IT Security News Daily Summary 2024-04-02

• 3 UK Cyber Security Trends to Watch in 2024

• How to Escape the 3 AM Page as a Kubernetes Site Reliability Engineer

• A Deep Dive on the xz Compromise

• Defending against IoT ransomware attacks in a zero-trust world

• Open source foundations unite on common standards for EU’s Cyber Resilience Act

• Rubrik’s IPO filing hints at thawing public markets for tech companies

• Microsoft expands Priva suite to tackle evolving privacy landscape

• Understanding Brute Force Attacks: The Persistent Threat in Cybersecurity

• XSS flaw in WordPress WP-Members Plugin can lead to script injection

• OWASP server blunder exposes decade of resumes

• Chrome’s Incognito Mode Isn’t as Private as You Think — but Google’s Not Sorry

• Microsoft Copilot for Security brings GenAI to SOC teams

• Open source foundations unite on common standards for EU’s Cybersecurity Resilience Act

• xz Utils Backdoor

• Google To Destroy Browsing Data To Settle Consumer Privacy Lawsuit

• Microsoft Warns Deepfake Election Subversion Is Disturbingly Easy

• Security Flaw In WP-Members Plugin Leads To Script Injection

• Heartbleed Is 10 Years Old – Farewell Heartbleed, Hello QuantumBleed!

• OWASP breach exposes decade of resumes due to misconfigured server

• Shares In Trump’s Truth Social Firm Rise, Then Tumble

• Powerloom Announces Expansion to Base as It Surpasses 5200 Snapshotter Lite Nodes

• Binarly released the free online scanner to detect the CVE-2024-3094 Backdoor

• Public WiFi Convenience Leads to Cyber Threats, Read to Know Everything

• Foiled Attempt to Hack Supply Chain Sparks Concerns in Washington DC

• Authentic8 launches Silo Shield Program to Protect High-Risk Communities in Partnership with CISA

• US, UK join forces on AI safety and testing AI models

• Cloud computing forensics techniques for evidence acquisition

• OpenAI Drops Sign Up Need To Access ChatGPT

• Declassified NSA Newsletters

• The Challenges of Zero Trust 800-207 and Advocating for Prescriptive Controls

• Chrome’s Incognito Mode: Not as Private as You Think — but Google’s not Sorry

• UK, US Sign Agreement To Test AI Safety

• Authentic8 launches Silo Shield program to protect high-risk communities in partnership with CISA

• Chrome to Fight Cookie Theft With Device Bound Session Credentials

• AT&T Data Breach Reveals 73 Million Users’ Info on Hacker Forum

• Navigating Data Protection: What Car Shoppers Need to Know as Vehicles Turn Tech

• Linux Servers Targeted by DinodasRAT Malware

• Google’s latest project could help protect you against cookie theft

• Pandabuy admits to data breach of 1.3 million unique records

• Sophos: Backups are in the Crosshairs of Ransomware Groups

• AT&T Confirms 73 Million Customer Data Breach Linked to Dark Web

• Ransomware criminals target backups for assured ransom

• Apple To Bring RCS To iPhones Autumn 2024, Says Google

• 5 Major Phishing Campaigns in March 2024

• TechCrunch Minute: AT&T data breach prompts millions of passcodes to be reset

• Security Flaw in WP-Members Plugin Leads to Script Injection

• SBOMs are now essential: Make them actionable to better manage risk

• Researchers Report Sevenfold Increase in Data Theft Cases

• $5,500 Bounty Awarded for Unauthenticated SQL Injection Vulnerability Patched in LayerSlider WordPress Plugin

• CISA Publishes High-Risk Communities Webpage

• IOSIX IO-1020 Micro ELD

• CISA Publishes New Webpage Dedicated to Providing Resources for High-Risk Communities

• CISA Releases One Industrial Control Systems Advisory

• ‘Reverse’ searches: The sneaky ways that police tap tech companies for your private data

• Cisco Secure Application makes it easier than ever to secure your cloud native applications and sensitive data

• Google Strengthens Gmail Security, Blocks Spoofed Emails to Combat Phishing

• Microsoft Unbundles Teams From Office Suite

• Microsoft warns deepfake election subversion is disturbingly easy

• Re-architecting Broadband Networks

• Build for Better Code Challenge Focuses on AI and Sustainability

• Trusted Contributor Plants Sophisticated Backdoor in Critical Open-Source Library

• The Future of Defense in an Era of Unprecedented Cyber Threats

• Cybersecurity trends: Some rays of hope among the dark clouds

• What Kubernetes Users Need to Know About Windows Node Attacks

• 4 Incident Triage Best Practices for Your Organization in 2024

• JCDC Working and Collaborating to Build Cyber Defense for Civil Society and High-Risk Communities

• Trusted Advisor now available for Mac, iOS, and Android

• The Latest Threat CISOs Cannot Afford to Ignore—Business Payment Fraud

• Silicon In Focus Podcast: Smart ESG: Your Data, Your Sustainability

• The evolution of a CISO: How the role has changed

• Hotel Self Check-In Kiosks Exposed Room Access Codes

• Deciphering the Impact of Neural Networks on Artificial Intelligence Evolution

• Fortinet upgrades its real-time network security operating system

• Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution

• Clearpool Expands to Avalanche with Listed Fintech Firm Launching First Credit Vault

• Swalwell for Congress Campaign Partners with Wolfsbane.ai to Protect Against AI-Generated Cloning

• Indian Govt Rescues 250 Citizens Trapped In Cambodia Forced Into Cyber-Slavery

• Rubrik files to go public following alliance with Microsoft

• Fastly Bot Management protects websites, apps, and valuable data from malicious automated traffic

• Hundreds of Indians Rescued from Cambodian Cybercrime Gangs

• Swalwell for Congress Campaign Partners with Wolfsbane.ai to Protect Against AI Generated Cloning

• Beyond Imagining – How AI is actively used in election campaigns around the world

• Top 6 Passwordless Authentication Solutions for 2024

• Prioritizing risk based vulnerability compliance for Financial Institutions

• Tech Tools for the Future: Zebras, AI, and Girls in ICT Day

• AI, Cybersecurity and the Rise of Large Language Models

• Compromising Bank Customer Trust: The Price of Inadequate Data Protection

• Why risk management is key for Oracle ERP Cloud Success

• PandaBuy Data Breach: 1.3 Million Customers Data Leaked

• Google agreed to erase billions of browser records to settle a class action lawsuit

• Cybersecurity M&A Roundup: 27 Deals Announced in March 2024

• AT&T data leaked: 73 million customers affected

• Adversaries are leveraging remote access tools now more than ever — here’s how to stop them

• Understanding LLM Security: Threats, Applications, and Everything In-Between

• Polish officials may face criminal charges in Pegasus spyware probe

• From Mobile Coding to Cisco Intern: My Tech Transformation Story

• Google To Destroy Billions Of Private Browsing Records

• Google to Delete Billions of User’s Personal Data Collected Via Chrome Browser

• INC Ransom claims to be behind ‘cyber incident’ at UK city council

• OWASP Data Breach Caused by Server Misconfiguration

• Prudential Financial Data Breach Impacts 36,000

• Heartbleed is 10 Years Old – Farewell Heartbleed, Hello QuantumBleed!

• In the News | State Governments Can Boost K-12 Cybersecurity

• Harnessing the Power of CTEM for Cloud Security

• Top 3 Cybersecurity Tools to Protect Business Data

• #MIWIC2024: Dr. Iretioluwa Akerele, Co-Founder of Cyblack

• Cato Shatters SASE Speed Record

• Keeper Security Announces Passkey Support on Mobile Devices

• Expert Insight: Why do women feel cybersecurity isn’t for them?

• Rhysida Ransomware leaks MarineMax data files after cyber attack

• Alert: Connectwise F5 Software Flaws Used To Breach Networks

• Navigating the PHP 7.4 End of Life: A Retrospective Analysis

• OpenSSL Vulnerabilities Patched in Ubuntu 18.04

• LogRhythm Axon enhancements improve data management and operational efficiency

• TechRepublic Premium Editorial Calendar: Policies, Checklists, Hiring Kits and Glossaries for Download

• Happy 20th birthday Gmail, you’re mostly grown up – now fix the spam

• Boat Dealer MarineMax Confirms Data Breach

• The Best SIEM Tools To Consider in 2024

• Veracode acquires Longbow Security to help organizations reduce application risk

• Indian Authorities Rescue Hundreds Trafficked For Cybercrime

• Pentagon Releases Cybersecurity Strategy To Strengthen Defense Industrial Base

• Avoiding the dangers of AI-generated code

• What’s New in NIST’s Cybersecurity Framework 2.0?

• Oops, Malware! Now What? Dealing with Accidental Malware Execution

• Impersonation Scams Net Fraudsters $1.1bn in a Year

• xz-utils Backdoor Affects Kali Linux Installations – How to Check for Infection

• Live Forensic Techniques To Detect Ransomware Infection On Linux Machines

• The XZ Backdoor: Everything You Need to Know

• PandaBuy data breach allegedly impacted over 1.3 million customers

• On Hiatus

• 71% Website Vulnerable: API Security Becomes Prime Target for Hackers

• Apple’s GoFetch silicon security fail was down to an obsession with speed

• Volt Typhoon Threat Report

• Google to Delete Billions of Browsing Records in ‘Incognito Mode’ Privacy Lawsuit Settlement

• OpenSSL 3.3 Beta Release Live

• Veracode Announces Acquisition of Longbow Security

• Earth Freybug Uses UNAPIMON for Unhooking Critical APIs

• Massive Phishing Campaign Strikes Latin America: Venom RAT Targeting Multiple Sectors

• What the ID of tomorrow may look like

• Cloud Active Defense: Open-source cloud protection

• Why AI forensics matters now

• Cybersecurity Training for Employees: Building a Security-Aware Culture

• 73% brace for cybersecurity impact on business in the next year or two

• 6 keys to navigating security and app development team tensions

• ISC Stormcast For Tuesday, April 2nd, 2024 https://isc.sans.edu/podcastdetail/8920, (Tue, Apr 2nd)

• Google to Purge Billions of Files Containing Personal Data in Settlement of Chrome Privacy Case

• Unearthing Identity Threat Exposures

• Six banks share customer info to help Singapore fight money laundering

• Cloud Security Compliance: Navigating Regulatory Requirements

• A software supply chain meltdown: What we know about the XZ Trojan

• Backdoor Discovered in XZ Utils: Patch Your Systems Now (CVE-2024-3094)

• Webinar Recap: Cybersecurity Trends to Watch in 2024

• US House of Reps tells staff: No Microsoft Copilot for you!

• OWASP discloses a data breach

• Data Privacy: A Guide for Individuals & Families

• IT Security News Daily Summary 2024-04-01

• Banks in Singapore begin sharing data to combat financial crime

• The Incognito Mode Myth Has Fully Unraveled

• 2024 State of Malware in Education report: Top 6 cyberthreats facing K-12 and Higher Ed

• Malicious xz backdoor reveals fragility of open source

• Veracode Buys Longbow Security for Automated Root Cause Analysis Tech

• HYAS Threat Intel Report April 1 2024

• Can Parents See Internet History on Wi-Fi?

• Facebook Scammer Tricked His Way Into Victims’ Home Before Stealing Laptop

• Cisco at NAB 2024: Committed to Delivering Next-Level Experiences That ‘Wow’

• Vulnerability Recap 4/1/24: Cisco, Fortinet & Windows Server Updates

• Introducing New Pricing For Wordfence CLI!

• Data Security Fears: Congress Bans Staff Use of Microsoft’s AI Copilot

• Top Tech Conferences & Events to Add to Your Calendar in 2024

• Transform Your Cybersecurity Training with OffSec’s Cyber Ranges

• Free VPN apps turn Android phones into criminal proxies

• Beware of the FedEx Courier Scam: How Innocent Indians Are Losing Money

• Rising Cybercrime Threats and Prevention Measures Ahead of 2024

• The Critical Role of IT Support and Services in Today’s Business World

• AT&T resets passcodes for 7.6 million customers after data leak. What experts are saying

• The biggest challenge with increased cybersecurity attacks, according to analysts

• Understanding ISO 27001:2022 Annex A.9 – Access Control

• The Cybersecurity Industry Starts Picking Through Malicious XZ Utils Code

• After Denial, AT&T Confirms Data Breach Affecting 73 Million Users

• 7 Common Cybersecurity Mistakes Made by SMBs

• Rev Up to Recert: Network Assurance Learn and earn CE credits for free

• Cryptocurrency and Blockchain security due diligence: A guide to hedge risk

• Importance of report writing for pen testers

• Ola Bini Faces Ecuadorian Prosecutors Seeking to Overturn Acquittal of Cybercrime Charge

• ‘Vultur’ Android Malware Gets Extensive Device Interaction Capabilities

• ‘WallEscape’ Linux Vulnerability Leaks User Passwords

• The AI Revolution in Access Management: Intelligent Provisioning and Fraud Prevention

• Cybersecurity Industry Starts Picking Through Malicious XZ Utils Code

• Cybersecurity news headlines trending on Google

• Hackers Target macOS Users with Malicious Ads: A Deeper Look

• AI Hallucinated Packages Fool Unsuspecting Developers

• Here’s How Smart Card Are Tracking Your Private Data

• The amazingly scary xz sshd backdoor, (Mon, Apr 1st)

• Unauthenticated Stored Cross-Site Scripting Vulnerability Patched in WP-Members Membership Plugin – $500 Bounty Awarded

• New Zealand Joins US, UK, Netherlands Alleging Chinese Cyber Espionage

• New Vultur malware version includes enhanced remote control and evasion capabilities

• April is Emergency Communications Month

• OpenAI Delays Release Of Voice Cloning Tool, Amid Election Concerns

• AT&T resets passcodes for 7.6 million customers following dark web data leak

• How a Houthi-Bombed Ghost Ship Likely Cut Off Internet for Millions

• Pave the Way for New Revenue with Transport Slicing Automation and Assurance

• Real Time Exposure Detection Is the Missing Element of Every Cybersecurity Strategy

• Nearly 3M people hit in Harvard Pilgrim healthcare data theft

• Dark Data helps boost business: Unveiling hidden insights

• US Tightens AI Chip Export Restrictions To China

• Magic Security Dust

• FAQ On The xz-utils Backdoor

• Hackers Stolen Russian Prisoner Database To Avenge Death Of Navalny

• TheMoon Malware Grows To 40,000 Bots From 88 Countries

• Major Linux Distributions Impacted By XZ Utils Backdoor

• The Top MSP KPIs and Metrics You Should Measure as a Managed Service Provider

• Supply Chain Attack: Major Linux Distributions Impacted by XZ Utils Backdoor

• Confidence in the Cloud Starts With Visibility and Zero-Trust

• Indian Government Rescues 250 Citizens Forced into Cybercrime in Cambodia

• AT&T Says Data Of 7.6 Million Account Holders Leaked On Dark Web

• Ross Anderson, Professor & Author of ‘Security Engineering’ Book passes away

• Check Point Software: Pioneering Vision in Endpoint Protection

• Ex-White House CIO tells The Reg: TikTok ban may be diplomatic disaster

• Ethics of Cyber Security: To Disclose or Not?

• No Joke: You Can Actually Save Money on Cyber Insurance

• The Strategic Role of AI in Governance, Risk and Compliance (GRC)

• Australia Takes Stride In Cybersecurity Measures

• Werewolf Hackers Exploiting WinRAR Vulnerability To Deploy RingSpy Backdoor

• IRS scams: How to avoid getting tricked

• QR Code Phishing Attacks: Threat Actors Are Now Shopping Online with You

• AT&T admits massive 70m+ mid-March data dump is real, but claims it’s years old

• The Unseen Threat: How Chinese Hackers Target Family Members to Surveil Hard Targets

• The Week of Crypto Platform Breaches: Prisma Finance Incident Highlights

• Google new Password Manager raises security concerns

• What is innovative frictionless security

• 6 business benefits of data protection and GDPR compliance

• Pentagon established the Office of the Assistant Secretary of Defense for Cyber Policy

• Detecting Windows-based Malware Through Better Visibility

• The xz-utils backdoor in security advisories by national CSIRTs, (Mon, Apr 1st)

• Activision Players Attacked by Password Stealing Malware: Investigation In Progress

• Cyber Security Today, April 1, 2024 – An alert about a critical Linux vulnerability, a warning about password-spray attacks on Cisco VPNs, and more

• FTC Investigates TikTok Over Security, Privacy – Report

• Malicious Apps Caught Secretly Turning Android Phones into Proxies for Cybercriminals

• US Congress Bans Use Of Microsoft AI Copilot – Report

• Imperva Web Application Firewall Flaw Let Attackers Bypass WAF Rules

• New Hotel Lock Vulnerabilities, Glassdoor Anonymity Issues

• Info stealer attacks target macOS users

• Backdoor in upstream xz/liblzma Let Attackers Hack SSH Servers

• Pandabuy – 1,348,407 breached accounts

• XZ Utils Backdoor Vulnerability (CVE-2024-3094) Advisory

• The Internet just changed – did you notice?

• Hackers Using Microsoft OneNote Files to Orchestrate Cyber Attacks

• Critical Security Alert Released After Malicious Code Found in XZ Utils

• Behind the LockBit Takedown: Strategies and Significance

• A week in security (March 25 – March 31)

• Understanding ISO 27001-2022 Annex A.9 – Access Control

• A Ghost Ship’s Doomed Journey Through the Gate of Tears

• Vultur Android Banking Trojan Returns with Upgraded Remote Control Capabilities

• How to design and deliver an effective cybersecurity exercise

• DinodasRAT Linux Malware Attack on Linux Servers to Gain Backdoor Access

• Bombshell in SSH servers! What CVE-2024-3094 means for Kubernetes users

• Escalating malware tactics drive global cybercrime epidemic

• Infosec products of the month: March 2024

• Securing privacy in the face of expanding data volumes

• ISC Stormcast For Monday, April 1st, 2024 https://isc.sans.edu/podcastdetail/8918, (Mon, Apr 1st)

• Incident Response Playbooks: Streamlining Incident Management

• From OneNote to RansomNote: An Ice Cold Intrusion

• Ross Anderson

Generated on 2024-04-02 23:55:43.998888