IT Security News Daily Summary 2023-10-18

• D-Link Confirms Breach, Rebuts Hacker’s Claims About Scope

• Who’s Responsible for the Gaza Hospital Blast? Here’s Why It’s Hard to Know What’s Real

• Privacy Advocates to TSA: Slow Down Plans for mDLs

• Regulations are still necessary to compel adoption of cybersecurity measures

• ExpressVPN Review (2023): Pricing, Features, Pros, & Cons

• FBI: Hackers Are Extorting Plastic Surgery Providers, Patients

• Californian IT company DNA Micro leaks private mobile phone data

• Qubitstrike Malware Hits Jupyter Notebooks for Cryptojacking and Cloud Data

• DEF CON 31: A Hot Time in the Las Vegas Heat and Some Cool Days in AppSec Village

• Critical Citrix Bug Exploited as a Zero-Day, ‘Patching Is Not Enough’

• The Most Popular IT Admin Password Is Totally Depressing

• Spoofed Rocket Alert App Targets Israeli Android Users with Spyware

• CISA, NSA, FBI, MS-ISAC Publish Guide on Preventing Phishing Intrusions

• 12 Best Windows Server Patch Management Software & Tools 2023

• Amazon Drones Begin Medicine Deliveries In Texas

• Phishing: What’s in a Name?

• EPA Turns Off Taps on Water Utility Cyber Regulations

• Elon Musk’s Main Tool for Fighting Disinformation on X Is Making the Problem Worse, Insiders Claim

• CISA, NSA, FBI, and MS-ISAC Release Phishing Prevention Guidance

• HackerOne Bug Bounty Disclosure: b-html-injection-at-company-name-or-product-name-and-can-be-shown-on-contact-sales-form-b-domg

• HackerOne Bug Bounty Disclosure: b-hackers-two-email-disclosed-on-submission-at-hackerone-hactivity-b-rynexx

• Five Eyes Intelligence Heads Warn Of Chinese Cyber Espionage

• Mandiant: Citrix zero-day actively exploited since August

• Adtech Surveillance and Government Surveillance are Often the Same Surveillance

• Multiple SonicWall Vulnerabilities Resulted in a Firewall Crash

• How To Learn Cyber Security Step-by-Step

• Hacker leaks millions more 23andMe user records on cybercrime forum

• Digital Identity Firms Being Bolstered by Investments

• The Iron Swords War – Cyber Perspectives from the First 10 Days of the War in Israel

• What are passkeys? Experience the life-changing magic of going passwordless

• Google Authenticator

• North Korea’s Kimsuky Doubles Down on Remote Desktop Control

• How to Build Elite Technical Teams Internally with Cybersecurity Training

• FBI Boss Slams Unprecedented Chinese Cyber Espionage And IP Theft

• D-Link Clears Up Exaggerations Around Data Breach

• Former Navy IT Manager Sentenced To Prison For Hacking, Selling PII

• Twitter Glitch Allows CIA Informant Channel To Be Hijacked

• FBI: Cybercriminals Targeting Plastic Surgery Offices And Patients

• Employee Clicking on Phishing Link Leads to D-Link Data Breach

• The Complex Landscape of Cybersecurity Threats in South Africa

• Compromised Skype Accounts Facilitate DarkGate Malware Spread

• Cyber attack on payment systems could cost $3.5 trillion loss to the world

• Signal Debunks Rumors About Zero-Day Vulnerability In The App

• Musk’s X Charges New Users $1 Annual Subscription Fee

• Synology NAS System Flaw Let Attackers Remotely Hijack the Admin Account

• Survey Surfaces High Levels of Burnout Among Cybersecurity Professionals

• Google Play Protect Bolsters Security Against Malicious Apps

• What Australian IT Leaders Need to Focus on Ahead of Privacy Act Reforms

• Russia and China-backed hackers are exploiting WinRAR zero-day bug

• Role of Biometric Authentication in Metaverse Technology

• Protecting Goa’s Seniors from Increasing Cyber Threats

• State-sponsored APTs are leveraging WinRAR bug

• AI Adoption Surges But Security Awareness Lags Behind

• China Lashes Out As US Tightens Chip Export Controls

• Plastic surgeries warned by the FBI that they are being targeted by cybercriminals

• D-Link clears up ‘exaggerations’ around data breach

• Lazarus Group Targeting Defense Experts with Fake Interviews via Trojanized VNC Apps

• The US wants governments to commit to not paying ransoms

• Securing Your Conversations: WhatsApp Introduces IP Masking for Calls

• Chen mum on his future with BlackBerry

• The Cost of Magecart: More Than Just a Single Fine

• Juniper Networks enhances Connected Security portfolio with new products and capabilities

• Citrix NetScaler bug exploited in the wild since August (CVE-2023-4966)

• Guardz unveils AI-powered cyber risk assessment prospecting too for MSPs

• Understanding Saudi Arabia’s personal data protection law

• JSpector – Burp Suite Extension To Crawl JavaScript (JS) files

• The Fake Browser Update Scam Gets a Makeover

• Facebook Is Reportedly Suppressing Posts About Middle East Conflict

• Pro-Iranian Hacktivists Set Sights on Israeli Industrial Control Systems

• The Need for a Cybersecurity-Centric Business Culture

• Threat actors have been exploiting CVE-2023-4966 in Citrix NetScaler ADC/Gateway devices since August

• Cybercrime, Cyber Warfare, and Government Attitudes Towards Cybersecurity

• ISACA CEO Hails Europe as a Lighthouse of Capability

• Implementing HPKE in OpenSSL 3.2

• US Cuts China Off From AI Chips, As Export Controls Tightened

• 7 risk mitigation strategies to protect business operations

• Israeli Cybersecurity Startups: Impact of a Growing Conflict

• Digital Identification: The Cornerstone for Confidence Online

• Arcitecta Mediaflux Pocket protects enterprise data

• Critical Citrix NetScaler Flaw Exploited to Target from Government, Tech Firms

• Ensuring Container Security: Safeguarding the Future Of Cloud Computing

• Data Protection: Why SMEs are Targeted by Hackers

• The Evolution of Smart Contract Threats: Staying Ahead with Proactive Auditing

• Silicon Insights: Integrated B2B Marketing Strategies that Succeed: Part 1

• Walmart Jumps to Top Spot as the Most Impersonated Brand for Phishing Scams in Q3 2023

• CIA exposed to potential intelligence interception due to X’s URL bug

• Data Security and Collaboration in the Modern Enterprise

• Keeper Security Protects Against Supply Chain Attacks with New Open Source Project

• DigiCert Survey Reveals Post-Quantum Cybersecurity Challenges

• Cyber Security Today, Oct. 18, 2023 — Plug this Cisco vulnerability now

• Protecting against Ransomware, how Cisco Umbrella can help meet 2022 FFIEC Regulatory Update

• Thales introduces SafeNet IDPrime FIDO Bio Smart Card

• Qubitstrike Targets Jupyter Notebooks with Crypto Mining and Rootkit Campaign

• Unraveling Real-Life Attack Paths – Key Lessons Learned

• Darwinium brings digital security and fraud prevention to the perimeter

• Passwordless authentication startup SecureW2 raises $80M from Insight Partners

• A flaw in Synology DiskStation Manager allows admin account takeover

• Hackers Switching from Weaponized Office Documents to CHM & LNK Files

• Generation Privacy

• Analysis of Intellexa’s Predator Spyware

• LockBit 3.0 Ransomware Victim: kasperekusaoptical[.]com

• Prove Identity raises $40 million to boost its digital identity solutions

• Jupyter Notebooks targeted by cryptojackers

• Streamlining Success: The Crucial Role of Web Services Testing

• Global Economy Could Lose $3.5trn in Systemic Cyber-Attack

• Businesses Turn To Remote Workers To Obtain Skills, Expereo Finds

• Prisma Cloud: Darwin Release Introduces Code-to-Cloud Intelligence

• Data Breach Response: Protecting Your Digital Life After an Incident

• Five Eyes Warn Deep Tech Start-Ups Against Nation-State Threats

• Hackers Deliver Weaponized Notepad++ Via Google Ads

• The Peril of Child Identity Theft and How to Mitigate It

• Jupyter Notebook Ripe for Cloud Credential Theft, Researchers Warn

• Updated MATA attacks industrial companies in Eastern Europe

• 16-31 August 2023 Cyber Attacks Timeline

• 5 Tips for Choosing a Managed Security Services Provider

• Node.js security bypass | CVE-2023-39331

• Grafana privilege escalation | CVE-2023-4822

• HP displays security bypass | CVE-2023-5449

• Extreme Networks Switch Engine (EXOS) directory traversal | CVE-2023-43121

• OpenTelemetry OpenTelemetry-Go Contrib denial of service | CVE-2023-45142

• TetrisPhantom: Cyber Espionage via Secure USBs Targets APAC Governments

• FBI: Hackers Are Extorting Plastic Surgery Patients

• Cyber Security Awareness Month – Answering Google’s Most Commonly Asked Questions

• Knight Ransomware Victim: US Claims Solutions

• D-Link confirms data breach, but downplayed the impact

• DTEX and ServiceNow: A Powerful Integration for Maturing Insider Risk Capability

• Why performing security testing on your products and systems is a good idea

• Why do apps keep getting hacked?

• New Admin Takeover Vulnerability Exposed in Synology’s DiskStation Manager

• Trending cyber attack related news headlines on Google

• How Turning Off Bluetooth Can Safeguard Your Mobile from Cyber Attacks

• Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

• Zygon helps startups avoid data breaches from SaaS providers

• Six Algorithms for Defending Against the Novel “HTTP/2 Rapid Reset” DDoS Attack

• Our new principles to help make cloud backups more resilient

• Amazon adds passkey support as new passwordless login option

• Over 40,000 admin portal accounts use ‘admin’ as a password

• Fighting off cyberattacks? Make sure user credentials aren’t compromised

• SpyNote Android malware spreads via fake volcano eruption alerts

• Over 10,000 Cisco devices hacked in IOS XE zero-day attacks

• 10 essential cybersecurity cheat sheets available for free

• The evolution of deception tactics from traditional to cyber warfare

• D-Link Confirms Data Breach: Employee Falls Victim to Phishing Attack

• SMBs seek help as cyber threats reach an all-time high

• Unlocking Security: Two-Factor Authentication (2FA) Demystified

• Secure source code but vulnerable app: Tackle compiler-born vulnerabilities

• Generative AI merges with intelligent malware, threat level rises

• AndroidLista – 6,640,643 breached accounts

• Phoenix – 74,776 breached accounts

• 2023-10-16 – TA577 IcedID infection

• 2023-10-17 – TA577 Pikabot infection with Cobalt Strike

• Posh C2 Detected – 193[.]36[.]15[.]250:443

• AI: A Collaborative Tool in Writing, Not Just a Replacement

• The top 9 mobile security threats and how you can avoid them

• The benefits of using the new Data Privacy Framework

• Link Farming: SEO Boost or Cybersecurity Threat?

• Fantom Foundation Suffers Wallet Hack Via Google Chrome 0-Day Flaw

• AndroidLista – 6,640,643 breached accounts

• Insiders Say X’s Crowdsourced Anti-Disinformation Tool Is Making the Problem Worse

• Social Media Platforms Must Do Better When Handling Misinformation, Especially During Moments of Conflict

• New Critical Zero-Day Vulnerability Affects Web UI of Cisco IOS XE Software & Allows Attackers to Compromise Routers

• What Is VLAN Tagging? Definition & Best Practices

• Progress Software Under Legal and Financial Scrutiny After MOVEit Incident

• IT Security News Daily Summary 2023-10-17

• Chatbot Offers Roadmap for How to Conduct a Bio Weapons Attack

• Amazon Quietly Wades Into the Passkey Waters

• ILSpy – .NET Decompiler With Support For PDB Generation, ReadyToRun, Metadata (and More) – Cross-Platform!

• Impact of React on Logistics and Supply Chain: Revolutionizing Efficiency and Innovation

• New Netskope Report Exposes Increasing Use of Cloud Apps to Spread Malware

• Survey Reveals Lack of Appreciation for Business Risks

• ‘Etherhiding’ Blockchain Technique Masks Malicious Code in WordPress Sites

• Zero-Day Alert: Ten Thousand Cisco IOS XE Systems Now Compromised

• UAE, US Partner to Bolster Financial Services Cybersecurity

• CSC Report Highlights Cybersecurity Threats .AI Domains Pose

• How to conduct a cyber-resilience assessment

• Cisco IOS XE zero-day facing mass exploitation

• CVE-2023-20198 zero-day widely exploited to install implants on Cisco IOS XE systems

• Randall Munroe’s XKCD ‘Inspiraling Roundabout’

• What are the Legal Implications and Risks of Generative AI?

• Supply Chain Attack Targeting Telegram, AWS and Alibaba Cloud Users

• BSidesLV: The Big Event Before the Biggest Security Event in Las Vegas

• Secure Sockets Layer certificate (SSL certificate)

• Save the Embarrassment: The Value of Multi-Factor Authentication

• Watch Out: Attackers Are Hiding Malware in ‘Browser Updates’

• Tech CEO Sentenced to 5 Years in IP Address Scheme

• Digital Trust & Safety Roundup: Rising ATO, new product updates, and Sift recognition

• CISA and FBI to Network Admins: Patch Atlassian Confluence Now

• Discord: A Playground for Nation-State Hackers Targeting Critical Infrastructure

• FTX Engineer Testifies To Lavish Spending In Bankman-Fried Trial

• Biden Campaign Launches Account On Trump’s Truth Social

• Enhanced Security for Your Secrets With AWS Secrets Manager

• CISA Releases Two Industrial Control Systems Advisories

• Rockwell Automation FactoryTalk Linx

• Schneider Electric EcoStruxure Power Monitoring Expert and Power Operation Products

• AI Chatbots Could Help Plan Bioweapon Attacks, Report Finds

• Healthcare Orgs A Prime Target For NoEscape Ransomware, HHS Warns

• MemComputing ASICs Could Shatter 2048-Bit RSA Encryption

• 0-Day In Cisco IOS XE Software Is Under Attack

• Trench Tales: The College Account Takeover That Never Happened

• Persistent Espionage Campaign Targets APAC Governments

• Ten 10 essential tips to bolster information security

• Is Collaboration The Key To Aussie Tech Challenges?

• Software Supply Chain Security Attacks Up 200%: New Sonatype Research

• Three Easy Ways to Improve DevSecOps with Thales and Red Hat

• Networking and Security Teams Are Converging, Finds Cato Networks Survey

• Women Political Leaders Summit Targeted with Backdoor Malware

• DEF CON 31 – James Kettle’s ‘Smashing The State Machine The True Potential Of Web Race Conditions’

• Deepfakes: A Rising Threat to Cybersecurity and Society

• Risks of Free VPNs: Proceed with Caution

• Fake Browser Updates Used in Malware Distribution

• Apple iPhone Ousted As Top Ranking Mobile In China – Report

• Anonybit raises $3M to further build out biometric security platform Genie

• Multi-factor authentication: How to enable 2FA and boost your security

• A week in security (October 9 – October 15)

• The forgotten malvertising campaign

• BackBox Network Vulnerability Manager identifies vulnerabilities and classifies them by threat level

• Prevalent Alfred improves third-party risk management

• Critical Vulnerabilities Uncovered in Open Source CasaOS Cloud Software

• How To Transfer Google Drive To Another Account With MultCloud

• What is a CMDB?

• CISA and NSA Issues New Identity and Access Management Guidance for Vendors

• Allowlisting vs. blocklisting: Benefits and challenges

• With $33M Series C, Fingerprint looks to expand device intelligence platform

• IT Admins Are Just as Guilty For Weak Password Use

• Zero to Pentester

• Medusa Locker Ransomware Victim: Symposia Organizzazione Congressi S[.]R[.]L

• Medusa Locker Ransomware Victim: EDB

• Medusa Locker Ransomware Victim: ATI Traduction

• Medusa Locker Ransomware Victim: Global Product Sales

• Medusa Locker Ransomware Victim: Believe Productions

• New ESG Research Report Outlines Best Practices for Effective Application Security Programs

• Cisco Zero-Day: As Bad as it Gets — and No Fix 4 Weeks in

• EPA Withdraws Cybersecurity Requirements for Water Systems

• ‘Shocking’ cybersecurity numbers in survey of Canadian small businesses, says Mastercard

• Top 6 Mistakes in Incident Response Tabletop Exercises

• Russia-linked Sandworm APT compromised 11 Ukrainian telecommunications providers

• Black Basta Ransomware Victim: PIEMME S[.]p[.]A[.]

• Black Basta Ransomware Victim: BACCARAT

• Black Basta Ransomware Victim: Edwardian Hotels London

• Black Basta Ransomware Victim: STANTON WILLIAMS

• Black Basta Ransomware Victim: HAFFNER GmbH Co[.]

• Passive Optical Networks: A Game Changer for Now And The Future

• Valve introduces SMS-based confirmation to prevent malicious games on Steam

• Verint PII Redaction Bot protects sensitive data

• Binance Stops Accepting New UK Users, Citing Regulations

• Cyber experts applaud the new White House cybersecurity plan

• Tips for the CISO: 6 Secure Cloud Migration Myths

• Prove Identity nabs $40M at a “unicorn status” valuation to expand in mobile-based authentication tech

• Taking Stock of Identity Solutions in the Age of AI

• ManageEngine strengthens endpoint security with next generation antivirus capability

• Whistic Smart Response eliminates the manual steps of security assessment questionnaires

• OpenSSF Launches Malicious Packages Repository

• The Next Chapter of Secure by Design

• US cybercops urge admins to patch amid ongoing Confluence chaos

• Threat Hunting to Find the Good Stuff

• Will Zero Trust Replace SD-WAN?

• XorDDoS Infects Linux Devices and uses them to Carry out DDoS Attacks

• Amazon quietly rolls out support for passkeys, with a catch

• Cybersecurity Professionals Anticipate Broad AI Integration in Security Operations, Yet Uncertain About Specific Applications

• JumpCloud Adds Passwordless Authentication to Open Directory Platform

• Hackers Alleged to Have Breached Millions of DNA User Profiles, Offering Data for Sale on the Internet

• Privacy Risk Alert: Google Pixel 8’s Face Unlock is Susceptible to Tricks

• NetWitness delivers visibility into a vast array of network assets with the 12.3 update

• Researchers Uncovered the Hack of a Private Power Station in Israel

• Webinar: Locking Down Financial and Accounting Data — Best Data Security Strategies

• Rising AI-Fueled Phishing Drives Demand for Password Alternatives

• Security Vulnerability of Switzerland’s E-Voting System

• Video Playlist For YouTube Plugin for WordPress cross-site request forgery | CVE-2023-45653

• GPAC denial of service | CVE-2023-5586

• GPAC denial of service | CVE-2023-5595

• LockBit 3.0 Ransomware Victim: cpstate[.]org

• LockBit 3.0 Ransomware Victim: sdproducts[.]co[.]uk

• Cybeats collaborates with CodeSecure to prevent software supply chain attacks

• LinkedIn To Cut More Jobs, In Second Round Of Layoffs

• 5 Ways to Ensure Your Enterprise Data Security Strategy is fit for Purpose

• Top 10 Compliance Tips for Startups

• Experts Warn of Severe Flaws Affecting Milesight Routers and Titan SFTP Servers

• Exploring the Realm of Malicious Generative AI: A New Digital Security Challenge

• Cisco Warns of Critical Vulnerability in IOS XE Software

• They Supported Air Strike Victims. Then They Were Doxed and Arrested

• Researchers warn of increased malware delivery via fake browser updates

• Meta Lawsuit Settlement Talks Collapse In Kenya

• Ransomware realities in 2023: one employee mistake can cost a company millions

• APT trends report Q3 2023

• Threat Actors Abuse Discord to Blend Within Organizations’ Network Traffic

• Netis N3Mv2 denial of service | CVE-2023-45463

• Microsoft Edge (Chromium-based) spoofing | CVE-2023-36559

• IRivYou Plugin for WordPress cross-site request forgery | CVE-2023-45267

• HP ThinUpdate information disclosure | CVE-2023-4499

• ZZZCMS cross-site scripting | CVE-2023-5582

• A Third of Organizations Not Ready to Comply with NIS2

• The path from VT Intelligence queries to VT Livehunt rules: A CTI analyst approach

• Digital Personal Data Protection Act (DPDP ACT) 2023, India’s Privacy Law

• HTTP/2 Rapid Reset Attack Vulnerability

• What To Expect When Working With an Online Marketing Service

• British boffins say aircraft could fly on trash, cutting pollution debt by 80%

• Need to improve the detection capabilities in your security products?

• CACTUS Ransomware Victim: www[.]ovt[.]com

• CACTUS Ransomware Victim: www[.]scsivrea[.]it

• Malware-laced ‘RedAlert – Rocket Alerts’ app targets Israeli users

• CERT-UA Reports: 11 Ukrainian Telecom Providers Hit by Cyberattacks

• All Gmail Personal Accounts to get passkey login security as default

• How to go from collecting risk data to actually reducing risk?

• NSFOCUS Launches CTEM Offerings to Mitigate Threat Exposure

• Warning: Unpatched Cisco Zero-Day Vulnerability Actively Targeted in the Wild

• Fake ‘RedAlert’ rocket alert app for Israel installs Android spyware

• Signal says there is no evidence rumored zero-day bug is real

• Women Political Leaders Summit targeted in RomCom malware phishing

• Steam enforces SMS verification to curb malware-ridden updates

• CISA, FBI urge admins to patch Atlassian Confluence immediately

• The collaborative power of CISOs, CTOs and CIOs for a secure future

• Cyberattacks on healthcare organizations affect patient care

• One in five CISOs miss out on pay raise

• Will you meet the directive?

• Fortifying Your Digital Fortress: Data Breach Prevention and Response

• Phoenix – 74,776 breached accounts

• Cisco IOS XE Escalation of Privilege Vulnerability

• Anticipating the benefits of a passwordless tomorrow

• ELITEWOLF: NSA’s repository of signatures and analytics to secure OT

• Essential cyber hygiene: Making cyber defense cost effective

• 5 Ways Hospitals Can Help Improve Their IoT Security

• Posh C2 Detected – 88[.]210[.]9[.]139:443

• CISA, U.S. and International Partners Announce Updated Secure by Design Principles Joint Guide

• The TLS Extended Master Secret and FIPS in Red Hat Enterprise Linux

• Vulnerability Exploitability eXchange (VEX) beta files now available

• Breaking the Chain of Data Access: The Importance of Separating Human and Application Users

• Security Must Empower AI Developers Now

Generated on 2023-10-18 23:55:59.965436