IT Security News Daily Summary 2024-04-17

• Facebook’s Controversial “Consent Or Pay” Privacy Model Officially Shot Down

• Should you share your location with your partner?

• Kapeka: A New Backdoor in Sandworm’s Arsenal of Aggression

• Big Tech Says Spy Bill Turns Its Workers Into Informants

• Kremlin’s Sandworm blamed for cyberattacks on US, European water utilities

• XZ Utils-Like Takeover Attempt Targets the OpenJS Foundation

• CISA, FBI, and ODNI Release Guidance for Securing Election Infrastructure Against the Tactics of Foreign Malign Influence Operations

• National Guard will use Google’s AI for faster disaster response and recovery

• Big Tech Squares Off Against US Spies

• Linux variant of Cerber ransomware targets Atlassian servers

• Zero-Day Exploitation of Palo Alto Networks Firewall Allows Backdoor Installation

• Tesla To Ask Shareholders To Reinstate Elon Musk’s $56 Billion Package

• About Face (Recognition) | EFFector 36.5

• Congratulations to the Top MSRC 2024 Q1 Security Researchers!

• Glitter and… Firewalls? How to stay safe this festival season

• Safeguarding ERP Systems in the Digital Age: The Crucial Role of NetSuite Support in Cyber Defense

• Telegram To Reach One Billion Users Within Year

• Criminals want to pay T-Mobile and Verizon staff for SIM swaps. Here’s what you need to know

• The Evolving Threat of Ransomware — A Call to Action for Cybersecurity

• Xiid SealedTunnel: Unfazed by Yet Another Critical Firewall Vulnerability (CVE-2024-3400)

• Palo Alto Networks’ firewall bug under attack brings fresh havoc to thousands of companies

• FTC slaps penalty for leaking sensitive health data to Facebook

• The network effect: The secret weapon for smart manufacturing

• OpenAI’s ChatGPT Can Exploit Real Vulnerabilities By Reading Advisories

• Recent OT And Espionage Attacks Linked To Russia’s Sandworm, Now Named APT44

• Attackers Are Pummeling Networks Around The World With Millions Of Login Attempts

• Ivanti Patches 27 Vulns In Avalanche MDM Product

• Scammers Offer Cash To Phone Carrier Staff To Swap SIM Cards

• USENIX Security ’23 – Two Sides Of The Shield: Understanding Protective DNS Adoption Factors

• Linux Cerber Ransomware Variant Exploits Atlassian Servers

• Judge Dismisses Some Harm Claims Against Meta, Zuckerberg

• The Blink Mini 2 is seeing its first ever discount at 25% off

• Is a VPN Really Worth It in 2024?

• Armis Acquires Silk Security for $150 Million

• Miggo Security Gets $7.5 Million Seed Funding to Build ADR Technology

• Are VPNs Undertaking To Oversee All Digital Security?

• North Korean Group Kimsuky Exploits DMARC and Web Beacons

• $400 Bounty Awarded for SQL Injection Vulnerability Patched in WP Activity Log Premium WordPress Plugin

• What should Security Operations teams take away from the IBM X-Force 2024 Threat Intelligence Index?

• Sysreptor – Offensive Security Reporting Solution For Pentesters

• Keeper Security Offers Built-In Passphrase Generator to Strengthen Security

• US Government and OpenSSF Partner on New SBOM Management Tool

• Google Begins Removal Of California News Ahead Of Proposed Law

• Human Risk: An Organisation’s Biggest Problem and Greatest Opportunity

• Counting the Cost: $9.2 Trillion Annual Impact of Cybercrime Looms

• Hackers Use GitHub Search to Deliver Malware

• Tim Cook Says Apple Considering Factory In Indonesia

• Ivanti Warns of Critical Flaws in Its Avalanche MDM Solution

• Exploit code for Palo Alto Networks zero-day now public

• Cisco: Multiple VPN, SSH Services Targeted in Mass Brute-Force Attacks

• Russian APT Deploys New ‘Kapeka’ Backdoor in Eastern European Attacks

• The Digital Future Needs Cybersecurity Leaders

• Access Limitless Global Content: How Residential Proxies Enable It

• AI for Risk Discovery: 10 Ways to Make it Work For You

• Russia is Trying to Sabotage European Railways, Czech Minister Said

• From CEO Alan Shimel: Futurum Group Acquires Techstrong Group

• What to Take into Consideration When Choosing a SAST Tool for Your Business

• FGVulDet – New Vulnerability Detector to Analyze Source Code

• Cerber Linux Ransomware Exploits Atlassian Servers to Take Full Control

• 8 data protection challenges and how to prevent them

• New Bill Would Create a Governing Body for Water System Cyber Standards

• Russian Sandworm Group Using Novel Backdoor to Target Eastern and Central Europe

• Hybrid Working is Changing How We Think About Security

• Recent OT and Espionage Attacks Linked to Russia’s Sandworm, Now Named APT44

• Chrome 124, Firefox 125 Patch High-Severity Vulnerabilities

• Virtual Event Today: Ransomware Resilience & Recovery Summit

• Ivanti Patches 27 Vulnerabilities in Avalanche MDM Product

• North Korean Hackers Abuse DMARC To Legitimize Their Emails

• The Rise of Weaponized Software: How Cyber Attackers Outsmart Traditional Defenses

• National Security at Risk: The CFPB’s Battle Against Data Brokers

• Armis acquires Silk Security for $150 million

• OfflRouter virus causes Ukrainian users to upload confidential documents to VirusTotal

• Supercharging Cisco XDR with AI and Identity Intelligence at RSAC 2024

• DAST Scanner: New features and improvements

• Cyber Security Today, April 17, 2024 – More suspicious attempts to take over open source projects, a data theft at a Cisco Duo partner, and more

• GenAI: A New Headache for SaaS Security Teams

• Application Security Optimised for Engineering Productivity

• L00KUPRU Ransomware Attackers discovered in the wild

• Ivanti fixed two critical flaws in its Avalanche MDM

• Exploitation of Palo Alto Firewall Vulnerability Picking Up After PoC Release

• Oracle Patches 230 Vulnerabilities With April 2024 CPU

• Hackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign

• Critical Atlassian Flaw Exploited to Deploy Linux Variant of Cerber Ransomware

• Oracle Releases Biggest Security Update in 2024 – 372 Vulnerabilities Are Fixed – Update Now!

• Flyfish Review – How Reliable are this Company’s Payroll Management Solutions?

• Several GTKWave Vulnerabilities Fixed in Debian

• EU Elections: Pro-Russian Propaganda Exploits Meta’s Failure to Moderate Political Ads

• Google Chrome: Security and UI Tips You Need to Know

• Hackers Linked to Russia’s Military Claim Credit for Sabotaging US Water Utilities

• T-Mobile, Verizon Workers Get Texts Offering $300 for SIM Swaps

• OpenAI’s GPT-4 can exploit real vulnerabilities by reading security advisories

• HTTP/2 Vulnerability: Protect Web Servers from DoS Attacks

• Unveiling the Risks and Rewards of Exposing Your Data | Eureka Security

• Ahoi Attacks: A New Threat to Confidential VMs in the Cloud

• Canada To Implement Digital Services Tax This Year

• Cisco Warns Of Massive Brute-Force Attacks Targeting VPNs & SSH Services

• Outlook Login Panel Themed Phishing Attack Evaded All Antivirus Detections

• Vorlon is trying to stop the next big API breach

• SoumniBot: the new Android banker’s unique techniques

• Cyberattacks Surge 325% in Philippines Amid South China Sea Standoff

• Navigating AI and Cybersecurity: Insights from the World Economic Forum (WEF)

• Update: Researchers Released Exploit Code for Actively Exploited Palo Alto Networks PAN-OS Bug

• Palo Alto firewalls: Public exploits, rising attacks, ineffective mitigation

• Ivanti Patches Two Critical Avalanche Flaws in Major Update

• Misinformation and Hacktivist Campaigns Targeting the Philippines Skyrocket

• BreachForums Down, But Not Out: Hackers Claim Attack, Admins Remain Unfazed

• Cisco Warns of Global Surge in Brute-Force Attacks Targeting VPN and SSH Services

• Insider Threats Surge 14% Annually as Cost-of-Living Crisis Bites

• Operation MidnightEclipse: Hackers Actively Exploiting Palo Alto Networks Zero-Day Flaw

• Tor Browser 13.0.14 Released – What’s New!

• What is the U.S. Cyber Trust Mark?

• Iran Launched A Major Cyberattack Against Critical Infrastructure In Israel

• INC Ransom Group Exfiltrates Data Before Encrypting & Threatens Public Exposure

• Google Ads for Bitbucket.org – malvertising at its best

• Implementing ISO 27001:2022 Annex A.15 – Supplier Relationships

• New Android Malware Mimic Google Chrome to Steal Banking Details

• From Social Engineering to DMARC Abuse: TA427’s Art of Information Gathering

• Russian Sandworm Group Using Novel Backdoor to Target Ukraine and Allies

• Empowering Change: Using Your Influence to Confront the Climate Crisis

• Understanding CAT Culture in Cybersecurity: Collaboration, Awareness, and Training

• Researchers released exploit code for actively exploited Palo Alto PAN-OS bug

• Malicious PDF File Used As Delivery Mechanism, (Wed, Apr 17th)

• Cyber Threat from Remember Me Checkbox

• Japanese government rejects Yahoo! infosec improvement plan

• Cisco warns of large-scale brute-force attacks against VPN and SSH services

• Thinking outside the code: How the hacker mindset drives innovation

• Cybersecurity jobs available right now: April 17, 2024

• Damn Vulnerable RESTaurant: Open-source API service designed for learning

• LightSpy Hackers Target Indian Apple Device Users To Steal Sensitive Data

• IT and security professionals demand more workplace flexibility

• Understanding next-level cyber threats

• ISC Stormcast For Wednesday, April 17th, 2024 https://isc.sans.edu/podcastdetail/8942, (Wed, Apr 17th)

• Fire in the Cisco! Networking giant’s Duo MFA message logs stolen in phish attack

• Most developers have adopted devops, survey says

• Fire in the Cisco! Networking giant’s Duo MFA leaks message logs

• The Future of Business Communications: Trends Shaping the Industry

• What are Identity Providers (IdP)?

• IT Security News Daily Summary 2024-04-16

• Palo Alto Networks GlobalProtect exploit public and widely exploited CVE-2024-3400, (Tue, Apr 16th)

• Simeio Returns to Compete in 2024 ‘ASTORS’ Awards with Simeio OI

• ShadowRay Vulnerability: 6 Lessons for AI & Cybersecurity

• MGM says FTC can’t possibly probe its ransomware downfall – watchdog chief Lina Khan was a guest at the time

• Facebook Oversight Board Will Investigate Deepfake Porn Problem

• Speaking Freely: Lynn Hamadallah

• How Political Campaigns Use Your Data to Target You

• Change Healthcare’s New Ransomware Nightmare Goes From Bad to Worse

• PuTTY SSH Client flaw allows of private keys recovery

• Top Officials Again Push Back on Ransom Payment Ban

• Americans Deserve More Than the Current American Privacy Rights Act

• New Vulnerability “LeakyCLI” Leaks AWS and Google Cloud Credentials

• How to conduct security patch validation and verification

• A crypto wallet maker’s warning about an iMessage bug sounds like a false alarm

• Tell the FCC It Must Clarify Its Rules to Prevent Loopholes That Will Swallow Net Neutrality Whole

• Navigating the Cyber Typhoon: Safeguarding Data Amidst US-China Geo-Political Tensions.

• How to Remove Malware From a Mac or PC

• Trustifi’s Email Security Awareness Training – Empowering MSPs to Train & Protect Clients

• Proactive Threat Detection: Introducing Threat Hunting Essentials

• Cybersecurity Compliance: Understanding Regulatory Frameworks

• SIM Swappers Try Bribing T-Mobile and Verizon Staff $300

• US Think Tank Struck by Cyberattack

• Report: Bad Bots Drive 10% Annual Surge in Account Takeover Attacks

• US Senate to Vote on a Wiretap Bill That Critics Call ‘Stasi-Like’

• XZ Utils might not have been the only sabotage target, open-source foundations warn

• The best VPN deals right now

• Gen AI training costs soar yet risks are poorly measured, says Stanford AI report

• Evolution Equity Partners raises $1.1B for new cybersecurity and AI fund

• FTC Bans Online Mental Health Firm From Sharing Certain Data

• Alleged cryptojacker accused of stealing $3.5M from cloud to mine under $1M in crypto

• Critical PuTTY Vulnerability Allows Secret Key Recovery

• Virtual Event Tomorrow: Ransomware Resilience & Recovery Summit

• MixMode Launches Advanced AI-Powered Attack Detection Prioritization

• Online Health Firm Cerebral to Pay $7 Million for Sharing Private Data

• PuTTY vulnerability can be exploited to recover private keys (CVE-2024-31497)

• Cyber Attack on Cisco Duo breaches its multifactor authentication

• Microsoft will Limit Exchange Online Bulk Emails to Fight Spam

• Speedify VPN Review: Features, Security & Performance

• SIM swap crooks solicit T-Mobile US, Verizon staff via text to do their dirty work

• Rockwell Automation ControlLogix and GuardLogix

• Botnets Continue Exploiting CVE-2023-1389 for Wide-Scale Spread

• Blackjack Group Used ICS Malware Fuxnet Against Russian Targets

• Report: Microsoft Most Impersonated Brand in Phishing Scams

• Data Loss Prevention: Best Practices for Secure Data Management

• USENIX Security ’23 – Account Verification on Social Media: User Perceptions and Paid Enrollment

• Ban the Scan – Is Facial Recognition a Risk to Civil Liberties?

• Cisco Duo provider breached, SMS MFA logs compromised

• OpenJS Foundation Targeted in Potential JavaScript Project Takeover Attempt

• Electrolink FM/DAB/TV Transmitter

• Measuresoft ScadaPro

• Answering the Executive “Why” and “What” for Full-Stack Observability

• Celebrating Cisco’s AI Differentiation and Our Engineers During World Creativity & Innovation Week

• New SteganoAmor Attacks Use Steganography to Target 320 Organizations Globally

• Law Firm to Pay $8M to Settle Health Data Hack Lawsuit

• Cloud Users Warned of Data Exposure Risk From Command-Line Tools

• Cryptojacker Arrested, Charged for Defrauding Cloud Providers of $3.5 Million

• Ex-Security Engineer Jailed For Hacking Decentralized Cryptocurrency Exchanges

• Resilient Together, Highlighting the Importance of Emergency Communications

• OT security vendor Nozomi Networks lands Air Force contract

• AWS, Google, and Azure CLI Tools Could Leak Credentials in Build Logs

• TA558 Hackers Weaponize Images for Wide-Scale Malware Attacks

• Omni Hotels says customers’ personal data stolen in ransomware attack

• A renewed espionage campaign targets South Asia with iOS spyware LightSpy

• AI Watchdog Defends Against New LLM Jailbreak Method

• Delinea Scrambles To Patch Critical Flaw After Ignoring Researcher

• Cryptojacker Arrested For Defrauding Cloud Providers Of $3.5 Million

• Google Location Tracking Deal Could Be Derailed By Politics

• Open sourcerers say suspected xz-style attacks continue to target maintainers

• Tanium Automate reduces manual processes for repeatable tasks

• Vercara UltraEdge offers protection against internet-based threats

• Obtaining security clearance: Hurdles and requirements

• IMF Warns of Potential Bank Runs Triggered by Cyber Attacks

• Report Suggests 93% of Breaches Lead to Downtime and Data Loss

• QUIC Server Preview Branch Available for Testing and Feedback

• Guardz Welcomes SentinelOne as Strategic Partner and Investor to Boost Cybersecurity Defenses for SMBs

• Misinformation and hacktivist campaigns targeting the Philippines skyrocket

• Pentest People Becomes the First Leeds-based Cybersecurity Company to Achieve NCSC’s Cyber Advisor (Cyber Essentials) Accreditation

• Giant Tiger breach sees 2.8 million records leaked

• A Crash Course in Hardware Hacking Methodology: The Ones and Zeros

• AI Helps Security Teams, But Boosts Threats

• The Hidden Risk of Airport Phone Charging Stations and Why You Should Avoid It

• Roku Security Breach Exposes Over 500,000 User Accounts to Cyber Threats

• Data-Stealing Malware Infections Surge by 600% in Three Years, Kaspersky Reports

• Cybersecurity Crisis: Small Firms Rank Attacks as the Greatest Business Risk

• New open-source project takeover attacks spotted, stymied

• LeakyCLI Flaw Exposes AWS and Google Cloud Credentials

• Global Hack Exposes Personal Data: Implications & Privacy Protection – Axios Security Group

• OpenSSF Warns of Fake Maintainers Targeting JavaScript Projects

• Connect:fun Attacking Organizations Running Fortinet’s FortiClient EMS

• Omni Hotels & Resorts Hack: Attackers have Stolen Customer Information

• Securing the Financial Sector with Check Point Infinity Global Services

• Change Healthcare’s ransomware attack costs edge toward $1B so far

• Hacker Conversations: Kevin O’Connor, From Childhood Hacker to NSA Operative

• Cybersecurity Pros Urge US Congress to Help NIST Restore NVD Operation

• Personal Data Exposed in Massive Global Hack: Understanding the Implications & Guarding Privacy- Axios Security Group

• The best AirTag wallets of 2024: Expert tested and recommended

• Large-scale brute-force activity targeting VPNs, SSH services with commonly used login credentials

• TA558 Hackers Compromised 320+ Organizations’ FTP & SMTP Servers

• Synergizing Advanced Identity Threat Detection & Response Solutions

• Omni Hotels Says Personal Information Stolen in Ransomware Attack

• You Against the World: The Offenders Dilemma

• Ransomware Group Starts Leaking Data Allegedly Stolen From Change Healthcare

• Knowledge & Research Security

• GuidePoint Security introduces IoT Security Assessment

• Atlas VPN Review (Updated for 2024)

• Who Stole 3.6M Tax Records from South Carolina?

• Sectigo SCM Pro automates certificate management

• Identity in the Shadows: Shedding Light on Cybersecurity’s Unseen Threats

• Widely-Used PuTTY SSH Client Found Vulnerable to Key Recovery Attack

• Microsoft Most Impersonated Brand in Phishing Scams

• Blackjack Hackers Destroyed 87,000 Sensors Using Lethal ICS Malware

• X.com Automatically Changing Link Text but Not URLs

• Google location tracking deal could be derailed by politics

• Delinea Scrambles to Patch Critical Flaw After Failed Responsible Disclosure Attempt

• Russia is trying to sabotage European railways, Czech minister said

• IDnow VideoIdent Flex blends AI technology with human interaction

• Rolling Back Packages on Ubuntu/Debian, (Tue, Apr 16th)

• Hong Kong Approves Bitcoin, Ether ETFs

• Open Source Groups Warn Of Ongoing Attacks

• FTC Fines Mental Health Startup Cerebral $7 Million for Major Privacy Violations

• Open Source Leaders Warn of XZ Utils-Like Takeover Attempts

• Better application networking and security with CAKES

• Casting a Cybersecurity Net to Secure Generative AI in Manufacturing

• SCM and NERC: What You Need to Know

• Bad Bots Drive 10% Annual Surge in Account Takeover Attacks

• Apple Loses Smartphone Crown To Samsung Amidst China Pressure

• Trump Media Shares Buckle Over Secondary Offering Plans

• Cisco Duo Data Breach: Hackers Stolen VoIP & SMS for MFA

• Hive RAT Creators and $3.5M Cryptojacking Mastermind Arrested in Global Crackdown

• Apple’s Tim Cook Visits Vietnam Amidst China Troubles

• Android: Banking trojan masquerading as Chrome

• Ransomware group Dark Angels claims the theft of 1TB of data from chipmaker Nexperia

• Five Key Takeaways from the 2024 Imperva Bad Bot Report

• NSA, CISA & FBI Released Best Practices For AI Security Deployment 2024

• Critical RCE Vulnerability in 92,000 D-Link NAS Devices

• LockBit 3.0 ransomware customized version now used to attack Global Firms

• 5 free red teaming resources to get you started

• Audio deepfakes: What they are, and the risks they present

• AI set to enhance cybersecurity roles, not replace them

• 31% of women in tech consider switching roles over the next year

• ISC Stormcast For Tuesday, April 16th, 2024 https://isc.sans.edu/podcastdetail/8940, (Tue, Apr 16th)

• IntelBroker Claims Space-Eyes Breach, Targeting US National Security Data

• 2024-04-15: Contact Forms campaign leads to SSLoad malware

• Quick Palo Alto Networks Global Protect Vulnerablity Update (CVE-2024-3400), (Mon, Apr 15th)

Generated on 2024-04-17 23:55:11.116825