IT Security News Daily Summary 2024-02-20

• ConnectWise fixed critical flaws in ScreenConnect remote access tool

• Menlo Security Adds SaaS Platform to Manage Secure Browsers

• Vulnerability Summary for the Week of February 12, 2024

• U.S. Joins U.K. to Seize LockBit Site, Disrupt Massive Ransomware Variant

• Authentic or counterfeit? How QED Vault is using tokens to redefine asset ownership

• Defending Access to the Decentralized Web

• ThreatDown EDR update: Streamlined Suspicious Activity investigation

• Wireless Visibility: The MUST for Zero Trust

• 5 Ways to Counteract Increasing Cyber Insurance Rates

• Here are all the red flags Charlotte Cowles missed in that viral NY Mag article

• LockBit Ransomware Gang’s Website Shut Down by FBI and International Law Enforcement

• Law enforcement trolls LockBit, reveals massive takedown

• EU Opens Official Probe of TikTok Over Content, Minors, Privacy

• An Obsession With Impact: The Inspiring Journey of a Dreamer That Led to a Career at Microsoft

• New Stellar Cyber Alliance to Deliver Email Security for SecOps Teams

• Signal Finally Rolls Out Usernames, So You Can Keep Your Phone Number Private

• Joomla: Multiple XSS Vulnerabilities

• Fairwinds Insights Release Notes 15.0-15.2: Aggregated Action Items

• How a Fake CIA Agent Duped Someone out of $50,000

• New Typosquatting and Repojacking Tactics Uncovered on PyPI

• Wyze Cameras Glitch: 13,000 Users Saw Footage from Others’ Homes

• Feds Seize LockBit Ransomware Websites, Offer Decryption Tools, Troll Affiliates

• VulnRecap 2/19/24 – News from Microsoft, Zoom, & SolarWinds

• ConnectWise Rushes to Patch Critical Vulns in Remote Access Tool

• Singapore struggles with scams as cybercrime cases keep climbing

• CISA Releases Three Industrial Control Systems Advisories

• Commend WS203VICM

• Mitsubishi Electric Electrical Discharge Machines

• Ethercat Zeek Plugin

• More details about Operation Cronos that disrupted Lockbit operation

• Linux Malware Campaign “Migo” Targets Redis For Cryptomining

• ALERT! New iOS Trojan Steals Data for Bank Account Hacking

• A network compliance checklist for remote work

• US sanctions LockBit members after ransomware takedown

• Cops turn LockBit ransomware gang’s countdown timers against them

• USENIX Security ’23 -Tamer Abdelaziz, Aquinas Hobor – Smart Learning to Find Dumb Contracts

• ManageEngine unveils ML-powered exploit triad analytics feature

• LockBit Ransomware Takedown: What You Need to Know about Operation Cronos

• Anonymous Sudan launches DDOS Cyber Attack on University of Cambridge

• Recommended Practices for Enterprise Electronic Messaging Security and Governance

• LockBit Ransomware Members Charged by Authorities, Free Decryptor Released

• Cops turn LockBit’s ransomware gang’s countdown timers against them

• New Migo Malware Targeting Redis Servers for Cryptocurrency Mining

• Partner Competencies, Credentials Valued as Key Success Metrics by Customers

• Pindrop Pulse offers protection against audio deepfakes

• Top UK Universities Recovering Following Targeted DDoS Attack

• SQL Injection Vulnerability Patched in RSS Aggregator by Feedzy WordPress Plugin

• Threat Intelligence as-a-Service: As good or better than D-I-Y?

• Reddit Signed a $60,000,000 Content Licensing Deal with an AI company

• Vietnam To Collect Biometrics – Even DNA – For New ID Cards

• Law Enforcement Hacks LockBit Ransomware, Delivers Major Blow To Operation

• Recent Zero Day Could Impact Up To 97k Microsoft Exchange Servers

• Insider Steals 79,000 Email Addresses At Work To Promote Own Business

• Websites Hacked Via Vuln In Bricks Builder WordPress Plugin

• Wyze admits 13,000 users could have viewed strangers’ camera feeds

• Recent Zero-Day Could Impact Up to 97,000 Microsoft Exchange Servers

• When is PCI Required? (+ 4 Tips for Maintainig Compliance)

• About 13,000 Wyze Customers Affected by Camera Glitch

• Here’s How to Safeguard Your Online Travel Accounts from Hackers

• US House Forms AI Task Force As Legislation Stalls

• How I got started: Cyber AI/ML engineer

• Top 4 Ivanti Competitors and Alternatives for 2024

• VulnRecap 2/19/2024 – News from Microsoft, Zoom, SolarWinds

• Cofense Annual Report Indicates 105% Increase in Malicious Emails Bypassing Secure Email Gateways

• Hackers can Spy on Cameras Through Walls, New Study Reveals

• 1Password acquires Kolide to improve modern workforce security

• 2024 Unit 42 Incident Response Report: Navigating the Shift in Cybersecurity Threat Tactics

• First Neuralink Patient ‘Controls Mouse With Thoughts’

• The New York Times vs. OpenAI: A Turning Point for Web Scraping?

• Cactus Ransomware Group Confirms Hacking Schneider Electric

• Websites Hacked via Vulnerability in Bricks Builder WordPress Plugin

• Volt Typhoon Seen Exfiltrating Sensitive OT Data

• Cyber Insights 2024: Supply Chain

• Why API Security is Crucial in Defending Against Ransomware Attacks

• Does Your Security Team Need a Dedicated Collaboration Tool?

• LockBit Takedown by Brits — Time for ‘Operation Cronos’

• End-User Risks: Enterprises on Edge Amid Growing Concerns of the Next Major Breach

• Pentera collaborates with SpyCloud to reduce dwell time of compromised credentials

• Two Arrested In LockBit Ransomware Gang Takedown

• How to Launch a Successful ICO: 2024 Guide

• 1Password expands its endpoint security offerings with Kolide acquisition

• Wyze cameras show the wrong feeds to customers. Again.

• UPDATED: UK leads takedown of LockBit ransomware gang’s website

• Metomic launches human firewall features to scale data security workflows

• LockBit Ransomware Operation Shut Down; Criminals Arrested; Decryption Keys Released

• NCA’s LockBit Takedown: Source Code, Arrests and Recovery Tool Revealed

• Meta Unveils 8 Spyware Companies Targeting iOS, Android, & Windows Devices

• The Notorious Lockbit Ransomware Gang Has Been Disrupted by Law Enforcement

• Astaroth, Mekotio & Ousaban abusing Google Cloud Run in LATAM-focused malware campaigns

• Lockbit: How A Global Police Operation Just Took Down a Notorious Ransomware Gang

• Meeting Financial Regulatory Requirements with Duo Multi-Factor Authentication

• Initial Ransomware Demands Jump 20% to $600,000 in 2023

• Xpeng To Hire 4,000 Staff Amidst EV ‘Bloodbath’

• China’s SMIC, Huawei Amongst Top Gov’t Funding Recipients

• Microsoft Is Spying on Users of Its AI Tools

• Anatsa Android Banking Trojan Continues to Spread via Google Play

• Law Enforcement Hacks LockBit Ransomware, Delivers Major Blow to Operation

• Automating Threat Detection and Response

• LockBit takedown: Infrastructure disrupted, criminals arrested, decryption keys recovered

• Exploring Data Privacy and Security in B2B Gaming Data

• Authorities disrupt operations of notorious LockBit ransomware gang

• New Gold Pickaxe Malware Aims To Steal Users’ Faces

• Microsoft Patch Tuesday For February Addressed Two Zero-Days

• Zoom Patched Multiple Security Vulnerabilities With Latest Update

• Outsmarting PayPal Scammers to Keep Your Cash Safe

• Raccoon Infostealer operator extradited to the United States

• Malvertising: This cyberthreat isn’t on the dark web, it’s on Google

• Insider steals 79,000 email addresses at work to promote own business

• LockBit disrupted by international law enforcement task force

• Critical Flaws Found in ConnectWise ScreenConnect Software – Patch Now

• New Report Reveals North Korean Hackers Targeting Defense Firms Worldwide

• Learn How to Build an Incident Response Playbook Against Scattered Spider in Real-Time

• SaaS Compliance through the NIST Cybersecurity Framework

• Ivanti Patched Another Vulnerability While The Former Went Under Attack

• London Tribunal Approves £3bn Facebook Lawsuit

• Authorities seize dark web leak site from LockBit ransomware gang

• Integrating AlmaLinux with Existing Enterprise Systems

• High-Severity Squid Vulnerabilities Fixed in Ubuntu

• LockBit Ransomware Gang Domains Seized in Global Operation

• Critical ConnectWise ScreenConnect vulnerabilities fixed, patch ASAP!

• LockBit Infrastructure Disrupted by Global Law Enforcers

• Insider Steals 80,000 Email Addresses From District Councils

• Earth Preta Campaign Uses DOPLUGS to Target Asia

• Law Enforcement Seizes LockBit Ransomware Infrastructure

• Alpha Ransomware Uses Living-Off-The-Land Tools To Attack Windows Computers

• LockBit Ransomware Gang Disrupted by Global Law Enforcement Operation

• CPX Vienna 2024: Celebrating the Pinnacle of Partnership Excellence

• Singapore looks to accelerate AI development with investment in compute and talent

• PCI DSS Compliance – Meeting the Third-Party Vendor Requirements

• WordPress Bricks Theme Under Active Attack: Critical Flaw Impacts 25,000+ Sites

• Lockbit Infrastructure Disrupted by Global Law Enforcers

• US, UK authorities claim seizure of LockBit ransomware gang’s dark web leak site

• Warning: Agniane Stealer Targeting Users to Steal Financial Data

• Two days into the Digital Services Act, EU wields it to deepen TikTok probe

• Cactus ransomware gang claims the theft of 1.5TB of data from Energy management and industrial automation firm Schneider Electric

• MoqHao Evolution Poses Immense Threat to Android Users

• Maryland Busts $9.5 Million #BEC Money Laundering Ring

• How to make sense of the new SEC cyber risk disclosure rules

• Iran and Hezbollah Hackers Launch Attacks to Influence Israel-Hamas Narrative

• Hackers Arrested For Stealing Banking Credentials Using Android Malware

• LockBit Ransomware’s Darknet Domains Seized in Global Law Enforcement Raid

• UK NCA takes control of LockBit Ransomware gang website

• The Digital Services Act is Here. Nisos Can Help!

• Why identity fraud costs organizations millions

• How decentralized identity is shaping the future of data protection

• Vietnam to collect biometrics – even DNA – for new ID cards

• Hackers Arrested For Stealing Banking Credentials Using Novel Android Malware

• Clean links and sophisticated scams mark new era in email attacks

• 36% of code generated by GitHub CoPilot contains security flaws

• Secure File Sharing for Businesses: Best Practices

• UK leads takedown of LockBit ransomware gang’s website

• Artificial Intelligence in Business Security

• LockBit ransomware gang disrupted by global operation

• Titanium and LogRhythm: Elevating Visibility into Cybersecurity Risks in Pakistan

• LockBit, the world’s worst ransomware, is down

• 8 LockBit Ransomware Gang Domains Seized in Global Operation

• Operation Cronos: law enforcement disrupted the LockBit operation

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• VulnRecap 2/19/2024: News from Microsoft, Zoom, SolarWinds

• IT Security News Daily Summary 2024-02-19

• Do you need antivirus on Linux?

• Wyze camera breach let 13,000 strangers look into other people’s homes

• Anatsa Android banking Trojan expands to Slovakia, Slovenia, and Czechia

• Israeli El Al Alleges Hackers Targeted Flights in Mid-Air Hijack Attempt

• NSO Group and Its ‘MMS Fingerprint’ Attack

• Everything You Need To Know About VPN

• Edge Browser Vulnerability Fixed, Ensuring Protection Against Chrome Tab Theft

• Anatsa Banking Trojan Resurfaces, Targets European Banks

• Tech giants promise to combat fraudulent AI content in mega elections year

• 6 Best Cloud Security Companies & Vendors in 2024

• Russian Hackers Hit Mail Servers in Europe for Political and Military Intel

• EU Court of Human Rights Rejects Encryption Backdoors

• Fake Tokens Exploit BRICS Investment Hype

• Why keeping track of user accounts is important

• Two Israel aircrafts hijacked via Cyber Attack

• NIST AI Risk Management Framework: Developer’s Handbook

• A Ukrainian Raccoon Infostealer operator is awaiting trial in the US

• Ukrainian Raccoon Infostealer Operator Extradited to US

• Data Security: Beyond Threat Hunting to Monitoring Data Flow and User Behavior

• 3 Ways the CTO Can Fortify the Organization in the Age of Generative AI

• Google Initiative Aims to Boost AI for Cybersecurity

• Integration of AI and Blockchain: Here’s All You Need to Know

• EU Launches Investigation Into TikTok Over Child Protection and Privacy Concerns

• EU Opens Probe Into TikTok Over Potential DSA Breaches

• Securing Your iPhone from GoldPickaxe Trojan

• Hackers Target Police Officers and Prosecutors in Miami-Dade

• China’s JD.com Considers Bid For UK Retailer Currys

• 1 in 5 Youth Engage in Cybercrime, NCA Finds

• SolarWinds ARM Flaw Let Attackers Execute Remote Code

• Russia-linked APT TAG-70 targets European government and military mail servers exploiting Roundcube XSS

• XSS Marks the Spot: Digging Up Vulnerabilities in ChatGPT

• ALPHV gang claims it’s the attacker that broke into Prudential Financial, LoanDepot

• Continuous Vulnerability and Exposure Management: Unifying Detection Assessment and Remediation for Elevated IT Security

• UK Mobile Network Choice ‘Fell By 25 Percent’ In Past Decade

• Time to Leverage the USDA’s Distance Learning and Telemedicine Program

• How To Weaponize LLMs To Auto-Hijack Websites

• Russia Exploits Roundcube Flaws Against European Governments

• New Google Initiative To Foster AI In Cybersecurity

• Feds Post $15 Million Bounty For Info On ALPHV/BlackCat Ransomware Crew

• Big Surprise – Musk’s X Is Allowing Chinese Propaganda

• Meta Warns of 8 Spyware Firms Targeting iOS, Android, and Windows Devices

• Cyber Security Today, Feb. 19, 2024 – Fake police data breach notification fools Maine’s AG site

• Cisco Secure Access Accelerates SSE Innovation with AI, User Experience Monitoring, and Identity Intelligence

• Ransomware Group Takes Credit for LoanDepot, Prudential Financial Attacks

• Russian Cyberspies Exploit Roundcube Flaws Against European Governments

• China Offers Public Security Support For EU Member Hungary

• Exploring the Phenomenal Rise of Ethereum as a Digital Asset

• Akira Ransomware Actively Exploiting Cisco Anyconnect Vulnerability

• How BRICS Got “Rug Pulled” – Cryptocurrency Counterfeiting is on the Rise

• How to Achieve the Best Risk-Based Alerting (Bye-Bye SIEM)

• X ‘Takes Payments’ From Sanctioned Groups

• Insights from the NSA 2023 Cybersecurity Report

• Data Brokering: A Thousand Things About Yourself

• Presidents Day 2024

• Anatsa Android Trojan Bypasses Google Play Security, Expands Reach to New Countries

• Ukrainian Faces Decades in Prison for Leading Prolific Malware Campaigns

• How do I block Taylor Swift news from invading my Facebook timeline?

• Australia raps telcos for sending through bulk SMS that contain scam messages

• iOS Trojan Collects Face and Other Data for Bank Account Hacking

• New Google Initiative to Foster AI in Cybersecurity

• The State of M-Commerce 2024

• ESET Privilege Escalation Flaw Let Attackers Delete Arbitrary Files

• Arcitecta enhances Mediaflux Livewire to optimize data movement

• Israeli Aircraft Survive “Cyber-Hijacking” Attempts

• Tech Giants Vow To Combat AI Misuse In Election Year

• New TicTacToe Malware Dropper Attacking Windows Users

• Twitter Ghana Staff Finally Paid, More Than A Year After Layoffs

• Fifth of British Kids Have Broken the Law Online

• Safeguarding cyber-physical systems for a smart future

• Turla APT’c New Tool Designed to Steal Login Credentials

• SolarWinds addressed critical RCEs in Access Rights Manager (ARM)

• A week in security (February 12 – February 18)

• The Danger Lurking Just Below Ukraine’s Surface

• Russian-Linked Hackers Target 80+ Organizations via Roundcube Flaws

• Balancing “super app” ambitions with privacy

• First Ever iOS Trojan Steals Facial Recognition Data

• CVE Prioritizer: Open-source tool to prioritize vulnerability patching

• Russian-Linked Hackers Breach 80+ Organizations via Roundcube Flaws

• Details of Ransomania and iOS Face ID Scans stolen by hackers

• How to defend against credential stuffing attacks

• Inside the strategy of Salesforce’s new Chief Trust Officer

• Business Data Encryption: Protecting Sensitive Information

• RCE vulnerabilities fixed in SolarWinds enterprise solutions

• Iranian Hackers Target Middle East Policy Experts with New BASICSTAR Backdoor

• The double-edged sword of zero trust

• Fraudsters have found creative ways to scam some businesses

• Cybersecurity Training for Small Businesses

• Feds post $15 million bounty for info on ALPHV/Blackcat ransomware crew

• Does moving to the cloud mean compromising on security?

Generated on 2024-02-20 23:55:44.649452