IT Security News Daily Summary 2024-04-19

• Your Android phone could have stalkerware — here’s how to remove it

• Friday Squid Blogging: Squid Trackers

• Google Consolidates DeepMind And AI Research Teams

• Sacramento airport goes no-fly after AT&T internet cable snipped

• More on the PAN-OS CVE-2024-3400

• PRODUCT REVIEW: Safous Zero Trust Access

• Facebook Slammed For Censoring Content From Auschwitz Museum

• LabHost Phishing Platform is Latest Target of International Law Agencies

• Cyber Security Today, Week in Review for week ending Friday April 19, 2024

• CISA Announces Winners of the 5th Annual President’s Cup Cybersecurity Competition

• Taking Time to Understand NIS2 Reporting Requirements

• The CVE’s They are A-Changing!, (Wed, Apr 17th)

• Breakthrough in Quantum Cloud Computing Ensures its Security and Privacy

• Apple Pulls WhatsApp, Threads From China App Store

• 7 steps to create a data loss prevention policy

• BreachRx Raises $6.5M to Revamp Incident Response Reporting Systems

• The 8 Most Common Causes of Data Breaches

• The Biggest Deepfake Porn Website Is Now Blocked in the UK

• USENIX Security ’23 – Inductive Graph Unlearning

• NCSWIC Releases Roles and Responsibilities: Statewide Interoperability Coordinators Document

• EFF, Human Rights Organizations Call for Urgent Action in Case of Alaa Abd El Fattah

• APT44: Unearthing Sandworm – A Cyber Threat Beyond Borders

• Websites Engage in Deceptive Practices to Conceal the Scope of Data Collection and Sharing

• FBI says Akira Ransomware group raked $42 million

• SAFOUS ZERO TRUST ACCESS – Comprehensive Cybersecurity for the Modern Enterprise

• 4 steps CISOs can take to raise trust in their business

• Fake Cheat Lures Gamers Into Spreading Infostealer Malware

• From DAST to dawn: why fuzzing is better solution | Code Intelligence

• International Cyber Fraud Ring Busted By London Police

• 2024-04-18: Word macro –> SSLoad –> Cobalt Strike

• $2,063 Bounty Awarded for Privilege Escalation Vulnerability Patched in User Registration WordPress Plugin

• How We’re Delivering Next-Gen Workforce Collaboration with Cisco Private 5G

• Introducing the 7th Annual Partner Innovation Challenge: Featuring an Exciting New Prize Category

• Connect hybrid cloud Kubernetes with F5 multicloud networking and Red Hat OpenShift for optimized security footprints

• Learn about trends and best practices from top security experts at Red Hat and NIST’s Cybersecurity Open Forum

• 4 use cases for AI in cyber security

• Unraveling Cyber Threats: Insights from Code Analysis

• NSA Shares Best Practices for Secure AI Systems

• WhatsApp, Threads, more banished from Apple App Store in China

• Threat-Intelligence Startup VulnCheck Closes $8M Seed Financing

• BlackTech Targets Tech, Research, and Gov Sectors New ‘Deuterbear’ Tool

• IT and Cybersecurity Jobs in the Age of Emerging AI Technologies

• CISA: Akira ransomware extorted $42M from 250-plus victims

• Cisco Releases Security Advisories for Cisco Integrated Management Controller

• Dark Web Sales Driving Major Rise in Credential Attacks

• Congress: Don’t Let Anyone Own The Law

• Tuta Mail (Tutanota) Accuses Google of Censoring Its Search Results

• The Importance of Cyber Hygiene for Businesses

• First Major Attempts to Regulate AI Face Headwinds From All Sides

• In Other News: OSS Backdooring Attempts, Botnet Operator Charged, Automotive Firm Attack

• Cisco Duo raises awareness over a breach in third-party data security, revealing the exposure of SMS MFA logs.

• Unveiling the Threat: Microsoft’s Executive Speaks Out on State-Backed Hacking

• Intel Foundry Assembles Next Gen Chip Machine From ASML

• Earth Day 2024: Securing Our Earth

• Ransomware in Q1 2024: Frequency, size of payments trending downwards, SMBs beware!

• Alarming Decline in Cybersecurity Job Postings in the US

• Is the UK about to ban ransomware payments?

• Frontier Communications Shuts Down Systems Following Cyberattack

• Akira Ransomware Made Over $42 Million in One Year: Agencies

• US Government Releases Guidance on Securing Election Infrastructure

• Scaling Application Security With Application Security Posture Management (ASPM)

• What’s the deal with the massive backlog of vulnerabilities at the NVD?

• Cybercriminals threaten to leak all 5 million records from stolen database of high-risk individuals

• Akira Ransomware Gang Extorts $42 Million; Now Targets Linux Servers

• How Attackers Can Own a Business Without Touching the Endpoint

• Unlocking the Power of Portfolio Analysis – A Comprehensive Guide

• Hacking the Floodgates: US Dams Face Growing Cyber Threats

• Cyber Security Today, April 19, 2024 – Police bust phishing rental platform, a nine-year old virus found on Ukrainian computers, and more

• Akira Ransomware Attacks Over 250 Organizations and Collects $42 Million

• Google Ad Impersonates Whales Market to Push Wallet Drainer Malware

• UK’s Cydea introduces new way to quantify risk management

• Ransomware Victims Who Pay a Ransom Drops to Record Low

• Germany cuffs alleged Russian spies over plot to bomb industrial and military targets

• Akira Ransomware Group Rakes in $42m, 250 Organizations Impacted

• Cisco Launches A New AI-Focused Security Solution

• Cybercriminals Pose as LastPass Staff to Hack Password Vaults

• 92% of Enterprises Unprepared for AI Security Challenges

• OpenMetadata Vulnerabilities Exploited to Abuse Kubernetes Clusters for Cryptomining

• LastPass users targeted by vishing attackers

• FBI chief says China is preparing to attack US critical infrastructure

• The Dark Side of EDR: Repurpose EDR as an Offensive Tool

• Google Chrome DBSC Protection Tested Against Cookie Attacks

• Crunching Some Numbers on PHP Support

• NIS-2: 10 common misconceptions about the regulation

• United Nations Development Programme (UNDP) investigates data breach

• Damn Vulnerable RESTaurant: Open-Source API Service Designed for Learning

• Novel Android Malware Targets Korean Banking Users

• The Ultimate Guide to SBIR and STTR Program Budgeting

• ‘Crude’ Ransomware Tools Proliferating on the Dark Web for Cheap, Researchers Find

• Hackers Target Middle East Governments with Evasive “CR4T” Backdoor

• Possible Cyber Attack on 911 of 4 American States

• Can Ransomware Gangs Be Neutralized? Exploring Strategies to Combat Cyber Extortion

• Protobom: Open-source software supply chain tool

• The key pillars of domain security

• Lacework, last valued at $8.3B, is in talks to sell for just $150M to $200M, say sources

• Alert! Windows LPE Zero-day Exploit Advertised on Hacker Forums

• New infosec products of the week: April 19, 2024

• 51% of enterprises experienced a breach despite large security stacks

• ISC Stormcast For Friday, April 19th, 2024 https://isc.sans.edu/podcastdetail/8946, (Fri, Apr 19th)

• Attackers exploiting new critical OpenMetadata vulnerabilities on Kubernetes clusters

• Ransomware feared as IT ‘issues’ force Octapharma Plasma to close 150+ centers

• Cisco discloses high-severity vulnerability, PoC available

• FIN7 targeted a large U.S. carmaker with phishing attacks

• Crooks exploit OpenMetadata holes to mine crypto – and leave a sob story for victims

• IT Security News Daily Summary 2024-04-18

• ‘ASTORS’ Champion Adds Passphrase Generator to Keeper Web Vault

• Two Years Post-Roe: A Better Understanding of Digital Threats

• Vulnerabilities for AI and ML Applications are Skyrocketing

• Data Matters ? The Value of Visibility in API Security

• What to Consider When Choosing a Software Composition Analysis (SCA) Tool

• Randall Munroe’s XKCD ‘Eclipse Path Maps’

• USENIX Security ’23 – NRDelegationAttack: Complexity DDoS attack on DNS Recursive Resolvers

• Cheap ‘Junk-Gun Ransomware’ Emerging on the Dark Web

• FIN7 targeted a large U.S. carmaker phishing attacks

• Brave search engine adds privacy-focused AI – no Google or Bing needed

• Simeio Returns to Compete in 2024 ‘ASTORS’ Awards with Simeio IO

• 3 Keycloak authorization strategies to secure app access

• The Trump Jury Has a Doxing Problem

• Lacework, last valued at $8.3B, is in talks to sell for just $150M to $300M, say sources

• Law enforcement reels in phishing-as-a-service whopper

• Could the Brazilian Supreme Court finally hold people accountable for sharing disinformation?

• Stateful vs. stateless firewalls: Understanding the differences

• Wiz is in talks to buy Lacework for $150-200M; security firm was last valued at $8.3B

• House passes bill banning Uncle Sam from snooping on citizens via data brokers

• CISA Releases Three Industrial Control Systems Advisories

• #StopRansomware: Akira Ransomware

• Hackers are threatening to publish a huge stolen sanctions and financial crimes watchlist

• For Cisco Insider Wouter Hindriks, curiosity and passion for problem solving are keys to success.

• Oracle To Invest More Than $8 Billion In Cloud, AI In Japan

• Android could soon protect you from malicious apps by quarantining them

• Cape dials up $61M from A16Z + more for mobile service that doesn’t use personal data

• Fourth Amendment is Not For Sale Act Passed the House, Now it Should Pass the Senate

• Multi-Data Platform SIEM Anvilogic Raises $45 Million

• Watch Now: Ransomware Resilience & Recovery Summit Sessions Now on Demand

• SAP Applications Increasingly in Attacker Crosshairs, Report Shows

• Stale Accounts in Active Directory

• Understanding the Different Types of Audit Evidence

• DataDome Renews SOC 2 Type 2 Compliance

• House Passes Privacy-Preserving Bill, but Biden Blasts it

• Navigating Vulnerability Disclosure: Lessons from Delinea’s Secret Server Flaw

• Quishing Attacks Jump Tenfold, Attachment Payloads Halve

• Creating Deepfake Porn Without Consent To Become A Crime

• Kaspersky Study: Devices Infected With Data-Stealing Malware Increased by 7 Times Since 2020

• Russia’s Sandworm Upgraded to APT44 by Google’s Mandiant

• Wordfence Intelligence Weekly WordPress Vulnerability Report (April 8, 2024 to April 14, 2024)

• Data privacy and security become most worrisome for AI adoption decision makers

• Korean researcher details scheme abusing Apple’s third-party pickup policy

• CrowdStrike extends cloud security to Mission Cloud customers

• Google Fires 28 Staff Over Israel Protest, Undertakes More Layoffs

• Law enforcement operation dismantled phishing-as-a-service platform LabHost

• Palo Alto Networks Recognized by Gartner as a Leader in SSE Report

• Lawmakers Are Kicking Warrantless Wiretapping Into Overdrive

• Kremlin-Backed Actors Spread Disinformation Ahead Of US Elections

• EU Tells Meta It Can’t Paywall Privacy

• Russia’s Sandworm APT Linked To Attack On Texas Water Plant

• New Cyber-Threat MadMxShell Exploits Typosquatting and Google Ads

• Oracle Releases Critical Patch Update Advisory for April 2024

• IT and Security Professionals Demand More Workplace Flexibility

• Mental health company Cerebral failed to protect sensitive personal data, must pay $7 million

• Five Eyes Agencies Release New AI Security Guidance

• United Nations Agency Investigating Ransomware Attack Involving Data Theft

• OfflRouter Malware Evades Detection in Ukraine for Almost a Decade

• Russia Already Meddling In US Election, Microsoft Warns

• Palo Alto ZeroDay Exploited in The Wild Following PoC Release

• 37 Arrested as Police Smash LabHost International Fraud Network

• FIN7 Targets American Automaker’s IT Staff in Phishing Attacks

• Ransomware Attack Targets Healthcare Giant, Change Healthcare

• Iranian Hacker Group Blast Out Threatening Texts to Israelis

• Gurucul federated search provides insights into data that is not centralized

• FIN7 Cybercrime Group Targeting U.S. Auto Industry with Carbanak Backdoor

• Microsoft and Google are top brands misused to scam users

• Russian APT44 – The Most Notorious Cyber Sabotage Group Globally

• FIN7 Hackers Attacking IT Employees Of Automotive Industry

• 185K people’s sensitive data in the pits after ransomware raid on Cherry Health

• SoumniBot Exploiting Android Manifest Flaws to Evade Detection

• Unpacking the NIST cybersecurity framework 2.0

• Miercom NGFW Security Benchmark 2024: Why It Matters for Cloud Network Security

• Cisco at Hannover Messe 2024: Know Before You Go

• Report Reveals Healthcare Industry is Disillusioned in its Preparedness for Cyberattacks

• AWS Detection Engineering

• 5 Cybersecurity Resolutions for the New Year

• Apex Legends hacker says game developers patched exploit used on streamers

• Innovation and Continuity: Cisco Meraki in the Education Sector

• Goldilock Partners with organisation behind NATO’s largest cyber defence exercise

• Cisco Says PoC Exploit Available for Newly Patched IMC Vulnerability

• Roku experiences another data breach; Apple notifies users about mercenary spyware attacks

• LightSpy Spyware: A Chinese Affair Targeting iPhone Users in South Asia

• Combatting Counterfeit Drugs Online: BrandShield’s Success in Dismantling Illicit Websites

• Police apprehend global cyber gang implicated in large-scale fraud

• Malvertising Campaign Targeting IT Teams with MadMxShell Backdoor

• EU tells Meta it can’t paywall privacy

• April Product Update

• TechRepublic’s Review Methodology for Password Managers

• Turning Cisco’s Tuition Reimbursement Green

• Russian Sandworm Hackers Pose as Hacktivists in Water Utility Breaches

• Cannabis investment scam JuicyFields ends in 9 arrests

• Phishing Platform LabHost Shut Down by Law Enforcement

• 180k Impacted by Data Breach at Michigan Healthcare Organization

• OnlyFans Filter: A New Frontier in School Safety and CIPA Compliance

• Ivanti patches critical Avalanche flaw exploitable via a simple message (CVE-2024-29204)

• Global Police Operation Disrupts ‘LabHost’ Phishing Service, Over 30 Arrested Worldwide

• How to Conduct Advanced Static Analysis in a Malware Sandbox

• New Android Trojan ‘SoumniBot’ Evades Detection with Clever Tricks

• Recover from Ransomware in 5 Minutes—We will Teach You How!

• US Election Officials Told to Prepare for Nation-State Influence Campaigns

• LeSlipFrancais Data Breach: Customers’ Personal Information Exposed

• Other Attempts to Take Over Open Source Projects

• Moldovan Charged for Operating Botnet Used to Push Ransomware

• EU To Drop Microsoft’s OpenAI Investment Probe – Report

• Cisco Hypershield: AI-Powered Hyper-Distributed Security for Data Center

• The Real-Time Deepfake Romance Scams Have Arrived

• Armis Buys Cyber Remediation Startup Silk Security for $150M

• Possible Chinese Hackers Use OpenMetadata for Cryptomining

• Data Encryption Policy

• Shaping Cybersecurity Policy towards a trusted and secure Europe

• Previously unknown Kapeka backdoor linked to Russian Sandworm APT

• LockBit Knockoffs and Imposters Proliferate After LockBit 3.0 Builder Leak

• Prolific phishing-made-easy emporium LabHost knocked offline in cyber-cop op

• What is certificate discovery and why is it important?

• Redgate Monitor Enterprise prevents unauthorized access to sensitive information

• Immuta launches Domains policy enforcement to improve security and governance for data owners

• Supply Chain Cybersecurity – the importance of everyone

• DuneQuixote campaign targets Middle Eastern entities with “CR4T” malware

• 16-31 January 2024 Cyber Attacks Timeline

• Cisco Unveils AI-Native Enterprise Security Solution Hypershield

• SAS unveils products and services to help customers embrace AI

• UnitedHealth Expects Up to $1.6B Hit From Change Healthcare Cyberattack This Year

• Trust in Cyber Takes a Knock as CNI Budgets Flatline

• US Provides Assurances For Julian Assange Extradition

• What is Encryption in Malware? – Understand From Basics to XOR

• Java services hit hardest by third-party vulnerabilities, report says

• Years-Old Vulnerability in AMI MegaRAC BMCs Impacts Intel and Lenovo Hardware

• Surge in Botnets Exploiting CVE-2023-1389 to Infect TP-Link Archer Routers

• Le Slip Français – 1,495,127 breached accounts

• Food and Agriculture Sector Hit with More Than 160 Ransomware Attacks Last Year

• Cisco Warns of a Command Injection and Privilege Escalation Flaw in Its IMC

• Authorities take down LabHost, phishing-as-a-service platform

• Phishing-as-a-Service Platform LabHost Seized by Authorities

• Pharming Attack: A Deceptive Harvest of Your Data

• UK Police Lead Disruption of £1m Phishing-as-a-Service Site LabHost

• Cisco Hypershield: Security reimagined — hyper-distributed security for the AI-scale data center

• Cisco warns of a command injection escalation flaw in its IMC. PoC publicly available

• Cisco Taps AI and eBPF to Automate Security Operations

• 6 Phone Management Tips When Traveling Abroad

• Armis Acquires AI-based Vulnerability Detection Firm Silk Security

• Cisco creates architecture to improve security and sell you new switches

• Cisco Hypershield: A New Era of Distributed, AI-Native Security

• Cisco Hypershield: Reimagining Security

• Hackers Exploit OpenMetadata Flaws to Mine Crypto on Kubernetes

• Microsoft and Google are top companies to scam users

• Singapore infosec boss warns China/West tech split will be bad for interoperability

• Cheap ransomware for sale on dark web marketplaces is changing the way hackers operate

• Malicious Google Ads Pushing Fake IP Scanner Software with Hidden Backdoor

• Who owns customer identity?

• Taiwanese film studio snaps up Chinese surveillance camera specialist Dahua

• CSOs and CFOs; The World’s Next Greatest Dynamic Duo

• Palo Alto Networks PAN-OS Command Injection Vulnerability (CVE-2024-3400)

• Enterprises face significant losses from mobile fraud

• 92% of enterprises unprepared for AI security challenges

• Bots dominate internet activity, account for nearly half of all traffic

• A Vuln is a Vuln, unless the CVE for it is after Feb 12, 2024, (Wed, Apr 17th)

• ISC Stormcast For Thursday, April 18th, 2024 https://isc.sans.edu/podcastdetail/8944, (Thu, Apr 18th)

• The Fall of LabHost: Law Enforcement Shuts Down Phishing Service Provider

• Hugely expanded Section 702 surveillance powers set for US Senate vote

Generated on 2024-04-19 23:55:12.439561