IT Security News Daily Summary 2023-11-20

• Malware Uses Trigonometry to Track Mouse Strokes

• Lasso Security Emerges From Stealth With $6M Seed Funding for Gen AI and Advanced LLM Cybersecurity

• Canadian government impacted by data breaches of two of its contractors

• Protecting Kids on Social Media Act: Amended and Still Problematic

• Amid Military Buildup, China Deploys Mustang Panda in the Philippines

• Facebook Breaks Up Its Ethical AI Watchdog Group

• Cisco Live is the time to jump into the future. Together.

• MOVEit victim count latest: 2.6K+ orgs hit, 77M+ people’s data stolen

• CISA Launches Pilot Program to Address Critical Infrastructure Threats

• Thousands of new honeypots deployed across Israel to catch hackers

• Cisco Transportation at Smart City Expo World Congress (SCEWC) 2023

• Automating your way out of an AppSec staffing shortage

• 2024: The Year Microsoft’s AI-Driven Zero Trust Vision Delivers

• Data stolen on Canadian federal employees in third party hack may go back 24 years

• Rhysida ransomware gang is auctioning data stolen from the British Library

• LummaC2 v4.0 Malware Stealing Data with Trigonometry to Detect Human Users

• Hacker Leaks Vaccination Records of Over 2 Million Turkish Citizens

• Cybersecurity Insurance and Data Analysis Working Group Re-Envisioned to Help Drive Down Cyber Risk

• ‘Not consistently candid’: The cryptic phrase that ended Sam Altman’s tenure at OpenAI

• Enterprise Generative AI Enters Its Citizen Development Era

• Celebrating ten years of the Microsoft Bug Bounty program and more than $60M awarded

• Secretive White House Surveillance Program Gives Cops Access to Trillions of US Phone Records

• Saudi Arabia Arms Public Sector With Google Cloud Services

• Ukraine fires top cybersecurity officials

• Hybrid Work for Government: Resiliency in Emergency Situations

• Former infosec COO pleads guilty to attacking hospitals to drum up business

• Microsoft Announces Launch of Customizable AI-Powered Digital Avatar

• Big Data Empowers IoT: Challenges and Solutions

• Stay safe while shopping online on Black Friday and Cyber Monday

• 15 benefits of outsourcing your cybersecurity operations

• CISA Unveils Healthcare Cybersecurity Guide

• What to do if the phone is hacked or becomes espionage target

• British Library confirms data stolen during ransomware attack

• Details Emerge Of Surprise Board Coup That Ousted CEO Sam Altman At OpenAI

• Rhysida Ransomware Gang Attacked The British Library

• Morgan Stanley Fined $6.5 Million For Exposing Customer Info

• Most OpenAI Staff Threaten To Quit After Microsoft Hires Sam Altman

• DEF CON 31 Packet Hacking Village – Pete Hay’s ‘The Importance Of Arts And Crafts In ThreatOps’

• Infostealer Lumma Evolves With New Anti-Sandbox Method

• Google Workspace Vulnerabilities Risk Security Breaches – Warn Researchers

• Microsoft ‘Stronger’ After OpenAI Chaos, Altman Hire

• 6 FinOps Principles and Best Practices

• The Call to Fuel Partner Success

• Student discount: Get 50% off Malwarebytes

• CISA Releases Cybersecurity Guidance for Healthcare, Public Health Organizations

• FCC’s Got New Rules for SIM-Swap and Port-Out Fraud

• CISA to Provide Cybersecurity Services to Critical Infrastructure Entities

• NetSupport RAT Infections on the Rise – Targeting Government and Business Sectors

• OpenAI Staff Threaten To Resign Over Altman Sacking

• READYgg Onboards 15 Million Web2 Players into Web3 in Partnership with Aptos Labs

• Operationalize cyber risk quantification for smart security

• Optus CEO resigns following service outage debacle

• Sam Altman’s AI ‘mission continues’ at Microsoft, future of OpenAI and ChatGPT uncertain

• Morgan Stanley Fined $6.5 Million for Exposing Customer Information

• XDR Cybersecurity: Technologies and Best Practices

• Apple Adopts Universal Texting Standard

• Product Walkthrough: Silverfort’s Unified Identity Protection Platform

• DarkGate and PikaBot Malware Resurrect QakBot’s Tactics in New Phishing Attacks

• Akamai EdgeWorkers and Uniform: Personalize Web Pages at Scale Without Flicker

• Do We Want an Immersive Web?

• Musk Vows ‘Thermonuclear’ Lawsuit Against Watchdog

• How the Evolving Role of the CISO Impacts Cybersecurity Startups

• LummaC2 Stealer’s New Anti-Sandbox Technique? Trigonometry

• Johnson Controls Patches Critical Vulnerability in Industrial Refrigeration Products

• Microsoft Hires Sam Altman and OpenAI’s New CEO Vows to Investigate His Firing

• Morgan Stanley Ordered to Pay $6.5 Million for Exposing Customer Information

• Maximizing Data Security: Why Simply Factory Resetting Your Android Phone Won’t Suffice Before Selling

• BYD Targets Tesla With Premium ‘Sea Lion’ EV

• Fortify Your Online Business – Security Tips for Starting an e-Commerce Website

• Yamaha Ransomware Attack: Employees Personal Information Exposed

• Hackers accessed sensitive health data of Welltok patients

• Russia-linked APT29 group exploited WinRAR 0day in attacks against embassies

• Konni Campaign Distributed Via Malicious Document

• Adopting CNAPP as a Bridge Between DevOps and Cloud-Native Security

• Google’s Bard AI Chatbot is now Accessible to Teenagers

• Threat Intelligence with Sandbox Analysis: Security Analyst Guide – 2024

• Lasso Security emerges from stealth to wrangle LLM security

• Inside OpenAI’s chaotic weekend: The Sam Altman dismissal to Emmett Shear’s appointment

• Are DarkGate and PikaBot the new QakBot?

• Google Eases Restrictions: Teens Navigate Bard with Guardrails

• Intel Released Urgent Patch For Reptar Vulnerability In Its CPUs

• Google Elaborates On Campaigns Exploiting A Now-Patched Zimbra Zero-Day

• The Human Factor of Cyber Security

• Cisco ISE Takes a Trio of TrustRadius Awards

• New “Agent Tesla” Variant: Unusual “ZPAQ” Archive Format Delivers Malware

• Using Generative AI for Surveillance

• Cybersecurity, Legal, and Financial Experts Share Their Reactions to the SEC’s Latest Cyber Disclosure Regulations | Kovrr Blog

• Yamaha Motor Confirms Data Breach Following Ransomware Attack

• 5 Steps to Assessing Risk Profiles of Third-Party SSE Platforms

• Cyber Security Today, Nov. 20, 2023 – Forbid ransomware payments, says a Canadian hospital

• OpenAI’s Altman Courted Investors For AI Chip, Device

• Fake Online Stores See A 135% Spike As Black Friday And Holiday Shopping Approaches

• Rhysida ransomware gang: We attacked the British Library

• Altman, Brockman Join Microsoft After Shock OpenAI Ouster

• AMIDES – Open-source Detection System to Uncover SIEM Blind Points

• Recognising Scam Patterns and Preventing Data Loss: A Unified Approach

• Sophos Web Appliance vulnerability exploited in the wild (CVE-2023-1671)

• LummaC2 Malware Deploys New Trigonometry-Based Anti-Sandbox Technique

• Why Defenders Should Embrace a Hacker Mindset

• Understanding the UK government’s new cybersecurity regime, GovAssure

• Resecurity partners with University of Jeddah to improve cybersecurity education

• Navigating the Waters of AI: Safeguarding Against Data Security Risks

• Ransomware group wants to partner up with government, files SEC complaint against its victim

• K-12 Schools Improve Protection Against Online Attacks, but Many Are Vulnerable to Ransomware Gangs

• US Announces $70 Million Cybersecurity Boost for Rural, Municipal Utilities

• 250 Organizations Take Part in Electrical Grid Security Exercise

• How are Crypto Phishing Scams Done, and How Do You Avoid Them?

• DarkGate Internals

• Now a Stock Market business hires hackers

• Secretary Fined For Accessing Scores of Patient Records

• Shear Takes Over As OpenAI Interim Chief, Promises Independent Probe

• Change Variance: How Tiny Differences Can Impact Your IT World

• Phishing Trends Examined by the SANS Institute

• The dark side of Black Friday: decoding cyberthreats around the year’s biggest shopping season

• Randstorm Exploit: Bitcoin Wallets Created b/w 2011-2015 Vulnerable to Hacking

• Russia’s APT29 Targets Embassies With Ngrok and WinRAR Exploit

• CVE-2023-46604 (Apache ActiveMQ) Exploited to Infect Systems With Cryptominers and Rootkits

• Critical AI Tool Vulnerabilities Let Attackers Execute Arbitrary Code

• US teenager pleads guilty to his role in credential stuffing attack on a betting site

• DarkCasino joins the list of APT groups exploiting WinRAR zero-day

• NCSC Announces New Standard For Indicators of Compromise

• ‘123456’ Crackable in seconds, 2023’s Most Prevalent Password

• A week in security (November 13 – November 19)

• A Detection and Response Benchmark Designed for the Cloud

• Leveraging Sandbox and Threat Intelligence Feeds to Combat Cyber Threats

• Gang of 5 Employees Stole The Customer Data at Late Night in Office

• OracleIV DDoS Botnet Alert: Secure Your Docker Engine APIs

• Indian Hack-for-Hire Group Targeted U.S., China, and More for Over 10 Years

• 9 Black Friday cybersecurity deals you don’t want to miss

• How effective compensation makes a difference with cyber talent retention

• MFA under fire, attackers undermine trust in security measures

• Smaller businesses embrace GenAI, overlook security measures

• Outsmarting cybercriminals is becoming a hard thing to do

• Only 9% of IT budgets are dedicated to security

• Your password hygiene remains atrocious, says NordPass

• CrowdStrike Extends AI Approach to Cybersecurity to SMBs

• Four Years and a Pandemic Later: Have Agencies Become Cloud Smart?

• Embracing Zero Trust Architecture: A Critical Best Practice for Cybersecurity in Enterprises

• Crypto Scammers Exploit Gaza Crisis, Deceiving Users in Donation Scam

• Insider Risk Digest: Week 45-46

• IT Security News Daily Summary 2023-11-19

• SSE vs. Traditional Security Models – The Variances

• AI/ML Tools Uncovered with 12+ Vulnerabilities Open to Exploitation

• Toyota Acknowledges Security Breach After Medusa Ransomware Threatens to Leak Data

• Android’s Privacy Boost: Google Unveils ‘Private Spaces’ Feature to Safeguard Photos and Data

• Security Affairs newsletter Round 446 by Pierluigi Paganini – INTERNATIONAL EDITION

• Bengaluru Police Bust Rs 854 Crore Cyber Fraud

• Bing Chat Rebrands to ‘Copilot’: What is New?

• How to Protect Your Black Friday and Cyber Monday Shopping

• 8Base ransomware operators use a new variant of the Phobos ransomware

• Week in review: Juniper devices compromised, great corporate security blogs, MITRE D3FEND

• Network Segmentation Guide: Essential Security Best Practices Revealed

• Microsoft’s Purview: A Leap Forward in AI Data Security

• Dark Effects of Bot Attacks that Drive 73% of Internet Traffic

• AI Demystified: Unraveling Artificial Intelligence (AI)

Generated on 2023-11-20 23:55:44.110286