IT Security News Daily Summary 2023-09-05

• Facebook Continues To Offer Poor Support For Hacked Users

• Publisher’s Spotlight: RegScale: Holistically Manage Your Compliance Program

• Hornetsecurity Releases 365 Total Protection Plan 4 for Microsoft 365

• Global Cloud Security Market to Reach $62.9B by 2028

• Tuya Smart and Amazon Web Services Collaborate to Establish an IoT Security Lab

• Google raises prices for Nest Aware subscriptions, but there is good news

• GhostSec Leaks Source Code of Alleged Iranian Surveillance Tool

• Digital Rights Updates with EFFector 35.11

• CISA Hires ‘Mudge’ to Work on Security-by-Design Principles

• Ransomware attacks on education sector spike in August

• Peiter ‘Mudge’ Zatko Lands Role as CISA Senior Technical Adviser

• Hacking device Flipper Zero can spam nearby iPhones with Bluetooth pop-ups

• Atlas VPN zero-day allows sites to discover users’ IP address

• Reflectiz offers remote solution to battle Magecart attacks

• Reading between the Lines – How the INFORM Consumers Act Impacts Online Retailers

• China To Launch $40 Billion State Chip Fund – Report

• Data Initiatives Force Closer Partnership Between CISOs, CDOs

• Hackers Target High-Privileged Okta Accounts via Help Desk

• One-Click Deploying EMQX MQTT Broker on Azure Using Terraform

• Russia Undertakes Disinformation Campaign Across Africa

• Big Tech has failed to police Russian disinformation, EC study concludes

• Holiday Season Cyber Alert: Reflectiz Declares War on Magecart

• X to Collect Biometric Data For Premium Users to Add Verification Layer

• Hackers stole $41M worth of crypto assets from crypto gambling firm Stake

• Electoral Commission Failed Basic Security Test Before Cyberattack

• Gcore Thwarts 500 Million PPS DDoS Attack on Gaming Company

• How Companies Can Cope With the Risks of Generative AI Tools

• UK Online Safety Bill Will Mandate Dangerous Age Verification for Much of the Web

• Montana’s New Genetic Privacy Law Caps Off Ten Years of Innovative State Privacy Protections

• The Rise of Chaes Malware: A Threat to Financial and Logistics Industries

• Introducing the next phase of 5G

• Future forward cyber

• Holiday Season Cyber Alert: Reflectiz Declares War on Magecart Attacks

• Freecycle data breach impacted 7 Million users

• Publisher’s Spotlight: Security Journey: Secure Coding Training

• Huawei Phone Teardown Reveals China Chip Advances

• Mend.io SAML Vulnerability Exposed

• The Strange Afterlife of Wagner’s Yevgeny Prigozhin

• Thales OneWelcome Identity Platform Recognized as Overall and Market Leader by KuppingerCole

• AI Development May Take a Toll on Tech Giant’s Environment Image

• TikTok hires British Security firm to banish data security concerns

• Creating a Custom Starter With Spring Boot 3

• MITRE and CISA Release Open Source Tool for OT Attack Emulation

• UK Electoral Commission Fails Cybersecurity Test Amid Data Breach

• Airlines Battle Surge in Loyalty Program Fraud

• Top 10 riskiest assets threatening global business

• LiveWire allows users to export their data, use it with AIs

• Hornetsecurity releases 365 Total Protection Plan 4 for Microsoft 365 to protect email communications

• LockBit leaks sensitive data from maximum security fence manufacturer

• Kingston Digital introduces XS1000 External SSD

• How to Identify and Overcome Blockchain Fatigue

• Tech Giants Grapple Russian Propaganda: EU’s Call to Action

• Musk stirs controversy with move by X to collect biometrics

• Apple, Microsoft Push To Keep iMessage, Bing Off EU Gatekeeper List

• Use Angry IP Scanner to audit the network

• New BLISTER Malware Update Fuelling Stealthy Network Infiltration

• The Nuanced Landscape of Insider Threats: A Conversation with Federico Charosky of Quorum Cyber

• Okta Says US Customers Targeted In Sophisticated Attacks

• 9 Vulnerabilities Patched In SEL Power System Management Products

• TikTok Opens Dublin Data Centre To Ease China Spying Fears

• Parcel Delivery Smishing Campaign Targets iPhone Users

• Freecycle gives users the gift of a data breach notice

• Freecycle Data Breach Impacts 7 Million Users

• Okta Says US Customers Targeted in Sophisticated Attacks

• Norfolk Southern Says a Software Defect — Not a Hacker — Forced It to Park Its Trains This Week

• 7 Million Users Possibly Impacted by Freecycle Data Breach

• 9 Vulnerabilities Patched in SEL Power System Management Products

• As LotL Attacks Evolve, So Must Defenses

• 8×8 Omni Shield protects users from fraudulent SMS activity

• LiveWire allows users to export their data and use it with the AIs

• 5 Ways Heimdal® Protects You From DNS Attacks

• Zero-day attacks are on the rise. Can patches keep up?

• Chipmaker NXP confirms data breach involving customers’ information

• Tech-Savvy Solutions: Streamlining Long-Term Disability Claims

• Vietnamese Cybercriminals Exploit Malvertising to Target Facebook Business Accounts

• Your Armor Against Identity Theft: Exploring Diverse Protection Service Options

• EE, Vodafone, O2 Users Suffer Calling Routing Issue

• Researchers Warn of Cyber Weapons Used by Lazarus Group’s Andariel Cluster

• Key Cybersecurity Tools That Can Mitigate the Cost of a Breach

• Way Too Vulnerable: Join this Webinar to Understand and Strengthen Identity Attack Surface

• New Python Variant of Chaes Malware Targets Banking and Logistics Industries

• Zero Trust Security: Pioneering Solutions on a ‘Never Trust, Always Verify’ Principle to Overcome Modern Cyberspace Security Challenges!

• FutureBank and IDVerse Partner to Fight Cybercrime

• 16-31 July 2023 Cyber Attacks Timeline

• World’s Largest Cryptocurrency Casino Stake Hacked for $41 Million

• Northern Ireland top cop quits in wake of data breach and disciplinary controversy

• Hacker Group Disguised as Marketing Company to Attack Enterprise Targets

• Meta disrupted two influence campaigns from China and Russia

• The importance of CISOs is not recognised by senior leadership

• International Cyber Expo Commits to Highlighting Importance of Wellbeing in Cybersecurity

• Ransomware Attack on Fencing Systems Maker Zaun Impacts UK Military Data

• Cybersecurity M&A Roundup: 40 Deals Announced in August 2023

• Developers Warned of Malicious PyPI, NPM, Ruby Packages Targeting Macs

• ThetaRay nabs $57M for AI tools to fight money laundering

• India warns of malware attacks targeting its Android users

• Heimdal Announces Expansion into the Indian Market

• Amazon Loses One Medical CEO After Acquisition

• Analyzing a Facebook Profile Stealer Written in Node.js

• More Schools Hit By Cyber-Attacks Before Term Begins

• Achieving Superior Security with Continuous Compliance

• 2023 Cost of a Data Breach: Key Takeaways

• UK National Cyber Security Centre Gets a New CTO

• Securing Linux Policy

• Freecycle Breach May Have Hit Millions of Users

• Multiple IBM Sterling Secure Proxy Vulnerabilities Allow Remote Code Execution

• Why Is MDR Better Than EDR: Enhancing Cybersecurity in the Modern World

• Need to improve the detection capabilities in your security products?

• A massive DDoS attack took down the site of the German financial agency BaFin

• BitBrowser Hackers Launder 70.6% of Stolen Funds

• Meta Takes Down Thousands of Accounts Involved in Disinformation Ops from China and Russia

• Avoid storing this data on mobile to curb privacy and security concerns

• Why end-to-end encryption matters

• The misconceptions preventing wider adoption of digital signatures

• Connected cars and cybercrime: A primer

• Reaper: Open-source reconnaissance and attack proxy workflow automation

• 6 free resources for getting started in cybersecurity

• A week in security (August 28 – September 3)

• Supply chain related security risks, and how to protect against them

• IT Security News Daily Summary 2023-09-04

• PSNI Data Breach Results In Arrests, Resignations

• Engineers Create Greener Alternative To Lithium-ion Battery

• UK Government Details AI Safety Summit Ambitions

• X will collect biometric data from its premium users

• Defending Against Snake Ransomware: Here’s All You Need to Know

• A college student’s guide to dating app scams

• “Smishing Triad” Targeted USPS and US Citizens for Data Theft

• Better cybersecurity with new material

• PoC Exploit Released for VMware Aria Authentication Bypass Vulnerability

• Microsoft Calls Time On Ancient TLS In Windows, Breaks Own Stuff

• Twitter Accused Of Helping Saudi Arabia Commit Human Rights Abuses

• Attackers Accessed UK Military Data Through A Windows 7 Rig

• Revealed: Home Office Secretly Lobbied For Facial Recognition Spy Company

• Russian Military Hackers Take Aim at Ukrainian Soldiers’ Battle Plans

• Python Package Index Targeted Again By VMConnect

• Publicly available Evil_MinIO exploit used in attacks on MinIO Storage Systems

• New Attack Technique “MalDoc in PDF” Alarms Experts

• FBI Operation: Quakbot Botnet Dismantled, Preventing Severe Ransomware Attacks

• How to make sure the reputation of your products and company is good

• LockBit hackers steal sensitive documents from Britain Military Defense

• New Infamous Chisel Malware Targets Android Users In State-Backed Campaign

• Medical Data Breach: Ayush Jharkhand Hacked

• Attackers accessed UK military data through high-security fencing firm’s Windows 7 rig

• Google’s Quest for AI Dominance: Challenges and Opportunities

• Cybersecurity for Startups: Best Tips and Strategies

• Hackers Exploit MinIO Storage System Vulnerabilities to Compromise Servers

• Step Up Your Defense Against Cloud-loving Cybercriminals

• Cybersecurity Concerns In AI: NCSC Flags Vulnerabilities In Chatbots And Language Models

• Schools Warned Of Cybersecurity Threats At The Start Of New Academic Year

• Tsunami watch

• Microsoft calls time on ancient TLS in Windows, breaking own stuff in the process

• Canada Seeks To Address Facebook, Google Concern Over Online News Law

• ShinyHunters Hacker group Claims to Have Hacked Pizza Hut Australia customer data

• X (Twitter) to Collect Biometric Data from Premium Users to Combat Impersonation

• UK AI usage explodes

• Chastity Device Designer Exposes Customers’ Private Data Due to Server Vulnerabilities

• The Race to Train AI: Who’s Leading the Pack in Social Media?

• Realism Reigns on AI at Black Hat and DEF CON

• Why Cybersecurity for Private Equity Is Urgent Now – And What Funds Can Do to Move the Needle.

• Northern Irish cops release 2 men after Terrorism Act arrests linked to data breach

• Navigating the Crypto Seas: A Guide to Buying Ethereum Safely

• Active Exploitation Of Adobe ColdFusion Vulnerabilities Detected Despite Being Patched

• NCSC Warns of Specific Vulnerabilities in AI Models Like ChatGPT

• Single-Tenant vs. Multi-Tenant Architecture: Breaking Down the Key Differences

• Cyber Security Today, Sept. 4, 2023 – Cybersecurity tips for parents as the new school year starts

• Chinese APT Slid Fake Signal and Telegram Apps onto Official App Stores

• Everything You Wanted to Know About AI Security but Were Afraid to Ask

• First Directory of Virtual CISO Providers Launched by Cynomi

• Sensitive Data about UK Military Sites Potentially Leaked by LockBit

• University of Sydney suffered a security breach caused by a third-party service provider

• JUMPSEC research reveals UK ransomware attacks rose by 87% in the first half of 2023

• Eco-Friendly in the Digital Age: Navigating the Tech-Sustainability Connection

• Binance Product Head Resigns Amid US Investigation

• Microsoft Says Goodbye to Wordpad, Snipping Tool, and Other Utilities

• Schweitzer Labs Windows Software Flaws Allow Remote Code Execution

• ARM Signs Up Major Tech Firm Investors, Prices IPO

• How to get a handle on shadow AI

• Sydney University Suffers Supply Chain Breach

• Vietnamese Cybercriminals Targeting Facebook Business Accounts with Malvertising

• 7 Key MXDR Benefits

• Summary of South Africa’s Protection of Personal Information Act (PoPIA)

• Four Convicted in $18m Investment Fraud Scheme

• Silicon In Focus Podcast: Smart Virtual Spaces

• Suffolk High School Forced Offline After Cyber-Attack

• Cybercrime will cost Germany $224 billion in 2023

• Sea Sides Conference: Interviewing Prashant Kv and Parveen

• Key Group Ransomware: Free Decryptor Released

• Software developers, how secure is your software?

• Facing Third-Party Threats With Non-Employee Risk Management

• How malware sandboxes can help strengthen cybersecurity

• Beware of MalDoc in PDF: A New Polyglot Attack Allowing Attackers to Evade Antivirus

• Germany witnesses $224Bn yearly economy loss with Cyber Attacks

• 5 ways in which FHE can solve blockchain’s privacy problems

• Ransomware attacks go beyond just data

• Spam is up, QR codes emerge as a significant threat vector

• Infosec products of the month: August 2023

• Global roaming fraud losses to surpass $8 billion by 2028

• Apple opens annual applications for free hackable iPhones

Generated on 2023-09-05 23:55:22.436627