IT Security News Daily Summary 2024-02-16

• Friday Squid Blogging: Vegan Squid-Ink Pasta

• OpenAI’s Sora Generates Photorealistic Videos

• 6 Best Intrusion Detection & Prevention Systems for 2024 Reviewed

• New York City Sues Facebook For Allegedly Harming Kids

• State Government Organization Network Breach: SafeBreach Coverage for US-CERT Alert (AA24-046A)

• Leak of Russian ‘Threat’ Part of a Bid to Kill US Surveillance Reform, Sources Say

• Leak of Russian Threat Part of a Bid to Kill US Surveillance Reform, Sources Say

• CISA adds Microsoft Exchange and Cisco ASA and FTD bugs to its Known Exploited Vulnerabilities catalog

• Cyber Security Today, Week in Review for week ending Friday, Feb. 16, 2024

• Tech giants sign voluntary pledge to fight election-related deepfakes

• Fly to Amsterdam with the Cisco Store

• US gov offers a reward of up to $10M for info on ALPHV/Blackcat gang leaders

• Daniel Stori’s ‘Clojure Challenge’

• SpyNote Android Spyware Poses as Legit Crypto Wallets, Steals Funds

• ChatGPT Evolved with Digital Memory: Enhancing Conversational Recall

• Volt Typhoon Disrupts US Organizations, CISA Issues Alerts

• NIS2 compliance for industrial networks: Are you ready?

• GoldPickaxe Trojan steals your face!

• U.S. Offers $10 Million for Info on BlackCat/ALPHV Ransomware Leaders

• What Is a Passphrase? Examples, Types & Best Practices

• Beyond the Keyboard: “Try Harder” Mindset and Goals

• Zeus, IcedID malware kingpin faces 40 years in slammer

• Ottawa willing to improve cybersecurity bill, ministers tell MPs

• CISA Warning: Akira Ransomware Exploiting Cisco ASA/FTD Vulnerability

• OpenAI ‘upload file’ feature offers data security concerns

• DoD Email Breach: Pentagon Tells Victims 12 Months Late

• Bank of America Warns Its Customers About Data Breach

• The Convergence of CIO and CISO Roles in the Digital Age

• New Ivanti Vulnerability Observed as Widespread Security Concerns Grow

• Open Letter Urges Action To Address AI, And Other Global Risks

• Cybersecurity Insights with Contrast CISO David Lindner | 2/16/24

• Feds Dismantle Russian GRU Botnet Built On 1,000+ Home, Small Biz Routers

• Mysterious MMS Fingerprint Hack Used By Spyware Firm NSO Group Revealed

• Hackers Got Nearly 7 Million People’s Data From 23andMe

• Ex-Employee’s Admin Credentials Used In US Gov Agency hack

• USPS Scam Smishing Campaigns Could Move To Cloud

• How to Defend Against the 10 Most Dangerous Privileged Attack Vectors

• Mysterious ‘MMS Fingerprint’ Hack Used by Spyware Firm NSO Group Revealed

• In Other News: US Hacks Iranian Spy Ship, Rhysida Ransomware Decryption, NIST Guidance

• EU Watchdog Urged to Reject Meta ‘Pay for Privacy’ Scheme

• Ex-Employee’s Admin Credentials Used in US Gov Agency Hack

• Permit.io Raises $8 Million for Authorization Platform

• RustDoor macOS Backdoor Targets Cryptocurrency Firms with Fake Job Offers

• Israeli NSO Group Suspected of “MMS Fingerprint” Attack on WhatsApp

• CrowdStrike Named the Only Customers’ Choice: 2024 Gartner® “Voice of the Customer” for Vulnerability Assessment

• Seeing into the Shadows: Tackling ChromeOS Blind Spots with Dell and CrowdStrike

• CrowdStrike Is Proud to Sponsor the Mac Admins Foundation

• Experts Predict AI to Create Job Opportunities in Energy Sector

• Greatest Cyber Risks Are Extortion, Geopolitical Tension, SMB Attacks

• Microsoft Exchange vulnerability actively exploited

• With SNS Sender, USPS Smishing Scams Move to the Cloud

• Safeguarding Web Applications With Cloud Service Providers: Anti-CSRF Tokenization Best Practices

• ISC2 Collaborates with IBM to Launch Entry-Level Cybersecurity Certificate

• Vulnerabilities in CUSG CMS Exposed Credit Unions to Attacks

• Eight Vulnerabilities Disclosed in the AI Development Supply Chain

• SEC’s X Breach Highlights Need for Better Defense Against SIM Swap Attacks

• The Latest Prudential Financial Data Breach Exposes Vulnerabilities

• Cyber Security Today, Feb. 16, 2024 – US takes down Russian botnet of routers

• 1000+ JetBrains TeamCity Instances Vulnerable to RCE Bypass Attacks

• Agniane Stealer: Information stealer targeting cryptocurrency users

• Don’t Just Let It iPaaS: How To Get More Out of Your Digital Transformation

• U.S. CISA: hackers breached a state government organization

• Meet This Year’s Most Inspiring Women in Cyber Nominees: Part 3

• Meet This Year’s Most Inspiring Women in Cyber Nominees: Part 2

• Cutting kids off from the dark web – the solution can only ever be social

• Hackers Exploit EU Agenda in Spear Phishing Campaigns

• OpenAI Introduces AI Model That Turns Text Into Video

• GitHub: AI helps developers write safer code, but you need to get the basics right

• Meet This Year’s Most Inspiring Women in Cyber Nominees: Part 1

• CISA Urges Patching of Cisco ASA Flaw Exploited in Ransomware Attacks

• Malicious ‘SNS Sender’ Script Abuses AWS for Bulk Smishing Attacks

• Why We Must Democratize Cybersecurity

• Ukrainian Hacker Pleads Guilty for Leading Zeus & IcedID Malware Attacks

• All eyes on AI | Unlocked 403: A cybersecurity podcast

• Essential Information on Cloud Security Services

• Importance of Internet Security in Educational Environment

• PDF Malware on the Rise, Used to Spread WikiLoader, Ursnif and DarkGate

• Ukrainian Pleads Guilty in US to Key Role in Zeus, IcedID Malware Operations

• US Offers $10 Million for Information on BlackCat Ransomware Leaders

• U.S. authorities disrupt Russian intelligence’s botnet

• Cyberint Ransomania empowers organizations to proactively defend against ransomware attacks

• GitHub: AI helps developers write safer code, but basic safety is crucial

• Permit.io raises $8 million to simplify app development

• This Complete Ethical Hacking Bundle is Less Than $40

• Russia-linked Turla APT uses new TinyTurla-NG backdoor to spy on Polish NGOs

• U.S. State Government Network Breached via Former Employee’s Account

• Google Warns Unfair AI Rules Could Empower Hackers, Harming Defense

• New Outlook 0-day RCE Flaw Exploited in the Wild

• NTA Flow Configuration Example

• U.S. Government Disrupts Russian-Linked Botnet Engaged in Cyber Espionage

• US State Department offers $10m reward on leads on ALPHV aka Blackcat ransomware

• Difference between Whale Phishing and Spear Phishing

• Gmail & Yahoo DMARC rollout: When cyber compliance gives a competitive edge

• Dark Web Monitoring for Businesses

• New infosec products of the week: February 16, 2024

• Cybersecurity sectors adjust as DDoS attacks reach new heights

• Physical security is becoming a top priority in building design

• Cyber threats cast shadow over 2024 elections

• Wireshark 4.2.3 Released – What’s New!

• Cybersecurity Insurance: Understanding Coverage

• Quest Diagnostics pays $5M after mixing patient medical data with hazardous waste

• Google, Microsoft, OpenAI make AI pledges ahead of Munich Security Conference

• Elon Musk’s X Gave Check Marks to Terrorist Group Leaders, Report Says

• Spyware startup Variston is losing staff — some say it’s closing

• Inadequate ID authentication blamed for 2020 data thefts at Canada Revenue, ESDC

• IT Security News Daily Summary 2024-02-15

• Don’t Fall for the Latest Changes to the Dangerous Kids Online Safety Act

• Feds dismantle Russian GRU botnet built on 1,000-plus home, small biz routers

• FBI Shuts Down Warzone RAT; Cybercriminals Arrested

• Feds Disrupt Botnet Used by Russian APT28 Hackers

• Cyber Signals: Navigating cyberthreats and strengthening defenses in the era of AI

• Staying ahead of threat actors in the age of AI

• Your Free Upgrade to Cisco Secure Client Awaits

• Spyware startup Variston is losing staff, some say it’s closing

• US Gov dismantled the Moobot botnet controlled by Russia-linked APT28

• Pentagon launches nuke-spotting satellites amid Russian space bomb rumors

• How To Monitor Kubernetes Audit Logs

• 9 tips to protect your family against identity theft and credit and bank fraud

• FBI Dismantles Ubiquiti Router Botnet Controlled by Russian Cyberspies

• Siemens SCALANCE XCM-/XRM-300

• Siemens RUGGEDCOM APE1808

• Siemens Location Intelligence

• Siemens SIDIS Prime

• Threat Actor Leverages Compromised Account of Former Employee to Access State Government Organization

• A cyberattack halted operations at Varta production plants

• Complexity and software supply chain security: 5 key survey takeaways

• Why the toothbrush DDoS story fooled us all

• The best travel VPNs of 2024: Expert tested and reviewed

• Ransomware disrupts utilities, infrastructure in January

• Inadaquate ID authentication blamed for 2020 data thefts at Canada Revenue, ESDC

• Microsoft To Invest €3.2 billion In Germany, Mirroring UK Investment

• Cyber Insurance: A Smart Investment to Protect Your Business from Cyber Threats in 2023

• Cyber Resilience – Beyond Cyber Security

• An Interview With Jeffrey Stephens

• Cybersecurity Preparedness 2024

• Digital Technologies Power Global Operations but Present Growing Risks

• Cyberattacks on Hospitals Are Likely to Increase, Putting Lives at Risk, Experts Warn

• New Security Advisory Tab Added to the Microsoft Security Update Guide

• New TicTacToe Dropper Steals Data, Spreads Multiple Threats on Windows

• Rely on Authy desktop apps? You have one month to switch your 2FA, or else

• Cargo Security, Subversive Crime, and Insider Risk

• Australian Parliament Calls For Return Of Julian Assange

• Massive utility scam campaign spreads via online ads

• “TicTacToe Dropper” Malware Distribution Tactics Revealed

• How to Analyse an Advanced Phishing Attack with ANY.RUN Threat Intelligence Lookup

• Siemens SCALANCE W1750D

• Hacking Microsoft and Wix with Keyboard Shortcuts

• NIST Cybersecurity Framework Policy Template Guide – 2024

• Mitigating AI security risks

• USENIX Security ’23 – *Distinguished Paper Award Winner* – Tight Auditing of Differentially Private Machine Learning

• Wordfence Intelligence Weekly WordPress Vulnerability Report (February 5, 2024 to February 11, 2024)

• Waymo Recalls Hundreds Of Vehicles Over Software Error

• Nexo Teams Up with Sift for Enhanced Digital Security and User Experience

• North Korea-linked actors breached the emails of a Presidential Office member

• Android/SpyNote Moves to Crypto Currencies

• Prudential Financial Faces Cybersecurity Breach

• Will VPN Security Vulnerabilities Accelerate ZTNA Adoption?

• LockBit claims cyberattack on Indian broker Motilal Oswal

• Award-Winning Centralized Platform Helps Unlock Value Through Simplicity

• Zoom stomps critical privilege escalation bug plus 6 other flaws

• Cyberattack Disrupts Production at Varta Battery Factories

• FTC Warns AI Companies About Changing Policies to Leverage User Data

• Data Disaster: 33 Million French Citizens at Risk in Massive Leak

• 23andMe Is On The Ventilator. Its CEO Remains ‘Hopeful’

• Bank of America’s Security Response: Mitigating Risks After Vendor Data Breach

• SEC admits on Twitter X that security lapses led to account hack

• The Noticeable Shift in SIEM Data Sources

• Rhysida ransomware cracked! Free decryption tool released

• Feds Want To Ban The World’s Cutest Hacking Device. Experts Say It’s A Scapegoat

• Just-in-Time Access (JIT Access) Explained: How It Works, Importance, Benefits

• France Cyber Attack – Data Breaches Compromise 33 Million People’s Data

• NIST Cybersecurity Framework Policy Template Guide

• Identity Governance Has a Permission Problem

• Ivanti Pulse Secure Found Using 11-Year-Old Linux Version and Outdated Libraries

• Russian Turla Hackers Target Polish NGOs with New TinyTurla-NG Backdoor

• New York City Sues Social Media Firms Over Youth Mental Health

• New iOS Trojan “GoldPickaxe” Steals Facial Recognition Data

• Why Sequoia is funding open source developers via a new equity-free fellowship

• The Cyber Scheme launches training course for IoT/ICS security testers

• New Wi-Fi Authentication Bypass Flaws Expose Home, Enterprise Networks

• No Security Scrutiny for Half of Major Code Changes: AppSec Survey

• ESET Patches High-Severity Privilege Escalation Vulnerability

• BigID unveils access intelligence capabilities for security, risk, and AI compliance

• Eclypsium: Ivanti firmware has ‘plethora’ of security issues

• How to craft cyber-risk statements that work, with examples

• IGAaaS Vs. On-Premises IGA Solutions: A Comparative Analysis

• Eureka Security Extends DSPM Reach to File Sharing Services

• Mitek MiControl empowers financial institutions to detect check fraud

• NICE Actimize introduces generative AI-based solutions designed to fight financial crime

• OpenAI Shuts Down Accounts Used to Generate Phishing Emails & Malware

• Cybercriminals are stealing Face ID scans to break into mobile banking accounts

• Crypto-Money Laundering Records 30% Annual Decline

• Getting to Know Muhammad Yahya Patel

• “Dr. Zero Trust” Chase Cunningham Joins Keeper Security Public Sector Advisory Board

• Infoblox SOC Insights reduces critical security operations challenges

• TinyTurla Next Generation – Turla APT spies on Polish NGOs

• Enhanced Cybersecurity with Cisco Secure Endpoint and Vulnerability Management

• iptables vs nftables in Linux: What is The Difference?

• Critical PixieFail Vulnerabilities Lead to RCE and DoS Attacks

• The Principles for Package Repository Security: An Overview

• Unlocking Innovation with Confidence: How Eureka Security Empowers Tech Companies in the Cloud | Eureka Security

• Keeping the Vaults Secure: How Eureka Security Safeguards Financial Data in the Cloud | Eureka Security

• Cisco Confirms It Will Cut More Than 4,000 Jobs

• On the Insecurity of Software Bloat

• Bitwarden adds event logs and self-hosting capabilities to its Passwordless.dev toolkit

• Battery maker Varta halts production after cyberattack

• Facebook Marketplace users’ stolen data offered for sale

• DDoS Hacktivism is Back With a Geopolitical Vengeance

• Microsoft Warns of Exploited Exchange Server Zero-Day

• Microsoft, OpenAI Confirm Nation-States are Weaponizing Generative AI in Cyber-Attacks

• Musk Confirms SpaceX Incorporation Moved From Delaware To Texas

• Incident Response Policy

• How Nation-State Actors Target Your Business: New Research Exposes Major SaaS Vulnerabilities

• CPS Insights helps organizations analyze and visualize their healthcare privacy data

• Chinese Hackers Using Deepfakes in Advanced Mobile Banking Malware Attacks

• CISA adds Microsoft Windows bugs to its Known Exploited Vulnerabilities catalog

• iOS users beware: GoldPickaxe trojan steals your facial data

• GoldPickaxe Trojan Blends Biometrics Theft and Deepfakes to Scam Banks

• DNS Server Vulnerability: Single DNS Packet can Bring Down the System

• Microsoft Patch Tuesday 2024: 73 Security Flaws, Including Two 0-Days Patched

• Protecting Yourself on the Go: Cybersecurity Tips for Travelers

• Miscreants turn to ad tech to measure malware metrics

• Cybersecurity as a Revenue Driver: Insights for MSPs

• Nation-state actors are using AI services and LLMs for cyberattacks

• European Court of Human Rights declares backdoored encryption is illegal

• AI outsourcing: A strategic guide to managing third-party risks

• Cloud-Native Security Challenges and Solutions

• Riding Dragons: capa Harnesses Ghidra

• Cyber Attack news headlines trending on Google

• Collaboration at the core: The interconnectivity of ITOps and security

• 5 free digital forensics tools to boost your investigations

• Microsoft, OpenAI Warn of Nation-State Hackers Weaponizing AI for Cyber Attacks

• Critical Exchange Server Flaw (CVE-2024-21410) Under Active Exploitation

• North Korea running malware-laden gambling websites as-a-service

• Understanding the tactics of stealthy hunter-killer malware

• AI PC shipments are expected to surpass 167 million units by 2027

• Threat Brief: Attacks on Critical Infrastructure Attributed to Insidious Taurus (Volt Typhoon)

• Data Privacy Laws Around the World: A Comprehensive Guide

• Cisco Announces It is Laying Off Thousands of Workers

• New HijackLoader Malware Uses Advanced Techniques to Avoid Detection

• CISA, FBI, EAC and USPIS Release Election Mail Handling Procedures to Protect Against Hazardous Materials

• OpenAI shuts down China, Russia, Iran, N Korea accounts caught doing naughty things

• EFF to Court: Strike Down Age Estimation in California But Not Consumer Privacy

• Hip Hip Hooray For Hipster Antitrust

Generated on 2024-02-16 23:55:55.031335