

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Apple security boss faces iPads-for-gun-permits bribery charge… again

• Microsoft Teams attack exposes collab platform security gaps

• FBI-led Operation Duck Hunt shoots down Qakbot

• Authorities take down Qakbot infrastructure, issue commands to delete the malware

• When kids fly the nest, secure your digital nest eggs

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• VMware Patches Major Security Flaws in Network Monitoring Product

• ISPs Should Not Police Online Speech—No Matter How Awful It Is.

• The Other Russian War – What Can We Do?

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Quantum threats loom in Gartner’s 2023 Hype Cycle for data security

• DEF CON Generative AI Hacking Challenge Explored Cutting Edge of Security Vulnerabilities

• Cisco VPNs under attack via Akira, LockBit ransomware

• IT audit (information technology audit)

• The Most Devastating Data Breaches of the Decade

• Microsoft: Chinese APT Flax Typhoon uses legit tools for cyber espionage

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• U.S. Hacks QakBot, Quietly Removes Botnet Infections

• Somalia Orders ISPs to Block Telegram and TikTok

• South African Department of Defence Denies Stolen Data Claims

• Qakbot botnet disrupted, malware removed from 700,000+ victim computers

• Bridging AI and Ethics: Comprehensive Solutions in Healthcare Implementation

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Rackspace Faces Massive Cleanup Costs After Ransomware Attack

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Google Applies Generative AI Tools to Cloud Security

• OpenAI Turns to Security to Sell ChatGPT Enterprise

• New ‘MMRat’ Android Trojan Targeting Users in Southeast Asia

• Mom’s Meals issues “Notice of Data Event”: What to know and what to do

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• FBI operation tricked thousands of computers infected by Qakbot into uninstalling the malware

• In an Attack on WebDetective’s Servers, Hackers Deleted Victim Data

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Addressing Cybersecurity’s Talent Shortage & Its Impact on CISOs

• Android Goes All-in on Fuzzing

• Is Cybersecurity as a Service (CSaaS) the answer: Move faster | Do more

• New MMRat Android Trojan Uses Fake App Stores for Bank Fraud

• Role of C# in Building Dynamic and Secure Web Applications

• Abnormal Security: Microsoft Tops List of Most-Impersonated Brands in Phishing Exploits

• Okta for Global 2000 gives CEOs flexibility to centralize or decentralize their business strategy

• Tanium Vulnerability Risk and Compliance for ServiceNow accelerates security investigations

• Descope unveils third-party connectors for no-code app journey personalization

• Mom’s Meals Warns of Major Data Breach Affecting Over 1.2 Million Individuals

• Worldcoin: Ldcoin’s Token Value Falls by More Than 50% as Privacy Concerns Grow

• critical infrastructure

• LockBit 3.0 Ransomware Variants Surge Post Builder Leak

• More UK Cops’ Names And Photos Exposed In Supplier Breach

• Meta Fights Sprawling Chinese Spamouflage Operation

• Cybersecurity Experts Say The West Has Failed To Learn Lessons From Ukraine

• Google Tests Watermark To Identify AI Images

• US Spy Satellite Agency Isn’t So Silent About New Silent Barker Mission

• Criminals hack radio commands to stop Poland Trains

• How to turn on Private DNS Mode on Android (and why you should)

• New Ransomware Campaign Targets Citrix NetScaler Flaw

• Nordic Users Targeted by National Danish Police Phishing Attack

• How to Manage XDR Alerts with Heimdal

• What’s new in Gartner’s Hype Cycle for data security in 2023

• Kroll’s Crypto Breach Highlights SIM-Swapping Risk

• DarkGate Malware Activity Spikes as Developer Rents Out Malware to Affiliates

• Chinese Hacking Group Exploits Barracuda Zero-Day to Target Government, Military, and Telecom

• Mom’s Meals says data breach affects 1.2 million customers

• Hackers infiltrated Japan’s National Center of Incident Readiness and Strategy for Cybersecurity (NISC) for months

• Police Federation: Metropolitan IT System Breach Could Have Serious Consequences

• Chinese APT Was Prepared for Remediation Efforts in Barracuda ESG Zero-Day Attack

• UN Warns Hundreds of Thousands in Southeast Asia Roped Into Online Scams

• Did Microsoft Just Upend the Enterprise Browser Market?

• The Reality of Cyberinsurance in 2023

• Report Reveals Growing Disparity in Cyber Insurance Landscape

• The UK and the US Build a ‘Data Bridge’ to Facilitate Personal Data Movements

• SAP and Google Cloud join forces to provide customers with generative AI capabilities

• Fortinet enhances its SASE solution to help organizations prevent data leaks

• LogRhythm and Cimcor collaborate to enhance cyberattack protection for organizations

• Quid Pro Quo Attacks: Cyber Threat to Watch Out For

• Barracuda email gateways in US, Canadian government departments hit: Report

• Mom’s Meals Breached: Over 1.2 Million Consumers Data Exposed

• Here’s What Your Breach Response Plan Might Be Missing

• Can a private internet co-exist with the internet we know?

• Cyberattacks Targeting Government Agencies on the Rise

• Meta Fights Sprawling Chinese ‘Spamouflage’ Operation

• Black Hat USA 2023 NOC: Network Assurance

• Google debuts Duet AI to tackle new cybersecurity challenges in the cloud

• Personal, Health Information of 1.2 Million Stolen in PurFoods Ransomware Attack

• The Weird, Big-Money World of Cybercrime Writing Contests

• Swissbit introduces D1200 data center SSD

• Ransomware group exploits Citrix NetScaler systems for initial access

• Ciphertex strengthens data security with SecureNAS CX-160KSSD-X

• Meta says it has disrupted a massive disinformation campaign linked to Chinese law enforcement

• Security Team Huddle: Using the Full NIST Cybersecurity Framework for the Win

• Survey Provides Takeaways for Security Pros to Operationalize their Remediation Life Cycle

• Google is bringing generative AI to its security tooling

• More UK cops’ names and photos exposed in supplier breach

• Identity Theft from 1965 Uncovered through Face Recognition

• Easy-to-exploit Skype vulnerability reveals users’ IP address

• Cisco partners with Nutanix to accelerate hybrid multicloud deployments

• Intel Says Upcoming Data Centre Chip More Than Doubles Efficiency

• Judge Looks To Decertify Google Play Class-Action Lawsuit

• Microsoft Power Platform API Threatened Due To Reply URL Flaw

• How To Hide Browsing History – Complete Guide

• Microsoft Warns of Adversary-in-the-Middle Uptick on Phishing Platforms

• Citrix NetScaler Alert: Ransomware Hackers Exploiting Critical Vulnerability

• FIN8-linked actor targets Citrix NetScaler systems

• Start-Up Xpeng Buys Didi Global’s Electric Car Unit

• BYD Reports 200 Percent EV Profit Jump Amidst Tesla Price War

• Four in Five Cyber-Attacks Powered by Just Three Malware Loaders

• Which Is Better For File Security: Cloud Or NAS Backup?

• How to Implement an XDR Software?

• Two Men Arrested Following Poland’s Railway System Signals Hack

• OpenAI Launches ChatGPT For Large Businesses

• EV Start-Up VinFast Becomes Third Most Valuable Automaker

• Silicon UK In Focus Podcast: Your Virtual Strategy

• WHICH IS BETTER FOR FILE SECURITY: CLOUD OR NAS BACKUP?

• Need to improve the detection capabilities in your security products?

• Hong Kong-Licensed Crypto Exchange Accepts Retail Investors

• Microsoft Edge Privilege Escalation Flaw – Update Now!

• Japan’s JPCERT warns of new ‘MalDoc in PDF’ attack technique

• Phishing-as-a-Service Gets Smarter: Microsoft Sounds Alarm on AiTM Attacks

• How Do Microsoft Azure and Amazon AWS Differ From One Another?

• Rackspace spends $10m in ransomware cleanup costs

• 11 search engines for cybersecurity research you can use right now

• Is the cybersecurity community’s obsession with compliance counter-productive?

• What makes a good ASM solution stand out

• ProxyNation: The dark nexus between proxy apps and malware

• IT leaders alarmed by generative AI’s SaaS security implications

• 4 Popular Cybersecurity Myths vs. Facts

• How to Protect Your CI/CD Pipeline

• Book Review: Effective Threat Investigation for SOC Analysts

• 5 Effective Web Design Strategies to Increase Your ROI

• A week in security (August 21 – August 27)

• 2.6 million DuoLingo users have scraped data released

• Google strengthens its Workplace suite protection

Generated on 2023-08-30 23:55:17.062269