IT Security News Daily Summary 2024-01-31

• Facebook Approves Pro-Anorexia And Drug Ads Made With Its Own AI Tool

• Crooks stole around $112 million worth of XRP from Ripple’s co-founder

• Actively Exploited Vulnerability in Hitron DVRs: Fixed, Patches Available

• The Web Scraping Problem: Part 1

• How Akamai Volunteers Helped Restore Costa Rica?s Most Polluted Beach

• Opening Statement by CISA Director Jen Easterly

• Ivanti discloses new zero-day flaw, releases delayed patches

• Europcar says someone likely used ChatGPT to promote a fake data breach

• What Apple’s Promise to Support RCS Means for Text Messaging

• US Gov Disrupts SOHO Router Botnet Used by Chinese APT Volt Typhoon

• RunC Flaws Enable Container Escapes, Granting Attackers Host Access

• CISA adds Apple improper authentication bug to its Known Exploited Vulnerabilities catalog

• AI for Web Devs: Addressing Bugs, Security, and Reliability

• Five Best Data De-Identification Tools To Protect Patient Data and Stay Compliant

• OpenAI study reveals surprising role of AI in future biological threat creation

• What Is Cyber Threat Hunting? (Definition & How it Works)

• Apple fixes zero-day bug in Apple Vision Pro that ‘may have been exploited’

• Dozens of Rogue California Police Agencies Still Sharing Driver Locations with Anti-Abortion States

• Daniel Stori’s ‘Help’

• Scaling security with AI: from detection to solution

• Ransomware payment rates drop to new low – only 29% of victims are forking over cash

• FBI confirms it issued remote kill command to blow out Volt Typhoon’s botnet

• Cisco Fixed Critical RCE Flaw In Unified Communications Products

• Ivanti VPN Flaws Exploited to Spread KrustyLoader Malware

• What is Email Hijacking? – Email Account Takeover Protection Guide – 2024

• SIEM Volume Spike Alerts Using ML

• security operations center (SOC)

• FTX Abandons Crypto Exchange Return

• Securing Your SaaS Landscape: Closer Look at Disaster Recovery, Posture Management

• 7 cloud IAM challenges and how to address them

• US disrupts China-backed hacking operation amid warning of threat to American infrastructure

• Nearly 4-year-old Cisco vuln linked to recent Akira ransomware attacks

• After Delays, Ivanti Patches Zero-Days and Confirms New Exploit

• GNU C Library Vulnerability Leads to Full Root Access

• Podcast: Palo Alto Networks Talks IT/OT Convergence

• Russian Internet Outage: DNSSEC Oops or Ukraine Hack?

• Alphabet’s Ad Revenue Miss Punished By Investors

• We know nations are going after critical systems, but what happens when crims join in?

• The Wordfence 2023 State of WordPress Security Report

• OAS Engine Deep Dive: Abusing low-impact vulnerabilities to escalate privileges

• Change Your Password Day: Navigating the Shift Towards a Passwordless Future

• Top 8 Cloud Storage Security Issues & Risks (+ Mitigations)

• Free and Downloadable Threat & Vulnerability Management Templates

• Keenan Data Breach Puts Personal Data Of 1.5 Million People at Risk

• Tax Season is Upon Us, and So Are the Scammers

• Industrial firms must pay more attention to OT cybersecurity, says vendor

• Microsoft Profit Rises 33 Percent Thanks To AI, Cloud

• CISA Adds One Known Exploited Vulnerability to Catalog

• Hackers steal $112 million of XRP Ripple cryptocurrency

• Security giant Proofpoint is laying off 280 employees, about 6% of its workforce

• Privacy Watchdog Fines Italy’s Trento City for Privacy Breaches in Use of AI

• Cyberattack on Bucks County’s Emergency System

• Warning: Threat actors getting around some Ivanti mitigations

• Vade uses generative AI to enhance spear-phishing detection

• A zero-day vulnerability (and PoC) to blind defenses relying on Windows event logs

• Experian Fraud Protect enables automotive dealers to detect and prevent fraud

• EU Launches First Cybersecurity Certification for Digital Products

• Pawn Storm’s Stealthy Net-NTLMv2 Assault Revealed

• Orange Espana data breach leads to more ransomware attacks

• CISA and FBI Release Secure by Design Alert Urging Manufacturers to Eliminate Defects in SOHO Routers

• Sustainability: From Strategy to Reality

• Achieving Operational Simplicity with a Network Platform Approach

• Ivanti releases patches for VPN zero-days, discloses two more high-severity vulns

• Reken Emerges From Stealth With $10 Million Seed Funding

• Kentik AI improves network monitoring and observability

• US Senators Propose Cybersecurity Agriculture Bill

• U.S. Treasury Imposes Sanctions on Alleged ISIS Cybersecurity Experts

• Ivanti warns of a new actively exploited zero-day

• EFF and Access Now’s Submission to U.N. Expert on Anti-LGBTQ+ Repression

• SentinelOne and Sekoia.io Integration

• Cruise Faces $1bn Spending Cut By Parent GM

• Why AI and behavioral analytics are stealth strengths of Gartner’s MQ on endpoints

• Ivanti patches two zero-days under attack, but finds another

• Cactus Ransomware behind Schneider Electrics Data Breach

• VikingCloud THOR AI offers real-time interactive analytics

• Jetico updates BCWipe Total WipeOut to meet the NIST hard drive wipe requirements

• Sysdig Report Exposes 91% Failure in Runtime Scans

• Data security posture management vs cloud security posture management

• Oasis Security leaves stealth with $40M to lock down the wild west of non-human identity management

• Confronting the SaaS Data Protection and Security Crisis

• Protect AI Acquires Laiyer AI to Better Secure AI Models

• US Sanctions Three for Cyber Work for ISIS

• Omada introduces real time identity governance

• Alert: Ivanti Discloses 2 New Zero-Day Flaws, One Under Active Exploitation

• Protect AI expands efforts to secure LLMs with open source acquisition

• Limited Time Deal: a Lifetime of Powerful VPN Protection is Just $35 Through 2/4

• Cisco and Hitachi Vantara Simplify Hybrid Cloud Adoption with New IaaS and Flexible Consumption Options

• Leaked GitHub Token Exposed Mercedes Source Code

• Tor Code Audit Finds 17 Vulnerabilities

• Mercedes-Benz Accidentally Leaked Private Data, Including Source Code

• Apple’s Shield Shattered: The Critical Flaw in iPhone Theft Defense

• AI-Powered Attacks and Deepfake Technology Fuel Cyberattack Concern

• Cyber Security Today, Jan. 31, 2024 – A new ransomware strain found, and questions about the level of ransomware payments

• Aim Security raises $10 million to unlock the full potential of GenAI technology

• Hackers Hijacking MS-SQL Servers to Install Mimic Ransomware

• U.S. Officials Detained a 19-year-old SIM-Swap Hacker

• Pinterest’s Transition to HTTP/3: A Boost in Performance and Reliability

• 45,000 Exposed Jenkins Instances Found Amid Reports of In-the-Wild Exploitation

• US Sanctions Two ISIS-Affiliated ‘Cybersecurity Experts’

• How to Align Your Incident Response Practices With the New SEC Disclosure Rules

• Aim Security Raises $10M to Tackle Shadow AI

• Two More Individuals Charged for DraftKings Hacking

• Telegram Marketplaces Fuel Phishing Attacks with Easy-to-Use Kits and Malware

• PayPal To Axe 9 Percent Of Global Workforce

• Schneider Electric Energy Giant Confirms Cactus Ransomware Attack

• Apple and Google Just Patched Their First Zero-Day Flaws of the Year

• Threat actors exploit Ivanti VPN bugs to deploy KrustyLoader Malware

• ProcessUnity unveils all-in-one platform for third-party risk management

• US Sanctions Egyptian IT Experts Aiding ISIS in Cybersecurity

• Elon Musk $56 Billion Tesla Pay Package Vetoed By Judge

• 45K+ Exposed Jenkins Instances Vulnerable to RCE Attacks

• ApateWeb: An Evasive Large-Scale Scareware and PUP Delivery Campaign

• ESET takes part in global operation to disrupt the Grandoreiro banking trojan

• Introducing meaningful AI features for information security in 2024

• Heimdal® Launches Partner NEXUS: A Unified and Global Partner Program for Collective Success

• Unveiling the AWS Public IP Puzzle: Solvo’s Query and Cost-Saving Tips

• Decrypting the Threat: Telegram’s Dark Markets and the Growing Menace of Phishing Networks

• Veza integrates with Google Drive to secure access to enterprise files

• Italian Businesses Hit by Weaponized USBs Spreading Cryptojacking Malware

• The SEC Won’t Let CISOs Be: Understanding New SaaS Cybersecurity Rules

• Gift Yourself a Year of Online Protection for Only $50 Through 2/4

• An EU Prime! EU adopts first Cybersecurity Certification Scheme

• Critical Flaws Found in GNU C Library, Major Linux Distros at Risk

• Hitron DVR Zero-Day Vulnerabilities Exploited by InfectedSlurs Botnet

• Hackers Exploiting Ivanti VPN Flaws to Deploy KrustyLoader Malware

• Citibank Sued For Failing to Protect Fraud Victims

• GitLab Patched A Workspace Creation Vulnerability With An Emergency Update

• ICS and OT threat predictions for 2024

• Data leak at fintech giant Direct Trading Technologies

• 10 Best User Access Review Software (2024)

• City Cyber Taskforce Launches to Secure Corporate Finance

• Threat Actors Using Adult Games To Launch Remcos RAT Attack

• Navigating TuxCare’s Enterprise Support for AlmaLinux

• Free ransomware recovery tool White Phoenix now has a web version

• Pawn Storm Uses Brute Force and Stealth Against High-Value Targets

• Chinese Hackers Exploiting VPN Flaws to Deploy KrustyLoader Malware

• “45K+ Exposed Jenkins Instances Vulnerable to RCE Attacks”

• New Glibc Flaw Grants Attackers Root Access on Major Linux Distros

• Australian companies breach no ransomware payment policy

• Precision in Action: A Guide to Handling Cybersecurity Incidents

• Does CVSS 4.0 solve the exploitability problem?

• How to make developers accept DevSecOps

• Proactive cybersecurity: A strategic approach to cost efficiency and crisis management

• Bigger, Faster, Stronger: The New Standard for Public Cybersecurity Companies

• Database management enters a new era of complexity

• Cybercriminals replace familiar tactics to exfiltrate sensitive data

• Geopolitical Cybersecurity Risks for International Businesses

• Check Point Software Unveils the Infinity Platform: Pioneering the Future of AI-Powered, Cloud-Delivered Cyber Security

• Canadian government investigating another hack at Global Affairs

• Singapore’s National Research and Education Network (SingAREN) Protects Vital Research with Check Point Software

• Evolution of UNC4990: Uncovering USB Malware’s Hidden Depths

• Insider Threat Detection Technology for Businesses

• Retailers at critical juncture due to severe tech gaps: SOTI study

• Cisco Store Xplorer: An AR Experience

• McCaffrey Joins ‘ASTORS’ Champion SIMS Software Board of Advisors

• Approaching Complex Data Security for Small Businesses

• Best Methods for Storing, Protecting Digital Company Files: Secure Strategies for Data Safety

• Should You Shut Down Your Computer Every Night? 8 Considerations

• Microsoft Teams External Access Abuses to Spread DarkGate Malware

• The Latest Identity Theft Methods: Essential Protection Strategies Revealed

• Root access vulnerability in GNU Library C (glibc) impacts many Linux distros

• 7 hacking tools that look harmless but can do real damage

• IT Security News Daily Summary 2024-01-30

• The Taylor Swift deepfake porn is nothing new – but that doesn’t mean we shouldn’t be concerned

• The WordPress 6.4.3 Security Update – What You Need to Know

• Top 7 Cloud Storage Security Issues & Risks (+ Mitigations)

• Lawmaker Sues Facebook After Son Dies By Suicide

• Italian data protection authority said that ChatGPT violated EU privacy laws

• New Mitigations to Defend Against Exploitation of Ivanti Connect Secure and Policy Secure Gateways

• 750 million Indian mobile subscribers’ data offered for sale on dark web

• New Images of Colossus Released

• USENIX Security ’23 – Keane Lucas, Samruddhi Pai, Weiran Lin, Lujo Bauer, Michael K. Reiter, Mahmood Sharif – Adversarial Training for Raw-Binary Malware Classifiers

• Effortlessly upgrade to Passkeys on Pixel phones with Google Password Manager

• Rethinking Data Governance: Metrics for Meaningful Outcomes

• Fla. Man Charged in SIM-Swapping Spree is Key Suspect in Hacker Groups Oktapus, Scattered Spider

• Hybrid Work in Government Survey Results: Big Trends Revealed

• What InfoSec Leaders Need to Know About AI

• Most Ransom Groups Now Using Extortion, Delinea Survey Finds

• Device and Data Security in Embedded Systems

• data loss

• US shorts China’s Volt Typhoon crew targeting America’s criticals

• AlphaCodium: Your New Coding Assistant

• The Role of Biometrics in a Zero Trust Landscape

• Government vows to address corporate privacy worries in proposed cybersecurity law

• Securing APIs From Left to Right (and Everywhere in Between)

• Reimagine Your Data Center for Responsible AI Deployments

• Jenkins jitters as 45,000 servers still vulnerable to RCE attacks after patch released

• ‘Extremely serious’ — Mercedes-Benz Leaks Data on GitHub

• Schneider Electric Confirms Data Accessed in Ransomware Attack

• FBI Warns of Tech Support Courier Scam Aiming at Cash and Metals

• Brazilian Feds Dismantle Grandoreiro Banking Trojan, Arresting Top Operatives

• Orange España Breach: Dark Web Flooded With Operator Credentials

• Mitsubishi Electric MELSEC WS Series Ethernet Interface Module

• Mitsubishi Electric FA Engineering Software Products

• Emerson Rosemount GC370XA, GC700XA, GC1500XA

• Breaking the code: new models for today’s outcome-based partnerships

• The Ransomware Threat in 2024 is Growing: Report

• ChatGPT Violated European Privacy Laws, Italy Tells Chatbot Maker OpenAI

• Congratulations to the Top MSRC 2023 Q4 Security Researchers!

• $1,275 Bounty Awarded For Arbitrary File Deletion Vulnerability Patched in MW WP Form WordPress Plugin

• Aembit Teams Up with CrowdStrike for Secure Workload Access

• NFT Wallets Unleashed: A Data Structures and Application Design Journey

• URGENT: Upgrade GitLab – Critical Workspace Creation Flaw Allows File Overwrite

• Juniper Networks released out-of-band updates to fix high-severity flaws

• Platforms in Action — Three Companies That Supercharged Risk Posture

• Tapping into the Potential of Generative AI in Cybersecurity

• USENIX Security ’23 – Simone Aonzo, Yufei Han, Alessandro Mantovani, Davide Balzarotti – Humans vs. Machines in Malware Classification

• Don’t Misdefine Network Security in 2024: Include On-Prem and Cloud

• Insurance Broker Keenan Says 1.5 Million Affected by Data Breach

• Alpha Ransomware Group Launches Data Leak Site on the Dark Web

• Ransomware attack news trending on Google

• What is incident response? A complete guide

• How to manage Fedora’s firewall without using the command line

• 3 security gadgets I never leave home without

• Why you can benefit from using Always On VPN

• Cloud Data Security in 2024

• Thinking about a Career in Cybersecurity? Follow this Path

• Image Test

• Reg story prompts fresh security bulletin, review of Juniper Networks’ CVE process

• Cyber Attacks by North Korean Hackers on Cryptocurrency Platforms Reach $1 Billion in 2023

• U.S. has disabled parts of Chinese hacking infrastructure, says Reuters

• US Mounts Operation Against Chinese Hacking Network

• APT Hackers Use FalseFont Backdoor to Remotely Hack Computers

• Ransomware Research Reveals Millions Spent Despite Do Not Pay Policies

• US Disrupted Chinese Hacking Operation Aimed at Critical Infrastructure: Report

• US Lawmakers Introduce Farm and Food Cybersecurity Act

• Juniper Networks Patches Vulnerabilities in Switches, Firewalls

• Data of 750 Million Indian Mobile Subscribers Sold on Hacker Forums

• Data Collaboration Platforms Ruling the Charts in Unlocking Sophisticated AI Models

• Hearings on Canada’s proposed cybersecurity law begin

• Siren launches AI-Powered search with mobile access for front line officers

• SentinelOne unveils threat hunting capabilities in its WatchTower and WatchTower Pro

• Rust Payloads Exploiting Ivanti Zero-Days Linked to Sophisticated Sliver Toolkit

• SAS joins fight against cybercrime as NCRCG National Ambassador

• SentinelOne Delivers Real-Time Managed Threat Hunting Services

• NordVPN Link Checker protects users from malicious websites

• China-Linked Hackers Target Myanmar’s Top Ministries with Backdoor Blitz

• Deloitte Partners with Memcyco to Combat ATO and Other Online Attacks with Real-Time Digital Impersonation Protection Solutions

• Peugot To Integrate ChatGPT Across Car Line

• Aembit Announces New Workload IAM Integration with CrowdStrike to Help Enterprises Secure Workload-to-Workload Access

• Ubuntu 22.04 Kernel Updated to Linux Kernel 6.5

• Synthetic Data: How Does the ‘Fake’ Data Help Healthcare Sector?

• NSA Confession: Unlawful Surveillance on Americans Exposed

• Ransomware Incidents Hit Record High, But Law Enforcement Takedowns Slow Growth

• Germany ‘To Approve’ EU’s AI Act

• Mapping attacks on generative AI to business impact

• Simple Yet Vital Tips to Send Documents Securely via Email

• Atropos Health partners with Google Cloud to rapidly generate insights from healthcare data using AI

• What’s Trending? How about NACs

• Beyond the Race: An Ironman Journey of Endurance, Inclusion, and Growth

• Charting the path to a sustainable future with AI for energy efficiency

• Can MS Outlook Calendar Leak Your Password?

• China Approves More AI Language Models As US Tightens Controls

• Excessive Expansion Vulnerabilities Leave Jenkins Servers Open to Attacks

• Robots Are Fighting Robots in Russia’s War in Ukraine

• NSA Buying Bulk Surveillance Data on Americans without a Warrant

• Navigating the Landscape of Advanced Email Security Threats with Optimism

• Schneider Electric Division Responding to Ransomware Attack, Data Breach

• 1.5 Million Affected by Data Breach at Insurance Broker Keenan & Associates

• What the Government Can Learn from the Private Sector in Pursuit of Zero Trust

• Protecting Your Business and Personal Data

• Navigating Secure Adoption of AI Across Government and Connected Infrastructure

• North Korea–Russia Summit

• Self-managed GitLab installations should be patched again (CVE-2024-0402)

• Cybersecurity concerns rise with Elon Musk Telepathy Neuralink technology

• Italy Says ChatGPT Violates Data Protection Rules

• Beware of Phobos Ransomware Delivered via Office Document

• HaystackID enhances Protect Analytics AI Suite to strengthen data analysis

• Italian Data Protection Watchdog Accuses ChatGPT of Privacy Violations

• Top Security Posture Vulnerabilities Revealed

• Apple Warns UK Against Instituting ‘Secret Veto’ On Security Tech

• What the Bitcoin ETF Approval Mean for the Crypto Market

• Musk’s Neuralink Conducts First Human Brain Implant

• Qualys expands partnership with Orange Cyberdefense to optimize vulnerability management activities

• FBI: Scammers Are Sending Couriers to Collect Cash From Victims

• Protecting against software supply chain attacks

• HISCOX Cyber Readiness Report Shines Light on Commercial Cybersecurity

• UK biometrics boss bows out, bemoaning bureaucratic blunders

• UK House of Lords Calls For Legislation on Facial Recognition Tech

• New ZLoader Malware Variant Surfaces with 64-bit Windows Compatibility

• Hundreds of network operators’ credentials found circulating in Dark Web

• Detecting Berylian attacks: Sekoia SOC Platform used in NATO CCDOE Crossed Swords 2023

• Cactus ransomware gang claims the Schneider Electric hack

• GitLab Flaw Let Attackers Write Files to Arbitrary Locations

• Progressive Profiling 101: Right User Info at the Right Time

• In Final Talks on Proposed UN Cybercrime Treaty, EFF Calls on Delegates to Incorporate Protections Against Spying and Restrict Overcriminalization or Reject Convention

• Faction: Open-source pentesting report generation and collaboration framework

• Great security or great UX? Both, please

• Ransomware recap 2023 highlights cybersecurity crisis

• Juniper Networks Releases Urgent Junos OS Updates for High-Severity Flaws

• Unlocking sustainable security practices with secure coding education

• Congratulating Check Point’s CPX APAC Partner Award Winners

• Business Cybersecurity Frameworks: Choosing the Right Fit

• Balancing AI benefits with security and privacy risks in healthcare

• Business Email Encryption: Protecting Sensitive Communications

• An In-Depth Guide to the 11 New ISO 27001 Controls

• Dark Web Drug Lord Pleads Guilty, Forfeits $150M Cryptocurrency

• Citizen Lab details ongoing battle against spyware vendors

Generated on 2024-01-31 23:55:54.857558