IT Security News Daily Summary 2024-02-28

• Speedify VPN Free vs. Premium: Which Plan Is Right For You?

• Best Secure Access Service Edge Platforms in 2024

• High-risk open source vulnerabilities on the rise, Synopsys reports

• Wireless and the CiscoLive Network Operations Center

• Navigating the Waters of Generative AI

• Multi-cloud security challenges and best practices

• Stopping a targeted attack on a Managed Service Provider (MSP) with ThreatDown MDR

• 5 Microsoft Edge settings to change for more secure browsing than Chrome offers

• Biden Executive Order Bans Sale of US Data to China, Russia. Good Luck

• Pharmaceutical giant Cencora discloses a data breach

• CISA Publishes Guide to Support University Cybersecurity Clinics

• Vodafone Completes 3G Network Switch Off In UK

• CISA Releases Resource Guide for University Cybersecurity Clinics

• Anycubic users say their 3D printers were hacked to warn of a security flaw

• Why Companies Are Still Investing in Tech During an Economic Slowdown

• Why Higher Education Is So Vulnerable to Cyber Attacks — And What to Do

• FBI Warns: Ubiquiti EdgeRouter is STILL Not Secure

• Imperva Customers are Protected Against New SQL Injection Vulnerability in WordPress Plugin

• Bitcoin Pushes Past $60,000, In First Time Since November 2021

• Calendar Meeting Links Used to Spread Mac Malware

• ALPHV is singling out healthcare sector, say FBI and CISA

• FBI Issues Alert on Russian Threats Targeting Ubiquiti Routers

• Multiple vulnerabilities in Adobe Acrobat Reader could lead to remote code execution

• Palo Alto investor sues over 28% share tumble

• White House Issues Executive Order on International Data Protection

• 34 Million Roblox Credentials Exposed on Dark Web in Three Years

• President Biden To Plug US Data Transfers To China, Russia Etc

• The Role of Penetration Testing in Strengthening Cyber Defenses

• $2,751 Bounty Awarded for Arbitrary File Upload Vulnerability Patched in Avada WordPress Theme

• New Ransomware gang steals about 200GB of data from Game Developer

• Ransomware gangs exploiting ConnectWise ScreenConnect flaws

• Dictators Used Sandvine Tech to Censor the Internet. The US Finally Did Something About It

• Showcasing Powerful Private 5G Use Cases at Cisco Live EMEA!

• Unmasking 2024’s Email Security Landscape

• One year later, Rhadamanthys is still dropped via malvertising

• Cyber Insights 2024: APIs – A Clear, Present, and Future Danger

• White House to Issue Executive Order on Personal Information Protection

• Iran-Linked UNC1549 Hackers Target Middle East Aerospace & Defense Sectors

• UK Unveils Draft Cybersecurity Governance Code to Boost Business Resilience

• BlackCat Ransomware Linked to UnitedHealth Subsidiary Optum Hack

• NVIDIA’s Dominance in Shaping the Digital World

• Optum CEO Stresses Communication’s Vital Role in Cyberattack Management

• Cohesity Gaia helps businesses transform secondary data into knowledge

• Exploit Attempts for Unknown Password Reset Vulnerability, (Wed, Feb 28th)

• BYD Ramps Up EV Price War In China With Cheaper Models

• FBI, CISA, HHS warn of targeted ALPHV/Blackcat ransomware attacks against the healthcare sector

• US Bans Trading With Canadian Network Intelligence Firm Sandvine

• European retailer Pepco loses €15.5 million in phishing (possibly BEC?) attack

• Researchers Uncover Tools And Tactics Used By Chinese Hackers

• Hackers Using Weaponized PDF Files To Kickstart Infection Chain

• Cato Networks Announces 59% Revenue Growth In 2023 Business Results

• The Silent Threat: Why Vishing is Causing Major Problems for Businesses

• Biden EO Will Keep China, Russia from Buying Americans’ Sensitive Data

• Tax Season Vigilance: Guarding Against Fraudulent Schemes

• Privacy Under Siege: Analyzing the Surge in Claims Amidst Cybersecurity Evolution

• Researchers Exposed Predator Spyware Infrastructure & Domains Associated

• FBI, CISA warns Of ALPHV Blackcat Ransomware Attacking Hospitals

• A Shadowed Menace : The Escalation of Web API Cyber Attacks in 2024

• WEF Is Waging War on Misinformation and Cyber Insecurity

• Today’s Attack Trends — Unit 42 Incident Response Report

• Hackers Steal Personal Information From Pharma Giant Cencora

• RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

• Cyber Security Today, Feb. 28, 2024 – Thousands of subdomains abused for phishing, the latest ransomware news and more

• FBI Warns U.S. Healthcare Sector of Targeted BlackCat Ransomware Attacks

• Apple iMessage Adds Quantum Resistance To Its Encryption With PQ3 Protocol

• AMOS macOS Stealer Steals Particular Files on the System & Browser Data

• VirusTotal Threat Intelligence Now Seamlessly Integrated in Infinity XDR/XPR

• 6 Best Digital Forensics Tools Used by Experts in 2024

• How HBCUs and Cisco Are Partnering to Provide Opportunities and Advancement for Students

• Synopsys Report: 74% of Codebases Harbour High-Risk Open Source Vulnerabilities, Up 54%

• Stop running security in passive mode

• Enterprise security: Making hot desking secure and accessible on a global scale

• Intel Core Ultra vPro Platform Brings New Security Features

• Chinese Cyberspies Use New Malware in Ivanti VPN Attacks

• Is XDR Enough? The Hidden Gaps in Your Security Net

• US Government Urges Cleanup of Routers Infected by Russia’s APT28

• UK ICO Vows to Safeguard Privacy in AI Era, Rules Out Bespoke Regulation

• How Security Leaders Can Break Down Barriers to Enable Digital Trust

• A Cyber Insurance Backstop

• Exabeam introduces new features to improve security analyst workflows

• State-sponsored hackers know enterprise VPN appliances inside out

• Building Your Privacy-Compliant Customer Data Platform (CDP) with First-Party Data

• Lawyer For Bankman-Fried Urges Judge Not To Impose 100-Year Sentence

• FBI Alert: Russian Hackers Target Ubiquiti Routers for Data, Botnet Creation

• LoanDepot January Hack: 16.9M Individuals Data Exposed

• Russia-linked APT28 compromised Ubiquiti EdgeRouters to facilitate cyber operations

• Change Healthcare outages reportedly caused by ransomware

• The Predator spyware ecosystem is not dead

• Navigating the Cloud: Exploring Lateral Movement Techniques

• GDPR Security Pack

• Apple Cancels Much Delayed Electric Car Project

• NIST Releases Cybersecurity Framework 2.0: Guide for All Organizations

• Geopolitics Accelerates Need For Stronger Cyber Crisis Management

• The ISO 27000 family of protocols and their role in cybersecurity

• Microsoft Copilot for Security: The great equalizer for government security

• Compliance Scorecard​ collaborates with ConnectSecure to automate asset governance

• Superusers Need Super Protection: How to Bridge Privileged Access Management and Identity Management

• Uncle Sam tells nosy nations to keep their hands off Americans’ personal data

• Over Half of UK Firms Concerned About Insider Threats

• ManageEngine partners with Check Point to help organizations tackle mobile threats

• Ads for Zero-Day Exploit Sales Surge 70% Annually

• What We Learned from the 2024 State of Cybersecurity Survey

• Hackers Advertising New Version Of WarZone RAT On Hacking Forums

• NinjaOne and SentinelOne integration enhances risk mitigation and IT security

• Is Network Security Still a Thing in the Age of Public Cloud?

• TimbreStealer Malware Spreading via Tax-themed Phishing Scam Targets IT Users

• The Importance of Implementing an Information Security Management System (ISMS)

• Beware of Typos that May lead to Malicious PyPI Package Installation

• Beware of Typos that May lead to malicious PyPI Package Installation

• Navigating Data Security Concerns in Cloud Migration: Strategies and Best Practices

• Cybersecurity Agencies Warn Ubiquiti EdgeRouter Users of APT28’s MooBot Threat

• Russia develops an AI Cyber Threat Tool to put a jolt in US democracy

• Preparing for the NIS2 Directive

• Understanding employees’ motivations behind risky actions

• When Cats Fly: Suspected Iranian Threat Actor UNC1549 Targets Israeli and Middle East Aerospace and Defense Sectors

• That home router botnet the Feds took down? Moscow’s probably going to try again

• AI-driven DevOps: Revolutionizing software engineering practices

• AI in cybersecurity presents a complex duality

• How AI is reshaping the cybersecurity job landscape

• Tangerine – 243,462 breached accounts

• ISC Stormcast For Wednesday, February 28th, 2024 https://isc.sans.edu/podcastdetail/8872, (Wed, Feb 28th)

• Cutting Edge, Part 3: Investigating Ivanti Connect Secure VPN Exploitation and Persistence Attempts

• Managing Cyber Risk for Under-Pressure CISOs

• Sen. Wyden Exposes Data Brokers Selling Location Data to Anti-Abortion Groups That Target Abortion Seekers

• Change Healthcare Ransomware Attack: BlackCat Hackers Quickly Returned After FBI Bust

• Microsoft boosts its Microsoft 365 Insider Builds on Windows Bounty Program with higher awards and an expanded scope

• IT Security News Daily Summary 2024-02-27

• USENIX Security ’23 – ClepsydraCache – Preventing Cache Attacks with Time-Based Evictions

• Synopsys Report Exposes Extent of Open Source Software Security Risks

• Black Basta and Bl00dy ransomware gangs exploit recent ConnectWise ScreenConnect bugs

• EFF to D.C. Circuit: The U.S. Government’s Forced Disclosure of Visa Applicants’ Social Media Identifiers Harms Free Speech and Privacy

• Sandvine put on America’s export no-fly list after Egypt used network tech for spying

• CloudGuard Streamlines Azure Virtual WAN security with Direct Ingress

• Hackers Are Using Fake Oculus Accounts To Get Facebook Users Suspended

• Enabling Network Engineering Skills in an AI World

• Sandvine put on America’s export no-fly list for flogging snoop-ware to Egypt

• US Gov Says Software Measurability is ‘Hardest Problem to Solve’

• Vulnerability Summary for the Week of February 19, 2024

• New Variant of AMOS Stealer Targets Safari Cookies and Crypto Wallets

• BT Completes 3G Switch-Off, With Belfast Site Closure

• White House urges developers to dump C and C++

• GenAI will Transform B2B Interactions and Solutions in the Year Ahead with New Depth of Context and Control

• NIST updates Cybersecurity Framework after a decade of lessons

• US Will Fight Russian Disinformation — Hacks and Leaks and Deepfakes, Oh My!

• CES 2024: Motorola Reveals Smartphone On Wrist Concept

• Safe Data Sharing Practices: How to Avoid Data Leaks

• Industrial Cyber Espionage France’s Top Threat Ahead of 2024 Paris Olympics

• Take Downs and the Rest of Us: Do they matter?, (Tue, Feb 27th)

• New Vulnerabilities in ConnectWise ScreenConnect Massively Exploited by Attackers

• Where Is DevNet Going Over the Next 10 Years, and Beyond?

• Hackers Selling DCRat Malware Subscriptions For $5 on Telegram

• Top 5 Common Cybersecurity Attacks MSPs Should Know in 2024

• Critical Infrastructure Protection in the Age of Cyber Threats

• An Approach To Synthetic Transactions With Spring Microservices: Validating Features and Upgrades

• OpenSSL

• 1Password vs LastPass: 2024 Business Password Manager Comparison

• Takes Downs and the Rest of Us: Do they matter?, (Tue, Feb 27th)

• Expedia To Cut 8 Percent Of Workforce

• Sploitscan – Cybersecurity Utility To Identify Exploits For Known Vulnerabilities

• Energy Department Invests $45 Million in 16 Projects to Improve Cybersecurity

• Black Basta, Bl00dy Ransomware Exploiting Recent ScreenConnect Flaws

• Risk Management Strategy in an Economic Downturn: How to Take a Holistic Approach to GRC

• Law Enforcement Strikes Blow Against LockBit Ransomware Group

• Russian threat actor expanding its target list, warns Five Eyes report

• SpinSPM for Salesforce identifies misconfigurations within SaaS applications

• NIST Releases Final Version of Cybersecurity Framework 2.0

• Four Million WordPress Sites Vulnerable to LiteSpeed Plugin Flaw

• IBM offers AI enabled ransomware resilience data storage solutions

• Explore Salesforce OAuth Authorization Flows and Its Use Cases

• CISA Releases Two Industrial Control Systems Advisories

• Santesoft Sante DICOM Viewer Pro

• Mitsubishi Electric Multiple Factory Automation Products

• Evolution to 5G-Advanced and Beyond: A Blueprint for Mobile Transport

• XSS flaw in LiteSpeed Cache plugin exposes millions of WordPress sites at risk

• Canada’s privacy watchdog investigating hack at Global Affairs

• PKI Solutions introduces new version of PKI Spotlight

• Google Pay To Close In US, To ‘Simplify’ Payment Apps

• The compelling need for cloud-native data protection

• The UK Is GPS-Tagging Thousands of Migrants

• Hackers Steal Nearly $10 Million from Axie Infinity Co-founder’s Personal Accounts

• AI Against AI: Harnessing Artificial Intelligence To Detect Deepfakes and Vishing

• IDAT Loader used to infect a Ukraine entity in Finland with Remcos RAT

• An educational robot security research

• SubdoMailing Manipulates Subdomains To Send Spam

• China Warns Of Fake Digital Currency Wallets Fleecing Netizens

• LoadDepot Confirms SSNs Leaked In Breach Claimed By ALPHV/BlackCat

• Bitcoin Scorches Past $57,000 As Big Buyers Flock In

• Cyber Insights 2024: Quantum and the Cryptopocalypse

• Domains Once Owned by Major Firms Help Millions of Spam Emails Bypass Security

• Nvidia CEO Believes AI Would Kill Coding

• VIAVI enhances Observer Sentry’s exposure and vulnerability analysis

• Akamai extends its segmentation solution to hybrid cloud environments

• WordPress LiteSpeed Plugin Vulnerability Puts 5 Million Sites at Risk

• INTMAX Launches Plasma Next to Scale Ethereum with Stateless Layer

• 14-Year-Old CMS Editor Flaw Exploited to Hack Govt & Edu Sites

• Abyss Locker Ransomware Attacks Microsoft Windows and Linux Users

• computer forensics (cyber forensics)

• 5 Best VPN Services (2024): For Routers, PC, iPhone, Android, and More

• Cato Networks to Present on AI and SASE at Cloud Expo Europe and DevOps Live

• FortiGuard Labs Outbreak Alerts Annual Report 2023: A Glimpse into the Evolving Threat Landscape

• White House to Software Developers: Use Memory Safe Languages

• AgileBlue Sapphire AI streamlines SecOps and SOAR processes

• White House: Use memory-safe programming languages to protect the nation

• AU10TIX KYB solution validates info against global registries and jurisdictions

• Half of IT Leaders Identify IoT as Security Weak Point

• Hackers Abuse Telegram API To Exfiltrate User Information

• Zyxel Firewall Flaw Let Attackers Execute Remote Code

• Unveiling the Power of Virtual Private Networks (VPNs)

• Fortifying Web Applications: A Guide To Preventing SQL Injection in AWS RDS SQL Server

• W-2 phishing scams: Everything you need to know

• Watch out! There are hidden dangers lurking your PDFs

• Understand SASE ROI for Network Security Transformation

• Google’s Magika: Revolutionizing File-Type Identification for Enhanced Cybersecurity

• Legato Security Ensemble helps organizations prevent breaches

• Open-Source Xeno RAT Trojan Emerges as a Potent Threat on GitHub

• Getting Ahead of Cybersecurity Materiality Mayhem

• TimbreStealer campaign targets Mexican users with financial lures

• ResurrecAds Attack Hijacks Brand Names, Spreads Spam Via ‘SubdoMailing’

• The Cost of Not Conducting a Network Infrastructure Risk Assessment: A Costly Gamble

• Benefits of Ingesting Data from Amazon Inspector into Cisco Vulnerability Management

• Meta plans to prevent disinformation and AI-generated content from influencing voters

• Most Commercial Code Contains High-Risk Open Source Bugs

• TSMC Opens First Factory In Japan

• ThreatHunter.ai Stops Hundreds of Attacks in 48 Hours: Fighting Ransomware and Nation-State Cyber Threats

• China Surveillance Company Hacked

• [Free & Downloadable] Cybersecurity Risk Management Template – 2024

• Canada’s RCMP, Global Affairs Hit by Cyberattacks

• Artificial Arms Race: What Can Automation and AI do to Advance Red Teams

• 67,000 U-Haul Customers Impacted by Data Breach

• Google and Yahoo DMARC Requirement: Answering Your Webinar Questions

• Generative AI Governance: Essential Tips to Get Started

• APT29 revamps its techniques to breach cloud environments

• Android banking trojans: How they steal passwords and drain bank accounts

• NIST Cybersecurity Framework 2.0 Officially Released

• Terra’s Do Kwon To Miss Start Of SEC Trial In US

• How the Pentagon Learned to Use Targeted Ads to Find its Targets—and Vladimir Putin

• Identity theft is number one threat for consumers, says report

• From Classrooms to Cyberspace: The AI Takeover in EdTech

• From Alert to Action: How to Speed Up Your SOC Investigations

• Top 5 Scam Techniques: What You Need to Know

• US pharmacy outage caused by Blackcat ransomware attack on Optum Solutions

• Weak or Misconfigured Multi-Factor Authentication (MFA) Methods

• Several OpenJDK Vulnerabilities Fixed

• New Hugging Face Vulnerability Exposes AI Models to Supply Chain Attacks

• Five Eyes Agencies Expose APT29’s Evolving Cloud Attack Tactics

• 69% of Organizations Infected by Ransomware in 2023

• Bitwarden Secrets Manager integrates with Ansible Playbook

• WordPress Plugin Flaw Exposes 200,000+ Websites for Hacking

• Exclusive: Enkrypt raises seed round to create a ‘control layer’ for generative AI safety

• Cybercrims: When we hit IT, they sometimes pay, but when we hit OT… jackpot

• Which apps use the most data on my iPhone?

• Hackers Actively Hijacking ConnectWise ScreenConnect server

• Improving OT Security in Industrial Processes

• Business Logic Abuse Dominates as API Attacks Surge

• Heavily Obfuscated PIKABOT Evades EDR Protection

• Zyxel fixed four bugs in firewalls and access points

• Octopus Deploy acquires Codefresh to drive innovation in continuous delivery

• Threat Actor Groups, Including Black Basta, are Exploiting Recent ScreenConnect Vulnerabilities

• Podcast Episode: Open Source Beats Authoritarianism

• NSFGPT: A Large Model for Security Applications that Attracts Gartner’s Attention

• How to convince Top Management to invest in cybersecurity and secure software development

• What is Application Security Testing (AST)?

• Russia-linked APT29 switched to targeting cloud services

• Learning from the LockBit Takedown

• Keep Your Tech Flame Alive: Akamai Trailblazer ? Richa Dayal

• Broadcom builds a better SASE out of VMware VeloCloud and Symantec

• NIST CSF 2.0 released, to help all organizations, not just those in critical infrastructure

• WordPress Plugin Alert – Critical SQLi Vulnerability Threatens 200K+ Websites

• Trending Cyber Attack news headlines on Google

• Using AI to reduce false positives in secrets scanners

• Overcoming the pressures of cybersecurity startup leadership

• Enterprises’ progress in digital trust implementation is far from great

• Does AI remediation spell the end for developers in 2024?

• China warns of fake digital currency wallets fleecing netizens

• Anonymous Sudan Promoting New DDoS Botnet: Beware

• Unmanaged third-party access threatens OT environments

• Smart Home Security: Protecting Your Connected Devices

• ISC Stormcast For Tuesday, February 27th, 2024 https://isc.sans.edu/podcastdetail/8870, (Tue, Feb 27th)

• PCAParse

• Cloud-Native Security for Modern Businesses

• Sidebar: The powerful Digital Safety Commission

• VulnRecap 2/26/24 – VMWare, Apple, ScreenConnect Face Risks

Generated on 2024-02-28 23:55:45.188984