IT Security News Daily Summary 2024-03-09

• Hacker Claims Breaching US Federal Contractor Acuity, Selling ICE, USCIS Data

• Seamless Integration: Connecting AWS Lambda to RDS and Writing Data Effortlessly

• CISA adds JetBrains TeamCity bug to its Known Exploited Vulnerabilities catalog

• Safeguarding the Code That Drives Modern Vehicles

• Microsoft Employee Raises Alarms Over Copilot Designer and Urges Government Intervention

• CSI/NSA Joint Best Practices for Cloud Security

• USENIX Security ’23 – “Employees Who Don’t Accept the Time Security Takes Are Not Aware Enough”: The CISO View of Human-Centred Security

• Critical Fortinet FortiOS bug CVE-2024-21762 potentially impacts 150,000 internet-facing devices

• TeamCity Software Vulnerability Exploited Globally

• Former Google Employee Charged with Stealing AI Secrets

• Ransomware Group Stormous Takes Responsibility for Cyberattack on Belgian Brewery

• China State-Sponsored Spies Hack Site and Target User Systems in Asia

• International Women’s Day: Expanding cybersecurity opportunities in the era of AI

• Russian Hackers Stole Microsoft Source Code—and the Attack Isn’t Over

• Security News This Week: Russian Hackers Stole Microsoft Source Code—and the Attack Isn’t Over

• South St. Paul Public Schools Grapple with Ongoing Tech Disruption

• Fidelity Faces Second Data Breach Linked to Third-Party Provider: Infosys McCamish

• NSA Releases Top Ten Best Practices For Cloud Environments

• Solix Empowers the Data-Driven Enterprise With Comprehensive Data Management and Integration Solutions

• New Email Scam Targets NTLM Hashes in Covert Data Theft Operation

• Microsoft Unveiled Cyberattack By Russian Group Midnight Blizzard Targets Email

• As the Change Healthcare outage drags on, fears grow that patient data could spill online

• Salt Security, API Posture Governance, and the NIST Cybersecurity Framework 2.0

• Zero Trust in Cybersecurity: from myth to the guide

• BianLian GOs for PowerShell After TeamCity Exploitation

• Microsoft Confirms Russian Hackers Stole Source Code, Some Customer Secrets

• Augmented Reality (Ar) Vs. Virtual Reality (Vr)

• APK.TW – 2,451,197 breached accounts

• Retail Tech Deep-Dive: Meraki MV Smart Cameras

• 5G Technology: Revolutionizing Connectivity

• Sam Altman reinstated to OpenAI board after investigation clears him of wrongdoing

• Threat Group Assessment: Muddled Libra (Updated)

• Cybercrime crew Magnet Goblin bursts onto the scene exploiting Ivanti holes

• IT Security News Daily Summary 2024-03-08

• Friday Squid Blogging: New Plant Looks Like a Squid

• Four Reasons to Protect the Internet this International Women’s Day

• Four Infosec Tools for Resistance this International Women’s Day

• Four Actions You Can Take To Protect Digital Rights this International Women’s Day

• Four Voices You Should Hear this International Women’s Day

• CrowdStrike Extends Scope and Reach of Cybersecurity Portfolio

• QNAP fixed three flaws in its NAS devices, including an authentication bypass

• The Atlas of Surveillance Removes Ring, Adds Third-Party Investigative Platforms

• Leaking NTLM Credentials Through Windows Themes

• Enhance Customers? Security Posture: Akamai SOCC Advanced Service

• AkaNAT: How Akamai Uses Machine Learning to Detect Shared IPs

• Elevate Your Web Monitoring Experience with Managed Web Monitoring

• What Is DNS Spoofing? + 5 Tips to Prevent It

• NIST Cybersecurity Framework: A Cheat Sheet for Professionals

• Midnight Blizzard accessed Microsoft systems, source code

• IONIX ASM Platform Adds Testing Tools to Simulate Cyberattacks

• Unsecured Video Doorbells Sold on Major Platforms: Millions at Risk of Hacking

• Apple releases MacOS Sonoma 14.4 with a whopping 64 bug fixes

• Font Security Still A Helvetica Of A Problem, Says Canva

• Change Healthcare Hacker Linked To Espionage Gangs

• Bitcoin Briefly Rises To Record High Over $70,000

• Microsoft Under Constant Attack By Russian Hackers, Filing Says

• Cloud security vs. network security: What’s the difference?

• Supercharge your HIMSS24 experience by meeting with our Customer Experience team

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #281 – The Needed Changes

• USENIX Security ’23 – Work-From-Home And COVID-19: Trajectories Of Endpoint Security Management In A Security Operations Center

• Russian Hackers Access Source Code in Ongoing Attack on Microsoft

• Russia-linked Midnight Blizzard breached Microsoft systems again

• Unauthenticated Stored XSS Vulnerability Patched in Ultimate Member WordPress Plugin

• Microsoft Says Russian Gov Hackers Stole Source Code After Spying on Executive Emails

• Essays from the Second IWORD

• Confidential Containers for Financial Services on Public Cloud

• An Overview of the Joint Cyber Defense Collaborative Priorities

• Real Madrid: Pushing the Boundaries of What’s Possible at the Santiago Bernabéu Stadium

• You can now add extra security to your ChatGPT – here’s how and why you should

• Change Healthcare Gets Pharmacy Systems Up After Ransomware Attack

• NSA Shares Key Strategies for Improved Network Security

• Apple Released Security Updates for Multiple Products

• Spyware makers express concern after US sanctions spyware veteran

• Microsoft confirms Russian spies stole source code, accessed internal systems

• Cisco Fixes High-Severity Code Execution and VPN Hijacking Flaws

• Introduction to Modern Data Stack

• Teslas vulnerable to Flipper Zero hack – here’s how to protect yourself

• TikTok Ban Incoming — but ByteDance Fights Back

• SIM linked data security measure to defend against phishing attacks

• Celebrating Women’s History Month

• Protect Your Cloud Environments with Data Security Observability

• CISA Outlines Efforts to Secure Open Source Software

• Researchers Develop AI “Worms” Capable of Inter-System Spread, Enabling Data Theft Along the Way

• electronic protected health information (ePHI)

• The Change Healthcare attack: Explaining how it happened

• Russian spies keep hacking into Microsoft in ‘ongoing attack,’ company says

• Thinking about a Career in Network Security? Follow This Path

• Cisco addressed severe flaws in its Secure Client

• Patch now! VMWare escape flaws are so serious even end-of-life software gets a fix

• Change Healthcare registers pulse after crippling ransomware attack

• In Other News: Google AI Hacking, Font Vulnerabilities, IBM Training Facility

• Defense Unicorns Raises $35 Million for National Security Software Solutions

• Reach Security Raises $20M to Help Manage Cybersecurity Products

• Canadian City Says Timescale for Recovering from Ransomware Attack ‘Unknown’

• GhostLocker 2.0 Unleashes Cyber Haunting Spree in the Middle East, Africa, and Asia

• Scam: Chennai Woman Exposes Cyber Crime Involving Adhaar Card, Courier, Drugs

• Are You Ready to Protect Your Company From Insider Threats? Probably Not

• Apple Addressed Two iOS Zero-Days With Latest Updates

• Check Point Research Alerts: Financially Motivated Magnet Goblin Group Exploits 1-Day Vulnerabilities to target Publicly Facing Servers

• Going the Distance: What Channel Women Can Learn From Marathon Swimmer Diana Nyad

• Change Healthcare Restores Pharmacy Services Disrupted by Ransomware

• Meta Details WhatsApp and Messenger Interoperability to Comply with EU’s DMA Regulations

• Update on Microsoft Actions Following Attack by Nation State Actor Midnight Blizzard

• Women and cyber security: a must to boost the future

• Dropbox Used to Steal Credentials and Bypass MFA in Novel Phishing Campaign

• Tesla Owners Lose Battery Range Class Action Bid

• A Close Up Look at the Consumer Data Broker Radaris

• Swiss cheese security? Play ransomware gang milks government of 65,000 files

• Unpatched Sceiner Smart Lock Vulnerabilities Allow Hackers to Open Doors

• Chinese Cyberspies Target Tibetans via Watering Hole, Supply Chain Attacks

• A Taxonomy of Prompt Injection Attacks

• Update now! JetBrains TeamCity vulnerability abused at scale

• Web-Based PLC Malware: A New Frontier in Industrial Cybersecurity Threats

• US Bill To Ban Or Divest TikTok, Advances In House

• Chinese Evasive Panda Targets Tibetans with Nightdoor Backdoor

• MITRE Releases Aviation Risk Identification and Assessment Software Program

• Nigerian National Pleads Guilty for Hacking Business & Individual Emails

• Quantum Attack Protection Added to HP Business PCs

• State AGs Send Letter to Meta Asking It to Take ‘Immediate Action’ on User Account Takeovers

• Secrets Sensei: Conquering Secrets Management Challenges

• UnitedHealth Sets Timeline to Restore Change Healthcare Systems After BlackCat Hit

• Cisco patches Secure Client VPN flaw that could reveal authentication tokens (CVE-2024-20337)

• Identiv releases bitse.io 3.0, simplifying the deployment of IoT applications

• Salesforce Launches AI Tools For Doctors, Healthcare Sector

• Championing Diversity in Data Protection

• Secure by Design: Google’s Perspective on Memory Safety

• Why Edtech Industries Need Cybersecurity?

• Women in Tech 2024

• Chinese Panda APT Hacking Websites To Infect Windows And MacOS Users

• International Women’s Day 2024: Inspiring inclusion for the next generation

• UAC-0050 Hacked Thousands Of Emails To Launch Malspam Attack

• Enjoy 2 Years of Unrestricted Access to Your Favorite Content for Only $40

• Play ransomware attack on Xplain exposed 65,000 files containing data relevant to the Swiss Federal Administration.

• QEMU Emulator Exploited as Tunneling Tool to Breach Company Network

• Cisco Issues Patch for High-Severity VPN Hijacking Bug in Secure Client

• 100% Surge in Malicious Emails Bypassing Secure Email Gateways

• Empowering women and transforming economies globally through inclusive partnerships

• What Happened in Cybersecurity in 2023: A Summary of Security Incidents, Vulnerability Information, and Cybersecurity Trends

• NIS2: 3.Establish a cybersecurity framework

• CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability

• Google Engineer Arrested for Stealing AI Tech Secrets

• March 2024 Patch Tuesday forecast: A popular framework updated

• How new and old security threats keep persisting

• Immediate AI risks and tomorrow’s dangers

• Understanding Types of Cloud Malware and Effective Defense Strategies

• Play ransomware leaks Swiss government data comprising sensitive information

• Securing the future: Addressing cybersecurity challenges in the education sector

• Leveraging AI and automation for enhanced cloud communication security

• Top 4 Essential Strategies for Securing APIs To Block Compromised Tokens

• OpenARIA: Open-source edition of the Aviation Risk Identification and Assessment (ARIA)

• Font security ‘still a Helvetica of a problem’ says Australian graphics outfit Canva

• New infosec products of the week: March 8, 2024

• Zama Raises $73M in Series A Led by Multicoin Capital & Protocol Labs for Fully Homomorphic Encryption

• News alert: Badge expands availability of ‘Enroll Once and Authenticate on Any Device’ software

• Workers with AI skills can expect higher salaries – depending on their role

• India’s Election Commission fixes privacy flaws that exposed citizens’ information-seeking data

• ISC Stormcast For Friday, March 8th, 2024 https://isc.sans.edu/podcastdetail/8886, (Fri, Mar 8th)

• Setup With Pritunl

• Securing open source software: Whose job is it, anyway?

• Safe Online Gaming: Protecting Personal Information

• Quantum Computing: The Future of Technology

• MacOS Patches (and Safari, TVOS, VisionOS, WatchOS), (Fri, Mar 8th)

• Enhancing protection: Updates on Microsoft’s Secure Future Initiative

• Evolving Microsoft Security Development Lifecycle (SDL): How continuous SDL can help you build more secure software

• Annual State of Email Security by the Numbers

Generated on 2024-03-09 23:55:46.859561