IT Security News Daily Summary 2024-02-22

• Identify Weak Links in Your Application Stack – Part 2, Anomaly Detection

• Cyberattack downs pharmacies across America

• USENIX Security ’23 – Junjie Wang, Zhiyi Zhang, Shuang Liu, Xiaoning Du, Junjie Chen – FuzzJIT: Oracle-Enhanced Fuzzing for JavaScript Engine JIT Compiler

• Playbooks on-prem

• FTC Accuses Avast of Selling Customer Browsing Data to Advertisers

• The best VPN routers of 2024

• Leak Shows Alarm in Congress Over a Russian ‘Threat’ Is a Real Anomaly

• Webex Connect’s Second Quarter

• “Beyond the border scam”, pay attention to the instance of the new Nigerian fraud

• Authorities dismantled LockBit before it could unleash revamped variant

• Google To Pause Gemini AI’s Image Generation Of People

• cloud architect

• FTC bans antivirus giant Avast from selling its users’ browsing data to advertisers

• Coming Soon to Wi-SUN Field Area Network: Versatility to connect sensors with low power and high throughput capabilities

• Top Cyber Threats Automotive Dealerships Should Look Out For

• TikTok’s latest actions to combat misinformation shows it’s not just a U.S. problem

• 6 Best Open Source IAM Tools in 2024

• Secure Coding – A critical skill in today’s threat landscape

• NSA Spying Shirts Are Back Just In Time to Tell Congress to Reform Section 702

• Gartner Predicts Concerns For Enterprises Using Cloud-based Generative AI

• AT&T Outage Disrupts Service for Millions of Users Across US

• Hiding Data in DB2

• Threat Hunting Powered by Efficient and Straightforward Anomaly Detection on Your Data Lake

• Imperva successfully defends against CVE-2024-25600 in WordPress Bricks Builder

• Randall Munroe’s XKCD ‘Crossword Constructors’

• PRC State Hacking: ‘Chinese Edward Snowden’ Spills I‑Soon Secrets in Huge Dump of TTPs

• Researchers Unveil Sound-Based Attack: Swipe Sounds Used to Recreate Fingerprints

• Nvidia Nears $2 Trillion Value, As AI Boosts Profits, Sales

• Apple Shortcuts Vulnerability Exposes Sensitive Data, Update Now!

• Bring us the head of LockBit! $15 million bounty offered for information on leaders of notorious ransomware gang

• 5 Best Free Password Managers for 2024

• New Image/Video Prompt Injection Attacks

• Indian SMEs Lead in Cybersecurity Preparedness and AI Adoption

• UK Led Global Operations Disrupt LockBit’s Criminal Network

• Cactus Ransomware Strikes Schneider Electric, Demands Ransom

• UOB, Samsung Back Singapore’s Startale Labs in $7 Million Web3 Push

• How to Analyse Linux Malware in ANY.RUN

• Securing the power grid: Are you ready for NERC CIP’s upcoming mandate?

• Why ransomware gangs love using RMM tools—and how to stop them

• Eye Care Services Firm Faces Lawsuit Over Data Breach Impacting 2.3 Million

• Apple Unveils PQ3 Protocol – Post-Quantum Encryption for iMessage

• Common Cybersecurity Threats and How To Protect Yourself

• CISA Adds One Known Exploited Vulnerability to Catalog

• CISA Releases One Industrial Control Systems Advisory

• Delta Electronics CNCSoft-B DOPSoft

• ConnectWise Says ScreenConnect Flaw Being Actively Exploited

• SMBs at Risk From SendGrid-Focused Phishing Tactics

• IBM and Cisco: A Powerful Partnership Unveiled at Cisco Live EMEA

• Multiple XSS flaws in Joomla can lead to remote code execution

• Threat Actors Quick to Abuse ‘SSH-Snake’ Worm-Like Tool

• Russian Turla Cyberspies Target Polish NGOs With New Backdoor

• Toshiba and Orange offer quantum secure data transmission with utmost security

• Intel Signs Microsoft As Foundry Customer

• Securing the Digital Frontline: Cybersecurity Trends and Best Practices in Networking

• AT&T Cell Service Outage in United States – Analysis Report

• Ukrainian police arrest father and son in suspected LockBit affiliate double act

• An Online Dump Of Chinese Hacking Documents Offers A Rare Window Into Pervasive State Surveillance

• ConnectWise Exploit Could Spur Ransomware Free-For-All

• VMware Issues No Patch Advisory For Critical Flaw In Old SSO Plugin

• Oh Geez The Coast Guard Is Just Now Going To Think About Infosec?

• Threat Actors Quick To Abuse SSH-Snake Worm-Like Tool

• Change Healthcare Cyber-Attack Leads to Prescription Delays

• Google To Manufacture Pixel Smartphones In India – Report

• Tenable: Cyber Security Pros Should Worry About State-Sponsored Cyber Attacks

• State Department Puts Up $10 Million for Info on LockBit Leaders

• Wordfence Intelligence Weekly WordPress Vulnerability Report (February 12, 2024 to February 18, 2024)

• Why one in 20 people fall for dating scams – and how to not be one of them

• IoMT device tips for healthcare IT departments

• US Government Issues Guidance on Securing Water Systems

• Webinar Today: Cloudy With a Chance of Threats: The Active Threat Landscape in the Cloud

• An Online Dump of Chinese Hacking Documents Offers a Rare Window Into Pervasive State Surveillance

• TEGWAR, AI and the FTC – Gov’t Agency Warns of Deceptive AI Contract Language

• Russian-Aligned Network Doppelgänger Targets German Elections

• Bluzelle’s Curium App Makes Crypto Earning Effortless

• Apex Code Vulnerabilities Let Hackers Steal Salesforce Data

• Leak of China’s Hacking Documentation Stunned Researchers

• 5 tips for securing SSH on your Linux server or desktop

• New Leak Shows Business Side of China’s APT Menace

• Palo Alto Networks and Kyndryl: Unlocking Industry 4.0 with Private 5G

• New Cybereason ‘True Cost to Business Study 2024’ Reveals it Still Doesn’t Pay to Pay

• Techstrong Research: Navigating the Future of Security With Resilience

• IBM Signals Major Paradigm Shift as Valid Account Attacks Surge

• GitHub Copilot makes insecure code even less secure, Snyk says

• Develop Advanced Cybersecurity Skills for Just $80

• OWASP Releases Security Checklist Generative AI Deployment

• TinyTurla-NG in-depth tooling and command and control analysis

• From childhood curiosity to Cisco’s FIFA Women’s World Cup all-female Dream Team

• To win against cyber attackers at Super Bowl LVIII, the NFL turns to Cisco XDR

• US Offering $10M for LockBit Leaders as Law Enforcement Taunts Cybercriminals

• Change Healthcare Cyberattack Causes Significant Disruption

• Microsoft begins broadening free cloud logging capabilities

• Cyber Pros Embrace AI, Over 80% Believe It Will Enhance Jobs

• IT Email Templates: Security Alerts

• Signal to shield user phone numbers by default

• Terra’s Do Kwon Should Be Extradited to US, Montenegro Court Rules

• TikTok safety for schools: K-12 best practices

• Apple Approves Fake App Before Real Rabby Wallet, Users’ Funds Stolen

• US to Pay $15M for Info About Lockbit Ransomware Operator Data

• Beware of New AsukaStealer Steal Browser Passwords & Desktop Screens

• Employees input sensitive data into generative AI tools despite the risks

• Russian Government Software Backdoored to Deploy Konni RAT Malware

• A New Age of Hacktivism

• Cybercriminals Weaponizing Open-Source SSH-Snake Tool for Network Attacks

• Customizing Security with Security Configuration Management (SCM)

• Attackers exploiting ConnectWise ScreenConnect flaws, fixes available for all users (CVE-2024-1709, CVE-2024-1708)

• Chinese Duo Found Guilty of $3m Apple Fraud Plot

• Ransomware Warning as CVSS 10.0 ScreenConnect Bug is Exploited

• A Comprehensive Guide on GraphQL Testing

• Scattered Spider laying new eggs

• UK government seeks to strengthen national cyber resilience

• Earth Preta Hackers Abuses Google Drive to Deploy DOPLUGS Malware

• LockBit Attempts to Stay Afloat With a New Version

• Swiggy Account Hacked, Hackers Placed Orders Worth Rs 97,000

• Digital Deception at the Ballot Box: The Shadow Machinery of Election Manipulation: How Deepfake Technology Threatens the 2024 U.S. Elections

• New Mustang Panda campaign targets Asia with a backdoor dubbed DOPLUGS

• SASE Survey Reveals User Experience Is Top of Mind

• Giant leak reveals Chinese infosec vendor I-Soon is one of Beijing’s cyber-attackers for hire

• Cloud-Native Data Security Posture Management Deployments on AWS with Symmetry Systems

• A step-by-step plan for safe use of GenAI models for software development

• Air Canada AI Chatbot spreads misinformation only to fetch hefty legal penalty

• U.S. Offers $15 Million Bounty to Hunt Down LockBit Ransomware Leaders

• Attack velocity surges with average breakout time down to only 62 minutes

• Wire fraud scams escalate in real estate deals

• Cybersecurity fears drive a return to on-premise infrastructure from cloud computing

• MSPs undergo transformation in response to persistent cyber threats

• Safe Clones With Ansible

• Facebook Marketplace – 77,267 breached accounts

• Threat Brief: ConnectWise ScreenConnect Vulnerabilities (CVE-2024-1708 and CVE-2024-1709)

• Top 5 Cybersecurity Risks Facing Businesses Today

• Face off: Attackers are stealing biometrics to access victims’ bank accounts

• 2024-02-21 – Parrot TDS –> SogGholish –> Aysnc RAT

• Cybercriminals are using Meta’s Llama 2 AI, according to CrowdStrike

• US health tech giant Change Healthcare hit by cyberattack

• IT Security News Daily Summary 2024-02-21

• Discord took no action against server that coordinated costly Mastodon spam attacks

• Biden asks Coast Guard to create an infosec port in a stormy sea of cyber threats

• US GOV OFFERS A REWARD OF UP TO $15M FOR INFO ON LOCKBIT GANG MEMBERS AND AFFILIATES

• Unregulated, Exploitative, and on the Rise: Vera Institute’s Report on Electronic Monitoring

• Frontline PCI-ASV Scanning Datasheet

• How sponsorship is a catalyst for change

• Duo face 20 years in prison over counterfeit iPhone scam

• Apple promises to protect iMessage chats from quantum computers

• How is a Container Scan Done?

• Artificial Intelligence set to drive major tech advancements in 2024, IEEE study finds

• $1,313 Bounty Awarded for Privilege Escalation Vulnerability Patched in Academy LMS WordPress Plugin

• CISA, OMB, ONCD and Microsoft Efforts Bring New Logging Capabilities to Federal Agencies

• Types of SaaS Applications: Categories and Examples

• What to Look for in a Secrets Scanner

• What Is a Circuit-Level Gateway? Definitive Guide

• How to Perform a Firewall Audit in 11 Steps (+Free Checklist)

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #279 – What Happens in the Management Meeting

• Abuse of valid accounts by threat actors hits a high, says IBM

• US Smartphone Sales Slump, As Customers Delay Upgrading

• Top Software Development Outsourcing Trends

• Ping Identity (ForgeRock) vs Okta (2024): Compare IAM software

• Consumer Advocates Warn About “Epidemic Of Fraud” On Facebook

• Cyber Insights 2024: Ransomware

• Hyperautomation: Revolutionizing the Security Market

• How The Security of The Cloud’s Supply Chain Will Shift in 2024

• Webinar: Managing Without Governing? Why Your Organization Needs a Management System to Govern Your Information Resilience Program

• New Year, New Consumer Demands in Cybersecurity: Navigating the Landscape of Consumer Expectations and App Developer Responsibility in Mobile App Security

• Building a Better Perimeter Defense Strategy to Meet the Challenges of 2024

• Apple Beefs Up iMessage With Quantum-Proof PQ3 Protocol

• New Linux Malware “Migo” Exploits Redis for Cryptojacking, Disables Security

• Cybersecurity: A Trojan Horse in Our Digital Walls?

• How to update apps in MacOS: Two options

• Exploiting the latest max-severity ConnectWise bug is ’embarrassingly easy’

• ‘PrintListener’ Attack on Fingerprint Readers — Can You Trust Biometrics?🤞

• White House Hardens Cybersecurity at U.S. Ports, with China a Focus

• Researchers warn high-risk ConnectWise flaw under attack is ’embarrassingly easy’ to exploit

• ConnectWise Confirms ScreenConnect Flaw Under Active Exploitation

• Researchers Devise ‘VoltSchemer’ Attacks Targeting Wireless Chargers

• To Achieve Cyber Resilience, We Need to Rethink One Core Security Principle

• ‘PrintListener’ Attack on Fingerprint Readers — Can You Trust Biometrics?🤞

• AI’s Influence in Scientific Publishing Raises Concerns

• New Wi-Fi Vulnerabilities Expose Android and Linux Devices to Hackers

• Understanding GDPR and the Importance of Employee Training

• Beware of VietCredCare Malware that Steals businesses’ Facebook Accounts

• The five most alarming cyber threats from CrowdStrike’s 2024 Global Threat Report

• Apple secures iMessage against threats from the future

• Organizations increasingly look to observability to solve critical challenges

• Network Resilience: Accelerating Efforts to Protect Critical Infrastructure

• Navigating the Uncertain Path: Why AI Adoption in Cybersecurity Remains Hesitant, and How to Move Forward

• ‘PrintListener’ Attack on Fingerprint Readers — Can You Trust Biometrics?🤞

• Is Network Security Still a Thing in the Age of Public Cloud?

• Data Matters ? Empowering Threat Hunters to Reduce API Risk

• Exploitation Observed: Ivanti Connect Secure ? CVE-2023-46805 and CVE-2024-21887

• United States Suspends Exports To China’s Top Chipmaker SMIC – Report

• Over 40% of Firms Struggle With Cybersecurity Talent Shortage

• Launch Your Ethereum Donation dApp Today: Easy Steps With MetaMask, Alchemy, and GitHub Codespaces

• Should IT and Security Teams Play a Role in Crisis Communications?

• Driving Sustainability in Solutions: The Cisco-Computacenter Partnership

• New Redis miner Migo uses novel system weakening techniques

• LockBit Leaks Expose Almost 200 Affiliates And Custom Malware

• Apple Adds Post-Quantum Encryption To iMessage

• Cactus Ransomware Claims 1.5TB Of Schneider Electric Data

• Code Injection Or Backdoor: A New Look At Ivanti’s CVE-2021-44529

• Webinar Tomorrow: The Active Threat Landscape in the Cloud

• US Ports cybersecurity now a top priority for Joe Biden

• Open Letter Urges AI Deepfake Regulation

• Crypto Exchange FixedFloat Hacked: $26 Million in BTC, ETH Stolen

• Searchlight Cyber integrates MITRE ATT&CK Mapping into DarkIQ for dark web monitoring

• Beyond Identity Device360 identifies device security risks

• Can enterprise identities fix Gen AI’s flaws? This IAM startup thinks so

• Mozilla Releases Security Updates for Firefox and Thunderbird

• Apple readies iMessage for when quantum computers could break encryption

• Adarma Collaborates with Scottish Enterprise to Unveil Neurodiversity Strategy

• Diversifying Defenses: FjordPhantom Malware Shows Importance of a Multi-Pronged Approach

• Apple Adds Post-Quantum Encryption to iMessage

• Executive Order on Port Cybersecurity Points to IT/OT Threat Posed by Chinese Cranes

• Identity-Based Attacks Grow While Ransomware Declines: IBM X-Force

• AI Solutions Address Military Concerns: Speeding Up Soldier Recruitment Amidst Shrinking Forces

• Qloo Raises $25M in Series C Funding to Expand Cultural Reach with AI

• Generative AI Revolutionizing Indian Fintech

• Navigating the Challenges of Personhood Data in the Age of AI

• Biden Executive Order to Bolster US Maritime Cybersecurity

• Why Front-End Development Matters for Online Businesses?

• Coalition: Vulnerability scoring systems falling short

• LockBit leaks expose nearly 200 affiliates and bespoke data-stealing malware

• 5 Trends Shaping Cybersecurity Strategy: AI Threats, SASE, ZTNA & XDR

• Bitsight empowers enterprises to secure the digital supply chain

• How CVSS 4.0 changes (or doesn’t) the way we see vulnerability severity

• Signal Takes User Privacy a Step Further with Optional Usernames: An Analysis

• Apple iOS 17.4: iMessage Gets Post-Quantum Encryption in New Update

• UScellular and Palo Alto Networks Join Forces to Secure 5G

• Harness the power of security automation

• Exclusive: eSentire Confirms Rhysida Ransomware Victims

• Vibrator virus steals your personal information

• Cyber Security Today, Feb. 21, 2024 – A patch warning from ConnectWise, the latest ransomware news, and more

• Check Point introduces Quantum Force, series of AI-powered firewalls

• Mustang Panda Targets Asia with Advanced PlugX Variant DOPLUGS

• Redis Servers Targeted With New ‘Migo’ Malware

• VMware pushes admins to uninstall vulnerable, deprecated vSphere plugin (CVE-2024-22245, CVE-2024-22250)

• IBM: Identity Compromises Surge as Top Initial Access Method for Cybercriminals

• Google Magika: Open-Sourcing AI-Powered File Type Identification

• CrowdStrike Global Threat Report: Cloud intrusions up 75%

• Anne Neuberger, a Top White House Cyber Official, Is Staying Surprisingly Optimistic

• Details of a Phone Scam

• Hummingbird Automations improves efficiency for compliance professionals

• 6 Ways to Simplify SaaS Identity Governance

• BT Tower In London Sold, And Will Become Luxury Hotel

• Google Chrome 122 Update Addresses Critical Security Vulnerabilities

• Critical flaw found in deprecated VMware EAP. Uninstall it immediately

• NSA Announces Retirement of Cybersecurity Director Rob Joyce

• Control Systems Firm PSI Struggles to Recover From Ransomware Attack

• Chrome 122, Firefox 123 Patch High-Severity Vulnerabilities

• Russian Hackers Launch Email Campaigns to Demoralize Ukrainians

• X Briefly Suspends Account Of Alexei Navalny’s Widow

• New Malicious PyPI Packages Use DLL Sideloading In A Supply Chain Attack

• The Five Most Alarming Cyber Threats from CrowdStrike’s 2024 Global Threat Report

• A first analysis of the i-Soon data leak

• Unsecured Database Leaks 153 GB of Filipino Student and Family Data

• New Mingo Malware Attacking Linux Redis Servers To Mine Cryptocurrency

• Impact of Badbox and Peachpit Malware on Android Devices

• Portfolio Optimization & Cyber Risk Management | Kovrr blog

• CampusGuard introduces new online training courses

• Following MITRE’s footsteps in analyzing malware behavior

• Security Onion 2.4.50 Released for Defenders With New Features

• Six things we learned from the LockBit takedown

• Attackers Quick to Weaponize CVE-2023-22527 for Malware Delivery

• Cybersecurity for Healthcare—Diagnosing the Threat Landscape and Prescribing Solutions for Recovery

• NCSC Sounds Alarm Over Private Branch Exchange Attacks

• Following in Mitre’s footsteps and malware behavior

• Building Customer Trust through Transparent Safety and Security Practices

• Cybersecurity Trends in 2024: 5 Key Areas to Follow

• Attacker Breakout Time Falls to Just One Hour

• Silicon In Focus Podcast: Connectivity in Orbit

• Orgs are having a major identity crisis while crims reap the rewards

• A common goal for European cyber security

• Signal Introduces Usernames, Allowing Users to Keep Their Phone Numbers Private

• New ‘VietCredCare’ Stealer Targeting Facebook Advertisers in Vietnam

• 2024’s Cyber Battleground Unveiled: Escalating Ransomware Epidemic, the Evolution of Cyber Warfare Tactics and strategic use of AI in defense – Insights from Check Point’s Latest Security Report

• Microsoft Exchange flaw CVE-2024-21410 could impact up to 97,000 servers

• VMware Urges to Remove Enhanced EAP Plugin to Stop Auth & Session Hijack Attacks

• Hybrid Mesh and the Check Point Infinity Platform

• Europe’s data protection laws cut data storage by making information-wrangling pricier

• Quebec Law 25: All You Need to Know

• Definition of Data Resilience and Cyber Resilience and their attainment

• Navigating NIS2 requirements with Microsoft Security solutions

• Tainted NSO Group gets involved in another data privacy controversy

• VMware Alert: Uninstall EAP Now – Critical Flaw Puts Active Directory at Risk

• Russian Hackers Target Ukraine with Disinformation and Credential-Harvesting Attacks

• TruffleHog: Open-source solution for scanning secrets

• 10 cybersecurity startups to watch in 2024

• Ransomware Declines as InfoStealers and AI Threats Gain Ground: IBM X-Force

• Unveiling Mandiant’s Cyber Threat Intelligence Program Maturity Assessment

• China could be doing better at censorship, think tank finds

• 10 steps to effective board leadership on cyber security

• A closer look at Israeli cybersecurity funding and M&A activity in 2023

• The importance of a good API security strategy

• Alleged Raccoon Infostealer operator extradited, verification site set up for victims

• Active Directory outages can cost organizations $100,000 per day

• True Alliance Mitigates Online Retail Bot Threats and Improves Website Uptime by 99% with Kasada and AWS

• Early adopters’ fast-tracking gen AI into production, according to new report

• The world according to Hinton: Slowing AI down is not the answer

• Decoding Digital Transformation: AI, ML, and RPA in the Modern Era

• Singapore’s monetary authority advises banks to get busy protecting against quantum decryption

Generated on 2024-02-22 23:55:33.625545