IT Security News Daily Summary 2024-04-12

• State-Sponsored Hackers Exploit Zero-Day to Backdoor Palo Alto Networks Firewalls

• Rust gets security fix for Windows vulnerability

• Pros and cons of 7 breach and attack simulation tools

• Roku disclosed a new security breach impacting 576,000 accounts

• Google One VPN axed for everyone but Pixel loyalists … for now

• CISA Briefs World Travel Organization Expedia with Advice on Security

• House Votes to Extend—and Expand—a Major US Spy Program

• AI Safety Summit round two draws government, industry leaders to Seoul next month

• 12 Data Loss Prevention Best Practices (+ Real Success Stories)

• NordPass Review 2024: Is It the Right Fit for Your Business?

• Cyber Security Today, Week in Review for week ending Friday, April 12, 2024

• CVE-2024-3400 exploited: Unit 42, Volexity share more details about the attacks

• Roku Faces Cyber Attack Impact 500000 Accounts – The Analysis

• OAuth (Open Authorization)

• Change Healthcare Faces Another Ransomware Threat—and It Looks Credible

• What Does EFF Mean to You?

• Why you need an SBOM (Software Bill Of Materials)

• Cybersecurity Decluttered: A Journey to Consolidation

• Communication Skills in Cybersecurity

• Shadow AI: The Murky Threat to Enterprise Adoption of Generative AI

• Sisense Hacked: CISA Warns Customers at Risk

• Threat Brief: Operation MidnightEclipse, Post-Exploitation Activity Related to CVE-2024-3400

• Apple Alerts iPhone Users in 92 Countries to Mercenary Spyware Attacks

• Security engineer jailed for 3 years for $12M crypto hacks

• How to change your Social Security Number

• Wiz Acquires Gem Security, Pushes Security Tools Consolidation

• The essential duo of SCA and SBOM management

• Windows Systems Vulnerable to Attacks Due to Critical ‘BatBadBut’ Rust Flaw

• LastPass Dodges Deepfake Scam: CEO Impersonation Attempt Thwarted

• Alert! Palo Alto RCE Zero-day Vulnerability Actively Exploited in the Wild

• Sisense’s data breach is serious enough that CISA is investigating. Here’s what you need to do

• Roku says 576,000 user accounts hacked after second security incident

• Calling All Past Alumni to Test their Strength and Compete

• Secrets of SharePoint Security: New Techniques to Evade Detection

• US House bill prohibits ransomware payments over $100,000

• Sophos Study: 94% of Ransomware Victims Have Their Backups Targeted By Attackers

• Free and Downloadable Email Security Policy Template

• RubyCarp: Insights Into the Longevity of a Romanian Cybercriminal Gang

• The Future of Quantum Computers: Challenging Space Encryption with Light

• AI Could Be As Impactful as Electricity, Predicts Jamie Dimon

• Popular Rust Crate liblzma-sys Compromised with XZ Utils Backdoor Files

• Palo Alto Networks discloses RCE zero-day vulnerability

• China Tells Telecom Carriers To Phase Out Foreign Chips – Report

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• Keeper Password Manager Review 2024: Who Should Use It?

• How Ukraine’s cyber police fights back against Russia’s hackers

• Maximize Managed Services: Cisco ThousandEyes Drives MSPs Towards Outstanding Client Experiences

• Roku Says More Than 500,000 Accounts Impacted In Cyberattack

• Palo Alto Networks Warns Of Exploited Firewall Vulnerability

• More Legal Acrimony For Truth Social, As Executive Says He Was Hacked

• French Issue Alerte Rouge After Local Govs Knocked Offline By Cyberattack

• LockBit Copycat DarkVault Spurs Rebranding Rumor

• Microsoft breach allowed Russian spies to steal emails from US government

• US-China Competition to Field Military Drone Swarms Could Fuel Global Arms Race

• In Other News: Moscow Sewage Hack, Women in Cybersecurity Report, Dam Security Concerns

• Lessons from XZ Utils: Achieving a More Sustainable Open Source Ecosystem

• Juniper Releases Security Bulletin for Multiple Juniper Products

• CISA Adds One Known Exploited Vulnerability to Catalog

• Citrix Releases Security Updates for XenServer and Citrix Hypervisor

• CISA Urges Immediate Credential Reset After Sisense Breach

• 6-year-old Lighttpd Flaw Impacts Intel And Lenovo Servers

• The Zensory Partners with UK Cyber Week to Showcase Importance of Inclusivity With ‘The Inclusive Cyber Space’

• SharePoint Flaws Could Help Threat Actors Evade Detection Easier When Stealing Files

• Safeguarding America’s Future: Mitigating the Implications of Chinese Control Over U.S. Critical Infrastructure

• Case Study Segregation of Duties Oracle ERP Cloud

• 5 Best CAPTCHA Plugins for WordPress Websites

• AT&T emails 70M customers, causes massive traffic spike at Experian. Here’s what happened

• DevSecOps Practices for a Secure Cloud

• The Vulture in Cyberspace: A Threat to Your Finances

• Vendors Beware of the Cybersecurity Audit

• Hackers Employ Deepfake Technology To Impersonate as LastPass CEO

• US think tank Heritage Foundation hit by cyberattack

• LastPass employee targeted via an audio deepfake call

• Sam Bankman-Fried Appeals FTX Fraud Sentence Of 25 Years

• ‘BatBadBut’ Command Injection Vulnerability Affects Multiple Programming Languages

• Threat Actors Manipulate GitHub Search to Deliver Malware

• Palo Alto Networks Warns of Exploited Firewall Vulnerability

• Exploitation of Unpatched D-Link NAS Device Vulnerabilities Soars

• Code Keepers: Mastering Non-Human Identity Management

• Understanding ISO 27001:2022 Annex A.13 – Communications Security

• Smuggling Gold by Disguising it as Machine Parts

• Top MSP Events to Attend in 2024 – A Cybersecurity Expert’s Choice

• CISA Urges Sisense Customers to Reset Credentials and Report Suspicious Activity

• CISA Issues Emergency Directive and Orders Agencies to Mitigate the Risks of the Microsoft Hack

• Cyber Security Today, April 12, 2024 – A warning to Sisense customers, a new tactic for spreading the Raspberry Robin worm, and more

• Palo Alto Networks Warns About Critical Zero-Day in PAN-OS

• AT&T finally acknowledges data breach affecting 51 million people

• DuckDuckGo Launches Privacy Pro: 3-in-1 service With VPN

• Sisence Data Breach, CISA Urges To Reset Login Credentials

• UK Regulator Flags Competition Risks Of AI Foundation Models

• Checklist: Securing Digital Information

• TA547 targets German organizations with Rhadamanthys malware

• Check Point boosts security in Harmony Email & Collaboration

• Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack

• Iranian MuddyWater Hackers Adopt New C2 Tool ‘DarkBeatC2’ in Latest Campaign

• LastPass Employee Targeted With Deepfake Calls

• Zscaler extends zero trust SASE and eliminates the need for firewall-based segmentation

• Cyber Attack Surge by 28%:Education Sector at High Risk

• XZ backdoor story – Initial analysis

• Palo Alto Networks firewalls under attack, hotfixes incoming! (CVE-2024-3400)

• Cado Security teams up with Wiz to accelerate forensic investigations and minimize cloud threats

• Midnight Blizzard’s Microsoft Corporate Email Hack Threatens Federal Agencies: CISA Warns

• Palo Alto Networks enhances Cortex XSIAM to help SecOps teams identify cloud threats

• YouTube being used by hackers to spread Malware

• Safeguarding Your Data: Strategies to Mitigate AI-Related Security Risks

• French issue alerte rouge after local governments knocked offline by cyber attack

• Sneaky Credit Card Skimmer Disguised as Harmless Facebook Tracker

• Building a Live SIFT USB with Persistence, (Fri, Apr 12th)

• CISA: Russian Hackers Stole Emails Between U.S. Agencies and Microsoft

• Apple stops warning of ‘state-sponsored’ attacks, now alerts about ‘mercenary spyware’

• Strategies to cultivate collaboration between NetOps and SecOps

• U.S. Federal Agencies Ordered to Hunt for Signs of Microsoft Breach and Mitigate Risks

• The next wave of mobile threats

• Why women struggle in the cybersecurity industry

• NIPS Troubleshooting Steps for No Log

• New infosec products of the week: April 12, 2024

• ISC Stormcast For Friday, April 12th, 2024 https://isc.sans.edu/podcastdetail/8936, (Fri, Apr 12th)

• Cypago Unveils New Automation Support for AI Security and Governance

• Taxi App Vendor Data Leak: 300K Passengers Data Exposed

• Best Paid and Free OSINT Tools for 2024

• AT&T blasts email to 70M customers, causes massive traffic spike at Experian. Here’s what happened

• Space Force boss warns ‘the US will lose’ without help from Musk and Bezos

• CISA adds D-Link multiple NAS devices bugs to its Known Exploited Vulnerabilities catalog

• Breakthrough promises secure quantum computing at home

• Google Extends Generative AI Reach Deeper into Security

• IT Security News Daily Summary 2024-04-11

• 2024 Cybersecurity Excellence Awards – Extended Deadline

• Locking down container security once and for all with Rust-based Edera

• DuckDuckGo’s Privacy Pro bundles a VPN with personal data removal and identity theft restoration

• Why CISA is Warning CISOs About a Breach at Sisense

• US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft

• Simbian Unveils Generative AI Platform to Automate Cybersecurity Tasks

• Full-stack application and data security with business risk observability

• How One Industry Exemplifies the Importance Of Cybersecurity In Critical Infrastructure Assurance

• Apple warns people of mercenary attacks via threat notification system

• CISA discloses Sisense breach, customer data compromised

• Facebook Downplays Threat Of AI Misinformation In An Election Year

• How to check if your data was exposed in the AT&T breach

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• CISA Releases Nine Industrial Control Systems Advisories

• Siemens SINEC NMS

• Siemens RUGGEDCOM APE1808

• Siemens SIMATIC S7-1500

• US says Russian hackers stole federal government emails during Microsoft cyberattack

• US CISA published an alert on the Sisense data breach

• Apple Warns of ‘Mercenary Spyware Attacks’ on iPhone Users

• AI Integration in Cybersecurity Challenges

• Threatening Emails Rattle Bengal Schools: Police Pursue Latvia Lead

• The internet is already scary enough without April Fool’s jokes

• CISA Directs Federal Agencies to Immediately Mitigate Significant Risk From Russian State-Sponsored Cyber Threat

• identity management (ID management)

• Wordfence Intelligence Weekly WordPress Vulnerability Report (April 1, 2024 to April 7, 2024)

• Siemens Telecontrol Server Basic

• Siemens Scalance W1750D

• Siemens SIMATIC WinCC

• Cybersecurity Market Faces Funding Downturn in Q1 2024

• Micron Notes DRAM Supply Hit After Taiwan Earthquake

• Sisense Data Breach Triggers CISA Alert and Urgent Calls for Credential Resets

• Data Access Platform PVML Launches With $8 Million in Funding

• Zscaler to Acquire Network Segmentation Tech Startup Airgap Networks

• Google To Spend $1 Billion On Two Subsea Cables To Japan

• Instagram plans to blur nudes DMed to teens, hoping to fight sextortion scams

• Innovative Financing for Amazon Region Preservation and Restoration

• The Importance of a Multi-Layer Security Stack

• The Hidden Impact of Ad Fraud on Your Marketing Budget

• Look Out For SIM Swap Scams: Tips for Bitcoin Security

• How information can be protected in hotel data breaches

• Taxi Software Vendor Data Leak: 300K Passengers Data Exposed

• Google Cloud and Palo Alto Networks Deliver Cloud-Native NGFW Service

• Bad Amendments to Section 702 Have Failed (For Now)—What Happens Next?

• Safeguard Data with Access Governance and Monitoring

• Apple Boosts Spyware Alerts For Mercenary Attacks

• Comparing the Benefits of Microsegmentation vs. VLANs

• How to Dramatically Simplify PCI DSS Compliance

• 2024 Insider Threat Report Trends, Challenges, and Solutions

• Will Quantum Computing Change the Way We Use Encryption?

• Instagram To Blur Nude Images In Messages To Minors

• US Senator Hints At TikTok Divestiture Deadline Extension

• DragonForce Ransomware – What You Need To Know

• 96% of US hospital websites share visitor info with Meta, Google, data brokers

• Data Breach Exposes 300k Taxi Passengers’ Information

• TA547 Hackers Launching AI-Powered Cyber Attacks Targeting Organizations

• Reverst: HTTP Reverse Tunnels Over QUIC

• Apple warns of mercenary spyware attacks against iPhone users. Should you be worried?

• Knostic Emerges From Stealth With Enterprise Gen-AI Access Controls

• Inside AWS’s Crusade Against IP Spoofing and DDoS Attacks

• Simbian Emerges From Stealth With $10 Million to Build Autonomous AI-Based Security Platform

• 91,000 Smart LG TV Devices Susceptible to Unauthorised Remote Access

• Under Siege: Ukrainian Cyber Warriors Erase Vital Russian Military Data Center

• New Android Espionage Campaign Spotted in India and Pakistan

• Understanding ISO 27001:2022 Annex A.11 – Physical and Environmental Security

• The Best Personal Safety Devices, Apps, and Wearables (2024)

• Palo Alto Networks fixed multiple DoS bugs in its firewalls

• Apple Drops Term State-Sponsored Attacks From Its Threat Notification Policy

• Ivanti empowers IT and security teams with new solutions and enhancements

• CISA warns about Sisense data breach

• AI’s Role in Bolstering Cybersecurity: A Transformative Approach

• Enhancing Open-Source Software Security: Implementing NIST SP800-204d and Leveraging OpenSSF

• US government urges Sisense customers to reset credentials after hack

• Meta will auto-blur nudity in Instagram DMs in latest teen safety step

• Unified SASE: The Third Era of Network Security

• US Cyber Force Assisted Foreign Governments 22 Times in 2023

• Why Intelligence Sharing Is Vital to Building a Robust Collective Cyber Defense Program

• Ransomware group maturity should influence ransom payment decision

• Raspberry Robin Distributed Through Windows Script Files

• Cyber Resilient 911 Symposium Blog Post

• AI and GDPR: How is AI being regulated?

• Compromise of Sisense Customer Data

• Awkward Adolescence: Increased Risks Among Immature Ransomware Operators

• Sidestepping SharePoint Security: Two New Techniques to Evade Exfiltration Detection

• Simbian raises $10 million to automate security operations with GenAI

• Analyzing Bitcoin Price Trends and Crypto Scalping Methods

• Understanding the Red Hat security impact scale

• Heimdal® Adds PASM to the World’s Widest Cybersecurity Platform

• Warning! Rust Standard Library Flaw Enables Windows Command Injection Attacks

• 92,000 D-Link NAS Devices Vulnerable to Remote Code Execution

• Google Pays Out $41,000 for Three Serious Chrome Vulnerabilities

• Conservative Revolt in the House Blocks Effort to Reauthorize a Key US Spy Tool

• IMF: Financial Firms Lost $12 Billion to Cyberattacks in Two Decades

• 4 Best Open Source Password Managers for Teams in 2024

• DuckDuckGo Is Taking Its Privacy Fight to Data Brokers

• Simbian brings AI to existing security tools

• Cisco Secure Access Wins Global Security Service Edge Customer Value Leadership Award

• TA547 Phishing Attack Hits German Firms with Rhadamanthys Stealer

• Python’s PyPI Reveals Its Secrets

• CISA Opens Its Internal Malware Analysis Tool for Public Use

• Backdoor in XZ Utils That Almost Happened

• Apple Staff At New Jersey Store Seek To Unionise

• Client-Side Exploitation: Poisoning WebDAV+URL+LNK to Deliver Malicious Payloads

• Apple Warns Users in 92 Countries About Mercenary Spyware Attacks

• Cyberespionage Group Earth Hundun’s Continuous Refinement of Waterbear and Deuterbear

• Cybersecurity: Benefits and Best Practices

• Apple warns of mercenary spyware attacks on iPhone users in 92 countries

• Alethea Raises $20 Million for Disinformation Detection and Mitigation Solution

• Google Cloud Unveils New AI-Powered Security Capabilities

• Palo Alto Networks Patches Vulnerabilities Allowing Firewall Disruption

• Meta Shows Off Next Generation AI Chip

• Hackers Manipulate GitHub Search To Deliver Clipboard-Hijacking Malware

• Global taxi software vendor exposes details of nearly 300K across UK and Ireland

• AppViewX CERT+ helps organizations identify and renew certificates before they expire

• Threat Actors Game GitHub Search to Spread Malware

• Fortra For Windows Vulnerability Let Attackers Escalate Privilege

• Understanding ISO 27001:2022 Annex A.12 – Operations Security

• Microsoft fixed two zero-day bugs exploited in malware attacks

• Digimarc and DataTrails join forces to provide proof of digital content authenticity

• Unveiling the Cyber Well-Being Conundrum: Navigating Burnout’s Impact on Charity and SME Cybersecurity

• Microsoft’s April 2024 Patch Tuesday includes two actively exploited zero-day vulnerabilities

• Your Guide to Threat Detection and Response

• US Data Breach Reports Surge 90% Annually in Q1

• PVML raises $8 million to offer protection for enterprise data

• Apple Updates Spyware Alert System to Warn Victims of Mercenary Attacks

• Apple alerts users in 92 nations to mercenary spyware attacks

• OpenSSL 3.3 Final Release Live

• Evolution of Artificial Intelligence Systems and Ensuring Trustworthiness, (Thu, Apr 11th)

• NIST CSF: A “Fellowship” for Your Cybersecurity Journey to 2.0

• Apple Expands Spyware Alert System to Warn Users of Mercenary Attacks

• Fortinet Rolls Out Critical Security Patches for FortiClientLinux Vulnerability

• TenSec 2019

• Exploiting Wi-Fi Stack on Tesla Model S

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• Tencent Security Keen Lab: Experimental Security Assessment of Mercedes-Benz Cars

• History of RSA Conference. Bruce Schneier. The First ‘Exhibitor’ in 1994.

• Apple issues warning against Mercenary Spyware

• How Google’s 90-day TLS certificate validity proposal will affect enterprises

• Cyber Espionage: Turla APT Hackers Attack European Organization With Backdoor

• Apple alerts users in 92 nations to mercenary attacks in new warning

• Leveraging AI for enhanced compliance and governance

• Graylog: Open-source log management

• 2024-04-09: Data dump from Latrodectus malware infection

• 37% of publicly shared files expose personal information

• Stopping security breaches by managing AppSec posture

• 2024-04-05: Data dump from Astaroth (Guildma) malware infection

• ISC Stormcast For Thursday, April 11th, 2024 https://isc.sans.edu/podcastdetail/8934, (Thu, Apr 11th)

• The Irrefutable Case for Customer-Native (In-Your-Cloud) DSPM

• Salvadoran Citizens – 946,989 breached accounts

• OWASP Top 10 for LLM Applications: A Quick Guide

Generated on 2024-04-12 23:55:11.271910