IT Security News Daily Summary 2024-03-23

• Windows Server 2012 / 2012 R2 End of Life – Here’s How to Secure your Legacy Servers

• Russia-linked APT29 targeted German political parties with WINELOADER backdoor

• Will AI augment or annex cybersecurity jobs?

• Cyber Extortion Stoops Lowest: Fake Attacks, Whistleblowing, Cyber Extortion

• USENIX Security ’23 – Yijie Bai, Yanjiao Chen, Hanlei Zhang, Wenyuan Xu, Haiqin Weng, Dou Goodman – VILLAIN: Backdoor Attacks Against Vertical Split Learning

• Multi-Cloud and Hybrid Cloud Backup: Best Practices to Reliably Secure Your Data

• GitHub Unveils AI-Driven Tool to Automatically Rectify Code Vulnerabilities

• Gmail and Facebook Users Advised to Secure Their Accounts Immediately

• A hacker’s view of the civic infrastructure: Hashtag Trending, the Weekend Edition for March 23rd, 2024

• Spain Temporarily Suspends Telegram – Here is The Reason?

• Payments Watchdog Assessing McDonald’s and Greggs Tech Outages

• VulnCheck’s Free Community KEV & CVE APIs (Code & Golang CLI Utility)

• Ivanti Releases Security Updates for Neurons for ITSM and Standalone Sentry

• CISA Releases One Industrial Control Systems Advisory

• Mozilla fixed Firefox zero-days exploited at Pwn2Own Vancouver 2024

• Large-scale Sign1 malware campaign already infected 39,000+ WordPress sites

• From Personal Computer to Innovation Enabler: Unveiling the Future of Computing

• Splunk, Azure, or Sentinel for FedRAMP/NIST Compliance

• The Akamai Foundation Continues to Give Back and Amplify Impact

• Distributed Cloud and Edge Computing: A Cheat Sheet for IT Leaders

• Apple Chip Flaw Leaks Secret Encryption Keys

• 1768.py’s Experimental Mode, (Sat, Mar 23rd)

• German police seized the darknet marketplace Nemesis Market

• Hackers Deploy STRRAT & VCURMS Malware on Windows Via GitHub

• Evolving beyond your core expertise: it’s time to add security

• Microsoft Xbox Gaming Services Flaw Let Attackers Gain SYSTEM Privileges

• GoFetch Side-Channel Attack Impact Apple CPUs: Attackers Steal Secret Keys

• Russia’s Cozy Bear caught phishing German politicos with phony dinner invites

• AceCryptor attacks surge in Europe – Week in security with Tony Anscombe

• Unsafelok Threat Highlights It’s About Both IoT Devices and Applications

• Russian Hackers Use ‘WINELOADER’ Malware to Target German Political Parties

• Finite State Raises $20 Million to Grow Software Supply Chain Security Business

• Data Privacy Regulations: Compliance and Beyond

• German Authorities Shut Down Online Marketplace for Drugs, Data and Cybercrime Services

• USENIX Security ’23 – ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning Paradigms

• Incident Response Planning: Effective Cyber Crisis Management

• Accenture’s $1 billion LearnVantage platform tackles the growing AI skills gap

• Responding to ShotSpotter, Police Shoot at Child Lighting Fireworks

• IT Security News Daily Summary 2024-03-22

• Unsaflok flaws allow to open millions of doors using Dormakaba Saflok electronic locks

• Chinese snoops use F5, ConnectWise bugs to sell access into top US, UK networks

• Empowering Developers With Scalable, Secure, and Customizable Storage Solutions

• Chinese snoops use F5, ConnectWise bugs to sell access to top US, UK networks

• JumpCloud vs Okta (2024): IAM Software Comparison

• What It Takes to be a Cybersecurity Professional: The Non-Technical Skills You Need

• Cybersecurity: The Core of Computer Science Expertise

• New Go loader pushes Rhadamanthys stealer

• Cyber Security Today, Week in Review for week ending Friday, March 22, 2024

• Java 22 brings security enhancements

• Top 6 Google Authenticator Alternatives in 2024

• Mozilla Drops Onerep After CEO Admits to Running People-Search Networks

• AT&T won’t say how its customers’ data spilled online

• Cops Running DNA-Manufactured Faces Through Face Recognition is Tornado of Bad Ideas

• Canada revisits decision to ban Flipper Zero

• Why SSH Certificates Can Be A Better Option For Remote Access Than SSH Keys

• Randall Munroe’s XKCD ‘Moon Armor Index’

• RaaS Groups Go Recruiting in Wake of LockBit, BlackCat Takedowns

• Apple M-Series FAIL: GoFetch Flaw Finds Crypto Keys

• China Relaxes Some Security Review Rules For Data Exports

• Apple Lawsuit: US Says iPhone Monopoly Undermines Security

• Hackers Can Unlock Over 3 Millions Hotel Doors In Seconds

• FBI Reports Surge in Cryptocurrency Scams, Highlighting Growing Threat of Confidence Scams

• Thousands of WordPress Websites Hacked with New Sign1 Malware

• CISA, NSA, FBI and Five Eyes Issue New Alert on Chinese APT Volt Typhoon

• CISA, DC HSEMA and Regional Partners Conduct Exercise to Ensure National Capital Region Water Service Resilience

• Democratizing Development: The Rise of No-Code Platforms

• Security expert Chris Krebs on TikTok, AI and the key to survival (part 2)

• 3 million doors open to uninvited guests in keycard exploit

• Data protection impact assessment template and tips

• UN Adopts Resolution Backing Efforts to Ensure Artificial Intelligence is Safe

• Russian APT29 Hackers Caught Targeting German Political Parties

• Is Your Data Safe? Fujitsu Discovers Breach, Customers Warned

• IONIX Advances Industry Leading Attack Surface Management (ASM) Platform With Centralized Threat Center for Swift Zero-day Response

• Privacy concerns makes Airbnb ban security cameras indoors

• 8 Best Enterprise Password Managers

• #MIWIC2024: Chelsea Jarvie, CISO and Director at Neon Circle

• Vans Warns Consumers of Fraudsters Following ALPHV Data Breach

• NIA Investigates Cyberattack on Aerospace Research Firm

• Strengthening Cyber Resiliency through Collaboration

• Hardware-level Apple Silicon vulnerability can leak cryptographic keys

• In Other News: Google’s PQC Threat Model, Keyboard Sounds Expose Data, AI Roadmap

• ‘Brain Weasels’: Impostor Syndrome in Cybersecurity

• Ransomware Group Takes Credit for Attack on Boat Dealer MarineMax

• Click Farms: How to Block Click Farming & Protect Your Ads

• The Impact of Click Spamming On Your Business & How You Can Prevent It

• What is PPC Bot Traffic? 5 Methods for Securing Ad Campaigns

• New StrelaStealer Phishing Attacks Hit Over 100 Organizations in E.U. and U.S.

• Building Bridges: The Power of Purpose Alignment for Positive Impact

• The human impact of ransomware attacks: how can businesses protect their security professionals?

• UN Adopts First Global Resolution For Artificial Intelligence

• The DOJ Puts Apple’s iMessage Encryption in the Antitrust Crosshairs

• AI Trends in Program Management

• CrowdStrike Enhances Cloud Detection and Response (CDR) Capabilities to Protect CI/CD Pipeline

• AWS Patches Critical ‘FlowFixation’ Bug in Airflow Service to Prevent Session Hijacking

• Investors’ pledge to fight spyware undercut by past investments in US malware maker

• NVD slowdown leaves thousands of vulnerabilities without analysis data

• US Government Issues New DDoS Mitigation Guidance

• 39,000 Websites Infected in ‘Sign1’ Malware Campaign

• New AcidPour Wiper Targeting Linux Devices Spotted in Ukraine

• How to build a data protection policy, with template

• Application Security for Dummies: The Only Way Forward

• The Rise of Temu: A Game-Changer in Online Shopping

• US Government Releases New DDoS Attack Guidance for Public Sector

• Top Zero Trust Platforms Evaluated by Miercom: Check Point Ranks #1

• Implementing Risk Compliance and Management in Linux Systems: A Practical Guide

• US organizations targeted with emails delivering NetSupport RAT

• EFF and 34 Civil Society Organizations Call on Ghana’s President to Reject the Anti-LGBTQ+ Bill

• Nvidia Unveils Latest AI Chip, Promising 30x Faster Performance

• China-Linked Group Breaches Networks via Connectwise, F5 Software Flaws

• Modern Digital Authentication Protocols

• AI is changing cybersecurity and businesses must wake up to the threat

• Introducing Cisco XDR Playbooks: Finding the balance in automating and guiding incident response

• DTX + UCX Manchester is Back: Global brands, cutting-edge technology and world-renowned speakers take centre stage

• Cybaverse launches new platform to streamline cyber security management for organisations and MSPs

• New ‘GoFetch’ Apple CPU Attack Exposes Crypto Keys

• Saflok Lock Vulnerability Can Be Exploited to Open Millions of Doors

• BlueFlag Security Emerges From Stealth With $11.5M in Funding

• Cyber Security Today, March 22, 2024 – Mac CPUs are vulnerable to encrypted key theft, white hat hackers win a second Tesla, and more

• CISA: Here’s how you can foil DDoS attacks

• Google Cloud Launches Security Command Center Enterprise

• UK Gives Three, Vodafone Five Days To Avoid In-depth Merger Probe

• Pwn2Own Vancouver 2024: participants earned $1,132,500 for 29 unique 0-days

• Implementing Zero Trust Controls for Compliance

• New Loop DoS Attack Can Cause Indefinite System Crash

• Google Pays $10M in Bug Bounties in 2023

• I-Soon Leak: Exposing China’s Cyber Espionage

• Large-Scale StrelaStealer Campaign in Early 2024

• Reddit Shares Surge After Successful NYSE IPO

• DHCP Hacked to Escalate Privileges in Windows Domains

• Exploit Released For Critical Fortinet RCE Flaw: Patch Soon!

• One-Click AWS Vulnerability Let Attackers Takeover User’s Web Management Panel

• Tesla, OS, Software Exploits Earn Hackers $1.1 Million at Pwn2Own 2024

• OpenSSL 3.3 Alpha Release Live

• Upcoming Webinar: Writing Your First OpenSSL Application

• Unmasking the Vulnerabilities in Telecom Signaling: A Call for Enhanced Security

• Silicon UK In Focus Podcast: Circular Computing Equals a Circular Economy

• Understanding ISO 27001:2022 Annex A.7 – Human Resource Security

• TeamCity Vulnerability Exploits Leads to Surge in Ransomware Attacks

• TinyTurla Evolved TTPs To Stealthly Attack Enterprise Organizations

• How Microsoft Incident Response and Microsoft Defender for Identity work together to detect and respond to cyberthreats

• Unsaflok Vulnerability Lets Hackers Open 3M+ Hotel Doors in Seconds

• MediaWorks – 162,710 breached accounts

• Evasive Panda Cyber Attacks: Threat Actor Targets Tibetans

• Ex-Secret Service agent and convicted hacker share stage at GISEC Global

• Russian Hackers May Have Targeted Ukrainian Telecoms with Upgraded ‘AcidPour’ Malware

• U.S. Justice Department Sues Apple Over Monopoly and Messaging Security

• Thoughts on AI and Cybersecurity

• Balancing functionality and privacy concerns in AI-based Endpoint Security solutions

• Apple Chip Flaw Lets Hackers Steal Encryption Keys

• Researchers Propose An Invisible Backdoor Attack Dubbed DEBA

• DOJ calls Apple’s privacy justifications an ‘elastic shield’ for financial gains

• Attackers are targeting financial departments with SmokeLoader malware

• Russia bans Microsoft followed by Amazon and Google

• Unraveling the Cyber Threats Lurking Behind QR Codes

• Shadow AI is the latest cybersecurity threat you need to prepare for

• Organizations under pressure to modernize their IT infrastructures

• Inside the book – See Yourself in Cyber: Security Careers Beyond Hacking

• New infosec products of the week: March 22, 2024

• 95% of companies face API security problems

• Russian Hackers Target Ukrainian Telecoms with Upgraded ‘AcidPour’ Malware

• A Practical Guide to the SEC Cybersecurity Rules

• Paid Cybersecurity Courses: Why They Are Not the Solution for Security Awareness

• IoT Security Best Practices: Safeguarding Connected Devices

• ISC Stormcast For Friday, March 22nd, 2024 https://isc.sans.edu/podcastdetail/8906, (Fri, Mar 22nd)

• Akamai Customer Trust Built on Partnership and Best User Experience

• Getting Started With NCache Java Edition (Using Docker)

• Security Awareness Training: Building a Cyber-Resilient Culture

• Threat Actors Dropping Multiple Ransomware Variants

• A Look At Threat Intel Through The Lens Of Kimsuky

• Truck-to-truck worm could infect – and disrupt – entire US commercial fleet

• Securing Cloud Storage Access: Approach to Limiting Document Access Attempts

Generated on 2024-03-23 23:55:42.683346