IT Security News Daily Summary 2023-11-03

• Critical Atlassian Bug Exploit Now Available; Immediate Patching Needed

• DEF CON 31 Packet Hacking Village – Mike Raggo’s, Chet Hosmer’s ‘OSINT for Physical Security Intelligence’

• Threat Roundup for October 27 to November 3

• Whitelisting vs Blacklisting: How Are They Different?

• Ace Hardware Still Reeling From Weeklong Cyberattack

• Okta customer support system breach impacted 134 customers

• 81K people’s sensitive info feared stolen from Hilb after email inboxes ransacked

• Lazarus Group uses KandyKorn macOS malware for crypto theft

• The 12 best gifts for hackers in 2023

• Okta Customer Support Breach Exposed Data on 134 Companies

• Ex-GCHQ software dev jailed for stabbing NSA staffer

• EleKtra-Leak Campaign Uses AWS Cloud Keys Found on Public GitHub Repositories to Run Cryptomining Operation

• Cyber Security Today, Week in Review for the week ending Friday, Nov. 3, 2023

• 2023-11-02 – TA577 Pikabot activity

• What Is a VPN? Definition, How It Works, and More

• Tech Leader Says Facebook Lawsuits Will Rein It In Like Big Tobacco

• Somebody Just Killed the Mozi Botnet

• ‘KandyKorn’ macOS Malware Lures Crypto Engineers

• Thoughts on AI and Cybersecurity

• Empower Incident Response with Real-Time, Just-in-Time Alerts and Access

• Prolific Mozi Botnet Deliberately Shut Down with Kill Switch

• A cautionary tale: The tragic case of two Danish hosting firms who lost all their clients’ data

• QR Codes are a Security Blindspot

• Cisco Releases Security Advisories for Multiple Products

• 6 Steps to Accelerate Cybersecurity Incident Response

• 18 Software Development Trends and Predictions 2024

• Microsoft’s Secure Future Initiative Boosts Cybersecurity Against Advanced Attacks

• The Future of Encryption: Navigating Change with Crypto-Agility

• CISA Awards $3M in Funding for Cyber Education and Training of Next-Gen Cyber Leaders

• Top 5 Kubernetes Vulnerabilities – 2023

• Secrets Management Takes More Than Just Tools

• Apache ActiveMQ vulnerability used in ransomware attacks

• Responsible AI is built on a foundation of privacy

• Realize significant value with a true consumption model, increased performance, and comprehensive services

• Microsoft pins hopes on AI once again – this time to patch up Swiss cheese security

• Ransomware hits Infosys, Ace Hardware and Henry Schein

• Sam Bankman-Fried Found Guilty On All Charges

• Common Vulnerabilities and Exposures (CVE)

• SEC Sets New Disclosure Rules: Read How It Will Revolutionize Organization Cybersecurity

• How voice cloning is shaping the future of cybersecurity

• AI Safety Summit 2023: Musk Tells PM AI Will End Work

• Multiple WhatsApp mods spotted containing the CanesSpy Spyware

• SASE Success: Avoid Confusion and Embrace a Single-Vendor Solution

• VICTORY: Google WEI ‘Stealth DRM’ Plan is Dead (or is it?)

• 9 secure email gateway options for 2024

• Microsoft to Ramp AI and Automation in Security Overhaul

• PUMA Network: Unmasking a Cybercrime Empire

• Island names Matt Fairbanks as CMO and Ellen Roeckl as CCO

• Spyware Designed for Telegram Mods Also Targets WhatsApp Add-Ons

• PSA: Your chat and call apps may leak your IP address

• Ransomware Readiness Assessments: One Size Doesn’t Fit All

• Appdome partners with JetBrains to automate delivery of secure mobile apps

• 48 Malicious npm Packages Found Deploying Reverse Shells on Developer Systems

• CanesSpy Spyware Discovered in Modified WhatsApp Versions

• Predictive AI in Cybersecurity: Outcomes Demonstrate All AI is Not Created Equally

• NodeStealer Malware Hijacking Facebook Business Accounts for Malicious Ads

• Kinsing Actors Exploiting Recent Linux Flaw to Breach Cloud Environments

• Healthcare Data Breaches Impact 88 Million Americans

• Getting to Know Zehra Hussain

• Considerations for Managing Digital Sovereignty: The Executive Perspective

• The President’s EO on AI – What it Does and Why it Won’t Work

• Hacker Threat: Israeli Police Advise Citizens not to Answer Unknown Calls

• SEC’s Legal Action Against SolarWinds and CISO Creates Uncertainty in Cybersecurity

• The FTC’s new Amendment Requires Financial Institutions to Report Security Breaches Within 30 Days

• Identiv Enterphone Mobile protects users against security breaches

• Oracle Enables MFA by Default on Oracle Cloud

• KandyKorn macOS malware lobbed at blockchain engineers

• Apple Disappoints As FY23 Results Decline

• Intuition and Curiosity Mix Well with Technology

• Russian FSB arrested Russian hackers who supported Ukrainian cyber operations

• What is an API Gateway? – Definition, Benefits and Limitations

• Machine Identity 101

• CISA Seeks Public Input for Supply Chain Security Improvements

• Why Online Privacy Protection is a Necessary Measure for Executives

• PagerDuty acquires Jeli to improve enterprise resilience

• Cyber Security Today, Nov. 3, 2023 – Hackers are after vulnerable Apache and Citrix products

• Microsoft launches new initiative to augment security

• UK AI Safety Institute: A Blueprint for the Future of AI?

• Hackers Hijacking Facebook Accounts with Malware via Facebook Ads

• New Common Vulnerability Scoring System (CVSS) v4.0 Released – What’s New!

• Accenture Acquires Leading Spanish Cybersecurity Firm Innotec Security

• New York Increases Cybersecurity Rules for Financial Companies

• UK data watchdog fines three text spammers for flouting electronic marketing rules

• Microsoft Takes on Cyber-Threats with New Secure Future Initiative

• Atlassian Finds Public Exploit for Critical Bug

• Aerospace Giant Boeing Confirms Cyber Compromise, LockBit Claims Responsibility

• HIPAA Updates and Changes in 2023: Here’s What You Need to Know

• DarkGate, Which Abused Microsoft Teams, Now Leverages MSI Files

• MuddyWater has been spotted targeting two Israeli entities

• Silicon UK Pulse: Your Tech News Update: Episode 25

• CVSS 4.0 standard has been released

• Multiple Cisco Services Engine Flaws Let Attackers Upload Arbitrary Files

• Palo Alto Networks acquires Dig Security n Accenture purchases Innotec Security

• What is data security posture management

• How cybercriminals adapt and thrive amidst changing consumer trends

• New infosec products of the week: November 3, 2023

• Healthcare’s road to redefining cybersecurity with modern solutions

• Financial organizations embrace automation for enhanced security

• AI is transforming financial crime compliance

• Locked and Loaded: Mastering Access Control in Your Business

• FTX crypto-villain Sam Bankman-Fried convicted on all charges

• How Smart SOAR Integrations are Built

• Top takeaways from Money20/20 USA: KYC risk, fintech fraud, and the evolving payments ecosystem

• IT Security News Daily Summary 2023-11-02

• Exploring Software Categories: From Basics to Specialized Applications

• Clop group obtained access to the email addresses of about 632,000 US federal employees

• Okta Data Compromised Through Third-Party Vendor

• Should you allow your browser to remember your passwords?

• YouTube launches “global effort” to block ad blockers

• DEF CON 31 – Christopher Wade’s ‘Physical Attacks Against Smartphones’

• How Do We Truly Make Security ‘Everyone’s Responsibility’?

• Attackers Target Max-Severity Apache ActiveMQ Bug to Drop Ransomware

• Analyst says Bletchley Declaration delivers the right type of signals

• Microsoft launches Secure Future Initiative to bolster security

• What Is Programmatic Advertising And How To Use It

• Introducing Jira Security: Best Practices for Protecting Your Data

• Zscaler finds 117 Microsoft 365 bugs via SketchUp 3D file type

• Russian Reshipping Service ‘SWAT USA Drop’ Exposed

• Tagged vs Untagged VLAN: When You Should Use Each

• Iran’s MuddyWater Group Targets Israelis with Fake Memo Spear-Phishing

• Upgraded Kazuar Backdoor Offers Stealthy Power

• Sam Bankman-Fried Trial Nears End After Closing Remarks

• Could Australia’s Cybersecurity Strategy Benefit From More Data Science Rigour?

• Mortgage and loan giant Mr. Cooper blames cyberattack for ongoing outage

• Infosec pros can secure IT, but have harder time securing job satisfaction

• Choosing the Right PDU for Your Data Center

• You’d be surprised to know what devices are still using Windows CE

• CVSS v4.0 Released with New Supplemental Metrics, and OT/ICS/IoT Support

• Saudi Aramco CEO Warns of New Threat of Generative AI

• Europe Expands Ban On Meta’s “Behavioural Ad” Practices

• Critical Apache ActiveMQ flaw under attack by ‘clumsy’ ransomware crims

• Announcing Microsoft Secure Future Initiative to advance security engineering

• Bridging the IT Skills Gap Through SASE: A Path to Radical Simplification and Transformation

• GM Cruise Halts Driverless Operations

• Uber’s Costly Mistake: AUS$412,500 Fine for Spam Emails in Australia

• Nebulon Medusa2 SPU unifies storage, cyber and networking services

• Spy Module Discovered in WhatsApp Mods

• Israeli Entities Under Attack By MuddyWater’s Advanced Tactics

• CISA Adds One Known Exploited Vulnerability to Catalog

• Cisco Partner Summit 2023: Know Before You Go

• Okta discloses a new data breach after a third-party vendor was hacked

• Navigating the Complex Threat Landscape — Key Takeaways for CISOs

• A10 Expands AI-Driven Security Strategy to Battle DDoS Attacks

• Prez Biden Signs AI Executive Order for Monitoring AI Policies

• Citrix Bleed Bug Delivers Sharp Blow: Vulnerability is Now Under “Mass Exploitation”

• Hackers for Hire: Navigating the Dark Web, Penetration Tests, and More

• OneSpan Trust Vault protects documents against emerging technologies and security threats

• Follow these cybersecurity tips while shopping for this Christmas 2023

• Boeing ‘Cyber Incident’ Comes After Ransomware Gang Threat

• Risk & Repeat: Breaking down SEC charges against SolarWinds

• Okta tells 5,000 of its own staff that their data was accessed in third-party breach

• AI Safety: 28 Nations+EU Agree to Test in Turing’s Huts

• Forty-eight governments pledge not to pay ransomware gangs

• Starting your journey to become quantum-safe

• Thentia introduces AI-powered Data Migration Accelerator for seamless transitions

• Why Storage And Backup Are Cybersecurity’s Weakest Links? – Top 5 Reasons

• Cisco AnyConnect SSL VPN Flaw Let Remote Attacker Launch DoS Attack

• Authentication at the Network Edge

• Microsoft Does Damage Control With Its New ‘Secure Future Initiative’

• Invisible downtime obscures the true measure of application performance

• DEF CON 31 Policy – Panel : A Global Approach to Tackling Software Resilience

• Snappt Identity Verification allows property managers to detect fraudulent applicants

• 9 ways to tell if your phone has been hacked

• AI Safety Summit 2023: UK To Invest £225m For AI Supercomputer

• ‘Scarred Manticore’ Unleashes the Most Advanced Iranian Cyber Espionage Yet

• Mitsubishi Electric MELSEC Series

• Mitsubishi Electric MELSEC iQ-F Series CPU Module

• Red Lion Crimson

• Caesars Takes Action After Cyberattack on Loyalty Program Data

• Five Markers that Your Phone is Being Spied on or Has Been Compromised

• Ontario hospital group confirms attack was ransomware

• Enzoic unveils BIN Monitoring to reduce credit card fraud

• G7 Countries Establish Voluntary AI Code of Conduct

• UK AI Safety Summit: Global Powers Make ‘Landmark’ Pledge to AI Safety

• Suspected exploitation of Apache ActiveMQ flaw CVE-2023-46604 to install HelloKitty ransomware

• SlashNext: ChatGPT Led to a 1,265% Jump in Phishing Attacks

• What You Need to Know About the New Bing GPT Integration

• Claroty and Rockwell Automation expand capabilities with SaaS-powered OT security solution

• Threat Prevention Begins With IT & Security Team Collaboration

• Do government sanctions against ransomware groups work?

• Boeing confirms ‘cyber incident’ after ransomware gang claims data theft

• The Role of AI in Business Email Security

• Attackers exploiting Apache ActiveMQ flaw to deliver ransomware (CVE-2023-46604)

• The People Hacker: AI a Game-Changer in Social Engineering Attacks

• “The Big Bully : Importance of detecting and preventing cyberbullying”

• When generative AI cyberthreats arrive, Wraithwatch will be ready and waiting

• Don’t shy away from talking about mental health

• 1-15 September 2023 Cyber Attacks Timeline

• Atlassian: “Take immediate action” to patch your Confluence Data Center and Server instances

• Tis the Season for Denial of Inventory Attacks

• CISO Global Licenses Cutting Edge Proprietary AI and Neural Net Intellectual Property to New Partner

• New defense tools from Abnormal Security defend against seemingly harmless QR codes

• SAIC evolves its AI and ML ecosystem to improve government mission outcomes

• AI Safety Summit: Biden-Harris Administration Launches US AI Safety Institute

• AI Safety Summit 2023: UK, US, China, EU Sign Declaration Of AI’s Danger

• Bridging the Gap: Better Token Standards for Cross-chain Assets

• Celebrating Latinas in Tech

• The SEC and SolarWinds’ CISO: A Wake-Up Call

• Action1 platform updates automate vulnerability remediation

• AI Safety Summit: Biden-Harris Administration Launch US AI Safety Institute

• Attackers use JavaScript URLs, API forms and more to scam users in popular online game “Roblox”

• Boeing Confirms Cyberattack Amid Lockbit Ransomware Gang Claims

• India Blockchain Week (IBW) Unveils Diverse Speaker Line-up

• Top 3 Cyber Threats That Attack Banks in 2023 – Counter Them With Any.Run Sandbox

• Automating Least-Privilege Access

• The UN Hired an AI Company to Untangle the Israeli-Palestinian Crisis

• Boeing confirmed its services division suffered a cyberattack

• Spyware in India

• F5 BIG-IP vulnerabilities leveraged by attackers: What to do?

• AI Safety Summit: OWASP Urges Governments to Agree on AI Security Standards

• Understanding the Core Principles of Information Security

• Hackers Attacking Blockchain Engineers with Novel macOS Malware

• UK Banks Warn Quantum Will Imperil Entire Payment System

• AI Safety Summit 2023: Elon Musk Says Summit Seeks AI Referee

• China and US part of multilateral pact to collaborate on AI risks

• Xage Security raises $20M more to expand its security platform

• WhatsApp spy mod spreads through Telegram, attacks Arabic-speaking users

• Russian Security Services Arrest Suspected Ukrainian Hackers

• The state of API security in 2023

• Protect Your Data With the MonoDefense Security Suite for $130

• Resecurity: Insecurity of 3rd-parties leads to Aadhaar data leaks in India

• MITRE ATT&CK v14 released

• HelloKitty Ransomware Group Exploiting Apache ActiveMQ Vulnerability

• FIRST Announces CVSS 4.0 – New Vulnerability Scoring System

• Researchers Find 34 Windows Drivers Vulnerable to Full Device Takeover

• Iran’s MuddyWater Targets Israel in New Spear-Phishing Cyber Campaign

• SaaS Security is Now Accessible and Affordable to All

• Forrester: GenAI Will Lead to Breaches and Fines in 2024

• CVSS 4.0 Released – Next Generation Common Vulnerability Scoring System

• What Gen Z really cares about when it comes to privacy

• Uncovering Prolific Puma, Massive Domain Generator & URL Shortener

• Who is behind the Mozi Botnet kill switch?

• Latest Bitwarden update introduces support for saving passkeys

• Who killed Mozi? Finally putting the IoT zombie botnet in its grave

• All for CITY, All for Cisco!

• Atlassian Confluence Improper Authentication Vulnerability (CVC-2023-22518) Notification

• Enhance Your Reporting with Grafana – Security Spotlight

• Log Ingestion 101: Which Logs Should You Be Bringing Into Your SIEM?

• Samsung Galaxy users to get new Auto Blocker Mobile Security

• 6 steps to accelerate cybersecurity incident response

• Cybersecurity workforce shortages: 67% report people deficits

• Unlock GDPR Compliance for Small Business: A Must-Read Guide

• How human behavior research informs security strategies

• Why legacy system patching can’t wait

• Boeing acknowledges cyberattack on parts and distribution biz

• Cybersecurity habits and behaviors executives need to be aware of

• Risk Management: Safeguarding Your Business Future

• FBI boss: Taking away our Section 702 spying powers could be ‘devastating’

• Boeing Confirms Cyberattack, System Compromise

Generated on 2023-11-03 23:55:49.054853