IT Security News Daily Summary 2023-09-13

• Fortifying the Cloud: A Look at AWS Shield’s Scalable DDoS Protection

• triple extortion ransomware

• Kubernetes Admins Warned to Patch Clusters Against New RCE Vulns

• Rail Cybersecurity Is a Complex Environment

• iOS 17 Cheat Sheet: Release Date, Supported Devices and More

• Watchdog urges change of HART: Late, expensive US biometric ID under fire

• Microsoft Azure HDInsight Plagued With XSS Vulnerabilities

• Federal Mandates on Medical-Device Cybersecurity Get Serious

• A new ransomware family called 3AM appears in the threat landscape

• CISO Global Threat Informed captures and analyzes data posted to darknets

• Browser companies patch critical zero-day vulnerability

• Digital forensics firm Binalyze raises $19M to investigate cyber threats

• Openreach Reveals New Destinations In Full Fibre Build Update

• Uncle Sam warns deepfakes are coming for your brand and bank account

• AuthMind Scores $8.5M Seed Funding for ITDR Tech

• When LockBit Ransomware Fails, Attackers Deploy Brand-New ‘3AM’

• New Free Tool From Contrast Security Makes API Security Testing Fast and Easy

• Airbus suffers data leak turbulence to cybercrooks’ delight

• Watchdog Alleges X/Twitter Failing To Tackle Online Hate

• Hackers Attack Facebook Business Users Aggressively to Steal Login Credentials

• HCL BigFix 11 accelerates endpoint management strategies for organizations

• Armis Centrix delivers a modular approach to cyber exposure management

• Torii launches generative AI-powered SaaS Management Platform

• SentinelOne releases Singularity RemoteOps Forensics to improve incident response for companies

• Online Jobseekers Beware: Strategies to Outsmart Scammers

• ReconAIzer: OpenAI-based Extension for Burp Suite

• Businesses need pricing clarity as generative AI services hit the market

• The 10 biggest ransomware attacks in history

• Facebook Scam Victim Told By Police To Write Letter Of Complaint To Mark Zuckerberg

• MGM Resorts says cyberattack could have material effect on company

• MrTonyScam: Python-based Stealers Deployed via Facebook Messenger

• A 2-Week Prescription for Eliminating Supply Chain Threats

• Eco-hacks: The intersection of sustainability and cyber threats

• Securing the smart cities of tomorrow: Cybersecurity challenges and solutions

• France Halts Sales Of iPhone 12, Cites Radiation Exposure

• How Next-Gen Threats Are Taking a Page From APTs

• US Agencies Publish Cybersecurity Report on Deepfake Threats

• CISOs and Board Reporting – an Ongoing Problem

• Distributed Energy Resources Get Cybersecurity Boost with $39M DOE Funding

• Microsoft Patch Tuesday Includes Word, Streaming Service Zero-Days

• Mozilla Patches 0-Day Exploited For Spyware Delivery

• France Halts iPhone 12 Sales Over Radiation Levels

• Malicious AI Tools Flourish, Put Pressure On Lawmakers

• Cisco Secure Application provides business risk insights for cloud native apps

• Skybox Security announces platform enhancements to mitigate cyber exposure risk

• SCYTHE 4.0 empowers team collaboration in real-world adversarial campaigns

• GitHub Vulnerability Exposes Over 4,000 Repositories to Repojacking Attacks

• MGM Resorts cyberattack and outage stretches into third day

• Details of Airbus Cyber Attack and Implications

• Apple iPhone 15, Apple Watch: Industry Reaction

• New Microsoft Teams Phishing Campaign Targets Corporate Employees

• Hackers Attack Telegram With DDoS After Targeting Microsoft and X

• Google Chrome Launches ‘Privacy Sandbox’ to Phase Out Tracking Cookies

• IBM, Salesforce and More Pledge to White House List of Eight AI Safety Assurances

• Alert: New Kubernetes Vulnerabilities Enable Remote Attacks on Windows Endpoints

• Researchers Detail 8 Vulnerabilities in Azure HDInsight Analytics Service

• China Threat Recap: A Deeper Insight

• Salesforce and Google join forces to drive productivity with AI

• Mirantis Kubernetes Engine 3.7.0 minimizes the risk associated with updates

• Apple Watch Update Sees Modest Changes

• Storm-0324 Exploits MS Teams Chats to Facilitate Ransomware Attacks

• Airbus Launches Investigation After Hacker Leaks Data

• macOS Info-Stealer Malware ‘MetaStealer’ Targeting Businesses

• China Says No Law Banning iPhone Use in Govt Agencies

• CISA Releases Open Source Software Security Roadmap

• Cybersecurity Skills Gap: Roadies & Gamers Are Untapped Talent

• The Dark Side of Web Development: Why You Should Be Prioritizing Shadow Code

• Microsoft Teams Phishing Attacks: Ransomware Group Shifts Tactics

• China says it hasn’t banned iPhones or foreign devices for government staff

• Protecting ML models will secure supply chain, JFrog releases ML security features

• Everbridge 360 helps organizations optimize their response efforts

• Gradle Version Catalogs on Android

• MGM Criticized for Repeated Security Failures

• Recent Rhysida Attacks Show Focus on Healthcare By Ransomware Actors

• Webinar: Identity Threat Detection & Response (ITDR) – Rips in Your Identity Fabric

• The return of the ASN-DROP

• Ransomware Trends and Predictions for 2023 and Beyond

• Cyber Security Today, Sept. 13, 2023 – Crooks target Facebook Messenger accounts of businesses, a warning to IT support staff and more

• Ease of Use and Security: Two key aspects of API Design

• SAP Patches Critical Vulnerability Impacting NetWeaver, S/4HANA

• CISA Offering Free Vulnerability Scanning Service to Water Utilities

• SecurityWeek to Host Cyber AI & Automation Summit

• Redfly group infiltrated an Asian national grid as long as six months

• iProov and Cybernetica partner to create a remote identity solution for government and finance onboarding

• Used cars? Try used car accounts: 15,000 up for grabs online at just $2 a pop

• The Cybersecurity Crisis: Dating App “Coffee Meets Bagel (CMB)” Hacked again!

• Bitwarden strengthens security with SSO integrations for businesses

• MetaStealer malware is targeting enterprise macOS users

• Apple Axes Lightning Cable With iPhone 15 Launch

• Weaponized Free Download Manager for Linux Steals System Data & Passwords

• The US Congress Has Trust Issues. Generative AI Is Making It Worse

• Zero-Click Exploit in iPhones

• Machine Learning is a Must for API Security

• RedLine/Vidar Abuses EV Certificates, Shifts to Ransomware

• Patch Now! Mozilla Releases Security Updates For Firefox Zero Day Vulnerability

• How to snoop on passwords with this one weird trick (involving public Wi-Fi signals)

• Implementing the Least Privilege Principle to Safeguard Your Assets

• Chilling Lack of Cyber Experts in UK Government, Finds Parliamentary Inquiry

• Rust-Written 3AM Ransomware: A Sneak Peek into a New Malware Family

• How Cyberattacks Are Transforming Warfare

• Microsoft Teams phishing: Enterprises targeted by ransomware access broker

• Capita class action: 2,000 folks affected by data theft sign up

• The Twisted Eye in the Sky Over Buenos Aires

• Chinese Redfly Hacked National Power Grid & Maintained Access for 6 Months

• Mozilla Zero-Day Vulnerability Exploited in the Wild – Patch Now!

• After Apple and Google, Mozilla Also Patches Zero-Day Exploited for Spyware Delivery

• Microsoft Fixes Two Zero-Day Bugs Used in Attacks

• Microsoft Warns of New Phishing Campaign Targeting Corporations via Teams Messages

• Mozilla fixed a critical zero-day in Firefox and Thunderbird

• MGM Resorts Suspends IT Systems Following Cyber Incident

• CISA Publishes Plan to Enhance Open Source Security

• Threat landscape for industrial automation systems. Statistics for H1 2023

• The Utility of ServiceNow Integration in Streamlining Workflows

• Chrome Zero-Day Vulnerability Exploited in the Wild

• 5 Reasons Why You Should Conduct Regular Cybersecurity Audits

• Around the World in IOT Days (Security Frameworks Edition)

• UK ICO and NCSC Set to Share Anonymized Threat Intelligence

• Why performing security testing on your products and systems is a good idea

• Windows Arbitrary File Deletion Vulnerability Leads to Full System Compromise

• Data Poisoning: A Growing Threat to Cybersecurity and AI Datasets

• Top 10 Programming Languages that are required in Cybersecurity Field

• Zero-Day Summer: Microsoft Warns of Fresh New Software Exploits

• Microsoft Releases Patch for Two New Actively Exploited Zero-Days Flaws

• Microsoft September 2023 Patch Tuesday fixed 2 actively exploited zero-day flaws

• The rise and evolution of supply chain attacks

• Serial cybersecurity founders get back in the game

• How should SMBs navigate the phishing minefield?

• The Digital Battlefield: Common Types of Cyber Threats Exposed

• Future forward cyber

• Privacy concerns cast a shadow on AI’s potential for software development

• Latest fraud schemes targeting the payments ecosystem

• Ransomware attack hits Sri Lanka government, causing data loss

• Update Adobe Acrobat and Reader to Patch Actively Exploited Vulnerability

• Malware distributor Storm-0324 facilitates ransomware access

• Mozilla Rushes to Patch WebP Critical Zero-Day Exploit in Firefox and Thunderbird

• Learn the Risks of API Vulnerabilities

• Major cyberattack leaves MGM Resorts reeling

• Two Apple issues added by CISA to its catalog of known exploited vulnerabilities

• Microsoft Teams used to deliver DarkGate Loader malware

• Update Chrome now! Google patches critical vulnerability being exploited in the wild

• Ransomware review: September 2023

• China caught – again – with its malware in another nation’s power grid

• The State of Windows Digital Analysis

• Adobe, Apple, Google & Microsoft Patch 0-Day Bugs

• Microsoft Patches a Pair of Actively Exploited Zero-Days

• UN’s Cybercrime Convention Draft: A Slippery Slope for LGBTQ+ and Gender Rights

• Save the Children confirms it was hit by cyber attack

• VERT Threat Alert: September 2023 Patch Tuesday Analysis

• IT Security News Daily Summary 2023-09-12

• Risk & Repeat: Big questions remain on Storm-0558 attacks

• China’s Winnti APT Compromises National Grid in Asia for 6 Months

• Appeals Court Upholds Public.Resource.Org’s Right to Post Public Laws and Regulations Online

• Grab those updates: Microsoft flings out fixes for already-exploited bugs

• Spring Authentication With MetaMask

• Federal Judge Upholds State Department Rule Requiring Visa Applicants to Disclose Social Media Information

• Adobe fixed actively exploited zero-day in Acrobat and Reader

• Microsoft, Adobe fix zero-days exploited by attackers (CVE-2023-26369, CVE-2023-36761, CVE-2023-36802)

• The Role of Threat Modeling in Software Development: A Cybersecurity Perspective

• Why GraphQL API Security Is Unique

• Five ways CISOs are using AI to protect their employees’ digital devices and identities

• Check Point: Hackers Are Dropping USB Drives at Watering Holes

• Critical Google Chrome Zero-Day Bug Exploited in the Wild

• Zero Day Summer: Microsoft Warns of Fresh New Software Exploits

• Israeli Hospital Hit By Ransomware Attack, 1TB Data Stolen

• Sentra enhances data classification engine with LLMs to tackle data complexity and AI security

• Kingston launches IronKey D500S, a hardware-encrypted USB flash drive

• IBM Adds Data Security Broker to Encrypt Data in Multiclouds

• Chrome’s Invasive New Tracking Sparks Need for a New Browser

• OpenSSL 1.1.1 reaches end of life for all but the well-heeled

• Intel Capital Bets on Zenity for Low-Code/No-Code Security

• ChatGPT Jailbreaking Forums Proliferate in Dark Web Communities

• GCX launches GNSX in partnership with Palo Alto Networks

• Netskope joins MXDR by Deloitte to expand strategic alliance

• GroupSense Tracelight Fuse empowers MSPs and MSSPs to automate remediation actions

• Unpacking the New National Cybersecurity Strategy: Key Takeaways for Developers and Security Experts

• Check Point: Hackers Dropping Physical USB Drives at Watering Holes

• Adobe Says Critical PDF Reader Zero-Day Being Exploited

• Millions of Facebook Business Accounts Bitten by Python Malware

• EFF Award Winner: Signal Foundation

• AP Stylebook Data Breach: Associated Press Warns That The Breach Led to Phishing Attacks

• Resilient networks: Building blocks of modern Cybersecurity architecture

• AT&T Cybersecurity serves as critical first responder during attack on municipality

• TikTok Sister Site Douyin Expands China Food Delivery

• Las Vegas Slot Machines Shut Down By MGM Resorts Hack

• Windows 10 and 11 in S Mode: What Is It and Should You Use It?

• A new Repojacking attack exposed over 4,000 GitHub repositories to hack

• Charming Kitten Snares Unpatched Exchange Servers

• Looks Like MGM Resorts Just Got Hacked

• Google Patches Chrome 0-Day Reported By Apple, Spyware Hunters

• Thousands Of Code Packages Vulnerable To Repojacking Attacks

• Huge DDoS Attack Against US Financial Institution Thwarted

• New Sponsor Malware Attacking Government & Healthcare Organizations

• Generative AI Adoption Surges in Software Development Despite Security Risks, Sonatype Research Finds

• CTERA Vault safeguards against risks related to data tampering

• Swissbit introduces iShield Archive memory card that protects sensitive information

• Wing and Drata join forces to ensure a way to keep SaaS compliant

• Publisher’s Spotlight: F5: Multi-Cloud Security and Application Delivery

• China’s Move Towards Automated Data Security Compliance

• Windows Systems Targeted in Multi-Stage Malware Attack

• Zenity strives to keep no-code/low-code apps secure

• Don’t Leave Cybersecurity to Chance

• Overconfident Organisations Prone to Cyber Breaches, Study Finds

• Salt Security Appoints New Senior Vice President, Corporate and Business Development

• What Is Managed Extended Detection and Response (MXDR)?

• Behind the Wheel, Under Surveillance: The Privacy Risks of Modern Cars

• Here’s How Hackers Sell and Trade Your Data in the Metaverse

• Unveiling the DarkGate Malware Phishing Attack on Microsoft Teams

• Vishing Scams: Here’s How to Spot & Defend Against Them

• WEBINAR: 5 Reasons Why Zero Trust Network Access (ZTNA) Triumphs Over VPN

• UK Researchers Develop Train AI To Aid Air-Traffic Controllers

• Google’s Chrome gets caught with its WebP down, offers hasty patch-up

• Dreamforce 2023: Salesforce Expands Einstein AI and Data Cloud Platform

• Thousands of Code Packages Vulnerable to Repojacking Attacks

• Cyber-criminals “Jailbreak” AI Chatbots For Malicious Ends

• Zenity strives to keep no code/low code apps secure

• Ransomware gang says it has hit International Joint Commission

• Security Breaches Are On The Rise, Here’s How Verified Identities Can Help

• New 2023 SANS DevSecOps Survey Explores DevSecOps Challenges And Trends

• Why Data Theft Is Now The #1 Cybersecurity Threat Keeping IT Pros Awake At Night

• Trua integrates with Apple Wallet to eliminate the need for physical documents

• Netcraft acquires FraudWatch to deliver online brand protection at scale

• Gigamon Precryption technology reveals concealed threat activity in the cloud

• Research: Majority Of UK, Ireland Businesses Already Using AI

• Iranian Cyberspies Deployed New Backdoor to 34 Organizations

• Vector Embeddings – Antidote to Psychotic LLMs and a Cure for Alert Fatigue?

• The Double-Edged Sword of Cyber Espionage

• Exploring Virtual Mobile Numbers: Benefits and Uses (2023)

• Dangers of Deep Sea Phishing – A Dive Into a Real-World Attack

• Dangers of Deep Sea Phishing

• New Alibaba Group Chief Targets AI, Users As Core Priorities

• Top 10 SaaS Security Checklist in 2023

• Check Point Research reports a large-scale phishing attack targeting over 40 Colombian based companies

• 6 simple cybersecurity rules to live by

• ICS Patch Tuesday: Critical CodeMeter Vulnerability Impacts Several Siemens Products

• ‘Anonymous Sudan’ Sets Its Sights on Telegram in DDoS Attack

• BEC Attack Roundup: Thread Hijack Edition

• HPE Aruba Networking enhancements improve network security for SMBs

• Endace collaborates with Elastic to accelerate cyber threat response

• Patch Management Policy: A Practical Guide

• Industry Experts React to DARPA’s AI Cyber Challenge

• DFIR Company Binalyze Raises $19 Million in Series A Funding

• Court Convicts Portuguese Hacker in Football Leaks Trial and Gives Him a 4-Year Suspended Sentence

• Cleafy Raises €10 Million for Online Banking Fraud Prevention Platform

• Finding Your Way in Cloud Security

• China-Linked ‘Redfly’ Group Targeted Power Grid

• MGM Resorts Hit By Cyber-Attack, Systems Down

• Critical GitHub Vulnerability Exposes 4,000+ Repositories to Repojacking Attack

• MGM Resorts hit by a cyber attack

• Cars Have Terrible Data Privacy

• Requests via Facebook Messenger lead to hijacked business accounts

• Entrust names Jordan Avnaim as CISO

• Silicon UK In Focus Podcast: The Value of the Virtual

• Apple Extends Qualcomm Deal As Modem Efforts Continue

• Sophisticated Phishing Campaign Deploying Agent Tesla, OriginBotnet, and RedLine Clipper

• Chinese Redfly Group Compromised a Nation’s Critical Grid in 6-Month ShadowPad Campaign

• 7 Steps to Kickstart Your SaaS Security Program

• AuthMind raises seed funding for its identity SecOps platform

• Almost One in Three Parents Have Never Spoken to Their Children About Cybersecurity

• MemDive AI Engine Prevents Malicious Payloads from Evading Security Measures

• Fighting Individual Ransomware Strains Fruitless, UK Agencies Suggest

• Over Half of UK Population Supportive of UK Government and Allies Breaking International Cybersecurity Law

• Ragnar Locker Claims Israel Hospital Cyberattack

• Apple To Introduce iPhone 15 Amidst Market Share Gains

• Hacker Group Infrastructure That Uses Weaponized MS Word Docs Uncovered

• Netcraft Acquires FraudWatch to Cement Leadership in Cybercrime Detection & Takedown; Delivers Online Brand Protection at Scale Supported by 24/7 Security Operations Center

• Redfly Group Compromises National Power Grid

• China-Linked Hackers Breached a Power Grid—Again

• Chrome zero-day exploited in the wild, patch now! (CVE-2023-4863)

• Anonymous Sudan launched a DDoS attack against Telegram

• Google Patches Chrome Zero-Day Reported by Apple, Spyware Hunters

• US Government Ordered to Urgently Patch Apple Zero-Day Bugs

• Life in the Clouds: Navigating Security Challenges in Cloud Environments

• IT Staff Systems and Data Access Policy

• Want a New Job? Explore Opportunities at the 10 Top US Startup Ecosystems

• Europol: Financial Crime Makes “Billions” and Impacts “Millions”

• The Role of Random Number Generators (RNGs) in Online Casino Games

• Free Download Manager backdoored – a possible supply chain attack on Linux machines

• Need to improve the detection capabilities in your security products?

• Beware of Fake Browser Updates that Install Malware on Systems

• Thales 2023 Data Threat Report: The Increased Telco Cybersecurity Challenges in the 5G Era

• Beware: MetaStealer Malware Targets Apple macOS in Recent Attacks

• Iranian Charming Kitten APT targets various entities in Brazil, Israel, and the U.A.E. using a new backdoor

• Cyber Attack on MGM Hotel Group

• Google Rushes to Patch Critical Chrome Vulnerability Exploited in the Wild – Update Now

• Companies need to rethink how they implement identity security

• Strategies for harmonizing DevSecOps and AI

• 17 free AWS cybersecurity courses you can take right now

• MGM Resorts is facing ‘ongoing’ cyber incident that sent reservation and booking systems offline

• Azure vs. AWS Developer Tools Guide

• CIS SecureSuite membership: Leverage best practices to improve cybersecurity

• Bruschetta-Board: Multi-protocol Swiss Army knife for hardware hackers

• CISOs need to be forceful to gain leverage in the boardroom

• MGM Resorts is facing ‘ongoing’ cyberattack that sent reservation and booking systems offline

• How to Watch Apple’s iPhone 15 Launch, and What to Expect

• These Prisoners Are Training AI

• Yes, There’s a New Covid Variant. No, You Shouldn’t Panic

• FDA approves and authorizes updated COVID boosters for everyone 6 months and up

• Millions of cheap Android TV boxes come pre-infected with botnet malware

• Not too big: Machine learning tames huge data sets

• Understanding HTTPS Spoofing: A Deceptive Online Threat

• How to Predict Customer Churn Using SQL Pattern Detection

• A week in security (September 4 – September 10)

• The main causes of ransomware reinfection

• Wyze home cameras temporarily show other people’s security feeds

• Re-air: What teenagers face growing up online: Lock and Code S04E19

Generated on 2023-09-13 23:55:27.890491