IT Security News Daily Summary 2023-12-13

• Facebook Sues FTC To Block Ban On Monetizing Kids’ Data

• How to Set Up a VLAN in 12 Steps: Creation & Configuration

• Speaking Freely: Dr. Carolina Are

• FLOSS for Gophers and Crabs: Extracting Strings from Go and Rust Executables

• NIST CSF Adoption and Automation

• Scammers Weaponize Google Forms in New BazarCall Attack

• New WordPress Update Addressed A POP Chain RCE Vulnerability

• New SLAM Attack Threatens Future CPUs Security

• Ransomware review: December 2023

• OpenAI Signs Axel Springer Deal To Offer News In ChatGPT

• How to use Bitwarden Identities to secure your most sensitive data

• Without Interoperability, Apple Customers Will Never Be Secure

• At a Glance: The Year in Cybersecurity 2023

• Daniel Stori’s ‘Docker Panacea’

• 12 key cybersecurity metrics and KPIs for businesses to track

• Russian Foreign Intelligence Service (SVR) Exploiting JetBrains TeamCity CVE Globally

• CISA and Partners Release Advisory on Russian SVR-affiliated Cyber Actors Exploiting CVE-2023-42793

• (20)24 x 7 Tech Trends: AI Readiness, Adoption and Integration

• New AI Safety Initiative Aims to Set Responsible Standards for Artificial Intelligence

• Taking a Proactive Approach to Mitigating Ransomware Part 2: Avoiding Vulnerabilities in SAP Applications

• WPA vs. WPA2: Upgrading Your Wi-Fi Security

• TeamCity Intrusion Saga: APT29 Suspected Among the Attackers Exploiting CVE-2023-42793

• Microsoft patches 34 vulnerabilities, including one zero-day

• Chinese APT Volt Typhoon Linked to Unkillable SOHO Router Botnet

• Russia Hacks Ukraine, Ukraine Hacks Russia — Day#658

• Strengthening identity protection in the face of highly sophisticated attacks

• Threat actors misuse OAuth applications to automate financially driven attacks

• UK At High Risk Of ‘Catastrophic Ransomware Attack’, Warns Committee

• Dutch Watchdog Sues Adobe Over Mass Collection of Citizen Data

• Apple will no longer give police users’ push notification data without a warrant

• Building inclusive AI will accelerate innovation

• Malvertisers zoom in on cryptocurrencies and initial access

• China mulls legality of AI-generated voice used in audiobooks

• This is how to protect your computers from LogoFAIL attacks

• How to Use Google’s Titan Security Keys With Passkey Support

• Google Adds Gemini Pro API to AI Studio and Vertex AI

• Hacker Group Linked to Russian Military Claims Credit for Cyberattack on Kyivstar

• UK Home Office is ignoring the risk of ‘catastrophic ransomware attacks,’ report warns

• How are the AI-powered Robocop Keeping New York’s Busiest Subway Station Safe?

• The United States is Monitoring Vulnerabilities in Bitcoin

• Visa Provisioning Intelligence predicts probability of token fraud

• Catastrophic Ransomware cyber threat looming on UK

• Tesla ‘Recalls’ Two Million Cars As Regulator Flags Autopilot Risk

• Employee Engagement And The Psychology Of Team Dynamics

• How to Use Titan Security Keys With Passkey Support

• Google Adds Gemini API to AI Studio and Vertex AI

• 9 Best Next-Generation Firewall (NGFW) Solutions for 2024

• Nearly A Million Non-Profit Donors’ Details Left Exposed In Unsecured Database

• MITRE Unveils EMB3D Threat Model for Embedded Devices Used in Critical Infrastructure

• Apple Testing New Stolen Device Protection Feature for iPhones

• Stopping Lateral Movement Means Identifying the Small Hops That Take Attackers Far

• DNSFilter introduces new capability to filter generative AI

• BazaCall Phishing Scammers Now Leveraging Google Forms for Deception

• Ukraine’s Cyberattack Cripples Russia’s Tax System

• Best practices for cloud configuration security

• Final Patch Tuesday Of 2023 Goes Out With A Bang

• Think Tank Report Labels NSO, Lazarus As Cyber Mercenaries

• Apple Sets Trap To Catch iMessage Impersonators

• Cyberattack Cripples Ukraine’s Largest Telecom Provider

• Zscaler launches Business Insights for smarter SaaS management and office optimization

• Common Sense Privacy protects consumer privacy with AI-powered software platform

• MITRE Launches Critical Infrastructure Threat Model Framework

• CALISTO doxxing: Sekoia.io findings concurs to Reuters’ investigation on FSB-related Andrey Korinets

• Judge Overturns Centripetal Patent Fine Against Cisco

• Dashlane launches passwordless login – for new users only so far

• Tonsley Innovation District Attracting Global Attention

• OAuth apps used in cryptocurrency mining, phishing campaigns, and BEC attacks

• Are HTTP Content-Security-Policy (CSP) Headers Sufficient to Secure Your Client Side?

• How Google is Using Clang Sanitizers to Make Android More Secure

• Clang Sanitizers: Keeping Your Code Clean and Secure

• FCC Warns Carriers to Protect Customers Against SIM Swaps

• AI and Blockchain Convergence: A Game Changer in the Digital Sector

• 17 Risky Apps Threatening Your Smartphone Security

• Russia Set to Ramp Up Attacks on Ukraine’s Allies This Winter

• Quishing: New Sophisticated Phishing Attacks on the Rise

• Sophos Firewall Code Injection Flaw: Let Attackers Execute Remote Code

• Apple introduces protection to prevent thieves from getting your passwords

• What Should We Expect for State and Local Government IT Priorities in 2024?

• Why a Master’s in Cyber Security is Your Ticket to a Thriving Career

• Learning the safety language of the cloud

• CISA Seeks Public Opinion on Google Workspace Secure Configuration Baselines

• Zero Networks Raises $20 Million to Secure Access to Enterprise Assets

• Cofense Adds Vishing Simulation to its Popular PhishMe® Email Security Awareness Training

• Attack Surface Management: What is it? Why do you need it?

• Inside the Challenges of XDR Implementation and How to Overcome Them

• Cyber Security Today for Wednesday, Dec. 13, 2023 – Mystery surrounds the outage at a ransomware gang’s site, and more

• Veeam adds BaaS capabilities for Veeam Backup for Microsoft 365

• SAFE Materiality Assessment Module identifies top cyber risk scenarios

• Google Using Clang Sanitizers to Protect Android Against Cellular Baseband Vulnerabilities

• Drata unveils Third-Party Risk Management offering to help security teams identify risks

• Attackers abuse OAuth apps to initiate large-scale cryptomining and spam campaigns

• 1,450+ pfSense Servers Vulnerable to Remote Code Execution Attacks via Exploit Chain

• Microsoft’s 2023 Final Patch: 34 Vulnerabilities Including Critical 0-Day Fixed

• Cloud Engineer Sentenced for Deleting Ex-employer’s Code Repos & Logs

• Guardz collects $18M to expand its AI-based security platform for SMBs

• Cisco XDR: SLEDs “SOC in a Box”

• Cybersecurity career training for the real world

• Surveillance by the US Postal Service

• Expanding Reach and Reducing Costs: Cato Enhances Capabilities with Latest Third-Party Integrations

• Versions 14 and 13 of Android are Vulnerable to New Lock Screen Bypass Exploits

• How to Analyze Malware’s Network Traffic in A Sandbox

• UK at High Risk of Catastrophic Ransomware Attack, Government Ill-Prepared

• X Ad Sales Projected To Fall More Than 50 Percent – Report

• Harry Coker Confirmed as National Cyber Director

• Chrome 120 Update Patches High-Severity Vulnerabilities

• Superconductor Claim Labelled ‘Baseless’ By South Korea Experts

• How ransomware gangs are engaging — and using — the media

• A Critical Remote Code Execution(RCE) Vulnerability in Apache Struts2 Flaw Puts Your Web Apps at Risk

• EOL Sophos firewalls get hotfix for old but still exploited vulnerability (CVE-2022-3236)

• Microsoft Warns of Hackers Exploiting OAuth for Cryptocurrency Mining and Phishing

• Sophos backports fix for CVE-2022-3236 for EOL firewall firmware versions due to ongoing attacks

• 1-15 October 2023 Cyber Attacks Timeline

• Sophos Patches EOL Firewalls Against Exploited Vulnerability

• Nearly a million non-profit donors’ details left exposed in unsecured database

• Major Cyber Attack Paralyzes Kyivstar – Ukraine’s Largest Telecom Operator

• Microsoft Fixes 34 CVEs and One Zero-Day in December Patch Tuesday

• FakeSG campaign, Akira ransomware and AMOS macOS stealer

• Top CISOs to Follow in 2024: Germany Edition

• Which cybersecurity controls are organizations struggling with?

• UK Ministry of Defence Fined For Afghan Data Breach

• Tips for Achieving Success With a NERC CIP Audit

• Operational Resilience: What It Is and Why It’s Important

• Ukraine Claims it “Paralyzed” Russia’s Tax System

• Cyber security isn’t simple, but it could be

• December 2023 Microsoft Patch Tuesday fixed 4 critical flaws

• Python 2 EOL: Coping with Legacy System Challenges

• Rhysida Ransomware Attacking Government & IT Industries Worldwide

• Ensuring a Secure Future: Global Guidelines for AI Security

• Microsoft’s Final 2023 Patch Tuesday: 33 Flaws Fixed, Including 4 Critical

• Rhysida Ransomware targets Sony Insomniac

• Think tank report labels NSO, Lazarus, as ‘cyber mercenaries’

• Shifting data protection regulations show why businesses must put privacy at their core

• A closer look at LATMA, the open-source lateral movement detection tool

• ThreatNG open-source datasets aim to improve cybersecurity practices

• Smart Thermostats: Savings and Comfort at Your Fingertips

• Guide: Application security posture management deep dive

• Industry regulations and standards are driving OT security priorities

• American Intellectual Property Theft a $600 Billion Dollar Issue

• Home Automation for All: Enabling Independence

• How CSRD and EED are Reshaping Data Center Sustainability Reporting

• Cyberattack Cripples Ukraine’s Largest Telecom Operator

• Final Patch Tuesday of 2023 goes out with a bang

• Ukrainian military intelligence service hacked the Russian Federal Taxation Service

• Spider-Man Developer Insomniac Games Hit by Rhysida Ransomware

• IT Security News Daily Summary 2023-12-12

• cyber attack

• Microsoft Patch Tuesday, December 2023 Edition

• Bitcoin ATM company Coin Cloud got hacked. Even its new owners don’t know how.

• How to choose a free vulnerability scanner: Insights from an industry veteran

• Cyberattack Cripples Ukraine’s Largest Telcom Operator

• Does Your App Accept Digital Wallets?

• Update now! Apple issues patches for older iPhones and other devices

• VERT Threat Alert: December 2023 Patch Tuesday Analysis

• Facebook Scrapes User Photos To Generate AI Images

• Healthcare giant Norton breach leads to theft of millions of patient records

• Snyk Launches ASPM Platform to Secure Software Supply Chains

• Adobe Patches 207 Security Bugs in Mega Patch Tuesday Bundle

• Microsoft Patch Tuesday: Critical Spoofing and Remote Code Execution Flaws

• DEF CON 31 – David Pekoske’s, Sean Lyngaas’, Jen Easterly’s ‘All Information Looks Like Noise Until You Break The Code’

• Mastering SDLC Security: Best Practices, DevSecOps, and Threat Modeling

• Akamai EdgeWorkers for SaaS: Balancing Customization and Security

• Improve Performance with HTTP/2 Stream Prioritization

• Beyond Buzzwords: Glasswing AI palette guides startups navigating AI’s diverse terrain

• How ConductorOne’s Copilot improves identity governance with AI

• December 2023 Patch Tuesday: 33 fixes to wind the year down

• Microsoft releases lightest Patch Tuesday in three years, no zero-days disclosed

• Tor vs. VPN: What They Do and Which is Better

• Meta Publicly Releases End-To-End Encryption For Facebook Messenger

• 9 Best Next-Generation Firewall (NGFW) Solutions for 2023

• Kyivstar, Ukraine’s largest mobile carrier brought down by a cyber attack

• Cloud engineer wreaks havoc on bank network after getting fired

• CISA Unveils Tools to Strengthen Google Cloud Services

• How the EU Cyber Resilience Act Impacts Manufacturers

• How To Build a Financial App With Proactive Security Measures

• Proofpoint Exposes Sophisticated Social Engineering Attack on Recruiters That Infects Their Computers With Malware

• SAP Patches Critical Vulnerability in Business Technology Platform

• Avira security software is causing Windows PCs to freeze up, and there’s no fix in sight

• Black Hat Europe 2023: Should we regulate AI?

• 4 Tips for Safe and Secure Holiday Shopping

• No Robots(.txt): How to Ask ChatGPT and Google Bard to Not Use Your Website for Training

• Discord in the ranks: Lone Airman behind top-secret info leak on chat platform

• Apple Bops Beeper, but iMessage Android Whac-A-Mole Ensues

• Unveiling the Cyber Threats to Healthcare: Beyond the Myths

• Fake Resumes, Real Malware: TA4557 Exploits Recruiters for Backdoor Access

• Unleashing the Power of GPT in Slack With React Integration

• Hardening cellular basebands in Android

• Over 100 WordPress Repository Plugins Affected by Shortcode-based Stored Cross-Site Scripting

• Mozilla VPN Review (2023): Features, Pricing, and Security

• Bitcoin ATM company Coin Cloud got hacked. Even its new owners don’t know how

• Apple Sets Trap to Catch iMessage Impersonators

• Multiple Critical Flaws Found In Zyxel NAS Devices

• Google Updates Chrome bfcache For Faster Page Viewing

• Multi-cloud vs. hybrid cloud: The main difference

• Ukraine’s largest mobile operator Kyivstar downed by ‘powerful’ cyberattack

• Secure your critical roadways infrastructure as you digitize and resolve congestion

• Dubai’s largest taxi app exposes 220K+ users

• Insomniac Game Wolverine Hits Ransomware Attack

• Best VPN for streaming in 2023

• Kelvin Security cybercrime gang suspect seized by Spanish police

• CISA Releases Two Industrial Control Systems Advisories

• Netskope and BT Partner to Provide Secure Managed Services to the Modern Hybrid Enterprise

• What the SEC’s New Incident Disclosure Rules Mean for CISOs

• Lazarus Group Exploits Log4j Flaw in New Malware Campaign

• November 2023’s Most Wanted Malware: New AsyncRAT Campaign Discovered while FakeUpdates Re-Entered the Top Ten after Brief Hiatus

• Something exciting is brewing for NRF24

• Operation Blacksmith: Lazarus exploits Log4j flaws to deploy DLang malware

• AI Tools are Quite Susceptible to Targeted Attacks

• AutoSpill Attack Steal Credentials from Android Password Managers

• Coffee Briefing Dec. 12- Lighthouse Labs’ new cyber upskilling program; Extended security updates for Windows 10; Canada’s AI code of conduct has new signatories; and more

• DataDome Device Check blocks bots from the first request

• Cyber Attack on Ukraine Kyivstar while China disrupts the Critical Infrastructure of the United States

• Oracle Shares Sink On Disappointing Cloud Results

• The Technology That’s Remaking OU Health into a Top-Tier Medical Center

• Why Biden’s EO on AI Conflates the Role of Red-Teaming

• Censys unveils two new product tiers to help researchers enhance their threat hunting work

• Russian APT28 Hackers Targeting 13 Nations in Ongoing Cyber Espionage Campaign

• Widespread Security Flaws Blamed for Northern Ireland Police Data Breach

• SpaceX Scrubs Falcon Heavy Spaceplane Launch At Last Minute

• Lazarus exploit Log4Shell vulnerability to deliver novel RAT malware

• Cybercriminals Are Using Wyoming Shell Companies For Global Hacks

• Atlassian Warns Of Four New Critical Vulnerabilities

• Toyota Germany Says Customer Data Stolen In Ransomware Attack

• North Ireland Cops Count Human Cost Of August Data Breach

• Flaws in Backup Migration and Elementor WordPress Plugins Allow Remote Code Execution

• Why Automation and Consolidation are Key to Restoring Confidence in Cybersecurity

• Reco Employs Graph and AI Technologies to Secure SaaS Apps

• Ukraine’s Largest Phone Operator Hack Tied to War With Russia

• Apple May Open iPhone NFC Access To Competitors

• TechBash: Automation, Security and Development Best Practices in The Poconos

• Edge Computing: Revolutionizing Data Processing and Connectivity

• Stepping into 2024 with a look at emerging cybersecurity risks

• CISA Seeks Public Comment on Newly Developed Secure Configuration Baselines for Google Workspace

• CISA Releases SCuBA Google Workspace Secure Configuration Baselines for Public Comment

• Why Financial Institutions Are Adopting the CRI Profile

• Northern Ireland cops count human cost of August data breach

• Sandman Cyberespionage Group Linked to China

• Air Force Disciplines 15 as IG Finds That Security Failures Led to Massive Classified Documents Leak

• ICS Patch Tuesday: Electromagnetic Fault Injection, Critical Redis Vulnerability

• Recruiters, beware of cybercrooks posing as job applicants!

• Calamu expands support for a wide array of enterprise applications

• Ukraine’s Largest Phone Operator Hacked in “Act of War”

• Toyota Ransomware Attack Exposes Customers Personal Data

• Meet the new CloudGuard: Risk Management in Action

• MFA and supply chain security: It’s no magic bullet

• The Challenges of Building Generative AI Applications in Cybersecurity

• The Next One Billion Lives

• Amplifying Connection and Embracing Collaboration Through Volunteering at Mix 92.6 Community Radio

• Huawei Starts Construction Of First Overseas Plant In France

• Huawei Mate 60 Shows China ‘Progress’ In Replacing US Parts

• How ConductorOne’s Copilot Improves Identity Governance with AI

• New Windows/Linux Firmware Attack

• The sound of you typing on your keyboard could reveal your password

• Toyota Germany Says Customer Data Stolen in Ransomware Attack

• The Top 10, Top 10 Predictions for 2024

• Understanding SBOMs

• LogoFAIL Attack: A Deep Dive into UEFI Vulnerabilities

• Non-Human Access is the Path of Least Resistance: A 2023 Recap

• FBI Issues Guidance for Delaying SEC-Required Data Breach Disclosure

• Toyota Germany Confirms Personal Information Stolen in Ransomware Attack

• Los Angeles Adopts AI Tech for Automated Ticketing of Bus Lane Violators

• “Pool Party” process injection techniques evade EDRs

• BT collaborates with Netskope to minimize the risk of cyber threats

• New MrAnon Stealer Malware Targeting German Users via Booking-Themed Scam

• Threat Actor Targets Recruiters With Malware

• What is CloudSecOps? – A Complete Security Operations Guide – 2024

• US Awards $35m To BAE Systems In First Chips Act Grant

• WordPress Plugin Flaw Exposes 90K+ Websites to Hack Attack

• What to do if your company was mentioned on Darknet?

• Backup Migration WordPress Plugin Flaw Impacts 90,000 Sites

• Apache Warns of Critical Vulnerability in Struts 2

• Fortnite Maker Epic Wins Antitrust Case Against Google

• Apple released iOS 17.2 to address a dozen of security flaws

• BlackBerry squashes plan to spin out its IoT biz

• Apple Releases Security Updates to Patch Critical iOS and macOS Security Flaws

• Interpol moves against human traffickers who enslave people to scam you online

• Watch out for these signs when your smart phone is hacked

• Many popular websites still cling to password creation policies from 1985

• New Critical RCE Vulnerability Discovered in Apache Struts 2 – Patch Now

• The Embedded Systems and The Internet of Things

• Nemesis: Open-source offensive data enrichment and analytic pipeline

• Balancing AI advantages and risks in cybersecurity strategies

• eIDAS: EU’s internet reforms will undermine a decade of advances in online security

• Protecting Children Online: A Parent’s Guide

• WhatsApp, Slack, Teams, and other messaging platforms face constant security risks

• A Gigantic New ICBM Will Take US Nuclear Missiles Out of the Cold War-Era but Add 21st-Century Risks

• Secure Online Shopping: Tips for Smart Homeowners

• A Recap of Our Pragmatic Cyber Risk Management Webinar

• Proposed US surveillance regime would enlist more businesses

• InflateVids – 13,405 breached accounts

• KubeCon 2023: Not Your Father’s Tenable

• Toyota Financial Services discloses a data breach

Generated on 2023-12-13 23:55:43.995577