IT Security News Daily Summary 2024-01-27

• TPM Chips and the Use of TPM in Virtualization Technology

• Blackwood hijacks software updates to deploy NSPX30 – Week in security with Tony Anscombe

• How Kratikal Helps Businesses Prevent Cyber Attacks?

• This Side of AI Might Not Be What You Expected

• Pro-Ukraine hackers wiped 2 petabytes of data from Russian research center

• HP Enterprise Reveals Hack Conducted by State-backed Russian Hackers

• Alert: iPhone Push Notifications Exploited Users Data – Security Research

• 23andMe Failed to Detect Account Intrusions for Months

• X Launches Secure Login with Passkey for iOS Users in US

• Fortra’s GoAnywhere MFT Software Faces Exploitation, No Evidence of Active Exploitation Detected

• Data Breaches on the Rise: A Deep Dive into the AI-Driven Privacy Crisis

• Enhancing API Security: CSPF’s Contribution to Wallarm’s Open-Source Project

• Participants earned more than $1.3M at the Pwn2Own Automotive competition

• AllaKore RAT Malware Targeting Mexican Firms with Financial Fraud Tricks

• Securing the Digital Frontier

• Why Limiting Online Access Risks More Than Teen Safety

• Keep Your Tech FLAME Alive

• MyPertamina – 5,970,416 breached accounts

• Building Your Defense Toolbox: Tools and Tactics to Combat Cyber Threats

• Study finds AI ‘revolution’ moving at a crawl in enterprises

• Zero Trust Security Framework: Implementing Trust in Business

• Microsoft sheds some light on Russian email heist – and how to learn from Redmond’s mistakes

• The future of biometrics in a zero trust world

• A TrickBot malware developer sentenced to 64 months in prison

• How To Implement Supply Chain Security in Your Organization

• Anthropic confirms it suffered a data leak

• DevSecOps maturity model: A beginner’s guide

• Cybersecurity Standards vs Procedures vs Controls vs Policies

• IT Security News Daily Summary 2024-01-26

• Generative AI’s enterprise gamble: IT leaders bet big on tech despite security woes

• Shift-left Convergence with Generative AI Improves the Programmer’s Role

• Friday Squid Blogging: Footage of Black-Eyed Squid Brooding Her Eggs

• What is DMARC?

• Hackers Crack Tesla Twice, Rake in $1.3 Million at Pwn2Own Automotive

• Assessing and mitigating supply chain cybersecurity risks

• Prevent BEC with AI-Powered Email and Collaboration

• Police Arrest Teen Said to Be Linked to Hundreds of Swatting Attacks

• Wait, security courses aren’t a requirement to graduate with a computer science degree?

• Microsoft: Legacy account hacked by Russian APT had no MFA

• The Pentagon Tried to Hide That It Bought Americans’ Data Without a Warrant

• More Than a Decade Later, Site-Blocking Is Still Censorship

• A Framework for Maintaining Code Security With AI Coding Assistants

• Facebook Collects Your Data Through Push Notifications Even When The App Is Closed

• Cyber Security Today, Week in Review for the week ending Friday, Jan. 26, 2024

• The Pentagon Tried to Hide That It Bought Americans’ Data Without a Warrant

• Who is Alleged Medibank Hacker Aleksandr Ermakov?

• DORA and your quantum-safe cryptography migration

• INTERPOL Fights Virtual Crime in the Metaverse

• Thousands of Dark Web Posts Expose ChatGPT Abuse Plans

• ICO confirms data breach probe as UK councils remain downed by cyberattack

• NSA is buying Americans’ internet browsing records without a warrant

• Generative AI banned by businesses because of data privacy risks

• What’s Coming to Cisco Live Europe 2024 for the Data Center Developer?

• Improving Audience Understanding and Store Operations with EVERYANGLE and Meraki

• Data Privacy Day 2024: Part 1

• Data Privacy Day 2024: Part 2

• Microsoft says Russian hackers also targeted other organizations

• Nineteen Group acquires SASIG

• Ransomware Roundup – Albabat

• How Datawiza uses Microsoft Entra ID to help universities simplify access

• UK CMA Opens Antitrust Investigation Of Vodafone, Three Merger

• Russian TrickBot Malware Developer Pleaded Guilty

• Guess the company: Takes your DNA, blames you when criminals steal it, can’t spot a cyberattack for 5 months

• digital forensics and incident response (DFIR)

• How a mistakenly published password exposed Mercedes-Benz source code

• Major Water Suppliers Hit by Ransomware Attacks

• Ukraine Arrests Hacker for Assisting Russian Missile Strikes

• Guidance: Assembling a Group of Products for SBOM

• In Other News: Secure Use of AI, HHS Hacking, CISA Director Swatting

• QR Code Scammers are Changing Tactics to Evade Detection

• Hackers Drain Wallets via Cracked macOS Apps using Scripts Accessed From DNS Records

• Enhanced Security Alert: Setting Up Stolen Device Protection on iOS 17.3

• Web Vulnerability Submissions Exploded in 2023

• Why We Need to Cultivate a Confidential Computing Ecosystem

• Salesforce Lays-Off 700 Staff – Report

• Join Customer Experience (CX) for Cisco Live EMEA Demos

• Russian Midnight Blizzard APT is targeting orgs worldwide, Microsoft warns

• Healthcare Cybersecurity — Three Trends to Watch in 2024

• LockBit Ransomware Outfit Claims Subway as its Latest Victim

• Cyber Security Today, Jan. 26, 2024 – US government employees slammed for backing forbidden videocam purchases, and more

• Check Point Attains ‘Champion’ Status in the Canalys Global Cybersecurity Leadership Matrix for three consecutive years

• Westermo Switch Vulnerabilities Can Facilitate Attacks on Industrial Organizations

• New Leaks Expose Web of Iranian Intelligence and Cyber Companies

• Binance Founder Changpeng Zhao Refused Permission To Leave US, Again

• Malwarebytes vs. Norton (2024): Which Antivirus Solution Is Better?

• The world convenes to discuss AI protections and policies amid growing data asymmetries

• China-Linked Blackwood APT Deploys Advanced NSPX30 Backdoor in Cyberespionage

• Chatbots and Human Conversation

• Akira ransomware gang says it stole passport scans from Lush in 110 GB data heist

• How to Create a Threat Hunting Program for Your Business

• How To Improve Security Capacities of The Internet of Things?

• Russian TrickBot Malware Developer Sentenced to Prison in US

• Elusive Chinese Cyberspy Group Hijacks Software Updates to Deliver Malware

• Critical Jenkins Vulnerability Leads to Remote Code Execution

• Perfecting the Defense-in-Depth Strategy with Automation

• Weekly Blog Wrap-Up (January 22- January 25, 2023)

• What are the Common Security Challenges CISOs Face?

• Chinese Hackers Hijack Software Updates to Install Malware Since 2005

• Watch out, experts warn of a critical flaw in Jenkins

• GitLab Arbitrary File Write Vulnerability (CVE-2024-0402) Alert

• Collaboration Achievement: NSFOCUS and China University of Geosciences Article Secures Spotlight in Acclaimed Journal TIFS

• Malicious Ads on Google Target Chinese Users with Fake Messaging Apps

• Data Privacy Week: Companies are Banning Generative AI Due to Privacy Risks

• Nozomi Unveils Wireless Security Sensor for OT, IoT Environments

• Guide: The Best Cybersecurity Conferences and Events of 2024

• Pwn2Own Automotive 2024 Day 2 – Tesla hacked again

• Hackers Earn $1.3M for Tesla, EV Charger, Infotainment Exploits at Pwn2Own Automotive

• Everything you need to know about the SEC Form 8-K

• Controversy Surrounds TFL’s Alleged Data Fraud and Hefty Penalties

• Top 10 Ways to Avoid Cybersecurity Misconfigurations

• What makes ransomware victims less likely to pay up?

• Microsoft Warns of Widening APT29 Espionage Attacks Targeting Global Orgs

• Longer passwords aren’t safe from intensive cracking efforts

• Critical Cisco Flaw Lets Hackers Remotely Take Over Unified Comms Systems

• Russian TrickBot Mastermind Gets 5-Year Prison Sentence for Cybercrime Spree

• New infosec products of the week: January 26, 2024

• Cloud-Native Security for Modern Businesses

• Emerging trends and strategies in digital forensics

• Budget cuts loom for data privacy initiatives

• Essential questions for developing effective human rights policies

• Cisco Foundation Grantees prioritize Indigenous leadership to protect the Amazon Basin

• E-commerce Security: Protecting Customer Data

• USENIX Security ’23 – Wenjun Qiu, David Lie, Lisa Austin – Calpric: Inclusive and Fine-grain Labeling of Privacy Policies with Crowdsourcing and Active Learning

• CI/CD Pipeline Security: Best Practices Beyond Build and Deploy

• Save your Twitter Account

• Trickbot malware scumbag gets five years for infecting hospitals, businesses

Generated on 2024-01-27 23:55:48.276700