IT Security News Daily Summary 2023-11-08

• Ransomware Mastermind Uncovered After Oversharing on Dark Web

• Unfiltered Takeaways from API World 2023 | Impart Security

• EDR vs MDR vs XDR

• Yes, GitHub’s Copilot Can Leak (Real) Secrets

• FBI: Ransomware actors hacking casinos via third parties

• Sumo Logic urges customers to reset API keys following security breach

• Introducing Advanced Device Control: Shielding businesses from USB threats

• How To Implement OAuth User Authentication in Next.js

• Platforms Must Stop Unjustified Takedowns of Posts By and About Palestinians

• Speaking Freely: David Kaye

• Key Announcements from Cisco Partner Summit 2023

• FBI: Ransomware actors abuse third parties and legitimate system tools for initial access

• Microsoft, Meta detail plans to fight election disinformation in 2024

• Microsoft Azure Exploited to Create Undetectable Cryptominer

• Vanta report: AI-powered trust management will help close security compliance gaps

• Protecto Joins Cadre of Startups in AI Data Protection Space

• What is a risk control matrix?

• Oracle open-sources Jipher for FIPS-compliant SSL

• Atlassian Confluence vulnerability under widespread attack

• MGM and Caesars Attacks Highlight Social Engineering Risks

• The GOP Presidential Debate Is Livestreaming on Rumble, Home to White Nationalist Nick Fuentes

• Introducing Security Advisor Site Scores for OneView: Easy assessment of client security for MSPs

• Cradlepoint’s mantra: Connect and protect

• Implementing Zero Trust: 5 Key Considerations

• threat detection and response (TDR)

• Greater Together: Cisco Partner Summit 2023 Global Award Winners

• Build Your Cybersecurity Career Path with Learn One

• DHS Launches New Critical Infrastructure Security and Resilience Campaign

• GitHub Enhances Security Capabilities With AI

• How to Create a Comprehensive Investigative Research Process

• Commvault Cloud provides users with AI-driven threat prediction

• Tutorial for Building an Ethereum DApp With Integrated Web3 Monitoring

• New SecuriDropper Malware Bypasses Android 13 Restrictions, Disguised as Legitimate Applications

• Is it time to virtualize your factory floor?

• Phosphorus and Check Point integrate to provide xIoT visibility and protection

• Predator AI ChatGPT Integration Poses Risk to Cloud Services

• Microsoft Warns of Election Threats in 2024

• CISA Adds One Known Exploited Vulnerability to Catalog

• Qualys Unveils Risk Management Platform

• Critical Flaw in Atlassian’s Confluence Server Allows Hackers to Run Commands

• Why recovering quickly from a cyber attack should be infosec pros’ prime goal

• Predator AI ChatGPT Integration Poses Risks to Cloud Services

• Bitwarden rolls out passkeys management to all users, including free accounts

• Keeper Security Announces Integration with ServiceNow

• Offense Intended: How Adversarial Emulation Went From State Secret To Board Bullet Point

• IBM: New Gootloader Variant Moves Laterally and Is Harder to Detect

• KandyKorn: Apple MacOS Malware Targets Blockchain Engineers of Crypto Exchange Platform

• Increasing Data Security in the Digital Era

• British Library Hit by Cyber Incident, Disrupting Services

• Palo Alto Networks Strata Cloud Manager proactively prevents network disruptions

• Ten 10 ways Senior Citizens and Disabled can stay cyber safe and secure online

• Atlassian Bug now a Perfect 10: Riot of Ransomware Raids

• Entrust and NEDAP partner for credential and ID program interoperability

• FBI Warns of Emerging Ransomware Initial Access Techniques

• 6 Strategies to Combat Advanced Persistent Threats

• Data security tools make data loss prevention more efficient

• WhatsApp releases new security features to protect users’ IP addresses

• CISOs Beware: SEC’s SolarWinds Action Shows They’re Scapegoating Us

• Evolving the App Defense Alliance

• Sumo Logic Urges Users to Change Credentials Due to Security Breach

• Symmetrium releases IM and SMS data protection solution

• Microsoft Authenticator suppresses suspicious MFA notifications

• Cybellum partners with Hitachi Solutions to provide PLM security solutions in Japan

• Kasten K10 V6.5 improves ransomware and data protection for Kubernetes environments

• WhatsApp Introduces New Privacy Feature to Protect IP Address in Calls

• Researchers Uncover Undetectable Crypto Mining Technique on Azure Automation

• October 2023’s Most Wanted Malware: NJRat Jumps to Second Place while AgentTesla Spreads through new File Sharing Mal-Spam Campaign

• Google-led App Defense Alliance joins Linux Foundation, with Meta and Microsoft joining too

• Five Canadian Hospitals impacted by a ransomware attack on TransForm provider

• How to Safeguard EV Charging Stations From Cyberattacks

• Elastic simplifies data investigations with piped query language, ES|QL

• Lazarus-Linked BlueNoroff APT Targeting macOS with ObjCShellz Malware

• Atlassian cranks up the threat meter to max for Confluence authorization flaw

• Greater Together! Creating more value at Partner Summit 2023

• Online Retailers: Five Threats Targeting Your Business This Holiday Shopping Season

• Palo Alto Networks Adds Cloud Management Service

• Unlocking the Shadows: New Research Reveals AI’s Hidden Role in Unofficial Financial Markets

• Socks5Systemz Proxy Service Impacts 10,000 Systems Globally

• Cyber Security Today, Nov. 8, 2023 – Personal data on US military members is easily bought from data brokers

• Protecto raises $4 million to empower enterprises with trusted AI

• Elevating Cybersecurity Prevention: Check Point Software’s Innovative MSSP Program Redefines Security Collaboration

• Leading a new era with the Cisco Partner Program

• Introducing Cisco Breach Protection, Delivering Complete Detection and Response of MITRE ATT&CK TTP’s

• Internet-of-Things (IoT) Security Best Practices

• ThreatX enhances API and app protection for containerized environments

• Beware, Developers: BlazeStealer Malware Discovered in Python Packages on PyPI

• The Top 6 Key Features of a Modern NDR Platform

• Testing the Limits of Firewall Performance and Flexibility

• Outmatch Adversaries with PAN-OS 11.1 Cosmos & Strata Cloud Manager

• Quantum Security is National Security

• Using ChatGPT to cheat on assignments? New tool detects AI-generated text with amazing accuracy

• Digital security sessions at Microsoft Ignite to prepare you for the era of AI

• Decoupling for Security

• Druva introduces Azure VM backup and recovery capabilities

• SUSE boosts cloud native portfolio to enhance customer productivity

• QNAP warns about critical vulnerabilities in NAS systems

• Monero Project admits thieves stole 6-figure sum from a wallet in mystery breach

• Marina Bay Sands Discloses Data Breach Impacting 665k Customers

• FBI Highlights Emerging Initial Access Methods Used by Ransomware Groups

• Sumo Logic discloses potential breach via compromised AWS credential

• EU Rules for Digital Identities and Trust Services Face Backlash

• BlueNoroff APT Targets macOS with new RustBucket Malware Variant

• The rise of .ai: cyber criminals (and Anguilla) look to profit

• Get 3 Years of Rock-Solid Protection With Surfshark VPN for $67.20 by 11/9

• LastPass and Acronis join forces to strenghten password protection for MSPs

• Guide: How vCISOs, MSPs and MSSPs Can Keep their Customers Safe from Gen AI Risks

• BlueNoroff Deploying New RustBucket Malware Variant to Target macOS- Jamf Threat Labs.

• Key Highlights from the 2023 UK Cyber Crime Landscape

• Some Financial Institutions Must Report Breaches in 30 Days

• This Is the Ops Manual for the Most Tech-Savvy Animal Liberation Group in the US

• Dropper Service Bypassing Android Security Restrictions to Install Malware

• US Urges Critical Infrastructure Firms to Get “Shields Ready”

• Can a Brute Force Attack Be Reversed?

• Three-Quarters of Retail Ransomware Attacks End in Encryption

• Royal Mail jeopardizes users with open redirect flaw

• Preventing data theft with ADX technology

• Firefox and Chrome Updates Patch High-Severity Vulnerabilities

• Avoiding Common Linux Configuration Mistakes that Lead to Security Vulnerabilities

• New TuxCare Partner Program Arms System Integrators with Modernized Linux Security Offerings

• NextGen’s Vulnerability: Protecting Healthcare Data

• Marina Bay Sands breach exposed data of 665,000 customers

• Webinar: Kickstarting Your SaaS Security Strategy & Program

• Threat Actor Farnetwork Linked to Five Ransomware Schemes

• North Korea-linked APT BlueNoroff used new macOS malware ObjCShellz

• Bad eIDAS: Europe ready to intercept, spy on your encrypted HTTPS connections

• Experts Expose Farnetwork’s Ransomware-as-a-Service Business Model

• Fresh Optus Australia server disruption not caused by a Cyber Attack

• The 3 key stages of ransomware attacks and useful indicators of compromise

• eBPF Kubernetes Security Tool Tetragon Improves Performance and Stability

• Iranian APT Hackers Attacking Education & Tech Sectors to Steal Sensitive Data

• Aqua Trivy open-source security scanner now finds Kubernetes security risks

• AI-assisted coding and its impact on developers

• Chinese APT Targeting Cambodian Government

• Companies have good reasons to be concerned about generative AI

• QNAP OS Command Injection Vulnerability Let Attackers Execute Malicious Commands

• LinkedIn Scraped and Faked Data (2023) – 19,788,753 breached accounts

• Uphold Linux systems’ performance and availability in Azure

• News alert: AppMap launches ‘Runtime Code Review’ — GitHub integration innovation

• Intellectual Property Protection: Safeguarding Your Digital Assets

• Software Complexity Bedevils Mainframe Security

• Hacker Leaks 35 Million Scraped LinkedIn User Records

• PayPal’s CISO on how generative AI can improve cybersecurity

• IT Security News Daily Summary 2023-11-07

• Myrror Security Emerges From Stealth With $6M Seed Round to Prevent Attacks on the Software Development Process

• Risk Ledger Secures £6.25M to Prevent Cyberattacks on the Supply Chains of Nation’s Largest Enterprises

• Malwarebytes Launches ThreatDown to Empower Resource Constrained IT Organizations

• Social Media and SMS Toll Fraud

• Microsoft Pushes MFA Adoption Via Conditional Policies

• Marina Bay Sands Becomes Latest Hospitality Cyber Victim

• DON’T PANIC! How to Manage IT Product Risk with Supply Chain Intelligence

• hide.me VPN Review 2023: Features, Pricing, and More

• Facebook Bans Political Campaigns, Other Advertisers From Using AI

• CVSS 4.0 Offers Significantly More Patching Context

• Government Surveillance Reform Act of 2023 Seeks to End Warrantless Police and FBI Spying

• North Korea’s BlueNoroff APT Debuts ‘Dumbed Down’ macOS Malware

• This Month, The EU Parliament Can Take Action To Stop The Attack On Encryption

• Introducing Badger Swarm: New Project Helps Privacy Badger Block Ever More Trackers

• A Journey from Military Defense Systems to PKI Expertise

• Ransomware was behind Toronto Public Library attack

• Speedify Review 2023: Features, Security & Performance

• Marina Bay Sands Luxury Hotel in Singapore Suffers a Data Breach

• MTE – The promising path forward for memory safety

• Hackers Exploit Atlassian Flaw in Cerber Ransomware Attacks

• Frontegg Forward is here, allowing enterprises to securely manage their customers’ digital identities

• Atlassian Bug Escalated to 10, All Unpatched Instances Vulnerable

• Internet Blackouts in Gaza Are a New Weapon in the Israel-Hamas War

• Observation Mission Stresses Key Elements of Ola Bini’s Case for Upholding Digital Rights

• Daniel Stori’s ‘When Artificial Intelligence Meets git’

• Insights from Security Mavericks: Interpublic Group, FICO, and Mercury

• The Role of Enhanced Visibility for Data Privacy and Security

• US Man Sentenced to Over 21 Years for Dark Web Distribution of CSAM

• What is Network Detection and Response (NDR)?

• Microsoft .NET 8 enhances ID management

• Frontegg introduces Forward, allowing enterprises to securely manage their customers’ digital identities

• Article 45 Will Roll Back Web Security by 12 Years

• Win First and Then Go to War: Truly Protecting Your APIs | Impart Security

• Crafting an AI Policy That Safeguards Data Without Stifling Productivity

• 23andMe data theft prompts DNA testing companies to switch on 2FA by default

• How Splunk and Cisco will Keep Customers at the Center

• The Government Surveillance Reform Act Would Rein in Some of the Worst Abuses of Section 702

• Microsoft likens MFA to 1960s seatbelts, buckles admins in yet keeps eject button

• AI Safety Summit at Bletchley Park all about trust: Champagne

• Iran-Linked Agrius APT Group Targets Israeli Education, Tech Sectors

• Bitwarden Revolutionises Online Security with Passkey Management

• ThreatDown powered by Malwarebytes: A 15 Year Journey

• UK may demand tech world tell it about upcoming security features

• Webinar Recap: Hands-on guide to Runtime Security for CI/CD Pipelines with StepSecurity

• 5 ways to improve your GraphQL hacking skills

• Medusa Ransomware Group Takes Ownership for Cyber-attack on Canadian Psychological Association

• Coffee Briefing Nov. 7 – CGI teams up with Google, CyberCatch protects SMBs against ransomware and data theft; All Nova Scotians to have access to free virtual healthcare; and more

• Uptycs provides unified supply chain and runtime security for Kubernetes

• GootBot Implant Heightens Risk of Post-Infection Ransomware

• Data Breach at Singapore’s Marina Bay Sands Affects 665,000 Customers

• OpenAI Prepares GPT Store, Adds ‘Turbo’ GPT-4

• YouTube’s Ad Blocker Detection Believed to Break EU Privacy Law

• UK may demand tech world tell it about upcoming security features so it can ‘disable them’

• Data Brokers Expose Sensitive US Military Member Info to Foreign Threat Actors: Study

• Critical Vulnerabilities Expose Veeam ONE Software to Code Execution

• What Developers Need to Succeed for Effective Application Security

• Torrent Service Data Breach: What You Need to Know

• Notorious Ransomware Gang Claims Responsibility for Cyberattack on Southwestern Ontario Hospitals

• Bitwarden launches passkey management for passwordless authentication across accounts

• Varonis enhances its Microsoft 365 offering to prevent sensitive email exposure

• Cybersecurity and AI Deep in the Heart of Texas Cyber Summit

• NETSCOUT releases Adaptive DDoS Protection for AED

• IRONSCALES expands platform capabilities to improve employee phishing awareness

• The best VPN trials of 2023

• GE MiCOM S1 Agile

• CISA Releases One Industrial Control Systems Advisory

• Kentik Kube collects metadata across Kubernetes pods, clusters, and services

• Predator AI | ChatGPT-Powered Infostealer Takes Aim at Cloud Platforms

• Marina Bay Sands Singapore suffers Information Security Breach

• EU Agrees New Restrictions For Online Political Ads

• Veeam Critical Flaws Let Attackers Execute Remote Code and Steal NTLM Hashes

• Introducing ThreatDown: A new chapter for Malwarebytes

• Free Tool Helps Industrial Organizations Find OPC UA Vulnerabilities

• New MacOS Malware Linked to North Korean Hackers

• 5 Things to Consider Before Downloading an App

• Sumo Logic launches HELM Chart V4 to unify data collection on Kubernetes clusters

• Microsoft introduces new access policies in Entra to boost MFA usage

• Traefik Hub updates modernize API runtime operations

• N. Korea’s BlueNoroff Blamed for Hacking macOS Machines with ObjCShellz Malware

• Baidu ‘Turns To Huawei’ For AI Chips

• NIST’s security transformation: How to keep up

• IT Pros in Australian Crypto Need to Brace for Regulation

• How to Secure the 5 Cloud Environment Types

• Identity Alone Won’t Save Us: The TSA Paradigm and MGM’s Hack

• Fresh find shines new light on North Korea’s latest macOS malware

• Google Introduces Badges to Identify Which VPN App has Passed a Security Audit

• American Airlines Pilot Union Targeted in a Major Ransomware Attack

• Malwarebytes ThreatDown helps organizations to overpower threats

• New BlueNoroff Malware Variant Targets Cryptocurrency Exchanges

• Top 6 Cybersecurity Incident Response Phases – 2024

• Empowering Cyber Security by Enabling 7 Times Faster Log Analysis

• dark web monitoring

• The Rising Role of Artificial Intelligence in The Cybersecurity Market

• A New Ai Arms Race

• Border Crossing: A New Battle Over Governments Extending Information Mandates Beyond National Security to National Interest

• Why Policy-as-Code is the Best Way to Streamline Authorization

• Phishing Scare at Bitfinex: Employee Breach Exposes Users to Cyber Threats

• ExtremeCloud Universal ZTNA strengthens network security

• N. Korean BlueNoroff Blamed for Hacking macOS Machines with ObjCShellz Malware

• Glasgow Caledonian University Selects CyberArk to Reduce Identity Security Risk for Thousands of Staff and Students

• Cloud Security in Action: Meet Check Point CloudGuard

• Introducing Cisco User Protection Suite

• Cisco further delivers on Full-Stack Observability ecosystem vision

• Time to Simplify: A Fresh Look at Infrastructure and Operations for Artificial Intelligence

• Navigating the Sea, Exploiting DigitalOcean APIs

• Imperva Expands Global Network, Adds First PoP in Vietnam

• ThreatDown: A new chapter for Malwarebytes

• Narrowing the Focus of AI in Security

• Myrror Security Emerges From Stealth Mode With $6 Million in Funding

• 37 Vulnerabilities Patched in Android With November 2023 Security Updates

• Configuration of SPF and DKIM for Cakemail

• How to Select the Right Cyber Risk Management Services

• New SEC Disclosure Rules Demand Better CISO Communication

• IBM introduces cloud-native SIEM to empower today’s security teams

• On Election Day, CISA and Partners Coordinate on Security Operations

• Bumble Chief Whitney Wolfe Herd To Step Down

• Roundtable: Bridging the Tech Skills Gap: Do You Need More than a Degree?

• IBM X-Force Discovers Gootloader Malware Variant- GootBot

• Security Vulnerabilities in CasaOS

• Confidence in File Upload Security is Alarmingly Low. Why?

• New GootLoader Malware Variant Evades Detection and Spreads Rapidly

• Malwarebytes makes B2B unit spin-off official, launches ThreatDown

• Veeam fixed multiple flaws in Veeam ONE, including critical issues

• Spaf on the Morris Worm

• Cloud Foundry Foundation updates Korifi to simplify Kubernetes developer experience

• VMware advances IT modernization and security

• Suspicious Microsoft Authenticator requests don’t trigger notifications anymore

• Epic And Google Go To Court Over App Store Fees

• Okta breach happened after employee logged into personal Google account

• Ransomware Gang Leaks Data Allegedly Stolen From Canadian Hospitals

• Federal Push for Secure-by-Design: What It Means for Developers

• Moving Beyond CVSS Scores for Vulnerability Prioritization

• Winter Vivern’s Roundcube Zero-Day Exploits

• Italy Seizes £677m From Airbnb In Tax Dispute

• What a Bloody San Francisco Street Brawl Tells Us About the Age of Citizen Surveillance

• Offensive and Defensive AI: Let’s Chat(GPT) About It

• WeWork Files For Bankruptcy Protection In US

• Looking Ahead: Highlights from ENISA’s Foresight 2030 Report

• Google introduces real-time scanning on Android devices to fight malicious apps

• Pro-Palestinian hackers group ‘Soldiers of Solomon’ disrupted the production cycle of the biggest flour production plant in Israel

• Cybersecurity M&A Roundup: 31 Deals Announced in October 2023

• Looney Tunables bug exploited for cryptojacking

• Veeam Patches Two Critical Bugs in Veeam ONE

• SideCopy Exploiting WinRAR Flaw in Attacks Targeting Indian Government Entities

• SIM Box Fraud to Drive 700% Surge in Roaming Scams

• Cerber Ransomware hackers target Atlassian Confleunce servers

• Critical Atlassian Bug Exploited in Ransomware Attacks

• Iranian Agonizing Serpens APT is targeting Israeli entities with destructive cyber attacks

• LinkedIn Scraped and Faked Data (2023) – 5,820,276 breached accounts

• VMware Explore Barcelona 2023: Enhanced Private AI and Sovereign Cloud Services Announced

• NSFOCUS WAF Running Modes

• A major cyber attack: $3.5 Trillion Loss can occur!

• Experts Warn of Ransomware Hackers Exploiting Atlassian and Apache Flaws

• 7 cool and useful things to do with your Flipper Zero

• Steps to Follow to Comply With the SEC Cybersecurity Disclosure Rule

• Intensified Israeli Surveillance Has Put the West Bank on Lockdown

• 7 free cyber threat maps showing attack intensity and frequency

• How AI is transforming consumer privacy expectations

• Kubescape 3.0 elevates open-source Kubernetes security

• Critical Flaws Discovered in Veeam ONE IT Monitoring Software – Patch Now

• Outdated cryptographic protocols put vast amounts of network traffic at risk

• Microsegmentation proves its worth in ransomware defense

• Automatic Conditional Access policies in Microsoft Entra streamline identity protection

• eBook: Keeping Active Directory out of hackers’ cross-hairs

• E-commerce Armor: Ensuring Secure Payment Processing

• Decoupled SIEM: Brilliant or Stupid?

• Woman jailed after Rentahitman.com assassin turned out to be – surprise – FBI

• The Evolution of Oil & Gas Industry

• Endpoint security getting a boost from AI and machine learning

• EFF to Ninth Circuit: Activists’ Personal Information Unconstitutionally Collected by DHS Must Be Expunged

Generated on 2023-11-08 23:56:10.271610