IT Security News Daily Summary 2024-04-18

• ‘ASTORS’ Champion Adds Passphrase Generator to Keeper Web Vault

• Two Years Post-Roe: A Better Understanding of Digital Threats

• Vulnerabilities for AI and ML Applications are Skyrocketing

• Data Matters ? The Value of Visibility in API Security

• What to Consider When Choosing a Software Composition Analysis (SCA) Tool

• Randall Munroe’s XKCD ‘Eclipse Path Maps’

• USENIX Security ’23 – NRDelegationAttack: Complexity DDoS attack on DNS Recursive Resolvers

• Cheap ‘Junk-Gun Ransomware’ Emerging on the Dark Web

• FIN7 targeted a large U.S. carmaker phishing attacks

• Brave search engine adds privacy-focused AI – no Google or Bing needed

• Simeio Returns to Compete in 2024 ‘ASTORS’ Awards with Simeio IO

• 3 Keycloak authorization strategies to secure app access

• The Trump Jury Has a Doxing Problem

• Lacework, last valued at $8.3B, is in talks to sell for just $150M to $300M, say sources

• Law enforcement reels in phishing-as-a-service whopper

• Could the Brazilian Supreme Court finally hold people accountable for sharing disinformation?

• Stateful vs. stateless firewalls: Understanding the differences

• Wiz is in talks to buy Lacework for $150-200M; security firm was last valued at $8.3B

• House passes bill banning Uncle Sam from snooping on citizens via data brokers

• CISA Releases Three Industrial Control Systems Advisories

• #StopRansomware: Akira Ransomware

• Hackers are threatening to publish a huge stolen sanctions and financial crimes watchlist

• For Cisco Insider Wouter Hindriks, curiosity and passion for problem solving are keys to success.

• Oracle To Invest More Than $8 Billion In Cloud, AI In Japan

• Android could soon protect you from malicious apps by quarantining them

• Cape dials up $61M from A16Z + more for mobile service that doesn’t use personal data

• Fourth Amendment is Not For Sale Act Passed the House, Now it Should Pass the Senate

• Multi-Data Platform SIEM Anvilogic Raises $45 Million

• Watch Now: Ransomware Resilience & Recovery Summit Sessions Now on Demand

• SAP Applications Increasingly in Attacker Crosshairs, Report Shows

• Stale Accounts in Active Directory

• Understanding the Different Types of Audit Evidence

• DataDome Renews SOC 2 Type 2 Compliance

• House Passes Privacy-Preserving Bill, but Biden Blasts it

• Navigating Vulnerability Disclosure: Lessons from Delinea’s Secret Server Flaw

• Quishing Attacks Jump Tenfold, Attachment Payloads Halve

• Creating Deepfake Porn Without Consent To Become A Crime

• Kaspersky Study: Devices Infected With Data-Stealing Malware Increased by 7 Times Since 2020

• Russia’s Sandworm Upgraded to APT44 by Google’s Mandiant

• Wordfence Intelligence Weekly WordPress Vulnerability Report (April 8, 2024 to April 14, 2024)

• Data privacy and security become most worrisome for AI adoption decision makers

• Korean researcher details scheme abusing Apple’s third-party pickup policy

• CrowdStrike extends cloud security to Mission Cloud customers

• Google Fires 28 Staff Over Israel Protest, Undertakes More Layoffs

• Law enforcement operation dismantled phishing-as-a-service platform LabHost

• Palo Alto Networks Recognized by Gartner as a Leader in SSE Report

• Lawmakers Are Kicking Warrantless Wiretapping Into Overdrive

• Kremlin-Backed Actors Spread Disinformation Ahead Of US Elections

• EU Tells Meta It Can’t Paywall Privacy

• Russia’s Sandworm APT Linked To Attack On Texas Water Plant

• New Cyber-Threat MadMxShell Exploits Typosquatting and Google Ads

• Oracle Releases Critical Patch Update Advisory for April 2024

• IT and Security Professionals Demand More Workplace Flexibility

• Mental health company Cerebral failed to protect sensitive personal data, must pay $7 million

• Five Eyes Agencies Release New AI Security Guidance

• United Nations Agency Investigating Ransomware Attack Involving Data Theft

• OfflRouter Malware Evades Detection in Ukraine for Almost a Decade

• Russia Already Meddling In US Election, Microsoft Warns

• Palo Alto ZeroDay Exploited in The Wild Following PoC Release

• 37 Arrested as Police Smash LabHost International Fraud Network

• FIN7 Targets American Automaker’s IT Staff in Phishing Attacks

• Ransomware Attack Targets Healthcare Giant, Change Healthcare

• Iranian Hacker Group Blast Out Threatening Texts to Israelis

• Gurucul federated search provides insights into data that is not centralized

• FIN7 Cybercrime Group Targeting U.S. Auto Industry with Carbanak Backdoor

• Microsoft and Google are top brands misused to scam users

• Russian APT44 – The Most Notorious Cyber Sabotage Group Globally

• FIN7 Hackers Attacking IT Employees Of Automotive Industry

• 185K people’s sensitive data in the pits after ransomware raid on Cherry Health

• SoumniBot Exploiting Android Manifest Flaws to Evade Detection

• Unpacking the NIST cybersecurity framework 2.0

• Miercom NGFW Security Benchmark 2024: Why It Matters for Cloud Network Security

• Cisco at Hannover Messe 2024: Know Before You Go

• Report Reveals Healthcare Industry is Disillusioned in its Preparedness for Cyberattacks

• AWS Detection Engineering

• 5 Cybersecurity Resolutions for the New Year

• Apex Legends hacker says game developers patched exploit used on streamers

• Innovation and Continuity: Cisco Meraki in the Education Sector

• Goldilock Partners with organisation behind NATO’s largest cyber defence exercise

• Cisco Says PoC Exploit Available for Newly Patched IMC Vulnerability

• Roku experiences another data breach; Apple notifies users about mercenary spyware attacks

• LightSpy Spyware: A Chinese Affair Targeting iPhone Users in South Asia

• Combatting Counterfeit Drugs Online: BrandShield’s Success in Dismantling Illicit Websites

• Police apprehend global cyber gang implicated in large-scale fraud

• Malvertising Campaign Targeting IT Teams with MadMxShell Backdoor

• EU tells Meta it can’t paywall privacy

• April Product Update

• TechRepublic’s Review Methodology for Password Managers

• Turning Cisco’s Tuition Reimbursement Green

• Russian Sandworm Hackers Pose as Hacktivists in Water Utility Breaches

• Cannabis investment scam JuicyFields ends in 9 arrests

• Phishing Platform LabHost Shut Down by Law Enforcement

• 180k Impacted by Data Breach at Michigan Healthcare Organization

• OnlyFans Filter: A New Frontier in School Safety and CIPA Compliance

• Ivanti patches critical Avalanche flaw exploitable via a simple message (CVE-2024-29204)

• Global Police Operation Disrupts ‘LabHost’ Phishing Service, Over 30 Arrested Worldwide

• How to Conduct Advanced Static Analysis in a Malware Sandbox

• New Android Trojan ‘SoumniBot’ Evades Detection with Clever Tricks

• Recover from Ransomware in 5 Minutes—We will Teach You How!

• US Election Officials Told to Prepare for Nation-State Influence Campaigns

• LeSlipFrancais Data Breach: Customers’ Personal Information Exposed

• Other Attempts to Take Over Open Source Projects

• Moldovan Charged for Operating Botnet Used to Push Ransomware

• EU To Drop Microsoft’s OpenAI Investment Probe – Report

• Cisco Hypershield: AI-Powered Hyper-Distributed Security for Data Center

• The Real-Time Deepfake Romance Scams Have Arrived

• Armis Buys Cyber Remediation Startup Silk Security for $150M

• Possible Chinese Hackers Use OpenMetadata for Cryptomining

• Data Encryption Policy

• Shaping Cybersecurity Policy towards a trusted and secure Europe

• Previously unknown Kapeka backdoor linked to Russian Sandworm APT

• LockBit Knockoffs and Imposters Proliferate After LockBit 3.0 Builder Leak

• Prolific phishing-made-easy emporium LabHost knocked offline in cyber-cop op

• What is certificate discovery and why is it important?

• Redgate Monitor Enterprise prevents unauthorized access to sensitive information

• Immuta launches Domains policy enforcement to improve security and governance for data owners

• Supply Chain Cybersecurity – the importance of everyone

• DuneQuixote campaign targets Middle Eastern entities with “CR4T” malware

• 16-31 January 2024 Cyber Attacks Timeline

• Cisco Unveils AI-Native Enterprise Security Solution Hypershield

• SAS unveils products and services to help customers embrace AI

• UnitedHealth Expects Up to $1.6B Hit From Change Healthcare Cyberattack This Year

• Trust in Cyber Takes a Knock as CNI Budgets Flatline

• US Provides Assurances For Julian Assange Extradition

• What is Encryption in Malware? – Understand From Basics to XOR

• Java services hit hardest by third-party vulnerabilities, report says

• Years-Old Vulnerability in AMI MegaRAC BMCs Impacts Intel and Lenovo Hardware

• Surge in Botnets Exploiting CVE-2023-1389 to Infect TP-Link Archer Routers

• Le Slip Français – 1,495,127 breached accounts

• Food and Agriculture Sector Hit with More Than 160 Ransomware Attacks Last Year

• Cisco Warns of a Command Injection and Privilege Escalation Flaw in Its IMC

• Authorities take down LabHost, phishing-as-a-service platform

• Phishing-as-a-Service Platform LabHost Seized by Authorities

• Pharming Attack: A Deceptive Harvest of Your Data

• UK Police Lead Disruption of £1m Phishing-as-a-Service Site LabHost

• Cisco Hypershield: Security reimagined — hyper-distributed security for the AI-scale data center

• Cisco warns of a command injection escalation flaw in its IMC. PoC publicly available

• Cisco Taps AI and eBPF to Automate Security Operations

• 6 Phone Management Tips When Traveling Abroad

• Armis Acquires AI-based Vulnerability Detection Firm Silk Security

• Cisco creates architecture to improve security and sell you new switches

• Cisco Hypershield: A New Era of Distributed, AI-Native Security

• Cisco Hypershield: Reimagining Security

• Hackers Exploit OpenMetadata Flaws to Mine Crypto on Kubernetes

• Microsoft and Google are top companies to scam users

• Singapore infosec boss warns China/West tech split will be bad for interoperability

• Cheap ransomware for sale on dark web marketplaces is changing the way hackers operate

• Malicious Google Ads Pushing Fake IP Scanner Software with Hidden Backdoor

• Who owns customer identity?

• Taiwanese film studio snaps up Chinese surveillance camera specialist Dahua

• CSOs and CFOs; The World’s Next Greatest Dynamic Duo

• Palo Alto Networks PAN-OS Command Injection Vulnerability (CVE-2024-3400)

• Enterprises face significant losses from mobile fraud

• 92% of enterprises unprepared for AI security challenges

• Bots dominate internet activity, account for nearly half of all traffic

• A Vuln is a Vuln, unless the CVE for it is after Feb 12, 2024, (Wed, Apr 17th)

• ISC Stormcast For Thursday, April 18th, 2024 https://isc.sans.edu/podcastdetail/8944, (Thu, Apr 18th)

• The Fall of LabHost: Law Enforcement Shuts Down Phishing Service Provider

• Hugely expanded Section 702 surveillance powers set for US Senate vote

• 2024-04-17: TA578 pushes SSLoad malware

• IT Security News Daily Summary 2024-04-17

• Facebook’s Controversial “Consent Or Pay” Privacy Model Officially Shot Down

• Should you share your location with your partner?

• Kapeka: A New Backdoor in Sandworm’s Arsenal of Aggression

• Big Tech Says Spy Bill Turns Its Workers Into Informants

• Kremlin’s Sandworm blamed for cyberattacks on US, European water utilities

• XZ Utils-Like Takeover Attempt Targets the OpenJS Foundation

• CISA, FBI, and ODNI Release Guidance for Securing Election Infrastructure Against the Tactics of Foreign Malign Influence Operations

• National Guard will use Google’s AI for faster disaster response and recovery

• Big Tech Squares Off Against US Spies

• Linux variant of Cerber ransomware targets Atlassian servers

• Zero-Day Exploitation of Palo Alto Networks Firewall Allows Backdoor Installation

• Tesla To Ask Shareholders To Reinstate Elon Musk’s $56 Billion Package

• About Face (Recognition) | EFFector 36.5

• Congratulations to the Top MSRC 2024 Q1 Security Researchers!

• Glitter and… Firewalls? How to stay safe this festival season

• Safeguarding ERP Systems in the Digital Age: The Crucial Role of NetSuite Support in Cyber Defense

• Telegram To Reach One Billion Users Within Year

• Criminals want to pay T-Mobile and Verizon staff for SIM swaps. Here’s what you need to know

• The Evolving Threat of Ransomware — A Call to Action for Cybersecurity

• Xiid SealedTunnel: Unfazed by Yet Another Critical Firewall Vulnerability (CVE-2024-3400)

• Palo Alto Networks’ firewall bug under attack brings fresh havoc to thousands of companies

• FTC slaps penalty for leaking sensitive health data to Facebook

• The network effect: The secret weapon for smart manufacturing

• OpenAI’s ChatGPT Can Exploit Real Vulnerabilities By Reading Advisories

• Recent OT And Espionage Attacks Linked To Russia’s Sandworm, Now Named APT44

• Attackers Are Pummeling Networks Around The World With Millions Of Login Attempts

• Ivanti Patches 27 Vulns In Avalanche MDM Product

• Scammers Offer Cash To Phone Carrier Staff To Swap SIM Cards

• USENIX Security ’23 – Two Sides Of The Shield: Understanding Protective DNS Adoption Factors

• Linux Cerber Ransomware Variant Exploits Atlassian Servers

• Judge Dismisses Some Harm Claims Against Meta, Zuckerberg

• The Blink Mini 2 is seeing its first ever discount at 25% off

• Is a VPN Really Worth It in 2024?

• Armis Acquires Silk Security for $150 Million

• Miggo Security Gets $7.5 Million Seed Funding to Build ADR Technology

• Are VPNs Undertaking To Oversee All Digital Security?

• North Korean Group Kimsuky Exploits DMARC and Web Beacons

• $400 Bounty Awarded for SQL Injection Vulnerability Patched in WP Activity Log Premium WordPress Plugin

• What should Security Operations teams take away from the IBM X-Force 2024 Threat Intelligence Index?

• Sysreptor – Offensive Security Reporting Solution For Pentesters

• Keeper Security Offers Built-In Passphrase Generator to Strengthen Security

• US Government and OpenSSF Partner on New SBOM Management Tool

• Google Begins Removal Of California News Ahead Of Proposed Law

• Human Risk: An Organisation’s Biggest Problem and Greatest Opportunity

• Counting the Cost: $9.2 Trillion Annual Impact of Cybercrime Looms

• Hackers Use GitHub Search to Deliver Malware

• Tim Cook Says Apple Considering Factory In Indonesia

• Ivanti Warns of Critical Flaws in Its Avalanche MDM Solution

• Exploit code for Palo Alto Networks zero-day now public

• Cisco: Multiple VPN, SSH Services Targeted in Mass Brute-Force Attacks

• Russian APT Deploys New ‘Kapeka’ Backdoor in Eastern European Attacks

• The Digital Future Needs Cybersecurity Leaders

• Access Limitless Global Content: How Residential Proxies Enable It

• AI for Risk Discovery: 10 Ways to Make it Work For You

• Russia is Trying to Sabotage European Railways, Czech Minister Said

• From CEO Alan Shimel: Futurum Group Acquires Techstrong Group

• What to Take into Consideration When Choosing a SAST Tool for Your Business

• FGVulDet – New Vulnerability Detector to Analyze Source Code

• Cerber Linux Ransomware Exploits Atlassian Servers to Take Full Control

• 8 data protection challenges and how to prevent them

• New Bill Would Create a Governing Body for Water System Cyber Standards

• Russian Sandworm Group Using Novel Backdoor to Target Eastern and Central Europe

• Hybrid Working is Changing How We Think About Security

• Recent OT and Espionage Attacks Linked to Russia’s Sandworm, Now Named APT44

• Chrome 124, Firefox 125 Patch High-Severity Vulnerabilities

• Virtual Event Today: Ransomware Resilience & Recovery Summit

• Ivanti Patches 27 Vulnerabilities in Avalanche MDM Product

• North Korean Hackers Abuse DMARC To Legitimize Their Emails

• The Rise of Weaponized Software: How Cyber Attackers Outsmart Traditional Defenses

• National Security at Risk: The CFPB’s Battle Against Data Brokers

• Armis acquires Silk Security for $150 million

• OfflRouter virus causes Ukrainian users to upload confidential documents to VirusTotal

• Supercharging Cisco XDR with AI and Identity Intelligence at RSAC 2024

• DAST Scanner: New features and improvements

• Cyber Security Today, April 17, 2024 – More suspicious attempts to take over open source projects, a data theft at a Cisco Duo partner, and more

• GenAI: A New Headache for SaaS Security Teams

• Application Security Optimised for Engineering Productivity

• L00KUPRU Ransomware Attackers discovered in the wild

• Ivanti fixed two critical flaws in its Avalanche MDM

• Exploitation of Palo Alto Firewall Vulnerability Picking Up After PoC Release

• Oracle Patches 230 Vulnerabilities With April 2024 CPU

• Hackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign

• Critical Atlassian Flaw Exploited to Deploy Linux Variant of Cerber Ransomware

• Oracle Releases Biggest Security Update in 2024 – 372 Vulnerabilities Are Fixed – Update Now!

• Flyfish Review – How Reliable are this Company’s Payroll Management Solutions?

• Several GTKWave Vulnerabilities Fixed in Debian

• EU Elections: Pro-Russian Propaganda Exploits Meta’s Failure to Moderate Political Ads

• Google Chrome: Security and UI Tips You Need to Know

• Hackers Linked to Russia’s Military Claim Credit for Sabotaging US Water Utilities

• T-Mobile, Verizon Workers Get Texts Offering $300 for SIM Swaps

• OpenAI’s GPT-4 can exploit real vulnerabilities by reading security advisories

• HTTP/2 Vulnerability: Protect Web Servers from DoS Attacks

• Unveiling the Risks and Rewards of Exposing Your Data | Eureka Security

• Ahoi Attacks: A New Threat to Confidential VMs in the Cloud

• Canada To Implement Digital Services Tax This Year

• Cisco Warns Of Massive Brute-Force Attacks Targeting VPNs & SSH Services

• Outlook Login Panel Themed Phishing Attack Evaded All Antivirus Detections

• Vorlon is trying to stop the next big API breach

• SoumniBot: the new Android banker’s unique techniques

• Cyberattacks Surge 325% in Philippines Amid South China Sea Standoff

• Navigating AI and Cybersecurity: Insights from the World Economic Forum (WEF)

• Update: Researchers Released Exploit Code for Actively Exploited Palo Alto Networks PAN-OS Bug

• Palo Alto firewalls: Public exploits, rising attacks, ineffective mitigation

• Ivanti Patches Two Critical Avalanche Flaws in Major Update

• Misinformation and Hacktivist Campaigns Targeting the Philippines Skyrocket

• BreachForums Down, But Not Out: Hackers Claim Attack, Admins Remain Unfazed

• Cisco Warns of Global Surge in Brute-Force Attacks Targeting VPN and SSH Services

• Insider Threats Surge 14% Annually as Cost-of-Living Crisis Bites

• Operation MidnightEclipse: Hackers Actively Exploiting Palo Alto Networks Zero-Day Flaw

• Tor Browser 13.0.14 Released – What’s New!

• What is the U.S. Cyber Trust Mark?

• Iran Launched A Major Cyberattack Against Critical Infrastructure In Israel

• INC Ransom Group Exfiltrates Data Before Encrypting & Threatens Public Exposure

• Google Ads for Bitbucket.org – malvertising at its best

• Implementing ISO 27001:2022 Annex A.15 – Supplier Relationships

• New Android Malware Mimic Google Chrome to Steal Banking Details

• From Social Engineering to DMARC Abuse: TA427’s Art of Information Gathering

• Russian Sandworm Group Using Novel Backdoor to Target Ukraine and Allies

• Empowering Change: Using Your Influence to Confront the Climate Crisis

• Understanding CAT Culture in Cybersecurity: Collaboration, Awareness, and Training

• Researchers released exploit code for actively exploited Palo Alto PAN-OS bug

• Malicious PDF File Used As Delivery Mechanism, (Wed, Apr 17th)

• Cyber Threat from Remember Me Checkbox

• Japanese government rejects Yahoo! infosec improvement plan

• Cisco warns of large-scale brute-force attacks against VPN and SSH services

• Thinking outside the code: How the hacker mindset drives innovation

• Cybersecurity jobs available right now: April 17, 2024

• Damn Vulnerable RESTaurant: Open-source API service designed for learning

• LightSpy Hackers Target Indian Apple Device Users To Steal Sensitive Data

• IT and security professionals demand more workplace flexibility

• Understanding next-level cyber threats

• ISC Stormcast For Wednesday, April 17th, 2024 https://isc.sans.edu/podcastdetail/8942, (Wed, Apr 17th)

• Fire in the Cisco! Networking giant’s Duo MFA message logs stolen in phish attack

• Most developers have adopted devops, survey says

• Fire in the Cisco! Networking giant’s Duo MFA leaks message logs

Generated on 2024-04-18 23:55:12.355471