IT Security News Daily Summary 2024-01-22

• Facebook Will Now Let European Users Unlink Their Data Across Platforms

• The best VPN for streaming in 2024: Expert tested and reviewed

• Update your iPhone and turn on Stolen Device Protection ASAP. Here’s why

• Microsoft breached by Russian APT behind SolarWinds attack

• The Public Domain Benefits Everyone – But Sometimes Copyright Holders Won’t Let Go

• Trello – 15,111,945 breached accounts

• News alert: Deloitte, Memcyco partner to deliver real-time ‘digital impersonation’ solutions

• Trezor Data Breach Exposes Email and Names of 66,000 Users

• Purpose. Partnership. Impact.

• Apple fixed actively exploited zero-day CVE-2024-23222

• Slug slimes aerospace biz AerCap with ransomware, brags about 1TB theft

• Vulnerability Summary for the Week of January 15, 2024

• Top 6 LastPass Alternatives and Competitors for 2024

• Apple Ships iOS 17.3, Warns of WebKit Zero-Day Exploitation

• Essential Email and Internet Safety Tips for College Students

• Enzoic for AD Lite Data Shows Increase in Crucial Risk Factors

• Business continuity vs. disaster recovery vs. incident response

• LoanDepot says 16.6M customers had ‘sensitive personal’ information stolen in cyberattack

• Meet ENNA, the New Cisco Enterprise Network Assurance (ENNA) Specialist Certification

• The PRESS Act Will Protect Journalists When They Need It Most

• What does Google Chrome’s incognito mode really do (and not do) for you?

• How to build an incident response plan, with examples, template

• It’s Copyright Week 2024: Join Us in the Fight for Better Copyright Law and Policy

• Apple iOS 17.3: How to Turn on iPhone’s New Stolen Device Protection

• Bind For Cleaning Blood And Bullet Marks In Counter-Strike 2

• Tools to Protect Your Privacy Online | EFFector 36.1

• The Fake Fix: New Chae$ 4.1 Malware Hides in Driver Downloads

• Data Privacy Week: Get ready for tougher regulation

• LoanDepot Data Breach Hits 16.6 Customers

• Maven Dependency Scope Applied

• Unraveling the Wonders of Bluetooth: Connecting the World Wirelessly

• Security Experts Describe AI Technologies They Want to See

• Thai Court Blocks 9near.org to Avoid Exposure of 55M Citizens

• January 2024 Web Server Survey

• EFF adds Street Surveillance Hub so Americans can check who’s checking on them

• Building a Privacy-Centric Organization with FireMon

• Chinese Espionage Group Has Exploited VMware Flaw Since 2021

• The Pros and Cons of Large Language Models

• Accounts on Payoneer in Argentina Compromised in 2FA Bypass Incidents

• European Union to Block Amazon’s Acquisition Over iRobot

• MavenGate Attack Could Let Hackers Hijack Java and Android via Abandoned Libraries

• North Korean Hackers Weaponize Fake Research to Deliver RokRAT Backdoor

• Introducing Wordfence CLI 3.0.1: Now With Automatic Remediation!

• Uncovering Hidden Threats with VirusTotal Code Insight

• Deloitte Teams Up with Memcyco for Real-Time Digital Impersonation Protection

• Building Decentralized Applications With Node.js and Web 3.0

• How to set your Android phone as a security key to lock down your Chrome browser

• CISA Adds One Known Exploited Vulnerability to Catalog

• Info Stealing Packages Hidden in PyPI

• Hackers Targeting Critical Atlassian Confluence Vulnerability Days After Disclosure

• New macOS Malware Targets Cracked Apps

• Hackers spreading ransomware demand a ransom of $50 from patients

• New NTLM Hash Leak Attacks Target Outlook, Windows Programs

• LoanDepot Breach: 16.6 Million People Impacted

• Deloitte Partners with Memcyco to Combat ATO and Other Online Attacks with Real-Time Digital Impersonation Protection Solutions

• OpenAI’s Altman Seeks Billions For AI Chip Manufacturing Venture

• Boardroom cyber expertise comes under scrutiny

• Ivanti and Juniper Networks accused of bending the rules with CVE assignments

• Start-Up Rabbit Grabs Attention With Handheld AI Gadget

• Beware of Pirated MacOS Apps That Install Chinese Malware

• CISA Adds 6 Known Exploited Vulnerabilities to Catalog

• Amway Protects Website Performance & Saves Costs with DataDome

• The Right Compliance Framework for Your Startup: Common Compliance Frameworks

• From Phishing to Friendly Fraud: Anticipating 2024’s Fraud Dynamics

• InMarket is Second Data Broker to Settle with FTC This Month

• Attackers Employ TeamViewer to Gain Initial Access to Networks

• Data Disaster: 35M Customers in Peril as VF’s Breach Unveils

• Netskope introduces SASE solution for midmarket enterprises

• Subway’s data torpedoed by LockBit, ransomware gang claims

• BEAD Funding: Grants Now Available to States and Cisco Customers

• “My Slice”, an Italian adaptive phishing campaign

• Attackers can steal NTLM password hashes via calendar invites

• Cognyte adds GenAI capabilities into its LUMINAR offering

• Apple Vision Pro Sells Out As Pre-Orders Open

• Private Cloud’s Deployment

• A Step-by-Step Guide to Spotting and Preventing Frame Injections

• LoanDepot says 16.6 million customers had ‘sensitive personal’ information stolen in cyberattack

• Cyber Security Today, Jan. 22, 2024 – LockBit ransomware gang hits the Subway fast food chain, and Data Privacy Week starts

• F5 appoints Samir Sherif as CISO

• BreachForums Admin Pompompurin Gets 20-Year Supervised Sentence

• New M6 based CSW-Cluster Hardware

• Spotify Decries ‘Outrageous’ New Apple Developer Fees

• Silicon UK In Focus Podcast: The Value of AI

• Finclusive, Verida, and cheqd Launch Reusable KYC/KYB Solution

• The Need for Secure Cloud Development Environments

• Cops Used DNA to Predict a Suspect’s Face—and Tried to Run Facial Recognition on It

• Keeper Security Announces Partnership with St. Anna Children’s Cancer Research Institute

• Top Unexpected Ways to Utilise a Password Manager for Enhanced Security and Organisation

• Owner of Cybercrime Website BreachForums Sentenced to Supervised Release

• NS-STEALER Uses Discord Bots to Exfiltrate Your Secrets from Popular Browsers

• 52% of Serious Vulnerabilities We Find are Related to Windows 10

• US Agencies Issue Cybersecurity Guide in Response to Cybercriminals Targeting Water Systems

• Threat actors exploit Apache ActiveMQ flaw to deliver the Godzilla Web Shell

• Fostering Total Trust with A ‘Zero-Trust’ Approach in Financial Services

• Resecurity and Cybercrime Atlas join forces to disrupt cybercriminal operations

• Data Privacy Week: Lack of Understanding, Underfunding Threaten Data Privacy and Compliance

• EU Set To Reject Amazon iRobot Buy

• DarkGate Malware Abuses AutoIT Scripting For Payload Obfustication

• ICO fines spam slinging financial services biz

• France Fines Yahoo 10 Mn Euros Over Cookie Abuses

• Chinese Spies Exploited VMware vCenter Server Vulnerability Since 2021

• Tietoevry ransomware attack halts Swedish organizations

• Meta Criticised Over ‘Irresponsible’ AI Plans

• New method to safeguard against mobile account takeovers

• My 6 Security Predictions for 2024…

• CISA Emergency Directive Demands Action on Ivanti Zero-Days

• DPD Disables AI Chatbot After It Swears At Customer

• Resolving Top Security Misconfigurations: What you need to know

• Cybercriminals leaked massive volumes of stolen PII data from Thailand in Dark Web

• Safeguarding against the global ransomware threat

• NIS2 Framework: Your Key To Achieving Cybersecurity Excellence

• Russian Spies Brute Force Senior Microsoft Staff Accounts

• What is Quishing? And how can I protect against QR code hacking?

• Cracked software beats gold: new macOS backdoor stealing cryptowallets

• FTC Bans InMarket for Selling Precise User Location Without Consent

• Ransomware and Cyber Attack related news headlines trending on Google

• How many types of Network Security protocols exist

• Backdoored pirated applications targets Apple macOS users

• The World of Scambaiting, Preventing Social Media Account Takeovers, Network Wrenches Hacked

• Without clear guidance, SEC’s new rule on incident reporting may be detrimental

• The reality of hacking threats in connected car systems

• Global cyber inequity skyrockets

• CloudFoxable: Open-source AWS penetration testing playground

• Bad bot traffic skyrockets across the web

• Business Data Privacy Laws: Compliance and Beyond

• Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell Attacks

• BreachForums admin ‘Pompourin’ sentenced to 20 years of supervised release

• IoT Security for Business: Safeguarding Connected Devices

• Protecting Your Digital Realm: Understanding Cybersecurity Threats and Defenses

• IT Security News Weekly Summary – Week 03

• IT Security News Daily Summary 2024-01-21

• USENIX Security ’23 – Kaiming Cheng, Jeffery F. Tian, Tadayoshi Kohno, Franziska Roesner – Exploring User Reactions and Mental Models Towards Perceptual Manipulation Attacks in Mixed Reality

• Evolution of AI Assistants: Navigating Breakthroughs in Software Development

• LockBit ransomware gang claims the attack on the sandwich chain Subway

• Welcome to Data Privacy Week: Empowering Your Cybersecurity with BlackCloak

• More Than One Third Of Facebook Marketplace Ads Could Be Scams

• Empowering Global Cybersecurity: The Future with Dianoea Darwis Honeypot

• Classic Baggie: Part Three – the Romance Scam Victims

• Meta is Collecting Consumers Data from Thousands of Firms

• Microsoft Might Be Sharing Your Outlook Emails Without Your Knowledge

• MUN President Confirms: Ransomware was Behind Cyberattack on Their Grenfell Campus

• What is Biometric Security? Your Body Becomes Your Key

• The best VPN services for iPhone and iPad in 2024: Tested and reviewed

• Innovative Legal Move Restores Hospital’s Stolen Information

• Cybersecurity Challenges at the World Economic Forum

• Security Affairs newsletter Round 455 by Pierluigi Paganini – INTERNATIONAL EDITION

• Week in review: 10 cybersecurity frameworks you need to know, exploited Chrome zero-day fixed

• New Outlook Flaw Let Attackers Access Hashed Passwords

• Business Email Compromise (BEC) Scams: Prevention and Response

• Cloud Security Best Practices for Businesses

Generated on 2024-01-22 23:55:42.299755