IT Security News Daily Summary 2024-03-15

• Navigating Certificate Lifecycle Management (CLM) and Mobile Device Management (MDM) With an Effective PKI Solution

• 5 Best VPNs for Travel in 2024 (Free & Paid VPNs)

• Simplify DNS Policy Management With New Umbrella Tagging APIs

• Satellites for quantum communications

• Lawmakers Urge Facebook To Kill “Coercive” Privacy Fee

• Friday Squid Blogging: Operation Squid

• The SAFE Act to Reauthorize Section 702 is Two Steps Forward, One Step Back

• Certified Information Security Manager (CISM)

• Securing Your Software Development in Compliance with CISA: How OX Security Simplifies the Process

• Apple researchers achieve breakthroughs in multimodal AI as company ramps up investments

• Immature equals insecure: why cybersecurity maturity testing is a must

• Breach Ready: Fortifying Your Defenses in the Age of Cyberattacks

• Analyzing KOSA’s Constitutional Problems In Depth

• Thousands of Young People Told Us Why the Kids Online Safety Act Will Be Harmful to Minors

• virus (computer virus)

• 7 cybersecurity conferences to attend in 2024

• Building a Sustainable Data Ecosystem

• As if working at Helldesk weren’t bad enough, IT helpers now targeted by cybercrims

• Moldovan citizen sentenced in connection with the E-Root cybercrime marketplace case

• 5 Big Unanswered Questions About the TikTok Bill

• San Diego City Council Breaks TRUST

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• Location Data Tracks Abortion Clinic Visits. Here’s What to Know

• Cloudflare loses 22% of its domains in Freenom .tk shutdown

• How to find out if an AirTag is tracking you

• GhostRace – New Data Leak Vulnerability Affects Modern CPUs

• How to verify a data breach

• Ransomware’s appetite for US healthcare sees known attacks double in a year

• Sinking Section 702 Wiretap Program Offered One Last Lifeboat

• ACI Worldwide and comforte AG Pave the Way for Payment Modernization with PCI DSS v4.0 Compliance

• Microsoft Preps AI-Based Copilot for Security for April 1 Release

• #MIWIC2024: Andrea Cullen, Co-Founder of CAPSLOCK Education Ltd.

• How to Figure Out What Your Car Knows About You (and Opt Out of Sharing When You Can)

• What You Need to Know to Embrace the Imminent Quantum Shift for Your Cryptography Future

• How Cloud Solutions Can Lead to Stronger, More Secure IT Operations

• Addressing Bias in Insider Risk Monitoring

• French Gov. Leaks 43 Million People’s Data — ‘France Travail’ Says Sorry

• Restrictions on Gemini Chatbot’s Election Answers by Google

• Incognito Market Engages in Large-Scale Extortion of Buyers and Sellers on the Darknet

• NIST National Vulnerability Database Disruption Sees CVE Enrichment on Hold

• Google Chrome now offers phishing and malware protection

• New Malware “BunnyLoader 3.0” Steals Credentials and Crypto

• Google Chrome now better protects you against risky websites and weak passwords

• Sophos: Cyber Security Professional Burnout Is Widespread, Creating Risk for APAC Organisations

• Codezero Raises $3.5 Million for DevOps Security Solution

• Record Breaking $153,000+ Already Invested into the Security of the WordPress Ecosystem by Wordfence – More to Come!

• MFA vs 2FA: Which Is Best for Your Business?

• Council Gives Green Light to Europe’s Corporate Sustainability Due Diligence Directive

• Ransomware Roundup – RA World

• Cyberattack is Wreaking Havoc on US HealthCare Providers.

• HackerGPT 2.0 Unveils New AI Cyber Defense Strategies

• Cop Shop Rapped For Completely Avoidable Web Form Blunder

• Banish OEM Self-Signed Certs And Roll Your Own LetsEncrypt

• Member Of LockBit Ransomware Group Sentenced To 4 Years In Prison

• Discontinued Security Plugins Expose Many WordPress Sites To Takeover

• Why Does The US Want To ban TikTok, And When Could It Happen?

• Latest SEC Cyber Rules Raise ‘Head Scratching’ Breach Disclosures

• The LockBit story: Why the ransomware affiliate model can turn takedowns into disruptions

• McDonald’s Suffers IT Outage In Different Countries

• Uptycs Cybersecurity Standup

• In Other News: CISA Hacked, Chinese Lock Backdoors, Exposed Secrets

• Strengthening Trust in Your Brand With Better Communication and Monitoring

• SMB Cyber Threats: Information-Stealing Malware, Ransomware, and BEC

• Security Flaws Discovered in ChatGPT Plugins

• AI-Powered Scams, Human Trafficking Fuel Global Cybercrime Surge: INTERPOL

• Multistage RA World Ransomware Exploits Group Policy Infrastructure

• UK Defence Secretary jet hit by an electronic warfare attack in Poland

• The Evolving Landscape of Security: From Vulnerability Management to CTEM

• Tech Support Firms Agree to $26M FTC Settlement Over Fake Services

• Discontinued Security Plugins Expose Many WordPress Sites to Takeover

• Third-Party ChatGPT Plugins Could Lead to Account Takeovers

• SpaceX Starship Completes Third Test Flight, But Burns Up On Reentry

• RedLine Malware Tops Charts by Hijacking 170M+ Passwords in the Last 6 Months

• Transforming the Economics of Superfast Broadband with Cisco Routed PON

• Cop shop rapped for ‘completely avoidable’ web form blunder

• Massive Data Breach Exposes Info of 43 Million French Workers

• Improving C++

• HSE Misconfiguration Exposed Over a Million Irish Citizens’ Vaccine Status

• Vodafone Sells Italian Operation For €8 Billion

• Threat Detection Report: Cloud Attacks Soar, Mac Threats and Malvertising Escalate

• 43 Million Possibly Impacted by French Government Agency Data Breach

• OpenSSL Patching: A Comprehensive Guide for System Administrators

• Inside the Rabbit Hole: BunnyLoader 3.0 Unveiled

• Network Security Policy

• Hiring Kit: Cryptographer

• Nominations Open for 2024’s European Cybersecurity Blogger Awards

• Google Chrome to Roll Out Real-time Phishing Protection

• Google Introduces Enhanced Real-Time URL Protection for Chrome Users

• Critical ChatGPT Plugins Flaw Let Attackers Gain Control Over Organization’s Account

• Hackers Exploit Windows SmartScreen Vulnerability to Install DarkGate Malware

• Hackers Claim 740GB of Data Stolen from Viber VOIP Platform

• Crypto Phishing Kit Impersonating Login Pages: Stay Informed

• Malicious Ads Targeting Chinese Users with Fake Notepad++ and VNote Installers

• Unveiling the True Purpose of Cyber Fraud Fusion Centers: Strengthening Digital Defense

• Key MITRE ATT&CK techniques used by cyber attackers

• Zscaler acquires Avalor for $350 million

• 90% of exposed secrets on GitHub remain active for at least five days

• Human risk factors remain outside of cybersecurity pros’ control

• Threat intelligence explained | Unlocked 403: A cybersecurity podcast

• AI and the future of corporate security

• Look Good & Gain Peace of Mind with Fairwinds’ Managed Kubernetes

• New infosec products of the week: March 15, 2024

• 2024-03-14: AsyncRAT and XWorm infection

• Navigating the Digital Operational Resilience Act (DORA)

• ISC Stormcast For Friday, March 15th, 2024 https://isc.sans.edu/podcastdetail/8896, (Fri, Mar 15th)

• Renewable Energy Technology: Powering the Future

• 5Ghoul Revisited: Three Months Later, (Fri, Mar 15th)

• Forget TikTok – Chinese spies want to steal IP by backdooring digital locks

• Cisco fixed high-severity elevation of privilege and DoS bugs

• IT Security News Daily Summary 2024-03-14

• ​​Microsoft named as a Leader in three IDC MarketScapes for Modern Endpoint Security 2024

• Recent DarkGate campaign exploited Microsoft Windows zero-day

• Making the Law Accessible in Europe and the USA

• JetBrains, Rapid7 clash over vulnerability disclosure policies

• CEO of Data Privacy Company Onerep.com Founded Dozens of People-Search Firms

• Discover the 3 Trends Driving API Security Compliance

• What a Cluster: Local Volumes Vulnerability in Kubernetes

• Cyber Strategy: Don?t Focus on Prevention ? Master Resilience

• TikTok’s Security Threats Go Beyond the Scope of House Legislation

• Expand your IT and cybersecurity skills with this $35 learning bundle

• “Build for Better” – Revolutionize Sustainability with AI, Observability, and Cisco Tech

• Revolutionizing Legal Data Security and Compliance

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #282 – ReadMe

• USENIX Security ’23 – Powering for Privacy: Improving User Trust in Smart Speaker Microphones with Intentional Powering and Perceptible Assurance

• Nissan Confirms Data Breach Affected 100,000 Customers and Employees

• FTC goes undercover to probe suspected antivirus scam, scores $26M settlement

• 2024-03-13: GootLoader activity

• Why U.S. House Members Opposed the TikTok Ban Bill

• Former Treasury Secretary Steve Mnuchin Gathers Investors To Buy TikTok – Report

• $1,313 Bounty Awarded for Privilege Escalation Vulnerability Patched in RegistrationMagic WordPress Plugin

• Get 408 hours of cybersecurity training with this $60 bundle

• cloud encryption

• Meta Sues Former VP, After Move To AI Startup

• Four Common CI/CD Pipeline Vulnerabilities

• Google is changing how Chrome detects and warns you about unsafe sites

• LockBit ransomware kingpin gets 4 years behind bars

• Privacy Perils: Experts Warn of Pitfalls in Sharing Pregnancy Photos Online

• Not everything has to be a massive, global cyber attack

• The best VPN deals right now

• Google gooses Safe Browsing with real-time protection that doesn’t leak to ad giant

• Webinar recap: 6 critical cyberthreats in 2024 and how to counter them

• TikTok faces ban in US unless it parts ways with Chinese owner ByteDance

• Ballistic Ventures Closes $360 Million Cybersecurity-Focused Fund

• UK Judge Rules Craig Wright Is Not Bitcoin’s ‘Satoshi Nakamoto’

• The Blink Mini 2’s weather resistance makes for a worthy Wyze Cam competitor

• Crypto Phishing Scams: $47M Lost in February

• TikTok Faces US Ban as House Votes to Compel ByteDance to Sell

• Healthy and Inclusive Learning Spaces

• Introducing Cisco Rail CBTC and Safety Solution

• Record breach of French government exposes up to 43 million people’s data

• Boat Dealer MarineMax Hit by Cyberattack

• Webinar: CISO Strategies for Boardroom Success

• Chrome’s Standard Safe Browsing Now Has Real-Time URL Protection

• Ransomware news trending on Google

• Google’s Safe Browsing protection in Chrome goes real-time

• Nissan Oceania data breach impacted roughly 100,000 people

• 23andMe sparks rethink about safeguarding data: on-premises vs. hybrid cloud strategies

• Researchers Find Flaws in OpenAI ChatGPT, Google Gemini

• New Report Suggests Surge in SaaS Assets, Employee Data Sharing

• Starting 2024 strong – The largest launch of security training from OffSec

• Getting to High-Fidelity Detections Faster with Context Creation Models

• Sophisticated Vishing Campaigns are Rising Exponentially Worldwide

• MarineMax’s Cyber Resilience: Responding to SEC on Cyberattack Incident

• Wordfence Intelligence Weekly WordPress Vulnerability Report (March 4, 2024 to March 10, 2024)

• Artificial Intelligence Act: Industry Reaction

• Microsoft is Opening AI-Powered “Copilot for Security” to Public

• International effort to disrupt cybercrime moves into operational phase

• Siemens SENTRON 7KM PAC3x20

• Siemens SENTRON

• Siemens SINEMA Remote Connect Server

• Siemens RUGGEDCOM APE1808

• Siemens Solid Edge

• Ted Schlein’s 2-year-old Ballistic Ventures has already raised a second $360 million fund

• Redefining Network Management: The Advantages of Cisco Managed Campus for MSPs

• Microsoft’s AI-Powered Copilot for Security Set for Worldwide Release

• Zscaler Acquires Avalor for $350 Million

• BotGuard Raises $13 Million to Protect Against Harmful Web Traffic

• Protect Yourself: Tips to Avoid Becoming the Next Target of a Microsoft Hack

• LockBit Ransomware Hacker Ordered to Pay $860,000 After Guilty Plea in Canada

• US Government to Investigate Change Healthcare Ransomware Attack

• French Employment Agency Data Breach Could Affect 43 Million People

• US to probe Change Healthcare’s data protection standards as lawsuits mount

• Expert Urges iPhone and Android Users to Brace for ‘AI Tsunami’ Threat to Bank Accounts

• Halo Security Dark Web Monitoring identifies and mitigates potential exposures

• Critical FortiClient EMS vulnerability fixed, (fake?) PoC for sale (CVE-2023-48788)

• Perception Point GPThreat Hunter allows cybersecurity experts to focus on in-depth investigations

• Hackers Use Weaponized Lnk File to Deploy AutoIt Malware

• Combining Threat Intelligence Platforms & Sandboxes for Efficient Security Operations – A DFIR Guide

• LockBit affiliate jailed for almost four years after guilty plea

• [Free & Downloadable] Information Security Policy Template – 2024

• Breaking: What is Going on with the NVD? Does it Affect Me?

• Cado Security enables organizations to investigate and respond to potential M365 threats

• Elevate Your Security Posture: Grafana for Real-Time Security Analytics and Alerts

• US Congress Goes Bang, Bang, On Tik-Tok Sale Or Ban Plan

• Poking Holes In Google Tech Bagged Bug Hunters $10M

• Meta Sues Brazenly Disloyal Former Exec Over Stolen Confidential Docs

• RedLine Malware Top Credential Stealer Of Last 6 Months

• Cisco Patches High Severity IOS RX Vulnerabilities

• Cisco Patches High-Severity IOS RX Vulnerabilities

• Microsoft Copilot for Security Official Launch Date Announced

• Navigating Application Security in the AI Era

• Thinking of Stealing a Tesla? Just Use Flipper Zero

• Hackers Exploit Vulnerability in Popup Builder Plugin for WordPress

• QuProtect Core Security secures Cisco routers against quantum threats

• CrowdStrike a Research Participant in Two Latest Center for Threat-Informed Defense Projects

• March 2024 Patch Tuesday: Two Critical Bugs Among 60 Vulnerabilities Patched

• CrowdStrike Launches SEC Readiness Services to Prepare Boardrooms for New Regulations

• Phishing Through Venmo

• Concentric AI introduces Copilot data risk module

• Researchers Detail Kubernetes Vulnerability That Enables Windows Node Takeover

• Artificial Intelligence Act: EU Parliament Approves Landmark AI Law

• Hackers Abuse Document Publishing (DDP) Websites to Launch Cyber Attacks

• Practical strategies for shadow IT management

• virus signature (virus definition)

• Complexity drives more than security risk. Secure Access can help with that too.

• Pi Day: How Hackers Slice Through Security Solutions

• Investigative Scenario, 2024-03-12

• #MIWIC2024: Zinet Kemal, Cloud Security Engineer – Best Buy

• Kubernetes Vulnerability Allows Remote Code Execution on Windows Endpoints

• Bill That Could Ban TikTok Passed in the House. Here’s What to Know

• Shadow AI – Should I be Worried?

• Cyber Madness Bracket Challenge – Register to Play

• Microsoft Copilot for Security: AI tool to Help Security and IT professionals

• Automakers Are Sharing Driver Data with Insurers without Consent

• Navigating the Digital Frontier: What Every High-Net-Worth Individual Needs to Know About Router and Firewall Vulnerabilities

• Google Paid $10m in Bug Bounties to Security Researchers in 2023

• Waymo Begins Los Angeles Ride-Hailing Service With Free Rides

• PoC for critical Arcserve UDP vulnerabilities published (CVE-2024-0799, CVE-2024-0800)

• RedCurl Cybercrime Group Abuses Windows PCA Tool for Corporate Espionage

• 3 Things CISOs Achieve with Cato

• Bitcoin Fog Operator Convicted for Stealing Over $400M

• Nissan Data Breach Affects 100,000 Individuals

• Government Launches Probe Into Change Healthcare Data Breach

• Fortinet Patches Critical Bug in FortiClient EMS

• A patched Windows attack surface is still exploitable

• Meta Sues Former VP After Defection to AI Startup

• Increase in the number of phishing messages pointing to IPFS and to R2 buckets, (Thu, Mar 14th)

• Silicon UK In Focus Podcast: Can Tech Innovation Coexist with Sustainability?

• Open source is not insecure

• Microsoft Copilot for Security is generally available on April 1, 2024, with new capabilities

• Unveiling the depths of Residential Proxies providers

• Keep Your Network Secure With This $39.99 CompTIA Bundle

• Ande Loader Malware Targets Manufacturing Sector in North America

• 150K+ Networking Devices & Apps Exposed Online With Critical Vulnerabilities

• Researchers found multiple flaws in ChatGPT plugins

• How to share sensitive files securely online

• 5M WordPress Websites At Risk Amid LiteSpeed Plugin Flaw

• Nigeria’s Youverify raises $2.5M to enhance anti-money laundering compliance

• 16-31 December 2023 Cyber Attacks Timeline

• Hackers Abuse Amazon & GitHub to Deploy Java-based Malware

• Immutable data storage is last line of defense against ransomware

• Only 13% of medical devices support endpoint protection agents

• MobSF: Open-source security research platform for mobile apps

• Fortinet Warns of Severe SQLi Vulnerability in FortiClientEMS Software

• DarkGate Malware Exploits Recently Patched Microsoft Flaw in Zero-Day Attack

• How teams can improve incident recovery time to minimize damages

• IT leaders think immutable data storage is an insurance policy against ransomware

• Cohesity Simplifies Data Management and Security for Developers

• A bug in an Irish government website that exposed COVID-19 vaccination records took two years to publicly disclose

• DCIM Software is the Key to Uptime and Performance

• ISC Stormcast For Thursday, March 14th, 2024 https://isc.sans.edu/podcastdetail/8894, (Thu, Mar 14th)

• Cyber Physical Systems: Integrating Digital and Physical Worlds

• US Congress goes bang, bang, on TikTok sale-or-ban plan

• Nissan to let 100,000 Aussies and Kiwis know their data was stolen in cyberattack

• Biodegradable Technology: Sustainable Innovations

• Nissan to alert 100,000 Aussies and Kiwis about data loss incident

Generated on 2024-03-15 23:56:00.045014