IT Security News Daily Summary 2024-03-04

• Epic Games ‘hackers’ admit threat of leak was phony

• Voting No on Prop E Is Easy and Important for San Francisco

• Secure Your API With These 16 Practices With Apache APISIX (Part 2)

• White House Recommends Memory-Safe Programming Languages and Security-by-Design

• Facebook Allows Ads For Illegal Drugs Like LSD And Mushrooms

• VulnRecap 3/4/24 – Ivanti, Ubiquiti, AppLocker Under Attack

• Pentagon Leaker Jack Teixeira Pleads Guilty Under a Deal That Calls for at Least 11 Years in Prison

• Vulnerability Summary for the Week of February 26, 2024

• Change Healthcare attack latest: ALPHV bags $22M in Bitcoin amid affiliate drama

• Infosec pros weigh in on proposed ransomware payment bans

• Why Signal ‘turned our architecture inside out’ for its latest privacy feature

• Some American Express customers’ data exposed in a third-party data breach

• Entro Streamlines Machine Identity Life Cycle Management

• CISA and Partners Coordinate on Security and Resilience for Super Tuesday

• Seoul accuses North Korea of stealing southern chipmakers’ designs

• LockBit, Alphv/BlackCat highlight February ransomware activity

• American Express Cardholders Impacted by Third-Party Vendor Data Breach

• The Marvels and Challenges of AI

• Secure by Design: Google’s Perspective on Memory Safety

• Singapore reviews ways to boost digital infrastructures after big outage

• Privacy Isn’t Dead. Far From It. | EFFector 36.3

• Celebrating 15 Years of Surveillance Self-Defense

• Africa’s Cyber Threats Rise With AI Development

• Guarding the Gates of GenAI: Security Challenges in AI Evolution

• CISA Updates Toolkit to Promote Public Safety Communications and Cyber Resiliency

• Hackers Behind the Change Healthcare Ransomware Attack Just Received a $22 Million Payment

• German defense chat overheard by Russian eavesdroppers on Cisco’s WebEx

• Self-Propagating Worm Created to Target Generative AI Systems

• Russian Operatives Expose German Military Webex Conversations

• cloud audit

• A Virtual Reality Tour of Surveillance Tech at the Border: A Conversation with Dave Maass of the Electronic Frontier Foundation

• USENIX Security ’23 – Evangelos Bitsikas, Theodor Schnitzler, Christina Pöpper, Aanjhan Ranganathan – Freaky Leaky SMS: Extracting User Locations by Analyzing SMS Timings

• CISA Warns Phobos Ransomware Groups Attacking Critical Infrastructure

• Hacktivist Collective NoName057 Strikes European Targets

• CISA Adds One Known Exploited Vulnerability to Catalog

• Is Bitcoin Changing? Big Shifts and What It Means for Us

• How Sandboxes Can Help You Investigate Linux Malware

• New Banking Trojan “CHAVECLOAK” Targets Brazil

• Critical vulnerabilities in TeamCity JetBrains fixed, release of technical details imminent, patch quickly! (CVE-2024-27198, CVE-2024-27199)

• TA577 Exploits NTLM Authentication Vulnerability

• Can ban on ransom payments block ransomware spread

• Top Tech Conferences & Events to Add to Your Calendar in 2024

• Should we ban ransom payments?

• Why it Pays to Have a Comprehensive API Security Strategy

• Chinese nation state actors to ramp up cyber espionage attempts in 2024

• Hamilton City’s Network is the Latest Casualty of the Global Cyberwar.

• AppSec Survey Reveals Troubling Trends

• Ransomware Ban Backers Insist Thugs Must Be Cut Off From Payday

• Researchers Create AI Worms That Can Spread From One System To Another

• GTPDOOR – A Novel Backdoor Tailored For Covert Access Over The Roaming Exchange

• Remote Stuxnet Style Attack Possible With Web Based PLC Malware

• 90% of Leaders Plan to Integrate AI into their Organisations in 2024

• Generative AI Worms: Threat of the Future?

• Cloudflare Defensive AI protects organizations against AI-enhanced attacks

• Predator Spyware Targeted Mobile Phones in New Countries

• Threat Brief: WordPress Plugin Exploit Leads to Godzilla Web Shell, Discovery & New CVE

• German Authorities Take Down Crimemarket Cybercrime Website

• Ransomware ban backers insist thugs must be cut off from payday

• German Authorities Take Down ‘Crimemarket’ Cybercrime Website

• Cyolo PRO simplifies remote privileged access in OT environments

• How Cybercriminals are Exploiting India’s UPI for Money Laundering Operations

• 6 Ways Akamai Innovates to Strengthen Their Leadership in Application Security

• Like 5G, telcos must seek commercial use cases to move GenAI forward

• META hit with privacy complaints by EU consumer groups

• Revolutionizing Identity Theft with AI

• 5 Ways to Prevent Prompt Injection Attacks

• GitHub push protection now on by default for public repositories

• Simplifying Firewall Management: Cisco Defense Orchestrator Nears FedRAMP® Authorization

• Linux Foundation Tackles Financial Fraud With Open Source Platform

• How Traffic, State, and Organizational Data Help Fortify Your Network

• Webinar Tomorrow: OT Cybersecurity Risk Mitigation Strategies

• Hikvision Patches High-Severity Vulnerability in Security Management System

• GitHub Under Siege: Unraveling the Ongoing Automated Attack on Open-Source Repositories

• Darktrace partners with Xage Security to detect threats deep inside IT and OT systems

• Identiv ScrambleFactor provides privacy and security in restricted access environments

• Navigating the Evolution of Cybersecurity: The Leap from NIST 1 to NIST 2

• Akamai App & API Protector enhancements detect and mitigate short DDoS attack bursts

• Heather Couk is here to keep your spirits up during a cyber emergency, even if it takes the “Rocky” music

• Cyber Security Today, March 4, 2024 – A hacker is trying to trick the U.S. telecom regulator, WhatsApp gets to see Pegasus code and more

• Zyxel Networks introduces affordable WiFi 7 solution for SMBs

• Phishers target FCC, crypto holders via fake Okta SSO pages

• US Court Orders NSO Group to Handover Code for Spyware, Pegasus to WhatsApp

• New GTPDOOR backdoor is designed to target telecom carrier networks

• Remote Stuxnet-Style Attack Possible With Web-Based PLC Malware: Researchers

• FCC Employees Targeted in Sophisticated Phishing Attacks

• Prescription Insecurity: The Russian Connection to Healthcare Cyber Attacks

• AI-Fueled Cyber-Attacks: A Growing Threat to Critical Infrastructure

• Securing software repositories leads to better OSS security

• Silobreaker enhances threat intelligence platform with MITRE ATT&CK TTP detection capabilities

• From 500 to 5000 Employees – Securing 3rd Party App-Usage in Mid-Market Companies

• Hackers simulating cyber-attacks in labs

• Apple Reverses Course Over EU Ban On Web Apps

• Nepali Hacker Tops Hall of Fame by Exposing Facebook’s Zero-Click Flaw

• Reddit Looks For $6.5bn Valuation In NYSE IPO

• Clouded II Documentary Reveals the True Cost of the Cloud

• Exceptional Women Recognised for Contribution to Cyber Industry at Most Inspiring Women in Cyber Awards 2024

• Ubuntu 18.04 Security Updates for Linux Kernel Vulnerabilities

• UK Proposes Faster, More Powerful E-Bikes

• Nigeria Detains Two Binance Executives Amidst Crypto Probe

• Nvidia Shares Close Over $2tn For First Time

• Securing Perimeter Products Must Be a Priority, Says NCSC

• Tripwire Patch Priority Index for February 2024

• #TripwireBookClub – Black Hat GraphQL

• The federal bureau of trolling hits LockBit, but the joke’s on us

• Over 100 Malicious AI/ML Models Found on Hugging Face Platform

• New SSO-Based Phishing Attack Trick Users into Sharing Login Credentials

• Protect Yourself and Your Business With This $40 Cybersecurity E-Learning Bundle

• Threat actors hacked Taiwan-based Chunghwa Telecom

• Drugs and Cybercrime Market Busted By German Cops

• Boarding pass and ID will no longer be required at some of the biggest airports in the USA

• Multistage RA World Ransomware Uses Anti-AV Tactics, Exploits GPO

• Huge Surge in Ransomware-as-a-Service Attacks targeting Middle East & Africa

• U.S. Charged Iranian Hacker, Rewards up to $10 Million

• A week in security (February 26 – March 3)

• Risk and Regulation: A Strategic Guide to Compliance Risk Assessment

• New Linux variant of BIFROSE RAT uses deceptive domain strategies

• How-To: NIS2 EU Directive

• PyRIT: Open-source framework to find risks in generative AI systems

• Phobos Ransomware Aggressively Targeting U.S. Critical Infrastructure

• Integrating software supply chain security in DevSecOps CI/CD pipelines

• 95% believe LLMs making phishing detection more challenging

• New compensation trends in the cybersecurity sector

• Photos: BSidesZagreb 2024

• Enhancing security through proactive patch management

• LockBit’s contested claim of fresh ransom payment suggests it’s been well hobbled

• Home Network Security Audits: Protecting Your Wi-Fi

• ISC Stormcast For Monday, March 4th, 2024 https://isc.sans.edu/podcastdetail/8878, (Mon, Mar 4th)

• New Silver SAML Attack Let Attackers Forge Any SAML Response To Entra ID

• Threat Brief: WordPress Exploit Leads to Godzilla Web Shell, Discovery & New CVE

• Ahead of Super Tuesday, US elections face existential and homegrown threats

• IoT Device Privacy: Managing Smart Home Data

• Capturing DShield Packets with a LAN Tap [Guest Diary], (Sun, Mar 3rd)

• Facebook Wins Big Victory Against Spyware Firm

• IT Security News Daily Summary 2024-03-03

• USENIX Security ’23 – Liang Niu, Shujaat Mirza, Zayd Maradni, Christina Pöpper – CodexLeaks: Privacy Leaks from Code Generation Language Models in GitHub Copilot

• 8 Tips To Protect Your Organization in the Evolving SaaS Landscape

• 4 strategies data-driven CISOs need to take now to defend their budgets

• Eken camera doorbells allow ill-intentioned individuals to spy on you

• What’s The Role of Gaslighting in The Cyber Security Context of Social Engineering?

• Generative Ai: The Future of Cloud Security

• BlackCat Ransomware Hit Healthcare Giant Optum, Stolen 6TB Sensitive Data

• How Can You Safeguard Against the Dangers of AI Tax Fraud?

• Integrating Software Supply Chains and DevOps: Tips for Effectively Reconciling Supply Chain Management and DevOps

• Meta Plans to Launch Enhanced AI model Llama 3 in July

• Healthcare Software Security: Standards and Challenges

• Winklevoss Crypto Firm Gemini to Return $1.1B to Customers in Failed “Earn” Scheme

• Georgia’s Largest County Is Still Repairing Damage From January Cyberattack

• Researchers Develop ‘VoltSchemer’ Assaults Aimed at Wireless Charging Systems

• Sophisticated Phishing Tactics Unveiled in Targeted FCC Cybersecurity Breach

• Human Brain Chip Implants: Helpful? Safe? Ethical?

• Security Affairs newsletter Round 461 by Pierluigi Paganini – INTERNATIONAL EDITION

• Week in review: LockBit leak site is back online, NIST updates its Cybersecurity Framework

• Mr. Green Gaming – 27,123 breached accounts

• Executive summary: NIS2 Directive for the EU members

• Mr. Green Gaming – 27,176 breached accounts

• Introducing Dionaea with Darwis Threat Intel API Integration

• Home Security Cameras: Choosing and Using Them Wisely

• Home Data Backup Strategies: Protecting Important Files

• U.S. Judge ordered NSO Group to hand over the Pegasus spyware code to WhatsApp

Generated on 2024-03-04 23:55:37.462183