IT Security News Daily Summary 2024-02-14

• Menlo Security report: Cybersecurity risks surge with AI adoption

• Microsoft, OpenAI warn nation-state hackers are abusing LLMs

• 200,000 Facebook Marketplace User Records Leaked Online

• Abusing the Ubuntu ‘command-not-found’ utility to install malicious packages

• C can be memory safe, part 2

• China’s Volt Typhoon spies broke into emergency network of ‘large’ US city

• ChatGPT Down? Anonymous Sudan Claims Responsibility for DDoS Attacks

• DuckDuckGo’s encrypted syncing brings private browsing to all your devices

• IBM, ISC2 Offer Cybersecurity Certificate

• Initial Access Broker Landscape in NATO Member States on Exploit Forum

• ALERT: Thieves❤️Wi-Fi Camera Jammers

• Randall Munroe’s XKCD ‘Sphere Tastiness’

• USENIX Security ’23 – What Are the Chances? Explaining the Epsilon Parameter in Differential Privacy

• Microsoft Catches APTs Using ChatGPT for Vuln Research, Malware Scripting

• ALERT: Thieves❤️Wi-Fi Camera Jammers

• Microsoft, OpenAI Catch China, Russia Using AI Tools For Hacking

• Overworld secures $10M for cross-platform ARPG development

• Google Threat Analysis Group’s Spyware Research: How CSVs Target Devices and Applications

• Who’s the Boss? Teaming Up With AI in Security

• ALERT: Thieves❤️Wi-Fi Camera Jammers

• Google’s Threat Analysis Group’s Spyware Research: How CSVs Target Devices and Applications

• What Is Stateful Inspection in Network Security? Ultimate Guide

• US Air Force’s new cyber, IT skill recruitment plan: Bring back warrant officer ranks

• ALERT: Thieves❤️Wi-Fi Camera Jammers

• Google, EDF To Track Methane Leaks From Space

• How to Use LogMeOnce Step-by-Step Guide

• ALERT: Thieves❤️Wi-Fi Camera Jammers

• American Express Faces Criticism Over Weak Password Policies

• How to Analyze the MITRE Engenuity ATT&CK® Evaluations: Enterprise

• K8s Network Policy Automation in Falco Talon

• BMW security lapse exposed sensitive company information, researcher finds

• A Free Decryptor Tool for Rhysida Ransomware is Available

• ALERT: Thieves❤️Wi-Fi Camera Jammers

• Cyber Risk Management: Bring Security to the Boardroom

• Upcoming Speaking Engagements

• Prudential Financial finds cybercrims lurking inside its IT systems

• Security priorities for 2024: Skills development, AI and more, says report

• Water Hydra’s Zero-Day Attack Chain Targets Financial Traders

• Bitcoin Rise Sees Market Cap Cross $1 Trillion

• 5 Ways to Maximize the Impact of IaC Scans

• U.S. Internet Leaked Years of Internal, Customer Emails

• The Managed Services Surge: Insights from Cisco Live EMEA

• South Korea Says Presumed North Korean Hackers Breached Personal Emails of Presidential Staffer

• What Meta’s Mark Zuckerberg Thinks Of Apple Vision Pro Headset

• Reflecting on the Parkland tragedy, its lasting impacts, and work still to be done

• Section 702 Surveillance Fight Pits the White House Opposite Reproductive Rights

• Zoom fixed critical flaw CVE-2024-24691 in Windows software

• Cyber gaps in the supply chain — Bank of America breached in another vendor cyberattack

• TicTacToe Dropper

• Security review for Microsoft Edge version 121

• Romanian hospital ransomware crisis attributed to third-party breach

• New book: ‘Facebook: Sins & Insensitivities’

• Malware Masked as a Visual Studio Update Poses a Threat to macOS

• The Reasons Behind Companies’ Reversal of Cloud Migration

• How are state-sponsored threat actors leveraging AI?

• PII Input Sparks Cybersecurity Alarm in 55% of DLP Events

• Black Basta Ransomware targets Southern Water

• Securing Applications Throughout the Software Development Lifecycle

• Check Point Research Unveils Critical #MonikerLink Vulnerability in Microsoft Outlook with a 9.8 CVSS Severity Score

• Leverage the Power of a Cloud Operating Model to Streamline IT Operations

• 55% of Generative AI Inputs Include Sensitive Data: Menlo Security

• Cyber Security Today, Feb. 14, 2024 – Get cracking on Patch Tuesday security fixes

• What?s Next for Akamai?s Cloud Computing Strategy

• SEC Chairman Calls For AI Caution, Cites Financial Stability Risk

• What is a Passkey? Definition, How It Works and More

• What is cybersecurity mesh and how can it help you?

• UK utility giant Southern Water says hackers stole personal data of hundreds of thousands of customers

• Ransomware Attack Hits Dozens Of Romanian Hospitals

• Deepfake Proofing The President: What Is Cryptographic Verification?

• Zoom Patches Critical Vulnerability In Windows Applications

• Total Amount Invested In Bitcoin Back Above $1 Trillion

• Prudential Financial Discloses Data Breach

• Kubernetes Security Firm KTrust Emerges From Stealth With $5.3M in Funding

• Here’s How to Choose the Right AI Model for Your Requirements

• 13 Security Flaws in Adobe Acrobat & Reader Allows Remote Code Execution

• Protecting Your Heart and Wallet Against Phishing This Valentine’s Day

• Fortinet vs Palo Alto NGFWs: Complete 2024 Comparison

• How ransomware changed in 2023

• Appdome unveils Geo Compliance suite to thwart spoofing and enhance mobile app security

• Microsoft, OpenAI Warn of Nation-State Hackers Weaponizing AI for Cyberattacks

• Iranian Hackers Target Israel and US to Sway Public Opinion in Hamas Conflict

• LogMeOnce Review (2024): Is It a Safe & Reliable Password Manager?

• Who’s the Boss? Teaming up with AI in Security

• Python’s Colorama Typosquatting Meets ‘Fade Stealer’ Malware

• Imperva defends customers against CVE-2024-22024 in Ivanti products

• The Added Value of SNI-Only Mode in Imperva Cloud WAF

• The Channel can help SMEs protect themselves from increasing security threats

• Malwarebytes crushes malware all the time

• Chipmaker Patch Tuesday: AMD and Intel Patch Over 100 Vulnerabilities

• Zoom Patches Critical Vulnerability in Windows Applications

• 3 Ways Insider Threats Put Your Company at Risk in 2024

• Infoblox Applies AI to DNS Traffic to Thwart Malware Infestations

• Playdapp’s $31M Token Heist and Silent Reward Controversy

• LOKKER introduces a feature to notify users if their website breaches various privacy laws

• Ubuntu ‘command-not-found’ Tool Could Trick Users into Installing Rogue Packages

• Static Application Security Testing

• A Complete Guide to Breach and Attack Simulation

• Unveiling the truth behind AI relationship chatbots

• US military notifies 20,000 of data breach after cloud email leak

• Update now! Microsoft fixes two zero-days on February Patch Tuesday

• New Integration: Domain Connect For Effortless DNS Management

• Valentine’s Day Scams Woo the Lonely-Hearted

• Armis acquires CTCI to improve pre-attack threat hunting technology

• How are attackers using QR codes in phishing emails and lure documents?

• Secure Network Analytics 7.5.0 Launch

• Southern Water cyberattack expected to hit hundreds of thousands of customers

• KeyTrap DNS Attack Could Disable Large Parts of Internet: Researchers

• VicOne xNexus offers contextualized insights into complex attack paths

• Cybersecurity Spending Expected to be Slashed in 41% of SMEs

• Improving the Cryptanalysis of Lattice-Based Public-Key Algorithms

• Albanian Authorities Accuse Iranian-Backed Hackers of Cyberattack on Institute of Statistics

• Windows Zero-Day Exploited in Attacks on Financial Market Traders

• Beyond the Hype: Questioning FUD in Cybersecurity Marketing

• Cyberhaven Linea AI protects vital corporate data

• Akto provides security assessments for GenAI models

• Bumblebee Malware Returns with New Tricks, Targeting U.S. Businesses

• Cybersecurity Tactics FinServ Institutions Can Bank On in 2024

• Nvidia Now Worth More Than Amazon, Amid AI Chip Demand

• Resecurity partners with CyberPeace Foundation to address emerging cyber threats

• Zero-Day in QNAP QTS Affects NAS Devices Globally

• Bumblebee malware wakes from hibernation, forgets what year it is, attacks with macros

• KTrust launches an automated red team for Kubernetes security

• QNAP fixes OS command injection flaws affecting its NAS devices (CVE-2023-47218, CVE-2023-50358)

• Foreign hackers have been nestling in U.S. critical infrastructure for years

• Adobe Patch Tuesday fixed critical vulnerabilities in Magento, Acrobat and Reader

• SAP Patches Critical Vulnerability Exposing User, Business Data

• Seal Security raises $7.4 million to secure open source with GenAI

• Microsoft Fixes Two Zero-Days in February Patch Tuesday

• Protect Your Private Data With an iProVPN Lifetime Subscription for Under $30

• Three Cybersecurity Frameworks for School Systems

• Romantic AI Chatbots Fail the Security and Privacy Test

• How Sekoia Endpoint Agent works

• ‘AI Girlfriends’ Are a Privacy Nightmare

• Microsoft Patch Tuesday for February 2024 fixed 2 actively exploited 0-days

• Corporate users getting tricked into downloading AnyDesk

• ZLoader Now Attack 64-bit Windows: Live Analyse With ANY.RUN Sandbox

• Alert! 333% Surge in Hunter-Killer Malware that Bypasses Network Security Controls

• Patch Tuesday Update – February 2024

• DarkMe Malware Targets Traders Using Microsoft SmartScreen Zero-Day Vulnerability

• Cybersecurity Audits: Assessing and Improving Security Posture

• Phishing Threats: Trends and Countermeasures

• No formal education is needed for Cybersecurity Professionals say experts

• How to maintain security across multi cloud environments

• Rise in cyberwarfare tactics fueled by geopolitical tensions

• We can’t risk losing staff to alert fatigue

• Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows Zero-Days

• Stolen Credentials Make You Question Who Really Has Access

• Fabric: Open-source framework for augmenting humans using AI

• Australian Tax Office probed 150 staff over social media refund scam

• Cybercriminals get productivity boost with AI

• How to take control of personal data

• Tech Companies Plan to Sign Accord to Combat AI-Generated Election Trickery

• Threat actors intensify focus on NATO member states

• Crims found and exploited these two Microsoft bugs before Redmond fixed ’em

• Improving Software Quality with the OWASP BOM Maturity Model

• Declining Ransomware Payments: Shift in Hacker Tactics?

• Infosys Data Breach Impacts 57,000 Bank of America Customers

• Iranian cyberattacks targeting U.S. and Israeli entities

• Privacy Isn’t Dead. Far From It.

• Qmulos Launches Q-Compliance Core for Businesses in Need of a Modern Compliance Approach

• Just one bad packet can bring down a vulnerable DNS server thanks to DNSSEC

• Facebook Says Risk Of Account Theft From Recycled Phone Numbers Isn’t Its Problem To Solve

• USENIX Security ’23 – Chenghong Wang, David Pujol, Kartik Nayak, Ashwin Machanavajjhal – Private Proof-of-Stake Blockchains using Differentially-Private Stake Distortion

• What Is Packet Filtering? Definition, Advantages & How It Works

• Just one bad DNS packet can bring down a public DNSSEC server

• IT Security News Daily Summary 2024-02-13

• How AI is strengthening XDR to consolidate tech stacks

• IBM, ISC2 Offer Free Cybersecurity Certificate

• Fat Patch Tuesday, February 2024 Edition

• Don’t Understand RADIUS and TACACS+? Cisco has You Covered

• A ransomware attack took 100 Romanian hospitals down

• JFK Airport Taxi Hackers Sentenced To Prison

• Ivanti Vuln Exploited To Deliver New DSLog Backdoor

• What Is Volt Typhoon And Why Is It The Defining Threat Of Our Generation?

• Azure Account Takeover Campaign Targets Senior Execs

• DNA Testing: What Happens If Your Genetic Data Is Hacked?

• Ransomware gang claims it hit Canadian oil pipeline operator

• Data Matters ? Is Your API Security Data Rich or Data Poor?

• Say Goodbye to Monolithic EdgeWorkers: Introducing Flexible Composition (Part 2)

• Duo Jailed for Hacking JFK Taxi Dispatch System

• VERT Threat Alert: February 2024 Patch Tuesday Analysis

• How to conduct a social engineering penetration test

• CVE-2024-21412: Water Hydra Targets Traders with Microsoft Defender SmartScreen Zero-Day

• SmartScreen Vulnerability: CVE-2024-21412 Facts and Fixes

• Cisco Live EMEA 2024: Highlights from DevNet

• A Hacker’s Mind is Out in Paperback

• Warning: Phishing campaign aimed at senior executives

• Key Findings from CrowdStrike’s 2024 State of Application Security Report

• QNAP vulnerability disclosure ends up an utter shambles

• ALPHV blackmails Canadian pipeline after ‘stealing 190GB of vital info’

• Microsoft Confirms Windows Exploits Bypassing Security Features

• News alert: Kiteworks named as a founding member of NIST’s new AI safety consortium – ‘AISIC’

• Microsoft patches two zero-days exploited by attackers (CVE-2024-21412, CVE-2024-21351)

• OpenAI’s Sam Altman Seeks Trillions To Overhaul Chip Industry – Report

• ARM Shares Nearly Double Amid AI Surge

• Proofpoint: ‘Hundreds’ of Azure accounts compromised

• Bank of America customer data compromised after a third-party services provider data breach

• ALPHV blackmails Canadian pipeline and claims it stole 190GB of vital info

• First Microsoft Patch Tuesday zero-day of 2024 disclosed as part of group of 75 vulnerabilities

• Ransomware preparedness kicks off 2024 summit series

• Navigating the Web of Romance Scams: A Guide for Businesses and Consumers

• ‘Incompetent’ FCC Fiddles With Data Breach Rules

• Show your digital devices some love this Valentine’s Day

• Don’t tell your AI anything personal, Google warns in new Gemini privacy notice

• RoboForm Review (2024): Pricing, Features, Pros, & Cons

• Ivanti VPN Flaws Exploited by DSLog Backdoor and Crypto Miners

• Security and AI Innovation: Creating New Opportunities for Partner Growth

• Evolution and Escalation of Cybersecurity Threats

• Patch Tuesday: Adobe Warns of Critical Flaws in Widely Deployed Software

• Serious IT incidents in Canadian financial sector almost tripled in 2023

• Southern Water Notifies Customers and Employees of Data Breach

• Integration Security and Safety When Connecting With External Systems

• Meet Laika 13, the AI Chatbot That Acts Like a Social Media Obsessed Adolescent

• Remote Monitoring & Management software used in phishing attacks

• TheTruthSpy stalkerware, still insecure, still leaking data

• French Healthcare Payments Processor Breaches Affect Half of Population

• Use of ‘Hunter-Killer’ Malware on the Rise, Study Finds

• Bank of America Customers at Risk After Data Breach

• Apple, Microsoft Win Exemption From EU Gatekeeper Designation

• CISA Reveals JCDC’s 2024 Cybersecurity Priorities

• Bridging the Digital Divide with Subscriber Edge

• The Rise of RustDoor and ALPHV Ransomware

• Cybercrime in Scotland upsurges like an Epidemic

• Hewlett-Packard Tells Court It Lost $4 Billion From Autonomy Acquisition

• Hybrid Cloud Backup: A Comprehensive Guide To Securing Your Data

• Mitsubishi Electric MELSEC iQ-R Series Safety CPU

• CISA Releases One Industrial Control Systems Advisory

• Fertility tracker Glow fixes bug that exposed users’ personal data

• How AI-Powered Risk Management Supports Cybersecurity

• NIST Establishes AI Safety Consortium

• Experience DISTRIBUTECH 2024 with Cisco

• JFK Airport Taxi Hackers Sentenced to Prison

• Bank of America Customer Data Stolen in Data Breach

• Willis Lease Finance Corp Discloses Cyberattack

• Sumsub Deepfake Detection combats AI-driven identity fraud

• PikaBot Resurfaces with Streamlined Code and Deceptive Tactics

• Glupteba Botnet Evades Detection with Undocumented UEFI Bootkit

• US, UK and India Among the Countries Most At Risk of Election Cyber Interference

• Beyond the Charts -The Human Factor in Cybersecurity and Financial Decisions

• Data residency: What is it and why it is important?

• Seal Security wants to make open-source vulnerability remediation easy

• Security Flaw in CoCalc: One Click and Your Cloud is Ruined

• Patch now! Roundcube mail servers are being actively exploited

• Crooks hook hundreds of exec accounts after phishing in Azure C-suite pond

• You Can’t Stop What You Can’t See: Addressing Encrypted Cloud Traffic

• Survey Surfaces Disconnect Between Cybersecurity Confidence and Reality

• FTC Issues Alert: Americans’ Fraud Losses Soar to $10 Billion in 2023

• Notorious Bumblebee Malware Re-emerges with New Attack Methods

• Reshaping the Focus of Cybersecurity

• MGM & Caesars Cyberattacks: Lessons Learned

• Stalkerware App “TheTruthSpy” Hacked Again, 50,000 Device Data Stolen

• Ivanti Vulnerability Exploited to Deliver New ‘DSLog’ Backdoor

• Microsoft Copilot: A Visual Revolution in AI Image Editing

• Openreach Confirms Faster Fibre Speeds From 1 April

• DarkGate Malware opens RaaS For Financially Motivated Hackers

• Get to Know Check Point Harmony SASE

• The We Are Cisco Singers: The Power of Authenticity and Connection

• Seeing is Believing… and Securing

• ICS Patch Tuesday: Siemens Addresses 270 Vulnerabilities

• Fileless Revenge RAT Abuses Legitimate Tools to Hide Malicious Activity

• Designing for Security

• How to Onboard and Protect Remote Teams With Secure Cloud Environments

• Ransomfeed – Third Quarter Report 2023 is out!

• Molly White Reviews Blockchain Book

• 1-15 December 2023 Cyber Attacks Timeline

• Warzone RAT infrastructure seized

• Global malicious activity targeting elections is skyrocketing

• Sigma Software Studio unifies and streamlines software development processes

• Midnight Blizzard and Cloudflare-Atlassian Cybersecurity Incidents: What to Know

• New Vulnerability in QNAP QTS Firmware: CVE-2023-50358

• Security Considerations in Kubernetes

• Securing Your AWS RDS Instances: Best Practices and Examples

• CISA Warns of Roundcube Webmail Vulnerability Exploitation

• Ransomware Attack Knocks 100 Romanian Hospitals Offline

• Detecting Volt Typhoon TTPs – Security Spotlight

• Nucleus Security raises $43 million to redefine how businesses manage their attack surface

• Silicon UK In Focus Podcast: The Mobile Society

• Global Authorities Examine 58 Cyberattacks Linked to North Korea, Valued at $3 Billion

• Attackers injected novel DSLog backdoor into 670 vulnerable Ivanti devices (CVE-2024-21893)

• Biden Administration Joins TikTok, Despite Security Concerns

• New Azure Hacking Campaign Steals Senior Executive Accounts

• Global Malicious Activity Targeting Elections is Skyrocketing

• UK Businesses Lose £31bn to Security Breaches in a Year

• 3 Tips for Enterprise Patch Management

• How Your Mobile Apps Leak Sensitive Data?

• Roundcube webmail XSS vulnerability exploited by attackers (CVE-2023-43770)

• Stealthy “Hunter-Killer” Malware Detections Surge 333% Annually

• Meta says risk of account theft after phone number recycling isn’t its problem to solve

• Ivanti Vulnerability Exploited to Install ‘DSLog’ Backdoor on 670+ IT Infrastructures

• Top Ransomware news headlines trending on Google

• Turk Hack Team Attacked the World’s Largest Cooperative Finance

• Bypassing EDRs With EDR-Preloading

• Hunter-Killer Malware Tactic Growing: Stealthy, Persistent and Aggressive

• The future of cybersecurity: Anticipating changes with data analytics and automation

• Infosys subsidiary named as source of Bank of America data leak

• Protecting against AI-enhanced email threats

• Protesters gather outside OpenAI office, opposing military AI and AGI

• 2023 Cybersecurity Regulation Recap (Part 4): Tech Development & Governance

• Product showcase: SearchInform Risk Monitor – next-gen DLP based insider threat mitigation platform

• How purple teaming enhances inter-team collaboration and effectiveness in cybersecurity

• Alert: CISA Warns of Active ‘Roundcube’ Email Attacks – Patch Now

• QR code attacks target organizations in ways they least expect

• Warning: Hackers Exploit 3 Well-known Flaws in Microsoft Word & Excel

• Korean eggheads crack Rhysida ransomware and release free decryptor tool

• What is a Data Leak? Causes, Examples, and Prevention

• Montreal duo launch free cybersecurity training platform

Generated on 2024-02-14 23:56:10.258380