IT Security News Daily Summary 2024-02-21

• Discord took no action against server that coordinated costly Mastodon spam attacks

• Biden asks Coast Guard to create an infosec port in a stormy sea of cyber threats

• US GOV OFFERS A REWARD OF UP TO $15M FOR INFO ON LOCKBIT GANG MEMBERS AND AFFILIATES

• Unregulated, Exploitative, and on the Rise: Vera Institute’s Report on Electronic Monitoring

• Frontline PCI-ASV Scanning Datasheet

• How sponsorship is a catalyst for change

• Duo face 20 years in prison over counterfeit iPhone scam

• Apple promises to protect iMessage chats from quantum computers

• How is a Container Scan Done?

• Artificial Intelligence set to drive major tech advancements in 2024, IEEE study finds

• $1,313 Bounty Awarded for Privilege Escalation Vulnerability Patched in Academy LMS WordPress Plugin

• CISA, OMB, ONCD and Microsoft Efforts Bring New Logging Capabilities to Federal Agencies

• Types of SaaS Applications: Categories and Examples

• What to Look for in a Secrets Scanner

• What Is a Circuit-Level Gateway? Definitive Guide

• How to Perform a Firewall Audit in 11 Steps (+Free Checklist)

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #279 – What Happens in the Management Meeting

• Abuse of valid accounts by threat actors hits a high, says IBM

• US Smartphone Sales Slump, As Customers Delay Upgrading

• Top Software Development Outsourcing Trends

• Ping Identity (ForgeRock) vs Okta (2024): Compare IAM software

• Consumer Advocates Warn About “Epidemic Of Fraud” On Facebook

• Cyber Insights 2024: Ransomware

• Hyperautomation: Revolutionizing the Security Market

• How The Security of The Cloud’s Supply Chain Will Shift in 2024

• Webinar: Managing Without Governing? Why Your Organization Needs a Management System to Govern Your Information Resilience Program

• New Year, New Consumer Demands in Cybersecurity: Navigating the Landscape of Consumer Expectations and App Developer Responsibility in Mobile App Security

• Building a Better Perimeter Defense Strategy to Meet the Challenges of 2024

• Apple Beefs Up iMessage With Quantum-Proof PQ3 Protocol

• New Linux Malware “Migo” Exploits Redis for Cryptojacking, Disables Security

• Cybersecurity: A Trojan Horse in Our Digital Walls?

• How to update apps in MacOS: Two options

• Exploiting the latest max-severity ConnectWise bug is ’embarrassingly easy’

• ‘PrintListener’ Attack on Fingerprint Readers — Can You Trust Biometrics?🤞

• White House Hardens Cybersecurity at U.S. Ports, with China a Focus

• Researchers warn high-risk ConnectWise flaw under attack is ’embarrassingly easy’ to exploit

• ConnectWise Confirms ScreenConnect Flaw Under Active Exploitation

• Researchers Devise ‘VoltSchemer’ Attacks Targeting Wireless Chargers

• To Achieve Cyber Resilience, We Need to Rethink One Core Security Principle

• ‘PrintListener’ Attack on Fingerprint Readers — Can You Trust Biometrics?🤞

• AI’s Influence in Scientific Publishing Raises Concerns

• New Wi-Fi Vulnerabilities Expose Android and Linux Devices to Hackers

• Understanding GDPR and the Importance of Employee Training

• Beware of VietCredCare Malware that Steals businesses’ Facebook Accounts

• The five most alarming cyber threats from CrowdStrike’s 2024 Global Threat Report

• Apple secures iMessage against threats from the future

• Organizations increasingly look to observability to solve critical challenges

• Network Resilience: Accelerating Efforts to Protect Critical Infrastructure

• Navigating the Uncertain Path: Why AI Adoption in Cybersecurity Remains Hesitant, and How to Move Forward

• ‘PrintListener’ Attack on Fingerprint Readers — Can You Trust Biometrics?🤞

• Is Network Security Still a Thing in the Age of Public Cloud?

• Data Matters ? Empowering Threat Hunters to Reduce API Risk

• Exploitation Observed: Ivanti Connect Secure ? CVE-2023-46805 and CVE-2024-21887

• United States Suspends Exports To China’s Top Chipmaker SMIC – Report

• Over 40% of Firms Struggle With Cybersecurity Talent Shortage

• Launch Your Ethereum Donation dApp Today: Easy Steps With MetaMask, Alchemy, and GitHub Codespaces

• Should IT and Security Teams Play a Role in Crisis Communications?

• Driving Sustainability in Solutions: The Cisco-Computacenter Partnership

• New Redis miner Migo uses novel system weakening techniques

• LockBit Leaks Expose Almost 200 Affiliates And Custom Malware

• Apple Adds Post-Quantum Encryption To iMessage

• Cactus Ransomware Claims 1.5TB Of Schneider Electric Data

• Code Injection Or Backdoor: A New Look At Ivanti’s CVE-2021-44529

• Webinar Tomorrow: The Active Threat Landscape in the Cloud

• US Ports cybersecurity now a top priority for Joe Biden

• Open Letter Urges AI Deepfake Regulation

• Crypto Exchange FixedFloat Hacked: $26 Million in BTC, ETH Stolen

• Searchlight Cyber integrates MITRE ATT&CK Mapping into DarkIQ for dark web monitoring

• Beyond Identity Device360 identifies device security risks

• Can enterprise identities fix Gen AI’s flaws? This IAM startup thinks so

• Mozilla Releases Security Updates for Firefox and Thunderbird

• Apple readies iMessage for when quantum computers could break encryption

• Adarma Collaborates with Scottish Enterprise to Unveil Neurodiversity Strategy

• Diversifying Defenses: FjordPhantom Malware Shows Importance of a Multi-Pronged Approach

• Apple Adds Post-Quantum Encryption to iMessage

• Executive Order on Port Cybersecurity Points to IT/OT Threat Posed by Chinese Cranes

• Identity-Based Attacks Grow While Ransomware Declines: IBM X-Force

• AI Solutions Address Military Concerns: Speeding Up Soldier Recruitment Amidst Shrinking Forces

• Qloo Raises $25M in Series C Funding to Expand Cultural Reach with AI

• Generative AI Revolutionizing Indian Fintech

• Navigating the Challenges of Personhood Data in the Age of AI

• Biden Executive Order to Bolster US Maritime Cybersecurity

• Why Front-End Development Matters for Online Businesses?

• Coalition: Vulnerability scoring systems falling short

• LockBit leaks expose nearly 200 affiliates and bespoke data-stealing malware

• 5 Trends Shaping Cybersecurity Strategy: AI Threats, SASE, ZTNA & XDR

• Bitsight empowers enterprises to secure the digital supply chain

• How CVSS 4.0 changes (or doesn’t) the way we see vulnerability severity

• Signal Takes User Privacy a Step Further with Optional Usernames: An Analysis

• Apple iOS 17.4: iMessage Gets Post-Quantum Encryption in New Update

• UScellular and Palo Alto Networks Join Forces to Secure 5G

• Harness the power of security automation

• Exclusive: eSentire Confirms Rhysida Ransomware Victims

• Vibrator virus steals your personal information

• Cyber Security Today, Feb. 21, 2024 – A patch warning from ConnectWise, the latest ransomware news, and more

• Check Point introduces Quantum Force, series of AI-powered firewalls

• Mustang Panda Targets Asia with Advanced PlugX Variant DOPLUGS

• Redis Servers Targeted With New ‘Migo’ Malware

• VMware pushes admins to uninstall vulnerable, deprecated vSphere plugin (CVE-2024-22245, CVE-2024-22250)

• IBM: Identity Compromises Surge as Top Initial Access Method for Cybercriminals

• Google Magika: Open-Sourcing AI-Powered File Type Identification

• CrowdStrike Global Threat Report: Cloud intrusions up 75%

• Anne Neuberger, a Top White House Cyber Official, Is Staying Surprisingly Optimistic

• Details of a Phone Scam

• Hummingbird Automations improves efficiency for compliance professionals

• 6 Ways to Simplify SaaS Identity Governance

• BT Tower In London Sold, And Will Become Luxury Hotel

• Google Chrome 122 Update Addresses Critical Security Vulnerabilities

• Critical flaw found in deprecated VMware EAP. Uninstall it immediately

• NSA Announces Retirement of Cybersecurity Director Rob Joyce

• Control Systems Firm PSI Struggles to Recover From Ransomware Attack

• Chrome 122, Firefox 123 Patch High-Severity Vulnerabilities

• Russian Hackers Launch Email Campaigns to Demoralize Ukrainians

• X Briefly Suspends Account Of Alexei Navalny’s Widow

• New Malicious PyPI Packages Use DLL Sideloading In A Supply Chain Attack

• The Five Most Alarming Cyber Threats from CrowdStrike’s 2024 Global Threat Report

• A first analysis of the i-Soon data leak

• Unsecured Database Leaks 153 GB of Filipino Student and Family Data

• New Mingo Malware Attacking Linux Redis Servers To Mine Cryptocurrency

• Impact of Badbox and Peachpit Malware on Android Devices

• Portfolio Optimization & Cyber Risk Management | Kovrr blog

• CampusGuard introduces new online training courses

• Following MITRE’s footsteps in analyzing malware behavior

• Security Onion 2.4.50 Released for Defenders With New Features

• Six things we learned from the LockBit takedown

• Attackers Quick to Weaponize CVE-2023-22527 for Malware Delivery

• Cybersecurity for Healthcare—Diagnosing the Threat Landscape and Prescribing Solutions for Recovery

• NCSC Sounds Alarm Over Private Branch Exchange Attacks

• Following in Mitre’s footsteps and malware behavior

• Building Customer Trust through Transparent Safety and Security Practices

• Cybersecurity Trends in 2024: 5 Key Areas to Follow

• Attacker Breakout Time Falls to Just One Hour

• Silicon In Focus Podcast: Connectivity in Orbit

• Orgs are having a major identity crisis while crims reap the rewards

• A common goal for European cyber security

• Signal Introduces Usernames, Allowing Users to Keep Their Phone Numbers Private

• New ‘VietCredCare’ Stealer Targeting Facebook Advertisers in Vietnam

• 2024’s Cyber Battleground Unveiled: Escalating Ransomware Epidemic, the Evolution of Cyber Warfare Tactics and strategic use of AI in defense – Insights from Check Point’s Latest Security Report

• Microsoft Exchange flaw CVE-2024-21410 could impact up to 97,000 servers

• VMware Urges to Remove Enhanced EAP Plugin to Stop Auth & Session Hijack Attacks

• Hybrid Mesh and the Check Point Infinity Platform

• Europe’s data protection laws cut data storage by making information-wrangling pricier

• Quebec Law 25: All You Need to Know

• Definition of Data Resilience and Cyber Resilience and their attainment

• Navigating NIS2 requirements with Microsoft Security solutions

• Tainted NSO Group gets involved in another data privacy controversy

• VMware Alert: Uninstall EAP Now – Critical Flaw Puts Active Directory at Risk

• Russian Hackers Target Ukraine with Disinformation and Credential-Harvesting Attacks

• TruffleHog: Open-source solution for scanning secrets

• 10 cybersecurity startups to watch in 2024

• Ransomware Declines as InfoStealers and AI Threats Gain Ground: IBM X-Force

• Unveiling Mandiant’s Cyber Threat Intelligence Program Maturity Assessment

• China could be doing better at censorship, think tank finds

• 10 steps to effective board leadership on cyber security

• A closer look at Israeli cybersecurity funding and M&A activity in 2023

• The importance of a good API security strategy

• Alleged Raccoon Infostealer operator extradited, verification site set up for victims

• Active Directory outages can cost organizations $100,000 per day

• True Alliance Mitigates Online Retail Bot Threats and Improves Website Uptime by 99% with Kasada and AWS

• Early adopters’ fast-tracking gen AI into production, according to new report

• The world according to Hinton: Slowing AI down is not the answer

• Decoding Digital Transformation: AI, ML, and RPA in the Modern Era

• Singapore’s monetary authority advises banks to get busy protecting against quantum decryption

• API Security in 2024: Navigating New Threats and Trends

• It’s time to bolster defenses for an AI / Quantum Future

• Beware of OpenAI and ChatGPT-4 Turbo in Financial Services Organizations’ Growing API Attack Surface

• Social Justice: a global perspective

• IT Security News Daily Summary 2024-02-20

• ConnectWise fixed critical flaws in ScreenConnect remote access tool

• Menlo Security Adds SaaS Platform to Manage Secure Browsers

• Vulnerability Summary for the Week of February 12, 2024

• U.S. Joins U.K. to Seize LockBit Site, Disrupt Massive Ransomware Variant

• Authentic or counterfeit? How QED Vault is using tokens to redefine asset ownership

• Defending Access to the Decentralized Web

• ThreatDown EDR update: Streamlined Suspicious Activity investigation

• Wireless Visibility: The MUST for Zero Trust

• 5 Ways to Counteract Increasing Cyber Insurance Rates

• Here are all the red flags Charlotte Cowles missed in that viral NY Mag article

• LockBit Ransomware Gang’s Website Shut Down by FBI and International Law Enforcement

• Law enforcement trolls LockBit, reveals massive takedown

• EU Opens Official Probe of TikTok Over Content, Minors, Privacy

• An Obsession With Impact: The Inspiring Journey of a Dreamer That Led to a Career at Microsoft

• New Stellar Cyber Alliance to Deliver Email Security for SecOps Teams

• Signal Finally Rolls Out Usernames, So You Can Keep Your Phone Number Private

• Joomla: Multiple XSS Vulnerabilities

• Fairwinds Insights Release Notes 15.0-15.2: Aggregated Action Items

• How a Fake CIA Agent Duped Someone out of $50,000

• New Typosquatting and Repojacking Tactics Uncovered on PyPI

• Wyze Cameras Glitch: 13,000 Users Saw Footage from Others’ Homes

• Feds Seize LockBit Ransomware Websites, Offer Decryption Tools, Troll Affiliates

• VulnRecap 2/19/24 – News from Microsoft, Zoom, & SolarWinds

• ConnectWise Rushes to Patch Critical Vulns in Remote Access Tool

• Singapore struggles with scams as cybercrime cases keep climbing

• CISA Releases Three Industrial Control Systems Advisories

• Commend WS203VICM

• Mitsubishi Electric Electrical Discharge Machines

• Ethercat Zeek Plugin

• More details about Operation Cronos that disrupted Lockbit operation

• Linux Malware Campaign “Migo” Targets Redis For Cryptomining

• ALERT! New iOS Trojan Steals Data for Bank Account Hacking

• A network compliance checklist for remote work

• US sanctions LockBit members after ransomware takedown

• Cops turn LockBit ransomware gang’s countdown timers against them

• USENIX Security ’23 -Tamer Abdelaziz, Aquinas Hobor – Smart Learning to Find Dumb Contracts

• ManageEngine unveils ML-powered exploit triad analytics feature

• LockBit Ransomware Takedown: What You Need to Know about Operation Cronos

• Anonymous Sudan launches DDOS Cyber Attack on University of Cambridge

• Recommended Practices for Enterprise Electronic Messaging Security and Governance

• LockBit Ransomware Members Charged by Authorities, Free Decryptor Released

• Cops turn LockBit’s ransomware gang’s countdown timers against them

• New Migo Malware Targeting Redis Servers for Cryptocurrency Mining

• Partner Competencies, Credentials Valued as Key Success Metrics by Customers

• Pindrop Pulse offers protection against audio deepfakes

• Top UK Universities Recovering Following Targeted DDoS Attack

• SQL Injection Vulnerability Patched in RSS Aggregator by Feedzy WordPress Plugin

• Threat Intelligence as-a-Service: As good or better than D-I-Y?

• Reddit Signed a $60,000,000 Content Licensing Deal with an AI company

• Vietnam To Collect Biometrics – Even DNA – For New ID Cards

• Law Enforcement Hacks LockBit Ransomware, Delivers Major Blow To Operation

• Recent Zero Day Could Impact Up To 97k Microsoft Exchange Servers

• Insider Steals 79,000 Email Addresses At Work To Promote Own Business

• Websites Hacked Via Vuln In Bricks Builder WordPress Plugin

• Wyze admits 13,000 users could have viewed strangers’ camera feeds

• Recent Zero-Day Could Impact Up to 97,000 Microsoft Exchange Servers

• When is PCI Required? (+ 4 Tips for Maintainig Compliance)

• About 13,000 Wyze Customers Affected by Camera Glitch

• Here’s How to Safeguard Your Online Travel Accounts from Hackers

• US House Forms AI Task Force As Legislation Stalls

• How I got started: Cyber AI/ML engineer

• Top 4 Ivanti Competitors and Alternatives for 2024

• VulnRecap 2/19/2024 – News from Microsoft, Zoom, SolarWinds

• Cofense Annual Report Indicates 105% Increase in Malicious Emails Bypassing Secure Email Gateways

• Hackers can Spy on Cameras Through Walls, New Study Reveals

• 1Password acquires Kolide to improve modern workforce security

• 2024 Unit 42 Incident Response Report: Navigating the Shift in Cybersecurity Threat Tactics

• First Neuralink Patient ‘Controls Mouse With Thoughts’

• The New York Times vs. OpenAI: A Turning Point for Web Scraping?

• Cactus Ransomware Group Confirms Hacking Schneider Electric

• Websites Hacked via Vulnerability in Bricks Builder WordPress Plugin

• Volt Typhoon Seen Exfiltrating Sensitive OT Data

• Cyber Insights 2024: Supply Chain

• Why API Security is Crucial in Defending Against Ransomware Attacks

• Does Your Security Team Need a Dedicated Collaboration Tool?

• LockBit Takedown by Brits — Time for ‘Operation Cronos’

• End-User Risks: Enterprises on Edge Amid Growing Concerns of the Next Major Breach

• Pentera collaborates with SpyCloud to reduce dwell time of compromised credentials

• Two Arrested In LockBit Ransomware Gang Takedown

• How to Launch a Successful ICO: 2024 Guide

• 1Password expands its endpoint security offerings with Kolide acquisition

• Wyze cameras show the wrong feeds to customers. Again.

• UPDATED: UK leads takedown of LockBit ransomware gang’s website

• Metomic launches human firewall features to scale data security workflows

• LockBit Ransomware Operation Shut Down; Criminals Arrested; Decryption Keys Released

• NCA’s LockBit Takedown: Source Code, Arrests and Recovery Tool Revealed

• Meta Unveils 8 Spyware Companies Targeting iOS, Android, & Windows Devices

• The Notorious Lockbit Ransomware Gang Has Been Disrupted by Law Enforcement

• Astaroth, Mekotio & Ousaban abusing Google Cloud Run in LATAM-focused malware campaigns

• Lockbit: How A Global Police Operation Just Took Down a Notorious Ransomware Gang

• Meeting Financial Regulatory Requirements with Duo Multi-Factor Authentication

• Initial Ransomware Demands Jump 20% to $600,000 in 2023

• Xpeng To Hire 4,000 Staff Amidst EV ‘Bloodbath’

• China’s SMIC, Huawei Amongst Top Gov’t Funding Recipients

• Microsoft Is Spying on Users of Its AI Tools

• Anatsa Android Banking Trojan Continues to Spread via Google Play

• Law Enforcement Hacks LockBit Ransomware, Delivers Major Blow to Operation

• Automating Threat Detection and Response

• LockBit takedown: Infrastructure disrupted, criminals arrested, decryption keys recovered

• Exploring Data Privacy and Security in B2B Gaming Data

• Authorities disrupt operations of notorious LockBit ransomware gang

• New Gold Pickaxe Malware Aims To Steal Users’ Faces

• Microsoft Patch Tuesday For February Addressed Two Zero-Days

• Zoom Patched Multiple Security Vulnerabilities With Latest Update

• Outsmarting PayPal Scammers to Keep Your Cash Safe

• Raccoon Infostealer operator extradited to the United States

• Malvertising: This cyberthreat isn’t on the dark web, it’s on Google

• Insider steals 79,000 email addresses at work to promote own business

• LockBit disrupted by international law enforcement task force

• Critical Flaws Found in ConnectWise ScreenConnect Software – Patch Now

• New Report Reveals North Korean Hackers Targeting Defense Firms Worldwide

• Learn How to Build an Incident Response Playbook Against Scattered Spider in Real-Time

• SaaS Compliance through the NIST Cybersecurity Framework

• Ivanti Patched Another Vulnerability While The Former Went Under Attack

• London Tribunal Approves £3bn Facebook Lawsuit

• Authorities seize dark web leak site from LockBit ransomware gang

• Integrating AlmaLinux with Existing Enterprise Systems

• High-Severity Squid Vulnerabilities Fixed in Ubuntu

• LockBit Ransomware Gang Domains Seized in Global Operation

• Critical ConnectWise ScreenConnect vulnerabilities fixed, patch ASAP!

• LockBit Infrastructure Disrupted by Global Law Enforcers

• Insider Steals 80,000 Email Addresses From District Councils

• Earth Preta Campaign Uses DOPLUGS to Target Asia

• Law Enforcement Seizes LockBit Ransomware Infrastructure

• Alpha Ransomware Uses Living-Off-The-Land Tools To Attack Windows Computers

• LockBit Ransomware Gang Disrupted by Global Law Enforcement Operation

• CPX Vienna 2024: Celebrating the Pinnacle of Partnership Excellence

• Singapore looks to accelerate AI development with investment in compute and talent

• PCI DSS Compliance – Meeting the Third-Party Vendor Requirements

• WordPress Bricks Theme Under Active Attack: Critical Flaw Impacts 25,000+ Sites

• Lockbit Infrastructure Disrupted by Global Law Enforcers

• US, UK authorities claim seizure of LockBit ransomware gang’s dark web leak site

• Warning: Agniane Stealer Targeting Users to Steal Financial Data

• Two days into the Digital Services Act, EU wields it to deepen TikTok probe

• Cactus ransomware gang claims the theft of 1.5TB of data from Energy management and industrial automation firm Schneider Electric

• MoqHao Evolution Poses Immense Threat to Android Users

• Maryland Busts $9.5 Million #BEC Money Laundering Ring

• How to make sense of the new SEC cyber risk disclosure rules

• Iran and Hezbollah Hackers Launch Attacks to Influence Israel-Hamas Narrative

• Hackers Arrested For Stealing Banking Credentials Using Android Malware

• LockBit Ransomware’s Darknet Domains Seized in Global Law Enforcement Raid

• UK NCA takes control of LockBit Ransomware gang website

• The Digital Services Act is Here. Nisos Can Help!

• Why identity fraud costs organizations millions

• How decentralized identity is shaping the future of data protection

• Vietnam to collect biometrics – even DNA – for new ID cards

• Hackers Arrested For Stealing Banking Credentials Using Novel Android Malware

• Clean links and sophisticated scams mark new era in email attacks

• 36% of code generated by GitHub CoPilot contains security flaws

• Secure File Sharing for Businesses: Best Practices

• UK leads takedown of LockBit ransomware gang’s website

• Artificial Intelligence in Business Security

• LockBit ransomware gang disrupted by global operation

• Titanium and LogRhythm: Elevating Visibility into Cybersecurity Risks in Pakistan

• LockBit, the world’s worst ransomware, is down

• 8 LockBit Ransomware Gang Domains Seized in Global Operation

• Operation Cronos: law enforcement disrupted the LockBit operation

Generated on 2024-02-21 23:55:57.519717