IT Security News Daily Summary 2024-04-11

• 2024 Cybersecurity Excellence Awards – Extended Deadline

• Locking down container security once and for all with Rust-based Edera

• DuckDuckGo’s Privacy Pro bundles a VPN with personal data removal and identity theft restoration

• Why CISA is Warning CISOs About a Breach at Sisense

• US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft

• Simbian Unveils Generative AI Platform to Automate Cybersecurity Tasks

• Full-stack application and data security with business risk observability

• How One Industry Exemplifies the Importance Of Cybersecurity In Critical Infrastructure Assurance

• Apple warns people of mercenary attacks via threat notification system

• CISA discloses Sisense breach, customer data compromised

• Facebook Downplays Threat Of AI Misinformation In An Election Year

• How to check if your data was exposed in the AT&T breach

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• CISA Releases Nine Industrial Control Systems Advisories

• Siemens SINEC NMS

• Siemens RUGGEDCOM APE1808

• Siemens SIMATIC S7-1500

• US says Russian hackers stole federal government emails during Microsoft cyberattack

• US CISA published an alert on the Sisense data breach

• Apple Warns of ‘Mercenary Spyware Attacks’ on iPhone Users

• AI Integration in Cybersecurity Challenges

• Threatening Emails Rattle Bengal Schools: Police Pursue Latvia Lead

• The internet is already scary enough without April Fool’s jokes

• CISA Directs Federal Agencies to Immediately Mitigate Significant Risk From Russian State-Sponsored Cyber Threat

• identity management (ID management)

• Wordfence Intelligence Weekly WordPress Vulnerability Report (April 1, 2024 to April 7, 2024)

• Siemens Telecontrol Server Basic

• Siemens Scalance W1750D

• Siemens SIMATIC WinCC

• Cybersecurity Market Faces Funding Downturn in Q1 2024

• Micron Notes DRAM Supply Hit After Taiwan Earthquake

• Sisense Data Breach Triggers CISA Alert and Urgent Calls for Credential Resets

• Data Access Platform PVML Launches With $8 Million in Funding

• Zscaler to Acquire Network Segmentation Tech Startup Airgap Networks

• Google To Spend $1 Billion On Two Subsea Cables To Japan

• Instagram plans to blur nudes DMed to teens, hoping to fight sextortion scams

• Innovative Financing for Amazon Region Preservation and Restoration

• The Importance of a Multi-Layer Security Stack

• The Hidden Impact of Ad Fraud on Your Marketing Budget

• Look Out For SIM Swap Scams: Tips for Bitcoin Security

• How information can be protected in hotel data breaches

• Taxi Software Vendor Data Leak: 300K Passengers Data Exposed

• Google Cloud and Palo Alto Networks Deliver Cloud-Native NGFW Service

• Bad Amendments to Section 702 Have Failed (For Now)—What Happens Next?

• Safeguard Data with Access Governance and Monitoring

• Apple Boosts Spyware Alerts For Mercenary Attacks

• Comparing the Benefits of Microsegmentation vs. VLANs

• How to Dramatically Simplify PCI DSS Compliance

• 2024 Insider Threat Report Trends, Challenges, and Solutions

• Will Quantum Computing Change the Way We Use Encryption?

• Instagram To Blur Nude Images In Messages To Minors

• US Senator Hints At TikTok Divestiture Deadline Extension

• DragonForce Ransomware – What You Need To Know

• 96% of US hospital websites share visitor info with Meta, Google, data brokers

• Data Breach Exposes 300k Taxi Passengers’ Information

• TA547 Hackers Launching AI-Powered Cyber Attacks Targeting Organizations

• Reverst: HTTP Reverse Tunnels Over QUIC

• Apple warns of mercenary spyware attacks against iPhone users. Should you be worried?

• Knostic Emerges From Stealth With Enterprise Gen-AI Access Controls

• Inside AWS’s Crusade Against IP Spoofing and DDoS Attacks

• Simbian Emerges From Stealth With $10 Million to Build Autonomous AI-Based Security Platform

• 91,000 Smart LG TV Devices Susceptible to Unauthorised Remote Access

• Under Siege: Ukrainian Cyber Warriors Erase Vital Russian Military Data Center

• New Android Espionage Campaign Spotted in India and Pakistan

• Understanding ISO 27001:2022 Annex A.11 – Physical and Environmental Security

• The Best Personal Safety Devices, Apps, and Wearables (2024)

• Palo Alto Networks fixed multiple DoS bugs in its firewalls

• Apple Drops Term State-Sponsored Attacks From Its Threat Notification Policy

• Ivanti empowers IT and security teams with new solutions and enhancements

• CISA warns about Sisense data breach

• AI’s Role in Bolstering Cybersecurity: A Transformative Approach

• Enhancing Open-Source Software Security: Implementing NIST SP800-204d and Leveraging OpenSSF

• US government urges Sisense customers to reset credentials after hack

• Meta will auto-blur nudity in Instagram DMs in latest teen safety step

• Unified SASE: The Third Era of Network Security

• US Cyber Force Assisted Foreign Governments 22 Times in 2023

• Why Intelligence Sharing Is Vital to Building a Robust Collective Cyber Defense Program

• Ransomware group maturity should influence ransom payment decision

• Raspberry Robin Distributed Through Windows Script Files

• Cyber Resilient 911 Symposium Blog Post

• AI and GDPR: How is AI being regulated?

• Compromise of Sisense Customer Data

• Awkward Adolescence: Increased Risks Among Immature Ransomware Operators

• Sidestepping SharePoint Security: Two New Techniques to Evade Exfiltration Detection

• Simbian raises $10 million to automate security operations with GenAI

• Analyzing Bitcoin Price Trends and Crypto Scalping Methods

• Understanding the Red Hat security impact scale

• Heimdal® Adds PASM to the World’s Widest Cybersecurity Platform

• Warning! Rust Standard Library Flaw Enables Windows Command Injection Attacks

• 92,000 D-Link NAS Devices Vulnerable to Remote Code Execution

• Google Pays Out $41,000 for Three Serious Chrome Vulnerabilities

• Conservative Revolt in the House Blocks Effort to Reauthorize a Key US Spy Tool

• IMF: Financial Firms Lost $12 Billion to Cyberattacks in Two Decades

• 4 Best Open Source Password Managers for Teams in 2024

• DuckDuckGo Is Taking Its Privacy Fight to Data Brokers

• Simbian brings AI to existing security tools

• Cisco Secure Access Wins Global Security Service Edge Customer Value Leadership Award

• TA547 Phishing Attack Hits German Firms with Rhadamanthys Stealer

• Python’s PyPI Reveals Its Secrets

• CISA Opens Its Internal Malware Analysis Tool for Public Use

• Backdoor in XZ Utils That Almost Happened

• Apple Staff At New Jersey Store Seek To Unionise

• Client-Side Exploitation: Poisoning WebDAV+URL+LNK to Deliver Malicious Payloads

• Apple Warns Users in 92 Countries About Mercenary Spyware Attacks

• Cyberespionage Group Earth Hundun’s Continuous Refinement of Waterbear and Deuterbear

• Cybersecurity: Benefits and Best Practices

• Apple warns of mercenary spyware attacks on iPhone users in 92 countries

• Alethea Raises $20 Million for Disinformation Detection and Mitigation Solution

• Google Cloud Unveils New AI-Powered Security Capabilities

• Palo Alto Networks Patches Vulnerabilities Allowing Firewall Disruption

• Meta Shows Off Next Generation AI Chip

• Hackers Manipulate GitHub Search To Deliver Clipboard-Hijacking Malware

• Global taxi software vendor exposes details of nearly 300K across UK and Ireland

• AppViewX CERT+ helps organizations identify and renew certificates before they expire

• Threat Actors Game GitHub Search to Spread Malware

• Fortra For Windows Vulnerability Let Attackers Escalate Privilege

• Understanding ISO 27001:2022 Annex A.12 – Operations Security

• Microsoft fixed two zero-day bugs exploited in malware attacks

• Digimarc and DataTrails join forces to provide proof of digital content authenticity

• Unveiling the Cyber Well-Being Conundrum: Navigating Burnout’s Impact on Charity and SME Cybersecurity

• Microsoft’s April 2024 Patch Tuesday includes two actively exploited zero-day vulnerabilities

• Your Guide to Threat Detection and Response

• US Data Breach Reports Surge 90% Annually in Q1

• PVML raises $8 million to offer protection for enterprise data

• Apple Updates Spyware Alert System to Warn Victims of Mercenary Attacks

• Apple alerts users in 92 nations to mercenary spyware attacks

• OpenSSL 3.3 Final Release Live

• Evolution of Artificial Intelligence Systems and Ensuring Trustworthiness, (Thu, Apr 11th)

• NIST CSF: A “Fellowship” for Your Cybersecurity Journey to 2.0

• Apple Expands Spyware Alert System to Warn Users of Mercenary Attacks

• Fortinet Rolls Out Critical Security Patches for FortiClientLinux Vulnerability

• TenSec 2019

• Exploiting Wi-Fi Stack on Tesla Model S

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• Tencent Security Keen Lab: Experimental Security Assessment of Mercedes-Benz Cars

• History of RSA Conference. Bruce Schneier. The First ‘Exhibitor’ in 1994.

• Apple issues warning against Mercenary Spyware

• How Google’s 90-day TLS certificate validity proposal will affect enterprises

• Cyber Espionage: Turla APT Hackers Attack European Organization With Backdoor

• Apple alerts users in 92 nations to mercenary attacks in new warning

• Leveraging AI for enhanced compliance and governance

• Graylog: Open-source log management

• 2024-04-09: Data dump from Latrodectus malware infection

• 37% of publicly shared files expose personal information

• Stopping security breaches by managing AppSec posture

• 2024-04-05: Data dump from Astaroth (Guildma) malware infection

• ISC Stormcast For Thursday, April 11th, 2024 https://isc.sans.edu/podcastdetail/8934, (Thu, Apr 11th)

• The Irrefutable Case for Customer-Native (In-Your-Cloud) DSPM

• Salvadoran Citizens – 946,989 breached accounts

• OWASP Top 10 for LLM Applications: A Quick Guide

• Group Health Cooperative data breach impacted 530,000 individuals

• Match Systems report on consequences of CBDC implementation, led by CEO Andrei Kutin

• Virtual Reality and the ‘Virtual Wall’

• IT Security News Daily Summary 2024-04-10

• fraud detection

• Maryland State Passes Two Major Privacy Bills To Stop Facebook Data Gathering

• Trump Loyalists Kill Vote on US Wiretap Program

• AT&T states that the data breach impacted 51 million former and current customers

• It’s 2024 and Intel silicon is still haunted by data-spilling Spectre

• CISA Releases Malware Next-Gen Analysis System for Public Use

• How to protect yourself from online harassment

• USENIX Security ’23 – Discovering Adversarial Driving Maneuvers against Autonomous Vehicles

• The best travel VPNs of 2024

• Uber adds safety options that every rider should start using – here’s how

• President Biden ‘Considering’ Request To Drop Julian Assange Charges

• Fortinet fixed a critical remote code execution bug in FortiClientLinux

• India’s Businesses Under Huge Cyber Threats, Kaspersky Reported

• LinkedIn Users Targeted in Complex Phishing Scheme

• Fostering Cybersecurity Culture: From Awareness to Action

• Alert! Brute-Force SSH Attacks Rampant in the Wild: New Study From 427 Million Failed SSH Login Attempts

• Raspberry Robin Malware Now Using Windows Script Files to Spread

• The Motion Picture Association Doesn’t Get to Decide Who the First Amendment Protects

• Unauthenticated Stored Cross-Site Scripting Vulnerability Patched in WordPress Core

• Vulnerability in some TP-Link routers could lead to factory reset

• Apple Doubles iPhone Production In India – Report

• Match Systems publishes report on the consequences of CBDC implementation, led by CEO Andrei Kutin

• Real-World Law Enforcement Hack of Hackers End-to-Encrypted Chat Messenger

• E-commerce Breach: Hackers Target Magento, Steal Payment Data

• single sign-on (SSO)

• AT&T Data Breach Update: 51 Million Customers Impacted

• Watch This? Patch This! LG Fixes Smart TV Vulns

• The ClickOps Era Has Begun—Here’s a Quick Primer

• Beyond Technical Skills: Making Cybersecurity More Human-Centered

• Google Unveils ARM-based AI CPU, Google Axion

• Rhadamanthys Malware Deployed By TA547 Against German Targets

• Microsoft experiences another cyber attack after China email server intrusion

• TikTok bans explained: Everything you need to know

• AT&T notifies regulators after customer data breach

• Microsoft Patches 2 Zero Days Exploited For Malware Delivery

• DOJ Data On 340,000 Individuals Stolen

• Peter Higgs, Father Of The God Particle, Dies At 94

• Speed Of AI Development Is Outpacing Risk Assessment

• New covert SharePoint data exfiltration techniques revealed

• LG TV Vulnerabilities Expose 91,000 Devices

• Cypago Announces New Automation Support for AI Security & Governance

• Google Chrome is getting a new security feature to address memory corruption

• Twitter’s Clumsy Pivot to X.com Is a Gift to Phishers

• Cisco’s Vision at Hannover Messe 2024

• Cisco and Nutanix: A 360-Degree Partnership Where 1 + 1 = 3

• Zero Trust Matures, Insider Threat Programs Take Off, and AI Doesn’t Change Things that Much Yet: 2024 Cybersecurity Predictions

• Hackers Siphon 340,000 Social Security Numbers From U.S. Consulting Firm

• Tesla Settles Lawsuit Over Crash That Killed Apple Engineer

• Cisco at NAB 2024: Cloud-Native Media Production

• Microsoft Patches Tuesday security updates for April 2024 fixed hundreds of issues

• Researchers Resurrect Spectre v2 Attack Against Intel CPUs

• Posthumous Data Access: Can Google Assist with Deceased Loved Ones’ Data?

• Combatting iPhone Scams: Steps Towards Enhanced Security

• ‘eXotic Visit’ Spyware Campaign Targets Android Users in India and Pakistan

• Mitigating the Impact of Data Breaches Through DDR

• Beware of Encrypted Phishing Attack With Weaponized SVG Files

• Cypago Announces New Automation Support for AI Security and Governance

• Malwarebytes Digital Footprint Portal offers insights into exposed passwords and personal data

• Vultr Sovereign Cloud and Private Cloud delivers data control to nations and enterprises

• Raspberry Robin Returns: New Malware Campaign Spreading Through WSF Files

• CISA Announces Malware Next-Gen Analysis

• Shifting Attack Landscapes and Sectors in Q1 2024 with a 28% increase in cyber attacks globally

• Rust rustles up fix for 10/10 critical command injection bug on Windows

• Insider Threats Surge Amid Growing Foreign Interference

• Security Advisory: Protecting Mobile Devices for UAE Residents

• The Fake E-Shop Scam Campaign Sweeping Southeast Asia, seizing users banking details

• Privacy is ‘Virtually Impossible’ on iPhones, Experts Warn

• Eclypsium Automata discovers vulnerabilities in IT infrastructure

• Index Engines CyberSense 8.6 detects malicious activity

• Beware: GitHub’s Fake Popularity Scam Tricking Developers into Downloading Malware

• Women Experience Exclusion Twice as Often as Men in Cybersecurity

• Flaws in 90,000+ LG WebOS TVs Let Attacker’s Completely take Over Devices

• Introducing the Digital Footprint Portal

• Develop Advanced Cybersecurity Skills for Just $64

• A Quarter of UK Business Are Not Using AI to Bolster Cybersecurity

• Zero Trust: Navigating the Labyrinth of Laws in a Borderless Digital Age

• Concentric AI unveils employee offboarding risk monitoring and reporting module

• Hack The Box redefines cybersecurity performance, setting new standards in the cyber readiness of organizations

• Thousands of LG TVs Possibly Exposed to Remote Hacking

• Fortinet Patches Critical RCE Vulnerability in FortiClientLinux

• How to Stop Your Data From Being Used to Train AI

• IT pros targeted with malicious Google ads for PuTTY, FileZilla

• Cohesity teams up with Intel to integrate confidential computing into Data Cloud Services

• Windows: New ‘BatBadBut’ Rust Vulnerability Given Highest Severity Score

• Intel Unveils Latest AI Chip To Counter Nvidia

• Hands-on Review: Cynomi AI-powered vCISO Platform

• In Memoriam: Ross Anderson, 1956-2024

• 530k Impacted by Data Breach at Wisconsin Healthcare Organization

• Sprinto Raises $20 Million for Automated Risk and Compliance Platform

• NICE Actimize enhances Integrated Fraud Management platform to help financial services prevent scams

• US Claims to Have Recovered $1.4bn in COVID Fraud

• Microsoft Patch Tuesday: 149 Security Vulnerabilities & Zero-days

• 6 Best Open Source Password Managers for Mac in 2024

• X fixes URL blunder that could enable convincing social media phishing campaigns

• Silicon UK In Focus Podcast: Digital Transformation and Sustainability

• GHC-SCW Hack: Ransomware Actors Stolen User’s Personal Information

• Cyber Insurance Policy

• Microsoft Patches Two Zero-Days Exploited for Malware Delivery

• Researchers Uncover First Native Spectre v2 Exploit Against Linux Kernel

• Microsoft Patches 150 Flaws Including Two Zero-Days

• GM’s Cruise To Resume Operations In Phoenix With Human Drivers

• The AI Gold Rush: ChatGPT and OpenAI targeted in AI-themed investment scams

• Custom-made Awareness Raising to enhance Cybersecurity Culture

• Proton picks up Standard Notes to deepen its pro-privacy portfolio

• New ransomware group demands Change Healthcare ransom

• Alethea raises $20 million to combat disinformation campaigns

• Webinar: Learn How to Stop Hackers from Exploiting Hidden Identity Weaknesses

• Half of UK Businesses Hit by Cyber-Incident in Past Year, UK Government Finds

• Critical Rust Vulnerability Let Hackers Inject Commands on Windows Systems

• Embracing Two-Factor Authentication for Enhanced Account Protection

• Life in Cybersecurity: From Nursing to Threat Analyst

• Turning the tide on third-party risk

• RUBYCARP the SSH Brute Botnet Resurfaces With New Tools

• New Critical Rust Vulnerability Allows Attackers to Inject Commands on Windows Systems

• Cybersecurity in the Evolving Threat Landscape

• Rewards For Justice offers up to $10 million reward for info on ALPHV BlackCat hacker group leaders

• Dracula Phishing Platform Targets Organizations Worldwide

• New SharePoint Technique Lets Hackers Bypass Security Measures

• Upcoming report on the state of cybersecurity in Croatia

• Google top trending cybersecurity news headlines

• Navigating the Divide: Data Security Management vs Cloud Security Management

• Chrome Enterprise Premium promises extra security – for a fee

• How to Use Cyber Threat Intelligence? 4 TI Categories to Learn SOC/DFIR Team

• Why are many businesses turning to third-party security partners?

• Microsoft Fixes 149 Flaws in Huge April Patch Release, Zero-Days Included

• WEF Cybercrime Atlas: Researchers are creating new insights to fight cybercrime

• AI risks under the auditor’s lens more than ever

• GSMA releases Mobile Threat Intelligence Framework

• Cybersecurity jobs available right now: April 10, 2024

• Critical ‘BatBadBut’ Rust Vulnerability Exposes Windows Systems to Attacks

• ISC Stormcast For Wednesday, April 10th, 2024 https://isc.sans.edu/podcastdetail/8932, (Wed, Apr 10th)

• Navigating Third-Party Cyber Risks in Healthcare: Insights from Recent Events

• Is My VPN Working? How To Test for VPN Leaks

• Microsoft squashes SmartScreen security bypass bug exploited in the wild

Generated on 2024-04-11 23:55:12.164361