IT Security News Daily Summary 2024-03-02

• USENIX Security ’23 – Log: It’s Big, It’s Heavy, It’s Filled with Personal Data! Measuring the Logging of Sensitive Information in the Android Ecosystem

• Microsoft Copilot for Finance: Transforming Financial Workflows with AI Precision

• GitHub Vulnerability Exposes Millions to RepoJacking Threat

• U.S. authorities charged an Iranian national for long-running hacking campaign

• Linux Malware GTPDOOR Exploits GPRS Roaming Networks to Target Telecom Companies

• WordPress and Tumblr Intends to Sell User Content to AI Firms

• The “Mother of All Breaches”: Implications for Businesses

• The Privacy Danger Lurking in Push Notifications

• Savvy Seahorse: The DNS-based Traffic Distribution System Undermining Cybersecurity

• Epic Games Faces Alleged Ransomware Attack

• New Bifrost RAT Variant Targets Linux Devices, Mimics VMware Domain

• Some Doorbell Cameras Sold on Amazon and Other Online Sites Have Major Security Flaws, Report Says

• Pentagon Leak Suspect Jack Teixeira Expected to Plead Guilty in Federal Case

• Hugging Face ML Models Compromised with Silent Backdoors Aimed at Data Scientists

• Conquer the Challenge: Exploring Cybersecurity Career Paths

• US cyber and law enforcement agencies warn of Phobos ransomware attacks

• Implementing secure over-the-air (OTA) updates in embedded devices

• U.S. Court Orders NSO Group to Hand Over Pegasus Spyware Code to WhatsApp

• U.S. Charges Iranian Hacker, Offers $10 Million Reward for Capture

• A Deep Dive into the 2024 Prudential and LoanDepot Breaches

• Safe Social Media Usage: Protecting Personal Information

• Can Someone Hack My iPhone? 7 Signs + Next Steps

• Home VPN Setup: Secure Browsing and Privacy

• SafeBreach Coverage for AA24-060A (Phobos Ransomware) and AA24-060B (Ivanti Connect Secure)

• Improved Area Monitoring with New Meraki Smart Cameras

• IT Security News Daily Summary 2024-03-01

• NIST Cybersecurity Framework: A Cheat Sheet for Professionals

• Friday Squid Blogging: New Extinct Species of Vampire Squid Discovered

• Air National Guardsman Teixeira to admit he was Pentagon files leaker

• USENIX Security ’23 – Vivek Nair, Dawn Song – Multi-Factor Key Derivation Function (MFKDF) for Fast, Flexible, Secure, & Practical Key Management

• Five ways AI is helping to reduce supply chain attacks on DevOps teams

• Judge orders NSO to cough up Pegasus super-spyware source code

• Russia Clamps Down on VPNs, Furthering Restrictions on Internet Access

• Five Ways AI is helping to reduce supply chain attacks on DevOps teams

• Cyber Security Today, Week in Review for week ending Friday, March 1, 2024

• How SASE-based XDR Delivers Better Threat Detection Performance

• Maximizing Feedback for Developers With Continuous Testing

• UK’s NCSC Issues Warning as SVR Hackers Target Cloud Services

• Police seized Crimemarket, the largest German-speaking cybercrime marketplace

• Women in Cybersecurity Q&A: Learning Opportunities and the Power of Mentorship

• PikaBot malware on the rise: What organizations need to know

• Biden executive order protects personal data

• Accelerating Cloud Adoption Across the Scottish Public Sector

• Iranian charged over attacks against US defense contractors, government agencies

• Diving Into Stability: How Static Proxies Transform Online Experience

• Spoiler: It’s not the IRS calling

• With The World Distracted, China Stirs Trouble in The Asia Pacific

• Wireless Peripheral Devices – Security Risk, Exploits and Remediation

• Bolstering IoT Cybersecurity Amid an Evolving Landscape: A CEO’s Perspective

• How to secure your API secret keys from being exposed?

• CISA, Mandiant Warn of a Worsening Situation for Ivanti Users

• Malicious meeting invite fix targets Mac users

• The US is Bracing for Complex, Fast-Moving Threats to Elections This Year, FBI Director Warns

• CryptoChameleon Phishing Scam Targets Crypto Users and FCC Employees

• How dynamic malware analysis works

• Cheap Video Doorbell Cams: Tools of Stalkers and Thieves

• Old Website Tool Exploited by Hackers, Puts Education and Government Sites at Risk

• CISA warns Ivanti ICT ineffective for detecting compromises

• CISA Warns Of Windows Streaming Service Vulnerability Exploitation

• A Child Could Hack These Popular Video Doorbells, Tests Show

• Court Orders Makers Of Pegasus Spyware To Hand Over Code To WhatsApp

• Ivanti Attacks Linked To Espionage Group Targeting Defense Contractors

• In the vanguard of 21st century cyber threats

• In Other News: Google Flaw Exploited, 3D Printers Hacked, WhatsApp Gets NSO Spyware

• This Chinese PC Manufacturer Tailored its Own Devices to be Susceptible to Malware

• eBay, VMware, and McAfee Taken Down in Widespread Phishing Operation

• Malaysia Takes Bold Steps with ‘Kill Switch’ Legislation to Tackle Cyber Crime Surge

• NoName057(16)’s DDoSia project: 2024 updates and behavioural shifts

• France concerned about cyber attacks on electric grids for Summer Olympics 2024

• AI Worm Developed by Researchers Spreads Automatically Between AI Agents

• Thoma Bravo takes critical event management software company Everbridge private in $1.8B deal

• NSA says it’s tracking Ivanti cyberattacks as hackers hit US defense sector

• Cops visit school of ‘wrong person’s child,’ mix up victims and suspects in epic data fail

• Healthcare sector “stretched thin” in fight against cyber attacks warns CSO of Health-ISAC

• MWC 2024: BT To Switch On Stand-alone 5G Network In 2024

• CISA and Partners Release Advisory on Threat Actors Exploiting Ivanti Connect Secure and Policy Secure Gateways Vulnerabilities

• Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways

• Delta Electronics CNCSoft-B

• Cisco Releases Security Advisories for Cisco NX-OS Software

• Vishing, Smishing Thrive in Gap in Enterprise, CSP Security Views

• NSO Ordered To Hand Over Spyware Code To WhatsApp

• US Charges Iranian Over Cyberattacks on Government, Defense Organizations

• Google’s ‘Woke’ AI Troubles: Charting a Pragmatic Course

• Hackers Employ Malicious PDF Files To Kickstart Infection Chain

• The Benefits of Microsegmentation for Compliance

• Address the Challenges of Compliance and Cybersecurity with Zero Trust

• Wireshark Tutorial: Exporting Objects From a Pcap

• Five Eyes alliance warns of attacks exploiting known Ivanti Gateway flaws

• Security review for Microsoft Edge version 122

• IT Leaders Lack Confidence in IoT Security Plans

• Biden Warns Chinese Cars Could Steal US Citizens’ Data

• Advanced Cyber Defence Systems (ADCS) to Showcase Innovative Attack Surface Management Solution at Cloud & Cyber Security Expo

• Pig butchering scams, how they work and how to avoid them

• CISA Warns of Windows Streaming Service Vulnerability Exploitation

• Governments Urge Organizations to Hunt for Ivanti VPN Attacks

• Critical Infrastructure Organizations Warned of Phobos Ransomware Attacks

• Silence Laboratories Raises $4.1 Million to Protect Sensitive Information

• Golden Corral Data Breach Impacts 180,000 Employees

• New Phishing Kit Leverages SMS, Voice Calls to Target Cryptocurrency Users

• PCI Compliance Levels: A Developer’s Guide to PCI Compliance

• Report: Average Initial Ransomware Demand in 2023 Reached $600K

• Cyber Security Today, March 1, 2024 – Warnings to GitHub users and Ivanti gateway administrators, and more

• A Comprehensive Guide to Investing Securely in Digital Assets

• Researchers Created AI Worm that Automatically Spreads Between AI Agents

• Cisco Live Melbourne SOC Report

• Cops visit school of ‘wrong person’s child,’ mix up victims and suspects in epic data fail

• Healthcare in Crosshairs: ALPHV/Blackcat Ransomware Threat Escalates, FBI Issues Warning

• NIST Cybersecurity Framework 2.0

• Industry Reactions to NIST Cybersecurity Framework 2.0: Feedback Friday

• Hackers Stole ‘Sensitive’ Data From Taiwan Telecom Giant: Ministry

• Judge Signals Elon Musk May Lose Lawsuit Against Non-profit

• Golden Corral Restaurant Chain Hacked: 180,000+ Users’ Data Stolen

• RisePro Stealer Attacks Windows Users Steals Sensitive Data

• CWE Version 4.14 Released: What’s New!

• 20 Million+ Cutout.Pro User Records Leaked On Hacking Forums

• TechRepublic Premium Editorial Calendar: Policies, Checklists, Hiring Kits and Glossaries for Download

• Five Eyes Warn of Ivanti Vulnerabilities Exploitation, Detection Tools Insufficient

• Crooks stole €15 Million from European retail company Pepco

• SEC’s Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure Rule: What You Should Know

• New BIFROSE Linux Malware Variant Using Deceptive VMware Domain for Evasion

• 4 Instructive Postmortems on Data Downtime and Loss

• UK Home Office Breached Data Protection Law with Migrant Tracking Program, ICO Finds

• Keeper Security Joins the AWS Partner Network

• GitHub rolls out push protection on public repos

• Collibra AI Governance mitigates risks, protects data, and ensures compliance

• Golden Corral restaurant chain Hacked: 180,000+ Users’ Data Stolen

• Keeping one step ahead of cyber security threats

• CISA Warns Of Hackers Exploiting Multiple Flaws In Ivanti VPN

• Here Come the AI Worms

• Deepfakes Malware Attacks: GoldFactory’s Advanced Tactics

• The Importance of Timely Patch Management for QEMU in Linux

• BEAST AI Jailbreak Language Models Within 1 Minute With High Accuracy

• CISA adds Microsoft Streaming Service bug to its Known Exploited Vulnerabilities catalog

• Complete Guide to Advanced Persistent Threat (APT) Security

• Strengthening the Security of Embedded Devices

• ISO 27001:2022: chapter by chapter description

• Five Eyes Agencies Warn of Active Exploitation of Ivanti Gateway Vulnerabilities

• Cybercriminals harness AI for new era of malware development

• JCDC’s strategic shift: Prioritizing cyber hardening

• GitHub Rolls Out Default Secret Scanning Push Protection for Public Repositories

• LockBit Ransomware gang endorses Donald Trump as next US President

• The Resounding Boom of Cybersecurity: Understanding Its Ever-Expanding Industry

• Hackers Hijack Anycubic 3D Printers to Display Warning Messages

• Key areas that will define the intersection of AI and DevOps

• NTT boss takes early retirement to atone for data leak

• Cyber Threat Assessment

• 98% of businesses linked to breached third parties

• Businesses foresee major impact from new SEC cybersecurity disclosure rules

• New infosec products of the week: March 1, 2024

• 10 Ways to Secure Mobile Devices [2024]

• MWC Barcelona 2024 news roundup: Telecom, AI, security and more

• ISC Stormcast For Friday, March 1st, 2024 https://isc.sans.edu/podcastdetail/8876, (Fri, Mar 1st)

• Password Management: Best Practices for Home Users

• CutOut.Pro AI Tool Data Breach: Hacker Leak 20 Million User Info

• Home Office Security: Tips for Remote Workers

• GitHub struggles to keep up with automated malicious forks

• Faye’s Journey: From Security PM to Diversity Advocate at Microsoft

• Scanning for Confluence CVE-2022-26134, (Fri, Mar 1st)

• Dashlane Free vs. Premium: Which Plan Is Best For You?

• The UK’s GPS Tagging of Migrants Has Been Ruled Illegal

• Turns out cops are super interested in subpoenaing suspects’ push notifications

• You’re automated for success with Cisco’s Continuing Education program

Generated on 2024-03-02 23:55:45.486274