IT Security News Daily Summary 2024-01-30

• The Taylor Swift deepfake porn is nothing new – but that doesn’t mean we shouldn’t be concerned

• The WordPress 6.4.3 Security Update – What You Need to Know

• Top 7 Cloud Storage Security Issues & Risks (+ Mitigations)

• Lawmaker Sues Facebook After Son Dies By Suicide

• Italian data protection authority said that ChatGPT violated EU privacy laws

• New Mitigations to Defend Against Exploitation of Ivanti Connect Secure and Policy Secure Gateways

• 750 million Indian mobile subscribers’ data offered for sale on dark web

• New Images of Colossus Released

• USENIX Security ’23 – Keane Lucas, Samruddhi Pai, Weiran Lin, Lujo Bauer, Michael K. Reiter, Mahmood Sharif – Adversarial Training for Raw-Binary Malware Classifiers

• Effortlessly upgrade to Passkeys on Pixel phones with Google Password Manager

• Rethinking Data Governance: Metrics for Meaningful Outcomes

• Fla. Man Charged in SIM-Swapping Spree is Key Suspect in Hacker Groups Oktapus, Scattered Spider

• Hybrid Work in Government Survey Results: Big Trends Revealed

• What InfoSec Leaders Need to Know About AI

• Most Ransom Groups Now Using Extortion, Delinea Survey Finds

• Device and Data Security in Embedded Systems

• data loss

• US shorts China’s Volt Typhoon crew targeting America’s criticals

• AlphaCodium: Your New Coding Assistant

• The Role of Biometrics in a Zero Trust Landscape

• Government vows to address corporate privacy worries in proposed cybersecurity law

• Securing APIs From Left to Right (and Everywhere in Between)

• Reimagine Your Data Center for Responsible AI Deployments

• Jenkins jitters as 45,000 servers still vulnerable to RCE attacks after patch released

• ‘Extremely serious’ — Mercedes-Benz Leaks Data on GitHub

• Schneider Electric Confirms Data Accessed in Ransomware Attack

• FBI Warns of Tech Support Courier Scam Aiming at Cash and Metals

• Brazilian Feds Dismantle Grandoreiro Banking Trojan, Arresting Top Operatives

• Orange España Breach: Dark Web Flooded With Operator Credentials

• Mitsubishi Electric MELSEC WS Series Ethernet Interface Module

• Mitsubishi Electric FA Engineering Software Products

• Emerson Rosemount GC370XA, GC700XA, GC1500XA

• Breaking the code: new models for today’s outcome-based partnerships

• The Ransomware Threat in 2024 is Growing: Report

• ChatGPT Violated European Privacy Laws, Italy Tells Chatbot Maker OpenAI

• Congratulations to the Top MSRC 2023 Q4 Security Researchers!

• $1,275 Bounty Awarded For Arbitrary File Deletion Vulnerability Patched in MW WP Form WordPress Plugin

• Aembit Teams Up with CrowdStrike for Secure Workload Access

• NFT Wallets Unleashed: A Data Structures and Application Design Journey

• URGENT: Upgrade GitLab – Critical Workspace Creation Flaw Allows File Overwrite

• Juniper Networks released out-of-band updates to fix high-severity flaws

• Platforms in Action — Three Companies That Supercharged Risk Posture

• Tapping into the Potential of Generative AI in Cybersecurity

• USENIX Security ’23 – Simone Aonzo, Yufei Han, Alessandro Mantovani, Davide Balzarotti – Humans vs. Machines in Malware Classification

• Don’t Misdefine Network Security in 2024: Include On-Prem and Cloud

• Insurance Broker Keenan Says 1.5 Million Affected by Data Breach

• Alpha Ransomware Group Launches Data Leak Site on the Dark Web

• Ransomware attack news trending on Google

• What is incident response? A complete guide

• How to manage Fedora’s firewall without using the command line

• 3 security gadgets I never leave home without

• Why you can benefit from using Always On VPN

• Cloud Data Security in 2024

• Thinking about a Career in Cybersecurity? Follow this Path

• Image Test

• Reg story prompts fresh security bulletin, review of Juniper Networks’ CVE process

• Cyber Attacks by North Korean Hackers on Cryptocurrency Platforms Reach $1 Billion in 2023

• U.S. has disabled parts of Chinese hacking infrastructure, says Reuters

• US Mounts Operation Against Chinese Hacking Network

• APT Hackers Use FalseFont Backdoor to Remotely Hack Computers

• Ransomware Research Reveals Millions Spent Despite Do Not Pay Policies

• US Disrupted Chinese Hacking Operation Aimed at Critical Infrastructure: Report

• US Lawmakers Introduce Farm and Food Cybersecurity Act

• Juniper Networks Patches Vulnerabilities in Switches, Firewalls

• Data of 750 Million Indian Mobile Subscribers Sold on Hacker Forums

• Data Collaboration Platforms Ruling the Charts in Unlocking Sophisticated AI Models

• Hearings on Canada’s proposed cybersecurity law begin

• Siren launches AI-Powered search with mobile access for front line officers

• SentinelOne unveils threat hunting capabilities in its WatchTower and WatchTower Pro

• Rust Payloads Exploiting Ivanti Zero-Days Linked to Sophisticated Sliver Toolkit

• SAS joins fight against cybercrime as NCRCG National Ambassador

• SentinelOne Delivers Real-Time Managed Threat Hunting Services

• NordVPN Link Checker protects users from malicious websites

• China-Linked Hackers Target Myanmar’s Top Ministries with Backdoor Blitz

• Deloitte Partners with Memcyco to Combat ATO and Other Online Attacks with Real-Time Digital Impersonation Protection Solutions

• Peugot To Integrate ChatGPT Across Car Line

• Aembit Announces New Workload IAM Integration with CrowdStrike to Help Enterprises Secure Workload-to-Workload Access

• Ubuntu 22.04 Kernel Updated to Linux Kernel 6.5

• Synthetic Data: How Does the ‘Fake’ Data Help Healthcare Sector?

• NSA Confession: Unlawful Surveillance on Americans Exposed

• Ransomware Incidents Hit Record High, But Law Enforcement Takedowns Slow Growth

• Germany ‘To Approve’ EU’s AI Act

• Mapping attacks on generative AI to business impact

• Simple Yet Vital Tips to Send Documents Securely via Email

• Atropos Health partners with Google Cloud to rapidly generate insights from healthcare data using AI

• What’s Trending? How about NACs

• Beyond the Race: An Ironman Journey of Endurance, Inclusion, and Growth

• Charting the path to a sustainable future with AI for energy efficiency

• Can MS Outlook Calendar Leak Your Password?

• China Approves More AI Language Models As US Tightens Controls

• Excessive Expansion Vulnerabilities Leave Jenkins Servers Open to Attacks

• Robots Are Fighting Robots in Russia’s War in Ukraine

• NSA Buying Bulk Surveillance Data on Americans without a Warrant

• Navigating the Landscape of Advanced Email Security Threats with Optimism

• Schneider Electric Division Responding to Ransomware Attack, Data Breach

• 1.5 Million Affected by Data Breach at Insurance Broker Keenan & Associates

• What the Government Can Learn from the Private Sector in Pursuit of Zero Trust

• Protecting Your Business and Personal Data

• Navigating Secure Adoption of AI Across Government and Connected Infrastructure

• North Korea–Russia Summit

• Self-managed GitLab installations should be patched again (CVE-2024-0402)

• Cybersecurity concerns rise with Elon Musk Telepathy Neuralink technology

• Italy Says ChatGPT Violates Data Protection Rules

• Beware of Phobos Ransomware Delivered via Office Document

• HaystackID enhances Protect Analytics AI Suite to strengthen data analysis

• Italian Data Protection Watchdog Accuses ChatGPT of Privacy Violations

• Top Security Posture Vulnerabilities Revealed

• Apple Warns UK Against Instituting ‘Secret Veto’ On Security Tech

• What the Bitcoin ETF Approval Mean for the Crypto Market

• Musk’s Neuralink Conducts First Human Brain Implant

• Qualys expands partnership with Orange Cyberdefense to optimize vulnerability management activities

• FBI: Scammers Are Sending Couriers to Collect Cash From Victims

• Protecting against software supply chain attacks

• HISCOX Cyber Readiness Report Shines Light on Commercial Cybersecurity

• UK biometrics boss bows out, bemoaning bureaucratic blunders

• UK House of Lords Calls For Legislation on Facial Recognition Tech

• New ZLoader Malware Variant Surfaces with 64-bit Windows Compatibility

• Hundreds of network operators’ credentials found circulating in Dark Web

• Detecting Berylian attacks: Sekoia SOC Platform used in NATO CCDOE Crossed Swords 2023

• Cactus ransomware gang claims the Schneider Electric hack

• GitLab Flaw Let Attackers Write Files to Arbitrary Locations

• Progressive Profiling 101: Right User Info at the Right Time

• In Final Talks on Proposed UN Cybercrime Treaty, EFF Calls on Delegates to Incorporate Protections Against Spying and Restrict Overcriminalization or Reject Convention

• Faction: Open-source pentesting report generation and collaboration framework

• Great security or great UX? Both, please

• Ransomware recap 2023 highlights cybersecurity crisis

• Juniper Networks Releases Urgent Junos OS Updates for High-Severity Flaws

• Unlocking sustainable security practices with secure coding education

• Congratulating Check Point’s CPX APAC Partner Award Winners

• Business Cybersecurity Frameworks: Choosing the Right Fit

• Balancing AI benefits with security and privacy risks in healthcare

• Business Email Encryption: Protecting Sensitive Communications

• An In-Depth Guide to the 11 New ISO 27001 Controls

• Dark Web Drug Lord Pleads Guilty, Forfeits $150M Cryptocurrency

• Citizen Lab details ongoing battle against spyware vendors

• Best practices in moving to cloud native endpoint management

• Join us at InfoSec Jupyterthon 2024

• VulnRecap 1/29/24 – Apple, Apache & VMware Under Attack

• IT Security News Daily Summary 2024-01-29

• 10 reasons why securing software supply chains needs to start with containers

• The best identity theft protection and credit monitoring services of 2024

• Apple Begins 2024 Patching A Zero-Day Under Attack

• Facebook Among The Worst At Collecting Data From Apps For Kids

• Navigating the Digital Frontier: Insights from Leading Experts on Data Privacy Day

• Dashlane 2024

• Threat Actors Selling 1.8TB Database of Indian Mobile Users

• Meta releases ‘Code Llama 70B’, an open-source behemoth to rival private AI development

• Ransomware’s Impact Could Include Heart Attacks, Strokes & PTSD

• Mercedes-Benz accidentally exposed sensitive data, including source code

• SolarWinds slams SEC lawsuit against it as ‘unprecedented’ victim blaming

• Datadog Report Surfaces Pair of Sophisticated AWS Attacks

• Edge Security for IoT: Protecting Data at the Edge

• Ivanti Struggling to Hit Zero-Day Patch Release Schedule

• CVE-2024-23897: Assessing the Impact of the Jenkins Arbitrary File Leak Vulnerability

• Control D Launches Control D for Organizations: Democratizing Cybersecurity for Organizations of All Sizes

• SAFECOM Membership Spotlight: Major Darryl Anderson, SAFECOM At-Large (Stark County Sheriff’s Office)

• What Do Apple’s EU App Store Changes Mean for App Developers?

• Vulnerability Summary for the Week of January 22, 2024

• Apple’s new Stolen Device Protection has a big vulnerability. Here’s how to fix it

• Experts detailed Microsoft Outlook flaw that can leak NTLM v2 hashed passwords

• USENIX Security ’23 – Rishabh Khandelwal, Asmit Nayak, Hamza Harkous, Kassem Fawaz – Automated Cookie Notice Analysis and Enforcement

• Randall Munroe’s XKCD ‘Fast Radio Bursts’

• Control D Launches Control D for Organizations: Democratizing Cybersecurity

• Data Governance and DevOps

• DevNet: A Decade of Innovation and Community Growth

• Cisco Cloud Application Security (Panoptica) at Cisco Live 2024 Amsterdam

• 23andMe Faces Privacy Breach

• NSA Admits Buying American Browsing Records From Shady Markets

• In Final Talks on Proposed UN Cybercrime Treaty, EFF Calls on Delegates to Incorporate Protections Against Spying and Overcriminalization or Reject Convention

• Decoding the Maze: A Guide to Cyber Security Risk Assessment Models

• ‘Mother of All Breaches’: 26 Billion Personal Records and Passwords Leaked

• Hearings on Canada’s proposed cybersecurity law to start today

• Phobos Ransomware Family Expands With New FAUST Variant

• Global Partner Engineering Building Momentum into 2024

• How ChatGPT changed the world – a timeline

• US Lawmakers Tell DOJ to Quit Blindly Funding ‘Predictive’ Police Tools

• PoC Exploit Published for Critical Jenkins Vulnerability

• Vulnerabilities in WatchGuard, Panda Security Products Lead to Code Execution

• Canadian Man Sentenced to Prison for Ransomware Attacks

• US Senator Exposes NSA Purchase of Americans’ Internet Records

• indicators of compromise (IOC)

• Juniper Networks Releases Security Bulletin for J-Web in Junos OS SRX Series and EX Series

• BO Team hackers wipe 2 Peta Bytes Satellite data from Planeta

• Amazon Abandons $1.4bn iRobot Buy Amidst EU Opposition

• Ermac malware: The other side of the code

• Microsoft Expects AI Revenue Growth As Shares Surge

• AI Companies Will Need to Start Reporting Their Safety Tests to the US Government

• US Aid Office in Colombia Reports Its Facebook Page Was Hacked

• Why CNAPP Will Be a Key Enabler for DevSecOps in 2024

• Apple Engineering Veteran Departs For EV Maker Rivian

• Huawei Electric Car Partner Sees Revenue Surge

• E-Rate Update: $4.5 Billion for Discounts Available

• NSA buys internet browsing records from data brokers without a warrant

• Palo Alto Networks — Strategic Partner on the Road to Quantum Readiness

• Q&A – Dr. Ryan Heartfield: 3 things to remember when securing your Industrial OT environment

• What the Charges Against the SolarWinds CISO Mean for Security in 2024

• Improved Access Review

• Improved SoD Results Accuracy

• Dynatrace acquires Runecast to improve cloud-native security

• Researchers Uncover How Outlook Vulnerability Could Leak Your NTLM Passwords

• AI Image Generation Breakthrough Predicted to Trigger Surge in Deepfakes

• Pegasus Spyware Targets Two Journalists in Togo: RSF

• Juniper Networks introduces AI-Native Networking Platform

• Nigerian ‘Yahoo Boys’ Behind Social Media Sextortion Surge in the US

• Navigating the Cloud: Strategies for Secure Data Storage

• Brave Sunsets Strict Fingerprinting Block Setting For Better Browsing

• Critical Authentication Bypass Flaw Patched In GoAnywhere MFT

• Exploit Released for Critical Jenkins RCE Flaw

• Cisco Customer Experience (CX) Sweepstakes at Cisco Live EMEA

• Microsoft Executives Hacked

• SecurityWeek Analysis: Cybersecurity M&A Dropping, Over 400 Deals Announced in 2023

• The Rise of AI Restrictions: 25% of Firms Slam the Door on AI Magic

• Cyber Security Today, Jan. 29, 2024 – SolarWinds demands fraud allegation be dropped, a Canadian sentenced for ransomware attacks, and more

• Apple ‘Infringes DMA’ With New EU Developer Terms

• Previous Most Inspiring Women in Cyber Winners: Where Are They Now?

• Microsoft Provides Defense Guidance After Nation-State Compromise

• Bastille Networks Raises $44 Million to Secure Wireless Devices

• DEEP TECH NEWS: Respecting individual rights by using ‘privacy preserving aggregate statistics’

• Ten Simple Steps to Improve SOC Efficiency

• Fix Available for Critical Jenkins Flaw That Leads to RCE Attacks

• Albabat, Kasseika, Kuiper: New Ransomware Gangs Rise with Rust and Golang

• Riding the AI Waves: The Rise of Artificial Intelligence to Combat Cyber Threats

• 493 Companies Share Their SaaS Security Battles – Get Insights in this Webinar

• X Blocks Taylor Swift Searches After Spread Of Fake AI Images

• Silicon UK In Focus Podcast: The Future of GenAI

• Fortnite To Return To iPhones In European Union

• Building Resilient Web Applications on AWS: A Comprehensive Approach to Security

• Data Privacy Day: Privacy budgets expected to decrease in 2024

• Critical Jenkins RCE flaw exploited in the wild. Patch now! (CVE-2024-23897)

• Data Privacy Day: Privacy budgets expected to decrease in 2024, new research from ISACA reveals

• 16-30 November 2023 Cyber Attacks Timeline

• Why It’s Critical to Integrate SIEM Solutions into Your Organization’s Security Strategy

• Dark Web Drugs Vendor Forfeits $150m After Guilty Plea

• Emerging Paradigms and Innovations in Software Development Trends for 2024

• CI/CD at Risk as Exploits Released For Critical Jenkins Bug

• IBM i and Tripwire Enterprise: What you need to know

• Why the OWASP API Security Top 10 is Essential for Every Business

• Ukraine’s SBU arrested a member of Pro-Russia hackers group ‘Cyber Army of Russia’

• The New Cybercrime Atlas: A Collaborative Approach to Fighting Digital Crime

• NSA Admits Secretly Buying Your Internet Browsing Data without Warrants

• Data Security concerns make US Cloud Companies impose ban on China AI Training

• Essential Security Certifications for Consumer Mobile Devices: A Comprehensive Guide

• Third-party risk management best practices and why they matter

• Malicious PyPI Packages Slip WhiteSnake InfoStealer Malware onto Windows Machines

• Prioritizing cybercrime intelligence for effective decision-making in cybersecurity

• Global critical infrastructure faces relentless cyber activity

• Indian state government fixes website bugs that exposed residents’ sensitive documents

• Cybercriminals embrace smarter strategies, less effort

• Exploring the intersection of network security and modern technologies

• Third-Party Security Assessments: Vendor Risk Management

• Tesla hacks make big bank at Pwn2Own’s first automotive-focused event

• Buzzing on Christmas Eve: Trigona Ransomware in 3 Hours

• Cyber Insurance for Businesses: Navigating Coverage

Generated on 2024-01-30 23:56:22.146316