IT Security News Daily Summary 2024-01-12

• Newly Discovered Ivanti Secure VPN Zero-Day Vulnerabilities Allow Chinese Threat Actor to Compromise Systems

• tunneling or port forwarding

• Juniper Networks fixed a critical RCE bug in its firewalls and switches

• Australia slams Twitter (now X) for 80% cut in trust and safety engineers

• Top cyberthreats for 2024

• Safeguard your heart and personal info this cuffing season

• Randall Munroe’s XKCD ‘Like This One’

• USENIX Security ’23 – Guanhong Tao, Shengwei An, Siyuan Cheng, Guangyu Shen, Xiangyu Zhang – Hard-Label Black-Box Universal Adversarial Patch Attack

• Exploit for under-siege SharePoint vuln reportedly in hands of ransomware crew

• Why is the iPhone Force Restart Not Working?

• How To Access Your Photos On iCloud

• How to See Who Blocked You on Facebook

• How to Recover an Unsaved Excel File

• YouTube Not Working on iPhone? Here’s How to Fix It

• How to Stop Your X Account From Getting Hacked Like the SEC’s

• Secret multimillion-dollar cryptojacker snared by Ukrainian police

• 5 Free Online Brand Protection Software Tools: Pros and Cons

• Texas School Safety Software Data Leak Endangers Student Safety

• Grow and Differentiate Your Business with Expanded Managed Security Solutions

• USENIX Security ’23 – Shibo Zhang, Yushi Cheng, Wenjun Zhu, Xiaoyu Ji, Wenyuan Xu – CAPatch: Physical Adversarial Patch against Image Captioning Systems

• Before starting your 2024 security awareness program, ask these 10 questions

• Palo Alto Networks Recognized as a Leader in the 2023 Gartner Magic Quadrant for Endpoint Protection Platforms (EPP)

• Brad Arkin is New Chief Trust Officer at Salesforce

• Growing Concerns Regarding The Dark Side Of A.I.

• Al Gore Steps Down From Apple Board, Due To Age

• FCC Asks Carmakers, Carriers How They’re Protecting Abuse Survivors

• Optimizing Education: Unleashing the Potential of Artificial Intelligence in the Classroom

• Which is Better: VPN or Microsoft Security Service Edge (SSE)?

• Mandiant suffers phishing attack on its X Account and exposes CLINKSINK malware

• Most Businesses Lack Confidence In Ability To Overcome Cyberattacks

• Stay protected online with the ESET NOD32 2024 antivirus software for $25

• An Introduction to AWS Security

• 6 Best Cloud Log Management Services in 2024 Reviewed

• Laptop Maker Framework Says Customer Data Stolen in Third-Party Breach

• Ivanti VPN Zero-Day Combo Chained ‘by China’

• The future may be passwordless, but it’s not here yet

• 7 Best VPNs for iPhone in 2024

• Framework says hackers accessed customer data after phishing attack on accounting partner

• Secure network operations for hybrid working

• CISA Urges Critical Infrastructure to Patch Urgent ICS Vulnerabilities

• Hackers can hijack your Bosch Thermostat and Install Malware

• WordPress Plugin Flaw Exposes 300,000+ to Hack Attacks

• Splunk Patched Critical Vulnerabilities in Enterprise Security

• The Essential Guide To Effective Software Testing

• Alert! Fake Recruiters on Facebook: Unmasking Remote Jobs SCAM – Protection

• In Other News: WEF’s Unsurprising Cybersecurity Findings, KyberSlash Cryptography Flaw

• Improving Cybersecurity Response With Open Source Endpoint Visibility

• North Korean Hacking Outfit Lazarus Siphons $1.2M of Bitcoin From Coin Mixer

• Akira ransomware attackers are wiping NAS and tape backups

• Medusa Ransomware on the Rise: From Data Leaks to Multi-Extortion

• Nation-State Actors Weaponize Ivanti VPN Zero-Days, Deploying 5 Malware Families

• Waiting for Your Pay Raise? Cofense Warns Against HR-Related Scams

• Is Open Source More Risk than Reward?

• ThreatCloud AI Wins 2024 BIG Innovation Award

• So, are we going to talk about how GitHub is an absolute boon for malware, or nah?

• The State of Open Source Cloud-Native Security

• Connected Tools, Connected Risks: Cybercriminals Use Wrenches as Gateways to Ransomware

• Cyber Security Today, Jan. 12, 2024 – A Chinese hacking group’s reach may be bigger than we thought

• Amazon Cuts Staff In Audible, Prime Video and MGM Studio Divisions

• Researchers created a PoC for Apache OFBiz flaw CVE-2023-51467

• Vast Voter Data Leaks Cast Shadow Over Indonesia ’s 2024 Presidential Election

• Russian Hackers Likely Not Involved in Attacks on Denmark’s Critical Infrastructure

• New Class of CI/CD Attacks Could Have Led to PyTorch Supply Chain Compromise

• Applying the Tyson Principle to Cybersecurity: Why Attack Simulation is Key to Avoiding a KO

• Financial Fraud APK Campaign

• Incident response: How to implement a communication plan

• Data regulator fines HelloFresh £140k for sending 80M+ spams

• Malware Used in Ivanti Zero-Day Attacks Shows Hackers Preparing for Patch Rollout

• Apple Patches Keystroke Injection Vulnerability in Magic Keyboard

• Three Tips To Use AI Securely at Work

• Critical GitLab flaw allows account takeover without user interaction, patch quickly! (CVE-2023-7028)

• Being PCI DSS certified

• Closed Door Security Becomes Scotland’s First Chartered Cyber Security Business

• Qbot Malware Via FakeUpdates Leads the Race of Malware Attacks

• How finops can make the cloud more secure

• Hathway – 4,670,080 breached accounts

• Team Liquid’s wiki leak exposes 118K users

• Vulnerability Puts Bosch Smart Thermostats at Risk of Compromise

• Do More with Security Orchestration, Automation, and Response (SOAR)

• Behavox Intelligent Archive simplifies operations for the unified tech stack

• Human Error and Insiders Expose Millions in UK Law Firm Data Breaches

• While we fire the boss, can you lock him out of the network?

• HackerOne collaborates with Semgrep to streamline code review for modern development

• Cryptominers Targeting Misconfigured Apache Hadoop and Flink with Rootkit in New Attacks

• CVE-2023-36025 Exploited for Defense Evasion in Phemedrone Stealer Campaign

• Securing Crypto Journeys: Advancing Security Measures in Coin Swapping

• Drivers: We’ll take that plain dumb car over a flashy data-spilling internet one, thanks

• Act Now: CISA Flags Active Exploitation of Microsoft SharePoint Vulnerability

• Why is my SSL expiring every 3 months?

• Hackers Actively Exploited 2 Ivanti Zero-Day to Execute Arbitrary Commands

• Hyundai Motor India fixes bug that exposed customers’ personal data

• Ransomware wiping out data on tape backups and malware hitting MYSQL Servers

• A simple guidance on obtaining effective endpoint security

• Cloud security predictions for 2024

• Cyber budgets and the VC landscape in 2024

• New infosec products of the week: January 12, 2024

• Man Is Suing Facebook, 27 Women For “Are We Dating The Same Guy” Facebook Group

• Windows Computer Hit with AgentTesla Malware to Steal Data

• Canadian Cyber Centre now ranks threats with SecurityScorecard solution

• AgentTesla Malware Attacking Windows Machine to Steal Sensitive Data

• Using the Knowledge Store on Cisco Observability Platform

• Cutting Edge: Suspected APT Targets Ivanti Connect Secure VPN in New Zero-Day Exploitation

• Application Security Testing (AST) Explained

• IT Security News Daily Summary 2024-01-11

• eBay to cough up $3M after cyber-stalking couple who dared criticize the souk

• Why BYOD Is the Favored Ransomware Backdoor

• Python’s Poisoned Package: Another ‘Blank Grabber’ Malware in PyPI

• FTC Bars X-Mode from Selling Sensitive Location Data

• eBay coughs up $3M for cyber-stalking couple who dared criticize the souk

• Researchers Flag FBot Hacking Tool Hijacking Cloud, Payment Services

• USENIX Security ’23 – Wenjun Zhu, Xiaoyu Ji, Yushi Cheng, Shibo Zhang, Wenyuan Xu ‘TPatch: A Triggered Physical Adversarial Patch’

• AI Helps With the Implementation of Simulated Cyber Defense Techniques

• Singapore’s guidelines to bolster mobile app security are optional – for now

• Ivanti confirms 2 zero-day vulnerabilities are under attack

• Mandiant: X Account Hacked in Brute-Force Attack Linked to ClinkSink Campaign

• Netskope Report Surfaces Raft of Cybersecurity Challenges

• Mirai-based NoaBot Botnet Targeting Linux Systems with Cryptominer

• Bitcoin ETFs Approved Following Official SEC X Account Compromise

• Accelerating into 2024 with NEOM McLaren Formula E Team

• Build Cyber Resilience with Distributed Energy Systems

• Microsoft Briefly Overtakes Apple As Most Valuable Tech Company

• This is why AI-powered misinformation is the top global risk

• DPython’s Poisoned Package: Another ‘Blank Grabber’ Malware in PyPI

• Mandiant’s brute-forced X account exposes perils of skimping on 2FA

• Microsoft Lets Cloud Users Keep Personal Data Within Europe to Ease Privacy Fears

• NoaBot Pwns Hundreds of SSH Servers as Crypto Miners

• Is it possible to use an external SSD to speed up your Mac?

• Why We Need Cybersecurity Whistleblowers

• Fast, Secure, and Highly Available Real-Time Data Warehousing Based on Apache Doris

• Jakarta EE Security: Using Identity Stores

• 6 Best Anonymous (No-Log) VPNs for 2024

• How to securely recycle enterprise computers

• Empowering Crisis-Affected Communities: Cisco’s Commitment to IRC Signpost

• Hackers Stole Data of 1.3 Million Financial National Fidelity Users

• Microsoft’s January 2024 Patch Tuesday Addresses 49 Vulnerabilities, Including Two Critical Vulnerabilities

• Hays Research Reveals the Increasing AI Adoption in Scottish Workplaces

• Warning issued to admins of Ivanti Connect Secure and Policy Secure gateways

• Wordfence Intelligence Weekly WordPress Vulnerability Report (January 1, 2023 to January 7, 2023)

• A geofence warrant typo cast a location dragnet spanning two miles over San Francisco

• Government To Quash All Post Office Horizon Convictions

• Strong Encryption Explained: 6 Encryption Best Practices

• Cisco Releases Security Advisory for Cisco Unity Connection

• Juniper Networks Releases Security Bulletin for Junos OS and Junos OS Evolved

• Two zero-day bugs in Ivanti Connect Secure actively exploited

• CISA adds Ivanti and Microsoft SharePoint bugs to its Known Exploited Vulnerabilities catalog

• China-Linked Volt Typhoon Hackers Possibly Targeting Australian, UK Governments

• Coming Soon to a Network Near You: More Shadow IoT

• Implementation Flaws Identified in Post-Quantum Encryption Algorithm

• Mandiant admits hacked X account didn’t have 2FA

• Threat Actors Increasingly Abusing GitHub for Malicious Purposes

• What to do when social media accounts get hacked or impersonated

• Mullvad VPN Review (2024): Features, Pricing, Security & Speed

• State-backed hackers are exploiting new Ivanti VPN zero-days — but no patches yet

• Infoseccers think attackers backed by China are behind Ivanti zero-day exploits

• The Role of XBOMs in Supporting Cybersecurity

• SentinelLabs Details Discovery of FBot Tool for Compromising Cloud Services

• FTC Issues Its First-Ever Order Against a Data Broker

• New Python-based FBot Hacking Toolkit Aims at Cloud and SaaS Platforms

• New PoC Exploit for Apache OfBiz Vulnerability Poses Risk to ERP Systems

• Microsoft To Allow Cloud Users To Store Personal Data In Europe

• Cisco wins Manufacturing Solution of the Year award for integrating industrial security with networking

• Critical Security Vulnerabilities Identified in ConnectWise ScreenConnect by Gotham Security Researchers

• Exploring FBot  | Python-Based Malware Targeting Cloud and Payment Services

• Child Abusers Are Getting Better at Using Crypto to Cover Their Tracks

• AI-Powered Misinformation is the World’s Biggest Short-Term Threat, Davos Report Says

• Medusa Ransomware Turning Your Files into Stone

• Google’s $2.7bn EU Antitrust Fine Should Be Upheld – Court Advisor

• Mirai-Based NoaBot Launches a DDoS Attack on Linux Devices

• This Malware is Assaulting Critical US Infrastructure for Almost a Year

• Swatting: Cyber Attacks on Healthcare

• 5 ways to secure identity and access for 2024

• 1.3 Million FNF Customers’ Data Potentially Exposed in Ransomware Attack

• Safe shopping this sales season

• Azure MACC Credits Gathering Dust? Use Them to Get the Best Prevention-First Security

• 2024 Digital Resolutions: Use Stronger Passwords

• SANS Institute Survey Surfaces State of Cybersecurity Defenses

• Cisco Patches Critical Vulnerability in Unity Connection Product

• CISA Urges Patching of Exploited SharePoint Server Vulnerability

• What’s The Difference Between Machine and Workload Identity?

• Radiant Logic combines AI and data to reinvent the user access review process

• There is a Ransomware Armageddon Coming for Us All

• Google Axes Staff In Assistant, Hardware, Engineering Teams

• US School Shooter Emergency Plans Exposed in a Highly Sensitive Database Leak

• Atomic Stealer Gets an Upgrade – Targeting Mac Users with Encrypted Payload

• Mandiant’s X Account Was Hacked in Brute-Force Password Attack

• SEC Approves Bitcoin ETFs, As Crypto Industry Rejoices

• Dutch Man Deployed Stuxnet via Water Pump to Disable Iran’s Nukes

• X Account of leading cybersecurity firm Mandiant was hacked because not adequately protected

• Back to the Basics: Security Must-Haves for 2024, Part I

• Ivanti Connect Secure zero-days exploited by attackers (CVE-2023-46805, CVE-2024-21887)

• Critical Cisco Unity Connection flaw gives attackers root privileges. Patch now! (CVE-2024-20272)

• Guardians of Finance: loanDepot Confronts Alleged Ransomware Offensive

• VicOne partners with BlackBerry to help detect cyberthreats to connected cars

• NCSC Publishes Practical Security Guidance For SMBs

• Why US SEC X Account Hacked? Here is The Reason

• Vanta appoints Jadee Hanson as CISO

• Two Ivanti Zero-Days Actively Exploited in the Wild

• Attack of the copycats: How fake messaging apps and app mods could bite you

• Employee giving and volunteerism drives positive business outcomes

• Bitwarden: how to create and use Passkeys to sign in

• Cisco fixed critical Unity Connection vulnerability CVE-2024-20272

• Mandiant’s X Account Was Hacked Using Brute-Force Attack

• Encrypting Data Using Asymmetric Encryption: A Comprehensive Guide

• The Crucial Need for a Secure Software Development Lifecycle (SSDLC) in Today’s Digital Landscape

• Beyond Passwords: AI-Enhanced Authentication in Cyber Defense

• Purple teaming and the role of threat categorization

• Cisco Fixes High-Risk Vulnerability Impacting Unity Connection Software

• Chinese Hackers Exploit Zero-Day Flaws in Ivanti Connect Secure and Policy Secure

• Network connected wrenches are now vulnerable to Ransomware attacks

• Embracing offensive cybersecurity tactics for defense against dynamic threats

• The expanding scope of CISO duties in 2024

• Hundreds of Thousands of Dollars Worth of Solana Cryptocurrency Assets Stolen in Recent CLINKSINK Drainer Campaigns

• APIs are increasingly becoming attractive targets

• Exploring The Benefits Of Multi-Factor Authentication For Security

• Ransomware prevention a focus for storage stewards in 2024

• Beyond the Crystal Ball: What API security may look like in 2024

• Sustainability 101: What are smart grids?

Generated on 2024-01-12 23:55:45.218480