IT Security News Daily Summary 2024-03-18

• Mintlify says customer GitHub tokens exposed in data breach

• Don’t be like these 900+ websites and expose millions of passwords via Firebase

• PoC exploit for critical RCE flaw in Fortra FileCatalyst transfer tool released

• Fujitsu Scrambles After Malware Attack: Customer Data Potentially Breached

• Rethinking DevOps in 2024: Adapting to a New Era of Technology

• Five AI topics to discuss with your CEO

• Fujitsu reveals malware installed on internal systems, risk of customer data spill

• 5 Best Practices to Secure Azure Resources

• Exploitation activity increasing on Fortinet vulnerability

• US Government Investigating Facebook For Role In Illegal Drug Sales

• Fujitsu finds malware on company systems, investigates possible data breach

• New AcidRain Linux Malware Variant “AcidPour” Found Targeting Ukraine

• USENIX Security ’23 – Network Responses To Russia’s Invasion of Ukraine In 2022: A Cautionary Tale For Internet Freedom

• Vulnerability Summary for the Week of March 11, 2024

• cloud load balancing

• cloud application

• Fujitsu suffered a malware attack and probably a data breach

• More than 133,000 Fortinet appliances still vulnerable to month-old critical bug

• SOPS [Security Zines]

• TikTok ‘Ban’ — ByteDance CEO and EFF are BFFs

• McDonald’s Attributes Worldwide Outage to Third-Party Provider

• New DEEP#GOSU Malware Campaign Targets Windows Users with Advanced Tactics

• SubdoMailing and the Rise of Subdomain Phishing

• C++ creator rebuts White House warning

• Cyber baddies leak 70M+ files online, claim they’re from AT&T

• Moldovan Behind E-Root Marketplace Gets US Federal Prison Term

• Tor Launches WebTunnel Bridges To Evade Censorship

• User Privacy: Reddit Discloses FTC Probe into AI Data Licensing Ahead of IPO

• CISA Publishes Repository for Software Attestation and Artifacts

• FBI and Interpol issue cyber alerts on ransomware and pig butchering scams

• Esports league postponed after players hacked midgame

• FCC Agrees to Cyber Trust Mark for IoT Products

• Repository for Software Attestation and Artifacts Now Live

• UK Government Releases Cloud SCADA Security Guidance

• USENIX Security ’23 – Wentao Guo, Jason Walter, Michelle L. Mazurek – The Role Of Professional Product Reviewers In Evaluating Security And Privacy

• Too Much Escaping Backfires, Allows Shortcode-Based XSS Vulnerability in Contact Form Entries WordPress Plugin

• Hackers Using Weaponized SVG Files in Cyber Attacks

• Productiv launches Sidekick, an AI-powered assistant for smarter SaaS management

• A Tale of Overcoming Cyber Threats with Auto Pentesting and CTEM

• North Korean Hackers’ $12M Ethereum Laundering Via Tornado Cash Unveiled

• Russian Hackers Breach Microsoft’s Security: What You Need to Know

• Over 50,000 Vulnerabilities Discovered in DoD Systems Through Bug Bounty Program

• Splunk Joins Cisco: Our Partner Ecosystems Just Got Even Stronger

• New Attack Shows Risks Of Browser Giving Websites Access To GPU

• Haiti: Machete-Wielding Militias Battle Gangs In Port-au-Prince

• STOP Ransomware Gains Stealthier Variant

• Pentagon Received Over 50k Vulnerability Reports Since 2016

• Cisco Completes $28 Billion Acquisition of Splunk

• Fujitsu Data Breach Impacts Personal, Customer Information

• Decentralised Identity: The Next Revolution Enabled by Block Chain Technology

• Microsoft Addressed ~60 Vulnerabilities With March Patch Tuesday

• New GhostRace Vulnerability In CPUs May Leak Data

• Dark Web Tool Arms Ransomware Gangs: E-commerce & Aviation Industries Targeted

• COTI Announces Upcoming V2 Airdrop Campaign Worth +10M USD

• Embrace the Future of Remote Access: Transitioning from Legacy VPNs to SASE

• The Hidden Risks Within Ethereum’s CREATE2 Function: A Guide to Navigating Blockchain Security

• Top 40 Cybersecurity Companies You Need to Know 2024

• Fortra Patches Critical RCE Vulnerability in FileCatalyst Transfer Tool

• Remove WordPress miniOrange plugins, a critical flaw can allow site takeover

• Cyberattack gifts esports pros with cheats, forcing Apex Legends to postpone tournament

• New Attack Shows Risks of Browsers Giving Websites Access to GPU

• Hacker Conversations: Stephanie ‘Snow’ Carruthers, Chief People Hacker at IBM X-Force Red

• Pentagon Received Over 50,000 Vulnerability Reports Since 2016

• Zero-Trust Network Access: Why so Many Teams Get it Wrong

• TRAI Updates Regulations to Prevent SIM Swap Fraud in Telecom Porting

• Deloitte unveils CyberSphere platform for simplified cyber program management

• Three New Critical Vulnerabilities Uncovered in Argo

• New Acoustic Keyboard Side Channel Attack Let Attackers Steal Sensitive Data

• Initializing Services in Node.js Application

• Google researchers unveil ‘VLOGGER’, an AI that can bring still photos to life

• See How Our Cloud-Delivered Security Services Provide 357% ROI

• Hackers Using Sneaky HTML Smuggling to Deliver Malware via Fake Google Sites

• Microsoft: 87% of UK Organizations Vulnerable to Costly Cyber-Attacks

• Tech giant Fujitsu says it was hacked, warns of data breach

• A New Day for Data: Cisco and Splunk

• Drones and the US Air Force

• Navigating the NSA’s New Zero-Trust Guidelines

• Cyber Security Today, March 18, 2024 – Fix this Python vulnerability, patch these industrial control system products, the latest data breaches and more

• NIST NVD Halt Leaves Thousands of Vulnerabilities Untagged

• Sign up for a Tour at the RSA Conference 2024 SOC

• Bankman-Fried Deserves Up To 50 Years In Jail, Prosecutors Say

• TikTok US Sales ‘Hit $16bn’, ByteDance Nears Meta In World Revenues

• CISA Adds JetBrains TeamCity Vulnerability To KEV Catalog

• IoT Live Patching Techniques: Securing a Future without Disruption

• Cyberattackers Exploit QEMU for Stealthy Network Tunneling

• Ransomware attack on Fujitsu Servers

• Demystifying Serverless Security: Safeguarding the Future of Cloud Computing

• Discontinued WordPress Plugin Flaw Exposes Websites to Cyber Attacks

• The Aviation and Aerospace Sectors Face Skyrocketing Cyber Threats

• PoC Published for Critical Fortra Code Execution Vulnerability

• Moldovan Operator of Credential Marketplace Sentenced to US Prison

• Nissan breach exposed data of 100,000 individuals

• Loft Labs simplifies multi-cluster Kubernetes management for Rancher users

• AI Security Company Backtracks On UK Testing Claims

• Senators Take Up TikTok Bill After Italy Fine Over Harmful Content

• ShadowSyndicate Hackers Exploiting Aiohttp Vulnerability To Access Sensitive Data

• NHS Dumfries and Galloway Warns of “Significant” Data Theft

• WordPress Admins Urged to Remove miniOrange Plugins Due to Critical Flaw

• McDonald’s International Outage Caused By Third Party

• Norfolk County Council Wins $490m Payout From Apple

• Hackers Launching AI-Powered Cyber Attacks to Steal Billions

• A week in security (March 11 – March 17)

• Federated Learning for Cybersecurity: Collaborative Intelligence for Threat Detection

• Firmware Monitoring is Just a Snapshot Away

• IMF Investigates Serious Cybesecurity Breach

• Earth Krahang Exploits Intergovernmental Trust to Launch Cross-Government Attacks

• Fujitsu Hacked – Attackers Infected The Company Computers with Malware

• Understanding ISO 27001:2022 Annex A.5 – Information Security Policies

• Email accounts of the International Monetary Fund compromised

• IMF Emails Hacked

• Africa Internet Outages Persist After Multiple Cables Cut

• 43 million workers potentially affected in France Travail data breach

• The UK’s Online Safety Act: a breakdown of key changes

• GBHackers Weekly Round-Up: Cyber Attacks, Vulnerabilities, Threats & New Cyber Stories

• Get on CompTIA Certification Track With These $30 Study Guides

• Infosec teams must be allowed to fail, argues Gartner

• Hackers Stolen 70 Million AT&T Sensitive Customers Data

• The TikTok Ban Bill, Your Car is Spying on You, Signal’s Username Update

• APT28 Hacker Group Targeting Europe, Americas, Asia in Widespread Phishing Scheme

• Filipino police free hundreds of slaves toiling in romance scam operation

• Public anxiety mounts over critical infrastructure resilience to cyber attacks

• Microsoft Entra ID: The Complete Guide to Conditional Access Policies

• Harnessing the power of privacy-enhancing tech for safer AI adoption

• DarkGPT – A ChatGPT-4 Powered OSINT Tool To Detect Leaked Databases

• Quicmap: Fast, open-source QUIC protocol scanner

• The dark side of GenAI

• Protecting distributed branch office environments from ransomware

• ChatGPT side-channel attack has easy fix: token obfuscation

• ISC Stormcast For Monday, March 18th, 2024 https://isc.sans.edu/podcastdetail/8898, (Mon, Mar 18th)

• Gamified Learning: Using Capture the Flag Challenges to Supplement Cybersecurity Training [Guest Diary], (Sun, Mar 17th)

• IT Security News Daily Summary 2024-03-17

• Threat actors leaked 70,000,000+ records allegedly stolen from AT&T

• USENIX Security ’23 – Tanusree Sharma, Zhixuan Zhou, Andrew Miller, Yang Wang – A Mixed-Methods Study Of Security Practices Of Smart Contract Developers

• 10 Takeaways from the 2024 Gartner IAM Summit UK

• Industry Benchmark Report, Issued by The FAIR Institute, Unveils the Dollar Impact of Cyber Incidents

• Beyond Resumes: Uncovering Hidden Talent at the New Jersey Judiciary

• Leak of Greek Diaspora Emails Shakes Government: A Closer Look

• “gitgub” malware campaign targets Github users with RisePro info-stealer

• Fraudulent Antivirus Software Faces FTC Lawsuit After Raking in Millions

• Private AI Chatbot Not Safe From Hackers With Encryption

• Cyber Attacks Threaten Essential Services

• Security Affairs newsletter Round 463 by Pierluigi Paganini – INTERNATIONAL EDITION

• I tested this $40 security camera from Amazon and it now has a place in my home

• How to Think Like a Hacker — and Defend Your Data

• In the rush to build AI apps, please, please don’t leave security behind

• Week in review: Cybersecurity job openings, hackers use 1-day flaws to drop custom Linux malware

• Dark Web Market Admin Gets 42 Months Prison for Selling Login Passwords

• StopCrypt Ransomware Utilizing Multi-Stage Shellcodes To Attack Windows

• eSIM Vulnerabilities: SIM Swappers Exploit Flaws, Hijack Phone Numbers

• Obfuscated Hexadecimal Payload, (Sat, Mar 16th)

• Green Technology Innovations: Sustainable Solutions

Generated on 2024-03-18 23:55:42.875693