IT Security News Daily Summary 2023-09-22

• Dynmx – Signature-based Detection Of Malware Features Based On Windows API Call Sequences

• How to disable removable media access with Group Policy

• 90GB of Data Posted on Hacker Forum Linked to T-Mobile Glitch

• 5 ways to leverage AI and ML for cybersecurity defense

• When To Boost Your Authentication Strategy: Signs for Security Enhancement

• Apple squashes security bugs after iPhone flaws exploited by Predator spyware

• Cyber Security Today, Week in Review for the week ending Friday, Sept. 22, 2023

• Ensure Your Small Business Stays Vigilant in Cybersecurity Efforts

• Apple issues emergency patches for 3 zero-day bugs

• 6 Best Vulnerability Management Tools for 2023 Compared

• Satellite Images Show the Devastating Cost of Sudan’s Aerial War

• CISA adds Trend Micro Apex One and Worry-Free Business Security flaw to its Known Exploited Vulnerabilities catalog

• LastPass to enforce minimum Master Password length of 12 characters

• Apple Releases Security Updates for Multiple Products

• Yes, you have to update your Apple devices again, because spyware is bad

• HackerOne Bug Bounty Disclosure: b-email-verification-bypass-for-manual-connection-setup-service-credentials-b-yozzo

• Accelerated Encryption with 4th Gen Intel® Xeon® Scalable Processors

• US Govt IT Help Desk Techie Leaked Top Secrets To Foreign Nation

• Incomplete Disclosures By Apple And Google Create Huge Blindspot For 0-Day Hunters

• Apple Patches 3 Zero Days Likely Exploited By Spyware Vendor To Hack iPhones

• TransUnion Thinks Dump Of Stolen Customer Data Came From Someone Else

• New Sandman APT Group Hitting Telcos With Rare LuaJIT Malware

• Despite AI, infosec leaders have ‘job security forever,’ conference told

• Gelsemium APT Group Uses “Rare” Backdoor in Southeast Asian Attack

• CISA and NFL Collaborate to Secure Super Bowl LVIII

• Google’s Parisa Tabriz on how the company stays ahead of hackers

• Signal Upgrades Its E2E Encryption With Quantum Resistance

• What Is Good Database Design?

• Why Cradlepoint’s acquisition of Ericom predicts the future of SASE in the enterprise

• In Other News: New Analysis of Snowden Files, Yubico Goes Public, Election Hacking

• Over 700 Dark Web Ads Offer DDoS Attacks Via IoT in 2023

• 7 Best Sophos Alternatives & Competitors in 2023 [Features, Pricing & Reviews]

• Clorox Cyberattack: Operations of the Cleaning-product Company Disrupted

• Avoid Using Master Password Across Multiple Accounts, Advises Security Experts

• FBI and CISA issue Cyber Alert against Snatch Ransomware

• 7 Best Cloud Security Posture Management (CSPM) Software for 2023

• Elusive Sandman APT Targets Telecom Giants With LuaJIT Toolkit

• New Variant of Banking Trojan BBTok Targets Over 40 Latin American Banks

• Intel Re-Issued Hefty Antitrust Fine by European Commission

• Cybersecurity Alert: HTTPSnoop Malware Infiltrates Telecom Giants

• Amazon Prime To Feature Adverts Next Year

• Cryptojacking Campaign Infected Online Thesaurus With Over 5 Million Visitors

• China’s Offensive Cyber Operations in Africa Support Soft Power Efforts

• How to create a SOAR playbook in Microsoft Sentinel

• How SOAR helps improve MTTD and MTTR metrics

• The Journey to Secure Access Service Edge (SASE)

• UK Home Secretary Clashes with Meta Over Data Privacy

• Guardians of the Cyberverse: Building a Resilient Security Culture

• Apple Fixes 3 New Actively Exploited Zero-Day Vulnerabilities

• Protecting Our Teens: A Guide to Creating Awareness About Online Dangers

• Check Point CloudGuard is now Microsoft Azure Consumption Commitment Eligible

• Apple issues emergency security updates for iPhone, iPad, and Apple Watch

• ProtonVPN Review (2023): Features, Pricing and Alternatives

• #mWISE: Why Zero Days Are Set for Highest Year on Record

• Information of Air Canada employees exposed in recent cyberattack

• VentureBeat’s Special Issues: Exclusive deep dives into Gen AI and other transformative tech

• How to create custom fields in Bitwarden password manager (and why you should)

• Cisco Moves Into SIEM With $28B Deal to Acquire Splunk

• Keysight collaborates with Synopsys to secure IoT devices against attacks

• Norton Secure Browser blocks malicious websites and phishing attempts

• Posh C2 Detected – 94[.]198[.]53[.]89:443

• Posh C2 Detected – 20[.]61[.]115[.]115:443

• Faster Patching Pace Validates CISA’s KEV Catalog Initiative

• BIND Updates Patch Two High-Severity DoS Vulnerabilities

• Air Canada Says Employee Information Accessed in Cyberattack

• Sandman APT targets telcos with LuaDream backdoor

• Cyber Security Today, Sept. 23, 2023 – Nova Scotia details MOVEit victims, a new ransomware strain found and more

• Fortifying Customer Connections: Cybersecurity in Client-Centric Tech

• How to Interpret the 2023 MITRE ATT&CK Evaluation Results

• DAT introduces AI-powered identity-verification solution

• Mitek partners with Equifax to improve consumer identity protection

• LockBit 3.0 Ransomware Victim: milbermakris[.]com

• LockBit 3.0 Ransomware Victim: carthagehospital[.]com

• LockBit 3.0 Ransomware Victim: clearcreek[.]org

• LockBit 3.0 Ransomware Victim: sinloc[.]com

• LockBit 3.0 Ransomware Victim: tuvsud[.]com

• UK CMA Confirms Microsoft Compromise Satisfies Concerns

• Develop High-Demand Cybersecurity Skills for Just $40 From 9/23 to 9/30

• Apple Patches 3 Zero-Days Likely Exploited by Spyware Vendor to Hack iPhones

• SANS Survey Shows Drop in 2023 ICS/OT Security Budgets

• Anviz One combats security concerns for all levels of education

• Apple fixes 3 zero-day vulnerabilities exploited to compromise iPhones

• GitLab fixes critical vulnerability, patch now! (CVE-2023-5009)

• Contrast Security integrates with AWS Security Hub to help organizations mitigate threats

• New Threat Group: Sandman Targets Telecommunication Companies Across the World With Infostealers

• Examining the Activities of the Turla APT Group

• Iranian Nation-State Actor OilRig Targets Israeli Organizations

• US Government IT Staffer Arrested on Espionage Charges

• High-Severity Flaws Uncovered in Atlassian Products and ISC BIND Server

• Experts warn of a 600X increase in P2Pinfect traffic

• Nozomi Networks Guardian and CMC denial of service | CVE-2023-32649

• Fl3xx Dispatch app for iOS and Fl3xx Crew file upload | CVE-2023-42335

• Mastodon spoofing | CVE-2023-42451

• Fl3xx Dispatch app for iOS and Fl3xx Crew privilege escalation | CVE-2023-42334

• Hotel Druid SQL injection | CVE-2023-43374

• Gold Melody Attacking Organizations With Burp Extension, Mimikatz, and Other Tools

• UK Security Agency Publishes New Crypto Designs

• SMBs face growing cybersecurity threats, but basic measures can lower risks

• Apple Patches Three Actively Exploited Zero-Days

• LastPass to enforce minimum Master Password length of 12 characters

• Silicon UK Pulse: Your Tech News Update: Episode 19

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• CACTUS Ransomware Victim: www[.]dmcivil[.]com[.]au

• Cisco acquires Splunk for $28 billion

• Data Security in traditional Data Centre vs Cloud Environments

• Pizza Hut Australia warns 193,000 customers of a data breach

• ‘Sandman’ hackers backdoor telcos with new LuaDream malware

• Building on our history of cryptographic research

• BianLian Ransomware Victim: Smartfren Telecom

• BianLian Ransomware Victim: Road Safety

• Why more security doesn’t mean more effective compliance

• ESA gets the job of building Europe’s secure satcomms network

• ESA gets the job of building Europe’s secure satcomms network

• Code alterations more prevalent in Android apps than iOS

• Ransomware cyber insurance claims up by 27%

• New infosec products of the week: September 22, 2023

• Cloud Security and Cost Flexibility: How They’re Related

• Reasons Why Crypto Casinos Will Taking Off Well

• What Is the RNG Technology Behind Online Casinos?

• SMEs overestimate their cybersecurity preparedness

• IT pros told to accept burnout as normal part of their job

• Apple Rushes to Patch 3 New Zero-Day Flaws: iOS, macOS, Safari, and More Vulnerable

• Understanding Europe’s Cyber Resilience Act and What It Means for You

• WEBINAR: PCI DSS 4.0 Compliance – Tips and Best Practices to Avoid Last-Minute Panic

• Cisco Moves into SIEM with $28B Deal to Acquire Splunk

• Steer clear of cryptocurrency recovery phrase scams

• Involved in a data breach? Here’s what you need to know

• Mysterious ‘Sandman’ APT Targets Telecom Sector With Novel Backdoor

• Apple rolled out emergency updates to address 3 new actively exploited zero-day flaws

• US govt IT help desk techie ‘leaked top secrets’ to foreign nation

• IT Security News Daily Summary 2023-09-21

• LEO’s Needs Better Data Analysis to Stop Tech-Savvy Cybercriminals

• DNS over HTTPS (DoH)

• Salvador Technologies Wins Funding for $2.2M Cybersecurity Project From BIRD Foundation

• What Does Socrates Have to Do With CPM?

• Forrester names Microsoft a Leader in the 2023 Zero Trust Platform Providers Wave™ report

• Cisco to buy Splunk in $28B bid to secure enterprises in AI era

• ‘Gold Melody’ Access Broker Plays on Unpatched Servers’ Strings

• New ‘Sandman’ APT Group Hitting Telcos With Rare LuaJIT Malware

• OPSWAT-Sponsored SANS 2023 ICS/OT Cybersecurity Report Reveals Vital Priorities to Mitigate Ongoing Threats

• Mysterious ‘Sandman’ Threat Actor Targets Telecom Providers Across Three Continents

• T-Mobile Racks Up Third Consumer Data Exposure of 2023

• Forrester names Microsoft a Leader in the 2023 Zero Trust Platform Providers Wave™ report

• Kindo aims to take the security stress out of AI workflows

• TransUnion reckons big dump of stolen customer data came from someone else

• Bringing Authentication Security Out of the Dark Ages

• BBTok Malware Returns, Targeting Over 40 Banks in Brazil and Mexico

• TransUnion reckons big dump of customer data came from someone else

• BSidesAustin 2023: CyberSecurity In The Texas Tech Capital

• IT pros react to blockbuster $28B Cisco-Splunk deal

• MGM Restores Casino Operations 10 Days After Cyberattack

• GitHub launches passkey support into general availability

• Google’s Bard AI Revolutionizes User Experience

• Proton CAPTCHA: New Privacy-First CAPTCHA Defense Against Bots

• This Bill Would Revive The Worst Patents On Software—And Human Genes

• Nine Benefits of Offshore Software Development

• CrowdStrike defines a strong vision for generative AI at Fal.Con 2023

• Ukrainian hackers are behind the Free Download Manager supply chain attack

• “From Chatbots to Cyberattacks: How AI is Transforming Cybercrime”

• WormGPT: AI Tool Developed for Cybercrime Actors

• Ethical Hackers Uncover 38TB Microsoft Data Breach via Azure Storage

• Cybercriminals Exploit the Moroccan Tragedy in New Scam Campaign

• It’s all about the structure! Creating YARA rules by clicking

• Amazon Executives Named By FTC In Prime Subscription Lawsuit

• Snatch ransomware – what you need to know

• Legit Security Raises $40 Million in Series B Financing

• TransUnion Denies Breach After Hacker Publishes Allegedly Stolen Data

• Navigating the Digital Frontier in Cybersecurity Awareness Month 2023

• Every Network Is Now an OT Network. Can Your Security Keep Up?

• governance, risk and compliance (GRC)

• UK-US Confirm Agreement for Personal Data Transfers

• Hikvision Intercoms Allow Snooping on Neighbors

• BBTok Banking Trojan Impersonates 40+ Banks to Hijack Victim Accounts

• Mastering Defense-In-Depth and Data Security in the Cloud Era

• CISA Releases Six Industrial Control Systems Advisories

• OneLayer expands its private cellular network security solutions

• Cisco to acquire Splunk in deal valued at $28 billion

• Dig enhances its platform to protect enterprise data in all storage environments

• BlueVoyant Supply Chain Defense enhancements reduce issues in third-party ecosystems

• Viavi Observer Sentry provides threat visibility into AWS environments

• ApexSMS – 23,246,481 breached accounts

• Scaling Rust Adoption Through Training

• Cisco makes largest ever acquisition, buying cybersecurity company Splunk for $28 billion in cash

• ​​​​​​​Beyond the firewall: Navigating SaaS security challenges

• Intel Innovation 2023: Attestation and Fully Homomorphic Encryption Coming to Intel Cloud Services

• Researchers Raise Red Flag on P2PInfect Malware with 600x Activity Surge

• The best security cameras of 2023: Expert researched and reviewed

• ISC Releases Security Advisories for BIND 9

• Feds Issue Snatch Ransomware Warning

• India’s Biggest Tech Centers Named As Cyber Crime Hotspots

• Cisco Beefs Up Cybersecurity Play With $28 Billion Splunk Deal

• Poland Investigates OpenAI Over Privacy Concerns

• MGM Resorts Operations Resume 10 Days After Cyberattack

• Cyber Attack on International Criminal Court for arresting Russia Vladimir Putin

• Cisco Bolsters Cybersecurity Credentials With Splunk Buy For $28bn

• Poland Probes OpenAI Over Data Protection Worries

• MOVEit Transfer SQL Injection Let the Attacker Gain Unauthorized Access to the Database

• Information Security: AI Security Within the IoT Industry

• Encrypted email provider Proton has built its own CAPTCHA service

• Publishers Spotlight: Nisos: Your Managed Intelligence Partner

• What are passkeys? The life-changing magic of going passwordless

• 5 Tips for Securing Data When Using a Personal Mac for Work

• Top 5 Ways to Secure Work Data on Your Personal Mac

• Facebook Clashes With Government Authorities Over Privacy And Encryption

• Rockwell Automation Select Logix Communication Modules

• Real Time Automation 460 Series

• Delta Electronics DIAScreen

• Drupal Releases Security Advisory to Address Vulnerability in Drupal Core

• Siemens Spectrum Power 7

• Cisco spends $28B on data cruncher Splunk in cybersecurity push

• Navigating the Risks: Is Airport Wi-Fi Safe for Travelers?

• LUCR-3 Attacking Fortune 2000 Companies Using Victims’ Own Tools & Apps

• New Ransomware Victims Surge by 47% with Gangs Targeting Small Businesses

• Cisco to Acquire Splunk for $28 Billion

• Space and defense tech maker Exail Technologies exposes database access

• Survey Reveals: 50% Of Respondents Face Cyberattacks Yearly — Employers Blame Employees

• Almighty Mistakes: The Danger Of Accidental Insider Threats And How To Prevent Them

• Here’s Why Twitter Rival Threads Isn’t Accessible in the E.U.

• Air Canada admits hack of employee data

• Amazon Adds Generative AI To Alexa, Amid Device Updates

• Cisco acquires cybersecurity firm Splunk for a jaw-dropping $28 billion

• Understanding the Differences Between On-Premises and Cloud Cybersecurity

• Cisco to acquire Splunk in $28B mega deal

• Cisco acquires cybersecurity company Splunk in cash deal worth $28 billion

• Top 7 Best Practices DevSecOps Team Must Implement in the CI/CD Process

• Check Point Wins Globee Leadership Award for Company of the Year in Security Products/Services

• Is QakBot Malware Officially Dead?

• Cybersecurity Skills Conference: Strengthening human capital in the EU

• Vitalik Buretin’s X account: hacked

• Critical Infrastructure Organizations Warned of Snatch Ransomware Attacks

• UK’s New Online Safety Law Adds to Crackdown on Big Tech Companies

• Car Cybersecurity Study Shows Drop in Critical Vulnerabilities Over Past Decade

• Cisco acquiring cybersecurity company Splunk in cash deal worth $28 billion

• Siemens ALM 0-Day Vulnerabilities Posed Full Remote Takeover Risk

• System Admin Pleads Guilty for Selling Pirated Business Phone Software Licenses

• New Revelations from the Snowden Documents

• CyberArk and Accenture join forces to improve identity security for organizations

• Juniper Apstra enhancements simplify and standardize data center architectures

• Computer Security Incident Response Team (CSIRT): How to Build One

• Google Maps Sued After Father Drives Off Collapsed Bridge

• Trend Micro Zero-day Vulnerability Let Attackers Run Arbitrary Code

• Omron Patches PLC, Engineering Software Flaws Discovered During ICS Malware Analysis

• The Rise of the Malicious App

• SaaS data security: here’s why enterprises need to focus on this fast-growing challenge now!

• WatchGuard acquires CyGlass for AI-powered network anomaly detection

• Fake WinRAR PoC spread VenomRAT malware

• Fortress Information Security partners with NetRise to secure software supply chains

• Menacing marketeers fined by ICO for 1.9M cold calls

• Cyber Group ‘Gold Melody’ Selling Compromised Access to Ransomware Attackers

• China Accuses U.S. of Decade-Long Cyber Espionage Campaign Against Huawei Servers

• Overview of IoT threats in 2023

• Forrester names Microsoft a Leader in the 2023 Zero Trust Platform Providers Wave™ report

• Benefits of OT Cyber Security Solutions in the Pharmaceutical Industry

• Toshiba Approves $14bn Private Equity Takeover

• Bot Attack Costs Double to $86m Annually

• Critical Trend Micro vulnerability exploited in the wild (CVE-2023-41179)

• Understanding Malicious Package Attacks and Defense Strategies for Robust Cybersecurity

• Retailers Are Rapidly Scaling Surveillance of Australian Consumers — Why This Is a Red Flag

• Scams Now Make Up 75% of Cyber-Threats

• Beware: Fake Exploit for WinRAR Vulnerability on GitHub Infects Users with Venom RAT

• Ukrainian Hacker Suspected to be Behind “Free Download Manager” Malware Attack

• Keeper Security Named a Market Leader in Privileged Access Management (PAM) by Enterprise Management Associates

• SME Cyber Security – Time for a New Approach?

• US Government in Snatch Ransomware Warning

• Do you know what your supply chain is and if it is secure?

• T-Mobile App Glitch Exposes Other User’s Sensitive Data

• India’s biggest tech centers named as cyber crime hotspots

• Data breach reveals distressing info: people who order pineapple on pizza

• Beware: Fake Exploit for WinRAR Vulnerability on GitHub Infects Users with VenomRAT

• Forrester names Microsoft a Leader in the 2023 Zero Trust Platform Providers Wave™ report

• Microsoft 365 Defender demonstrates 100 percent protection coverage in the 2023 MITRE Engenuity ATT&CK® Evaluations: Enterprise

• T Mobile app customers experience data security concerns

• Pro-Russia hacker group NoName launched a DDoS attack on Canadian airports causing severe disruptions

• Eco-hacks: The intersection of sustainability and cyber threats

• Bitwarden Free: WebAuthn new passwordless 2FA method

• Regulatory pressure complicates cybersecurity for industrial equipment manufacturers

• How companies can take control of their cybersecurity

• How to set up and speed up Amazon S3 Replication for cross-region data replication

• Building GenAI competence for business growth

• Hidden dangers loom for subsea cables, the invisible infrastructure of the internet

• MGM Resorts Computers Back Up After 10 Days as Analysts Eye Effects of Casino Cyberattacks

• Forrester names Microsoft a Leader in the 2023 Zero Trust Platform Providers Wave™ report

• DoppelPaymer ransomware group suspects identified

• GitLab Users Advised to Update Against Critical Flaw Immediately

• Will Generative AI Kill the Nigerian Prince Scam?

Generated on 2023-09-22 23:55:50.973344