IT Security News Daily Summary 2024-03-20

• Users say Glassdoor added real names to user profiles without their consent

• OpenAI’s GPT store is brimming with promise – and spam

• The best VPN routers of 2024

• How to defend against phishing as a service and phishing kits

• Introducing Cisco U. Spotlight

• Critical flaw in Atlassian Bamboo Data Center and Server must be fixed immediately

• What Is Spoofing? 10 Types + How to Prevent It

• Texas Adult Site Age Verification Law Sparks 234.8% VPN Surge

• Securing Cloud Infrastructure: Leveraging Key Management Technologies

• U.S. data privacy protection laws: 2024 guide

• It’s tax season, and scammers are a step ahead of filers, Microsoft says

• EFF Seeks Greater Public Access to Patent Lawsuit Filed in Texas

• API Governance: Ensuring Control and Compliance in the Era of Digital Transformation

• GitHub previews AI-powered code scanning autofix

• US task force aims to plug security leaks in water sector

• Ivanti fixes RCE vulnerability reported by NATO cybersecurity researchers (CVE-2023-41724)

• Theft Of Tesla Battery Manufacturing Secrets Triggers Arrest

• Some of the Most Popular Websites Share Your Data With Over 1,500 Companies

• DevSecOps: Bridging the Gap Between Speed and Security

• AI used extensively for security but not coding, JFrog survey finds

• 1 in 4 Organizations Shut Down OT Operations Due to Cyberattacks: Survey

• Pwned by the Mail Carrier

• New Sysrv Botnet Variant Makes Use of Google Subdomain to Spread XMRig Miner

• Misconfigurations in Google Firebase lead to over 19.8 million leaked secrets

• Google Fined 250 Million Euros By French Competition Watchdog

• Russia Warns US Over SpaceX ‘Spy Satellites’

• Cyber Flashing: A Digital Intrusion

• CISA Warns Critical Infrastructure Leaders of Volt Typhoon

• Fraudsters Are Posing As The FTC To Scam Consumers

• GitHub’s latest AI tool can automatically fix code vulnerabilities

• Hacker Caught Stealing Personal Data of 132,000 Individuals Pleads Guilty

• Microsoft Hires Influential AI Figure Mustafa Suleyman to Head up Consumer AI Business

• EPA and White House Raise Alarm on Water Cybersecurity

• Microsoft Threat Intelligence unveils targets and innovative tactics amidst tax season

• Netgear wireless router open to code execution after buffer overflow vulnerability

• Abusing the DHCP Administrators Group to Escalate Privileges in Windows Domains

• Biden Administration issues emergency alert against cyber-attacks on critical infrastructure

• Apple’s Tim Cook Reassures China Of Supply Chain Importance

• London Clinic probes claim staffer tried to peek at Princess Kate’s records

• Facebook Will Make Its “Pay For Privacy” Model Cheaper To Appease Regulators

• Apex Legends hacker said he hacked tournament games ‘for fun’

• GitHub’s latest AI tool that can automatically fix code vulnerabilities

• Here’s Why Tracking Everything on the Dark Web Is Vital

• AT&T Denies Involvement in Massive Data Leak Impacting 71 Million People

• E-Commerce Scam: Read These 5 Tips to Stay Safe from Fake Sites

• Zoom Compliance Manager helps organizations fulfill regulatory requirements

• Study Uncovers 27% Spike in Ransomware; 8% Yield to Demands

• 2024-03-19: DarkGate infection

• New ‘Loop DoS’ Attack Impacts Hundreds of Thousands of Systems

• Threat actors actively exploit JetBrains TeamCity flaws to deliver malware

• #MIWIC2024: Lisa Ventura MBE, Founder of Cyber Security Unity Ltd.

• The Tech Apocalypse Panic is Driven by AI Boosters, Military Tacticians, and Movies

• DataDome Account Protect provides security for login and registration endpoints

• $601 Bounty Awarded for Interesting Cross-Site Request Forgery to Local JS File Inclusion Vulnerability Patched in File Manager WordPress Plugin

• Microsoft Hires DeepMind Co-Founder Mustafa Suleyman

• SOC 2 Audits as a Pillar of Data Accountability

• Proofpoint: APAC Employees Are Choosing Convenience, Speed Over Cyber Security

• Increase Market Share Quickly with Cisco Specializations and GTM Tools

• Serial extortionist of medical facilities pleads guilty to cybercrime charges

• Atlassian Patches Critical Vulnerability in Bamboo Data Center and Server

• RaaS groups increasing efforts to recruit affiliates

• A prescription for privacy protection: Exercise caution when using a mobile health app

• Stalkerware Usage Surging, Despite Data Privacy Concerns

• Fraud Risk For Vans Customers After Data Breach

• Google Firebase May Have Exposed 125M Records From Misconfigurations

• ControlUp Secure DX reduces endpoint management complexity

• Semgrep Assistant boosts AppSec team productivity using AI

• NCSC Released an Advisory to Secure Cloud-hosted SCADA

• Secure Your Heroku Apps With SSL

• AI-generated deepfakes and investment scams

• The UK energy sector faces an expanding OT threat landscape

• UK Government: 75% of UK Businesses Experienced a Cyber Incident in 2023

• Scans for Fortinet FortiOS and the CVE-2024-21762 vulnerability, (Wed, Mar 20th)

• Elon Musk Replies To Far Right User, After Reinstatement Of X Account

• Check Point Wins First Place in Head-to-Head Firewall Testing Miercom 2024 NGFW Firewall Security Benchmark

• BunnyLoader 3.0 surfaces in the threat landscape

• Stalkerware usage surging, despite data privacy concerns

• Kubernetes 1.30: A Security Perspective

• Closing the False Positives Gap for SOC Efficiency

• ChatGPT Meets Music: Suno’s Trailblazing Initiative Marks a New Era

• Colombian Government Impersonation Campaign Targets Latin American Individuals in Cyberattack

• Apiiro and Secure Code Warrior join forces for developer training integration

• Androxgh0st Exploits SMTP Services To Extract Critical Data

• Hackers Selling GlorySprout Malware with Anti-VM Features in underground Fourm for $300

• Exclusive: AWS, Accenture and Anthropic partner to accelerate enterprise AI adoption

• New Open License Generator helps ensure AI is used responsibly

• NSTAC’s Cyber Report — Leveraging AI to Measurably Reduce Risk

• Enhancing the Polaris Software Integrity Platform: Synopsys Introduces Dynamic Security Testing Features

• Tax scammer goes after small business owners and self-employed people

• Chrome 123, Firefox 124 Patch Serious Vulnerabilities

• Five Eyes Agencies Issue New Alert on Chinese APT Volt Typhoon

• Ukraine Arrests Hackers for Selling 100 Million Email, Instagram Accounts

• What Is the Dark Web? Myths and Facts About the Hidden Internet

• CyberSaint raises $21 million to accelerate market expansion

• Portnox Conditional Access for Applications improves data security for organizations

• Dissecting a complex vulnerability and achieving arbitrary code execution in Ichitaro Word

• Microsoft Notifies of Major Domain Change With Teams is Coming

• Cisco and Nvidia: Redefining Workload Security

• White House Calls on States to Boost Cybersecurity in Water Sector

• Virtual Event Today: Supply Chain & Third-Party Risk Summit 2024

• WordPress Plugin Flaw Exposes 40,000+ Websites to Cyber Attack

• Cyber Security Today, March 20, 2024 – Misconfigured Firebase instances are leaking passwords, a China-related threat actor is hacking governments and more

• TeamCity Flaw Leads to Surge in Ransomware, Cryptomining, and RAT Attacks

• Generative AI Security – Secure Your Business in a World Powered by LLMs

• Android malware, Android malware and more Android malware

• The ‘AT&T breach’—what you need to know

• Risk Management Firm CyberSaint Raises $21 Million

• Venafi Firefly with SPIFFE capability enables security teams to ensure governance and reduce risk

• The most prevalent malware behaviors and techniques

• Growing AceCryptor attacks in Europe

• Beyond Ctrl+Alt+Delete: Strategies For Erasing Negative Online Content

• Mintlify Confirms Data Breach Through Compromised GitHub Tokens

• Workings of MalSync Malware Unveiled: DLL Hijacking & PHP Malware

• What Is Log Management and Why you Need it

• Five Eyes tell critical infra orgs: take these actions now to protect against China’s Volt Typhoon

• New BunnyLoader Malware Variant Surfaces with Modular Attack Features

• Ukrainian Police Arrest Suspected Brute-Force Account Hijackers

• Understanding ISO 27001:2022 Annex A.6 – Organization of Information Security

• 300,000 Systems Vulnerable to New Loop DoS Attack

• Nirmata Policy Manager combats cloud security threats

• Glassdoor Wants to Know Your Real Name

• Pokemon Company resets some users’ passwords

• Deepfakes and AI’s New Threat to Security

• White House Convenes States to Discuss Water Sector Breaches

• How to deploy software to Linux-based IoT devices at scale

• Elon Musk hints a flying Tesla at Don Lemon’s show

• Tor Unveils WebTunnel – Let Users Bypass Censorship

• Ukraine Arrests Trio for Hijacking Over 100 Million Email and Instagram Accounts

• Introducing OpenShift Service Mesh 2.5

• Red Hat Quay 3.11: Smarter permissions, lifecycle, and AWS integration

• Hackers Attacking Critical US Water Systems, White House Warns

• Five 5G Security Concerns: Safeguarding the Future of Connectivity

• Azorult Malware Abuses Google Sites To Steal Login Credentials

• Andariel Hackers Leveraging Remote Tools To Exploit Organizations

• U.S. EPA Forms Task Force to Protect Water Systems from Cyberattacks

• Kate Middleton Medical Record Data was hacked

• NIST Launches Cybersecurity Framework (CSF) 2.0

• Red teaming in the AI era

• Security best practices for GRC teams

• 1% of users are responsible for 88% of data loss events

• API environments becoming hotspots for exploitation

• The Impact of Biometric Authentication on User Privacy and the Role of Blockchain in Preserving Secure Data

• ISC Stormcast For Wednesday, March 20th, 2024 https://isc.sans.edu/podcastdetail/8902, (Wed, Mar 20th)

• Australian techie jailed for accessing museum’s accounting system and buying himself stuff

• Malware

• Understanding Your Attack Surface: AI or bust

• The Future of Incident Response: SOAR’s Impact on Cybersecurity Defense

• Cybersecurity Hygiene: Best Practices for Individuals

• Design Principles-Building a Secure Cloud Architecture

• Pokémon resets some users’ passwords after hacking attempts

• Microsoft Sentinel delivered 234% ROI, according to new Forrester study

• 10 Commandments of API-First Development

• Millions of Cisco Umbrella Roaming Client Users to Benefit From Upgrading to Cisco Secure Client

• Lucy Parsons Labs Takes Police Foundation to Court for Open Records Requests

• IT Security News Daily Summary 2024-03-19

• This Acoustic Side-Channel Attack Steals Keystrokes Via Typing Patterns

• Pro Players Hacked Live On Stream! Apex Legends Tournament Postponed

• Pokemon resets some users passwords after hacking attempts

• Ukraine cyber police arrested crooks selling 100 million compromised accounts

• Daniel Stori’s ‘I’m Fine’

• USENIX Security ’23 – Abderrahmen Amich, Birhanu Eshete, Vinod Yegneswaran, Nguyen Phong Hoang – DeResistor: Toward Detection-Resistant Probing for Evasion Of Internet Censorship

• MacOS Sonoma 14.4 bug round-up: What to know before you update

• Crypto scams more costly to the US than ransomware, Feds say

• Beijing-backed cyberspies attacked 70+ orgs across 23 countries

• How To Craft The Perfect Data Loss Prevention Strategy

• Zero Day Moves to Ghost

• Crypto scams more costly to the US than ransomware, feds say

• Upcoming webinar: How a leading architecture firm approaches cybersecurity

• Lazarus Group Hackers Resurface Utilizing Tornado Cash for Money Laundering

• Encina Wastewater Authority Reportedly Targeted by BlackByte Ransomware

• The best VPN for streaming in 2024: Expert tested and reviewed

• 7 Best Network Security Tools to Use in 2024

• Speaking Freely: Maryam Al-Khawaja

• Powerful Cloud Permissions You Should Know: Series Final

• Discovering API secrets & endpoints using APKLeaks

• Why IT General Controls Are Important for Compliance and Cybersecurity

• 3 ways we tried to outwit AI last week: Legislation, preparation, intervention

• Owning Versus Renting – The Circumstances of Web3 Domains

• The Power of AI: Building a Robust Data Ecosystem for Enterprise Success

• Best Enterprise Security Tools For Tip-top Business Protection

• CISA and Partners Release Joint Fact Sheet for Leaders on PRC-sponsored Volt Typhoon Cyber Activity

• Cisco Launches CCST IT Support Certification: Your Pathway to a Career in IT

• APIs Drive the Majority of Internet Traffic and Cybercriminals are Taking Advantage

• Cybercriminals Beta Test New Attack to Bypass AI Security

• Vulnerability Recap 3/19/24 – Microsoft, Fortinet & More

• How Rogue ISPs Tamper With Geofeeds

• Taking Cyber Asset and Exposure Management to the Boardroom

• Nude Deepfakes: What is EU Doing to Prevent Women from Cyber Harassment

• BunnyLoader 3.0 Detected With Advanced Keylogging Capabilities

• Novel Script-Based Attack That Leverages PowerShell And VBScript

• Simplifying Data Management in the Age of AI

• Appdome launches Social Engineering Prevention service to safeguard mobile users

• Researchers Uncover New “Conversation Overflow” Tactics

• United Health spends $2 billion in ransomware recovery

• CISA Releases One Industrial Control Systems Advisory

• Franklin Fueling System EVO 550/5000

• Cisco’s Bill Davenport Starts Term on FCC Technological Advisory Council

• New AcidPour wiper targets Linux x86 devices. Is it a Russia’s weapon?

• Cloudflare Loses 22% Of Its Domains In Freenom .tk Shutdown

• Kasada introduces CDN edge API integrations to block abuse and online fraud

• Tufin Orchestration Suite R24-1 enhances cloud security and compliance

• CalypsoAI Platform provides real-time LLM cybersecurity insights

• SQL Injection Vulnerability Patched in Tutor LMS WordPress Plugin

• How to manage third-party risk in the cloud

• Building Data Center Infrastructure for the AI Revolution

• Update Delays To NIST Vulnerability DB Alarms Researchers

• Nations Direct Mortgage Data Breach Affects 83,000 Individuals

• Apex Legends Esports Final Delayed By Hack Claims

• Airbus Pulls Out of Deal to Buy Atos Cybersecurity Unit

• Threat Actors Exploit the Aiohttp Bug to Locate Susceptible Networks

• Ordr launches OrdrAI CAASM+ to provide asset visibility with AI/ML classification

• Research Shows IT and Construction Sectors Hardest Hit By Ransomware

• DarkGPT OSINT AI Assistant To Find Leaked Database

• Crypto wallet providers urged to rethink security as criminals drain them of millions

• Cato Unveils Industry First AI-driven Networking and Security Incident Detection and Response

• Innovative Web Automation Solutions Unveiled by Skyvern AI

• WhatsApp Beta Testing Expanded Authentication Methods for App Lock Feature

• Synopsys fAST Dynamic enables DevOps teams to fix security vulnerabilities in modern web apps

• eSentire Threat Intelligence reduces false positive alerts

• Drata unveils Adaptive Automation for streamlined compliance

• From Deepfakes to Malware: AI’s Expanding Role in Cyber Attacks

• Secure Your API With JWT: Kong OpenID Connect

• How AI can be hacked with prompt injection: NIST report

• BigID Raises $60 Million at $1 Billion Valuation

• Chinese APT Hacks 48 Government Organizations

• Traefik Labs updates address rising Kubernetes adoption and API management

• NIST’s NVD has encountered a problem

• Attacker Hunting Firewalls, (Tue, Mar 19th)

• Lurking in the Shadows: Attack Trends Shine Light on API Threats

• Flexible Billing now available in the Avast Business Hub for MSPs

• Delivering Digital Immunity: Taking a Holistic Approach to Optimize Your Network

• Sonatype SBOM Manager identifies and mitigates vulnerabilities within the software supply chain

• Mintlify Data Breach Exposes Customer GitHub Tokens

• Providing Optimal Cloud Security Outcomes Through StateRAMP

• Atos says Airbus flew off, no longer interested in infosec and big data biz

• AI and the Evolution of Social Media

• Case Study: Fatty Liver Foundation Improves Enterprise Domain Security with PowerDMARC

• Verimatrix Counterspy safeguards content across various devices

• NHS Dumfries and Galloway Faces Cyberattack, Patient Data at Risk

• Social media influencers targeted by identity thieves

• Preparing Society for AI-Driven Disinformation in the 2024 Election Cycle

• Nations Direct Mortgage Data Breach Impacts 83,000 Individuals

• SUSE announces new enhancements to help users manage business-critical workloads

• Recognizing Progress and Living Our Values: Akamai?s 2023 ESG Impact Report

• 900+ websites Exposing 10M+ Passwords: Most in Plaintext

• Exploring Zero-Trust Architecture Implementation in Modern Cybersecurity

• Cisco Secure Access named Leader in Zero Trust Network Access

• Navigating the Internship Odyssey: Taking a Leap To Love Where I Work

• December 2023 Cyber Attacks Timeline

• Store manager admits SIM swapping his customers

• PoC exploit for critical Fortra FileCatalyst MFT vulnerability released (CVE-2024-25153)

• Nvidia Introduces Next-Generation ‘Blackwell’ AI Chips

• AI Researchers In West, China Identify AI ‘Red Lines’

• 5 Types of Crypto You Didn’t Know Existed

• Players hacked during the matches of Apex Legends Global Series. Tournament suspended

• Pentest People Announces its Assured Service Provider status for NCSC’s Cyber Incident Exercising Scheme

• Alleged AT&T (unverified) – 49,102,176 breached accounts

• Vultr Cloud Inference simplifies AI deployment

• NCSC Publishes Security Guidance For Cloud-Hosted SCADA

• Hackers Exploiting Microsoft Office Templates to Execute Malicious Code

• What are non-human identities?

• Suspected Russian Data-Wiping ‘AcidPour’ Malware Targeting Linux x86 Devices

• Hackers Exploiting Popular Document Publishing Sites for Phishing Attacks

• Crafting and Communicating Your Cybersecurity Strategy for Board Buy-In

• Apple In Talks With Google To Bring Gemini AI To iPhones

• Aiohttp Vulnerability in Attacker Crosshairs

• Mintlify Data Breach Leads to Exposure of Customer GitHub Tokens

• Misconfigured Firebase Instances Expose 125 Million User Records

• Microsoft Copilot for Security: General Availability details

• Cohesity partners with NVIDIA to harness the power of generative AI

• NCSC Publishes Security Guidance for Cloud-Hosted SCADA

• Unit 42 Collaborative Research With Ukraine’s Cyber Agency To Uncover the Smoke Loader Backdoor

• US Senators Voice Support For TikTok Bill

• How ANY.RUN Malware Sandbox Process IOCs for Threat Intelligence Lookup?

• Achieving continuous compliance with Tripwire’s Security Configuration Manager

• Critical insights into Australia’s supply chain risk landscape

• Threat landscape for industrial automation systems. H2 2023

• What is Credential Harvesting? Examples & Prevention Methods

• GlobalSign PKIaaS Connector enhances ServiceNow certificate lifecycle management

• SpaceX ‘Developing Spy Satellites’ For US Agency

• Government Wants Flying Taxis In Operation By 2028

• Earth Krahang APT breached tens of government organizations worldwide

• BigID raises $60 million to accelerate AI data security innovation

• Prolific Chinese Threat Campaign Targets 100+ Victims

• Uber To Pay £149m In Settlement With Australian Taxi Drivers

• CryptoWire Ransomware Attacking Abuses Schedule Task To maintain Persistence

• Keep Your Data Safe as You Become More Productive for Just $30 Through 3/24

• Streamline your SBOM management with SBOM Manager

• Alleged A&TT (unverified) – 49,102,176 breached accounts

• E-Root Admin Sentenced to 42 Months in Prison for Selling 350,000 Credentials

• Jenkins Args4j CVE-2024-23897: Files Exposed, Code at Risk

• WhiteSnake Stealer Checks for Mutex & VM Function Before Execution

• Your FAQ Guide to RSA Conference 2024

• Researchers Hack AI Assistants Using ASCII Art

• Surviving the “quantum apocalypse” with fully homomorphic encryption

• New Phishing Attack Uses Clever Microsoft Office Trick to Deploy NetSupport RAT

• CISA Hacked and over 70m files leaked online from AT&T database

• Microsoft Deprecate 1024-bit RSA Encryption Keys in Windows

• Why USB Attacks Are Back and How to Prevent Them

• Cybersecurity jobs available right now: March 19, 2024

• E-Root Marketplace Admin Sentenced to 42 Months for Selling 350K Stolen Credentials

• Why is everyone talking about certificate automation?

• Outsmarting cybercriminal innovation with strategies for enterprise resilience

• Lynis: Open-source security auditing tool

• Decoding the California DMV’s Mobile Driver’s License

• UnitedHealth Says It Has Made Progress on Recovering From Massive Cyberattack

• ISC Stormcast For Tuesday, March 19th, 2024 https://isc.sans.edu/podcastdetail/8900, (Tue, Mar 19th)

• Beware Of Free wedding Invite WhatsApp Scam That Steal Sensitive Data

• NVIDIA GTC Keynote: Blackwell Architecture Will Accelerate AI Products in Late 2024

• Insider Threat Detection: Identifying Internal Risks

Generated on 2024-03-20 23:56:14.628125