IT Security News Daily Summary 2023-09-30

• Electron_Shell – Developing A More Covert Remote Access Trojan (RAT) Tool By Leveraging Electron’s Features For Command Injection And Combining It With Remote Control Methods

• ALPHV/BlackCat ransomware gang hacked the hotel chain Motel One

• A Closer Look at the Snatch Data Ransom Group

• Vietnamese Hackers Continue Widespread Attack On Facebook Users

• Embracing Minimalism: The “Less is More” Approach in UI/UX Design

• FBI warns of dual ransomware attacks

• Darkbeam Data Breach: Billions of Usernames and Credentials Exposed Online

• Russian Zero-Day Vendor Proposes $20 Million for Hacking Android and iPhones

• New BEC 3.0 Attack Exploiting Dropbox for Phishing

• With ChatGPT, Users Can Now Access Updated Information on The Internet

• Progress Software fixed two critical severity flaws in WS_FTP Server

• Here’s Why The New U.S. National Cybersecurity Policy Need Some Minor Tweaks

• Chinese Hackers Are Hiding in Routers in the US and Japan

• Simplifying your Approach to the Zero Trust Journey

• FBI Warns of Rising Trend of Dual Ransomware Attacks Targeting U.S. Companies

• Apple, Microsoft, and Google Just Fixed Multiple Zero-Day Flaws

• Iranian APT Group OilRig Using New Menorah Malware for Covert Operations

• Child abuse site taken down, organized child exploitation crime suspected – exclusive

• LG Mobile devices information disclosure | CVE-2023-44126

• DEXMA DEXGate information disclosure | CVE-2023-41088

• LG Mobile devices security bypass | CVE-2023-44125

• LG Mobile devices information disclosure | CVE-2023-44124

• LG Mobile devices information disclosure | CVE-2023-44129

• Defending Democracy and Standing Up for Civil Society

• How Lazarus impersonated Meta to attack a target in Spain – Week in security with Tony Anscombe

• When it Comes to Compliance Requirements – Topology Matters!

• Build or Buy your own antivirus product

• CACTUS Ransomware Victim: www[.]utcoverseas[.]com

• AI responses may link to malware

• Cybercriminals Using New ASMCrypt Malware Loader to Fly Under the Radar

• New Critical Security Flaws Expose Exim Mail Servers to Remote Attacks

• Discord is investigating cause of ‘You have been blocked’ errors

• The Week in Ransomware – September 29th 2023 – Dark Angels

• Millions of Exim mail servers exposed to zero-day RCE attacks

• Exploit released for Microsoft SharePoint Server auth bypass flaw

• Lazarus hackers breach aerospace firm with new LightlessCan malware

• 2023-09-28 – IcedID (Bokbot) infection with Keyhole VNC and Cobalt Strike

• Update Chrome now! Google patches another actively exploited vulnerability

• Dependabot impersonators cause trouble on GitHub

• A still unpatched zero-day RCE impacts more than 3.5M Exim servers

• Bankrupt IronNet Shuts Down Operations

• Securing AI: What You Should Know

• US-CERT Vulnerability Summary for the Week of September 18, 2023

• IT Security News Daily Summary 2023-09-29

• How to land a corporate board seat as a CISO

• Digital Accessibility and Cybersecurity Must Go Hand in Hand

• Mozilla Rushes to Fix Critical Vulnerability in Firefox and Thunderbird

• Skyhook – A Round-Trip Obfuscated HTTP File Transfer Setup Built To Bypass IDS Detections

• Microsoft Bing Chat pushes malware via bad ads

• Lazarus APT Exploiting LinkedIn to Target Spanish Aerospace Firm

• How Can Your Security Team Help Developers Shift Left?

• PhD student guilty of 3D-printing ‘kamikaze’ drone for Islamic State terrorists

• Video Encoding Library Leaves Chrome, Firefox and More Open to Zero-Day Attack

• Cyber Security Today, Week in Review for the week ending Friday, Sept. 29, 2023

• Russian Company Offers $20m For Non-NATO Mobile Exploits

• DHS Calls Into Question Physical Security in Johnson Controls Cyberattack

• Spyware Vendor Targets Egyptian Orgs With Rare iOS Exploit Chain

• Is that how it works? Hacking and scamming in popular TV shows

• 5 common browser attacks and how to prevent them

• CIA’s AI Chatbot: A New Tool for Intelligence Gathering

• AWS Using MadPot Decoy System to Disrupt APTs, Botnets

• CISA and UK NCSC Hold Inaugural Meeting of Strategic Dialogue on Cybersecurity of Civil Society Under Threat of Transnational Repression

• The Art of Creating Digital Experiences: Exploring Website Development and Technology

• From Text to Multisensory AI: ChatGPT’s Latest Evolution

• ChatGPT Enterprise can Boost AI Adoption by Addressing Business Concerns

• Move Over, MOVEit: Critical Progress Bug Infests WS_FTP Software

• Cybersecurity Gaps Plague US State Department, GAO Report Warns

• Mozilla Releases Security Updates for Multiple Products

• Cybercriminals Using New ASMCrypt Malware Loader Flying Under the Radar

• Reddit to Pay Users for Popular Posts

• Mozilla Releases Security Updates for Multiple Products

• Reddit to Pay Users for Popular Posts

• The Role of DevOps in Streamlining Cloud Migration Processes

• Transforming Vulnerability Management: CISA Adds OASIS CSAF 2.0 Standard to ICS Advisories

• The best VPN services for iPhone and iPad in 2023: Tested and reviewed

• Kickstart your journey to IPv6 with Segment Routing over IPv6 (SRv6)

• 2023: The Big Shift to Managed Services

• Unifying Security: Elevate Your Zero Trust Strategy with Cisco’s Duo and Cisco Secure Access

• Distributed ZTNA enables simple and scalable secure remote access to OT assets

• Debbie goes from being a full-time mother to a dynamo in networking

• Selecting Cybersecurity Solutions for Hybrid and Hyperscale Data Centers

• Threat Actors Exploit the Tensions Between Azerbaijan and Armenia

• Researchers Extract Sounds From Still Images on Smartphone Cameras

• In Other News: RSA Encryption Attack, Meta AI Privacy, ShinyHunters Hacker Guilty Plea

• Generative AI Startup Nexusflow Raises $10.6 Million

• Russian Company Offers $20M For Non-NATO Mobile Exploits

• Progress Software Releases Urgent Patches to Fix WS_FTP Server Vulnerabilities

• Vulnerability Summary for the Week of September 18, 2023

• After Ransomware Disruption, Hospital Turns to Check Point Infinity Global Services to Recover and Build Cyber Resilience

• Microsoft’s Bing AI Faces Malware Threat From Deceptive Ads

• Malicious ads creep into Bing Chat responses

• Modern GPUs Susceptible to Latest GPU.zip Side-Channel Assault

• High Security Alert Issued for Apple Devices by India’s CERT-In

• VMware customers anxious about ransomware threats

• Chinese Hackers Stole 60,000 US State Department Emails from Microsoft

• Quantum Nominated to Compete in Fifth ‘ASTORS’ Awards Program

• Phishing, Smishing Surge Targets US Postal Service

• Overcoming Challenges in Cyber Defense Business Naming in The Age of AI

• National Security Agency is Starting an Artificial Intelligence Security Center

• European Regulators Want To Extend Ban On Facebook Data Tracking

• Russian State Hackers Attempted To Block Ukrainians From Opening US Bank Accounts

• A New Chrome 0-Day Is Sending The Internet Into A New Chapter Of Groundhog Day

• Chinese Snoops Stole 60,000 State Department Emails

• The NSA Is Starting An Artificial Intelligence Security Center

• Johnson Controls Hit By Ransomware

• Meta Admits AI Assistant Trained On User Posts

• ZeroFont Phishing: Hackers Manipulating Font Size to Bypass Office 365 Security

• September 2023 Web Server Survey

• ZenRAT Malware Targets Windows Users Via Fake Bitwarden Password Manager Installation Package

• How to use Wireshark to sniff and scan network traffic

• How Paidy is securing the future of fintech through a strategic alliance with OffSec

• ZeroFont Phishing: Hackers Manipulating Font Size to Bypass Office 365 Security

• September 2023 Web Server Survey

• ZenRAT Malware Targets Windows Users Via Fake Bitwarden Password Manager Installation Package

• How to use Wireshark to sniff and scan network traffic

• How Paidy is securing the future of fintech through a strategic alliance with OffSec

• Attacks on Azerbaijan Businesses Drop Malware via Fake Image Files

• People Still Matter in Cybersecurity Management

• Moody’s Executive & Security Ratings Snapshot Request

• Free Attack Surface Report – Free Demo

• Bitsight Security Ratings

• Executive & Security Ratings Snapshot Request – SEC

• Executive & Security Ratings Snapshot Request – SEC PPC

• Use-After-Free in Voice Control: CVE-2021-30902 Write-up

• How iOS Malware Can Spy on Users Silently

• Persistence without “Persistence”: Meet The Ultimate Persistence Bug – “NoReboot”

• ZecOps Announces Support for Forensics Images Acquired by GrayShift

• Fake Droids: Your New Android Device is Actually an Old Android 6

• Vulnerability Summary for the Week of August 14, 2023

• Vulnerability Summary for the Week of August 21, 2023

• Vulnerability Summary for the Week of August 28, 2023

• Vulnerability Summary for the Week of September 4, 2023

• Vulnerability Summary for the Week of September 11, 2023

• Cyber Resilient 911 Symposium

• Region 8 Invites You to Secure Our World

• Hackers Set Sights on Apache NiFi Flaw That Exposes Many Organizations to Attacks

• CISA Warns of Old JBoss RichFaces Vulnerability Being Exploited in Attacks

• Bitdefender Threat Intelligence enables organizations to improve their security posture

• Dialpad PII Redaction enhances privacy protection

• Norway wants Facebook behavioral advertising banned across Europe

• Jim Cramer’s top 10 things to watch in the stock market Friday

• Admins urged to quickly patch holes in WS_FTP file transfer server

• Amazon Wins Interim Stay On Public Ads Archive

• QR Code 101: What the Threats Look Like

• Lazarus Group Impersonates Recruiter from Meta to Target Spanish Aerospace Firm

• Modern Data Backup Strategies for Safeguarding Your Information

• Cloud Migration: How To Overcome Fears and Capitalize on Opportunities

• Akira Ransomware Victim: Vertical Development

• Cyber Security Today, Sept. 29, 2023 – Protect your routers from this attacker, new open-source malware packages found, and more

• Post-Quantum Cryptography: Finally Real in Consumer Apps?

• Chinese threat actors stole around 60,000 emails from US State Department in Microsoft breach

• DevOps and Platform Engineering

• NIST Publishes Final Version of 800-82r3 OT Security Guide

• A Key US Government Surveillance Tool Should Face New Limits, a Divided Privacy Oversight Board Says

• Cloudflare Users Exposed to Attacks Launched From Within Cloudflare: Researchers

• Nexusflow raises $10.6 million to improve generative AI in cybersecurity

• Conceal partners with CyberForce Security to elevate MSSP services with advanced browser security

• Blackpoint Cyber unveils Cloud Response for Google Workspace

• 9 Best Carbon Black Alternatives & Competitors in 2023

• LockBit 3.0 Ransomware Victim: fdf[.]org[.]uk

• LockBit 3.0 Ransomware Victim: ezpaybuildings[.]net

• LockBit 3.0 Ransomware Victim: rexgroup[.]co[.]uk

• Netflix Mails Its Final DVD As It Ends Postal Service

• Censys Reveals Open Directories Share More Than 2,000 TB of Unprotected Data

• ZeroFont trick dupes users into thinking message has been scanned for threats

• Best SIEM Tools and Software for 2023

• Protect Your Passwords for Life for Just $30

• Johnson Controls Hit by Ransomware

• FBI Warns Organizations of Dual Ransomware, Wiper Attacks

• Microsoft’s AI-Powered Bing Chat Ads May Lead Users to Malware-Distributing Sites

• Ann Minooka joins Synopsys as CMO

• Privacy Regulator Orders End to Spreadsheet FOI Responses

• 12 Benefits of Zero Trust for Mid-Sized Businesses

• AjaxNewsTicker cross-site scripting | CVE-2023-41453

• Zephyr buffer overflow | CVE-2023-4260

• AjaxNewsTicker cross-site scripting | CVE-2023-41448

• AjaxNewsTicker code execution | CVE-2023-41449

• Zephyr buffer overflow | CVE-2023-4262

• APT34 Deploys Phishing Attack With New Malware

• Diverse threat intelligence key to cyberdefense against nation-state attacks

• Microsoft Breach Exposed 60,000 State Department Emails

• 5 Best Features Protecting Your Education Software from Cyber Threats

• When Worlds Collide: A Phygital Future?

• MOVEit Developer Patches Critical File Transfer Bugs

• Misconfigured WBSC server leaks thousands of passports

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Silicon UK Pulse: Your Tech News Update: Episode 20

• 8 Base Ransomware Victim: C[.]F[.] Service and Supply

• 8 Base Ransomware Victim: Kona Equity

• Progress Software Releases Urgent Hotfixes for Multiple Security Flaws in WS_FTP Server

• A Roadmap to Launch Your Career in Network Security

• VMware users anxious about costs and ransomware threats

• New infosec products of the week: September 29, 2023

• How should organizations navigate the risks and opportunities of AI?

• Canada govt websites disrupted by Cyber Attacks from India

• CISA adds JBoss RichFaces Framework flaw to its Known Exploited Vulnerabilities catalog

• Financial crime compliance costs exceed $206 billion

• Cybersecurity budgets show moderate growth

• Why California’s Delete Act matters for the whole country

• US State Department Says 60,000 Emails Taken in Alleged Chinese Hack

• Cisco Warns of Vulnerability in IOS and IOS XE Software After Exploitation Attempts

• Cisco Products Multiple Vulnerabilities

• Champagne squeezed to produce proposed amendments on privacy, AI bills

• The Growing Threat of Cybercrime Law Abuse: LGBTQ+ Rights in MENA and the UN Cybercrime Draft Convention

• Malicious ad served inside Bing’s AI chatbot

• Google’s Bard conversations turn up in search results

Generated on 2023-09-30 23:55:50.444388