IT Security News Daily Summary 2024-01-10

• Mullvad VPN Review (2023): Features, Pricing, Security & Speed

• Human Behavior In Digital Forensics, pt III

• Uncle Sam tells hospitals: Meet security standards or no federal dollars for you

• Volexity Catches Chinese Hackers Exploiting Ivanti VPN Zero-Days

• 7 Tips for Effective Cybersecurity Training for Developers

• Job hunter’s guide to the top cybersecurity companies hiring in 2024

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• USENIX Security ’23 – Rosetta: Enabling Robust TLS Encrypted Traffic Classification in Diverse Network Environments with TCP-Aware Traffic Augmentation

• Impact of HPE’s US$14 billion buy of Juniper huge: Dell’Oro Group

• HMG Healthcare disclosed a data breach

• US government tells hospitals: Meet security standards or no federal dollars for you

• ExtraHop Banks $100M in Growth Funding, Adds New Execs

• The Exploration of Static vs Dynamic Code Analysis

• Be honest. Would you pay off a ransomware crew?

• Volkswagen Goes AI, Integrates ChatGPT into its Vehicles

• 7 Considerations for Multi-Cluster Kubernetes

• EU lawmakers under pressure to fully disclose dealings with child safety tech maker, Thorn

• EFF Unveils Its New Street Level Surveillance Hub

• We Are Almost 3! Cloud Security Podcast by Google 2023 Reflections

• Securing Infinispan With Keycloak

• GCP to AWS Migration: A Comprehensive Guide

• Ivanti Releases Security Update for Connect Secure and Policy Secure Gateways

• Kasada Embraces Machine Learning to Reduce Bot Traffic

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #274 – The World-Renowned Agile Coach

• BT’s Successor Allison Kirkby To Start As CEO On 1 February

• HMG Healthcare Says Data Breach Impacts 40 Facilities

• Cypher Queries in BloodHound Enterprise

• China Cracks Apple Private Protocol — AirDrop Pwned

• China Cracks Apple Encryption, Claims It Can Identify AirDrop Senders

• Python in Threat Intelligence: Analyzing and Mitigating Cyber Threats

• Automation driving AI adoption, but lack of right skillsets slowing down returns

• Singapore keeping its eye on data centers and data models as AI adoption grows

• Cybercrooks play dress-up as ‘helpful’ researchers in latest ransomware ruse

• PRODUCT REVIEW: MIXMODE PLATFORM FOR REAL-TIME THREAT DETECTION

• Facebook Will Make It Harder For Teens To See Harmful Content

• CISA Adds One Known Exploited Vulnerability to Catalog

• Texas-based care provider HMG Healthcare says hackers stole unencrypted patient data

• A startup’s guide to cyberthreats — threat modeling and proactive security

• Myanmar Rebels Take Authority of ‘Pig Butchering’ Scam City Laukkaing

• Chatbots: Transforming Tech, Creating Jobs, and Making Waves

• NoaBot: Latest Mirai-Based Botnet Targeting SSH Servers for Crypto Mining

• Hackers promise to delete ransomware data for small fees

• Harnessing Computer Vision for retail with AI

• USENIX Security ’23 – Meng Shen, Kexin Ji, Zhenbo Gao, Qi Li, Liehuang Zhu, Ke Xu – Subverting Website Fingerprinting Defenses with Robust Traffic Representation

• Italian Firm Trains Pakistani Navy Officers in Cybersecurity, Raising Concerns

• Type Juggling Leads to Two Vulnerabilities in POST SMTP Mailer WordPress Plugin

• The best VPN deals right now

• Lawmakers Are Out for Blood After a Hack of the SEC’s X Account Causes Bitcoin Chaos

• Keeper Security Unveils Granular Sharing Enforcements for Easier Compliance

• ShinyHunters chief phisherman gets 3 years, must cough up $5M

• Warning: A fake ‘security researcher’ is trying to trick ransomware victims

• Meta To Hide Eating Disorder, Suicide Posts From Teenagers

• Adobe Substance 3D Stager Let Attacker Execute Arbitrary Code

• How Healthcare Organizations can use ASPM to Fill CSPM Coverage Gaps and Save Money

• Twitch To Lay Off 35 Percent Of Staff – Report

• Apple AirDrop Hacked by China to Gain Access to Private Information

• Threat actors hacked the X account of the Securities and Exchange Commission (SEC) and announced fake Bitcoin ETF approval

• Privacy Badger Puts You in Control of Widgets

• Anecdotes Raises $25 Million for Enterprise GRC Platform

• How Much Do You Know About the Files Entering Your Endpoints?

• 2023 Updates in Review: Malware Analysis and Threat Hunting

• OpenAI: Turning Into Healthcare Company?

• Three Ways Jio’s BharatGPT Will Give It an Edge Over ChatGPT

• Dasera expands data security posture management capabilities to Microsoft 365

• Hackers are targeting exposed MS SQL servers with Mimic ransomware

• Cyber Insecurity and Misinformation Top WEF Global Risk List

• Malware Takedowns Show Progress, But Fight Against Cybercrime Not Over

• Fujitsu, facing heat over UK Post Office scandal, continues to rake in billions from government deals

• Crooks Pose As Researchers To Retarget Ransomware Victims

• US Navy Sailor Swaps Sea For Cell After Accepting Bribes From Chinese Snoops

• This AI Chatbot Is Trained To Jailbreak Other Chatbots

• Bitcoin ETF Hopefuls Still Expect SEC Approval Despite Social Media Hack

• Babuk Tortilla Ransomware Decrypted After Hacker’s Arrest

• The Role of Just-in-Time Self-Service Access in Privileged Access Management

• Only 4% of US States Fully Prepared for Cyber-Attacks Targeting Elections

• A Comprehensive Guide to Cloud-Init: Automating Cloud Instance Initialization

• extended detection and response (XDR)

• Here’s Some Bitcoin: Oh, and You’ve Been Served!

• AI Is Changing Security — 5 Predictions from Cortex

• SEC’s X account hacked to post fake news of Bitcoin ETF approval

• Microsoft Returns to the Top Spot as the Most Imitated Brand in Phishing Attacks for Q4 2023

• SAP’s First Patches of 2024 Resolve Critical Vulnerabilities

• Kyocera Device Manager Vulnerability Exposes Enterprise Credentials

• Enhancing Organisational Security: A Comprehensive Guide to Insider Risk Management Courses

• User-Friendly Update: Clear Your Chrome History on Android with Ease

• SEC Investigates After Fake Post On X/Twitter Account

• Hewlett Packard Enterprise To Acquire Juniper Networks For $14 Billion

• China Says State-Backed Experts Crack Apple’s AirDrop

• Dutch Engineer Used Water Pump to Get Billion-Dollar Stuxnet Malware Into Iranian Nuclear Facility: Report

• Getting off the Attack Surface Hamster Wheel: Identity Can Help

• Microsoft Rolls Out January 2024 Patch Tuesday With 49 Bug Fixes

• Cyber Security Today, Jan. 10, 2024 – Vulnerabilities found in internet-connected factory torque wrenches

• Bluefin enhances ShieldConex with enterprise security proxy service

• Free Decryptor Released for Black Basta and Babuk’s Tortilla Ransomware Victims

• Cyber Insurance Market to be Worth Over $90bn by 2033

• Vodafone network not down by Cyber Attack

• Protecting Your Digital Space: A Guide on How to Stay Cyber Safe on Social Media

• SEC X (Twitter) Account Hacked, Spreads Fake News About Bitcoin ETFs

• Water Curupira Hackers Launch Pikabot Malware Attack on Windows Machine

• Love is in the AI: Finding love online takes on a whole new meaning

• Entire population of Brazil possibly exposed in massive data leak

• Cato Networks Names Cybersecurity Veteran to Lead Northern Europe and Middle East & Africa

• UAE Confirms Trial Against 84 Detainees; Ahmed Mansoor Suspected Among Them

• A Retrospective on DDoS Trends in 2023 and Actionable Strategies for 2024

• anecdotes raises $25 million to introduce new data-driven innovations to the GRC landscape

• Ukrainian “Blackjack” Hackers Take Out Russian ISP

• Tripwire Patch Priority Index for December 2023

• VERT Threat Alert: January 2024 Patch Tuesday Analysis

• Non-repudiation: Your Virtual Shield in Cybersecurity

• The Evolution of Anomaly Detection and the Importance of Configuration Monitoring in Cybersecurity

• Know Thyself and Thy Network

• FTC Bans Outlogic (X-Mode) From Selling Sensitive Location Data

• Microsoft Fixes 12 RCE Bugs in January Patch Tuesday

• Decryptor for Tortilla variant of Babuk ransomware released

• Key Events of 2023 for NSFOCUS WAF

• Beware! Hackers Using YouTube Channels to Deliver Lumma Malware

• Hackers Using Weaponized PDF Files to Deliver Qakbot Malware

• Cacti Blind SQL Injection Flaw Enables Remote Code Execution

• Microsoft’s January 2024 Windows Update Patches 48 New Vulnerabilities

• How 50% of telco Orange Spain’s traffic got hijacked — a weak password

• Fly Catcher: Detect aircraft spoofing by monitoring for malicious signals

• Top LLM vulnerabilities and how to mitigate the associated risk

• The power of basics in 2024’s cybersecurity strategies

• CISA Flags 6 Vulnerabilities – Apple, Apache, Adobe , D-Link, Joomla Under Attack

• New year, new updates for security holes in Windows, Adobe, Android and more

• Female cyber pros group targeted in phishing scam

• The Deepest Gipsy King of Them All? – Yavor Kolev – A Dipshit Courtesy of Republic of Bulgaria on the “International” – “I Have Never Left the Country” Law Enforcement “Scene”

• Researchers develop technique to prevent software bugs

• Hewlett Packard Enterprise to Acquire Juniper Networks for $14 Billion

• SEC Chair Says Account on X Was Hacked

• Hold Account Takeover Attempts at Bay with New Integrated Password Strength Evaluator | Impart Security

• The SEC’s Official X Account Was ‘Compromised’ and Used to Post Fake Bitcoin News

• Fidelity National Financial says hackers stole data on 1.3 million customers

• Microsoft Patch Tuesday for January 2024 fixed 2 critical flaws

• New year, more bugs in Windows, Adobe, Android to be fixed

• ARMO announces new Slack integration

• IT Security News Daily Summary 2024-01-09

• The SEC’s Official X Account Was ‘Compromised’ and Used to Post Fake Bitcoin News

• Next generation digital substation WAN

• SEC Twitter hijacked to push fake news of hotly anticipated Bitcoin ETF approval

• New year, new bugs in Windows, Adobe, Android, more to be fixed

• SEC Twitter hijacked to push fake news of hotly anticipated ETF approval

• USENIX Security ‘An Input-Agnostic Hierarchical Deep Learning Framework For Traffic Fingerprinting’

• Arctic Wolf Survey Surfaces Election Security Fears

• Amsterdam arrest leads to Babuk Tortilla ransomware decryptor

• PRODUCT REVIEW: ENEA QOSMOS THREAT DETECTION SDK

• Indian ISP Hathway Data Breach: Hacker Leaks 4 Million Users, KYC Data

• The Evolution of Authorization Controls: Exploring PBAC and Its Benefits

• Identity Theft Statistics

• Unlocking The Potential Of Mvp: 5 Ways It Revolutionizes Software Development

• Fortinet Releases Security Updates for FortiOS and FortiProxy

• Microsoft fixes critical flaws in Windows Kerberos, Hyper-V (CVE-2024-20674, CVE-2024-20700)

• AI aids nation-state hackers but also helps US spies to find them, says NSA cyber director

• Microsoft starts off new year with relatively light Patch Tuesday, no zero-days

• Hey Google: If AI is replacing Google Assistant, I have two questions

• sandbox

• FTC bans X-Mode from selling phone location data, and orders firm to delete collected data

• AI aides nation-state hackers but also helps US spies to find them, says NSA cyber director

• CISA adds Apache Superset bug to its Known Exploited Vulnerabilities catalog

• Delinea Acquires Authomize to Tackle Identity-Based Threats

• Microsoft Ships Urgent Fixes for Critical Flaws in Windows Kerberos, Hyper-V

• Survey: Election Workers Feel Unprepared for Upcoming Cyberthreats

• Top 7 enterprise cybersecurity challenges in 2024

• Cyber Intruders Disrupt Operations at Beirut International Airport

• Siemens, Schneider Electric Release First ICS Patch Tuesday Advisories of 2024

• Adobe Patches Code Execution Flaws in Substance 3D Stager

• CISA Warns of Apache Superset Vulnerability Exploitation

• Infographic: A History of Network Device Threats and What Lies Ahead

• Demystifying Cloud Trends: Statistics and Strategies for Robust Security

• Many IT departments still don’t know how many APIs they have: Report

• The Technology Powering Trading Signals in Binary Options: A Deep Dive

• Leveraging a digital twin with machine learning to revitalize bridges

• USENIX Security ’23 – ‘HorusEye: A Realtime IoT Malicious Traffic Detection Framework Using Programmable Switches’

• 2024 Cybersecurity Predictions

• SpecterOps adds new Attack Paths to BloodHound Enterprise

• Alert: Water Curupira Hackers Actively Distributing PikaBot Loader Malware

• Flaw in AI Plugin Exposes 50,000 WordPress Sites to Remote Attack

• How Sekoia.io empowers cybersecurity with 170+ integrations

• Securing the Electric Vehicle Charging Infrastructure

• Turkish Hackers Target Microsoft SQL Servers in Americas, Europe

• What are the Privacy Measures Offered by Character AI?

• Hackers Find a Way to Gain Password-Free Access to Google Accounts

• Critical Start Asset Visibility helps customers become more proactive within their security program

• Deep dive into synthetic voice phishing (vishing) defense

• CISA Releases One Industrial Control Systems Advisory

• LockBit ransomware gang claims the attack on Capital Health

• Turkish Hackers Target Microsoft SQL Servers In Americas, Europe

• LoanDepot Systems Offline Following Ransomware Attack

• Hackers Can Infect Network-Connected Wrenches To Install Ransomware

• Apache OFBiz Zero Day Pummeled By Exploit Attempts After Disclosure

• Harnessing the Power of Trillions: DataDome Continues to Expand Signals Collection For Most Accurate ML Detection Models

• Dell Survey Surfaces Lack of Ransomware Resiliency

• Attackers could use vulnerabilities in Bosch Rexroth nutrunners to disrupt automotive production

• 82% of Companies Struggle to Manage Security Exposure

• How to smartly tackle BlackCat Ransomware group

• Continuity in Chaos: Applying Time-Tested Incident Response to Modern Cybersecurity

• My Yearly Look Back, a Look Forward and a Warning

• Browser security is the key to stopping ransomware attacks

• Deciphering Cybersecurity Vulnerabilities Requires Context

• Cloudflare Report Surfaces Lots of API Insecurity

• Coming March 2024: How to Prepare for PCI DSS Version 4.0 Compliance

• Automotive Industry Under Ransomware Attacks: Proactive Measures

• Integrating the Power of AI and Blockchain for Data Security and Transparency

• ID R&D introduces voice clone detection to protect users against audio deepfakes

• What CISOs Need to Know About Data Privacy in 2024

• EU Regulators Examining Microsoft’s OpenAI Investment

• NASA ‘To Push Back Artemis Moon Missions’

• Silex Technology AMC Protect improves cybersecurity for critical devices

• Turkish Hackers Exploiting Poorly Secured MS SQL Servers Across the Globe

• REVIEW: ISC2 CERTIFIED CLOUD SECURITY PROFESSIONAL (CCSP) CERTIFICATION

• Cybersecurity trends: IBM’s predictions for 2024

• Delinea acquires Authomize to help organizations reduce identity-related risk

• Cybersecurity Deals Boom as Investment Dips, Pinpoint Reports

• CES 2024: Gadget Makers Add AI To TVs, Cars

• Judge Orders Google Not To Google Jurors In $7bn AI Patent Case

• McAfee’s Mockingbird AI Tool Detects Deepfake Audio with 90% accuracy

• December 2023’s Most Wanted Malware: The Resurgence of Qbot and FakeUpdates

• And that’s a wrap for Babuk Tortilla ransomware as free decryptor released

• Ransomware Gang Claims Attack on Capital Health

• LoanDepot Takes Systems Offline Following Ransomware Attack

• Bosch Nutrunner Vulnerabilities Could Aid Hacker Attacks Against Automotive Production Lines

• Character.ai’s AI Chatbots Soar: Celebrities, Therapists, and Entertainment, All in One Platform

• Viavi enhances Observer Platform to maximize network availability, productivity and compliance

• Ta-da Raises $3.5M to Build Out Its AI Data Marketplace

• Award Winning Antivirus, On Sale for $25, Offers Elite Protection from Malware

• Cisco Allowed Me To Start My Family, Stress-Free

• Egress Security: Part of a Holistic, Multidirectional Security Strategy for Today’s Multicloud World

• Customer Success Stories – Year in Review

• February 1, 2024: A Date All Email Senders Should Care About

• Cybersecurity Funding Dropped 40% in 2023: Analysis

• Alert: Chinese Threat Actors Exploit Barracuda Zero-Day Flaw

• Embedded Linux IoT Security: Defending Against Cyber Threats

• Attackers Targeting Poorly Managed Linux SSH Servers

• Digital Battlefield: Syrian Threat Group’s Sinister SilverRAT Emerges

• Nvidia Finds Reduced China Demand For Slower Chips

• The Ultimate Guide To Securing Virtual Machines

• 12 Software Development Predictions for a Futuristic World

• US Mortgage Lender LoanDepot Confirms Cyber Incident – Faces Ransomware Attack

• New Decryption Key Available for Babuk Tortilla Ransomware Victims

• Cacti Blind, SQL Injection Flaw, Enables Remote Code Execution

• SQLi vulnerability in Cacti could lead to RCE (CVE-2023-51448)

• Why Public Links Expose Your SaaS Attack Surface

• Multiple QNAP High-Severity Flaws Let Attackers Execute Remote Code

• CES 2024: Nvidia Stock Surges After AI Graphics Card Launch

• 1-15 November 2023 Cyber Attacks Timeline

• Alert: New Vulnerabilities Discovered in QNAP and Kyocera Device Manager

• Zyxel unveils new cloud-managed switches for small businesses and professional home users

• “Security researcher” offers to delete data stolen by ransomware attackers

• Nigerian Gets 10 Years For Laundering Scam Funds

• Samsung Reports Larger Profit Drop Than Expected

• Syrian group Anonymous Arabic distributes stealthy malware Silver RAT

• Analysis of OT cyberattacks and malwares

• Beware! YouTube Videos Promoting Cracked Software Distribute Lumma Stealer

• LoanDepot Confirms Ransomware Attack in SEC Filing

• New decryptor for Babuk Tortilla ransomware variant released

• What to do if I think I’ve been hacked? Checklist

• Accenture Buys 6point6 to Expand Cyber Portfolio

• Discover the Consequences of a Data Breach

• BlueHat India Call for Papers is Now Open!

• Surge in Open Source Malware Stealing Login Credentials & Sensitive Data

• Incorporating Mobile Threat Defense into Your Device Management Ecosystem

• If you prepare, a data security incident will not cause an existential crisis

• AI And Ad Fraud: Growing Risks for Marketers Using Google’s AI-Based Advertising Campaigns

• Bolster an Organizational Cybersecurity Strategy with External Data Privacy

• Ransomware hackers threaten to send SWAT teams to victimized patients

• Understanding zero-trust design philosophy and principles

• The growing challenge of cyber risk in the age of synthetic media

• Accelerate essential cyber hygiene for your small business

• Securing AI systems against evasion, poisoning, and abuse

• NSFOCUS named a Major Player in IDC MarketScape: Worldwide Risk-Based Vulnerability Management Platforms 2023 Vendor Assessment

• Life in the Swimlane with Principal Data Scientist, Dima Skorokhodov

• Craig Newmark Philanthropies – Celebrating 30 Years of Support for Digital Rights

Generated on 2024-01-10 23:55:42.829204