IT Security News Daily Summary 2023-11-23

• Canada’s privacy czar investigating data theft of federal employees from relocation companies

• Windows 11 setup: Which user account type should you choose?

• ClearFake campaign spreads macOS AMOS information stealer

• How to apply natural language processing to cybersecurity

• Rise of cloud agnosticism: challenges and myths

• YouTube Denies Slowing Down Mozilla Firefox

• Welltok Data Breach Affects Over 8.5 Million Patients

• BlackCat claims it is behind Fidelity National Financial ransomware shakedown

• Microsoft named a Leader in 2023 Gartner® Magic Quadrant™ for Access Management for the 7th year​​

• Diamond Sleet supply chain compromise distributes a modified CyberLink installer

• Revolutionize your security strategy: Introducing automatic asset discovery

• Telekopye Toolkit Used as Telegram Bot to Scam Marketplace Users

• GM Cruise To Re-Launch Operation In One City – Report

• What Are the Pillars of API Security?

• $9 million seized from “pig butchering” scammers who preyed on lonely hearts

• InfectedSlurs Botnet Resurrects Mirai With Zero-Days

• Amazon Set To Win EU Approval For iRobot Purchase – Report

• Navigating Challenges in Online Banking API Testing

• Chrome pushes forward with plans to limit ad blockers in the future

• Patch Management Guide

• British Library Staff Passports Leaked Online, Hackers Demand £600,000 Ransom

• Rug Pull Schemes: Crypto Investor Losses Near $1M

• Two Insurance companies come under the influence of Ransomware Attacks

• Binance Sees $956m Funds Withdrawn, After CEO Pleads Guilty

• What Is Network Availability?

• TLS/SSL Handshake Errors & How to Fix Them

• Key Components of a Successful DevSecOps Pipeline

• $19 Stanley cup deal is a Black Friday scam

• Welltok data breach impacted 8.5 million patients in the U.S.

• Amazon Cuts Hundreds Of Jobs In Alexa Division

• Half of Cybersecurity Professionals Kept Awake By Workload Worries

• Konni Group Using Russian-Language Malicious Word Docs in Latest Attacks

• OpenSSL Announces Final Release of OpenSSL 3.2.0

• MySQL Security Best Practices Guide – 2024

• Industry piles in on North Korea for sustained rampage on software supply chains

• Websites Must Allow Users to “Reject All” Cookies, UK Regular Warns

• Unlocking a World of Cybersecurity Insights with the CISO’s Secrets Podcast

• Alert: New WailingCrab Malware Loader Spreading via Shipping-Themed Emails

• How Altcoins Influence The World of Crypto

• How to Create a Cybersecurity Incident Response Plan?

• Vulnerability Prioritization: How to Beat Patching Paralysis

• Researchers Warn NetSupport RAT Attacks Are on the Rise

• Mac Systems Under Threat: ClearFake Campaign Deploys Atomic Stealer Malware

• What Is DNS Security and How Does It Work [A Comprehensive Guide]

• White House Joins Threads, Amid X Extremist Content Row

• It’s Time to Log Off

• North Korea-linked APT Diamond Sleet supply chain attack relies on CyberLink software

• Cyber Mindfulness Corner Company Spotlight: Pentest People

• Implementing Effective Compliance Testing: A Comprehensive Guide

• Securing Reality: The Role of Strict Laws and Digital Literacy in the Fight Against Deepfakes

• North Korean Software Supply Chain Threat is Booming, UK and South Korea Warn

• FBI and CISA warn against Scattered Spider triggered cyber attacks

• Exposed Kubernetes Secrets Allow Hackers to Access Sensitive Environments

• Attack on direct debit provider London & Zurich leaves customers with 6-figure backlogs

• Data of 8.5 million patients compromised in the United States

• University of Manchester CISO Speaks Out on Summer Cyber-Attack

• Cisco Patched Products Vulnerable to HTTP/2 Rapid Reset Attack

• Mirai-based Botnet Exploiting Zero-Day Bugs in Routers and NVRs for Massive DDoS Attacks

• 6 Steps to Accelerate Cybersecurity Incident Response

• Actionable Threat Intel (VI) – A day in a Threat Hunter’s life

• Windows Hello Fingerprint Authentication Exploited on Microsoft, Dell, & Lenovo Laptops

• US Seizes $9m From Pig Butchering Scammers

• Consumer cyberthreats: predictions for 2024

• North Korea Blamed For CyberLink Supply Chain Attacks

• Stop social engineering at the IT help desk

• N. Korean Hackers Distribute Trojanized CyberLink Software in Supply Chain Attack

• British Library: Ransomware Attack Led to Data Breach

• Happy Thanksgiving 2023!

• ParaSiteSnatcher: How Malicious Chrome Extensions Target Brazil

• Automotive parts giant AutoZone disclosed data breach after MOVEit hack

• Mirai we go again: Zero-day flaws see routers and cameras co-opted into botnet

• First Linux Kernel 6.7 Release Candidate Announced

• Cybellum’s Product Security Platform achieves Mitre’s CWE-Compatible designation

• 117 Vulnerabilities Discovered in Microsoft 365 Apps

• Million-Dollar Crypto Scam that Leaves Investors Empty-handed

• North Korean Hackers Distribute Trojanized CyberLink Software in Supply Chain Attack

• Cybercriminals turn to ready-made bots for quick attacks

• New horizons in cyber protection with 2024 trends to watch

• Cloud Computing Explained: Benefits and Challenges

• New Relic warns customers it’s experienced a cyber … something

• Consumers plan to be more consistent with their security in 2024

• Online stores may not be as secure as you think

• Defeat Web Shell WSO-NG

• OpenAI in turmoil: Altman’s leadership, trust issues and new opportunities for Google and Anthropic — 4 key takeaways

• Your voice is my password

• North Korea makes finding a gig even harder by attacking candidates and employers

• How to give Windows Hello the finger and login as someone on their stolen laptop

• Cisco Learners: What’s in store for Cyber Monday 2023

• How to give Windows Hello the finger and login as a user on their stolen laptop

• Citrix Bleed Vulnerability: SafeBreach Coverage for US-CERT Alert (AA23-325A)

• IT Security News Daily Summary 2023-11-22

• New InfectedSlurs Mirai-based botnet exploits two zero-days

• 2023-11-22 – AgentTesla infection with FTP data exfil

• US nuke reactor lab hit by ‘gay furry hackers’ demanding cat-human mutants

• 4 data loss examples keeping backup admins up at night

• What Is Cloud Security? Everything You Need to Know

• Hack The Box Launches 5th Annual University CTF Competition

• Kiteworks’ Maytech Acquisition Reaffirms Commitment to UK Market

• Fake Browser Updates Targeting Mac Systems With Infostealer

• Building Security Culture Starts with Building Relationships

• Atomic Stealer Distributes Malware to Macs Through False Browser Downloads

• CISA relaunches working group on cyber insurance, ransomware

• What Is Cloud Configuration Management? Complete Guide

• Qatar Cyber Agency Runs National Cyber Drills

• Web Shells Gain Sophistication for Stealth, Persistence

• Measures Healthcare Providers Can Take to Mitigate Disruptions

• Microsoft Improves Windows Security with a Path to Move Off NTLM

• Researchers Undermine ‘Windows Hello’ on Lenovo, Dell, Surface Pro PCs

• North Korea-backed hackers target CyberLink users in supply-chain attack

• Kinsing Crypto Malware Targets Linux Systems via Apache ActiveMQ Flaw

• 6 Best Unified Threat Management (UTM) Devices & Software for 2023

• Bytes of Delight: Snacking on Snack Minutes Videos

• Foreign Cyberattack Blamed For Kansas Court System Disruption – Report

• Mideast Oil & Gas Facilities Could Face Cyber-Related Energy Disruptions

• APT29 Strikes: WinRAR Exploits in Embassy Cyber Attacks

• LummaC2 Malware Introduces Innovative Anti-Sandbox Technique Utilizing Trigonometry

• Facebook Is Tracking Teens Online As They Prep For College

• Autumn Statement 2023: Tech Implications

• OpenAI saga shows the race for AI supremacy is no longer just between nations

• Equal Pay Day: Women, Cybersecurity, and Money

• Researchers Discover Dangerous Exposure of Sensitive Kubernetes Secrets

• ‘LitterDrifter’ Russian USB Worm Leaks from Ukraine War Zone

• 10 Years On, Microsoft’s Bug Bounty Program Has Paid Out $60 Million

• After Qakbot, DarkGate and Pikabot Emerge as the New Notorious Malware

• Vulnerabilities in Adobe Acrobat, Microsoft Excel could lead to arbitrary code execution

• Sekoia: Latest in the Financial Sector Cyber Threat Landscape

• Scattered Spider Hops Nimbly From Cloud to On-Prem in Complex Attack

• 3 Ways to Stop Unauthorized Code From Running in Your Network

• Establishing and Keeping the Trust: The Cisco Duo Managed Services Story

• Guarding the Gate: How to Thwart Initial Access Brokers’ Intrusions

• Russian Hackers Target Ukraine’s Fighter Jet Supplier

• Flaw in Apache ActiveMQ Exposes Linux Systems to Kinsing Malware

• Autopilot Flaw Known By Tesla, Elon Musk, Judge Finds

• Rootkit Turns Kubernetes From Orchestration to Subversion

• A guide to Purdue model for ICS security

• Employee Policy Violations Cause 26% of Cyber Incidents

• Australia runs cybersecurity health check on all gov websites and infrastructure

• Everything You Need to Know and Do With Load Balancers

• Employees breaking security policies just dangerous as being hacked, Kaspersky global study shows

• Global Smartphone Market Grows After Two Year Slump – Counterpoint

• FBI Alert: Silent Ransom Group Utilizes Callback Phishing for Network Hacks

• Cansina A Web Content Discovery Application

• Mozilla Releases Security Updates for Firefox and Thunderbird

• Fidelity National Financial shuts down network in wake of cybersecurity incident

• SiegedSec hacktivist group hacked Idaho National Laboratory (INL)

• USB Worm Unleashed By Russian State Hackers Spreads Worldwide

• Netflix Bug That Opened Smart TVs To Attacks Is Detailed, 4 Years Later

• Kinsing Malware Exploits Critical Apache ActiveMQ Flaw To Mine Crypto

• Windows Hello Fingerprint Authentication Bypassed On Popular Laptops

• 185,000 Individuals Impacted By MOVEit Hack At AutoZone

• How AI is Encouraging Targeted Phishing Attacks

• New Flaws in Fingerprint Sensors Let Attackers Bypass Windows Hello Login

• Why Ensuring Supply Chain Security in the Space Sector is Critical

• Binance CEO Changpeng Zhao Pleas Guilty, Resigns

• Simplifying Access: The Power of Single Sign-On

• The Persian Gulf’s March to the Cloud Presents Global Opportunities

• Fortinet Insights from the World Economic Forum’s Annual Meeting on Cybersecurity

• Microsoft Offers Up to $20,000 for Vulnerabilities in Defender Products

• Sam Altman is Back as OpenAI CEO Just Days After Being Removed, Along With a New Board

• Windows Hello Fingerprint Authentication Bypassed on Popular Laptops

• 185,000 Individuals Impacted by MOVEit Hack at Car Parts Giant AutoZone

• The AI Paradox: Balancing Generative AI Adoption With Cybersecurity Risks

• What are Hardware Security Keys, and is it Safe to Use Them?

• Google CEO Warns of Potential Security Risks Associated with Sideloading Apps

• HasMySecretLeaked: Building a Trustless and Secure Protocol

• Broadcom completes $69 billion acquisition of VMware in cash and stock

• How LockBit used Citrix Bleed to breach Boeing and other targets

• Check Point enhances AWS security—see it in action at AWS re:Invent!

• Cyber Security Today, Nov. 22, 2023 – Boeing division hacked through NetScaler vulnerability, and more

• Chiselled Ubuntu closes prevailing container security gaps

• Connecting With the Community at BSides Atlanta 2023

• A Maven Story

• Malwarebytes consumer product roundup: The latest

• US cybercops take on ‘pig butchering’ org, return $9M in scammed crypto

• North Korean Hackers Pose as Job Recruiters and Seekers in Malware Campaigns

• Apple to Add Manual Authentication to iMessage

• Over Half of Organisations Are at Risk of Cyberattack Due to Exhausted and Stressed Staff

• Explained: Privacy washing

• Citrix, Gov Agencies Issue Fresh Warnings on CitrixBleed Vulnerability

• Kansas Officials Blame 5-Week Disruption of Court System on ‘Sophisticated Foreign Cyberattack’

• Humans Are Notoriously Bad at Assessing Risk

• CyberArk unveils passwordless authentication options to reduce credential theft

• North Korean Hackers Posed as Job Recruiters and Seekers

• Integration Spotlight: Stellar Cyber Open XDR

• Insights from SentinelOne’s OneCon23

• ENow App Governance Accelerator helps organizations identify risky apps

• Microsoft announces Defender bug bounty program

• AI Solutions Are the New Shadow IT

• LockBit Affiliates are Exploiting Citrix Bleed, Government Agencies Warn

• Sam Altman Reinstated As CEO, New OpenAI Board Appointed

• CISA adds Looney Tunables Linux bug to its Known Exploited Vulnerabilities catalog

• Microsoft’s bug bounty turns 10. Are these kinds of rewards making code more secure?

• Coincover collaborates with Utila to improve crypto asset management

• ClearFake Campaign Expands to Target Mac Systems with Atomic Stealer

• Poloniex Offered $10 Million Reward to Hacker for Return of $120 Million

• UK’s cookie crumble: Data watchdog serves up tougher recipe for consent banners

• Microsoft Launches Defender Bug Bounty Program

• Canada Government Admits Data Breach Impacting Public Employees

• HrServ – Previously unknown web shell used in APT attack

• Measuring the Efficacy of your Insider Risk Program

• What Is a Credential Vault?

• CISA offers cybersecurity services to non-federal orgs in critical infrastructure sector

• Regulator Issues Privacy Ultimatum to UK’s Top Websites

• UK Finance Reports Slight Decrease in FinTech Cyberattacks

• The Cybersecurity Skills Gap: You’re Looking at the Wrong Gap

• Enterprise software provider TmaxSoft leaks 2TB of data

• Europol Launches OSINT Taskforce to Hunt For Russian War Crimes

• DarkGate Gained Popularity for its Covert Nature and Antivirus Evasion

• Citrix provides additional measures to address Citrix Bleed

• India Faces Surge in IM App Attacks With Trojan Campaigns

• Security researchers bypass Windows Hello fingerprint authentication

• Unmasking the latest trends of the Financial Cyber Threat Landscape

• ClearFake Campaign Expands to Deliver Atomic Stealer on Mac Systems

• Breaking News: Sam Altman will return as OpenAI CEO, New board announced in a dramatic turnaround

• ClearFake Campaign Expands to Deliver Atomic Stealer on Macs Systems

• Attack Signals Possible Return of Genesis Market, Abuses Node.js, and EV Code Signing

• Sam Altman will return as OpenAI CEO, New board announced in a dramatic turnaround

• Just beware of these 5 Black Friday or thanksgiving Cyber Scams

• Leveraging Hybrid Cloud Solutions for Enhanced Cybersecurity in Healthcare

• CISOs can marry security and business success

• LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability to Break In

• 5G Technology: Speeding Up the Digital Age

• Always Thankful for Our Customers

• IoT Revolution: Connecting the World Digitally

• Why boards must prioritize cybersecurity expertise

• Fuel for thought: Can a driverless car get arrested?

• Organizations rethink cybersecurity investments to meet NIS Directive requirements

• Open-source AV/EDR bypassing lab for training and learning

• 2023-11-20 – DarkGate infection

• Binance and CEO admit financial crimes, billions coughed up to US govt

• Visibility Isn’t Enough; It’s What You Do with It That Counts

• 4 Key Security Challenges to Address with Confidential Computing

• The 7 Deadly Sins of Security Awareness Training

Generated on 2023-11-23 23:55:51.815162