IT Security News Daily Summary 2024-03-01

• NIST Cybersecurity Framework: A Cheat Sheet for Professionals

• Friday Squid Blogging: New Extinct Species of Vampire Squid Discovered

• Air National Guardsman Teixeira to admit he was Pentagon files leaker

• USENIX Security ’23 – Vivek Nair, Dawn Song – Multi-Factor Key Derivation Function (MFKDF) for Fast, Flexible, Secure, & Practical Key Management

• Five ways AI is helping to reduce supply chain attacks on DevOps teams

• Judge orders NSO to cough up Pegasus super-spyware source code

• Russia Clamps Down on VPNs, Furthering Restrictions on Internet Access

• Five Ways AI is helping to reduce supply chain attacks on DevOps teams

• Cyber Security Today, Week in Review for week ending Friday, March 1, 2024

• How SASE-based XDR Delivers Better Threat Detection Performance

• Maximizing Feedback for Developers With Continuous Testing

• UK’s NCSC Issues Warning as SVR Hackers Target Cloud Services

• Police seized Crimemarket, the largest German-speaking cybercrime marketplace

• Women in Cybersecurity Q&A: Learning Opportunities and the Power of Mentorship

• PikaBot malware on the rise: What organizations need to know

• Biden executive order protects personal data

• Accelerating Cloud Adoption Across the Scottish Public Sector

• Iranian charged over attacks against US defense contractors, government agencies

• Diving Into Stability: How Static Proxies Transform Online Experience

• Spoiler: It’s not the IRS calling

• With The World Distracted, China Stirs Trouble in The Asia Pacific

• Wireless Peripheral Devices – Security Risk, Exploits and Remediation

• Bolstering IoT Cybersecurity Amid an Evolving Landscape: A CEO’s Perspective

• How to secure your API secret keys from being exposed?

• CISA, Mandiant Warn of a Worsening Situation for Ivanti Users

• Malicious meeting invite fix targets Mac users

• The US is Bracing for Complex, Fast-Moving Threats to Elections This Year, FBI Director Warns

• CryptoChameleon Phishing Scam Targets Crypto Users and FCC Employees

• How dynamic malware analysis works

• Cheap Video Doorbell Cams: Tools of Stalkers and Thieves

• Old Website Tool Exploited by Hackers, Puts Education and Government Sites at Risk

• CISA warns Ivanti ICT ineffective for detecting compromises

• CISA Warns Of Windows Streaming Service Vulnerability Exploitation

• A Child Could Hack These Popular Video Doorbells, Tests Show

• Court Orders Makers Of Pegasus Spyware To Hand Over Code To WhatsApp

• Ivanti Attacks Linked To Espionage Group Targeting Defense Contractors

• In the vanguard of 21st century cyber threats

• In Other News: Google Flaw Exploited, 3D Printers Hacked, WhatsApp Gets NSO Spyware

• This Chinese PC Manufacturer Tailored its Own Devices to be Susceptible to Malware

• eBay, VMware, and McAfee Taken Down in Widespread Phishing Operation

• Malaysia Takes Bold Steps with ‘Kill Switch’ Legislation to Tackle Cyber Crime Surge

• NoName057(16)’s DDoSia project: 2024 updates and behavioural shifts

• France concerned about cyber attacks on electric grids for Summer Olympics 2024

• AI Worm Developed by Researchers Spreads Automatically Between AI Agents

• Thoma Bravo takes critical event management software company Everbridge private in $1.8B deal

• NSA says it’s tracking Ivanti cyberattacks as hackers hit US defense sector

• Cops visit school of ‘wrong person’s child,’ mix up victims and suspects in epic data fail

• Healthcare sector “stretched thin” in fight against cyber attacks warns CSO of Health-ISAC

• MWC 2024: BT To Switch On Stand-alone 5G Network In 2024

• CISA and Partners Release Advisory on Threat Actors Exploiting Ivanti Connect Secure and Policy Secure Gateways Vulnerabilities

• Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways

• Delta Electronics CNCSoft-B

• Cisco Releases Security Advisories for Cisco NX-OS Software

• Vishing, Smishing Thrive in Gap in Enterprise, CSP Security Views

• NSO Ordered To Hand Over Spyware Code To WhatsApp

• US Charges Iranian Over Cyberattacks on Government, Defense Organizations

• Google’s ‘Woke’ AI Troubles: Charting a Pragmatic Course

• Hackers Employ Malicious PDF Files To Kickstart Infection Chain

• The Benefits of Microsegmentation for Compliance

• Address the Challenges of Compliance and Cybersecurity with Zero Trust

• Wireshark Tutorial: Exporting Objects From a Pcap

• Five Eyes alliance warns of attacks exploiting known Ivanti Gateway flaws

• Security review for Microsoft Edge version 122

• IT Leaders Lack Confidence in IoT Security Plans

• Biden Warns Chinese Cars Could Steal US Citizens’ Data

• Advanced Cyber Defence Systems (ADCS) to Showcase Innovative Attack Surface Management Solution at Cloud & Cyber Security Expo

• Pig butchering scams, how they work and how to avoid them

• CISA Warns of Windows Streaming Service Vulnerability Exploitation

• Governments Urge Organizations to Hunt for Ivanti VPN Attacks

• Critical Infrastructure Organizations Warned of Phobos Ransomware Attacks

• Silence Laboratories Raises $4.1 Million to Protect Sensitive Information

• Golden Corral Data Breach Impacts 180,000 Employees

• New Phishing Kit Leverages SMS, Voice Calls to Target Cryptocurrency Users

• PCI Compliance Levels: A Developer’s Guide to PCI Compliance

• Report: Average Initial Ransomware Demand in 2023 Reached $600K

• Cyber Security Today, March 1, 2024 – Warnings to GitHub users and Ivanti gateway administrators, and more

• A Comprehensive Guide to Investing Securely in Digital Assets

• Researchers Created AI Worm that Automatically Spreads Between AI Agents

• Cisco Live Melbourne SOC Report

• Cops visit school of ‘wrong person’s child,’ mix up victims and suspects in epic data fail

• Healthcare in Crosshairs: ALPHV/Blackcat Ransomware Threat Escalates, FBI Issues Warning

• NIST Cybersecurity Framework 2.0

• Industry Reactions to NIST Cybersecurity Framework 2.0: Feedback Friday

• Hackers Stole ‘Sensitive’ Data From Taiwan Telecom Giant: Ministry

• Judge Signals Elon Musk May Lose Lawsuit Against Non-profit

• Golden Corral Restaurant Chain Hacked: 180,000+ Users’ Data Stolen

• RisePro Stealer Attacks Windows Users Steals Sensitive Data

• CWE Version 4.14 Released: What’s New!

• 20 Million+ Cutout.Pro User Records Leaked On Hacking Forums

• TechRepublic Premium Editorial Calendar: Policies, Checklists, Hiring Kits and Glossaries for Download

• Five Eyes Warn of Ivanti Vulnerabilities Exploitation, Detection Tools Insufficient

• Crooks stole €15 Million from European retail company Pepco

• SEC’s Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure Rule: What You Should Know

• New BIFROSE Linux Malware Variant Using Deceptive VMware Domain for Evasion

• 4 Instructive Postmortems on Data Downtime and Loss

• UK Home Office Breached Data Protection Law with Migrant Tracking Program, ICO Finds

• Keeper Security Joins the AWS Partner Network

• GitHub rolls out push protection on public repos

• Collibra AI Governance mitigates risks, protects data, and ensures compliance

• Golden Corral restaurant chain Hacked: 180,000+ Users’ Data Stolen

• Keeping one step ahead of cyber security threats

• CISA Warns Of Hackers Exploiting Multiple Flaws In Ivanti VPN

• Here Come the AI Worms

• Deepfakes Malware Attacks: GoldFactory’s Advanced Tactics

• The Importance of Timely Patch Management for QEMU in Linux

• BEAST AI Jailbreak Language Models Within 1 Minute With High Accuracy

• CISA adds Microsoft Streaming Service bug to its Known Exploited Vulnerabilities catalog

• Complete Guide to Advanced Persistent Threat (APT) Security

• Strengthening the Security of Embedded Devices

• ISO 27001:2022: chapter by chapter description

• Five Eyes Agencies Warn of Active Exploitation of Ivanti Gateway Vulnerabilities

• Cybercriminals harness AI for new era of malware development

• JCDC’s strategic shift: Prioritizing cyber hardening

• GitHub Rolls Out Default Secret Scanning Push Protection for Public Repositories

• LockBit Ransomware gang endorses Donald Trump as next US President

• The Resounding Boom of Cybersecurity: Understanding Its Ever-Expanding Industry

• Hackers Hijack Anycubic 3D Printers to Display Warning Messages

• Key areas that will define the intersection of AI and DevOps

• NTT boss takes early retirement to atone for data leak

• Cyber Threat Assessment

• 98% of businesses linked to breached third parties

• Businesses foresee major impact from new SEC cybersecurity disclosure rules

• New infosec products of the week: March 1, 2024

• 10 Ways to Secure Mobile Devices [2024]

• MWC Barcelona 2024 news roundup: Telecom, AI, security and more

• ISC Stormcast For Friday, March 1st, 2024 https://isc.sans.edu/podcastdetail/8876, (Fri, Mar 1st)

• Password Management: Best Practices for Home Users

• CutOut.Pro AI Tool Data Breach: Hacker Leak 20 Million User Info

• Home Office Security: Tips for Remote Workers

• GitHub struggles to keep up with automated malicious forks

• Faye’s Journey: From Security PM to Diversity Advocate at Microsoft

• Scanning for Confluence CVE-2022-26134, (Fri, Mar 1st)

• Dashlane Free vs. Premium: Which Plan Is Best For You?

• The UK’s GPS Tagging of Migrants Has Been Ruled Illegal

• Turns out cops are super interested in subpoenaing suspects’ push notifications

• You’re automated for success with Cisco’s Continuing Education program

• Securing and Monitoring Your Data Pipeline: Best Practices for Kafka, AWS RDS, Lambda, and API Gateway Integration

• NordPass Free vs. Premium: Is It Worth the Upgrade?

• Proton VPN Free vs. Premium: Which Plan Is Best For You?

• Ghana’s President Must Refuse to Sign the Anti-LGBTQ+ Bill

• US courts fielded over 130 requests for access to push notification metadata

• IT Security News Daily Summary 2024-02-29

• Fulton County, Security Experts Call LockBit’s Bluff

• Researchers found a zero-click Facebook account takeover

• ALPHV Blackcat, GCP-Native Attacks, Bandook RAT, NoaBot Miner, Ivanti Secure Vulnerabilities, and More: Hacker’s Playbook Threat Coverage Round-up: February 2024

• A leaky database spilled 2FA codes for the world’s tech giants

• White House goes to court, not Congress, to renew warrantless spy powers

• USENIX Security ’23 – Suood Al Roomi, Frank Li – A Large-Scale Measurement of Website Login Policies

• We Flew a Plane Over San Francisco to Fight Proposition E. Here’s Why.

• Kali Linux 2024.1: Supercharge Your Penetration Testing with a Revamped Experience

• Seamless shopping with Room & Board

• Android Money Transfer XHelper App Exposed as Money Laundering Network

• How open source is disrupting enterprise security: Startup Filigran shows the way with collaborative threat defense

• RoboForm Free vs. Paid: Which Plan Is Best For You?

• ONCDs’ call for memory safety brings considerable challenges, changes, and costs

• CISA, U.S. and International Partners Warn of Ongoing Exploitation of Multiple Ivanti Vulnerabilities

• US President Biden Signed Order To Protect Americans Personal Data

• Consumer Groups Accuse Facebook Of “Massive, Illegal” Data Collection

• Chinese ‘connected’ cars are a national security threat, says Biden

• Why Apple added protection against quantum computing when quantum computing doesn’t even exist yet

• Free VPN vs Paid VPN: Which One Is Right for You?

• The Mysterious Case of the Missing Trump Trial Ransomware Leak

• A government watchdog hacked a US federal agency to stress-test its cloud security

• OpenAI Sued For Unauthorised Use Of Journalist Content, Again

• Security Vulnerabilities Popping Up on Hugging Face’s AI Platform

• Wordfence Intelligence Weekly WordPress Vulnerability Report (February 19, 2024 to February 25, 2024)

• German Steelmaker Thyssenkrupp Confirms Ransomware Attack

• Biden Administration Will Investigate National Security Risks Posed by Chinese-Made ‘Smart Cars’

• Pharma Giant Cencora Reports Cybersecurity Breach

• phishing

• Here Are the Google and Microsoft Security Updates You Need Right Now

• GitHub Fights Forks — Millions of Them — Huge Software Supply Chain Security FAIL

• Microsoft Investment In Mistral AI Prompts EU Scrutiny Calls

• Exploring the Differences Between Residential Proxies and VPNs: Which is Right for You?

• Ransomware gangs are paying attention to infostealers, so why aren’t you?

• Fraud Detection: Time is Not on Our Side

• New Silver SAML Attack Evades Golden SAML Defenses in Identity Systems

• Savvy Seahorse Targets Investment Platforms With DNS Scams

• Apple To Disclose AI Plans This Year, Says Tim Cook

• Savvy Seahorse Using Fake ChatGPT, Facebook Ads in DNS Investment Scam

• Strategy, Incubation and Applications shows up strong at Cisco Live EMEA

• Discount Retail Giant Pepco Loses €15 Million to Cybercriminals

• Data security concerns with Chinese cars and Ban on mass data being imported to China

• Google Hit With $2.3bn Lawsuit Over Digital Ad Losses

• CISA, FBI, and MS-ISAC Release Advisory on Phobos Ransomware

• #StopRansomware: Phobos Ransomware

• UnitedHealth confirms ransomware gang behind Change Healthcare hack amid ongoing pharmacy outages

• CNCF Graduates Falco Project to Improve Linux Security

• How To Combat Cyber Threats In The Era Of AI

• Apple Cancels It’s Ambitious Plan of Building an Electric Car

• Notorious Hacker Group Strikes US Pharmacies

• Healthcare sector warned of ALPHV BlackCat ransomware after surge in targeted attacks

• Windows Zero Day Exploited By North Korean Hackers In Rootkit Attack

• Ubiquiti Router Users Urged To Secure Devices Targeted By Russian Hackers

• New SPIKEDWINE APT group is targeting officials in Europe

• Airbnb scam sends you to a fake Tripadvisor site, takes your money

• Meta Patches Facebook Account Takeover Vulnerability

• Iranian Hackers Target Aviation and Defense Sectors in Middle East

• A CISO’s Guide to SaaS Security Posture Management

• Legal Implications for Smart Doorbell Users: Potential £100,000 Fines

• Crypto Cautionary Tale: How a Man Lost $180,000 in a Scam

• Airbnb scammers pose as hosts, redirect users to fake Tripadvisor site

• Spring into Action! Earn up to $10,000 with our Extended Bug Bounty Program Extravaganza through Memorial Day!

• What Is Firewall-as-a-Service? FWaaS Ultimate Guide

• Promoting Sustainable Livelihoods in South America and the Amazon

• Cisco Accelerates Convergence of IT and Operations Technologies

• Veeam Data Cloud delivers data protection and recovery services on a single cloud platform

• Dark Web Market Revenues Rebound but Sector Fragments

• Russia Attacked Ukraine’s Power Grid at Least 66 Times to ‘Freeze It Into Submission’

• Meta’s pay-or-consent model hides ‘massive illegal data processing ops’: lawsuit

• Building Your Cyber Incident Response Team

• BlackCat Ransomware Gang Claims Attack on Change Healthcare

• The Imperative for Modern Security: Risk-Based Vulnerability Management

• Cisco Patches High-Severity Vulnerabilities in Data Center OS

• ALPHV/BlackCat threatens to leak data stolen in Change Healthcare cyberattack

• US Government Warns Healthcare is Biggest Target for BlackCat Affiliates

• Silicon In Focus Podcast: Your Life and Your Business on Your Phone

• Ivanti Pulse Secure Found Using End of Life CentOS 6 OS

• Lazarus Hackers Exploited Windows Kernel Flaw as Zero-Day in Recent Attacks

• How to Prioritize Cybersecurity Spending: A Risk-Based Strategy for the Highest ROI

• GTPDOOR Linux Malware Targets Telecoms, Exploiting GPRS Roaming Networks

• US SEC Investigates If OpenAI Investors Were Misled – Report

• How the “Frontier” Became the Slogan of Uncontrolled AI

• Facebook bug could have allowed attacker to take over accounts

• Windows Zero-Day Exploited by North Korean Hackers in Rootkit Attack

• What is cyber hygiene and why businesses should know about it

• Popular video doorbells can be easily hijacked, researchers find

• TimbreStealer Malware Targets Mexican Victims with Tax-Related Lures

• The Art of Domain Deception: Bifrost’s New Tactic to Deceive Users

• Odysseus Lander Reveals Moon Images, Despite Broken Leg

• Biden Crack Down Sale of Americans’ Personal Data to China & Russia

• Kali Linux 2024.1 Released – What’s New

• The White House Warns Cars Made in China Could Unleash Chaos on US Highways

• Kali Linux 2024.1 released: New tools, new look, new Kali Nethunter kernels

• Why passkeys will replace passwords

• Biden Bans Mass Sale of Data to Hostile Nations

• Is the LockBit gang resuming its operation?

• LOCKBIT 3.0 Ransomware – Complete Malware Analysis Report

• Chinese Mini PC Maker Acemagic Ships machines with Malware Pre-installed

• Silence Laboratories, a cryptographic security startup, secures funding

• Making Sense of Financial Services Cybersecurity Regulations

• A Pornhub Chatbot Stopped Millions From Searching for Child Abuse Videos

• Investing in partnerships for inclusion and innovation: a spotlight on Astia and Kiva

• Lazarus APT exploited zero-day in Windows driver to gain kernel privileges

• Lazarus Exploits Typos to Sneak PyPI Malware into Dev Systems

• New Backdoor Targeting European Officials Linked to Indian Diplomatic Events

• How to Configure the Most Secure Settings for Microsoft Defender

• Millions of GitHub Repos Found Infected with Malicious Code

• Chinese Hackers Exploiting Ivanti VPN Flaws to Deploy New Malware

• Lazarus Hackers Exploited Windows 0-Day to Gain Kernel read/write Access

• Vulnerabilities in business VPNs under the spotlight

• BobTheSmuggler: Open-source tool for undetectable payload delivery

• Cybersecurity startup makes open source pay, gains funding in a down market

• How organizations can navigate identity security risks in 2024

• President Biden Blocks Mass Transfer of Personal Data to High-Risk Nations

• Ransomware infection reach extends to Data Backups

• OpenCTI maker Filigran raises $16 million for its cybersecurity threat management suite

• Chinese PC-maker Acemagic customized its own machines to get infected with malware

• Cryptojacking is no longer the sole focus of cloud attackers

• Inside the book: Androids – The Team That Built the Android Operating System

• Vishing, smishing, and phishing attacks skyrocket 1,265% post-ChatGPT

• Infosec products of the month: February 2024

• The CISO’s guide to reducing the SaaS attack surface

• [Guest Diary] Dissecting DarkGate: Modular Malware Delivery and Persistence as a Service., (Thu, Feb 29th)

• ISC Stormcast For Thursday, February 29th, 2024 https://isc.sans.edu/podcastdetail/8874, (Thu, Feb 29th)

• Australian spy chief fears sabotage of critical infrastructure

• Safe Online Shopping: Protecting Your Financial Data

• Securing Smart Cameras and Baby Monitors

• ALPHV/BlackCat claims responsibility for Change Healthcare attack

• BEAST AI needs just a minute of GPU time to make an LLM fly off the rails

• Cutout.Pro – 19,972,829 breached accounts

• BEAST AI needs just a minute of GPU time to make an LLM fly over its safety guardrails

Generated on 2024-03-01 23:55:45.557708