IT Security News Daily Summary 2024-04-09

• Is My VPN Working? How to Test for VPN Leaks

• VERT Threat Alert: April 2024 Patch Tuesday Analysis

• April’s Patch Tuesday Brings Record Number of Fixes

• Section 702: The Future of the Biggest US Spy Program Hangs in the Balance

• Should You Pay a Ransomware Attacker?

• USENIX Security ’23 – Qifan Xiao, Xudong Pan, Yifan Lu, Mi Zhang, Jiarun Dai, Min Yang,- xorcising “Wraith”: Protecting LiDAR-based Object Detector In Automated Driving System From Appearing Attacks

• FCC Mulls Rules to Protect Abuse Survivors from Stalking Through Cars

• April 2024 Microsoft Patch Tuesday Summary, (Tue, Apr 9th)

• Over 91,000 LG smart TVs running webOS are vulnerable to hacking

• Active Nitrogen campaign delivered via malicious ads for PuTTY, FileZilla

• Microsoft patches actively exploited security feature bypass vulnerability (CVE-2024-29988)

• Unit 42: Malware-initiated scanning attacks on the rise

• Speaking Freely: Mary Aileen Diez-Bacalso

• Microsoft Plugs Gaping Hole in Azure Kubernetes Service Confidential Containers

• April’s Patch Tuesday includes 150 vulnerabilities, 60 which could lead to remote code execution

• The Essential Tools and Plugins for WordPress Development

• Fortinet Releases Security Updates for Multiple Products

• Microsoft employees exposed internal passwords in security lapse

• Toward greater transparency: Adopting the CWE standard for Microsoft CVEs

• Muddled Libra’s Evolution to the Cloud

• Got an unpatched LG ‘smart’ television? It could be watching you back

• Patch Tuesday: Code Execution Flaws in Multiple Adobe Software Products

• Daniel Stori’s ‘Minimum Viable Elevator’

• LG smart TVs may be taken over by remote attackers

• 0G Launches Newton Testnet of Ultra-Scalable Modular AI Blockchain

• How to Use Cyber Threat Intelligence ? 4 TI Categories to Learn SOC/DFIR Team

• ScrubCrypt used to drop VenomRAT along with many malicious plugins

• OffSec Versus: Revolutionizing Cybersecurity Training Through Live-Fire Collaboration

• Behind Enemy Lines: Understanding the Threat of the XZ Backdoor

• Patch Tuesday Update – April 2024

• Hackers Use Malware to Hunt Software Vulnerabilities

• “Let’s Get the Third Party Started In Here,”

• Google Cloud Next 2024: New Data Center Chip and Chrome Enterprise Premium Join the Ecosystem

• CISA Releases One Industrial Control Systems Advisory

• SUBNET PowerSYSTEM Server and Substation Server

• Asia-Focused Dark Web Threat Intelligence Startup StealthMole Raises $7 Million

• Data Security Firm Cyera Raises $300 Million at $1.4 Billion Valuation

• The Hidden Danger of Public USB Charging Stations: What You Need to Know

• Google workspace to use AI for Data Security

• Private Data of 7.5 million BoAt Users Leaked in Massive Data Breach

• Change Healthcare Hit By Cyber Extortion Again

• SaaS Asset and User Numbers are Exploding: Is SaaS Data Security Keeping Up?

• Home Depot Confirms Data Breach Via Third Party Vendor

• Critical Takeover Vulns In 92,000 D-Link Devices Under Active Exploitation

• US Insurers Use Drone Photos To Deny Home Insurance Policies

• CISO Conversations: Nick McKenzie (Bugcrowd) And Chris Evans (HackerOne)

• Three Key Threats Fueling the Future of Cyber Attacks

• New Google Workspace feature prevents sensitive security changes if two admins don’t approve them

• Hackers Targeting Human Rights Activists in Morocco and Western Sahara

• 10-Year-Old ‘RUBYCARP’ Romanian Hacker Group Surfaces with Botnet

• Android 15’s Private Space feature could better protect your sensitive data

• Why the Keitaro TDS keeps causing security headaches

• What Is a SaaS Security Checklist? Tips & Free Template

• X adds support for passkeys globally on iOS

• Techstrong Group Announces Rebranding of Security Bloggers Network to Security Creators Network

• What Security Metrics Should I Be Looking At?

• SurveyLama Data Breach Exposes Millions of Users’ Information

• ESET Small Business Security offers protection against online fraud, data theft and human error

• Research Unearths RUBYCARP’s Multi-Miner Assault on Crypto

• $937 Bounty Awarded for Privilege Escalation and Local File Inclusion Vulnerabilities Patched in MasterStudy LMS WordPress Plugin

• Feds say Microsoft security ‘requires an overhaul’ — but will it listen?

• Raindex Launches On Flare To Power Decentralized CEX-Style Trading

• Ahoi Attacks – New Attack Breaking VMs With Malicious Interrupts

• Hackers Using ScrubCrypt ‘AV Evasion Tool’ To Exploit Oracle WebLogic Servers

• US Cyber Safety Review Board on the 2023 Microsoft Exchange Hack

• ICS Patch Tuesday: Siemens Addresses Palo Alto Networks Product Vulnerabilities

• SAP’s April 2024 Updates Patch High-Severity Vulnerabilities

• TufinMate accelerates network access troubleshooting

• Gurucul Data Optimizer provides control over real-time data transformation and routing

• Researchers Discover LG Smart TV Vulnerabilities Allowing Root Access

• Foreign Interference Drives Record Surge in IP Theft

• 91,000 Smart LG TV Devices Vulnerable to Remote Takeover

• Google Gemini Code Assist – Code With AI Intelligence

• Check Point Supercharges Brisbane Catholic Education’s Security Stack to Improve Threat Detection and Streamline Manageability

• March 2024’s Most Wanted Malware: Hackers Discover New Infection Chain Method to Deliver Remcos

• Ransomware gang’s new extortion trick? Calling the front desk

• #MIWIC2024: Illyana Mullins, Founder of WiTCH (Women in Tech and Cyber Hub CIC)

• The role of certificate lifecycle automation in enterprise environments

• Exploring HelpWire: A New Option in Free Remote Support Software

• Thousands Of Internet-Exposed Ivanti VPN Appliances Vulnerable To RCE Attacks

• Google unveils new Gemini-powered security updates to Chronicle and Workspace

• Google injects generative AI into its cloud security tools

• Chrome Enterprise goes Premium with new security and management features

• Entering the Next Chapter of SASE at InterSECt 2024

• Keeper Security Tightens Access Control with New Features

• Synopsys Introduces Latest Solution for Comprehensive Security Across Software Supply Chains

• The Role of Identity Data Management in Achieving CISA’S Strategic Goals

• UK businesses shockingly unaware of how to handle security threats

• What AI Can Do Today? The latest generative AI tool to find the perfect AI solution for your tasks

• Sectigo appoints Jason Scott as CISO

• Rocket DevOps simplifies compliance processes

• Google Adds V8 Sandbox To Chrome To Fight Against Browser Attacks

• Expert Insight: Growing Your Mindset

• Using emerging technology to bridge the cyber skills gap

• SE Labs Annual Security Awards 2024

• CL0P’s Ransomware Rampage – Security Measures for 2024

• Starry Addax targets human rights defenders in North Africa with new malware

• The Threat That Can’t Be Ignored: CVE-2023-46604 in Apache ActiveMQ

• Building Bridges: Embracing Change, Growth, and Discovery at Cisco

• Defusing the threat of compromised credentials

• Second Ransomware Group Extorting Change Healthcare

• DOJ-Collected Information Exposed in Data Breach Affecting 340,000

• CISO Conversations: Nick McKenzie (Bugcrowd) and Chris Evans (HackerOne)

• CVS Group Restoring Systems Impacted by Cyberattack

• Cyber Attack on Consulting Firm Exposes DOJ Data of 341,000 People

• Targus Hacked: Attackers Gain Access to File Servers

• AI data security startup Cyera confirms $300M raise at a $1.4B valuation

• Akamai Shield NS53 protects on-prem and hybrid DNS infrastructure

• 6 Best Open Source Password Managers for Windows in 2024

• 35-year long identity theft leads to imprisonment for victim

• New Latrodectus loader steps in for Qbot

• Darktrace ActiveAI Security Platform helps organizations shift focus to proactive cyber resilience

• Shield NS53 Protects Your Origin DNS Infrastructure from NXDOMAIN Attacks

• Samsung To Receive $6bn For Texas Chip Expansion

• Google announces V8 Sandbox to protect Chrome users

• Exploitation Attempts Target Unpatched Flaw Affecting Many D-Link NAS Devices

• StrikeReady Raises $12M to Build AI-Powered Security Command Center

• SINEC Security Guard identifies vulnerable production assets

• Room for Error: Hotel Check-In Terminal Flaw Leads to Access Code Leak

• HashKey Launches Global Crypto Exchange, Targets Coinbase

• PC Shipments Return To Pre-Pandemic Levels In First Quarter

• Sprinto raises $20M to bring automation to security compliance management

• Over 90,000 D-Link NAS Devices Are Under Attack

• Top Israeli Spy Chief Identity Exposed In A Privacy Mistake

• Parasoft unveils safety testing tool for C and C++ apps

• Cybersecurity Compliance Around the Globe: India’s DPDP

• TechRepublic Academy Is Offering Extra 20% Off Most Deals Through April 16

• Cloudflare partners with Booz Allen Hamilton to guide organizations under attack

• Why payers are pivotal to API security across the healthcare ecosystem

• Brazil Judge Opens Probe Into Elon Musk

• TSMC Expands Arizona Chip Plans Under $6.6bn US Deal

• Notepad++ Wants Your Help to Take Down the Parasite Website

• Attackers Using Obfuscation Tools to Deliver Multi-Stage Malware via Invoice Phishing

• Why Identity Management is Key in a Cyber Resilience Strategy

• Microsoft To Open AI Hub In London After Suleyman Hire

• Google Rolls Out “Find My Device” Network for Android Users

• China is using generative AI to carry out influence operations

• Podcast Episode: Antitrust/Pro-Internet

• How Avast One Silver adapts to your unique online world

• D-Link RCE Vulnerability That Affects 92,000 Devices Exploited in Wild

• HTTP/2 Vulnerability Let Hackers Launch DOS Attacks on Web Servers

• Kaspersky Club – 55,971 breached accounts

• CVE-2024-3094: RCE Vulnerability Discovered in XZ Utils

• Embracing the Cloud: Revolutionizing Privileged Access Management with One Identity Cloud PAM Essentials

• Critical Flaws Leave 92,000 D-Link NAS Devices Vulnerable to Malware Attacks

• Another ransomware gang reclaims to have hacked United Health

• How exposure management elevates cyber resilience

• boAt – 7,528,985 breached accounts

• Strategies for secure identity management in hybrid environments

• EJBCA: Open-source public key infrastructure (PKI), certificate authority (CA)

• Exploring How Penetration Tests Are Classified – Pentesting Aspirant Guide 2024

• Defining a holistic GRC strategy

• Building a DDR Strategy: A Step-by-Step Guide

• ISC Stormcast For Tuesday, April 9th, 2024 https://isc.sans.edu/podcastdetail/8930, (Tue, Apr 9th)

• 10 Million Devices Were Infected by Data-Stealing Malware in 2023

• Targus says cyberattack is causing operational outage

• Targus says cyberattack causing operational outage

• Protecting art and passwords with biochemistry

• It Was Not Me! Malware-Initiated Vulnerability Scanning Is on the Rise

• EU Assessing Apple Compliance Plan That Provoked Anger

• Flaws in legacy D-Link NAS devices under attack

• Vulnerability Recap 4/8/24 – Google, HTTP/2 Join Ivanti

• Google Adds Security Command Center Enterprise to Mandiant Portfolio

• IT Security News Daily Summary 2024-04-08

• Greylock McKinnon Associates data breach exposed DOJ data of 341650 people

• Hashicorp Versus OpenTofu Gets Ugly

• US insurers use drone photos to deny home insurance policies

• Facebook Accused Of Censoring Small Newspaper That Criticized It

• Leveraging Cloud Native Technologies in the Broadcast Industry

• Crowdfense is offering a larger 30M USD exploit acquisition program

• USENIX Security ’23 – Lukas Seidel, Dominik Maier, Marius Muench – Forming Faster Firmware Fuzzers

• XZ Utils Supply Chain Attack: A Threat Actor Spent Two Years to Implement a Linux Backdoor

• HHS: Heath Care IT Helpdesks Under Attack in Voice Scams

• Barracuda Report Provides Insight into Cybersecurity Threat Severity Levels

• Vulnerability Summary for the Week of April 1, 2024

• Home Depot confirms worker data leak after miscreant dumps info online

• Lazy Koala: New Cyber Threat Emerges in CIS Region

• AGENT TESLA Malware Steals login Credentials From Chrome & Firefox

• The music industry must find a way to stay in tune with GenAI

• All eyes on cyberdefense as elections enter the generative AI era

• Home Depot confirms data theft after crook threatens to dump inside info online

• Threat Actors Deliver Malware via YouTube Video Game Cracks

• Here Comes the US GDPR: APRA, the American Privacy Rights Act

• Email Security Vulnerabilities: Shocking Gaps in Malware Detection

• backup storage device

• Hijacked Facebook Pages are pushing fake AI services to steal your data

• Hackers stole 340,000 Social Security numbers from government consulting firm

• #MIWIC2024: Jennifer Fernick, Senior Staff Security Engineer, Encryption Lead, Google

• Top 3 API Leaks Identified by Cybersecurity & InfoSec Experts

• An Unusual Tracking Feature Identified on Millions of iPhone Users

• Researchers Uncover Numerous Chinese Hacker Collectives Exploiting Ivanti Security Vulnerabilities

• The High Cost of Neglecting Backups: A Ransomware Wake-Up Call

• US Federal Data Privacy Law Introduced by Legislators

• Ransomware threat to diminish in this year 2024

• New Malware “Latrodectus” Linked to IcedID

• Byakugan Infostealer Capabilities Revealed

• ScrubCrypt Deploys VenomRAT with an Arsenal of Plugins

• Zero Trust Access: The Transformative Blueprint for Achieving Regulatory Compliance

• Porn panic imperils privacy online, with Alec Muffett (re-air): Lock and Code S05E08

• Indian audio giant BoAt says it’s investigating suspected customer data breach

• Transform Media Broadcasting with IP: Cisco and Imagine Communications

• Cisco Access Points among the First to Be Standard-Power Certified by the FCC

• The Quantum Shift

• Puppies, kittens, data at risk after ‘cyber incident’ at veterinary giant

• Thousands of Ivanti VPN Appliances Impacted by Recent Vulnerability

• Chinese Hackers Using AI Tools To Influence Upcoming Elections

• Cisco IOS Vulnerability Allows DOS Attacks via Malicious Traffic

• 4 lessons industrial companies can draw from the British Library cyberattack

• CISO Life: the Good, the Bad, the Ugly

• Protect Your Attack Surface from Evolving Attack Vectors

• What is Attack Surface Management (ASM) and How Has it Changed?

• Bitdefender Digital Identity Protection guards against web data leaks

• Google Chrome Adds V8 Sandbox – A New Defense Against Browser Attacks

• The Pitfalls of Periodic Penetration Testing & What to Do Instead

• Bing Ad Posing As NordVPN Aims To Spread SecTopRAT Malware

• Change Healthcare Faces Second Ransomware Dilemma

• US Lawmakers Strike Deal On Data Privacy Legislation

• Confidential VMs Hacked Via New Ahoi Attacks

• Company Offering $30 Million For Android, iOS, Browser Zero-Day Exploits

• Confidential VMs Hacked via New Ahoi Attacks

• Key Lawmakers Float New Rules for Personal Data Protection; Bill Would Make Privacy a Consumer Right

• Healthcare IT Help Desk Employees Targeted in Payment-Hijacking Attacks

• Best 5 Privacy Management Tools for 2024

• Exploiting limited markup features on web applications

• Cyber-Physical Systems Security Analysis Challenges and Solutions 2024

• Secrets Management in the Age of AI Cybercrime: Safeguarding Enterprises from Emerging Threats

• Join Cequence Security at RSA Conference 2024: Protect What Connects You with Advanced API Security Solutions

• Cracking Down on Crime: Europol Shares Data on Europe’s Top Threats

• Panera Bread and Omni Hotels Hit by Ransomware Outages: What You Need to Know

• The Legacy of a Security Breach

• Attackers Find Your Session Cookies Irresistible

• XZ Utils backdoor: Detection tools, scripts, rules

• Veriato introduces AI-driven predictive behavior analytics platform

• Vet Clinic Chain CVS Hit by Cyberattack, Disrupts UK Operations

• Change Healthcare faces second ransomware dilemma weeks after ALPHV attack

• Unleash Platform Power with Strata Cloud Manager’s Command Center

• Company Offering $30 Million for Android, iOS, Browser Zero-Day Exploits

• Veterinary Giant IT System Attacked by Hackers

• Understanding Infosec Isolation Solutions: Fortress Walls for Your Digital Assets

• SymphonyAI unveils SensaAI for Sanctions to detect hidden risk in unstructured data

• Quantum Security and Networking are Emerging as Lifelines in Our Quantum-powered Future

• Famous YouTube Channels Hacked to Distribute Infostealers

• Learn how to Protect Your Business With this $28 Cybersecurity Training

• AI Scam Calls: How to Protect Yourself, How to Detect

• U.S. Department of Health warns of attacks against IT help desks

• Google Adds V8 Sandbox to Chrome

• How to Get CMMC Certified

• Cyber Security Today, April 8, 2024 – Crooks are hijacking Facebook pages to spread phoney AI applications

• The Drop in Ransomware Attacks in 2024 and What it Means

• Watch Out for ‘Latrodectus’ – This Malware Could Be In Your Inbox

• Cybersecurity Incidents Making Headlines on Google

• Avoiding Cloud Breaches: Top 5 Misconfigurations to Watch For

• Vedalia APT Group Exploits Oversized LNK Files to Deliver Malware

• X Hands Out Blue Ticks To ‘Influential’ Users

• Google Sues Alleged Crypto Scammers

• EU Launches Probe Into China Legacy Chips, Following US Lead

• Senator Calls For ‘Path Forward On TikTok’

• NSA Appoints Dave Luber as Cybersecurity Director

• Understanding Cybersecurity Basics for Businesses

• Multiple CData Vulnerabilities Let Attackers Bypass Security Restrictions

• boAt – 7,528,986 breached accounts

• UK Retailers Lost £11.3bn to Fraud in 2023

• AI/ML Digital Everest: Dodging System Failure Summit Fever

• Gone Phishing 2023: Here Are the Results!

• Cybercriminals Targeting Latin America with Sophisticated Phishing Scheme

• Multiple Cisco Small Business Routers Vulnerable to XSS Attacks

• A week in security (April 1 – April 7)

• 92,000+ internet-facing D-Link NAS devices accessible via “backdoor” account (CVE-2024-3273)

• Hospital IT Helpdesks Targeted By Voice Fraudsters, Warns HHS

• A new smart home security standard is coming

• Samsung Expeccts 900 Percent Profit Jump Amidst AI Boom

• Samsung More Than Doubles Texas Chip Plant Investment

• AI-As-A-Service Providers Vulnerability Let Attackers Perform Cross-Tenant Attacks

• Massive AT&T Data Leak, The Danger of Thread Hijacking

• Veterinary Giant CVS Reveals Major Cyber-Attack

• Understanding ISO 27001:2022 Annex A.11 – Physical and Environmental Security

• Google Expands AI-Powered Search Test To UK Users

• Microsoft Two-Step Phishing Campaign Attack LinkedIn Users

• Cloudflare Acquires Baselime to Enhance Serverless Performance

• Head of Israeli cyber spy unit exposed … by his own privacy mistake

• Google Sues App Developers Over Fake Crypto Investment App Scam

• How can the energy sector bolster its resilience to ransomware attacks?

• April 2024 Patch Tuesday forecast: New and old from Microsoft

• WiCyS: A champion for a more diverse cybersecurity workforce

• How malicious email campaigns continue to slip through the cracks

• Threat actors are raising the bar for cyber attacks

• Industrial sectors embrace zero trust for enhanced security

• ISC Stormcast For Monday, April 8th, 2024 https://isc.sans.edu/podcastdetail/8928, (Mon, Apr 8th)

• CoralRaider Hackers Steals Login Credentials, Financial Data & Social Media Logins

• Hornetsecurity Nominated in 2024 ‘ASTORS’ Homeland Security Awards

• A Use Case for Adding Threat Hunting to Your Security Operations Team. Detecting Adversaries Abusing Legitimate Tools in A Customer Environment. [Guest Diary], (Sun, Apr 7th)

• The best secure browsers for privacy in 2024

Generated on 2024-04-09 23:55:53.853997