IT Security News Daily Summary 2024-03-07

• 2023 FBI Internet Crime Report reported cybercrime losses reached $12.5 billion in 2023

• We’re not Meta support: State AGs tell Zuck to fix rampant account takeover problem

• Victory! EFF Helps Resist Unlawful Warrant and Gag Order Issued to Independent News Outlet

• The differences between inbound and outbound firewall rules

• USENIX Security ’23 – Daniel W. Woods, Rainer Böhme, Josephine Wolff, Daniel Schwarcz – Lessons Lost: Incident Response in the Age of Cyber Insurance and Breach Attorneys

• Apple Tech Must Haves For Digital Nomads

• Avoiding Shift Left Exhaustion – Part 1

• You’re going to start seeing more tax-related spam, but remember, that doesn’t actually mean there’s more spam

• Mitigating Adversarial Attacks: Strategies for Safeguarding AI Systems

• Possible China link to Change Healthcare ransomware attack

• Spain Temporary Bans Worldcoin Eyeball Scans Over Privacy

• Xplain Hack Aftermath: Play Ransomware Leaks Sensitive Swiss Government Data

• INDIA Fights Cybercrime with Two New Initiatives: Digital Intelligence Platform (DIP) And Chakshu

• Cognizant launches state-of-the-art San Francisco lab to boost enterprise AI adoption

• VPNs persist amid the rise of ZTNA, other VPN alternatives

• AI and the Next Wave of Robocalls: Protecting Carriers and Consumers from Sophisticated Voice Fraud

• Building a Secure Data-Protection Infrastructure to Protect against the MOVEit Hack

• Do You Know Where Your Data Is? How Law Firms Can Protect Their Most Valuable Asset

• What is Zero Trust: Ensuring Security in a Digital Age

• USENIX Security ’23 – Nils Lukas, Florian Kerschbaum – PTW: Pivotal Tuning Watermarking for Pre-Trained Image Generators

• The Need for East-West Observability to Protect Against Compromised IAM

• NSA Issues Guidance for Networks Adopting Zero Trust

• Randall Munroe’s XKCD ‘Ice Core’

• Woman in Noida Swindled of Rs 3.7 Lakh During 7-Hour Skype Call in Recent ‘Digital Arrest’ Scam

• LinkedIn Admits Premium Subscriptions Brings In $1.7bn

• Introducing the Cisco Store Lookbook

• Should Caddy and Traefik Replace Certbot?

• Elon Musk Will Not Fund Candidates After Meeting Donald Trump

• Badge Launches Partner Program for ‘Enroll Once and Authenticate Any Device’ Software

• Incident Management: Checklist, Tools, and Prevention

• JetBrains TeamCity under attack by ransomware thugs after disclosure mess

• Cryptography Firm Zama Raises $73 Million for FHE Solution

• RATs Spread Via Fake Skype, Zoom, Google Meet Sites

• Wordfence Intelligence Weekly WordPress Vulnerability Report (February 26, 2024 to March 3, 2024)

• COM Objects Hijacking

• Red Sea Cable Damage Disrupts Internet Traffic Across Continents

• Evasive Panda Targets Tibet With Trojanized Software

• Google opens first ever Cyberdefense hub in Japan

• Badge Launches Partner Program to Expand Availability of its Privacy-Enhancing “Enroll Once and Authenticate on Any Device” Software

• Belgian ale legend Duvel’s brewery borked as ransomware halts production

• 41 States Call On Facebook To Take “Immediate Action” To Help Hacking Victims

• Cisco Enterprise Agreement 3.0: A Year of Transformative Impact and Growth

• United Health Allegedly Paid $22M Ransomware

• US Congress Bid To Ban TikTok Or Divest Gathers Pace

• Reach Security taps a company’s existing tools to fight cyber threats

• Anonymous social apps face another reckoning as UNC System to ban Yik Yik, Fizz, Sidechat & Whisper

• Five Unintended Consequences of the New SEC Cybersecurity Disclosure Rule

• PSD2, the Future of Open Banking, and API Security

• FBI: US Ransomware Losses Surge 74% to $59.6 Million in 2023

• Guidelines for selecting and disseminating Sekoia.io IOCs from CTI sources

• The 3 most common post-compromise tactics on network infrastructure

• CISA Announces New Efforts to Help Secure Open Source Ecosystem

• $12.5 billion lost to cybercrime, amid tidal wave of crypto investment fraud

• Apple Releases Security Updates for iOS and iPadOS

• PetSmart warns customers of credential stuffing attack

• 5 Simple Steps to Bulletproof Your API Integrations and Keep Hackers at Bay

• UnitedHealth’s Cyberattack Should Serve as a ‘Wake-up Call’ for HealthCare Sector

• The Future of Cybersecurity in the Age of Generative AI: Insights and Projections from a recent ESG research

• Cybercriminals Spoof US Government Organizations in BEC, Phishing Attacks

• Cisco Patches High-Severity Vulnerabilities in VPN Product

• Nigerian BEC Scammer Pleads Guilty in US Court

• Cayosoft Raises $22.5 Million for Microsoft AD Recovery Tech

• FBI: Cybercrime Losses Exceeded $12.5 Billion in 2023

• Bitdefender GravityZone CSPM+ automates the discovery of cloud misconfigurations

• Chinese State Hackers Target Tibetans with Supply Chain, Watering Hole Attacks

• Hacked WordPress Sites Abusing Visitors’ Browsers for Distributed Brute-Force Attacks

• Governments Eye Disclosure Requirements for AI Development Labs

• Unit 42 MDR Recognized as a Leader in MDR

• Defense Unicorns raises $35 million to enhance national security through open-source software

• FileCloud expands data governance and compliance tools

• New GTPDOOR Malware Exploits GPRS Threatening Telecom

• Server Killers Alliances: Here is the List of Hacker Groups

• Snake, a new Info Stealer spreads through Facebook messages

• Predator spyware vendor banned in US

• American Express Breach: Safeguarding Your Finances Amidst Third-Party Data Exposure

• VMware patches critical flaws in ESXi, Workstation, Fusion and Cloud Foundation

• [Guest Diary] AWS Deployment Risks – Configuration and Credential File Targeting, (Thu, Mar 7th)

• Enterprise Security Gets Personal: Enter the Human Firewall

• VPN Evolution: Security and Entertainment Essentials Amid Rising Digital Risks

• Beware of New Snake Python Infostealer Attacking Facebook Messenger Users

• Exploring Digital Transformation and AI in Higher Education: A Discussion with Cisco Education Experts

• Cisco Secure Workload 3.9 Delivers Stronger Security and Greater Operational Efficiency

• Belgian ale legend Duvel’s brewery borked as ransomware halts production

• Cyber Insights 2024: A Dire Year for CISOs?

• Security Breach at Mr. Green Gaming: 27,000 User Data Compromises

• Former Google Chinese Staffer Charged With Stealing AI Secrets

• Zama’s homomorphic encryption tech lands it $73M on a valuation of nearly $400M

• National intelligence agency of Moldova warns of Russia attacks ahead of the presidential election

• Why Ignoring Vulnerability Prioritization is a CISO’s Worst Nightmare?

• Skybox 13.2 empowers organizations to identify and remediate vulnerabilities

• Regula updates Document Reader SDK to reduce the risk of identity theft

• Veeam and Microsoft develop AI solutions aimed at improving data protection

• Tycoon and Storm-1575 Linked to Phishing Attacks on US Schools

• Learn how to Protect Your Business With this $28 Cybersecurity Training

• How Public AI Can Strengthen Democracy

• Web-based PLC malware: A new potential threat to critical infrastructure

• Hacked WordPress Sites Using Visitors’ Browsers For Distributed Brute Force Attacks

• Best of KB4-CON 2024: The State of Phishing, Hacking and Security Awareness Training

• Navigating through Challenges and Opportunities of Cybersecurity Standardisation

• Fidelity Investments Notifying 28,000 People of Data Breach

• Critical TeamCity Vulnerability Exploitation Started Immediately After Disclosure

• Paramount Defenses Gold Finger 8.0 accurately assess and lockdown access in Active Directory

• Human vs. Non-Human Identity in SaaS

• Ransomware Attackers Leak Sensitive Swiss Government Documents, Login Credentials

• Cisco SMB Wireless Access Points Flaw Let Attackers Inject Commands

• New Linux Malware Attacking Apache, Docker, Redis & Confluence Servers

• Top 10 scams targeting seniors – and how to keep your money safe

• Brave Launches ‘Leo’ AI Assistant For Android Users

• China To Install CCTV Network On Moon – Report

• The Future of Kubernetes Network Policy

• Ex-Google Engineer Arrested for Stealing AI Technology Secrets for China

• Former Google Engineer Charged With Stealing AI Secrets

• Cisco Small Business Wireless Access Points Flaw Let Attackers Inject Commands

• Spam and phishing in 2023

• Streamlining KVM Operations: A Comprehensive Cheat Sheet

• New SSH-Snake Worm-Like Tool Threatens Network Security

• VMware Critical Flaws Let Attackers Execute Remote Code

• Hundreds of Rogue Users Added to Unpatched TeamCity Servers

• The Architects of Evasion: a Crypters Threat Landscape

• New Python-Based Snake Info Stealer Spreading Through Facebook Messages

• Linux Malware targets misconfigured misconfigured Apache Hadoop, Confluence, Docker, and Redis servers

• CISA adds Apple iOS and iPadOS memory corruption bugs to its Known Exploited Vulnerabilities Catalog

• Online Trade (Онлайн Трейд) – 3,805,265 breached accounts

• Say Goodbye to Manual AppSec Overhead: Unleashing the Power OX’s Automated No-Code Workflows

• How to implement an Information Security Management System (ISMS)

• PetSmart warns of Active Password Cracking Attacks

• VMware urges emergency action to blunt hypervisor flaws

• US lawmakers want ByteDance to divest TikTok or face a ban

• Here’s something else AI can do: expose bad infosec to give cyber-crims a toehold in your organization

• Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

• Today’s biggest AI security challenges

• Watch Out for Spoofed Zoom, Skype, Google Meet Sites Delivering Malware

• Cyber Attack on Canada FINTRAC and IBM Cyber Attack response training

• Tazama: Open-source real-time fraud management

• Delving into Dalvik: A Look Into DEX Files

• Major shifts in identity, ransomware, and critical infrastructure threat trends

• How to Adopt Phishing-Resistant MFA

• A cybercriminal is sentenced, will it make a difference?

• 78% of MSPs identify cybersecurity as prime IT challenge

• WoTLabs – 21,994 breached accounts

• Home Voice Assistant Security: Protecting Your Privacy

• 13 WhatsApp Scams to Know in 2024 + Tips to Stay Safe

• NSA Details Seven Pillars Of Zero Trust

• Hackers Use Number of Legitimate Tools in Ransomware Attacks

• Hackers Exploiting iOS 0-Day To Attack iPhones – Patch Now!

• Lawsuit claims gift card fraud is the gift that keeps on giving, to Google

• ISC Stormcast For Thursday, March 7th, 2024 https://isc.sans.edu/podcastdetail/8884, (Thu, Mar 7th)

• Smart Home Automation: Balancing Convenience and Security

• Chinese chap charged with stealing Google’s AI datacenter secrets

• What Is Domain Monitoring and Why Do I Need It?

• How Does Identity Theft Affect Your Business?

• United Healthcare’s ransomware attack shows why supply chains are under siege

• Apple discloses 2 iOS zero-day vulnerabilities

• IT Security News Daily Summary 2024-03-06

• Healthcare Groups Push for Help in Wake of Ransomware Attack on Change

• A Comprehensive Guide To Prototyping PCB Assembly

• FBI: Critical infrastructure suffers spike in ransomware attacks

• How NIST CSF 2.0 Can Help Schools

• USENIX Security ’23 – Wai Man Si, Michael Backes, and Yang Zhang, Ahmed Salem – Two-in-One: A Model Hijacking Attack Against Text Generation Models

• Citi exec: Generative AI is transformative in banking, but risky for customer support

• FBI: Critical infrastructure menaced by spike in ransomware attacks

• The Convergence: AI, Confidential Computing, and Blockchain

• Emulating the Sabotage-Focused Russian Adversary Sandworm

• Elevate Your Career with the New Cisco Service Provider Cloud Networking Certification

• Decrypting the Future: Unveiling Questions on AI’s Role in Cybersecurity

• The best travel VPNs of 2024: Expert tested and reviewed

• Cybersecurity market researchers forecast significant growth

• Microsoft AI Engineer Flags Copilot Safety Concerns

• Fake Skype, Zoom, Google Meet Sites Infecting Devices with Multiple RATs

• iOS Application Security for Beginners

• Privacy First and Competition

• Web3: A New Dawn for the Internet?

• Pilot cybersecurity training program for women to recruit third cohort

• OpenAI Issues Public Rebuttal To Elon Musk Lawsuit

• Hackers Exploit Misconfigured YARN, Docker, Confluence, Redis Servers for Crypto Mining

• TA4903 Phishing Campaigns Evolve, Targets US Government

• Apple’s trademark tight lips extend to new iPhone, iPad zero-days

• 7 Best Network Monitoring Tools in 2024 Compared

• Apple Blunts Zero Day Attacks With iOS 17.4 Update

• Proactive Intelligence: A Paradigm Shift In Cyber Defense

• Facebook/Insta FAIL — ‘Anonymous Sudan’ has a Super Tuesday: ‘We Did It.’

• TA4903 Phishing Campaigns Evolve, Target US Government

• Fresh $100 Million Claroty Funding Brings Total to $735 Million

• Linux Malware Campaign Targets Misconfigured Cloud Servers

• IONIX Exposure Validation identifies and prioritizes exploitable vulnerabilities

• Exit Scam: BlackCat Ransomware Group Vanishes After $22 Million Payout

• Linux Malware Targets Docker, Apache Hadoop, Redis and Confluence

• Apple iPhone Sales In China Plummet 24 Percent

• Super Tuesday: A Snapshot into CISA’s Mission to Secure the Electoral Process

• Explore mitigation strategies for 10 LLM vulnerabilities

• Meta Abandons Hacking Victims, Draining Law Enforcement Resources, Officials Say

• Sailing through History: NWN Carousel’s Virtual Sea-Lab Revolution

• 5 Reasons to Leverage MDR to Transform Your SecOps

• ALPHV ransomware gang fakes own death, fools no one

• Cisco Releases Open Source Backplane Traffic Visibility Tool for OT

• Cloud Security Firm Sweet Security Raises $33 Million, 6 Months After Emerging From Stealth

• Anatomy of a BlackCat Attack Through the Eyes of Incident Response

• Cyberattack on Hamilton City Hall Expands to Impact Additional Services

• Check Point introduces Harmony SaaS for automated threat prevention

• Crowdstrike to acquire Flow Security

• UK Approves Newport Wafer Fab Sale To US Vishay Intertechnology

• VMware Releases Security Advisory for Multiple Products

• CISA ADDS ANDROID PIXEL AND SUNHILLO SURELINE BUGS TO ITS KNOWN EXPLOITED VULNERABILITIES CATALOG

• Lookout introduces SSE solution for mid-market enterprises

• Cloudflare Magic Cloud Networking simplifies security and management of public clouds

• Facebook, Instagram Login Restored After Widespread Outage

• Meta’s Facebook, Instagram Back Online After Two Hour Long Outage

• Metomic provides data security tool for organizations that rely on Slack

• 5 tips for securing your remote workspace

• From meteorology to information technology, Cisco Insider Tim Harmon has a fascinating story to share.

• HHS Aiding Organizations Hit by Change Healthcare Cyberattack

• Phind-70B: Transforming Coding with Unmatched Speed and Precision

• EU Agrees ‘Cyber Solidarity Act’ to Bolster Incident Response and Recovery

• How to Use Norton Secure VPN (A Step-by-Step Guide)

• AI in Cybersecurity — A CISO’s Perspective

• Deepwatch increases flexibility with its open security data architecture

• Irresistible: Hooks, habits and why you can’t put down your phone

• So You Want to Achieve NERC CIP-013-1 Compliance…

• Watch out, GhostSec and Stourmous groups jointly conducting ransomware attacks

• Cyber Insights 2024: OT, ICS and IIoT

• Android’s March 2024 Update Patches Critical Vulnerabilities

• SecurityWeek to Host AI Risk Summit June 25-26 at the Ritz-Carlton, Half Moon Bay CA

• Deepfakes: What Organizations, Schools & Parents Should Know

• ITRC Finds Online Job Scams on the Rise

• Advocating for the Persistence of Cash to Counteract Intrusive Banking Practices

• Classic Scam the Scammers? Epic Games Hackers Faked the Hack

• Sweet Security raises $33 million to identify and address cloud risks

• Pentera Cloud empowers security teams to reduce exposure to cloud-native attacks

• Vulnerability Risk Management for External Assets

• OpenNMS XSS Flaw Let Attackers Inject JavaScript Payload

• Top 6 SaaS Breach Vectors and How to Prevent Them

• Update your iPhones and iPads now: Apple patches security vulnerabilities in iOS and iPadOS

• Capita says 2023 cyberattack costs a factor as it reports staggering £100M+ loss

• Cyber Security Today, March 6, 2024 – VMware and Apple rush out security updates, a new ScreenConnect malware is found, and more

• Surveillance through Push Notifications

• Appian Platform enhancements unify generative AI and process automation

• A New Way To Manage Your Web Exposure: The Reflectiz Product Explained

• Tesla Berlin Factory Arson Attack Claimed By Leftwing Group

• Data Breach Alert: American Express Credit Card Information Exposed

• CISA Warns of Pixel Phone Vulnerability Exploitation

• BlackCat Ransomware Gang Suspected of Pulling Exit Scam

• Customer Story | Lufkin ISD Streamlines Cybersecurity & Safety Monitoring With Rich Visibility

• ​​Secure SaaS applications with Valence Security and Microsoft Security​​

• Cyber Pros Turn to Cybercrime as Salaries Stagnate

• New Linux Malware Alert: ‘Spinning YARN’ Hits Docker, Other Key Apps

• What Apple is afraid of — pre-DMA alternative iOS app stores are already riddled with malware

• Comparison Chart: VPN Service Providers (Free Download)

• Perimeter Security Policy

• Cloud Attack Surface Management(CASM): What is it? How does Strobes CASM help you with cloud security?

• Pathlock CAC helps SAP customers comply with regulations

• Hackers Abuse QEMU Hardware Emulator for Stealthy C2 Communication

• 225,000+ ChatGPT Credentials Up For Sale on Dark Web Markets

• Safeguarding EU elections amidst cybersecurity challenges

• Skype, Google Meet, and Zoom Used in New Trojan Scam Campaign

• How to Find and Fix Risky Sharing in Google Drive

• US Sanctions Predator Spyware Maker Intellexa

• Apple fixes two actively exploited iOS zero-days (CVE-2024-23225, CVE-2024-23296)

• US Sanctions Predator Spyware-Maker Intellexa

• Scanning and abusing the QUIC protocol, (Wed, Mar 6th)

• Hackers Install macOS Malware Using Weaponised Calendar Invites

• LockBit 3.0’s Bungled Comeback Highlights the Undying Risk of Torrent-Based (P2P) Data Leakage

• The Financial Sector Is Refocusing on Cybersecurity

• Chip lobby group SEMI to EU: Export restrictions should only be used in self-defense

• VMware Issues Security Patches for ESXi, Workstation, and Fusion Flaws

• U.S. Cracks Down on Predatory Spyware Firm for Targeting Officials and Journalists

• NIS2: 2.Designate a responsible person or team

• Hackers use Zoom & Google Meet Lures to Attack Android & Windows users

• New APT Group ‘Lotus Bane’ Behind Recent Attacks on Vietnam’s Financial Entities

• Alert: GhostSec and Stormous Launch Joint Ransomware Attacks in Over 15 Countries

• Project DDoSia – Russian Hackers Planning a Massive DDoS Attack

• From Prep to Pass, Scytale Launches Its Built-In Audit, Transforming It Into The Complete Compliance Hub for SaaS

• Facebook and Instagram down by Cyber Attack

• Safeguarding Your Digital Reputation: Best Practices for Secure Data Erasure

• Hackers Exploit WordPress Plugin Flaw to Deploy Godzilla Web Shell

• 5 ways to keep API integrations secure

• Urgent: Apple Issues Critical Updates for Actively Exploited Zero-Day Flaws

• Navigating regulation challenges for protecting sensitive healthcare data

• RiskInDroid: Open-source risk analysis of Android apps

• AI Auctions: Collectibles, Taylor Swift, Jordan Bots

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Threat Spotlight: Data Extortion Ransomware Threats

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• How to create an efficient governance control program

• Home Network Guest Wi-Fi: Best Practices

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• AI tools put companies at risk of data exfiltration

• Japan orders local giants LINE and NAVER to disentangle their tech stacks

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• CrowdStrike to Acquire Flow Security

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• ISC Stormcast For Wednesday, March 6th, 2024 https://isc.sans.edu/podcastdetail/8882, (Wed, Mar 6th)

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Cybersecurity top revenue driver for bulk of MSPs, Kaseya report finds

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Internet of Things (IoT) Privacy Regulations

• Uncle Sam intervenes as Change Healthcare ransomware fiasco creates mayhem

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare

• Self-Replicating AI Malware is Here😱 #ComPromptMized

• Self-Replicating AI Malware is Here😱 #ComPromptMized

Generated on 2024-03-07 23:56:10.346798