IT Security News Daily Summary 2024-02-09

• Friday Squid Blogging: A Penguin Named “Squid”

• Shim vulnerability exposes most Linux systems to attack

• Apple defends parts pairing as Oregon mulls right-to-repair bill

• cyberterrorism

• Ivanti discloses fifth vulnerability, doesn’t credit researchers who found it

• Tax Season Alert: Common scams and cracked software

• Cyber Security Today, Week in Review for week ending Friday, Feb. 9, 2024

• Honoring Cisco Designated VIPs at Cisco Live Amsterdam 2024

• Ivanti urges customers to patch yet another critical vulnerability

• Checkmarx Report Surfaces Software Supply Chain Compromises

• 10 Major Benefits of Cloud-Native Application Development

• No, Toothbrushes Were Not Used in a Massive DDoS Attack

• Ivanti urges customer to patch yet another critical vulnerability

• Bitwarden Free vs. Premium: Which Plan Is Best For You?

• Lawmakers Want Clampdown on American VCs Funding Chinese Tech Companies

• Accepting Ethereum (ETH) for Businesses, An Overview

• QR Code Phishing Attacks Target High-Level Executives: Report

• Raspberry Robin Malware Upgrades with Discord Spread and New Exploits

• Akamai Named an Overall Leader for Zero Trust Network Access

• The AnyDesk Breach: Overview and Recommendations

• Meta Removes Facebook, Instagram Accounts Of Iran’s Supreme Leader

• What Is a Next-Generation Firewall?

• Cisco and Megaport Simplify Cloud Networking with Pay-As-You-Go Model

• Chinese Threat Actors Concealed in US Infrastructure Networks

• Combating Malware Threats

• JetBrains Releases Security Advisory for TeamCity On-Premises

• In Other News: $350 Million Google Settlement, AI-Powered Fraud, Cybersecurity Funding

• Nationwide Banking Crisis: Servers Down, UPI Transactions in Jeopardy

• Identity Fraud Affects Two Million Brits in 2023

• Microsoft to release its Windows Germanium with AI Security

• Nvidia Business Unit To Develop Bespoke Chips – Report

• Botnet Attack Targeted Routers: A Wake-Up Call for Securing Remote Employees’ Hardware

• Juniper Support Portal Exposed Customer Device Info

• Ransomware in 2023 recap: 5 key takeaways

• Exploiting a vulnerable Minifilter Driver to create a process killer

• Insider Data Breach at Verizon Affects Over 63,000 Employees

• The 11 Best Identity and Access Management Tools (2024)

• Fortinet’s week to forget: Critical vulns, disclosure screw-ups, and that toothbrush DDoS attack claim

• New macOS Backdoor Linked to Prominent Ransomware Groups

• Understand the pros and cons of enterprise password managers

• Black Basta ransomware gang hacked Hyundai Motor Europe

• The ever-present state of cyber security alert

• 3 Best Practices for SOC Leaders for Staying Ahead In 2024

• US Offers $10 Million Reward for Info About Hive Ransomware Leaders

• Geofencing: A Tech Set to Transform the Consumer Landscape?

• MoqHao Android Malware Evolves with Auto-Execution Capability

• US To Invest $5 Billion In Semiconductor Research

• January 2024’s Most Wanted Malware: Major VexTrio Broker Operation Uncovered and Lockbit3 Tops the Ransomware Threats

• Beyond Traditional Cyber Defences: The Rise of Outcome-Based Security In Modern Business

• Ai, Cybersecurity Awareness, And Communication

• Addressing Bias in Insider Risk Monitoring

• FBI and CISA publish guide to Living off the Land techniques

• Ivanti Patches High-Severity Vulnerability in VPN Appliances

• The ROI of Investing in Cybersecurity

• 2023 Sees Record Data Compromises Amidst Changing Tactics

• Empowering Women in Cybersecurity: Bridging the Gender Gap

• Own Company Unveils New Channel Partner Program

• Shim Bug Uncovered: A Ten-Year Security Breach in Linux Boot Loaders

• Ensuring Online Safety for Your Child: Tips and Measures

• AI-Powered Robocalls Banned Ahead of US Election

• Quantum computing: The data security conundrum

• Cyber Security Today, Feb. 9, 2024 – A record US$1 billion paid to ransomware gangs last year, and more

• Evolution of Privacy-Preserving AI: From Protocols to Practical Implementations

• Identity Hijack: The Next Generation of Identity Theft

• AI-generated voices in robocalls now illegal

• Hands-on Review: Myrror Security Code-Aware and Attack-Aware SCA

• 20 Years of Facebook, but Trust in Social Media Remains Rock Bottom

• New Rust-Based macOS Backdoor Steals Files, Linked to Ransomware Groups

• Chinese Hackers Exploiting VMware 0-Day Flaw Since 2021

• Fortinet Warns of New FortiOS Zero-Day

• US Offers $10M Reward for Information on Hive Ransomware Leaders

• AnyDesk Shares More Information on Recent Hack

• 2054, Part V: From Tokyo With Love

• Action1 platform update improves patching workflows

• Over 800 Phony “Temu” Domains Lure Shoppers into Credential Theft

• New Coyote Trojan Targets 61 Brazilian Banks with Nim-Powered Attack

• Securing the Keys to the Kingdom: Exploring the Depths of Privileged Access Management (PAM)

• Ivanti warns of a new auth bypass flaw in its Connect Secure, Policy Secure, and ZTA gateway devices

• Fortinet warns of a new actively exploited RCE flaw in FortiOS SSL VPN

• Verizon Breach – Malicious Insider or Innocuous Click?

• U.S. Offers $10 Million Reward for Information on Hive Ransomware

• 26 Cyber Security Stats Every User Should Be Aware Of in 2024

• Hiring for Tech Managers jobs? Should Tech Managers Be Developers First?

• Wazuh in the Cloud Era: Navigating the Challenges of Cybersecurity

• Researchers Use Raspberry Pi Pico to Crack BitLocker Under a Minute

• Fortinet Warns of Critical FortiOS SSL VPN Flaw Likely Under Active Exploitation

• Stealthy Zardoor Backdoor Targets Saudi Islamic Charity Organizations

• New infosec products of the week: February 9, 2024

• Why we fall for fake news and how can we change that?

• February 2024 Patch Tuesday forecast: Zero days are back and a new server too

• France data breach triggers among half of the populace

• Enhancing Application Code Security: Best Practices and Strategies

• 2024-02-08 – Pikabot infection

• IoT Testing: Best Practices And Challenges in 2024

• Fortinet Warns of Critical FortiOS SSL VPN Vulnerability Under Active Exploitation

• India to make its digital currency programmable

• Cybersecurity teams recognized as key enablers of business goals

• Key strategies for ISO 27001 compliance adoption

• Crime gang targeted jobseekers across Asia, looted two million email addresses

• How AI is revolutionizing identity fraud

• How companies are misjudging their data privacy preparedness

• Cybersecurity for Small Businesses: Essential Steps

• Warning: New Ivanti Auth Bypass Flaw Affects Connect Secure and ZTA Gateways

• Zero-Day Vulnerabilities: Threats and Mitigation

• Uncle Sam sweetens the pot with $15M bounty on Hive ransomware gang members

• CodeSignal targets skills gap with ‘Learn’ platform amidst tech talent crunch

• FBI: Give us warrantless Section 702 snooping powers – or China wins

• EFF Helps News Organizations Push Back Against Legal Bullying from Cyber Mercenary Group

• IT Security News Daily Summary 2024-02-08

• Critical Vulnerability Could Allow Mastodon Account Takeover

• The Linux Foundation and its partners are working on cryptography for the post-quantum world

• US offers $10 million reward for info on Hive ransomware group leaders

• Fake LastPass lookalike made it into Apple App Store

• Bringing Composability to Firewalls with Runtime Protection Rules | Impart Security

• The best travel VPNs of 2024: Expert tested and reviewed

• Epik, the Far-Right’s Favorite Web Host, Has a Shadowy New Owner

• The best VPN for streaming in 2024: Expert tested and reviewed

• Keeper Security Available on Apple Vision Pro

• LastPass Free vs. Premium: Which Plan Is Right for You?

• NCC Group records the most ransomware victims ever in 2023

• Finance App Accuses Facebook Of Being A “Hotbed” For Scams

• Researchers say attackers are mass-exploiting new Ivanti VPN flaw

• China-Sponsored Hackers Lie in Wait to Attack US Infrastructure

• Atlas VPN Free vs. Premium: Which Plan Is Best For You?

• The Far-Right’s Favorite Web Host Has a Shadowy New Owner

• Unraveling the truth behind the DDoS attack from electric toothbrushes

• Spyware isn’t going anywhere, and neither are its tactics

• Hardening Apache APISIX With the OWASP’s Coraza and Core Ruleset

• Ransomware Payments Surpassed $1 Billion in 2023: Analysis

• China-Sponsored Hackers Lie in Wait to Attack U.S. Infrastructure

• Disney To Take $1.5 Billion Equity Stake In Epic Games

• Fake LastPass Password Manager App Lurks on iOS App Store

• London Underground Is Testing Real-Time AI Surveillance Tools to Spot Crime

• Google saves your conversations with Gemini for years by default

• Raspberry Robin devs are buying exploits for faster attacks

• Linux Vendors Squawk: PATCH NOW — CVSS 9.8 Bootkit Bug in shim.efi

• What Generative AI Means for Cybersecurity in 2024

• Big Names Join President Biden’s ‘AI Safety Institute Consortium’

• Good Application Security Posture Requires Good Data

• Best Practices To Create Highly Secure Applications in Mule 4

• CISA: Volt Typhoon had access to some U.S. targets for 5 years

• Raspberry Robin Evolves With Stealth Tactics, New Exploits

• Navigating the Cybersecurity Skills Gap in Critical Infrastructure

• Tips for Reducing Cybersecurity Risk for Your Business

• Preventing XSS Injection Attacks With A Content Security Policy

• Malicious Android Apps On Google Play Store Deliver VajraSpy RAT

• Google Rebrands Bard AI Chatbot As Gemini

• Report Details Scope of Global Threat to Elections

• Meta may not bring some products to Canada unless proposed AI law changed, Parliament told

• Linux Devs Rush to Patch Critical Vulnerability in Shim

• NetApp and OpenSSL: Teaming Up for More Secure Internet

• North Korea raked $3 billion from Ransomware and US offers $10m for Hive

• US Credit Union Service Leaks Millions of Records and Passwords in Plain Text

• Unleashing the Power of WebAssembly to Herald a New Era in Web Development

• A Comprehensive Guide To Achieving SOC 2 Compliance

• LimaCharlie Lands $10.2 Million Series A Funding

• Iran Ramps Up Cyberattacks on Israel Amid Hamas Conflict: Microsoft

• Malware-as-a-Service The Biggest Risk to Organizations Right Now

• Blackbaud Faces Criticism for Cybersecurity Lapses After 2020 Data Breach

• Qolsys IQ Panel 4, IQ4 HUB

• CISA Releases Two Industrial Control Systems Advisories

• Security flaw in a popular smart helmet allowed silent location tracking

• How to Enrich Data for Fraud Reduction, Risk Management and Mitigation in BFSI

• The Next Year in Cybersecurity: Quantum, Generative AI and LLMs & Passwords

• Indian Government Warns Social Media Platforms Over Deepfake Misinformation

• Wordfence Intelligence Weekly WordPress Vulnerability Report (January 29, 2024 to February 4, 2024)

• Hacking Victims Paid $1.1bn In Ransoms Last Year

• Critical Cisco Expressway Flaw Let Remote Execute Arbitrary Code

• Federal Cybersecurity Agency Launches Program to Boost Support for State, Local Election Offices

• Fortinet: APTs Exploiting FortiOS Vulnerabilities in Critical Infrastructure Attacks

• Ivanti US Faces Security Crisis, Threatening Worldwide Systems

• Canadian Cybercriminal Sentenced to Two Years Agrees to Return All Victims for Stolen Funds

• LassPass is not LastPass: Fraudulent app on Apple App Store

• Invicti Security collaborates with Mend.io to give customers full code coverage and continuous security

• Surge in deepfake “Face Swap” attacks puts remote identity verification at risk

• Warning from LastPass as fake app found on Apple App Store

• Cybercrime duo accused of picking $2.5M from Apple’s orchard

• 2024 Cyberthreat Forecast: AI Attacks, Passkey Solutions and SMBs in the Crosshairs

• Ransomware Payments in 2023 Hit $1 Billion: Chainalysis

• MoS Finance Comments Google’s Swift Response in Removing 2,200 Deceptive Loan Apps

• France: 33 Million Social Security Numbers Exposed in Health Insurance Hack

• MalDocs in Word and Excel: A Persistent Cybersecurity Challenge

• Spoofing Temu for Credential Harvesting

• 2 million job seekers targeted by data thieves

• Google Announces Enhanced Fraud Protection for Android

• Cisco Patches Critical Vulnerabilities in Enterprise Communication Devices

• SMTP Yahoo Error Codes Explained

• Enhanced DigitalOcean Backups helps prevent data disruption

• New Zardoor backdoor used in long-term cyber espionage operation targeting an Islamic organization

• Cybersecurity in Online Trading: Protecting Your Investments

• Closinglock, now with $12M, wants to prevent the 1 in 10 real estate transactions targeted for fraud

• Chinese Hackers Operate Undetected in U.S. Critical Infrastructure for Half a Decade

• New Zardoor backdoor used in long-term cyber espionage operation targeting Islamic organization

• Canon Patches Seven Critical Flaws in Small Office Printers

• HPE Cybersecurity Challenge: Data Breach Sparks Investigation

• F5 unveils new capabilities to help protect against AI-powered threats

• Critical Manufacturing Vulnerabilities Surge 230% in Six Months

• I Stopped Using Passwords. It’s Great—and a Total Mess

• Cisco Joins U.S. Department of Commerce Consortium Dedicated to AI Safety

• VikingCloud introduces CCS Advantage to boost PCI compliance program value

• Akira, LockBit actively searching for vulnerable Cisco ASA devices

• NCSC Warns Of ‘Living Off The Land’ Attacks Against Critical Infrastructure

• On Software Liabilities

• Were 3 Million Toothbrushes Really Used for a DDoS Attack?

• How to Predict Your Patching Priorities

• Cohesity to acquire data security firm Veritas

• UK Government To Fund Two Semiconductor Research Hubs

• 2054, Part IV: A Nation Divided

• China-linked APT Volt Typhoon remained undetected for years in US infrastructure

• Kyndryl and Google Cloud expand partnership to develop responsible generative AI solutions

• HijackLoader Evolves: Researchers Decode the Latest Evasion Methods

• Unified Identity – look for the meaning behind the hype!

• The Anatomy of Trading Bot Scams: Strategies for Secure Investments

• ChatGPT Faces Data Protection Questions in Italy

• Google Starts Blocking Sideloading of Potentially Dangerous Android Apps in Singapore

• 10 Reasons to Invest in Security Awareness Training

• Chinese Hackers Infiltrate Dutch Defense Networks with Coathanger RAT

• Get an Extensive Education in Cybersecurity for Just $46

• Coyote: A multi-stage banking Trojan abusing the Squirrel installer

• Ransomware Payments New Record Exceeds $905 Million Peak by over 11%

• US Warns of Destructive Chinese Cyber-Attacks

• Silicon In Focus Podcast: The Metaverse is Dead. Long Live the Metaverse

• Top 10 Unlocking UNIX Commands Cheat sheet: Your Ultimate Command-line

• Cisco fixes critical Expressway Series CSRF vulnerabilities

• Converging On-Premises & Cloud Network Security Into a Unified Hybrid Strategy

• Kimsuky’s New Golang Stealer ‘Troll’ and ‘GoBear’ Backdoor Target South Korea

• Risk Assessment of AWS services used in building a resilient Web App on AWS

• Rust can help make software secure – but it’s no cure-all

• AI in DevSecOps: Moving from A Co-Pilot to An Autopilot

• Prevention Strategies Inevitably Become a Constant Cat-and-Mouse Game

• AI-Enhanced Identity Fraud: A Mounting Threat to Organizations and Users

• AI: The Human Touch in Cybersecurity Recruitment

• Why Cybersecurity Maturity Model Certification (CMMC) Matters for All Businesses, Not Just DoD Contractors

• CTEM: Navigating the Future of Attack Surface

• NSFOCUS WAF Security Reports

• 10 tips for creating your security hackathon playbook

• Critical Patches Released for New Flaws in Cisco, Fortinet, VMware Products

• Beware of Facebook Ads That Deliver Password-Stealing Malware

• Google starts blocking users from sideloading certain apps in Singapore

• SOAPHound: Open-source tool to collect Active Directory data via ADWS

• Choosing the right partner when outsourcing cybersecurity

• Biden Administration Names a Director of the New AI Safety Institute

• As-a-Service tools empower criminals with limited tech skills

• How threat actors abuse OAuth apps

• Google Cybersecurity Action Team Threat Horizons Report #9 Is Out!

• Security Awareness Training: Building a Cyber-Resilient Workforce

• US Says China’s Volt Typhoon Hackers ‘Pre-Positioning’ for Cyberattacks Against Critical Infrastructure

• 3 million smart toothbrushes were not used in a DDoS attack after all, but it could happen

• Data Breach Response: A Step-by-Step Guide

• IT suppliers hacked off with Uncle Sam’s demands in aftermath of cyberattacks

• 3 million smart toothbrushes were just used in a DDoS attack. Or were they?

Generated on 2024-02-09 23:55:54.848886