IT Security News Daily Summary 2024-03-06

• Healthcare Groups Push for Help in Wake of Ransomware Attack on Change

• A Comprehensive Guide To Prototyping PCB Assembly

• FBI: Critical infrastructure suffers spike in ransomware attacks

• How NIST CSF 2.0 Can Help Schools

• USENIX Security ’23 – Wai Man Si, Michael Backes, and Yang Zhang, Ahmed Salem – Two-in-One: A Model Hijacking Attack Against Text Generation Models

• Citi exec: Generative AI is transformative in banking, but risky for customer support

• FBI: Critical infrastructure menaced by spike in ransomware attacks

• The Convergence: AI, Confidential Computing, and Blockchain

• Emulating the Sabotage-Focused Russian Adversary Sandworm

• Elevate Your Career with the New Cisco Service Provider Cloud Networking Certification

• Decrypting the Future: Unveiling Questions on AI’s Role in Cybersecurity

• The best travel VPNs of 2024: Expert tested and reviewed

• Cybersecurity market researchers forecast significant growth

• Microsoft AI Engineer Flags Copilot Safety Concerns

• Fake Skype, Zoom, Google Meet Sites Infecting Devices with Multiple RATs

• iOS Application Security for Beginners

• Privacy First and Competition

• Web3: A New Dawn for the Internet?

• Pilot cybersecurity training program for women to recruit third cohort

• OpenAI Issues Public Rebuttal To Elon Musk Lawsuit

• Hackers Exploit Misconfigured YARN, Docker, Confluence, Redis Servers for Crypto Mining

• TA4903 Phishing Campaigns Evolve, Targets US Government

• Apple’s trademark tight lips extend to new iPhone, iPad zero-days

• 7 Best Network Monitoring Tools in 2024 Compared

• Apple Blunts Zero Day Attacks With iOS 17.4 Update

• Proactive Intelligence: A Paradigm Shift In Cyber Defense

• Facebook/Insta FAIL — ‘Anonymous Sudan’ has a Super Tuesday: ‘We Did It.’

• TA4903 Phishing Campaigns Evolve, Target US Government

• Fresh $100 Million Claroty Funding Brings Total to $735 Million

• Linux Malware Campaign Targets Misconfigured Cloud Servers

• IONIX Exposure Validation identifies and prioritizes exploitable vulnerabilities

• Exit Scam: BlackCat Ransomware Group Vanishes After $22 Million Payout

• Linux Malware Targets Docker, Apache Hadoop, Redis and Confluence

• Apple iPhone Sales In China Plummet 24 Percent

• Super Tuesday: A Snapshot into CISA’s Mission to Secure the Electoral Process

• Explore mitigation strategies for 10 LLM vulnerabilities

• Meta Abandons Hacking Victims, Draining Law Enforcement Resources, Officials Say

• Sailing through History: NWN Carousel’s Virtual Sea-Lab Revolution

• 5 Reasons to Leverage MDR to Transform Your SecOps

• ALPHV ransomware gang fakes own death, fools no one

• Cisco Releases Open Source Backplane Traffic Visibility Tool for OT

• Cloud Security Firm Sweet Security Raises $33 Million, 6 Months After Emerging From Stealth

• Anatomy of a BlackCat Attack Through the Eyes of Incident Response

• Cyberattack on Hamilton City Hall Expands to Impact Additional Services

• Check Point introduces Harmony SaaS for automated threat prevention

• Crowdstrike to acquire Flow Security

• UK Approves Newport Wafer Fab Sale To US Vishay Intertechnology

• VMware Releases Security Advisory for Multiple Products

• CISA ADDS ANDROID PIXEL AND SUNHILLO SURELINE BUGS TO ITS KNOWN EXPLOITED VULNERABILITIES CATALOG

• Lookout introduces SSE solution for mid-market enterprises

• Cloudflare Magic Cloud Networking simplifies security and management of public clouds

• Facebook, Instagram Login Restored After Widespread Outage

• Meta’s Facebook, Instagram Back Online After Two Hour Long Outage

• Metomic provides data security tool for organizations that rely on Slack

• 5 tips for securing your remote workspace

• From meteorology to information technology, Cisco Insider Tim Harmon has a fascinating story to share.

• HHS Aiding Organizations Hit by Change Healthcare Cyberattack

• Phind-70B: Transforming Coding with Unmatched Speed and Precision

• EU Agrees ‘Cyber Solidarity Act’ to Bolster Incident Response and Recovery

• How to Use Norton Secure VPN (A Step-by-Step Guide)

• AI in Cybersecurity — A CISO’s Perspective

• Deepwatch increases flexibility with its open security data architecture

• Irresistible: Hooks, habits and why you can’t put down your phone

• So You Want to Achieve NERC CIP-013-1 Compliance…

• Watch out, GhostSec and Stourmous groups jointly conducting ransomware attacks

• Cyber Insights 2024: OT, ICS and IIoT

• Android’s March 2024 Update Patches Critical Vulnerabilities

• SecurityWeek to Host AI Risk Summit June 25-26 at the Ritz-Carlton, Half Moon Bay CA

• Deepfakes: What Organizations, Schools & Parents Should Know

• ITRC Finds Online Job Scams on the Rise

• Advocating for the Persistence of Cash to Counteract Intrusive Banking Practices

• Classic Scam the Scammers? Epic Games Hackers Faked the Hack

• Sweet Security raises $33 million to identify and address cloud risks

• Pentera Cloud empowers security teams to reduce exposure to cloud-native attacks

• Vulnerability Risk Management for External Assets

• OpenNMS XSS Flaw Let Attackers Inject JavaScript Payload

• Top 6 SaaS Breach Vectors and How to Prevent Them

• Update your iPhones and iPads now: Apple patches security vulnerabilities in iOS and iPadOS

• Capita says 2023 cyberattack costs a factor as it reports staggering £100M+ loss

• Cyber Security Today, March 6, 2024 – VMware and Apple rush out security updates, a new ScreenConnect malware is found, and more

• Surveillance through Push Notifications

• Appian Platform enhancements unify generative AI and process automation

• A New Way To Manage Your Web Exposure: The Reflectiz Product Explained

• Tesla Berlin Factory Arson Attack Claimed By Leftwing Group

• Data Breach Alert: American Express Credit Card Information Exposed

• CISA Warns of Pixel Phone Vulnerability Exploitation

• BlackCat Ransomware Gang Suspected of Pulling Exit Scam

• Customer Story | Lufkin ISD Streamlines Cybersecurity & Safety Monitoring With Rich Visibility

• ​​Secure SaaS applications with Valence Security and Microsoft Security​​

• Cyber Pros Turn to Cybercrime as Salaries Stagnate

• New Linux Malware Alert: ‘Spinning YARN’ Hits Docker, Other Key Apps

• What Apple is afraid of — pre-DMA alternative iOS app stores are already riddled with malware

• Comparison Chart: VPN Service Providers (Free Download)

• Perimeter Security Policy

• Cloud Attack Surface Management(CASM): What is it? How does Strobes CASM help you with cloud security?

• Pathlock CAC helps SAP customers comply with regulations

• Hackers Abuse QEMU Hardware Emulator for Stealthy C2 Communication

• 225,000+ ChatGPT Credentials Up For Sale on Dark Web Markets

• Safeguarding EU elections amidst cybersecurity challenges

• Skype, Google Meet, and Zoom Used in New Trojan Scam Campaign

• How to Find and Fix Risky Sharing in Google Drive

• US Sanctions Predator Spyware Maker Intellexa

• Apple fixes two actively exploited iOS zero-days (CVE-2024-23225, CVE-2024-23296)

• US Sanctions Predator Spyware-Maker Intellexa

• Scanning and abusing the QUIC protocol, (Wed, Mar 6th)

• Hackers Install macOS Malware Using Weaponised Calendar Invites

• LockBit 3.0’s Bungled Comeback Highlights the Undying Risk of Torrent-Based (P2P) Data Leakage

• The Financial Sector Is Refocusing on Cybersecurity

• Chip lobby group SEMI to EU: Export restrictions should only be used in self-defense

• VMware Issues Security Patches for ESXi, Workstation, and Fusion Flaws

• U.S. Cracks Down on Predatory Spyware Firm for Targeting Officials and Journalists

• NIS2: 2.Designate a responsible person or team

• Hackers use Zoom & Google Meet Lures to Attack Android & Windows users

• New APT Group ‘Lotus Bane’ Behind Recent Attacks on Vietnam’s Financial Entities

• Alert: GhostSec and Stormous Launch Joint Ransomware Attacks in Over 15 Countries

• Project DDoSia – Russian Hackers Planning a Massive DDoS Attack

• From Prep to Pass, Scytale Launches Its Built-In Audit, Transforming It Into The Complete Compliance Hub for SaaS

• Facebook and Instagram down by Cyber Attack

• Safeguarding Your Digital Reputation: Best Practices for Secure Data Erasure

• Hackers Exploit WordPress Plugin Flaw to Deploy Godzilla Web Shell

• 5 ways to keep API integrations secure

• Urgent: Apple Issues Critical Updates for Actively Exploited Zero-Day Flaws

• Navigating regulation challenges for protecting sensitive healthcare data

• RiskInDroid: Open-source risk analysis of Android apps

• AI Auctions: Collectibles, Taylor Swift, Jordan Bots

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Threat Spotlight: Data Extortion Ransomware Threats

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• How to create an efficient governance control program

• Home Network Guest Wi-Fi: Best Practices

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• AI tools put companies at risk of data exfiltration

• Japan orders local giants LINE and NAVER to disentangle their tech stacks

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• CrowdStrike to Acquire Flow Security

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• ISC Stormcast For Wednesday, March 6th, 2024 https://isc.sans.edu/podcastdetail/8882, (Wed, Mar 6th)

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Cybersecurity top revenue driver for bulk of MSPs, Kaseya report finds

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Internet of Things (IoT) Privacy Regulations

• Uncle Sam intervenes as Change Healthcare ransomware fiasco creates mayhem

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• How to Turn Off Facebook’s Two-Factor Authentication Change

• Apple emergency security updates fix two new iOS zero-days

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• IT Security News Daily Summary 2024-03-05

• VMware urgent updates addressed Critical ESXi Sandbox Escape bugs

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Executive leadership changes to drive innovation, simplicity, and growth

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Report Uncovers Massive Sale of Compromised ChatGPT Credentials

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Canada’s anti-money laundering agency hit by a cyber attack

• US Sanctions Spyware Company and Executives Who Targeted American Journalists, Government Officials

• Apple Blunts Zero-Day Attacks With iOS 17.4 Update

• Insider Risk Digest: February

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Badgerboard: A PLC backplane network visibility module

• Cloudflare announces Firewall for AI

• US Gov sanctioned Intellexa Consortium individuals and entities behind Predator spyware attacks

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• HIMSS 2024 Know Before You Go

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Apple Releases iOS/iPadOS Updates with Zero Day Fixes., (Tue, Mar 5th)

• Fidelity customers’ financial info feared stolen in suspected ransomware attack

• Inside Registered Agents Inc., the Shadowy Firm Pushing the Limits of Business Privacy

• VMware Patches Critical ESXi Sandbox Escape Flaws

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Congratulating Check Point’s CPX Americas Partner Award Winners

• What Is Passwordless Authentication?

• How to use Surfshark VPN (A Step-by-Step Guide)

• How to use Proton VPN (A Step-by-Step Guide)

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Inside an Alphv/BlackCat ransomware attack

• Facebook and Other Meta Owned Properties Suffer Mass Outage

• The Essential Soft Skills for Cybersecurity Leaders

• 2024 Predictions: The Rise of AI Brings New Security Challenges

• SIEM vs XDR: Capabilities and Key Differences

• NetApp Leverages AI to Make File System Ransomware Resistant

• DoS vs. DDoS: How they differ and the damage they cause

• Check your DNS! Abandoned domains used to bypass spam checks

• How to Create a Sandbox Environment For Malware Analysis – A Complete Guide

• Cybersecurity in the Cloud: Integrating Continuous Security Testing Within DevSecOps

• How to install and configure fail2ban for even more SSH security

• Boston Red Sox Choose Centripetal as Cyber Network Security Partner

• US accuses Army vet cyber-Casanova of sharing Russia-Ukraine war secrets

• Hamilton confirms ransomware is behind cyber attack

• Meta Platforms Face Outage: Facebook, Instagram, Messenger, Threads Down

• Breaking News: Facebook and Instagram Experience Outage Officially Confirmed

• How to use TunnelBear VPN (Step-by-Step Tutorial)

• Santesoft Sante FFT Imaging

• Nice Linear eMerge E3-Series

• CISA Releases Three Industrial Control Systems Advisories

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• Mend.io Launches Mend AI

• Cloudflare Unveils a Firewall Designed to Keep LLMs Safe

• Hackers Exploit ConnectWise ScreenConnect Flaws to Deploy TODDLERSHARK Malware

• CISA ADDS MICROSOFT WINDOWS KERNEL BUG USED BY LAZARUS APT TO ITS KNOWN EXPLOITED VULNERABILITIES CATALOG

• IP address X-posure now a feature on Musk’s social media platform

• Cloudflare Introduces AI Security Solutions

• Webinar Today: OT Cybersecurity Risk Mitigation Strategies

• Dtex Systems Snags $50M from Alphabet’s CapitalG

• Dark Web Sale Exposes 3.6 Crore Stolen AI Gaming Accounts

• Look Out For This New Emerging Threat In The World Of AI

• Sentra Jagger provides real-time security insights and AI-assisted remediation guidelines

• GhostSec Evolves With Website Compromise Tools

• Why Your Firewall Will Kill You, (Tue, Mar 5th)

• Ransomware news headlines trending on Google

• How DataDome’s Anti-DDoS Mode Protected a Leading US News Website

• Unveiling the Power of Zero-Knowledge Proofs in Blockchain Technology

• Cloudflare announces Firewall for AI to help security teams secure their LLM applications

• Final post of the series on our cybersecurity survey: Data privacy

• US sanctions founder of spyware maker Intellexa for targeting Americans

• Axonius secures $200 million to scale its global reach and product innovation

• Bitdefender releases GravityZone Cloud MSP Security Solutions

• South Korean Police Develops Deepfake Detection Tool Ahead of April Elections

• Continuous Threat Management’s Strong, Proactive Protection Against CVEs

• From federation to fabric: IAM’s evolution

• Zeek Security Tool Vulns Allow ICS Network Hacking

• An Air Force Employee Shared Highly Classified Data Via Dating App

• Discord Leaker Jack Teixeira Pleads Guilty, Seeks Light 11-Year Sentence

• Cybersecurity M&A Roundup: 27 Deals Announced in February 2024

• Investment Firm Team8 Raises Additional $500 Million

• Axonius Banks $200 Million in Late-Stage Funding

• Tax Season Phishing Surge: Cyber Exploits with AsyncRAT

• Evolving Threats from Within: Insights from the 2024 Data Exposure Report

• 5 Security Benefits of Configuration as Code (CaC)

• Lazarus Group Exploits Microsoft Zero-Day in a Covert Rootkit Assault

• Cyberattack Fallout: Minnesota Hospitals Grapple with Financial Strain

• ALPHV/BlackCat Ransomware Servers Go Down

• American Express warns customers about third party data breach

• Pure360 SPF and DKIM configuration: Step By Step Guideline

• Experts Issue Warning Regarding Rising Threat of AI-Driven Cyber-Physical Attacks

• NetApp cyber-resiliency capabilities protect both primary and secondary data

• Delinea Privilege Control for Servers enforces least privilege principles on critical systems

• European Court of Human Rights Confirms: Weakening Encryption Violates Fundamental Rights

• American Express Data Breach Exposed Customer Data

• American Express Warns Credit Card Data Exposed in Third-Party Breach

• New IDC survey confirms how far CISOs have evolved

• IAM vs PAM: What’s the Difference And Why It Matters

• Rapid7 throws JetBrains under the bus for ‘uncoordinated vulnerability disclosure’

• American Express Discloses Data Breach

• German Police Bust Massive Cybercrime Hub ‘Crimemarket’ with 180,000 Users

• Okta FGA enables developers to define authorization in a way that best fits their business

• GhostSec’s joint ransomware operation and evolution of their arsenal

• ALPHV BlackCat New Leak Site Seized by Authorities

• RA World Ransomware Attack Windows Using Hacked Domain Control & Anti-AV Tactics

• CrowdStrike and Dell unleash an AI-powered, unified security vision

• Bitwarden vs 1Password: 2024 Business Password Manager Comparison

• Axonius, a specialist in cyber asset managment, secures $200M at a flat $2.6B valuation

• Celebrating women’s inclusion in the climate innovation space

• Mitigating Lateral Movement with Zero Trust Access

• Researchers Test Zero-click Worms that Exploit Generative AI Apps

• What Are Command and Control Attacks?

• What Are the Top 7 DDoS Mitigation Tactics for Energy Grids?

• The Insecurity of Video Doorbells

• Zeek Security Tool Vulnerabilities Allow ICS Network Hacking

• Critical Vulnerability Exposes TeamCity Servers to Takeover

• No “Apple magic” as 11% of macOS detections last year came from malware

• Over 225,000 Compromised ChatGPT Credentials Up for Sale on Dark Web Markets

• Cybercriminals Using Novel DNS Hijacking Technique for Investment Scams

• What is Exposure Management and How Does it Differ from ASM?

• Ex-Twitter Execs Sue Elon Musk Over Unpaid Severance

• China Offers Start-Ups AI Computing Vouchers

• Pegasus spyware creator ordered to reveal code used to spy on WhatsApp users

• Accelerate Your Cybersecurity Transformation at Ignite On Tour

• Sensitive data exposure: How to prevent it and where do we stand in 2024

• Hundreds of orgs targeted with emails aimed at stealing NTLM authentication hashes

• Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes

• First look at Malwarebytes 5.0

• Amazon Web Services Plans Saudi Arabia Infrastructure Region

• New CHAVECLOAK Banking Trojan Targets Brazilians via Malicious PDFs

• Ukraine Claims it Hacked Russian MoD

• Nissan Ends Sunderland Production Of Leaf EV

• Winklevoss’ Gemini To Return More Than $1bn To Customers

• Apple Adds ‘AI’ M3 Chip To MacBook Air Laptops

• The Need For Cybersecurity in Agriculture

• The Role of Security Configuration Management (SCM) in Preventing Cyberattacks

• Spam crusade lands charity in hot water with data watchdog

• Experts disclosed two severe flaws in JetBrains TeamCity On-Premises software

• TeamCity Users Urged to Patch Critical Vulnerabilities

• Preparedness is the key: training with the Crisis Response Community

• Overview of AI Regulations and Regulatory Proposals of 2023

• EU Fines Apple 1.8bn Euros Over Music Streaming Restrictions

• CACTUS Hackers Exploiting Software Bug to Attack Corporate Networks

• Leaksearch – To Search and Parse Plain Text Passwords Using ProxyNova

• Network tunneling with… QEMU?

• NIS2: 1. Perform a gap analysis

• Ukraine’s GUR hacked the Russian Ministry of Defense

• North Korea launches cyber-attacks on Semiconductor industry

• Why cyber maturity assessment should become standard practice

• Secure your hybrid workforce: The advantages of encrypted storage

• 3 free data protection regulation courses you can take right now

• Data Processing in Cisco Observability Platform – A Step-by-Step Guide

• Organizations are knowingly releasing vulnerable applications

• What organizations need to know about the Digital Operational Resilience Act (DORA)

• Home Cybersecurity for Seniors: Tips and Resources

• GTPDOOR – Previously Unknown Linux Malware Attack Telecom Networks

• Critical JetBrains TeamCity On-Premises Flaws Could Lead to Server Takeovers

• LogRhythm Promotes Joanne Wong to Interim Chief Marketing Officer

• Prevention & Cure: Countermeasures Against Healthcare Cyberattacks

• Ensuring Security and Compliance: A Detailed Guide to Testing the OAuth 2.0 Authorization Flow in Python Web Applications

• ISC Stormcast For Tuesday, March 5th, 2024 https://isc.sans.edu/podcastdetail/8880, (Tue, Mar 5th)

• Cloudflare wants to put a firewall in front of your LLM

• Is the BlackCat/AlphV ransomware gang self-destructing?

• Don’t Believe the Hype: Myth-busting Zero Trust Marketing

• Proactive Patching Translates into Less Ransomware Payouts

• Unpacking Our Findings From Assessing Numerous Infrastructures (Part 2)

• Home Privacy Invasion: Protecting Against Surveillance

• Microsoft Secure: Learn expert AI strategy at our online event

• American Express Customer Data Compromised in Third-Party Service Provider Breach

• Elon Musk switched on X calling by default: Here’s how to switch it off

Generated on 2024-03-06 23:56:10.333576