IT Security News Daily Summary 2024-03-08

• Friday Squid Blogging: New Plant Looks Like a Squid

• Four Reasons to Protect the Internet this International Women’s Day

• Four Infosec Tools for Resistance this International Women’s Day

• Four Actions You Can Take To Protect Digital Rights this International Women’s Day

• Four Voices You Should Hear this International Women’s Day

• CrowdStrike Extends Scope and Reach of Cybersecurity Portfolio

• QNAP fixed three flaws in its NAS devices, including an authentication bypass

• The Atlas of Surveillance Removes Ring, Adds Third-Party Investigative Platforms

• Leaking NTLM Credentials Through Windows Themes

• Enhance Customers? Security Posture: Akamai SOCC Advanced Service

• AkaNAT: How Akamai Uses Machine Learning to Detect Shared IPs

• Elevate Your Web Monitoring Experience with Managed Web Monitoring

• What Is DNS Spoofing? + 5 Tips to Prevent It

• NIST Cybersecurity Framework: A Cheat Sheet for Professionals

• Midnight Blizzard accessed Microsoft systems, source code

• IONIX ASM Platform Adds Testing Tools to Simulate Cyberattacks

• Unsecured Video Doorbells Sold on Major Platforms: Millions at Risk of Hacking

• Apple releases MacOS Sonoma 14.4 with a whopping 64 bug fixes

• Font Security Still A Helvetica Of A Problem, Says Canva

• Change Healthcare Hacker Linked To Espionage Gangs

• Bitcoin Briefly Rises To Record High Over $70,000

• Microsoft Under Constant Attack By Russian Hackers, Filing Says

• Cloud security vs. network security: What’s the difference?

• Supercharge your HIMSS24 experience by meeting with our Customer Experience team

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #281 – The Needed Changes

• USENIX Security ’23 – Work-From-Home And COVID-19: Trajectories Of Endpoint Security Management In A Security Operations Center

• Russian Hackers Access Source Code in Ongoing Attack on Microsoft

• Russia-linked Midnight Blizzard breached Microsoft systems again

• Unauthenticated Stored XSS Vulnerability Patched in Ultimate Member WordPress Plugin

• Microsoft Says Russian Gov Hackers Stole Source Code After Spying on Executive Emails

• Essays from the Second IWORD

• Confidential Containers for Financial Services on Public Cloud

• An Overview of the Joint Cyber Defense Collaborative Priorities

• Real Madrid: Pushing the Boundaries of What’s Possible at the Santiago Bernabéu Stadium

• You can now add extra security to your ChatGPT – here’s how and why you should

• Change Healthcare Gets Pharmacy Systems Up After Ransomware Attack

• NSA Shares Key Strategies for Improved Network Security

• Apple Released Security Updates for Multiple Products

• Spyware makers express concern after US sanctions spyware veteran

• Microsoft confirms Russian spies stole source code, accessed internal systems

• Cisco Fixes High-Severity Code Execution and VPN Hijacking Flaws

• Introduction to Modern Data Stack

• Teslas vulnerable to Flipper Zero hack – here’s how to protect yourself

• TikTok Ban Incoming — but ByteDance Fights Back

• SIM linked data security measure to defend against phishing attacks

• Celebrating Women’s History Month

• Protect Your Cloud Environments with Data Security Observability

• CISA Outlines Efforts to Secure Open Source Software

• Researchers Develop AI “Worms” Capable of Inter-System Spread, Enabling Data Theft Along the Way

• electronic protected health information (ePHI)

• The Change Healthcare attack: Explaining how it happened

• Russian spies keep hacking into Microsoft in ‘ongoing attack,’ company says

• Thinking about a Career in Network Security? Follow This Path

• Cisco addressed severe flaws in its Secure Client

• Patch now! VMWare escape flaws are so serious even end-of-life software gets a fix

• Change Healthcare registers pulse after crippling ransomware attack

• In Other News: Google AI Hacking, Font Vulnerabilities, IBM Training Facility

• Defense Unicorns Raises $35 Million for National Security Software Solutions

• Reach Security Raises $20M to Help Manage Cybersecurity Products

• Canadian City Says Timescale for Recovering from Ransomware Attack ‘Unknown’

• GhostLocker 2.0 Unleashes Cyber Haunting Spree in the Middle East, Africa, and Asia

• Scam: Chennai Woman Exposes Cyber Crime Involving Adhaar Card, Courier, Drugs

• Are You Ready to Protect Your Company From Insider Threats? Probably Not

• Apple Addressed Two iOS Zero-Days With Latest Updates

• Check Point Research Alerts: Financially Motivated Magnet Goblin Group Exploits 1-Day Vulnerabilities to target Publicly Facing Servers

• Going the Distance: What Channel Women Can Learn From Marathon Swimmer Diana Nyad

• Change Healthcare Restores Pharmacy Services Disrupted by Ransomware

• Meta Details WhatsApp and Messenger Interoperability to Comply with EU’s DMA Regulations

• Update on Microsoft Actions Following Attack by Nation State Actor Midnight Blizzard

• Women and cyber security: a must to boost the future

• Dropbox Used to Steal Credentials and Bypass MFA in Novel Phishing Campaign

• Tesla Owners Lose Battery Range Class Action Bid

• A Close Up Look at the Consumer Data Broker Radaris

• Swiss cheese security? Play ransomware gang milks government of 65,000 files

• Unpatched Sceiner Smart Lock Vulnerabilities Allow Hackers to Open Doors

• Chinese Cyberspies Target Tibetans via Watering Hole, Supply Chain Attacks

• A Taxonomy of Prompt Injection Attacks

• Update now! JetBrains TeamCity vulnerability abused at scale

• Web-Based PLC Malware: A New Frontier in Industrial Cybersecurity Threats

• US Bill To Ban Or Divest TikTok, Advances In House

• Chinese Evasive Panda Targets Tibetans with Nightdoor Backdoor

• MITRE Releases Aviation Risk Identification and Assessment Software Program

• Nigerian National Pleads Guilty for Hacking Business & Individual Emails

• Quantum Attack Protection Added to HP Business PCs

• State AGs Send Letter to Meta Asking It to Take ‘Immediate Action’ on User Account Takeovers

• Secrets Sensei: Conquering Secrets Management Challenges

• UnitedHealth Sets Timeline to Restore Change Healthcare Systems After BlackCat Hit

• Cisco patches Secure Client VPN flaw that could reveal authentication tokens (CVE-2024-20337)

• Identiv releases bitse.io 3.0, simplifying the deployment of IoT applications

• Salesforce Launches AI Tools For Doctors, Healthcare Sector

• Championing Diversity in Data Protection

• Secure by Design: Google’s Perspective on Memory Safety

• Why Edtech Industries Need Cybersecurity?

• Women in Tech 2024

• Chinese Panda APT Hacking Websites To Infect Windows And MacOS Users

• International Women’s Day 2024: Inspiring inclusion for the next generation

• UAC-0050 Hacked Thousands Of Emails To Launch Malspam Attack

• Enjoy 2 Years of Unrestricted Access to Your Favorite Content for Only $40

• Play ransomware attack on Xplain exposed 65,000 files containing data relevant to the Swiss Federal Administration.

• QEMU Emulator Exploited as Tunneling Tool to Breach Company Network

• Cisco Issues Patch for High-Severity VPN Hijacking Bug in Secure Client

• 100% Surge in Malicious Emails Bypassing Secure Email Gateways

• Empowering women and transforming economies globally through inclusive partnerships

• What Happened in Cybersecurity in 2023: A Summary of Security Incidents, Vulnerability Information, and Cybersecurity Trends

• NIS2: 3.Establish a cybersecurity framework

• CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability

• Google Engineer Arrested for Stealing AI Tech Secrets

• March 2024 Patch Tuesday forecast: A popular framework updated

• How new and old security threats keep persisting

• Immediate AI risks and tomorrow’s dangers

• Understanding Types of Cloud Malware and Effective Defense Strategies

• Play ransomware leaks Swiss government data comprising sensitive information

• Securing the future: Addressing cybersecurity challenges in the education sector

• Leveraging AI and automation for enhanced cloud communication security

• Top 4 Essential Strategies for Securing APIs To Block Compromised Tokens

• OpenARIA: Open-source edition of the Aviation Risk Identification and Assessment (ARIA)

• Font security ‘still a Helvetica of a problem’ says Australian graphics outfit Canva

• New infosec products of the week: March 8, 2024

• Zama Raises $73M in Series A Led by Multicoin Capital & Protocol Labs for Fully Homomorphic Encryption

• News alert: Badge expands availability of ‘Enroll Once and Authenticate on Any Device’ software

• Workers with AI skills can expect higher salaries – depending on their role

• India’s Election Commission fixes privacy flaws that exposed citizens’ information-seeking data

• ISC Stormcast For Friday, March 8th, 2024 https://isc.sans.edu/podcastdetail/8886, (Fri, Mar 8th)

• Setup With Pritunl

• Securing open source software: Whose job is it, anyway?

• Safe Online Gaming: Protecting Personal Information

• Quantum Computing: The Future of Technology

• MacOS Patches (and Safari, TVOS, VisionOS, WatchOS), (Fri, Mar 8th)

• Enhancing protection: Updates on Microsoft’s Secure Future Initiative

• Evolving Microsoft Security Development Lifecycle (SDL): How continuous SDL can help you build more secure software

• Annual State of Email Security by the Numbers

• How to Check Your CPU Temperature + 7 Tips to Keep It Down

• IT Security News Daily Summary 2024-03-07

• 2023 FBI Internet Crime Report reported cybercrime losses reached $12.5 billion in 2023

• We’re not Meta support: State AGs tell Zuck to fix rampant account takeover problem

• Victory! EFF Helps Resist Unlawful Warrant and Gag Order Issued to Independent News Outlet

• The differences between inbound and outbound firewall rules

• USENIX Security ’23 – Daniel W. Woods, Rainer Böhme, Josephine Wolff, Daniel Schwarcz – Lessons Lost: Incident Response in the Age of Cyber Insurance and Breach Attorneys

• Apple Tech Must Haves For Digital Nomads

• Avoiding Shift Left Exhaustion – Part 1

• You’re going to start seeing more tax-related spam, but remember, that doesn’t actually mean there’s more spam

• Mitigating Adversarial Attacks: Strategies for Safeguarding AI Systems

• Possible China link to Change Healthcare ransomware attack

• Spain Temporary Bans Worldcoin Eyeball Scans Over Privacy

• Xplain Hack Aftermath: Play Ransomware Leaks Sensitive Swiss Government Data

• INDIA Fights Cybercrime with Two New Initiatives: Digital Intelligence Platform (DIP) And Chakshu

• Cognizant launches state-of-the-art San Francisco lab to boost enterprise AI adoption

• VPNs persist amid the rise of ZTNA, other VPN alternatives

• AI and the Next Wave of Robocalls: Protecting Carriers and Consumers from Sophisticated Voice Fraud

• Building a Secure Data-Protection Infrastructure to Protect against the MOVEit Hack

• Do You Know Where Your Data Is? How Law Firms Can Protect Their Most Valuable Asset

• What is Zero Trust: Ensuring Security in a Digital Age

• USENIX Security ’23 – Nils Lukas, Florian Kerschbaum – PTW: Pivotal Tuning Watermarking for Pre-Trained Image Generators

• The Need for East-West Observability to Protect Against Compromised IAM

• NSA Issues Guidance for Networks Adopting Zero Trust

• Randall Munroe’s XKCD ‘Ice Core’

• Woman in Noida Swindled of Rs 3.7 Lakh During 7-Hour Skype Call in Recent ‘Digital Arrest’ Scam

• LinkedIn Admits Premium Subscriptions Brings In $1.7bn

• Introducing the Cisco Store Lookbook

• Should Caddy and Traefik Replace Certbot?

• Elon Musk Will Not Fund Candidates After Meeting Donald Trump

• Badge Launches Partner Program for ‘Enroll Once and Authenticate Any Device’ Software

• Incident Management: Checklist, Tools, and Prevention

• JetBrains TeamCity under attack by ransomware thugs after disclosure mess

• Cryptography Firm Zama Raises $73 Million for FHE Solution

• RATs Spread Via Fake Skype, Zoom, Google Meet Sites

• Wordfence Intelligence Weekly WordPress Vulnerability Report (February 26, 2024 to March 3, 2024)

• COM Objects Hijacking

• Red Sea Cable Damage Disrupts Internet Traffic Across Continents

• Evasive Panda Targets Tibet With Trojanized Software

• Google opens first ever Cyberdefense hub in Japan

• Badge Launches Partner Program to Expand Availability of its Privacy-Enhancing “Enroll Once and Authenticate on Any Device” Software

• Belgian ale legend Duvel’s brewery borked as ransomware halts production

• 41 States Call On Facebook To Take “Immediate Action” To Help Hacking Victims

• Cisco Enterprise Agreement 3.0: A Year of Transformative Impact and Growth

• United Health Allegedly Paid $22M Ransomware

• US Congress Bid To Ban TikTok Or Divest Gathers Pace

• Reach Security taps a company’s existing tools to fight cyber threats

• Anonymous social apps face another reckoning as UNC System to ban Yik Yik, Fizz, Sidechat & Whisper

• Five Unintended Consequences of the New SEC Cybersecurity Disclosure Rule

• PSD2, the Future of Open Banking, and API Security

• FBI: US Ransomware Losses Surge 74% to $59.6 Million in 2023

• Guidelines for selecting and disseminating Sekoia.io IOCs from CTI sources

• The 3 most common post-compromise tactics on network infrastructure

• CISA Announces New Efforts to Help Secure Open Source Ecosystem

• $12.5 billion lost to cybercrime, amid tidal wave of crypto investment fraud

• Apple Releases Security Updates for iOS and iPadOS

• PetSmart warns customers of credential stuffing attack

• 5 Simple Steps to Bulletproof Your API Integrations and Keep Hackers at Bay

• UnitedHealth’s Cyberattack Should Serve as a ‘Wake-up Call’ for HealthCare Sector

• The Future of Cybersecurity in the Age of Generative AI: Insights and Projections from a recent ESG research

• Cybercriminals Spoof US Government Organizations in BEC, Phishing Attacks

• Cisco Patches High-Severity Vulnerabilities in VPN Product

• Nigerian BEC Scammer Pleads Guilty in US Court

• Cayosoft Raises $22.5 Million for Microsoft AD Recovery Tech

• FBI: Cybercrime Losses Exceeded $12.5 Billion in 2023

• Bitdefender GravityZone CSPM+ automates the discovery of cloud misconfigurations

• Chinese State Hackers Target Tibetans with Supply Chain, Watering Hole Attacks

• Hacked WordPress Sites Abusing Visitors’ Browsers for Distributed Brute-Force Attacks

• Governments Eye Disclosure Requirements for AI Development Labs

• Unit 42 MDR Recognized as a Leader in MDR

• Defense Unicorns raises $35 million to enhance national security through open-source software

• FileCloud expands data governance and compliance tools

• New GTPDOOR Malware Exploits GPRS Threatening Telecom

• Server Killers Alliances: Here is the List of Hacker Groups

• Snake, a new Info Stealer spreads through Facebook messages

• Predator spyware vendor banned in US

• American Express Breach: Safeguarding Your Finances Amidst Third-Party Data Exposure

• VMware patches critical flaws in ESXi, Workstation, Fusion and Cloud Foundation

• [Guest Diary] AWS Deployment Risks – Configuration and Credential File Targeting, (Thu, Mar 7th)

• Enterprise Security Gets Personal: Enter the Human Firewall

• VPN Evolution: Security and Entertainment Essentials Amid Rising Digital Risks

• Beware of New Snake Python Infostealer Attacking Facebook Messenger Users

• Exploring Digital Transformation and AI in Higher Education: A Discussion with Cisco Education Experts

• Cisco Secure Workload 3.9 Delivers Stronger Security and Greater Operational Efficiency

• Belgian ale legend Duvel’s brewery borked as ransomware halts production

• Cyber Insights 2024: A Dire Year for CISOs?

• Security Breach at Mr. Green Gaming: 27,000 User Data Compromises

• Former Google Chinese Staffer Charged With Stealing AI Secrets

• Zama’s homomorphic encryption tech lands it $73M on a valuation of nearly $400M

• National intelligence agency of Moldova warns of Russia attacks ahead of the presidential election

• Why Ignoring Vulnerability Prioritization is a CISO’s Worst Nightmare?

• Skybox 13.2 empowers organizations to identify and remediate vulnerabilities

• Regula updates Document Reader SDK to reduce the risk of identity theft

• Veeam and Microsoft develop AI solutions aimed at improving data protection

• Tycoon and Storm-1575 Linked to Phishing Attacks on US Schools

• Learn how to Protect Your Business With this $28 Cybersecurity Training

• How Public AI Can Strengthen Democracy

• Web-based PLC malware: A new potential threat to critical infrastructure

• Hacked WordPress Sites Using Visitors’ Browsers For Distributed Brute Force Attacks

• Best of KB4-CON 2024: The State of Phishing, Hacking and Security Awareness Training

• Navigating through Challenges and Opportunities of Cybersecurity Standardisation

• Fidelity Investments Notifying 28,000 People of Data Breach

• Critical TeamCity Vulnerability Exploitation Started Immediately After Disclosure

• Paramount Defenses Gold Finger 8.0 accurately assess and lockdown access in Active Directory

• Human vs. Non-Human Identity in SaaS

• Ransomware Attackers Leak Sensitive Swiss Government Documents, Login Credentials

• Cisco SMB Wireless Access Points Flaw Let Attackers Inject Commands

• New Linux Malware Attacking Apache, Docker, Redis & Confluence Servers

• Top 10 scams targeting seniors – and how to keep your money safe

• Brave Launches ‘Leo’ AI Assistant For Android Users

• China To Install CCTV Network On Moon – Report

• The Future of Kubernetes Network Policy

• Ex-Google Engineer Arrested for Stealing AI Technology Secrets for China

• Former Google Engineer Charged With Stealing AI Secrets

• Cisco Small Business Wireless Access Points Flaw Let Attackers Inject Commands

• Spam and phishing in 2023

• Streamlining KVM Operations: A Comprehensive Cheat Sheet

• New SSH-Snake Worm-Like Tool Threatens Network Security

• VMware Critical Flaws Let Attackers Execute Remote Code

• Hundreds of Rogue Users Added to Unpatched TeamCity Servers

• The Architects of Evasion: a Crypters Threat Landscape

• New Python-Based Snake Info Stealer Spreading Through Facebook Messages

• Linux Malware targets misconfigured misconfigured Apache Hadoop, Confluence, Docker, and Redis servers

• CISA adds Apple iOS and iPadOS memory corruption bugs to its Known Exploited Vulnerabilities Catalog

• Online Trade (Онлайн Трейд) – 3,805,265 breached accounts

• Say Goodbye to Manual AppSec Overhead: Unleashing the Power OX’s Automated No-Code Workflows

• How to implement an Information Security Management System (ISMS)

• PetSmart warns of Active Password Cracking Attacks

• VMware urges emergency action to blunt hypervisor flaws

• US lawmakers want ByteDance to divest TikTok or face a ban

• Here’s something else AI can do: expose bad infosec to give cyber-crims a toehold in your organization

• Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

• Today’s biggest AI security challenges

• Watch Out for Spoofed Zoom, Skype, Google Meet Sites Delivering Malware

• Cyber Attack on Canada FINTRAC and IBM Cyber Attack response training

• Tazama: Open-source real-time fraud management

• Delving into Dalvik: A Look Into DEX Files

• Major shifts in identity, ransomware, and critical infrastructure threat trends

• How to Adopt Phishing-Resistant MFA

• A cybercriminal is sentenced, will it make a difference?

• 78% of MSPs identify cybersecurity as prime IT challenge

• WoTLabs – 21,994 breached accounts

• Home Voice Assistant Security: Protecting Your Privacy

• 13 WhatsApp Scams to Know in 2024 + Tips to Stay Safe

• NSA Details Seven Pillars Of Zero Trust

• Hackers Use Number of Legitimate Tools in Ransomware Attacks

• Hackers Exploiting iOS 0-Day To Attack iPhones – Patch Now!

• Lawsuit claims gift card fraud is the gift that keeps on giving, to Google

• ISC Stormcast For Thursday, March 7th, 2024 https://isc.sans.edu/podcastdetail/8884, (Thu, Mar 7th)

• Smart Home Automation: Balancing Convenience and Security

• Chinese chap charged with stealing Google’s AI datacenter secrets

• What Is Domain Monitoring and Why Do I Need It?

• How Does Identity Theft Affect Your Business?

Generated on 2024-03-08 23:55:58.551071