IT Security News Daily Summary 2024-03-26

• TheMoon bot infected 40,000 devices in January and February

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• The foundation for responsible analytics with Microsoft Purview

• Facebook snooped on users’ Snapchat traffic in secret project, documents reveal

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• SQL injection vulnerability in Fortinet software under attack

• Securing the LLM Stack

• Binarly Attracts $10.5M to Tackle Software Supply Chain Security

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ASEAN Entities in the Spotlight: Chinese APT Group Targeting

• 6 ways to protect yourself from getting scammed online, by phone, or IRL

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Facebook Could Get Hit With “Heavy” Fines In New Privacy Probe

• The Cybersecurity Skills Gap: Time to Step Up with OffSec’s Red Teaming and IoT Learning Paths

• Everything you need to know about the Microsoft Exchange Server hack

• Meta Oversight Board’s Latest Policy Opinion a Step in the Right Direction

• BEC Scammers Adventures on the Run

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• New ShadowRay Campaign Targets Ray AI Framework in Global Attack

• Researchers Discover 40,000-Strong EOL Router, IoT Botnet

• 2024 IT Risk and Compliance Benchmark Report Findings: Why Unifying Risk and Compliance Work Is No Longer Optional

• Complex Supply Chain Attack Targets GitHub Developers

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Sign1 Malware Targeted Over 2500 WordPress Sites In Recent Campaign

• AI is a data problem — Cyera is raising up to $300M on a $1.5B valuation to secure it

• Speaking Freely: Robert Ssempala

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• JCDC Builds Foundation for Pipelines Cyber Defense Planning Effort

• Details of Millions of Voters and Several MPs Targeted in a Cyberattack by the Chinese State

• Telegram Privacy Nightmare: Don’t Opt In to P2PL

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Malicious NuGet Package Linked to Industrial Espionage Targets Developers

• Uncle Sam’s had it up to here with ‘unforgivable’ SQL injection flaws

• Webinar Today: How to Reduce Cloud Identity Risk

• UK Court Says Assange Can’t be Extradited on Espionage Charges Until US Rules Out Death Penalty

• Airbus to Buy German Cybersecurity Firm Infodas

• UK Firm Think Cyber Raises $3.8 Million for Staff Security Nudging

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• #MIWIC2024: Samantha Humphries, Senior Director of International Security Strategy at Exabeam

• USENIX Security ’23 – XCheck: Verifying Integrity Of 3D Printed Patient-Specific Devices Via Computing Tomography

• Cyber readiness and SBOMs

• Spoutible Enhances Platform Security through Partnership with Wallarm

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• New Zealand accuses China for hacking the Parliament

• Exclusive: Standard AI shifts focus to computer vision analytics for retailers, now valued at $1.5 billion

• Telegram is offering some users a free premium plan, but there’s a huge risk

• Recent ‘MFA Bombing’ Attacks Targeting Apple Users

• Bitwarden Review 2024: Features, Pricing, Pros & Cons

• Only 5% of Boards Have Cybersecurity Expertise, Despite Financial Benefits

• Top Cybersecurity Threats Of This Year And How To Defend Against Them

• Microsoft Releases Out-of-band Update to Fix Windows Server Memory Leak Flaw

• Digital Arrest Scam: Woman Doctor Duped for 40 Lakhs, Loses Her Entire Savings

• Living-Off-the-Land (LOTL) Attacks: Here’s Everything You Need to Know

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Legit Security launches enterprise secrets scanning solution

• US and UK Governments Take Stand Against APT31, State-Affiliated Hacking Group

• Rockwell Automation PowerFlex 527

• Rockwell Automation FactoryTalk View ME

• Automation-Direct C-MORE EA9 HMI

• Rockwell Automation Arena Simulation

• CISA Releases Four Industrial Control Systems Advisories

• Cisco Wins CRN 5-Star Award for the 13th Year Straight

• Over A Third of IT Leaders Are Ill-Equipped to Cope With AI-Powered Attacks

• What are the Essential Skills for Cyber Security Professionals in 2024?

• Greylock Makes $10M Bet on Bedrock Security

• ZenHammer Attack Targets DRAM on Systems With AMD CPUs

• Suspicious NuGet Package Harvesting Information From Industrial Systems

• Vercara UltraAPI offers protection against malicious bots and fraudulent activity

• BackBox platform update enhances CVE mitigation and risk scoring

• Microsoft: 87% of UK Businesses Are Unprepared for Cyberattacks

• 6 Best Authenticator Apps for 2024

• Judges Block US Extradition of WikiLeaks Founder Julian Assange—for Now

• StrelaStealer Malware Hits More Than 100 EU And US Organizations

• ZenHammer Attack Targets DRAM On Systems With AMD CPUs

• FreeBSD Foundation Hands Out Beacon Gongs For Safer Software

• Ransomware Can Mean Life Or Death At Hospital, But DEF CON Hackers Have A Plan

• Justice Dept Indicts 7 Accused In 14 Year Long Hack Campaign By Chinese Government

• Patch now: Mozilla patches two critical vulnerabilities in Firefox

• What is Managing Secrets?

• Embrace Generative AI for Security, But Use Caution

• US, UK Accuse China of Years-Long Cyberespionage Campaign

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• How personalized phish training can thwart evolving cyberattacks

• ICS CERT predictions for 2024: What you need to know

• UK, New Zealand against China-linked cyber operations

• UK Government’s New AI System to Monitor Bank Accounts

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Swimlane partners with Dragos to automate threat detection across both IT and OT environments

• ArmorCode Risk Prioritization provides visibility into security findings with business context

• Portugal Forces Sam Altman’s Worldcoin to Stop Collecting Biometric Data

• New tool: linux-pkgs.sh, (Sun, Mar 24th)

• What is Global Threat Intelligence? – SOC/DIFR Team Guide

• AI is a data problem. Cyera is raising up to $300M on a $1.5B valuation to secure it

• YouTube ordered to reveal the identities of video viewers

• Ransomware can mean life or death at hospitals, but DEF CON hackers have a plan

• Cybersecurity a Top Priority for Audit Committees

• Vulnerability Summary for the Week of March 18, 2024

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• GitGuardian SCA automates vulnerability detection and prioritization for enhanced code health

• 17,000+ Microsoft Exchange servers in Germany are vulnerable to attack, BSI warns

• Enhancing The Nation’s Cybersecurity Workforce

• Tech giants grapple with ballooning software supply chain risk, JFrog report reveals

• New GoFetch Vulnerability in Apple’s M Chips Allows Secret Keys Leak on Compromised Computers

• Apple Patches Code Execution Vulnerability in iOS, macOS

• New Car Owners Beware: Study Finds Serious Data Protection Flaws

• US, UK Impose Sanctions On China Over Spying, Infrastructure Hacks

• Apple Hit By Private Lawsuits Imitating Justice Department Approach

• Report: Apple To Use Baidu’s Ernie Bot In China iPhones

• New Tycoon 2FA Phishing Kit Attacking Microsoft 365 & Gmail Users

• AI is a data problem. Now Cyera is raising up to $300M on a $1.5B valuation to secure it

• The Identity Underground Report: Deep insight into the most critical identity security gaps

• DataVisor’s AML solution helps combat sophisticated financial crimes

• Crafting Shields: Defending Minecraft Servers Against DDoS Attacks

• U.S. Charges 7 Chinese Nationals in Major 14-Year Cyber Espionage Operation

• Best Practices for Kafka Management to Ensure High Availability

• Hackers Claiming that EagleSpy Android RAT 3.0 Steals 2FA Google Authenticator Code

• From Academia to Cisco: How I’m Inspired and Empowered as a Woman in Tech

• Hiding in Plain Sight: How Subdomain Attacks Use Your Email Authentication Against You

• Expert Insight: DEI and the Recruitment Wall

• Award Winning Cyber Start-up Raises £3m Led By Fuel Ventures To Empower Employees To Protect Themselves

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• US Government Urges Software Makers to Eliminate SQL Injection Vulnerabilities

• NIST NVD “Under Construction”

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Julian Assange Won’t Be Extradited to the US Yet

• US Treasury Dep announced sanctions against members of China-linked APT31

• SwordFantasy – 2,690,657 breached accounts

• 2024 Cyber Attacks Statistics

• UK, New Zealand Accuse China of Cyberattacks on Government Entities

• Recent Fortinet FortiClient EMS Vulnerability Exploited in Attacks

• X ‘Selling Real-Time Data’ For Law-Enforcement Purposes

• CISA Warns Of Active Exploitation Of Flaws In Fortinet, Ivanti, & Nice Linear

• What Are Mobile VPN Apps and Why You Should Be Using Them

• FreeBSD Foundation hands out Beacon gongs for safer software

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Apps secretly turning devices into proxy network nodes removed from Google Play

• US Targets Crypto Firms Aiding Russia Sanctions Evasion

• CrowdStrike Partnered with HCLTech to Drive Enterprise Cybersecurity Transformation

• Browser Security in 2024: Technologies and Trends

• AI Platforms Name Cybersecurity Threats and Advice for 2024

• AI is a data problem. Now Cyera is raising up to $300M on a $1.5B valuation, to secure it

• The Best 10 Vendor Risk Management Tools

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• CISA and FBI Urge Renewed Effort to Eliminate SQL Injection Flaws

• Binance Executive Evades Nigerian Custody

• X Loses Case Against Hate-Speech Nonprofit

• UK elections are unaffected by China’s cyber-interference, says deputy PM

• Understanding ISO 27001:2022 Annex A.8 – Asset Management

• U.S. Sanctions 3 Cryptocurrency Exchanges for Helping Russia Evade Sanctions

• Agenda Ransomware Propagates to vCenters and ESXi via Custom PowerShell Script

• Row breaks out over true severity of two DNSSEC flaws

• WordPress: Critical Flaw Detected in MiniOrange Plugins

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ISO 27001:2022: chapter by chapter description

• Giant Tiger Data Breach: Customers Data Exposed Via Vendor

• Podcast Episode: About Face (Recognition)

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• CISA & FBI Warns that Hackers Use SQL Injection Vulnerabilities to hack Servers

• Is iPhone’s Journal App Sharing Your Personal Data Without Permission?

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• CISA Alerts on Active Exploitation of Flaws in Fortinet, Ivanti, and Nice Products

• Medusa Ransomware group demands $700k from victims

• Reinforcement learning is the path forward for AI integration into cybersecurity

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• How threat intelligence data maximizes business operations

• Strengthening critical infrastructure cybersecurity is a balancing act

• Scammers exploit tax season anxiety with AI tools

• Tech industry’s focus on innovation leaves security behind

• Cybersecurity Governance: Ensuring Effective Oversight

• New Zealand to world: China attacked us, too!

• ISC Stormcast For Tuesday, March 26th, 2024 https://isc.sans.edu/podcastdetail/8910, (Tue, Mar 26th)

• Secure Software Development: Building Resilient Applications

• The Next Evolution of IAM: How Generative AI is Transforming Identity and Access

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Can iPhones Get Viruses? + How to Remove Them

• Cybersecurity in Financial Disclosures: 11 Topics Your Section 1C of 10-K Filings Should Address

• Vans warns customers of data breach

• US charges Chinese nationals with cyber-spying on pretty much everyone for Beijing

• IT Security News Daily Summary 2024-03-25

• Chinese nationals charged with cyber-spying on US biz and more for Beijing

• Constella and Social Links Join Forces to Deliver Transformative OSINT Solutions

• How to Get the Most From Your Secrets Scanning

• CISA adds FortiClient EMS, Ivanti EPM CSA, Nice Linear eMerge E3-Series bugs to its Known Exploited Vulnerabilities catalog

• USENIX Security ’23 – Lukas Lamster, Martin Unterguggenberger, David Schrammel, and Stefan Mangard – HashTag: Hash-based Integrity Protection for Tagged Architectures

• Sustainability 101: What is environmental reporting?

• Vulnerability Recap 3/25/24 – More Ivanti Issues to Patch

• AI Regulation at a Crossroads

• Top 4 Industries at Risk of Credential Stuffing and Account Takeover (ATO) attacks

• It’s Shockingly Easy To Get Around Facebook’s Content Moderation Rules

• Pure Storage, Nvidia partner to democratize AI with new infrastructure solutions

• International Sting Takes Down Major Dark Web Marketplace “Nemesis Market”

• Cloud account hijacking: How it works and how to prevent it

• A Solution Engineer’s Journey into Programmability

• Over 170K users caught up in poisoned Python package ruse

• Apple Updates for MacOS, iOS/iPadOS and visionOS, (Mon, Mar 25th)

• The OODA Loop: The Military Model That Speeds Up Cybersecurity Response

• Leen Banks Early Stage Funding for Data Security Technology

• US Treasury Slaps Sanctions on China-Linked APT31 Hackers

• EU Opens Investigation Into Apple, Google, Meta

• Chinese Hackers Charged in Decade-Long Global Spying Rampage

• Over 170K users hit by poisoned Python package ruse

• What is a Deepfake?

• No KOSA, No TikTok Ban | EFFector 36.4

• Identify and Investigate Uncommon DNS Traffic

• Is it time to enforce an Authority-to-Operate (ATO) for Healthcare Organizations?

• China Steals Defense Secrets ‘on Industrial Scale’

• New Tycoon 2FA Phishing Kit Raises Cybersecurity Concerns

• 11 Types of Phishing + Tips to Prevent Phishing Attacks

• Puppet’s devops report plumbs the benefits of platform engineering

• MixMode Garners Spot in 2024 CRN® Partner Program Guide

• USENIX Security ’23 – Design Of Access Control Mechanisms In Systems-On-Chip With Formal Integrity Guarantees

• Are GPUs Ready for the AI Security Test?

• This Security Flaw Enables Hackers to Unlock Millions of Hotel Doors

• Notorious Nemesis Market Seized by German Police

• Securing your home network is long, tiresome, and entirely worth it, with Carey Parker: Lock and Code S05E07

• Building Resiliency in the Face of Ransomware

• Hackers steal Roku credit card details to make fraudulent purchases

• March 2024 Web Server Survey

• UK blames China for massive breach of voter data

• Simplify Manufacturing Operations with Cloud Platforms

• Tech trade union confirms cyberattack behind IT, email outage

• UK Blames China for 2021 Hack Targeting Millions of Voters’ Data

• Fake Ozempic Deals on the Rise as Experts Warn of Phishing Scams

• #MIWIC2024: Lianne Potter, Head of SecOps at ASDA and Cyber Anthropologist at Compromising Positions

• The National Cybersecurity Strategy One Year Later

• 3 important lessons from a devastating ransomware attack

• Authorities Warn of AI Being Employed by Scammers to Target Canadians

• Mule Recruitment Scheme: Scammers Making Innocents Accomplices Into Money Laundering

• Mozilla fixes $100,000 Firefox zero-days following two-day hackathon

• Differentiated Experience with Cisco Catalyst Center and CX Services

• Iran-Linked APT TA450 embeds malicious links in PDF attachments

• Some 300,000 IPs Vulnerable To This Loop DoS Attack

• Biden Administration To Accuse Chinese Hackers Of Targeting US Companies In Espionage Campaign

• Developers Hacked In Sophisticated Supply Chain Attack

• Mozilla Patches Firefox Zero Days Exploited At Pwn2Own

• Why Digital Trust Has Become More Critical Than Cybersecurity & Privacy

• Does Zero Trust Improve Productivity?

• Evasive Sign1 Malware Hits 39,000 WordPress Sites in Widespread Cyber Assault

• How Hackers Breached 3 Million Hotel Keycard Locks

• Sekoia.io and GLIMPS: a new example of interoperability within the Open XDR platform

• GoFetch security exploit can’t be disabled on M1 and M2 Apple chips

• Over 100 Organizations Targeted in Recent ‘StrelaStealer’ Attacks

• Microsoft To Ban 50+ Products For Users In Russia

• 170K+ Python Developers GitHub Accounts Hacked in Supply Chain Attack

• Interos Resilience Watchtower enables companies to monitor vulnerabilities

• Russian Hackers Attacking Political Parties In Recent Cyber Attacks

• Exclusive: Foundational emerges from stealth with $8 million to tackle data quality and AI readiness challenges

• CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate SQL Injection Vulnerabilities

• Linux Kernel 6.8 Released: New Features and Hardware Support

• What is Key Management?

• Tax Scams Ramping Up as the April 15 Deadline Approaches

• New GEOBOX Tool Hijacks Raspberry Pi, Lets Hackers Fake Location

• StrelaStealer Malware Hacked 100+ Organizations Across The EU And U.S

• Martin Lund Joining Cisco’s Executive Leadership Team

• Cybersecurity Threats in Global Satellite Internet

• Scammers steal millions from FTX, BlockFi claimants

• Key Lesson from Microsoft’s Password Spray Hack: Secure Every Account

• Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting Top-gg and Others

• Unsaflok Flaws Allow Unlocking Saflok Door Locks With Forged Cards

• Beware of New ‘HelloFire’ Ransomware Actor Mimic as a Pentester

• Agent vs. agentless security: Learn the differences

• Cyber Security Today, March 25, 2024 – A suspected China threat actor going after unpatched F5 and ScreenConnet installations

• Linux Admins Beware! Fake PuTTY Client that Installs Rhadamanthys stealer

• Top Python Developers Hacked in Sophisticated Supply Chain Attack

• The Online Safety Act: new digital offences in the UK

• Amazon Challenges £28m French Fine Over Worker Monitoring

• Russian Hackers Lure German Politicians With Fake Dinner Party Invite

• Linux Admins Beware! Fake PuTTY Client that Rhadamanthys stealer

• StrelaStealer targeted over 100 organizations across the EU and US

• Step-by-Step Guide to Creating Your First Crypto Wallet

• The best VPN trials of 2024

• White House Nominates First Assistant Secretary of Defense for Cyber Policy

• Mozilla Patches Firefox Zero-Days Exploited at Pwn2Own

• Tycoon 2FA: an in-depth analysis of the latest version of the AiTM phishing kit

• SMIC ‘May Have Violated’ US Law In Producing Advanced Chip

• Trump’s Truth Social Moves Closer To $5bn Merger

• The best travel VPNs of 2024: Expert tested and reviewed

• Time to examine the anatomy of the British Library ransomware nightmare

• APT29 hit German political parties with bogus invites and malware

• New “GoFetch” Vulnerability in Apple M-Series Chips Leaks Secret Encryption Keys

• Police Bust Multimillion-Dollar Holiday Fraud Gang

• Payments Regulator Probing String Of Payments Failures

• Microsoft Pays Anthropic AI $650m After Poaching Staff

• A week in security (March 18 – March 24)

• Russian Cozy Bear Group Targets German Politicians

• 10 cloud development gotchas to watch out for

• The Looming Cyber Threat in Real Estate

• Managed Cybersecurity Services Secure Modern Environments

• GoFetch side-channel attack against Apple systems allows secret keys extraction

• Kubernetes RCE Vulnerability Allows Remote Code Execution

• Fears Over ‘Mass Surveillance’ With Bill Changes

• Iran-Linked MuddyWater Deploys Atera for Surveillance in Phishing Attacks

• Data Security Trends: 2024 Report Analysis

• The ISO 27000 family of protocols and their role in cybersecurity

• Hackers Claiming Unauthorized Access to the Fortinet Devices of Many Companies

• That Asian meal you eat on holidays could launder money for North Korea

• Understanding the Various Types of DDoS Attacks and Their Implications

• 20 essential open-source cybersecurity tools that save you time

• Over 40m UK voters personal data breached in hack by China

• 8 cybersecurity predictions shaping the future of cyber defense

• Hackers Transform the Raspberry Pi into an Online Anonymity Tool

• How immersive AI transforms skill development

• Scams are becoming more convincing and costly

• Cybersecurity Automation: Enhancing SOC Efficiency

• Cybercriminals use ChatGPT’s prompts as weapons

• Tool updates: le-hex-to-ip.py and sigs.py, (Sun, Mar 24th)

• ISC Stormcast For Monday, March 25th, 2024 https://isc.sans.edu/podcastdetail/8908, (Mon, Mar 25th)

• Penetration Testing: Assessing Security Posture

• Microsoft confirms memory leak in March Windows Server security update

Generated on 2024-03-26 23:55:55.860087