IT Security News Daily Summary 2024-01-11

• eBay to cough up $3M after cyber-stalking couple who dared criticize the souk

• Why BYOD Is the Favored Ransomware Backdoor

• Python’s Poisoned Package: Another ‘Blank Grabber’ Malware in PyPI

• FTC Bars X-Mode from Selling Sensitive Location Data

• eBay coughs up $3M for cyber-stalking couple who dared criticize the souk

• Researchers Flag FBot Hacking Tool Hijacking Cloud, Payment Services

• USENIX Security ’23 – Wenjun Zhu, Xiaoyu Ji, Yushi Cheng, Shibo Zhang, Wenyuan Xu ‘TPatch: A Triggered Physical Adversarial Patch’

• AI Helps With the Implementation of Simulated Cyber Defense Techniques

• Singapore’s guidelines to bolster mobile app security are optional – for now

• Ivanti confirms 2 zero-day vulnerabilities are under attack

• Mandiant: X Account Hacked in Brute-Force Attack Linked to ClinkSink Campaign

• Netskope Report Surfaces Raft of Cybersecurity Challenges

• Mirai-based NoaBot Botnet Targeting Linux Systems with Cryptominer

• Bitcoin ETFs Approved Following Official SEC X Account Compromise

• Accelerating into 2024 with NEOM McLaren Formula E Team

• Build Cyber Resilience with Distributed Energy Systems

• Microsoft Briefly Overtakes Apple As Most Valuable Tech Company

• This is why AI-powered misinformation is the top global risk

• DPython’s Poisoned Package: Another ‘Blank Grabber’ Malware in PyPI

• Mandiant’s brute-forced X account exposes perils of skimping on 2FA

• Microsoft Lets Cloud Users Keep Personal Data Within Europe to Ease Privacy Fears

• NoaBot Pwns Hundreds of SSH Servers as Crypto Miners

• Is it possible to use an external SSD to speed up your Mac?

• Why We Need Cybersecurity Whistleblowers

• Fast, Secure, and Highly Available Real-Time Data Warehousing Based on Apache Doris

• Jakarta EE Security: Using Identity Stores

• 6 Best Anonymous (No-Log) VPNs for 2024

• How to securely recycle enterprise computers

• Empowering Crisis-Affected Communities: Cisco’s Commitment to IRC Signpost

• Hackers Stole Data of 1.3 Million Financial National Fidelity Users

• Microsoft’s January 2024 Patch Tuesday Addresses 49 Vulnerabilities, Including Two Critical Vulnerabilities

• Hays Research Reveals the Increasing AI Adoption in Scottish Workplaces

• Warning issued to admins of Ivanti Connect Secure and Policy Secure gateways

• Wordfence Intelligence Weekly WordPress Vulnerability Report (January 1, 2023 to January 7, 2023)

• A geofence warrant typo cast a location dragnet spanning two miles over San Francisco

• Government To Quash All Post Office Horizon Convictions

• Strong Encryption Explained: 6 Encryption Best Practices

• Cisco Releases Security Advisory for Cisco Unity Connection

• Juniper Networks Releases Security Bulletin for Junos OS and Junos OS Evolved

• Two zero-day bugs in Ivanti Connect Secure actively exploited

• CISA adds Ivanti and Microsoft SharePoint bugs to its Known Exploited Vulnerabilities catalog

• China-Linked Volt Typhoon Hackers Possibly Targeting Australian, UK Governments

• Coming Soon to a Network Near You: More Shadow IoT

• Implementation Flaws Identified in Post-Quantum Encryption Algorithm

• Mandiant admits hacked X account didn’t have 2FA

• Threat Actors Increasingly Abusing GitHub for Malicious Purposes

• What to do when social media accounts get hacked or impersonated

• Mullvad VPN Review (2024): Features, Pricing, Security & Speed

• State-backed hackers are exploiting new Ivanti VPN zero-days — but no patches yet

• Infoseccers think attackers backed by China are behind Ivanti zero-day exploits

• The Role of XBOMs in Supporting Cybersecurity

• SentinelLabs Details Discovery of FBot Tool for Compromising Cloud Services

• FTC Issues Its First-Ever Order Against a Data Broker

• New Python-based FBot Hacking Toolkit Aims at Cloud and SaaS Platforms

• New PoC Exploit for Apache OfBiz Vulnerability Poses Risk to ERP Systems

• Microsoft To Allow Cloud Users To Store Personal Data In Europe

• Cisco wins Manufacturing Solution of the Year award for integrating industrial security with networking

• Critical Security Vulnerabilities Identified in ConnectWise ScreenConnect by Gotham Security Researchers

• Exploring FBot  | Python-Based Malware Targeting Cloud and Payment Services

• Child Abusers Are Getting Better at Using Crypto to Cover Their Tracks

• AI-Powered Misinformation is the World’s Biggest Short-Term Threat, Davos Report Says

• Medusa Ransomware Turning Your Files into Stone

• Google’s $2.7bn EU Antitrust Fine Should Be Upheld – Court Advisor

• Mirai-Based NoaBot Launches a DDoS Attack on Linux Devices

• This Malware is Assaulting Critical US Infrastructure for Almost a Year

• Swatting: Cyber Attacks on Healthcare

• 5 ways to secure identity and access for 2024

• 1.3 Million FNF Customers’ Data Potentially Exposed in Ransomware Attack

• Safe shopping this sales season

• Azure MACC Credits Gathering Dust? Use Them to Get the Best Prevention-First Security

• 2024 Digital Resolutions: Use Stronger Passwords

• SANS Institute Survey Surfaces State of Cybersecurity Defenses

• Cisco Patches Critical Vulnerability in Unity Connection Product

• CISA Urges Patching of Exploited SharePoint Server Vulnerability

• What’s The Difference Between Machine and Workload Identity?

• Radiant Logic combines AI and data to reinvent the user access review process

• There is a Ransomware Armageddon Coming for Us All

• Google Axes Staff In Assistant, Hardware, Engineering Teams

• US School Shooter Emergency Plans Exposed in a Highly Sensitive Database Leak

• Atomic Stealer Gets an Upgrade – Targeting Mac Users with Encrypted Payload

• Mandiant’s X Account Was Hacked in Brute-Force Password Attack

• SEC Approves Bitcoin ETFs, As Crypto Industry Rejoices

• Dutch Man Deployed Stuxnet via Water Pump to Disable Iran’s Nukes

• X Account of leading cybersecurity firm Mandiant was hacked because not adequately protected

• Back to the Basics: Security Must-Haves for 2024, Part I

• Ivanti Connect Secure zero-days exploited by attackers (CVE-2023-46805, CVE-2024-21887)

• Critical Cisco Unity Connection flaw gives attackers root privileges. Patch now! (CVE-2024-20272)

• Guardians of Finance: loanDepot Confronts Alleged Ransomware Offensive

• VicOne partners with BlackBerry to help detect cyberthreats to connected cars

• NCSC Publishes Practical Security Guidance For SMBs

• Why US SEC X Account Hacked? Here is The Reason

• Vanta appoints Jadee Hanson as CISO

• Two Ivanti Zero-Days Actively Exploited in the Wild

• Attack of the copycats: How fake messaging apps and app mods could bite you

• Employee giving and volunteerism drives positive business outcomes

• Bitwarden: how to create and use Passkeys to sign in

• Cisco fixed critical Unity Connection vulnerability CVE-2024-20272

• Mandiant’s X Account Was Hacked Using Brute-Force Attack

• Encrypting Data Using Asymmetric Encryption: A Comprehensive Guide

• The Crucial Need for a Secure Software Development Lifecycle (SSDLC) in Today’s Digital Landscape

• Beyond Passwords: AI-Enhanced Authentication in Cyber Defense

• Purple teaming and the role of threat categorization

• Cisco Fixes High-Risk Vulnerability Impacting Unity Connection Software

• Chinese Hackers Exploit Zero-Day Flaws in Ivanti Connect Secure and Policy Secure

• Network connected wrenches are now vulnerable to Ransomware attacks

• Embracing offensive cybersecurity tactics for defense against dynamic threats

• The expanding scope of CISO duties in 2024

• Hundreds of Thousands of Dollars Worth of Solana Cryptocurrency Assets Stolen in Recent CLINKSINK Drainer Campaigns

• APIs are increasingly becoming attractive targets

• Exploring The Benefits Of Multi-Factor Authentication For Security

• Ransomware prevention a focus for storage stewards in 2024

• Beyond the Crystal Ball: What API security may look like in 2024

• Sustainability 101: What are smart grids?

• Fidelity National now says 1.3M customers had data stolen by cyber-crooks

• ShinyHunters member sentenced to three years in prison

• IT Security News Daily Summary 2024-01-10

• Mullvad VPN Review (2023): Features, Pricing, Security & Speed

• Human Behavior In Digital Forensics, pt III

• Uncle Sam tells hospitals: Meet security standards or no federal dollars for you

• Volexity Catches Chinese Hackers Exploiting Ivanti VPN Zero-Days

• 7 Tips for Effective Cybersecurity Training for Developers

• Job hunter’s guide to the top cybersecurity companies hiring in 2024

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• USENIX Security ’23 – Rosetta: Enabling Robust TLS Encrypted Traffic Classification in Diverse Network Environments with TCP-Aware Traffic Augmentation

• Impact of HPE’s US$14 billion buy of Juniper huge: Dell’Oro Group

• HMG Healthcare disclosed a data breach

• US government tells hospitals: Meet security standards or no federal dollars for you

• ExtraHop Banks $100M in Growth Funding, Adds New Execs

• The Exploration of Static vs Dynamic Code Analysis

• Be honest. Would you pay off a ransomware crew?

• Volkswagen Goes AI, Integrates ChatGPT into its Vehicles

• 7 Considerations for Multi-Cluster Kubernetes

• EU lawmakers under pressure to fully disclose dealings with child safety tech maker, Thorn

• EFF Unveils Its New Street Level Surveillance Hub

• We Are Almost 3! Cloud Security Podcast by Google 2023 Reflections

• Securing Infinispan With Keycloak

• GCP to AWS Migration: A Comprehensive Guide

• Ivanti Releases Security Update for Connect Secure and Policy Secure Gateways

• Kasada Embraces Machine Learning to Reduce Bot Traffic

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #274 – The World-Renowned Agile Coach

• BT’s Successor Allison Kirkby To Start As CEO On 1 February

• HMG Healthcare Says Data Breach Impacts 40 Facilities

• Cypher Queries in BloodHound Enterprise

• China Cracks Apple Private Protocol — AirDrop Pwned

• China Cracks Apple Encryption, Claims It Can Identify AirDrop Senders

• Python in Threat Intelligence: Analyzing and Mitigating Cyber Threats

• Automation driving AI adoption, but lack of right skillsets slowing down returns

• Singapore keeping its eye on data centers and data models as AI adoption grows

• Cybercrooks play dress-up as ‘helpful’ researchers in latest ransomware ruse

• PRODUCT REVIEW: MIXMODE PLATFORM FOR REAL-TIME THREAT DETECTION

• Facebook Will Make It Harder For Teens To See Harmful Content

• CISA Adds One Known Exploited Vulnerability to Catalog

• Texas-based care provider HMG Healthcare says hackers stole unencrypted patient data

• A startup’s guide to cyberthreats — threat modeling and proactive security

• Myanmar Rebels Take Authority of ‘Pig Butchering’ Scam City Laukkaing

• Chatbots: Transforming Tech, Creating Jobs, and Making Waves

• NoaBot: Latest Mirai-Based Botnet Targeting SSH Servers for Crypto Mining

• Hackers promise to delete ransomware data for small fees

• Harnessing Computer Vision for retail with AI

• USENIX Security ’23 – Meng Shen, Kexin Ji, Zhenbo Gao, Qi Li, Liehuang Zhu, Ke Xu – Subverting Website Fingerprinting Defenses with Robust Traffic Representation

• Italian Firm Trains Pakistani Navy Officers in Cybersecurity, Raising Concerns

• Type Juggling Leads to Two Vulnerabilities in POST SMTP Mailer WordPress Plugin

• The best VPN deals right now

• Lawmakers Are Out for Blood After a Hack of the SEC’s X Account Causes Bitcoin Chaos

• Keeper Security Unveils Granular Sharing Enforcements for Easier Compliance

• ShinyHunters chief phisherman gets 3 years, must cough up $5M

• Warning: A fake ‘security researcher’ is trying to trick ransomware victims

• Meta To Hide Eating Disorder, Suicide Posts From Teenagers

• Adobe Substance 3D Stager Let Attacker Execute Arbitrary Code

• How Healthcare Organizations can use ASPM to Fill CSPM Coverage Gaps and Save Money

• Twitch To Lay Off 35 Percent Of Staff – Report

• Apple AirDrop Hacked by China to Gain Access to Private Information

• Threat actors hacked the X account of the Securities and Exchange Commission (SEC) and announced fake Bitcoin ETF approval

• Privacy Badger Puts You in Control of Widgets

• Anecdotes Raises $25 Million for Enterprise GRC Platform

• How Much Do You Know About the Files Entering Your Endpoints?

• 2023 Updates in Review: Malware Analysis and Threat Hunting

• OpenAI: Turning Into Healthcare Company?

• Three Ways Jio’s BharatGPT Will Give It an Edge Over ChatGPT

• Dasera expands data security posture management capabilities to Microsoft 365

• Hackers are targeting exposed MS SQL servers with Mimic ransomware

• Cyber Insecurity and Misinformation Top WEF Global Risk List

• Malware Takedowns Show Progress, But Fight Against Cybercrime Not Over

• Fujitsu, facing heat over UK Post Office scandal, continues to rake in billions from government deals

• Crooks Pose As Researchers To Retarget Ransomware Victims

• US Navy Sailor Swaps Sea For Cell After Accepting Bribes From Chinese Snoops

• This AI Chatbot Is Trained To Jailbreak Other Chatbots

• Bitcoin ETF Hopefuls Still Expect SEC Approval Despite Social Media Hack

• Babuk Tortilla Ransomware Decrypted After Hacker’s Arrest

• The Role of Just-in-Time Self-Service Access in Privileged Access Management

• Only 4% of US States Fully Prepared for Cyber-Attacks Targeting Elections

• A Comprehensive Guide to Cloud-Init: Automating Cloud Instance Initialization

• extended detection and response (XDR)

• Here’s Some Bitcoin: Oh, and You’ve Been Served!

• AI Is Changing Security — 5 Predictions from Cortex

• SEC’s X account hacked to post fake news of Bitcoin ETF approval

• Microsoft Returns to the Top Spot as the Most Imitated Brand in Phishing Attacks for Q4 2023

• SAP’s First Patches of 2024 Resolve Critical Vulnerabilities

• Kyocera Device Manager Vulnerability Exposes Enterprise Credentials

• Enhancing Organisational Security: A Comprehensive Guide to Insider Risk Management Courses

• User-Friendly Update: Clear Your Chrome History on Android with Ease

• SEC Investigates After Fake Post On X/Twitter Account

• Hewlett Packard Enterprise To Acquire Juniper Networks For $14 Billion

• China Says State-Backed Experts Crack Apple’s AirDrop

• Dutch Engineer Used Water Pump to Get Billion-Dollar Stuxnet Malware Into Iranian Nuclear Facility: Report

• Getting off the Attack Surface Hamster Wheel: Identity Can Help

• Microsoft Rolls Out January 2024 Patch Tuesday With 49 Bug Fixes

• Cyber Security Today, Jan. 10, 2024 – Vulnerabilities found in internet-connected factory torque wrenches

• Bluefin enhances ShieldConex with enterprise security proxy service

• Free Decryptor Released for Black Basta and Babuk’s Tortilla Ransomware Victims

• Cyber Insurance Market to be Worth Over $90bn by 2033

• Vodafone network not down by Cyber Attack

• Protecting Your Digital Space: A Guide on How to Stay Cyber Safe on Social Media

• SEC X (Twitter) Account Hacked, Spreads Fake News About Bitcoin ETFs

• Water Curupira Hackers Launch Pikabot Malware Attack on Windows Machine

• Love is in the AI: Finding love online takes on a whole new meaning

• Entire population of Brazil possibly exposed in massive data leak

• Cato Networks Names Cybersecurity Veteran to Lead Northern Europe and Middle East & Africa

• UAE Confirms Trial Against 84 Detainees; Ahmed Mansoor Suspected Among Them

• A Retrospective on DDoS Trends in 2023 and Actionable Strategies for 2024

• anecdotes raises $25 million to introduce new data-driven innovations to the GRC landscape

• Ukrainian “Blackjack” Hackers Take Out Russian ISP

• Tripwire Patch Priority Index for December 2023

• VERT Threat Alert: January 2024 Patch Tuesday Analysis

• Non-repudiation: Your Virtual Shield in Cybersecurity

• The Evolution of Anomaly Detection and the Importance of Configuration Monitoring in Cybersecurity

• Know Thyself and Thy Network

• FTC Bans Outlogic (X-Mode) From Selling Sensitive Location Data

• Microsoft Fixes 12 RCE Bugs in January Patch Tuesday

• Decryptor for Tortilla variant of Babuk ransomware released

• Key Events of 2023 for NSFOCUS WAF

• Beware! Hackers Using YouTube Channels to Deliver Lumma Malware

• Hackers Using Weaponized PDF Files to Deliver Qakbot Malware

• Cacti Blind SQL Injection Flaw Enables Remote Code Execution

• Microsoft’s January 2024 Windows Update Patches 48 New Vulnerabilities

• How 50% of telco Orange Spain’s traffic got hijacked — a weak password

• Fly Catcher: Detect aircraft spoofing by monitoring for malicious signals

• Top LLM vulnerabilities and how to mitigate the associated risk

• The power of basics in 2024’s cybersecurity strategies

• CISA Flags 6 Vulnerabilities – Apple, Apache, Adobe , D-Link, Joomla Under Attack

• New year, new updates for security holes in Windows, Adobe, Android and more

• Female cyber pros group targeted in phishing scam

• The Deepest Gipsy King of Them All? – Yavor Kolev – A Dipshit Courtesy of Republic of Bulgaria on the “International” – “I Have Never Left the Country” Law Enforcement “Scene”

• Researchers develop technique to prevent software bugs

• Hewlett Packard Enterprise to Acquire Juniper Networks for $14 Billion

• SEC Chair Says Account on X Was Hacked

• Hold Account Takeover Attempts at Bay with New Integrated Password Strength Evaluator | Impart Security

Generated on 2024-01-11 23:55:48.686582