IT Security News Daily Summary 2024-02-01

• Anonymous Sudan Claims DDOS Attacks on UAE’s Flydubai Airline

• The Mystery of the $400 Million FTX Heist May Have Been Solved

• Facebook Founder Zuckerberg Appears Before Congress And Apologizes For Harm To Children

• The $400 Million FTX Heist Mystery May Have Been Solved

• CISA Hosts Second Cyber Resilient 911 Symposium

• FBI Disrupts Chinese State-Backed Volt Typhoon’s KV Botnet

• Legal and Compliance Considerations in Cloud Computing

• CISA orders federal agencies to disconnect Ivanti VPN instances by February 2

• Critical infrastructure hacks raise alarms on Chinese threats

• Heimdal Partners with Jupiter Technology to Distribute Cybersecurity Solutions in Japan

• UN Cybercrime Treaty Could Endanger Web Security

• The many ways electric cars are vulnerable to hacks, and whether that matters in a real-world

• Tesla Sued By Californian Counties Amid Hazardous Waste Allegations

• ANY.RUN Sandbox Now Let SOC & DFIR Teams Analyze Sophisticated Linux Malware

• Arrests in $400M SIM-Swap Tied to Heist at FTX?

• Biden will veto attempts to kill off SEC’s security breach reporting rules

• Rise of deepfake threats means biometric security measures won’t be enough

• How attractive are our Canadian cities to cybersecurity professionals – and why does it matter?

• Google Signs Major Offshore Wind Deal

• Hackers Uncover Airbus EFB App Vulnerability, Risking Aircraft Data

• Game on: Level up your AI knowledge with Cisco U.

• Optimize Control Health Management Across Business Levels: Introducing Scopes

• Telegram is a Wide-Open Marketplace for Phishing Tools

• Here is Apple’s official ‘jailbroken’ iPhone for security researchers

• US gives federal agencies 48 hours to disconnect flawed Ivanti VPN tech

• A Startup Allegedly ‘Hacked the World.’ Then Came the Censorship—and Now the Backlash

• AVEVA Edge products (formerly known as InduSoft Web Studio)

• Gessler GmbH WEB-MASTER

• CISA Releases Two Industrial Control Systems Advisories

• Biden will veto attempts to rip up SEC breach reporting rule

• Mercedes-Benz Accidentally Reveals Secret Code

• Unprecedented Data Breach Exposes Personal Information of Millions in India

• Top 8 cloud IAM best practices to implement

• Retail Tech Deep-Dive: Webex Connect

• CISA Sets 48-hour Deadline for Removal of Insecure Ivanti Products

• FBI Warning: China Will Hack US Infra. (via Router Botnet)

• Proposed Canadian AI law is like a race car without an engine, expert tells Parliamentary committee

• US Agencies Failure to Oversee Ransomware Protections Threaten White House Goals

• Third Of European Businesses Have Adopted AI, Says AWS

• The Power and Limitations of AI in Cybersecurity

• Hundreds of Network Operators’ Credentials Compromised on Dark Web

• FritzFrog Returns with Log4Shell and PwnKit, Spreading Malware Inside Your Network

• Wordfence Intelligence Weekly WordPress Vulnerability Report (January 22, 2024 to January 28, 2024)

• FTC issues ban on location data and bars information brokers from duties

• Cisco AppDynamics observability solutions help partners expand their business

• Imperva uncovers new Indicators of Compromise for FBI and CISA-flagged AndroxGh0st botnet

• Optimizing Data Lakes: Streamlining Storage with Effective Object Management

• Watch: Top Cyber Officials Testify on China’s Cyber Threat to US Critical Infrastructure

• ‘Leaky Vessels’ Container Escape Vulnerabilities Impact Docker, Others

• Interpol-Led Initiative Targets 1300 Suspicious IPs

• Shareholders To Vote On Tesla Move To Texas, After Delaware Ruling

• UK Police Holding Bitcoin Worth £1.4 Billion – Report

• The Multicloud Landscape: Global Trends, Sovereignty, and Cisco’s Strategic Support

• The State of Ransomware 2024

• Aim Security to Limit Exposure of Sensitive Data to Generative AI Services

• FritzFrog botnet exploits Log4Shell, PwnKit vulnerabilities

• Pump-and-Dump Schemes Make Crypto Fraudsters $240m

• Okta lays off 400 employees — almost exactly a year after last staff cuts

• What is HTTP Request Smuggling and HTTP/2 Downgrading?

• Top 11 Privileged Access Management Solutions (2024)

• Man Sentenced to Prison for Stealing Millions in Cryptocurrency via SIM Swapping

• Qualys enhances CyberSecurity Asset Management to discover risky unmanaged devices

• Graylog API Security enables organizations to identify and classify APIs

• Fake Voicemail as Credential Harvesting Lure

• Generative AI is the Pride of Cybercrime Services

• LockBit shows no remorse for ransomware attack on children’s hospital

• Biden Will Veto Efforts to Spike SEC Breach Disclosure Rule

• AI Poison Pill App Nightshade Received 250K Downloads in Five Days

• Exposed Docker APIs Under Attack in ‘Commando Cat’ Cryptojacking Campaign

• Google’s Bazel Exposed to Command Injection Threat

• Short, Mid and Long-Term Impacts of AI in Cybersecurity

• At Least 30 Journalists, Lawyers and Activists Hacked With Pegasus in Jordan, Forensic Probe Finds

• New York Sues Citibank Over Poor Data Security

• Three Compliance Management Solutions for Technology Decision-Makers

• Is Your Remote Workforce Truly Safe? Three Reasons Zero-Trust is the Answer

• FBI disrupts Chinese botnet used for targeting US critical infrastructure

• Secureworks Threat Score reduces alert noise and time to respond

• The Cost of Not Conducting a Network Infrastructure Risk Assessment: A Costly Gamble

• Cisco Revolutionizes Networking with Pay-As-You-Go for Equinix Network Edge and Equinix Fabric

• Interview: Former FBI Analyst on the CJIS MFA Mandate & Duo

• 10 Best Privileged Identity Management Tools (2024)

• Huber Heights Under Siege: Ransomware Attack Hits 5,000+ Residents

• The Dual Landscape of LLMs: Open vs. Closed Source

• US Thwarts Volt Typhoon Cyber Espionage Campaign Through Router Disruption

• Ripple Co-Founder’s Personal XRP Wallet Breached in $112 Million Hack

• Pawn Storm APT Launch Hash Relay Attacks on Government Departments

• Grandoreiro Banking Malware Infrastructure Seized by Authorities

• U.S. Feds Shut Down China-Linked “KV-Botnet” Targeting SOHO Routers

• Mark Zuckerberg Apologises To Parents At Senate Hearing

• Audio-jacking: Using generative AI to distort live audio transactions

• Protecting Critical Infrastructure from Cyber Attack

• Ruthless Prioritization Is a Myth: Aim For Risk-Less Prioritization Instead

• Ditch the Worry – Switch to Secure WhatsApp Alternative

• Why Are Cybersecurity Automation Projects Failing?

• Johnson Controls Ransomware Attack: Data Theft Confirmed, Cost Exceeds $27 Million

• Strengthening Cybersecurity in Local Government: How to Protect Networks Amid an Epidemic

• BackBox introduces ZTNO to automate zero trust security for network operations

• Dynatrace provides end-to-end observability of AI applications

• HeadCrab 2.0 Goes Fileless, Targeting Redis Servers for Crypto Mining

• Why the Right Metrics Matter When it Comes to Vulnerability Management

• Hiring Kit: Cyber Threat Hunter

• Mobile Device Security Policy

• TechRepublic Premium Editorial Calendar: Policies, Checklists, Hiring Kits and Glossaries for Download

• Multiple malware used in attacks exploiting Ivanti VPN flaws

• Apple Patches Vision Pro Vulnerability as CISA Warns of iOS Flaw Exploitation

• CISA and FBI Warn of AndroxGh0st Malware Threat

• Salt Security Joins AWS Lambda Ready Program

• Threat actor used Vimeo, Ars Technica to serve second-stage malware

• Two Ivanti Zero-Day Vulnerabilities Demand Immediate User Attention

• Protect AI acquires Laiyer AI to extend company’s AI/ML security capabilities

• Managing Financial Crime Risks in Digital Payments

• Streamlining the Cybersecurity Maturity Model Certification (CMMC)

• The True Cost of Employee Fraud

• Ivanti Releases Zero-Day Patches and Reveals Two New Bugs

• Unveiling the intricacies of DiceLoader

• Hackers Started using Python for Developing New Ransomware

• ESET Research Podcast: ChatGPT, the MOVEit hack, and Pandora

• Police seized 50,000 Bitcoin from operator of the now-defunct piracy site movie2k

• CISA Warns of Active Exploitation of Critical Flaws in Apple iOS and macOS

• Warning: New Malware Emerges in Attacks Exploiting Ivanti VPN Vulnerabilities

• ESG Research Unearths Critical Insights for Future-Proofing Encryption and Key Management

• Mercedes-Benz Source Code Leaked via mishandled GitHub token

• Can cyber attacks cause societal panic in America

• Zero trust implementation: Plan, then execute, one step at a time

• Custom rules in security tools can be a game changer for vulnerability detection

• CISA Warns of Active Exploitation of Critical Vulnerability in iOS, iPadOS, and macOS

• Payment fraud is hitting organizations harder than ever before

• Third-Party Cybersecurity Risk Management: A Short Guide for 2024

• CVEMap: Open-source tool to query, browse and search CVEs

• Unpacking the challenges of AI cybersecurity

• Artificial Intelligence in Business: Challenges and Benefits

• Infosec products of the month: January 2024

• Navigating the Cyber security Maze for Small and Medium Business: How Quantum Spark 1900 & 2000 are Reshaping Security for SMBs and MSPs

• US Says It Disrupted a China Cyber Threat, but Warns Hackers Could Still Wreak Havoc for Americans

• US Says it Disrupted a China Cyber Threat, but Warns Hackers Could Still Wreak Havoc for Americans

• YouTube, Discord, and ‘Lord of the Rings’ Led Police to a Teen Accused of a US Swatting Spree

• Congress told how Chinese attackers plan to incite ‘societal chaos’ in the US

• YouTube, Discord, and ‘Lord of the Rings’ Led Police to a Teen Accused of a US Swatting Spree

• New Technology for an Old Industry – Coffee and Conversations podcast

• AppOmni Harnesses Google Data Center in Australia to Address Regional Demand for Specialised SaaS Security Solutions

• Biometric Authentication in Business: Enhancing Security

• Worried About AI Voice Clone Scams? Create a Family Password

• News alert: Reken raises $10M from Greycroft to protect against generative AI-enabled fraud

• IT Security News Daily Summary 2024-01-31

• Facebook Approves Pro-Anorexia And Drug Ads Made With Its Own AI Tool

• Crooks stole around $112 million worth of XRP from Ripple’s co-founder

• Actively Exploited Vulnerability in Hitron DVRs: Fixed, Patches Available

• The Web Scraping Problem: Part 1

• How Akamai Volunteers Helped Restore Costa Rica?s Most Polluted Beach

• Opening Statement by CISA Director Jen Easterly

• Ivanti discloses new zero-day flaw, releases delayed patches

• Europcar says someone likely used ChatGPT to promote a fake data breach

• What Apple’s Promise to Support RCS Means for Text Messaging

• US Gov Disrupts SOHO Router Botnet Used by Chinese APT Volt Typhoon

• RunC Flaws Enable Container Escapes, Granting Attackers Host Access

• CISA adds Apple improper authentication bug to its Known Exploited Vulnerabilities catalog

• AI for Web Devs: Addressing Bugs, Security, and Reliability

• Five Best Data De-Identification Tools To Protect Patient Data and Stay Compliant

• OpenAI study reveals surprising role of AI in future biological threat creation

• What Is Cyber Threat Hunting? (Definition & How it Works)

• Apple fixes zero-day bug in Apple Vision Pro that ‘may have been exploited’

• Dozens of Rogue California Police Agencies Still Sharing Driver Locations with Anti-Abortion States

• Daniel Stori’s ‘Help’

• Scaling security with AI: from detection to solution

• Ransomware payment rates drop to new low – only 29% of victims are forking over cash

• FBI confirms it issued remote kill command to blow out Volt Typhoon’s botnet

• Cisco Fixed Critical RCE Flaw In Unified Communications Products

• Ivanti VPN Flaws Exploited to Spread KrustyLoader Malware

• What is Email Hijacking? – Email Account Takeover Protection Guide – 2024

• SIEM Volume Spike Alerts Using ML

• security operations center (SOC)

• FTX Abandons Crypto Exchange Return

• Securing Your SaaS Landscape: Closer Look at Disaster Recovery, Posture Management

• 7 cloud IAM challenges and how to address them

• US disrupts China-backed hacking operation amid warning of threat to American infrastructure

• Nearly 4-year-old Cisco vuln linked to recent Akira ransomware attacks

• After Delays, Ivanti Patches Zero-Days and Confirms New Exploit

• GNU C Library Vulnerability Leads to Full Root Access

• Podcast: Palo Alto Networks Talks IT/OT Convergence

• Russian Internet Outage: DNSSEC Oops or Ukraine Hack?

• Alphabet’s Ad Revenue Miss Punished By Investors

• We know nations are going after critical systems, but what happens when crims join in?

• The Wordfence 2023 State of WordPress Security Report

• OAS Engine Deep Dive: Abusing low-impact vulnerabilities to escalate privileges

• Change Your Password Day: Navigating the Shift Towards a Passwordless Future

• Top 8 Cloud Storage Security Issues & Risks (+ Mitigations)

• Free and Downloadable Threat & Vulnerability Management Templates

• Keenan Data Breach Puts Personal Data Of 1.5 Million People at Risk

• Tax Season is Upon Us, and So Are the Scammers

• Industrial firms must pay more attention to OT cybersecurity, says vendor

• Microsoft Profit Rises 33 Percent Thanks To AI, Cloud

• CISA Adds One Known Exploited Vulnerability to Catalog

• Hackers steal $112 million of XRP Ripple cryptocurrency

• Security giant Proofpoint is laying off 280 employees, about 6% of its workforce

• Privacy Watchdog Fines Italy’s Trento City for Privacy Breaches in Use of AI

• Cyberattack on Bucks County’s Emergency System

• Warning: Threat actors getting around some Ivanti mitigations

• Vade uses generative AI to enhance spear-phishing detection

• A zero-day vulnerability (and PoC) to blind defenses relying on Windows event logs

• Experian Fraud Protect enables automotive dealers to detect and prevent fraud

• EU Launches First Cybersecurity Certification for Digital Products

• Pawn Storm’s Stealthy Net-NTLMv2 Assault Revealed

• Orange Espana data breach leads to more ransomware attacks

• CISA and FBI Release Secure by Design Alert Urging Manufacturers to Eliminate Defects in SOHO Routers

• Sustainability: From Strategy to Reality

• Achieving Operational Simplicity with a Network Platform Approach

• Ivanti releases patches for VPN zero-days, discloses two more high-severity vulns

• Reken Emerges From Stealth With $10 Million Seed Funding

• Kentik AI improves network monitoring and observability

• US Senators Propose Cybersecurity Agriculture Bill

• U.S. Treasury Imposes Sanctions on Alleged ISIS Cybersecurity Experts

• Ivanti warns of a new actively exploited zero-day

• EFF and Access Now’s Submission to U.N. Expert on Anti-LGBTQ+ Repression

• SentinelOne and Sekoia.io Integration

• Cruise Faces $1bn Spending Cut By Parent GM

• Why AI and behavioral analytics are stealth strengths of Gartner’s MQ on endpoints

• Ivanti patches two zero-days under attack, but finds another

• Cactus Ransomware behind Schneider Electrics Data Breach

• VikingCloud THOR AI offers real-time interactive analytics

• Jetico updates BCWipe Total WipeOut to meet the NIST hard drive wipe requirements

• Sysdig Report Exposes 91% Failure in Runtime Scans

• Data security posture management vs cloud security posture management

• Oasis Security leaves stealth with $40M to lock down the wild west of non-human identity management

• Confronting the SaaS Data Protection and Security Crisis

• Protect AI Acquires Laiyer AI to Better Secure AI Models

• US Sanctions Three for Cyber Work for ISIS

• Omada introduces real time identity governance

• Alert: Ivanti Discloses 2 New Zero-Day Flaws, One Under Active Exploitation

• Protect AI expands efforts to secure LLMs with open source acquisition

• Limited Time Deal: a Lifetime of Powerful VPN Protection is Just $35 Through 2/4

• Cisco and Hitachi Vantara Simplify Hybrid Cloud Adoption with New IaaS and Flexible Consumption Options

• Leaked GitHub Token Exposed Mercedes Source Code

• Tor Code Audit Finds 17 Vulnerabilities

• Mercedes-Benz Accidentally Leaked Private Data, Including Source Code

• Apple’s Shield Shattered: The Critical Flaw in iPhone Theft Defense

• AI-Powered Attacks and Deepfake Technology Fuel Cyberattack Concern

• Cyber Security Today, Jan. 31, 2024 – A new ransomware strain found, and questions about the level of ransomware payments

• Aim Security raises $10 million to unlock the full potential of GenAI technology

• Hackers Hijacking MS-SQL Servers to Install Mimic Ransomware

• U.S. Officials Detained a 19-year-old SIM-Swap Hacker

• Pinterest’s Transition to HTTP/3: A Boost in Performance and Reliability

• 45,000 Exposed Jenkins Instances Found Amid Reports of In-the-Wild Exploitation

• US Sanctions Two ISIS-Affiliated ‘Cybersecurity Experts’

• How to Align Your Incident Response Practices With the New SEC Disclosure Rules

• Aim Security Raises $10M to Tackle Shadow AI

• Two More Individuals Charged for DraftKings Hacking

• Telegram Marketplaces Fuel Phishing Attacks with Easy-to-Use Kits and Malware

• PayPal To Axe 9 Percent Of Global Workforce

• Schneider Electric Energy Giant Confirms Cactus Ransomware Attack

• Apple and Google Just Patched Their First Zero-Day Flaws of the Year

• Threat actors exploit Ivanti VPN bugs to deploy KrustyLoader Malware

• ProcessUnity unveils all-in-one platform for third-party risk management

• US Sanctions Egyptian IT Experts Aiding ISIS in Cybersecurity

• Elon Musk $56 Billion Tesla Pay Package Vetoed By Judge

• 45K+ Exposed Jenkins Instances Vulnerable to RCE Attacks

• ApateWeb: An Evasive Large-Scale Scareware and PUP Delivery Campaign

• ESET takes part in global operation to disrupt the Grandoreiro banking trojan

• Introducing meaningful AI features for information security in 2024

• Heimdal® Launches Partner NEXUS: A Unified and Global Partner Program for Collective Success

• Unveiling the AWS Public IP Puzzle: Solvo’s Query and Cost-Saving Tips

• Decrypting the Threat: Telegram’s Dark Markets and the Growing Menace of Phishing Networks

• Veza integrates with Google Drive to secure access to enterprise files

• Italian Businesses Hit by Weaponized USBs Spreading Cryptojacking Malware

• The SEC Won’t Let CISOs Be: Understanding New SaaS Cybersecurity Rules

• Gift Yourself a Year of Online Protection for Only $50 Through 2/4

• An EU Prime! EU adopts first Cybersecurity Certification Scheme

• Critical Flaws Found in GNU C Library, Major Linux Distros at Risk

• Hitron DVR Zero-Day Vulnerabilities Exploited by InfectedSlurs Botnet

• Hackers Exploiting Ivanti VPN Flaws to Deploy KrustyLoader Malware

• Citibank Sued For Failing to Protect Fraud Victims

• GitLab Patched A Workspace Creation Vulnerability With An Emergency Update

• ICS and OT threat predictions for 2024

• Data leak at fintech giant Direct Trading Technologies

• 10 Best User Access Review Software (2024)

• City Cyber Taskforce Launches to Secure Corporate Finance

• Threat Actors Using Adult Games To Launch Remcos RAT Attack

• Navigating TuxCare’s Enterprise Support for AlmaLinux

• Free ransomware recovery tool White Phoenix now has a web version

• Pawn Storm Uses Brute Force and Stealth Against High-Value Targets

• Chinese Hackers Exploiting VPN Flaws to Deploy KrustyLoader Malware

• “45K+ Exposed Jenkins Instances Vulnerable to RCE Attacks”

• New Glibc Flaw Grants Attackers Root Access on Major Linux Distros

• Australian companies breach no ransomware payment policy

• Precision in Action: A Guide to Handling Cybersecurity Incidents

• Does CVSS 4.0 solve the exploitability problem?

• How to make developers accept DevSecOps

• Proactive cybersecurity: A strategic approach to cost efficiency and crisis management

• Bigger, Faster, Stronger: The New Standard for Public Cybersecurity Companies

• Database management enters a new era of complexity

• Cybercriminals replace familiar tactics to exfiltrate sensitive data

• Geopolitical Cybersecurity Risks for International Businesses

• Check Point Software Unveils the Infinity Platform: Pioneering the Future of AI-Powered, Cloud-Delivered Cyber Security

• Canadian government investigating another hack at Global Affairs

• Singapore’s National Research and Education Network (SingAREN) Protects Vital Research with Check Point Software

• Evolution of UNC4990: Uncovering USB Malware’s Hidden Depths

• Insider Threat Detection Technology for Businesses

• Retailers at critical juncture due to severe tech gaps: SOTI study

• Cisco Store Xplorer: An AR Experience

• McCaffrey Joins ‘ASTORS’ Champion SIMS Software Board of Advisors

• Approaching Complex Data Security for Small Businesses

• Best Methods for Storing, Protecting Digital Company Files: Secure Strategies for Data Safety

Generated on 2024-02-01 23:56:09.778316