IT Security News Daily Summary 2023-11-29

• Estante Virtual – 5,412,603 breached accounts

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Zoom Vulnerability Allowed Hackers to Take Over Meetings, Steal Data

• CISA Office of Bombing Prevention Recognizes Critical Infrastructure Security and Resilience Month

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• New AI Security Guidelines Published by NCSC, CISA & More International Agencies

• Okta data breach dilemma dwarfs earlier estimates

• Uncle Sam probes cyberattack on Pennsylvania water system by suspected Iranian crew

• Strengthening Cybersecurity to Enhance Compliance: The Splunk and CrowdStrike Advantage

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Critical Zoom Vulnerability Let Hackers Take Over Meetings, Steal Data

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Stop Expecting Developers to Write Secure Code

• US Seizes Bitcoin Mixer Sinbad.io Used by Lazarus Group

• Okta: Breach Affected All Customer Support Users

• Founder of spyware maker Hacking Team arrested for attempted murder: local media

• Google addressed the sixth Chrome Zero-Day vulnerability in 2023

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Okta: Support system breach affected all customers

• Speaking Freely: Ron Deibert

• Uber To Tempt London Black Cabs With App Offer

• IoT Cloud Computing in IoT: Benefits and Challenges Explained

• Feds seize Sinbad crypto mixer allegedly used by North Korean hackers

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• “Known Good” or “Known Bad”: Choosing a Starting Point for OT Cybersecurity

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• 8 blockchain security risks to weigh before adoption

• Cybercriminals Exploit ActiveMQ Flaw to Spread GoTitan Botnet, PrCtrl Rat

• What You Need to Know about the Pennsylvania Water Authority’s Breach

• Cisco cloud observability and the power of platforms

• Gain control over OT remote access with session monitoring, recording, and termination

• Okta Screws Up (Yet Again) — ALL Customers’ Data Hacked, not just 1%

• Ransomware attack on Law Firm can halt its M&A

• CMA Finds $20 Billion Adobe Figma Deal Could Harm UK Digital Design

• Connecting the Dots: Unraveling IoT Standards and Protocols

• Why is cybersecurity venture funding so tepid despite the strong demand?

• SecurityWeek to Host Cyber AI & Automation Summit on December 6th

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• GoTitan Botnet and PrCtrl RAT Exploit Apache Vulnerability

• OpenSSL Providers Workshop: Users Track

• Why we need to make passwords a thing of the past

• AWS re:Invent: Amazon Announces Two New AI Chips

• AWS re:Invent: Amazon Q Touted As New Business Chatbot

• Unlocking Industrial Data: The EU Data Act

• Cybersecurity Certifications Open Doors to New Career Opportunities

• Safeguard Your Data: Google’s Data Purge Approaches

• ManageEngine introduces a dual-layered threat detection system in its SIEM solution, Log360

• DeleFriend Weakness Puts Google Workspace Security at Risk

• .zip TLD: six months on, and still rollin’

• Okta Breach Impacted All Customer Support Users—Not 1 Percent

• Hacker claims theft of Shadowfax users’ information

• Okta Broadens Scope of Data Breach: All Customer Support Users Affected

• Keyless Goes Independent, Raises $6M for Biometric Authentication

• N. Korean Threat Groups Mixing Tactics to Evade Detection

• Rhysida: The New Ransomware Group Behind British Library Cyberattack

• Here’s Why AI Algorithms Can Prove Extremely Dangerous for Human Mankind

• The Lazarus Hacking Group’s Covert Strategy: Utilizing MagicLine4NX Software in a Global Supply-Chain Assault

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• 1Kosmos enables identity proofing from the web, without downloading a mobile app

• Microsoft ICS Forensics Framework

• British Library confirms customer data was stolen by hackers, with outage expected to last ‘months’

• Cisco Partner Summit Bus Tracking Pilot

• Envisioning AI Mastery in Federal IT: Pioneering a Future of Enhanced Public Service

• 5 Security Risks of Responsive Web Design

• FileCloud and Votiro join forces to protect customers from file-borne threats

• How Internet Radio Hosting Royalties Fuel the Digital Airwaves

• Iranian Mobile Banking Malware Steal Login Credentials & Steal OTP Codes

• Chrome Zero-Day Vulnerability That Exploited In The Wild

• The Importance of Monitoring in a Cloud Environment: Ensuring Performance and Security

• New BLUFFS Bluetooth Attack Methods Can Have Large-Scale Impact: Researcher

• Managed Detection and Response (MDR): Streamlining Cybersecurity in the Modern Age

• 3 Reasons to Consider Reskilling to a Role in Cybersecurity

• Strata Identity’s Maverics Achieves SOC 2 Type II Certification

• PoCs for critical Arcserve UDP vulnerabilities released

• When will the cybersecurity company Okta ensure its own security?

• What cybersecurity pros can learn from first responders

• CISA Announces Secure by Design Alert Series: How Vendor Decisions Can Reduce Harm at a Global Scale

• CISA Releases First Secure by Design Alert

• The University as a Living Lab: Driving Research Value and Sustainability

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• BlueVoyant acquires Conquest Cyber to help clients mitigate risks while meeting new requirements

• AI Boosts Malware Detection Rates by 70%

• The Role of Metadata in Data Management

• Okta admits hackers accessed data on all customers during recent breach

• Sustainability through Cisco’s circular business practices

• Palo Alto Networks Paves the Way with New OT Security Innovations

• Five Cybersecurity Predictions for 2024

• Google Patches Seventh Chrome Zero-Day of 2023

• CISA Warns of Unitronics PLC Exploitation Following Water Utility Hack

• Web Security 101 – Best Practices and Solutions

• Word Document Scam Alert: Windows Users Vulnerable to Cyber Exploits

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• BLUFFS: Six New Attacks that Break Secrecy of Bluetooth Sessions

• GuidePoint Security announces Compliance Management as a Service

• Iranian Hackers Exploit PLCs in Attack on Water Authority in U.S.

• Google Patches Seventh Chrome Zero-Day Of 2023

• Thanksgiving Week Ransomware Attack Hits Ardent Health

• Okta Says Hackers Stole Data For All Customer Support Users In Cyber Breach

• Google Cloud Environment Flaw Lets Attackers Access Critical Data, Systems

• Japan’s Space Agency Suffers Cyber Attack, Points Finger At Active Directory

• Cyber Security Today, Nov. 29, 2023 – More ransomware attacks on the healthcare sector

• How AI is shaping malware analysis

• British Library begins contacting customers as Rhysida leaks data dump

• OpenAI’s Custom Chatbots Are Leaking Their Secrets

• Breaking Laptop Fingerprint Sensors

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Business metrics for Cisco Cloud Observability capability enables customers to protect revenue

• Kubernetes Monitoring: Ensuring Performance and Stability in Containerized Environments

• Okta reveals additional attackers’ activities in October 2023 Breach

• Google Will Start Deleting ‘Inactive’ Accounts in December. Here’s What You Need to Know

• Google fixes Chrome zero day exploited in the wild (CVE-2023-6345)

• Google To Begin Deleting Inactive Accounts On Friday

• UK government rings the death knell for SIM farms

• Okta breach: Hackers stole info on ALL customer support users

• 200+ Malicious Android Apps Targeting Iranian Banks: Experts Warn

• Japan Space Agency Hacked, But No Rocket Data Accessed

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• SentinelOne and Pax8 expand partnership to enhance security measures for SMBs

• Google Workspace Design Flaw Allows Unauthorized Access

• OwnCloud “graphapi” App Vulnerability Exposes Sensitive Data

• Google Workspace’s Design Flaw Allows Attacker Unauthorized Access

• Discover Why Proactive Web Security Outsmarts Traditional Antivirus Solutions

• 200+ Malicious Apps on Iranian Android Store Installed by Millions of Banking Users

• Tails 5.2.0 comes with several improvements, updated Tor Browser

• A Fifth of UK SMBs Can’t Spot Scams

• Building Fortra as Your Cybersecurity Ally

• Holiday Shopping: Tips and Best Practices to Help you Stay Secure

• Brit borough council apologizes for telling website users to disable HTTPS

• Intel Reptar Flaw Patch For CPU Vulnerability Released

• The Transition to CVSS v4.0 – What You Need to Know

• Several Cobbler Vulnerabilities Fixed in Ubuntu 16.04

• Webinar: Best Practices for Security Compliance

• Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave™ for Unified Endpoint Management

• Hackers Exploit Critical Vulnerability in ownCloud

• Google Fixes Sixth Chrome Zero-Day Bug of the Year

• Thousands of secrets lurk in app images on Docker Hub

• Bleach Anime Forum – 143,711 breached accounts

• Implementing Network Segmentation: Strategies for Better Security in Enterprise Networks

• Hamas-Linked Group Revives SysJoker Malware, Leverages OneDrive

• Japan’s space agency suffers cyber attack, points finger at Active Directory

• Okta Discloses Broader Impact Linked to October 2023 Support System Breach

• CompTIA achieves place in National Cyber Security Hall of Fame

• What is Simulated Phishing

• Serial ‘SIM Swapper’ Sentenced to Eight Years in Prison

• 5 resolutions to prepare for SEC’s new cyber disclosure rules

• DJVU Ransomware’s Latest Variant ‘Xaro’ Disguised as Cracked Software

• Strategies for cultivating a supportive culture in zero-trust adoption

• Zero-Day Alert: Google Chrome Under Active Attack, Exploiting New Vulnerability

• GoTitan Botnet Spotted Exploiting Recent Apache ActiveMQ Vulnerability

• Tech Innovations in Healthcare: Transforming Patient Care

• Enterprises prepare for the inevitable cyber attack

• Defining Cyber Security Goals and Objectives: A Guide to Protecting Your Digital Empire

• Mastering NIST Penetration Testing: Your Essential Guide to Robust Cybersecurity

• Defend Against Cyber Threats: Understanding Each Ransomware Type

• Vigil: Open-source LLM security scanner

• TenSec 2019

• Exploiting Wi-Fi Stack on Tesla Model S

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• Tencent Security Keen Lab: Experimental Security Assessment of Mercedes-Benz Cars

• The Evolution of AI in Cybersecurity

• Reasons Your WAN is Failing You, and What You Can Do About It

• Fortanix launches Key Insight, a new tool for managing your enterprise’s encryption keys

• Plex gives fans a privacy complex after sharing viewing habits with friends by default

• Roll-up

• IT Security News Daily Summary 2023-11-28

• Europol, Ukraine police arrest alleged ransomware ringleader

• LockBit claims cyberattack on India’s national aerospace lab

• Threat actors started exploiting critical ownCloud flaw CVE-2023-49103

• Plex gives fans a privacy complex by sharing viewing habits with friends by default

• Say Goodbye to Monolithic EdgeWorkers: Introducing Flexible Composition (Part 1)

• AWS Launches New Chips for AI Training and Its Own AI Chatbot

• Unsealed Documents Reveal Facebook Has An “Open Secret” Of Millions Of Underage Users

• Plex sharing streaming habits raises privacy hackles

• KubeCon 2023: Bridging the AppSec Tools Gap

• A Civil Rights Firestorm Erupts Around a Looming Surveillance Power Grab

• Digital Car Keys Are Coming

• Five Takeaways from Black Friday & Cyber Monday Cyber Attacks

• E-mail Compromise

• IP network security in the age of DDoS and quantum computing

• NIST CSF 2.0: Changes and Implications

• KubeCon 2023: Briding the AppSec Tools Gap

• Atomic Stealer Again Targets Mac Via Fake Browser Updates

• Ukraine Hacks Russia’s Aviation Agency, Claims “Aviation Cannibalism”

• International police operation dismantled a prominent Ukraine-based Ransomware group

• SEO Poisoning Brings Users to Attackers’ Doors

• Essential Baby Gadgets for Modern Parents

• ‘Start Here’ for Lifecycle Practice optimization

• Ransomware gangs and Living Off the Land (LOTL) attacks: A deep dive

• AWS re:Invent: Amazon Nvidia Expand Collaboration

• Worried about iOS 17’s NameDrop feature? Here’s why I’m not turning it off

• How to Detect VPN Proxies With Python and IP2Location.io API

• How to Integrate Istio and SPIRE for Secure Workload Identity

• Integrating Data Management With Business Intelligence (BI) for Enhanced Insights

• AWS re:Invent 2023 defines a resilient vision for cloud security’s future

• timing attack

• News alert: Hunters’ Team Axon discloses severe privilege escalation flaw in Google Workspace

• Objection Filed To Meta’s Paid Ad-Free Subscription

• Design Flaw in Domain-Wide Delegation Could Leave Google Workspace Vulnerable to Takeover – Hunters

• 2023-11-27 – TA577 pushes IcedID (Bokbot) variant

• Unlocking Tomorrow’s Cybersecurity: A Sneak Peek into ReadySetCyber

• Advanced Persistent Threats: OffSec’s Comprehensive Guide

• BD FACSChorus

• Delta Electronics InfraSuite Device Master

• ColdFusion’s Close Call: A Peek into the Anatomy of a Failed Ransomware Strike

• Lacework AI Assist enhances SOC efficiency

• European Commission Cites Competition Concerns Over Amazon’s iRobot Deal

• Hunters Security: Google Workspace Vulnerable to Takeover Due to Domain-Wide Delegation Flaw

• Navigating the API Seas: A Product Manager’s Guide to Authentication

• Non-delivery and non-payment scams top the charts in holiday fraud

• The Hundred-Year Battle for India’s Radio Airwaves

• Elon Musk Is Giving QAnon Believers Hope Just in Time for the 2024 Elections

• Powering up in harsh environments: Five questions to ask before selecting the right industrial PoE switch

• Let Them Know It’s Time to Power Up

• CISA Urges Congress to Reauthorize Key Chemical Security Program

• Undetected Android Trojan Expands Attack on Iranian Banks

• ID Theft Service Resold Access to USInfoSearch Data

• Understanding OT Cybersecurity Risks in the Energy Sector

• DEF CON 31 – Wojciech Reguła’s ‘ELECTRONizing MacOS Privacy – A New Weapon In Your Red Teaming Armory’

• Compel social media apps to toughen their privacy, trust practices, Parliament told

• Coffee Briefing Nov. 28 – Canadian 5G users will pay more for quality experience; Holiday shoppers on board with GenAI; KPGM and Chainalysis partner; and more

• Entrust launches Digital Account Opening solution to simplify global customer onboarding

• Ardent Health Services Grapples With Ransomware Disruption

• Binance Founder Changpeng Zhao To Remain In United States

• Google Workspace Vulnerable to Takeover Due to Domain-Wide Delegation Flaw, Warns Cybersecurity Firm Hunters

• New Innovations to Deliver Enhanced Visibility to AWS-powered Application Experiences

• Cisco Wins the AWS Global ISV Partner of the Year Award!

• Delivering application performance to maximize business KPIs

• Palo Alto Networks Advises U.S. Government on AI and Cybersecurity

• Police Dismantle Major Ukrainian Ransomware Operation

• Announcing Hyperproof’s New HyperComply Integration

• Cyber Monday Scams: Stay Vigilant and Protect Yourself from These Sneaky Tricks

• Armis releases version 23.3 of the Armis Centrix platform

• Ardent Health Services hit by ransomware

• Design Flaw in Domain-Wide Delegation Could Leave Google Workspace Vulnerable for Takeover, Says Cybersecurity Company Hunters

• Unified endpoint management for purpose-based devices

• Hybrid cloud connectivity best practices and considerations

• GoTitan Botnet – Ongoing Exploitation on Apache ActiveMQ

• The Necessity of Security Best Practices When Implementing Generative AI

• Google’s Ad Blocker Crackdown Sparks Controversy

• Slovenian power company hit by ransomware

• Design flaw leaves Google Workspace vulnerable for takeover

• Armory simplifies deployments to AWS Lambda

• Deepfake Digital Identity Fraud Surges Tenfold, Sumsub Report Finds

• Europol arrest hackers allegedly behind string of ransomware attacks

• Exploitation of Critical ownCloud Vulnerability Begins

• Ringleader of Ransomware Group in Ukraine Arrested: Europol

• Trend Micro empowers security teams to eliminate threats with new automated risk prioritization

• Decoding the Past, Securing the Future | Enhancing Cyber Defense with Historical Threat Intelligence

• Chinese Hackers Stolen Chip Designs from Major Dutch Semiconductor Company

• Hackers Behind High-Profile Ransomware Attacks on 71 Countries Arrested

• Los Angeles SIM Swapper Sentenced To 8 Years In Prison

• Ransomware Hackers Wreaking Havoc Arrested In Ukraine

• 4 Key Takeaways From New Global AI Security Guidelines

• Critical Vulnerability Found In Ray AI Framework

• Critics Of Serbia’s Government Targeted With Military-Grade Spyware

• Helping companies defend what attackers want most – their data

• Amazon One Enterprise Enables Palm-Based Access to Physical Locations, Digital Assets

• Los Angeles SIM Swapper Sentenced to 8 Years in Prison

• Critical Vulnerability Found in Ray AI Framework

• A Step-by-Step Guide to Migrating from Legacy VPN to ZTNA

• Chinese Hackers Lurked for Over Two Years to Steal NXP’s Chipmaking IP

• Sumo Logic accelerates troubleshooting and security across AWS environments

• Paladin Cloud unveils Prioritization Engine for Cloud Security

• Ethyrial: Echoes of Yore Hit by Ransomware, Player Accounts Deleted

• A Comprehensive Guide to Cloud Monitoring Tools: Ensuring Optimal Performance and Security

• Heimdal Collaborates with Microsoft to Match Evolving Market Needs

• Defending your voice against deepfakes

• Europol shutters ransomware operation with kingpin arrests

• Reasons your WAN is Failing You, and What You Can You Do about It

• Phil’s Food for Thought – Career Development

• Challenges, Trends and Opportunities for Healthcare Cybersecurity Leaders

• From Vacation to Volunteer: How Hawaii Has Our Hearts and Our Help

• AI Gets a Legal Gift for Thanksgiving

• Design Flaw in Google Workspace Could Let Attackers Gain Unauthorized Access

• Transform Your Data Security Posture – Learn from SoFi’s DSPM Success

• What is threat hunting?

• Broadcom Completes the $61 Billion Acquisition of VMware

• Exploring VPN Alternatives: Secure Solutions

• Daixin Team group claimed the hack of North Texas Municipal Water District

• Datadog enhances Security Inbox to help DevOps teams improve security posture

• IBM partners with AWS to optimize data management for AI workloads

• Nvidia Sued After Engineer Shows Trade Secrets On Video Call

• Telegram’s Bans on Extremist Channels Aren’t Really Bans

• 16-30 September 2023 Cyber Attacks Timeline

• Cybercriminals Hesitant About Using Generative AI

• AWS brings Amazon One palm-scanning authentication to the enterprise

• Critical ownCloud flaw under attack (CVE-2023-49103)

• Key Cybercriminals Behind Notorious Ransomware Families Arrested in Ukraine

• How Hackers Phish for Your Users’ Credentials and Sell Them

• Iran launches cyber attack on water authority in the United States

• How Does NIST’s AI Risk Management Framework Affect You?

• QR Code Phishing –What Is It?

• Australian SMBs Feel the Cyber Security Heat: Here’s What IT Pros Can Do to Help

• ownCloud vulnerability can be used to extract admin passwords

• Ardent Hospitals Diverting Patients Following Ransomware Attack

• Ukrainian ransomware gang behind high-profile attacks dismantled

• Americans Receive Two Billion Spam Calls Per Month

• Board Support Critical For Robust Cybersecurity Defence – Trellix

• Hackers Can Exploit ‘Forced Authentication’ to Steal Windows NTLM Tokens

• Stop Identity Attacks: Discover the Key to Early Threat Detection

• CISA Warns Congress on Chemical Industry Terror Attacks

• Healthcare provider Ardent Health Services disclosed a ransomware attack

• Another Look at Accountability in Cybersecurity

• Ddostf DDoS Botnet Malware Targets MySQL Servers

• SMBs face surge in “malware free” attacks

• Ukraine Police Dismantle Major Ransomware Group

• A bird’s eye view of your global attack surface

• CrowdStrike Endpoint Protection: Solution Overview

• Disable Windows Event Logging – Security Spotlight

• Google Drive Users Files Suddenly Disappeared, Tech Gaint Investigating

• Amazon One Enterprise palm-based identity service improves security of physical spaces, digital assets

• India’s CERT given exemption from Right To Information requests

• Stop panic buying your security products and start prioritizing

• How passkeys are reshaping user security and convenience

• Guarding the gateway: Securing dispersed networks

• N. Korean Hackers ‘Mixing’ macOS Malware Tactics to Evade Detection

• The Role of the CISO in Digital Transformation

• Rethinking shift left: How a lack of context creates unnecessary friction between AppSec and Developers

• Generative AI security: Preventing Microsoft Copilot data exposure

• Product showcase: New ESET Home Security

• Report: The state of authentication security 2023

• Quantum Computing Unleashed: Exploring the Possibilities

• ‘Serial cybercriminal and scammer’ jailed for 8 years, told to pay back $1.2M

• Earthquakes, Cyber Breaches, and Mitigating Disasters through Design

• Safeguarding Healthcare: A Closer Look at the Major Trends in the Health IT Security Market

• Beyond Goals: Developing Systems for Success in Tech

Generated on 2023-11-29 23:56:02.121698