IT Security News Daily Summary 2024-01-20

• Microsoft Executives’ Emails Breached by Russia Hackers

• DHS and FBI: Chinese Drones Pose Major Threat to U.S. Security

• Fujitsu Bugs That Sent Innocent People to Prison Were Known ‘From the Start’

• USENIX Security ’23 – Unique Identification of 50,000+ Virtual Reality Users from Head & Hand Motion Data

• Transforming the Creative Sphere With Generative AI

• Apple Faces New Security Dilemma as Infostealers Execute Stealthy Attacks

• Dawnofdevil Hackers on the Rise Again

• New AI System Aids Early Detection of Deadly Pancreatic Cancer Cases

• Midnight Blizzard: Russian Threat Actors Behind Microsoft Corporate Emails’ Breach

• Why many CISOs consider quitting – Week in security with Tony Anscombe

• Book Review: The Crypto Launderers: Crime and CryptoCurrencies

• US Agencies Urged to Patch Ivanti VPNs That Are Actively Being Hacked

• PixieFAIL – 9 UEFI Flaws Expose Computers to Remote Attacks

• Your data is under siege. Here’s how to win the war.

• Why T-POT Honeypot is the Premier Choice for Organizations

• Russia-linked Midnight Blizzard APT hacked Microsoft corporate emails

• Chromecast End-of-Life Announcement Highlights Urgent Need for Patch Management Reform Among Hybrid Workers

• Common Pitfalls of Running On-Premises SIEM Solutions

• In Other News: WhatsApp Privacy Issue, Spying via Ambient Light Sensor, Bigpanzi Botnet

• Chinese Hackers Silently Weaponized VMware Zero-Day Flaw for 2 Years

• The best travel VPNs of 2024: Expert tested and reviewed

• Supply Chain Cybersecurity: Protecting Business Partners

• CISA Issues Emergency Directive to Federal Agencies on Ivanti Zero-Day Exploits

• Microsoft’s Top Execs’ Emails Breached in Sophisticated Russia-Linked APT Attack

• Invoice Phishing Alert: TA866 Deploys WasabiSeed & Screenshotter Malware

• USENIX Security ’23 – Habiba Farrukh, Reham Mohamed, Aniket Nare, Antonio Bianchi, Z. Berkay Celik – LocIn: Inferring Semantic Location from Spatial Maps in Mixed Reality

• Behind the Breach: Pass-The-Cookie Beyond IdPs

• Russians invade Microsoft exec mail while China jabs at VMware vCenter Server

• VF Corp December data breach impacts 35 million customers

• Hackers breached Microsoft to find out what Microsoft knows about them

• The No AI Fraud Act Creates Way More Problems Than It Solves

• Microsoft Says Russian Gov Hackers Stole Email Data from Senior Execs

• IT Security News Daily Summary 2024-01-19

• Chinese threat group exploited VMware vulnerability in 2021

• Friday Squid Blogging: New Foods from Squid Fins

• CISA Issues Emergency Directive on Ivanti Zero-Days

• Microsoft Actions Following Attack by Nation State Actor Midnight Blizzard

• Five ripped off IT giant with $7M+ in bogus work expenses, prosecutors claim

• Database Security: Best Practices and What You Need to Know

• Threat Modeling

• Using Pen Tests to Protect Your Company From Digital Threats

• How to Build a Data Foundation for Generative AI

• 7 Best Vulnerability Scanning Tools & Software for 2024

• Parrot TDS: A Persistent and Evolving Malware Campaign

• Zelle Is Using My Name and Voice without My Consent

• Companies Make it Too Easy for Thieves to Impersonate Police and Steal Our Data

• Cyber Security Today, Week in Review for the week ending Friday, Jan. 19, 2024

• CISA Issues Emergency Directive Requiring Federal Agencies to Mitigate Ivanti Connect Secure and Policy Secure Vulnerabilities

• China-linked APT UNC3886 exploits VMware zero-day since 2021

• Randall Munroe’s XKCD ‘Net Rotations’

• CISA Issues Emergency Directive on Ivanti Vulnerabilities

• Securing Digital Frontiers: The Essential Role of Network Access Control in Modern Cybersecurity

• Building a More Inclusive Cybersecurity Strategy Requires Public and Private Cooperation

• Iran’s Mint Sandstorm APT Hits Universities with Hamas-Israel Phishing Scam

• Securing Applications in ROKS Cluster

• Protecting Privacy in the Age of Edge AI: The Role of Homomorphic Encryption

• Ivanti EPMM and MobileIron Core vulnerability is actively exploited, CISA confirms (CVE-2023-35082)

• Virtual kidnapping: How to see through this terrifying scam

• Critical Vulnerabilities Found in Open Source AI/ML Platforms

• Latest OpenPubkey Project Initiative Makes SSH More Secure

• Cloud Security Is Best Achieved With The Right Preparation

• The hidden costs of pirated software: A cautionary tale for small businesses

• USENIX Security ’23 – Hidden Reality: Caution, Your Hand Gesture Inputs in the Immersive Virtual World are Visible to All!

• The best VPN routers of 2024: Expert researched

• Is Your Money Safe? SEC’s New Rules to Guard Against Cyber Threats

• 2023 ‘ASTORS’ Champ HID Enhances its PKI Offerings with ZeroSSL

• Canadian Man Stuck in Triangle of E-Commerce Fraud

• Ransomware attacks break records in 2023: the number of victims rose by 128%

• Ransomware attacks pushing suicidal tendencies among Cybersecurity professionals

• Innovation Unleashed: Indian AI and Robotics Giant Attains Level 5 Autonomy

• Lock down TeamViewer or pay a price

• Toronto to integrate IT systems after ransomware attacks on zoo, public library

• Top IT Trends in Australia for IT Pros to Prepare For in 2024

• U.S. CISA warns of actively exploited Ivanti EPMM flaw CVE-2023-35082

• US Charges Russian Involved in 2013 Hacking of Neiman Marcus, Michaels

• Anthropic Research Indicates That AI Algorithms May Turn Into “Sleeper Cell” Backdoors

• Bill Gates Explains How AI will be Transformative in 5 Years

• CISA & FBI released Incident Response Guide for WWS Sector

• 71 Million Emails Added to Have I Been Pwned From Naz.API Stolen Account List

• Ransomware Activity Surged in 2023, Likely to Evolve in 2024

• How to Shine in Your Next Cybersecurity Audit

• New Sophisticated NFT Airdrop Attack  Steals Funds From Victim’s Wallet

• What Do You Need to Know About DevOps Lifecycle Phases?

• Revolutionizing Kubernetes With K8sGPT: A Deep Dive Into AI-Driven Insights

• LoanDepot outage drags into second week after ransomware attack

• Driving a Cloud Operating Model in Education

• Thieves steal 35.5M customers’ data from Vans sneakers maker

• Experts Warn of macOS Backdoor Hidden in Pirated Versions of Popular Software

• How to Opt Out of Comcast’s Xfinity Storing Your Sensitive Data

• FTC bans another data broker from selling consumers’ location data

• Cyber Security Today, Jan. 19, 2024 – Vulnerabilities found in server firmware, a warning to Docker administrators, and more

• Google To Invest $1 Billion To Build UK Data Centre

• Critical “PixieFail” Flaws Expose Millions of Devices to Cyberattacks

• Black Hat Europe 2023 NOC: Threat Hunting

• VF Corp Says Data Breach Resulting From Ransomware Attack Impacts 35 Million

• Serious Vulnerability Spotted In Bosch Thermostat

• 5 Things to Consider Before Buying a File Integrity Monitoring (FIM) Solution

• US Gov Publishes Cybersecurity Guidance for Water and Wastewater Utilities

• Amazon Lays Off 5 Percent Of Staff At ‘Buy With Prime’ Unit

• YouTube Crypto Con: Scammers Rake in $600K with Deepfakes and QR Codes

• VMware vCenter Server Vulnerability Exploited in Wild

• Ivanti EPMM Vulnerability Targeted in Attacks as Exploitation of VPN Flaws Increases

• Preventing Data Loss: Backup and Recovery Strategies for Exchange Server Administrators

• Ransomware Attacks Rose 128 Percent In 2023, Report Finds

• This Top-Rated Data Recovery Tool is More Than $100 Off Now

• Russian Coldriver Hackers Deploy Malware to Target Western Officials

• Kansas State University suffered a serious cybersecurity incident

• The Quantum Computing Cryptopocalypse – I’ll Know It When I See It

• Experts Urge Clearer Direction in South Africa’s Cyber Strategy

• Microsoft at Legalweek: Secure data and gain efficiencies with Microsoft Purview eDiscovery enhanced by generative AI

• Npm Trojan Bypasses UAC, Installs AnyDesk with “Oscompatible” Package

• OSINVGPT – A Tool For Open-source Investigations

• Orange Spain Outage: BGP Traffic Hijacked by Threat Actor

• FBI & CISA Warns of risk to critical infrastructure by Chinese Drones

• Bigpanzi Bot Hacks 170,000+ Android TVs to Launch DDoS Attacks

• IT consultant fined for daring to expose shoddy security

• Navigating Cyber Threats in the Era of AI Weaponization

• Out with the old and in with the improved: MFA needs a revamp

• Hackers steal $7.5 million funds from US Health Department via email spoofing cyber attack

• New infosec products of the week: January 19, 2024

• U.S. Cybersecurity Agency Warns of Actively Exploited Ivanti EPMM Vulnerability

• Top Official Says Kansas Courts Need at Least $2.6 Million to Recover From Cyberattack

• Unlocking GenAI’s full potential through work reinvention

• Digital nomads amplify identity fraud risks

• Test Post

• US agencies warn made-in-China drones might help Beijing snoop on the world

• The Unseen Threats: Anticipating Cybersecurity Risks in 2024

• Unleashing the Power of OAuth Authentication in Computing

• The Role of AI in Business Operations

• CISA posts incident response guide for water utilities

• The Benefits of Using DCIM Software for Data Center Cable Management

Generated on 2024-01-20 23:55:46.217380