IT Security News Daily Summary 2023-10-22

• What is the Dark Web, Search Engines, and What Not to Do on the Dark Web

• MI5 chief warns of Chinese cyber espionage reached an unprecedented scale

• Fraudulent KeePass Site Uses Google Ads and Punycode to Transfer Malware

• Here’s Why Businesses are Not Ready for DORA Compliance

• Signal’s Meredith Whittaker Asserts: AI is Inherently a ‘Surveillance Technology’

• Data Center Overheating Emerges as a New Cybersecurity Achilles’ Heel

• DEF CON 31 – Dr. Sebastian Köhler’s, Dr. Richard Baker’s ‘Car Hacking Village – Exploiting Wireless Side Channels In EV Charging’

• Black Basta Ransomware Victim: Simpson Strong-Tie

• Black Basta Ransomware Victim: Panetteria Grandolfo

• Secure Remote Access is Not a One Size Fits All Vision

• The attack on the International Criminal Court was targeted and sophisticated

• Lessons Learned: Cyberattack Shutters Five Illinois Healthcare Facilities

• LockBit 3.0 Ransomware Victim: chs[.]ca

• Security Affairs newsletter Round 442 by Pierluigi Paganini – INTERNATIONAL EDITION

• TinyMCE cross-site scripting | CVE-2023-45818

• ETSI TETRA Standard security bypass | CVE-2022-24404

• D-Link DSL-2750U N300 ADSL2+ and DSL-2730U N150 ADSL2+ routers security bypass | CVE-2023-46033

• TinyMCE cross-site scripting | CVE-2023-45819

• IBM Cognos Dashboards information disclosure | CVE-2023-38275

• Knight Ransomware Victim: Intellipop Fiber Internet

• Knight Ransomware Victim: il Centro

• Week in review: Cybersecurity cheat sheets, widely exploited Cisco zero-day, KeePass-themed malvertising

• 8 Base Ransomware Victim: Brunton Shaw

• 8 Base Ransomware Victim: Edwards Business Systems

• 8 Base Ransomware Victim: APS – Automotive Parts Solutions

• 8 Base Ransomware Victim: JC Roman Construction

• Cyber Security Management System (CSMS) for the Automotive Industry

• Cyber Security Tip of the Week: Malware Detection and Prevention

• American Family Insurance confirms cyberattack is behind IT outages

• International Criminal Court systems breached for cyber espionage

• The Week in Ransomware – October 20th 2023 – Fighting Back

• Ransomware Strikes: How to Prevent and Recover

• Into the Unknown: Understanding Zero-Day Vulnerabilities

• Tunngle – 8,192,928 breached accounts

• Best practices to protect data in remote work environments

• RansomHouse Ransomware Victim: Foursquare Healthcare

• Tunngle – 8,192,928 breached accounts

• IT Security News Daily Summary 2023-10-21

• How Can DevSecOps Improve Agility and Security in Manufacturing Operations?

• Commander – A Command And Control (C2) Server

• SecuSphere – Efficient DevSecOps

• The Evolution of Security: From Signatures to Deep Learning

• WhatsApp’s New Twinning Feature: Manage Two Accounts on a Single Device

• Group Behind Ragnar Locker Ransomware Debunked

• A threat actor is selling access to Facebook and Instagram’s Police Portal

• Will Artificial Intelligence Take Over the World?

• AI Chatbots Have Extensive Knowledge About You, Whether You Like It or Not

• Proxyjacking Threat: Exploited SSH Servers for Sale on the Dark Web

• NIS2: Perform a risk assessment

• Threat actors breached Okta support system and stole customers’ data

• DEF CON 31 – Corynne McSherry’s, India McKinney’s, Daly Barnett’s, Kate Bertash’s ‘Reproductive Justice In The Age of Digital Surveillance’

• HBSQLI: Automated Tester For Header Based Blind SQL Injection

• Ragnar Locker ransomware group taken down

• Spearphishing targets in Latin America – Week in security with Tony Anscombe

• Europol Dismantles Ragnar Locker Ransomware Infrastructure, Nabs Key Developer

• ISO Certification is the Key to Better Cybersecurity for Business

• Vietnamese DarkGate Malware Targets META Accounts in the UK, USA, India

• The 23andMe User Data Leak May Be Far Worse Than Believed

• From Chaos to Control: The Crucial Role of Cyber Incident Response for SMBs

• LockBit 3.0 Ransomware Victim: uaes[.]com

• LockBit 3.0 Ransomware Victim: charleystaxi[.]com

• LockBit 3.0 Ransomware Victim: degrootgroep[.]nl

• The Dangerous Mystery of Hamas’ Missing ‘Suicide Drones’

• US DoJ seized domains used by North Korean IT workers to defraud businesses worldwide

• bbp style pack Plugin for WordPress cross-site scripting | CVE-2023-44984

• Seriously Simple Stats Plugin for WordPress cross-site scripting | CVE-2023-45005

• Social Media Share Buttons and Social Sharing Icons plugin for WordPress cross-site request forgery | CVE-2023-5602

• Woo Custom Emails Plugin for WordPress cross-site scripting | CVE-2023-45004

• Theme Switcha plugin for WordPress cross-site scripting | CVE-2023-5614

• Okta’s Support System Breach Exposes Customer Data to Unidentified Threat Actors

• Build or Buy your own antivirus product

• Daily Vulnerability Trends: Sat Oct 21 2023

• Behind the Breach: Cross-tenant Impersonation in Okta

• Critical RCE flaws found in SolarWinds access audit solution

• Okta says its support system was breached using stolen credentials

• Cisco discloses new IOS XE zero-day exploited to deploy malware implant

• Kwik Trip finally confirms cyberattack was behind ongoing outage

• Fake Corsair job offers on LinkedIn push DarkGate malware

• Cisco Zero-Day Exploited to Implant Malicious Lua Backdoor on Thousands of Devices

• Navigating the Maze: Cybersecurity Compliance and Regulations

• Sphero – 832,255 breached accounts

• How to Stay Anonymous on the Internet in 12 Secure Steps

• 9 Innovative Ways to Boost Security Hygiene for Cyber Awareness Month

Generated on 2023-10-22 23:55:30.467532