IT Security News Daily Summary 2024-01-23

• Cybercrime’s Silent Operator: The Unraveling of VexTrio’s Malicious Network Empire

• CVE-2024-0204: Fortra GoAnywhere MFT Authentication Bypass Deep-Dive

• Google Chrome adds new AI features to boost productivity and creativity

• Uncovering the hidden superpowers of your smartphone

• Mother of All Breaches: 26 Billion Records Leaked in Largest Data Breach Ever

• Australian Organisations Struggling to Resolve Tensions Between Personalisation, Privacy

• Attacks begin on critical Atlassian Confluence vulnerability

• HP CEO Says They Brick Printers That Use Third-Party Ink Because of … Hackers

• Stop combining patches with new features, networking vendors advised

• Facebook Urged To Enforce Hate Speech Rules For Holocaust Denial Content

• Microsoft Says State-Sponsored Attackers Accessed Senior Leaders’ Emails

• BYOD (bring your own device)

• Randall Munroe’s XKCD ‘Log Alignment’

• FBI and CISA Warn of Androxgh0st Malware Attacks

• CISA boss swatted: ‘While my own experience was certainly harrowing, it was unfortunately not unique’

• Vulnerabilities in Lamassu Bitcoin ATMs Can Allow Hackers to Drain Wallets

• Our Bug Bounty Program Extravaganza is Back and it’s Longer This Time – Earn up to $10,000 for Vulnerabilities in WordPress Software!

• Building Secure Cloud Applications: A Developer’s Companion to NIST CSF

• How to avoid malware on Linux systems

• Achieving Successful Business Outcomes Through Digital Infrastructure

• How to turn your Android phone into a security key for your Chrome browser

• SEC X Account Hack is a Case of SIM Swapping

• LockBit Ransomware Gang Claims Subway as New Victim

• US sanctions Russian citizen accused of playing key role in Medibank ransomware attack

• Russia Hacked Microsoft Execs — SolarWinds Hackers at it Again

• Major Data Breach Hits Popular Brands

• Malicious npm Packages Used to Target GitHub Developer SSH Keys

• Clerk, the authentication startup, lands $30M and inks a strategic deal with Stripe

• Lacework and Securiti Ally to Better Secure Data

• Aftermath of Ransomware Attacks Take a Mental and Physical Toll on Security Pros

• Security Researchers Establish Connections Between 3AM Ransomware and Conti, Royal Cybercriminal Groups

• Hackers Target Atlassian Confluence With RCE Exploits

• Upcoming Getting Started With OpenSSL Webinar

• Accused PII seller faces jail for running underground fraud op

• Top incident response service providers, vendors and software

• Cato Networks Adds XDR Service to SASE Platform

• Tufin Dashboard Essentials tracks security implementation progress

• PRODUCT REVIEW: ISC2 CC Certification

• France slaps 32 million Euros penalty on Amazon for data privacy concerns among employees

• AI Testing Startup RagaAI Emerges From Stealth With $4.7M in Seed Funding

• Androxgh0st Haunts Cloud Credentials

• Threat actors are exploiting web applications

• CISA’s Proactive Measures averted Ransomware, Millions Preserved

• Seceon aiSIEM-CGuard protects cloud-powered applications and infrastructure

• Cato Networks introduces new incident response tools

• VexTrio: The Uber of Cybercrime – Brokering Malware for 60+ Affiliates

• Top 5 Cybersecurity Predictions for 2024 Unveiled!

• Apple Moves To Dismiss Lawsuit Over UK Developer Fees

• Australian government announced sanctions for Medibank hacker

• Cato Networks Introduces World’s First SASE-based XDR

• CISA, FBI, EPA Offer Cybersecurity Guide for Water System Operators

• SEC Admits Multi-Factor Security Disabled Before Fake Bitcoin Post

• iPhone users should turn on Apple’s stolen device protection feature

• EFF and More Than 100+ NGOS Set Non-Negotiable Redlines Ahead of UN Cybercrime Treaty Negotiations

• The Evolving Threat Landscape: Where Out-of-Band Communications Fit – Part Two

• Zscaler unveils Zero Trust SASE solution for simplified security implementation

• Apple debuts new feature to frustrate iPhone thieves

• Veriti Odin utilizes AI algorithms to detect and analyze threats

• Malicious NPM Packages Exfiltrate Hundreds of Developer SSH Keys via GitHub

• Crypto Firm Terraform Labs Files For Bankrupcy In US

• New Malware Hidden In PyPI Packages Attacking Windows & Linux Machines

• North Korean Hackers Attacking Cybersecurity Professionals to Steal Threat Research Reports

• Silverfort raises $116M for its holistic approach to identity security

• Doppel Secures $14M for AI-Powered Brand Protection Technology

• Identity Security Firm Silverfort Lands $116 Million Investment

• Aircraft Lessor AerCap Confirms Ransomware Attack

• High-Severity Vulnerability Patched in Splunk Enterprise

• Silobreaker integrates with DarkOwl for enhanced darknet credential monitoring

• Data Security: Leveraging AI for Enhanced Threat Detection and Prevention

• Conditional QR Code Routing Attacks

• Silverfort now valued at $1B after raising $116M for its holistic approach to identity security

• Public Sector Cyberattacks Rise By 40% in 2023

• The Current State of Evolving CMMC Policy

• Google DeepMind Cofounder Claims AI Can Play Dual Role in Next Five Years

• Atakama Browser Security Platform improves security for MSPs

• “Activator” Alert: MacOS Malware Hides in Cracked Apps, Targeting Crypto Wallets

• Barcode Scanning Solutions: Enhancing Accuracy in Asset Tracking Systems

• ‘De-Googled’ smartphone company Murena launches own-brand mobile network

• Ingress security from Cisco Multicloud Defense: Protecting cloud networks and infrastructure against advanced inbound th …

• Using Data Connectors for a Consolidated View of Risk in Cisco Vulnerability Management

• Pervasive Ransomware Visibility on Existing Infrastructure: How Cisco Secure Network Analytics Helps

• How I’m Leaving My Legacy at Cisco

• Onfido Compliance Suite simplifies local and global identity verification

• New Cybersecurity Governance Code Puts Cyber Risks on Boardroom Agenda

• France Fines Amazon 32m Euros Over ‘Excessive’ Worker Surveillance

• Sequoia backs Coana to help companies prioritise vulnerabilities using ‘code aware’ software analysis

• From Megabits to Terabits: Gcore Radar Warns of a New Era of DDoS Attacks

• French Watchdog Slams Amazon with €32m Fine for Spying on Workers

• Top AI Use Cases for Customer-Facing Business Processes

• How to prepare your business for Digital Operational Resilience Act (DORA) implementation?

• TeamViewer Exploited to Obtain Remote Access, Deploy Ransomware

• SEC X Account was Hacked Using SIM Swapping Method

• LoanDepot data breach impacted roughly 16.6 individuals

• UK water giant admits attackers broke into system as gang holds it to ransom

• A Sanction Has Been Imposed on a Hacker Who Released Australian Health Insurer Client Data

• Subway Sandwich Chain Investigating Ransomware Group’s Claims

• F5 Names Samir Sherif as New CISO

• Russian Hackers Suspected of Sweden Cyberattack

• SEC Says X Account Hacked via SIM Swapping

• Keys to Adapting SecOps Processes for the Cloud

• Apple fixes actively exploited WebKit zero-day (CVE-2024-23222)

• Thales and Quantinuum strengthen protection against quantum computing attacks

• Threat Assessment: BianLian

• Scam Robocalls Use AI To Disrupt New Hampshire Election

• What is Lateral Movement in Cybersecurity?

• Data of 15 million Trello users scraped and offered for sale

• BreachForums Founder Sentenced to 20 Years of Supervised Release, No Jail Time

• OpenSSL FIPS Provider 3.0.9 Validated

• YouTuber MrBeast Makes $250,000 From Video On X

• Myriad Venture Partners launches with $100M fund backed by Xerox

• Cultivating a Cybersecurity Culture

• Navigating the New Waters of AI-Powered Phishing Attacks

• Australia Sanctions Russian Hacker Behind Medibank Breach

• Mega-Breach Database Exposes 26 Billion Records

• SEC Confirms SIM Swap Attack Behind X Account Takeover

• A guide to implementing fine-grained authorization

• ~40,000 Attacks in 3 Days: Critical Confluence RCE Under Active Exploitation

• “Mother of All Breaches” Unlikely to Contain New Data

• Riot Games Cuts 11 Percent Of Staff In Latest Industry Job Losses

• Data Breach Strikes Hathway: 41.5M Data Exposed

• Overcoming CVE Shock with Effective Kubernetes Vulnerability Scanning

• Hackers Abusing LSASS Process Memory to Exfiltrate Login Credentials

• CISA adds VMware vCenter Server bug to its Known Exploited Vulnerabilities catalog

• Black Basta gang claims the hack of the UK water utility Southern Water

• LoanDepot Data Breach Hits 16.6 Million Customers

• Kasseika Ransomware Deploys BYOVD Attacks, Abuses PsExec and Exploits Martini Driver

• SSH3 – Faster & Rich Secure Shell Using HTTP/3

• OpenAI says NO to election bot as another company suffers backlash from its own AI tool

• The Role of Blockchain in Business

• Why cyberattacks mustn’t be kept secret

• Top cybersecurity concerns for the upcoming elections

• Beyond blockchain: Strategies for seamless digital asset integration

• 2024 brings new risks, with cyber incidents in the spotlight

• Researchers unveil new way to counter mobile phone ‘account takeover’ attacks

• Organizations need to switch gears in their approach to email security

• Australia imposes cyber sanctions on Russian it says ransomwared health insurer

• SIM card swap led to takeover of SEC’s X account

• Lists of Images

• Apple Issues Patch for Critical Zero-Day in iPhones, Macs – Update Now

• Cybersecurity Training for Business Leaders

• Atlassian Confluence Server RCE attacks underway from 600+ IPs

• How to Use Context-Based Authentication to Improve Security

• 18X a Leader in Gartner Magic Quadrant for EPP

• Rugged Laptops: What Defense and First Responders Should Look For

• VulnRecap 1/22/24 – Watch Chrome, Ivanti, Citrix Issues

• Mother of all breaches – a historic data leak reveals 26 billion records: check what’s exposed

• IT Security News Daily Summary 2024-01-22

• Facebook Will Now Let European Users Unlink Their Data Across Platforms

• The best VPN for streaming in 2024: Expert tested and reviewed

• Update your iPhone and turn on Stolen Device Protection ASAP. Here’s why

• Microsoft breached by Russian APT behind SolarWinds attack

• The Public Domain Benefits Everyone – But Sometimes Copyright Holders Won’t Let Go

• Trello – 15,111,945 breached accounts

• News alert: Deloitte, Memcyco partner to deliver real-time ‘digital impersonation’ solutions

• Trezor Data Breach Exposes Email and Names of 66,000 Users

• Purpose. Partnership. Impact.

• Apple fixed actively exploited zero-day CVE-2024-23222

• Slug slimes aerospace biz AerCap with ransomware, brags about 1TB theft

• Vulnerability Summary for the Week of January 15, 2024

• Top 6 LastPass Alternatives and Competitors for 2024

• Apple Ships iOS 17.3, Warns of WebKit Zero-Day Exploitation

• Essential Email and Internet Safety Tips for College Students

• Enzoic for AD Lite Data Shows Increase in Crucial Risk Factors

• Business continuity vs. disaster recovery vs. incident response

• LoanDepot says 16.6M customers had ‘sensitive personal’ information stolen in cyberattack

• Meet ENNA, the New Cisco Enterprise Network Assurance (ENNA) Specialist Certification

• The PRESS Act Will Protect Journalists When They Need It Most

• What does Google Chrome’s incognito mode really do (and not do) for you?

• How to build an incident response plan, with examples, template

• It’s Copyright Week 2024: Join Us in the Fight for Better Copyright Law and Policy

• Apple iOS 17.3: How to Turn on iPhone’s New Stolen Device Protection

• Bind For Cleaning Blood And Bullet Marks In Counter-Strike 2

• Tools to Protect Your Privacy Online | EFFector 36.1

• The Fake Fix: New Chae$ 4.1 Malware Hides in Driver Downloads

• Data Privacy Week: Get ready for tougher regulation

• LoanDepot Data Breach Hits 16.6 Customers

• Maven Dependency Scope Applied

• Unraveling the Wonders of Bluetooth: Connecting the World Wirelessly

• Security Experts Describe AI Technologies They Want to See

• Thai Court Blocks 9near.org to Avoid Exposure of 55M Citizens

• January 2024 Web Server Survey

• EFF adds Street Surveillance Hub so Americans can check who’s checking on them

• Building a Privacy-Centric Organization with FireMon

• Chinese Espionage Group Has Exploited VMware Flaw Since 2021

• The Pros and Cons of Large Language Models

• Accounts on Payoneer in Argentina Compromised in 2FA Bypass Incidents

• European Union to Block Amazon’s Acquisition Over iRobot

• MavenGate Attack Could Let Hackers Hijack Java and Android via Abandoned Libraries

• North Korean Hackers Weaponize Fake Research to Deliver RokRAT Backdoor

• Introducing Wordfence CLI 3.0.1: Now With Automatic Remediation!

• Uncovering Hidden Threats with VirusTotal Code Insight

• Deloitte Teams Up with Memcyco for Real-Time Digital Impersonation Protection

• Building Decentralized Applications With Node.js and Web 3.0

• How to set your Android phone as a security key to lock down your Chrome browser

• CISA Adds One Known Exploited Vulnerability to Catalog

• Info Stealing Packages Hidden in PyPI

• Hackers Targeting Critical Atlassian Confluence Vulnerability Days After Disclosure

• New macOS Malware Targets Cracked Apps

• Hackers spreading ransomware demand a ransom of $50 from patients

• New NTLM Hash Leak Attacks Target Outlook, Windows Programs

• LoanDepot Breach: 16.6 Million People Impacted

• Deloitte Partners with Memcyco to Combat ATO and Other Online Attacks with Real-Time Digital Impersonation Protection Solutions

• OpenAI’s Altman Seeks Billions For AI Chip Manufacturing Venture

• Boardroom cyber expertise comes under scrutiny

• Ivanti and Juniper Networks accused of bending the rules with CVE assignments

• Start-Up Rabbit Grabs Attention With Handheld AI Gadget

• Beware of Pirated MacOS Apps That Install Chinese Malware

• CISA Adds 6 Known Exploited Vulnerabilities to Catalog

• Amway Protects Website Performance & Saves Costs with DataDome

• The Right Compliance Framework for Your Startup: Common Compliance Frameworks

• From Phishing to Friendly Fraud: Anticipating 2024’s Fraud Dynamics

• InMarket is Second Data Broker to Settle with FTC This Month

• Attackers Employ TeamViewer to Gain Initial Access to Networks

• Data Disaster: 35M Customers in Peril as VF’s Breach Unveils

• Netskope introduces SASE solution for midmarket enterprises

• Subway’s data torpedoed by LockBit, ransomware gang claims

• BEAD Funding: Grants Now Available to States and Cisco Customers

• “My Slice”, an Italian adaptive phishing campaign

• Attackers can steal NTLM password hashes via calendar invites

• Cognyte adds GenAI capabilities into its LUMINAR offering

• Apple Vision Pro Sells Out As Pre-Orders Open

• Private Cloud’s Deployment

• A Step-by-Step Guide to Spotting and Preventing Frame Injections

• LoanDepot says 16.6 million customers had ‘sensitive personal’ information stolen in cyberattack

• Cyber Security Today, Jan. 22, 2024 – LockBit ransomware gang hits the Subway fast food chain, and Data Privacy Week starts

• F5 appoints Samir Sherif as CISO

• BreachForums Admin Pompompurin Gets 20-Year Supervised Sentence

• New M6 based CSW-Cluster Hardware

• Spotify Decries ‘Outrageous’ New Apple Developer Fees

• Silicon UK In Focus Podcast: The Value of AI

• Finclusive, Verida, and cheqd Launch Reusable KYC/KYB Solution

• The Need for Secure Cloud Development Environments

• Cops Used DNA to Predict a Suspect’s Face—and Tried to Run Facial Recognition on It

• Keeper Security Announces Partnership with St. Anna Children’s Cancer Research Institute

• Top Unexpected Ways to Utilise a Password Manager for Enhanced Security and Organisation

• Owner of Cybercrime Website BreachForums Sentenced to Supervised Release

• NS-STEALER Uses Discord Bots to Exfiltrate Your Secrets from Popular Browsers

• 52% of Serious Vulnerabilities We Find are Related to Windows 10

• US Agencies Issue Cybersecurity Guide in Response to Cybercriminals Targeting Water Systems

• Threat actors exploit Apache ActiveMQ flaw to deliver the Godzilla Web Shell

• Fostering Total Trust with A ‘Zero-Trust’ Approach in Financial Services

• Resecurity and Cybercrime Atlas join forces to disrupt cybercriminal operations

• Data Privacy Week: Lack of Understanding, Underfunding Threaten Data Privacy and Compliance

• EU Set To Reject Amazon iRobot Buy

• DarkGate Malware Abuses AutoIT Scripting For Payload Obfustication

• ICO fines spam slinging financial services biz

• France Fines Yahoo 10 Mn Euros Over Cookie Abuses

• Chinese Spies Exploited VMware vCenter Server Vulnerability Since 2021

• Tietoevry ransomware attack halts Swedish organizations

• Meta Criticised Over ‘Irresponsible’ AI Plans

• New method to safeguard against mobile account takeovers

• My 6 Security Predictions for 2024…

• CISA Emergency Directive Demands Action on Ivanti Zero-Days

• DPD Disables AI Chatbot After It Swears At Customer

• Resolving Top Security Misconfigurations: What you need to know

• Cybercriminals leaked massive volumes of stolen PII data from Thailand in Dark Web

• Safeguarding against the global ransomware threat

• NIS2 Framework: Your Key To Achieving Cybersecurity Excellence

• Russian Spies Brute Force Senior Microsoft Staff Accounts

• What is Quishing? And how can I protect against QR code hacking?

• Cracked software beats gold: new macOS backdoor stealing cryptowallets

• FTC Bans InMarket for Selling Precise User Location Without Consent

• Ransomware and Cyber Attack related news headlines trending on Google

• How many types of Network Security protocols exist

• Backdoored pirated applications targets Apple macOS users

• The World of Scambaiting, Preventing Social Media Account Takeovers, Network Wrenches Hacked

• Without clear guidance, SEC’s new rule on incident reporting may be detrimental

• The reality of hacking threats in connected car systems

• Global cyber inequity skyrockets

• CloudFoxable: Open-source AWS penetration testing playground

• Bad bot traffic skyrockets across the web

• Business Data Privacy Laws: Compliance and Beyond

• Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell Attacks

• BreachForums admin ‘Pompourin’ sentenced to 20 years of supervised release

• IoT Security for Business: Safeguarding Connected Devices

Generated on 2024-01-23 23:55:53.247709