IT Security News Daily Summary 2023-09-23

• HTMLSmuggler – HTML Smuggling Generator And Obfuscator For Your Red Team Operations

• Facebook Now Lets You Create Alt Accounts For Improved Privacy

• India Strengthens Crypto Crime Vigilance with Dark Net Monitor Deployment

• DeFi Concerns Rise as Balancer’s Web Front End Battles Ongoing Attack

• Musk’s Neuralink Seeks People for Human Trials: Brain-Implant Trials may Start Soon

• If you wouldn’t take advice from a parrot, don’t listen to ChatGPT: Putting the tool to the test

• Government of Bermuda blames Russian threat actors for the cyber attack

• TransUnion Refutes Data Breach Reports Amid Hacker’s Claims

• T-Mobile App Glitch Exposes Users to Data Breach

• CISA: CISA Adds One Known Exploited Vulnerability to Catalog

• CISA: ISC Releases Security Advisories for BIND 9

• CISA: FBI and CISA Release Advisory on Snatch Ransomware

• Medusa Locker Ransomware Victim: Franktronics, Inc

• Medusa Locker Ransomware Victim: Philippine Health Insurance

• Three Ways to Protect the Data Powering Summer Vacations

• The Shocking Data on Kia and Hyundai Thefts in the US

• ESET’s cutting-edge threat research at LABScon – Week in security with Tony Anscombe

• Deadglyph: New Advanced Backdoor with Distinctive Malware Tactics

• LockBit 3.0 Ransomware Victim: pelmorex[.]com

• LockBit 3.0 Ransomware Victim: precisionpractice[.]com

• LockBit 3.0 Ransomware Victim: marshallindtech[.]com

• City of Dallas has set a budget of $8.5 million to mitigate the May Royal ransomware attack

• Unveiling Decentralized Websites: Understanding the Inner Workings of the Decentralized Web

• Hestiacp cross-site scripting | CVE-2023-5084

• Charts Plugin for WordPress cross-site scripting | CVE-2023-5062

• Skyworth directory traversal | CVE-2023-40930

• VMware Tanzu Spring for GraphQL information disclosure | CVE-2023-34047

• Widget Responsive for Youtube Plugin for WordPress cross-site scripting | CVE-2023-5063

• New Apple Zero-Days Exploited to Target Egyptian ex-MP with Predator Spyware

• Build or Buy your own antivirus product

• 8 Base Ransomware Victim: FabricATE Engineering

• 8 Base Ransomware Victim: The Envelope Works Ltd

• Apple and Chrome Zero-Days Exploited to Hack Egyptian ex-MP with Predator Spyware

• Karakurt Ransomware Victim: Yakima Valley Radiology

• Karakurt Ransomware Victim: Hospice of Huntington

• Government of Bermuda links cyberattack to Russian hackers

• Crypto firm Nansen asks users to reset passwords after vendor breach

• Recently patched Apple, Chrome zero-days exploited in spyware attacks

• Hotel hackers redirect guests to fake Booking.com to steal cards

• T-Mobile denies new data breach rumors, points to authorized retailer

• Zero-Day iOS Exploit Chain Infects Devices with Predator Spyware

• Cyber Group ‘Gold Melody’ Selling Compromised Access to Ransomware Attackers

• Ukrainian Hacker Suspected to be Behind “Free Download Manager” Malware Attack

• T-Mobile spills billing information to other customers

• Emergency update! Apple patches three zero-days

• LastPass: ‘Horse Gone Barn Bolted’ is Strong Password

• MITRE ATT&CK Evaluations 2023: Palo Alto, Microsoft, CrowdStrike & Cybereason Lead the Way

• Barracuda SecureEdge SASE Review 2023

• Cisco to Acquire Splunk for $28 Billion, Accelerating AI-Enabled Security and Observability

• Recently patched Apple and Chrome zero-days exploited to infect devices in Egypt with Predator spyware

• Latest Acquisition Powers AI-based Network Detection and Response and Open XDR Capabilities for WatchGuard

• Wing Security Launches Compliance-Grade SaaS Security Solution for Just $1.5K

• ClassLink Provides Cybersecurity Training Course to Help Schools Protect Public Directory Data

• Recast Software Acquires Liquit, Consolidating the Endpoint and Application Management Markets

• ASPM Is Good, But It’s Not a Cure-All for App Security

• US-CERT Vulnerability Summary for the Week of September 11, 2023

• Don’t Fall for the Intelligence Community’s Monster of the Week Justifications

• New Microsoft security tools to protect families and businesses

• IT Security News Daily Summary 2023-09-22

• Dynmx – Signature-based Detection Of Malware Features Based On Windows API Call Sequences

• How to disable removable media access with Group Policy

• 90GB of Data Posted on Hacker Forum Linked to T-Mobile Glitch

• 5 ways to leverage AI and ML for cybersecurity defense

• When To Boost Your Authentication Strategy: Signs for Security Enhancement

• Apple squashes security bugs after iPhone flaws exploited by Predator spyware

• Cyber Security Today, Week in Review for the week ending Friday, Sept. 22, 2023

• Ensure Your Small Business Stays Vigilant in Cybersecurity Efforts

• Apple issues emergency patches for 3 zero-day bugs

• 6 Best Vulnerability Management Tools for 2023 Compared

• Satellite Images Show the Devastating Cost of Sudan’s Aerial War

• CISA adds Trend Micro Apex One and Worry-Free Business Security flaw to its Known Exploited Vulnerabilities catalog

• LastPass to enforce minimum Master Password length of 12 characters

• Apple Releases Security Updates for Multiple Products

• Yes, you have to update your Apple devices again, because spyware is bad

• HackerOne Bug Bounty Disclosure: b-email-verification-bypass-for-manual-connection-setup-service-credentials-b-yozzo

• Accelerated Encryption with 4th Gen Intel® Xeon® Scalable Processors

• US Govt IT Help Desk Techie Leaked Top Secrets To Foreign Nation

• Incomplete Disclosures By Apple And Google Create Huge Blindspot For 0-Day Hunters

• Apple Patches 3 Zero Days Likely Exploited By Spyware Vendor To Hack iPhones

• TransUnion Thinks Dump Of Stolen Customer Data Came From Someone Else

• New Sandman APT Group Hitting Telcos With Rare LuaJIT Malware

• Despite AI, infosec leaders have ‘job security forever,’ conference told

• Gelsemium APT Group Uses “Rare” Backdoor in Southeast Asian Attack

• CISA and NFL Collaborate to Secure Super Bowl LVIII

• Google’s Parisa Tabriz on how the company stays ahead of hackers

• Signal Upgrades Its E2E Encryption With Quantum Resistance

• What Is Good Database Design?

• Why Cradlepoint’s acquisition of Ericom predicts the future of SASE in the enterprise

• In Other News: New Analysis of Snowden Files, Yubico Goes Public, Election Hacking

• Over 700 Dark Web Ads Offer DDoS Attacks Via IoT in 2023

• 7 Best Sophos Alternatives & Competitors in 2023 [Features, Pricing & Reviews]

• Clorox Cyberattack: Operations of the Cleaning-product Company Disrupted

• Avoid Using Master Password Across Multiple Accounts, Advises Security Experts

• FBI and CISA issue Cyber Alert against Snatch Ransomware

• 7 Best Cloud Security Posture Management (CSPM) Software for 2023

• Elusive Sandman APT Targets Telecom Giants With LuaJIT Toolkit

• New Variant of Banking Trojan BBTok Targets Over 40 Latin American Banks

• Intel Re-Issued Hefty Antitrust Fine by European Commission

• Cybersecurity Alert: HTTPSnoop Malware Infiltrates Telecom Giants

• Amazon Prime To Feature Adverts Next Year

• Cryptojacking Campaign Infected Online Thesaurus With Over 5 Million Visitors

• China’s Offensive Cyber Operations in Africa Support Soft Power Efforts

• How to create a SOAR playbook in Microsoft Sentinel

• How SOAR helps improve MTTD and MTTR metrics

• The Journey to Secure Access Service Edge (SASE)

• UK Home Secretary Clashes with Meta Over Data Privacy

• Guardians of the Cyberverse: Building a Resilient Security Culture

• Apple Fixes 3 New Actively Exploited Zero-Day Vulnerabilities

• Protecting Our Teens: A Guide to Creating Awareness About Online Dangers

• Check Point CloudGuard is now Microsoft Azure Consumption Commitment Eligible

• Apple issues emergency security updates for iPhone, iPad, and Apple Watch

• ProtonVPN Review (2023): Features, Pricing and Alternatives

• #mWISE: Why Zero Days Are Set for Highest Year on Record

• Information of Air Canada employees exposed in recent cyberattack

• VentureBeat’s Special Issues: Exclusive deep dives into Gen AI and other transformative tech

• How to create custom fields in Bitwarden password manager (and why you should)

• Cisco Moves Into SIEM With $28B Deal to Acquire Splunk

• Keysight collaborates with Synopsys to secure IoT devices against attacks

• Norton Secure Browser blocks malicious websites and phishing attempts

• Posh C2 Detected – 94[.]198[.]53[.]89:443

• Posh C2 Detected – 20[.]61[.]115[.]115:443

• Faster Patching Pace Validates CISA’s KEV Catalog Initiative

• BIND Updates Patch Two High-Severity DoS Vulnerabilities

• Air Canada Says Employee Information Accessed in Cyberattack

• Sandman APT targets telcos with LuaDream backdoor

• Cyber Security Today, Sept. 23, 2023 – Nova Scotia details MOVEit victims, a new ransomware strain found and more

• Fortifying Customer Connections: Cybersecurity in Client-Centric Tech

• How to Interpret the 2023 MITRE ATT&CK Evaluation Results

• DAT introduces AI-powered identity-verification solution

• Mitek partners with Equifax to improve consumer identity protection

• LockBit 3.0 Ransomware Victim: milbermakris[.]com

• LockBit 3.0 Ransomware Victim: carthagehospital[.]com

• LockBit 3.0 Ransomware Victim: clearcreek[.]org

• LockBit 3.0 Ransomware Victim: sinloc[.]com

• LockBit 3.0 Ransomware Victim: tuvsud[.]com

• UK CMA Confirms Microsoft Compromise Satisfies Concerns

• Develop High-Demand Cybersecurity Skills for Just $40 From 9/23 to 9/30

• Apple Patches 3 Zero-Days Likely Exploited by Spyware Vendor to Hack iPhones

• SANS Survey Shows Drop in 2023 ICS/OT Security Budgets

• Anviz One combats security concerns for all levels of education

• Apple fixes 3 zero-day vulnerabilities exploited to compromise iPhones

• GitLab fixes critical vulnerability, patch now! (CVE-2023-5009)

• Contrast Security integrates with AWS Security Hub to help organizations mitigate threats

• New Threat Group: Sandman Targets Telecommunication Companies Across the World With Infostealers

• Examining the Activities of the Turla APT Group

• Iranian Nation-State Actor OilRig Targets Israeli Organizations

• US Government IT Staffer Arrested on Espionage Charges

• High-Severity Flaws Uncovered in Atlassian Products and ISC BIND Server

• Experts warn of a 600X increase in P2Pinfect traffic

• Nozomi Networks Guardian and CMC denial of service | CVE-2023-32649

• Fl3xx Dispatch app for iOS and Fl3xx Crew file upload | CVE-2023-42335

• Mastodon spoofing | CVE-2023-42451

• Fl3xx Dispatch app for iOS and Fl3xx Crew privilege escalation | CVE-2023-42334

• Hotel Druid SQL injection | CVE-2023-43374

• Gold Melody Attacking Organizations With Burp Extension, Mimikatz, and Other Tools

• UK Security Agency Publishes New Crypto Designs

• SMBs face growing cybersecurity threats, but basic measures can lower risks

• Apple Patches Three Actively Exploited Zero-Days

• LastPass to enforce minimum Master Password length of 12 characters

• Silicon UK Pulse: Your Tech News Update: Episode 19

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• CACTUS Ransomware Victim: www[.]dmcivil[.]com[.]au

• Cisco acquires Splunk for $28 billion

• Data Security in traditional Data Centre vs Cloud Environments

• Pizza Hut Australia warns 193,000 customers of a data breach

• ‘Sandman’ hackers backdoor telcos with new LuaDream malware

• Building on our history of cryptographic research

• BianLian Ransomware Victim: Smartfren Telecom

• BianLian Ransomware Victim: Road Safety

• Why more security doesn’t mean more effective compliance

• ESA gets the job of building Europe’s secure satcomms network

• ESA gets the job of building Europe’s secure satcomms network

• Code alterations more prevalent in Android apps than iOS

• Ransomware cyber insurance claims up by 27%

• New infosec products of the week: September 22, 2023

• Cloud Security and Cost Flexibility: How They’re Related

• Reasons Why Crypto Casinos Will Taking Off Well

• What Is the RNG Technology Behind Online Casinos?

• SMEs overestimate their cybersecurity preparedness

• IT pros told to accept burnout as normal part of their job

• Apple Rushes to Patch 3 New Zero-Day Flaws: iOS, macOS, Safari, and More Vulnerable

• Understanding Europe’s Cyber Resilience Act and What It Means for You

• WEBINAR: PCI DSS 4.0 Compliance – Tips and Best Practices to Avoid Last-Minute Panic

• Cisco Moves into SIEM with $28B Deal to Acquire Splunk

• Steer clear of cryptocurrency recovery phrase scams

• Involved in a data breach? Here’s what you need to know

Generated on 2023-09-23 23:55:46.259244