IT Security News Daily Summary 2024-04-15

• 4 types of cloud security tools organizations need in 2024

• Vulnerability Recap 4/15/24 – Palo Alto, Microsoft, Ivanti Exploits

• Cisco Duo warns telephony supplier data breach exposed MFA SMS logs

• D3 Security at RSAC 2024: Streamline Your Security Operations with Smart SOAR

• Change Healthcare stolen patient data leaked by ransomware gang

• Ukrainian Blackjack group used ICS malware Fuxnet against Russian targets

• The Race Against the Hackers: How the OffSec Cyber Ranges Keep You Ahead

• Vulnerability Summary for the Week of April 8, 2024

• Collaborative Scheduling: Enhancing Team Coordination With Open-Source Tools

• Hacker Customize LockBit 3.0 Ransomware to Attack Orgs Worldwide

• A ransomware gang is leaking Change Healthcare’s stolen patient data

• Coding for a Greener Tomorrow: Developer Sustainability Week Takes Center Stage

• MY TAKE: GenAI revolution — the transformative power of ordinary people conversing with AI

• Cisco Duo Says Hack at Telephony Supplier Exposed MFA SMS Logs

• Roku: Credential Stuffing Attacks Affect 591,000 Accounts

• Data protection vs. security vs. privacy: Key differences

• Palo Alto Patches 0-Day (CVE-2024-3400) Exploited by Python Backdoor

• Joint Guidance on Deploying AI Systems Securely

• Adapting to the Deluge of Cybersecurity Data

• Tesla Cuts More Than 10 Percent Of Workforce

• Zscaler to Acquire Airgap Networks to Segment Endpoint Traffic

• Intel and Lenovo BMCs Contain Unpatched Lighttpd Server Flaw

• Tesla To Lay Off ‘More Than 10 Percent’ Of Workforce

• Ex-Security Engineer Gets Three Years in Prison for $12 Million Crypto Hacks

• Russia and Ukraine Top Inaugural World Cybercrime Index

• Nexperia Ransomware attack and some details about American hackers spreading ransomware

• Delinea Secret Server Customers Should Apply Latest Patches

• Roku Makes 2FA Mandatory For All After Nearly 600k Accounts Pwned

• Palo Alto Networks Releases Fixes For Firewall Zero-Day As Attribution Attempts Emerge

• Ransomware Group Claims Theft Of Data From Chipmaker Nexperia

• Juniper Networks Publishes Dozens Of New Security Advisories

• When Security Collides with Customer Impatience

• Roku makes 2FA mandatory for all after nearly 600K accounts pwned

• CISA Directs Affected Agencies to Mitigate Risks Arising from Microsoft Breach

• Data Exposure Incident: iCabbi’s Security Breach

• Meet With OpenSSL at RSA Conference 2024

• Crickets from Chirp Systems in Smart Lock Key Leak

• Ransomware Group Claims Theft of Data From Chipmaker Nexperia

• NightVision Raises $5.4 Million for Application Security Testing

• Second Largest Employer Amazon Opts For Robots, Substituting 100,000 Jobs

• New LockBit Variant Exploits Self-Spreading Features

• $1,250 Bounty Awarded for Unauthenticated SQL Injection Vulnerability Patched in Email Subscribers by Icegram Express WordPress Plugin

• The Journey: Quantum’s Yellow Brick Road

• New Report from Match Systems Sheds Light on Central Bank Digital Currencies (CDBC)

• Microsoft .NET, .NET Framework, & Visual Studio Vulnerable To RCE Attacks

• CISA adds Palo Alto Networks PAN-OS Command Injection flaw to its Known Exploited Vulnerabilities catalog

• Nationwide Scam Targets Road Toll Users via SMS Phishing Scheme

• Apple Steps Up Spyware Alerts Amid Rising Mercenary Threats

• Navigating the Complex Landscape of Cyber Threats: Insights from the Sisense Breach and North Korean Tactics

• Palo Alto Networks Zero-Day Flaw Exploited in Targeted Attacks

• Software Support: 7 Essential Reasons You Can’t Overlook

• Delinea Secret Server customers should apply latest patches

• TechRepublic’s Review Methodology for VPNs

• Destructive ICS Malware ‘Fuxnet’ Used by Ukraine Against Russian Infrastructure

• Juniper Networks Publishes Dozens of New Security Advisories

• Muddled Libra Shifts Focus to SaaS and Cloud for Extortion and Data Theft Attacks

• AI Copilot: Launching Innovation Rockets, But Beware of the Darkness Ahead

• Microsoft and Google Top the List in Q1 2024 Phishing Attacks: Check Point Research Highlights a Surge in Cyber Threats

• #MIWIC24 Cyber Marketeer of the Year: Laura Reilly

• Texting Secrets: How Messenger Apps Guard Your Chats

• US senator wants to put the brakes on Chinese EVs

• What’s Next in Cortex — XSIAM for Cloud and Other Innovations

• Cyber Security Today, April 15, 2024 – Act fast to a plug hole in Palo Alto Networks firewall, Canadian comedy festival loses over $800K in email scam, and more

• Chipmaker Giant Nexperia Confirms Cyber-Attack Amid Ransomware Group Claims

• Threat actors exploited Palo Alto Pan-OS issue to deploy a Python Backdoor

• Privacera adds access control and data filtering functionality for Vector DB/RAG

• Microsoft April Patch Tuesday Fixes Dozens of RCE Flaws

• Invision Community Vulnerabilities Risk E-Commerce Websites

• How Artificial Intelligence Technology Affects Fintech Companies & The Financial Industry

• FBI and AFP Arrest Alleged Developer, Marketer of Firebird/Hive RAT

• Cisco Telemetry Broker (CTB) 2.1 Launch

• Palo Alto Networks Releases Fixes for Firewall Zero-Day as Attribution Attempts Emerge

• Former Security Engineer Sentenced to Prison for Hacking Crypto Exchanges

• Two People Arrested in Australia and US for Development and Sale of Hive RAT

• Vulnerable Villain: When Hackers Get Hacked

• A critical vulnerability in Delinea Secret Server allows auth bypass, admin access

• Timing is Everything: The Role of Just-in-Time Privileged Access in Security Evolution

• New Lattice Cryptanalytic Technique

• eBook: Why CISSP?

• How to freeze your credit (and why you might want to)

• The US Government Has a Microsoft Problem

• Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge

• Deepfake pornography explosion

• Palo Alto Networks Fixes Critical Zero-Day Vulnerability in PAN-OS

• Huawei To Sell Laptop With Latest Intel Core Ultra AI Chip

• Deepfakes: More Than Skin Deep Security

• Huawei Building Massive Chip R&D Centre In Shanghai

• Using the LockBit builder to generate targeted ransomware

• Linux Backdoor Infection Scare, Massive Social Security Number Heist

• Scale Your Security with vCISO as a Service

• OpenAI Chief Altman Pitches ChatGPT At Corporate Events

• OpenAI Fires Two Researchers Over Information Leaks

• LightSpy Hackers Indian Apple Device Users to Steal Sensitive Data

• Chinese-Linked LightSpy iOS Spyware Targets South Asian iPhone Users

• FBI Warns of Massive Toll Services Smishing Scam

• How to Safeguard Your Data Through Security Awareness Training?

• ITRC’s 2023 Data Breach Report Is a Mixed Bag

• What Is an Axon Agent, and Why Do You Need One?

• Understanding ISO 27001:2022 Annex A.14 – System Acquisition, Development, and Maintenance

• Police Swoop on €645m Cannabis Investment Fraud Gang

• Elon Musk To Meet India’s Modi Over Import Deal

• Apple Nears Production Of AI-Focused M4 Chip

• Identifying third-party risk

• ShadowDragon Horizon enhancements help users conduct investigations from any device

• Palo Alto Networks Releases Urgent Fixes for Exploited PAN-OS Vulnerability

• A week in security (April 8 – April 14)

• MPs: Government ‘Should Use TikTok’ To Reach Young People

• U.S. and Australian police arrested Firebird RAT author and operator

• This Startup Aims To Simplify End-to-End Cybersecurity, So Anyone Can Do It

• LightSpy Malware Attacking Android and iOS Users

• Streaming service ROKU witnessed 500K customers data leak

• The Drive Behind AI Companies Developing Their Own Processors: Safeguarding Data Security

• Microsoft publishes new Registry security mitigation for Intel processors (Spectre)

• Geopolitical tensions escalate OT cyber attacks

• How to protect IP surveillance cameras from Wi-Fi jamming

• Exposing the top cloud security threats

• How Israel Defended Against Iran’s Drone and Missile Attack

• Zarf: Open-source continuous software delivery on disconnected networks

• Expand your library with these cybersecurity books

• How Israel Defended Itself Against Iran’s Drone and Missile Attack

• US House approves FISA renewal – warrantless surveillance and all

• IT Security News Weekly Summary – Week 15

• IT Security News Daily Summary 2024-04-14

• Facebook Testing Tools To Auto-Blur Nudity In Teens’ DMs

• Deciphering Metrics: From NCAA Women’s Basketball to Cyber Trends

• USENIX Security ’23 – How to Bind Anonymous Credentials to Humans

• Apple Alerts iPhone Users of ‘Mercenary Attack’ Threat

• Canadian retail chain Giant Tiger data breach may have impacted millions of customers

• Upcoming Speaking Engagements

• Iranian Hackers Use New C2 Tool ‘DarkBeatC2’ in Recent Operation

• Is Facial Biometrics the Future of Digital Security?

• How Israel Fended Off Iran’s Drone and Missile Attack

• The Silent Flaw: How a 6-Year-Old BMC Vulnerability Went Unnoticed

• 300 Strikes: Fort Worth’s Battle Against the Medusa Gang

• Security Affairs newsletter Round 467 by Pierluigi Paganini – INTERNATIONAL EDITION

• Delinea has cloud security incident in Thycotic Secret Server gaff

• Week in review: Palo Alto Networks firewalls under attack, Microsoft patches two exploited zero-days

• How to track and stop CVE-2024-3400: Palo Alto Devices API Exploit Causing Critical Infrastructure and Enterprise Epidemics

• Red Hat Enterprise Linux 7: End of compliance content on June 30, 2024

• How Israel Is Defending Against Iran’s Drone Attack

Generated on 2024-04-15 23:55:08.198740