IT Security News Daily Summary 2023-09-16

• Best Practices for Endpoint Security in Healthcare Institutions

• Canada cyber centre issues alert after government DDoS attacks

• ETH Founder Vitalik Buterin’s X (Twitter) Hacked, $700k Stolen

• AI in Sounds is Helping Brands Create Their ‘Sonic Identity’

• MGM Resorts Hit by Cyber Siege: Hackers Brag About Four-Day Outage

• Iranian Peach Sandstorm group behind recent password spray attacks

• BianLian Threat Group Breaches Renowned NGO, Steals Vast Amounts of Data

• Storm-0324 Threat Group Expands Attack Vectors, Targeting Microsoft Teams

• Ransomware Actors’ Recent Rhysida Attacks Highlight a Rising Threat on HealthCare Institutions

• Strategic IT Staff Augmentation: A Roadmap for C-Level Executives

• Advantages of a Cloud VPS Server

• You Need to Update Google Chrome or Whatever Browser You Use

• TikTok Faces Massive €345 Million Fine Over Child Data Violations in E.U.

• Attack on MGM Resorts Linked to BlackCat Ransomware Group

• Massive MGM and Caesars Hacks Epitomize a Vicious Ransomware Cycle

• Probe reveals previously secret Israeli spyware that infects targets via ads

• Build or Buy your own antivirus product

• Europol lifts the lid on cybercrime tactics

• 7 Best Penetration Testing Tools & Software in 2023

• Biden National Cybersecurity Strategy Key Takeaways

• DoD: China’s ICS Cyber Onslaught Aimed at Gaining Kinetic Warfare Advantage

• IT Security News Daily Summary 2023-09-15

• Microsoft Flushes Out ‘Ncurses’ Gremlins

• Dariy Pankov, the NLBrute malware author, pleads guilty

• Friday Squid Blogging: Cleaning Squid

• Scattered Spider traps 100+ victims in its web as it moves into ransomware

• Google Account Sync Vulnerability Exploited to Steal $15M

• UX Is Critical for Zero-Trust

• How To Repair Failed Installations of Exchange Cumulative and Security Updates

• Ballistic Bobcat’s Sponsor backdoor – Week in security with Tony Anscombe

• Capslock: What is your code really capable of?

• Cyber Security Today, Week in Review for the week ending Friday, Sept. 15, 2023

• How to Free up RAM on Your Windows or Mac Device: 15+ Ways

• CISO Global Deepens Capabilities With Integrated Threat Intelligence Feed

• Enea Qosmos Threat Detection SDK Launched to Boost the Performance of Network-Based Cybersecurity

• LLM Summary of My Book Beyond Fear

• Casino’s have some of the worst cybersecurity, says TrustedSEC’s David Kennedy

• Securing Tomorrow: Unleashing the Power of Breach and Attack Simulation (BAS) Technology

• IT Trends: Observability Leaders 3x More Likely to Report ‘Extremely Well’

• Okta Flaw Involved in MGM Resorts Breach, Attackers Claim

• Armis Launches Armis Centrix™, the AI-powered Cyber Exposure Management Platform

• Attack surfaces still aren’t being managed fast enough by IT: Report

• Free Download Manager Site Pushed Linux Password Stealer

• 8 Best Linux Distros for Forensics & Pentesting for 2023

• Greater Manchester Police Hack Follows Third-Party Supplier Fumble

• Dangerous permissions detected in top Android health apps

• LockBit Ransomware Falters, Attackers Deploy New ‘3AM’ Malware

• Next-Gen Threat Hunting Techniques With SIEM-SOAR Integration

• Why You Shouldn’t Test on Rooted Devices

• Extradited Russian Hacker Behind ‘NLBrute’ Malware Pleads Guilty

• How DNS Layer Security Stops Ransomware and Other Cyberattacks

• Google throws California $93M to make location tracking lawsuit disappear

• Safeguarding Your Organization: Insights for IT Pros During National Insider Threat Awareness Month

• Securing Your Applications With Spring Security

• MidgeDropper Variant Targets Work-from-Home Employees on Windows PCs

• Microsoft: ‘Peach Sandstorm’ Cyberattacks Target Defense, Pharmaceutical Orgs

• Popular Resort and Casino Giant Experiences Cybersecurity Issue

• Pentagon’s 2023 Cyber Strategy Focuses on Helping Allies

• ICO issues warning over smart devices harvesting personal data

• Ransomware Access Broker Leverages Microsoft Teams Titles for Account Theft

• Apple says better keep data out of cloud

• Rockwell Automation Pavilion8

• Siemens RUGGEDCOM APE1808 Product Family

• Siemens SIMATIC, SIPLUS Products

• Fortinet Releases Security Updates for Multiple Products

• Trend Micro Protects Kingston University During Peak Clearing Period

• Two New York Hospitals Breached by the LockBit Ransomware Group

• In Other News: China Blames NSA for Hack, AI Jailbreaks, Netography Spin-Off

• California Settles With Google Over Location Privacy Practices for $93 Million

• NCSC: Why Cyber Extortion Attacks No Longer Require Ransomware

• Anticipating 2023: Emerging Cybersecurity Threats and Trends to Monitor

• MGM Resorts Breached by ‘Scattered Spider’ Hacking Group

• WhatsApp Boss Denies Chat App Is Exploring Ads

• Google Agrees $93m Location Tracking Settlement With California

• Cyber Stakes: The MGM Ransomware Roulette

• Cloud to Blame for Almost all Security Vulnerabilities

• How to Mitigate Cybersecurity Risks From Misguided Trust

• United Cloud, the Fastest Growing Innovation Centre in SEE Europe, Selects Verimatrix XTD for Mobile App Protection

• What Effect Does Firm Size Have on Ransomware Threats?

• Tech Enthusiasts Discover New Frontiers in the Age of EVs

• VDI vs VPN vs RDP: Choosing a Secure Remote Access Solution

• Caesars Entertainment paid a ransom to avoid stolen data leaks

• Concordium Web3 ID prioritizes user privacy for both individuals and businesses

• 8 XSS Vulnerabilities in Azure HDInsight Allow Attackers to Deliver Malicious Payloads

• China’s Malicious Cyber Activity Informing War Preparations, Pentagon Says

• MGM and Caesars Casinos Suffer Massive Cyberattack

• Europol Warns of a Potent Criminal Economy Fostered by New Technological Tools

• MGM Hackers Broadening Targets, Monetization Strategies

• Deduce Raises $9 Million to Fight AI-Generated Identity Fraud

• Cyber Security Today, Sept. 13, 2023 – Warning: This group specializes in SMS texting scams

• What Is Privacy by Design?

• Google Agrees to $93 Million Settlement in California’s Location-Privacy Lawsuit

• The Interdependence between Automated Threat Intelligence Collection and Humans

• On Technologies for Automatic Facial Recognition

• Windows11 Themes vulnerability Let Attackers Execute Arbitrary Code

• DDoS 2.0: IoT Sparks New DDoS Alert

• NodeStealer Malware Now Targets Facebook Business Accounts on Multiple Browsers

• Google Feature Blamed for Retool Breach That Led to Cryptocurrency Firm Hacks

• Armis forges ahead into Cyber Exposure Management as it readies for IPO

• 5 Examples of DNS IoCs That Are Red Flags for Cyberattacks

• ARM Shares Soar 25 Percent After Nasdaq Listing

• Cybercriminals Combine Phishing and EV Certificates to Deliver Ransomware Payloads

• Greater Manchester Police ransomware attack another classic demo of supply chain challenges

• Pirated Software Likely Cause of Airbus Breach

• Iranian Threat Group Hits Thousands With Password Spray Campaign

• X launches account verification based on government ID

• Memory Corruption Flaw in ncurses API Library Exposes Linux and macOS Systems

• Caesars Entertainment Reveals Major Ransomware Breach

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Silicon UK Pulse: Your Tech News Update: Episode 18

• 3AM Ransomware Attack – Stop Services & Delete Shadow Copies Before Encrypting

• Free Download Manager backdoored to serve Linux malware for more than 3 years

• Modernizing fraud prevention with machine learning

• Cyber Attack news headlines trending on Google

• How Zero-Day Attacks Are Escalating the Cyber Threat Landscape

• Enterprises persist with outdated authentication strategies

• New infosec products of the week: September 15, 2023

• Trellix DLP Vulnerability Allows Attackers To Delete Unprivileged Files

• Iranian Nation-State Actors Employ Password Spray Attacks Targeting Multiple Sectors

• Cybersecurity risks dampen corporate enthusiasm for tech investments

• Peach Sandstorm password spray campaigns enable intelligence collection at high-value targets

• The cat and mouse game: Staying ahead of evolving cybersecurity threats

• Securing OTA with Harman International’s Michal Geva

• Generative AI lures DevOps and SecOps into risky territory

• Uncursing the ncurses: Memory corruption vulnerabilities found in library

• Researcher Finds GitHub Admin Credentials of Car Company Thanks to Misconfiguration

• ‘Don’t blame us for MGM Resorts disruption. We only installed ransomware,’ says gang

• US-Canada water org confirms ‘cybersecurity incident’ after ransomware crew threatens leak

• Watch out, this LastPass email with “Important information about your account” is a phish

• Malwarebytes wins every Q2 MRG Effitas award & scores 100% on new phishing test

Generated on 2023-09-16 23:55:23.368325