IT Security News Daily Summary 2024-03-30

• Understanding and Mitigating the Fedora Rawhide Vulnerability (CVE-2024-3094)

• Lateral Movement in Cybersecurity: Sneaking Sideways Through a Network

• Technologist Versus Spy: The xz Backdoor Debate

• AT&T Says PII From 73 Million Account Holders Leaked Onto Dark Web

• Expert found a backdoor in XZ tools used many Linux distributions

• Israeli LGBTQ App Atraf Faces Data Leak, 700,000 Users Affected

• Can generative AI help address the cybersecurity resource gap?

• EU AI Act to Impact US Generative AI Deployments

• Assessing ChatGPT Impact: Memory Loss, Student Procrastination

• Data Broker Tracked Visitors to Jeffrey Epstein’s Island, New Report Reveals

• Protecting Your Privacy: How to Safeguard Your Smart TV Data

• Hackers Exploit Flaw in Ray Framework to Breach Servers

• Novel Darcula Phishing Campaign is Targeting iPhone Users

• GitHub CodeQL – AutoFix Your Code Scanner

• Organizations Are Shifting Ransomware Defense Tactics, But Malware Is Still the Problem

• AT&T resets account passcodes after millions of customer records leak online

• How did CVE-2024-27198 Lead to Critical Vulnerability in JetBrains?

• Blockchain in Identity Management: Securing Personal Data and Identities

• Yogurt Heist Reveals a Rampant Form of Online Fraud

• Open AI Exec Warns AI is “Extremely Addictive,” Humanity Could Become “Enslaved”

• German BSI warns of 17,000 unpatched Microsoft Exchange servers

• Understanding ISO 27001:2022 Annex A.7 – Human Resource Security

• Hackers Target macOS Users with Malicious Ads Spreading Stealer Malware

• Urgent: Secret Backdoor Found in XZ Utils Library, Impacts Major Linux Distros

• Cybersecurity for Educational Institutions: Protecting Student Data

• Exploring SASE and SSE Roadmaps with the Two Taylor Swifts of the Decade – AI and Quantum

• Understanding and Shrinking Attack Surfaces: A Comprehensive Guide for Organizational Leaders

• Getting rid of a 20+ year old known vulnerability: It’s like a PSA for Runtime Security

• Cisco Nexus Insights: Proactive Day 2 Operations

• Malicious SSH backdoor sneaks into xz, Linux world’s data compression library

• IT Security News Daily Summary 2024-03-29

• Malicious backdoor sneaks into xz, Linux world’s data compression library and tool

• U.S. Supreme Court Does Not Go Far Enough in Determining When Government Officials Are Barred from Censoring Critics on Social Media

• Easy-to-use make-me-root exploit lands for recent Linux kernels. Get patching

• Friday Squid Blogging: The Geopolitics of Eating Squid

• Facebook Accused Of Censoring Reproductive Health Content

• TheMoon Malware Returns: 6,000 Asus Routers Hacked in 72 Hours

• Honey, I Lost My Credentials! Finding Plaintext Credentials on the Internet

• Cyber Security Today, Week in Review for the week ending Friday, March 29, 2024

• What Is Data Loss Prevention (DLP)? Definition & Best Practices

• ‘Darcula’ PhaaS Campaign Sinks Fangs into Victims

• 5 tips for building a cybersecurity culture at your company

• Reported Supply Chain Compromise Affecting XZ Utils Data Compression Library, CVE-2024-3094

• Beware! Backdoor found in XZ utilities used by many Linux distros (CVE-2024-3094)

• The Pentagon Cybersecurity Strategy For Defense Industrial Bases

• Nvidia’s Newborn ChatRTX Bot Patched For Security Bugs

• The Complexity And Need To Manage Mental Well-Being In The Security Team

• Ubuntu Will Manually Review Snap Store After Crypto Wallet Scams

• JetBrains Keeps Mum On 26 Security Problems Fixed After Rapid7 Spat

• PyPI Goes Quiet After Huge Malware Attack: 500+ Typosquat Fakes Found

• The Rising Energy Demand of Data Centres and Its Impact on the Grid

• Data Breach Alert: 3TB of NHS Scotland Data Held Ransom by Cyber Threat

• The Netherlands To Spend Billions To Retain ASML Operations

• MFA bombing taken to the next level

• How to Conduct an Internal Audit: A Comprehensive Guide

• Meet the Phishing service platform named Darcula

• Hot Topic customers targeted by Credential Stuffing attacks

• Kiosks in Brookline is Tracking Cell Phone Data

• Smartphone Shipments To Rebound In 2024, Says Counterpoint

• ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

• Manufacturing on the Cyber Frontlines: Enhancing Cybersecurity on the Factory Floor

• Collaboration Innovation at Enterprise Connect 2024

• In Other News: Airline Privacy Review, SEC’s SolarWinds Hack Probe, Apple MFA Bombing

• SydeLabs Emerges From Stealth Mode With $2.5 Million in Funding

• Dormakaba Locks Used in Millions of Hotel Rooms Could Be Cracked in Seconds

• Payment authorization and one-time passwords – Mobile Token

• Hacker Generates 1 Billion CGT Tokens Valued at $40 Million within Curio Ecosystem

• IdeaSoft To Launch an Innovative Perpetual DEX on INTMAX’s Open-source L2 Plasma Next

• Restricting Flipper is a Zero Accountability Approach to Security: Canadian Government Response to Car Hacking

• How to back up your iPhone to iCloud

• How to back up your iPhone to a Mac

• How to back up your iPhone to a Windows computer

• How to back up your Windows 10/11 PC to OneDrive

• How to back up your Mac

• CISA Launches New Cyber Incident Reporting Rules for US Defense Contractors

• World Backup Day 2024: Navigating the Future of Cyber security with Cloud Solutions

• Pentagon Outlines Cybersecurity Strategy for Defense Industrial Base

• Exclusive: Waffle House Risk Index 1.0 Open For Public Comment Period

• CRM Backup Trends to Watch on World Backup Day

• TheMoon Botnet Resurfaces, Exploiting EoL Devices to Power Criminal Proxy

• China Bans Intel, AMD Chips, Windows OS From Government Computers

• Cisco warns of password-spraying attacks targeting Secure Firewall devices

• Making Our Infrastructure Resilient: 5 Priorities for Security R&D

• Energy Department Invests $15 Million in University Cybersecurity Centers

• The Complexity and Need to Manage Mental Well-Being in the Security Team

• Data Highways: Navigating the Privacy Pitfalls of New Automobiles

• Unveiling the New Era of Hacking Ethics: Profit Over Principles

• Microsoft unveils safety and security tools for generative AI

• The Power of ISP Proxies: Unlocking Local Content and Resources

• Linux Kernel Privilege Escalation Vulnerability (CVE-2024-1086) Alert

• Industrial Enterprise Operational Technology Under Threat From Cyberattacks

• WarzoneRAT Returns Post FBI Seizure: Utilizing LNK & HTA File

• Beware Of Weaponized Air Force invitation PDF Targeting Indian Defense And Energy Sectors

• The Golden Age of Automated Penetration Testing is Here

• Compromised SaaS Supply Chain Apps: 97% of Organizations at Risk of Cyber Attacks

• Google Revealed Kernel Address Sanitizer To Harden Android Firmware And Beyond

• Lessons from a Ransomware Attack against the British Library

• 26 Security Issues Patched in TeamCity

• Massachusetts Health Insurer Data Breach Impacts 2.8 Million

• Cyber Security Today, March 29, 2024 – PyPI repository shuts to stop malicious uploads, a plea to developers to stop creating apps with SQL vulnerabilities, and more

• New Linux Bug Could Lead to User Password Leaks and Clipboard Hijacking

• Stream.Security unveils threat investigation and AI-powered remediation capabilities

• American fast-fashion firm Hot Topic hit by credential stuffing attacks

• LockBit Hacker Sentenced To 4 Years Jail Plus Fined $860K

• Understanding the Surge in Cyber Kidnapping: Exploring the Factors Behind the Rise

• IT and security Leaders Feel Ill-Equipped to Handle Emerging Threats: New Survey

• Understanding ISO 27001:2022 Annex A.6 – Organization of Information Security

• Quick Forensics Analysis of Apache logs, (Fri, Mar 29th)

• How to Analyse .NET Malware? – Reverse Engineering Snake Keylogger

• Symmetry Systems Ramps Up Hybrid-Cloud Data Security with $15 Million Series A Funding

• PyPI Halts Sign-Ups Amid Surge of Malicious Package Uploads Targeting Developers

• AI abuse and misinformation campaigns threaten financial institutions

• How much does cloud-based identity expand your attack surface?

• Advanced cybersecurity strategies boost shareholder returns

• Cloud Security Posture Management (CSPM): Ensuring Cloud Compliance

• What is Threat Management?

• New infosec products of the week: March 29, 2024

• England Cricket – 43,299 breached accounts

• C2A Security’s EVSec Platform: Driving Cybersecurity Compliance in the Automotive Industry

• Next-Generation Firewall (NGFW): Enhancing Network Security

• ISC Stormcast For Friday, March 29th, 2024 https://isc.sans.edu/podcastdetail/8916, (Fri, Mar 29th)

• Thread Hijacking: Phishes That Prey on Your Curiosity

Generated on 2024-03-30 23:55:39.173533