IT Security News Daily Summary 2024-04-23

• Google ad for Facebook redirects to scam

• HHS Strengthens Privacy of Reproductive Health Care Data

• Dutch Government Might Leave Facebook Over Privacy Concerns

• $10 Million Bounty on Iranian Hackers for Cyber Attacks on US Gov, Defense Contractors

• North Korea-linked APT groups target South Korean defense contractors

• Screen Printing 101: EFF’s Spring Speakeasy at Babylon Burning

• Speaking Freely: Obioma Okonkwo

• Analyzing Forest Blizzard’s custom post-compromise tool for exploiting CVE-2022-38028 to obtain credentials

• UnitedHealth: Ransomware Attackers Stole Huge Amount of Data

• Cyber Attack Hits UK’s Carpetright, Affecting Customer Orders

• Wells Fargo Data Breach: Safeguarding Customer Information in a Digital Age

• CCNA in the Age of AI

• GuptiMiner: Hijacking Antivirus Updates for Distributing Backdoors and Casual Mining

• CISA to Issue List of Software Products Critical to Agency Security by End of September

• Spain Reopens a Probe Into a Pegasus Spyware Case After a French Request to Work Together

• U.S. cracks down on commercial spyware with visa restrictions

• Oak Ridge, McCrary Institute Establish Cybersecurity Center Focused on Electrical Grid

• MITRE Breach: State Hackers Exploit Ivanti Zero-Days

• The best free VPNs of 2024: Expert tested

• Nespresso Domain Hijacked in Phishing Attack Targeting Microsoft Logins

• US Imposes Visa Restrictions on Alleged Spyware Figures

• Veeam acquires Coveware to boost its ransomware protection

• 0G and OnePiece Labs Collaborate to Create Crypto x AI Incubator

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• The best VPN for streaming in 2024: Expert tested and reviewed

• The best free VPNs

• TuxCare Names Glen Kuhne as Vice President of Enterprise Sales

• CISA Releases Two Industrial Control Systems Advisories

• CISA Adds One Known Exploited Vulnerability to Catalog

• New Cisco Defense Orchestrator (CDO) API

• How Cisco is Redefining Security and Our Partner Experience

• Full Stack Observability: Everything, everywhere, all at once

• Infrastructure Automation and Defense: Introducing DevSecOps Essentials

• Expert Insight: Outdated Recruitment Methods Are Impeding The Global Cyber Army

• Indian Banks Mull New Move for Faster Freezing of Scammers’ Accounts

• Invicti Predictive Risk Scoring identifies highest-risk applications

• Apache Cordova App Harness Targeted in Dependency Confusion Attack

• End-to-End Encryption Sparks Concerns Among EU Law Enforcement

• $493 Bounty Awarded for Arbitrary Options Update Vulnerability Patched in WP Datepicker WordPress Plugin

• Over A Million Neighbourhood Watch Members Exposed

• Microsoft DRM Hack Could Allow Movie Downloads From Streaming

• UnitedHealth Admits Breach Could Cover Substantial Proportion Of People In America

• Windows Vulnerability Reported By The NSA Exploited To Install Russian Malware

• Authorities Investigate LabHost Users After Phishing Service Shutdown

• AI is Revolutionizing Phishing for Both Sides. What will make the Difference?

• “Substantial proportion” of Americans may have had health and personal data stolen in Change Healthcare breach

• UnitedHealth Says Patient Data Exposed in Change Healthcare Cyberattack

• Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations

• The Battle Continues: Mandiant Report Shows Improved Detection But Persistent Adversarial Success

• Survey Finds Two-Thirds of Leading Pharmas Restrict ChatGPT Usage, While Many in Life Sciences Industry Deem AI ‘Overrated’

• Entrust protects users against fraud, phishing and other account takeover attacks

• Forcepoint DSPM safeguards sensitive information by examining data context and content

• Millions of Americans’ Data Potentially Exposed in Change Healthcare Hack

• Passwords, passkeys and familiarity bias

• Netwrix 1Secure enhancements accelerate threat detection

• Mandiant’s M-Trends Report Reveals New Insights from Frontline Cyber Investigations

• Resilient Together with Priority Telecommunications Services (PTS)

• Russian hackers’ custom tool exploits old Windows Print Spooler flaw (CVE-2022-38028)

• Vulnerability Exploitation on the Rise as Attackers Ditch Phishing

• WordPress PWA – how to protect your Progressive Web Apps

• GitHub Comments Abused to Spread Malware in Fake Microsoft Repositories

• Tracing the Steps of Cyber Intruders: The Path of Lateral Movement

• PoC Exploit Released For Critical Oracle VirtualBox Vulnerability

• Protecting Against DDoS Tsunami Attacks

• Key Findings from the 2024 Cloud Security Report

• Fraudsters Exploit Telegram’s Popularity for Toncoin Scam

• Mandiant: Orgs are detecting cybercriminals faster than ever

• DTEX i3 Threat Advisory Provides Detections for LOTL, C2 Abuse

• The Boosters: Don’t Get Used to the Boost

• The Only API Penetration Testing Checklist You Need

• Women in Cybersecurity Face Continued Pay Disparities

• Veritas enhances cyber resilience with AI-powered solutions

• Struts “devmode”: Still a problem ten years later?, (Tue, Apr 23rd)

• UnitedHealth admits breach could ‘cover substantial proportion of people in America’

• Suspected CoralRaider continues to expand victimology using three information stealers

• U.S. to Impose Visa Restrictions on 13 Individuals Involved in Commercial Spyware Operations

• Can a VPN Be Hacked?

• Grab 9 Ethical Hacking Courses for $30 and Improve Your Business Security

• Mandiant: Attacker dwell time down, ransomware up in 2023

• Microsoft Warns of North Korean Hackers Turning to AI-Fueled Cyber Espionage

• Nespresso Domain Serves Up Steamy Cup of Phish, No Cream or Sugar

• Data Breach at Real America’s Voice: User Information Compromised

• Veeam acquires Coveware to boost its ransomware protection capabilities

• Drop in ransomware payment, 2024 Q1 sees a record low of 28%

• Stellar Cyber launches MITRE ATT&CK Coverage Analyzer

• Webinar: Learn Proactive Supply Chain Threat Hunting Techniques

• Vulnerability Exploitation on the Rise as Attacker Ditch Phishing

• How a new law protects your thoughts from tech companies – and why it matters

• Microsoft and Security Incentives

• HHS Beefs Up Privacy Protection for Reproductive Health Info

• Russian Sandworm Hackers Targeted 20 Critical Organizations in Ukraine

• Behavioral Patterns of Ransomware Groups are Changing

• Leicester streetlights take ransomware attack personally, shine on 24/7

• Microsoft DRM Hack Could Allow Movie Downloads From Popular Streaming Services

• Ransomware Gang Leaks Data Allegedly Stolen From Government Contractor

• Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability

• This Website is Selling Billions of Private Messages of Discord Users

• Volkswagen Group’s Systems Hacked: 19,000+ Documents Stolen

• Server Inventory Checklist (Free Download)

• German Authorities Issue Arrest Warrants for Three Suspected Chinese Spies

• Police Chiefs Call for Solutions to Access Encrypted Data in Serious Crime Cases

• Unmasking the True Cost of Cyberattacks: Beyond Ransom and Recovery

• GitLab Affected by GitHub-Style CDN Flaw Allowing Malware Hosting

• Feds Issue Guide for Change Health Breach Reporting Duties

• CrushFTP zero-day exploited by attackers, upgrade immediately! (CVE-2024-4040)

• Cloud Companies Reject Broadcom VMware Pricing Changes

• Raimondo Downplays Huawei Smartphone Chip

• Free and Downloadable Account Management Policy Template

• Cloud Console Cartographer: Open-Source Tool Helps Security Teams Transcribe Log Activity

• Trellix Email Security for Microsoft Office 365 improves email defense

• Russian Sandworm Group Hit 20 Ukrainian Energy and Water Sites

• Leading the charge against GuptiMiner

• University Cybersecurity Clinics Can Now Use the New CISA Resource Guide

• Enhancing Endpoint Security with Advanced Host-Based Intrusion Detection Capabilities

• Majority of Businesses Worldwide are Implementing Zero Trust, Gartner Finds

• GitHub Comments Abused to Push Malware via Microsoft Repository URLs

• Over a million Neighbourhood Watch members exposed through web app bug

• Russian APT28 Group in New “GooseEgg” Hacking Campaign

• Meta Opens Quest VR OS To Third Party Gadget Makers

• UK Lawsuit Claims Grindr Shared HIV Status

• Hacker Offers Upto $300 To Mobile Networks Staff For Illegal SIM Swaps

• Critical Apache HugeGraph Flaw Let Attackers Execute Remote Code

• U.S. Gov imposed Visa restrictions on 13 individuals linked to commercial spyware activity

• Uncertainty is the Most Common Driver of Noncompliance

• Critical Flaw with Popular API Portal Let Attackers Launch SSRF Attacks

• Atera vs. ConnectWise: Head-to-Head Comparison (And Alternative)

• Cyber Insurance Gaps Stick Firms With Millions in Uncovered Losses

• Researchers Warn Windows Defender Attack can Delete Databases

• Align introduces ransomware prevention feature, powered by Adlumin

• U.S. Imposes Visa Restrictions on 13 Linked to Commercial Spyware Misuse

• EU Prepares Action Against ‘Addictive’ TikTok Lite Features

• Europol calls for Tech Giants to Get Lawful Access To end-to-end Encryption

• A cyber attack paralyzed operations at Synlab Italia

• Sharp Stealer: New Info-stealer Malware Targets Gamers, Crypto Enthusiasts

• Podcast Episode: Right to Repair Catches the Car

• Executive summary: NIS2 Directive for the EU members (updated)

• Response to CISA Advisory (AA24-109A): #StopRansomware: Akira Ransomware

• Russian cyber forces cyber attack water tower just to make it overflow

• Is Your Password Strong Enough? Brute Force Attack on the Rise!

• Misconfigured cloud server leaked clues of North Korean animation scam

• Russia’s APT28 Exploited Windows Print Spooler Flaw to Deploy ‘GooseEgg’ Malware

• The rising influence of AI on the 2024 US election

• People doubt their own ability to spot AI-generated deepfakes

• 10 colleges and universities shaping the future of cybersecurity education

• Change Healthcare Finally Admits It Paid Ransomware Hackers—and Still Faces a Patient Data Leak

• Behavioral patterns of ransomware groups are changing

• What is multi-factor authentication (MFA), and why is it important?

• ToddyCat Hacker Group Uses Advanced Tools for Industrial-Scale Data Theft

• ISC Stormcast For Tuesday, April 23rd, 2024 https://isc.sans.edu/podcastdetail/8950, (Tue, Apr 23rd)

• Old Windows print spooler bug is latest target of Russia’s Fancy Bear gang

• USENIX Security ’23 – The Case for Learned Provenance Graph Storage Systems

• UnitedHealth says Change hackers stole health data on ‘substantial proportion of people in America’

• IT Security News Daily Summary 2024-04-22

• Facebook AI Makes Creepy Comment That It Has A Gifted, Disabled Child

• Russia-linked APT28 used post-compromise tool GooseEgg to exploit CVE-2022-38028 Windows flaw

• U.S. Senate and Biden Administration Shamefully Renew and Expand FISA Section 702, Ushering in a Two Year Expansion of Unconstitutional Mass Surveillance

• FBI and friends get two more years of warrantless FISA Section 702 snooping

• Russian FSB Counterintelligence Chief Gets 9 Years in Cybercrime Bribery Scheme

• Vulnerability Recap 4/22/24 – Cisco, Ivanti, Oracle & More

• Vulnerability Summary for the Week of April 15, 2024

• 5 Best Practices to Secure AWS Resources

• US government says security flaw in Chirp Systems’ app lets anyone remotely control smart home locks

• Europol now latest cops to beg Big Tech to ditch E2EE

• BreachRx Gets $6.5 Million to Automate Security Incident Response

• Mitre breached by nation-state threat actor via Ivanti flaws

• Biometrics: A Flash Point in AI Regulation

• Three Ways Organizations Can Overcome the Cybersecurity Skills Gap

• Rise In Cybercrime: Dark Web Fueling Credential Attacks

• CISA Releases Physical Security Checklist to Help Election Officials Secure Polling Locations

• TikTok Says New US Ban Effort Would ‘Trample Free Speech’

• AI, toll fraud and messaging top the list of UC security concerns

• The Next US President Will Have Troubling New Surveillance Powers

• From Water to Wine: An Analysis of WINELOADER

• Malicious PyPI Package Attacking Discord Users to Steal Credentials

• Tesla Cuts Prices Across Major Markets

• Europol becomes latest law enforcement group to plead with big tech to ditch E2EE

• Dependency Confusion Vulnerability Found in an Archived Apache Project

• More companies refuse to pay ransom in 2024

• Tinder’s ‘Share My Date’ feature will let you share date plans with friends and family

• The 7 Best iPhone VPNs (Recommended for 2024)

• It’s Earth Day! Let’s talk Circularity, Growth and Profitability!

• Find Your Path to Unmatched Security and Unified Experiences

• Customers Praise the Surprising Longevity and Adaptability of Cisco UCS

• Using Legitimate GitHub URLs for Malware

• #MIWIC2024: Melissa Chambers, CEO and Co-Founder of Sitehop

• Picking fights and gaining rights, with Justin Brookman: Lock and Code S05E09

• Germany arrests trio accused of trying to smuggle naval military tech to China

• UN Agency Faces Data Crisis: Ransomware Hack Exposes Extensive Data Theft

• Numerous LastPass Users Fall Victim to Highly Convincing Scam, Losing Master Passwords

• Anonymous Hackers Threaten To Publish IDF’s ‘Top Secret Projects’

• Russian Hacker Group ToddyCat Uses Advanced Tools for Industrial-Scale Data Theft

• Fraudsters Exploit Telegram’s Popularity For Toncoin Scam

• chief privacy officer (CPO)

• Research Shows How Attackers Can Abuse EDR Security Products

• Crafting AI’s Future: Decoding the AI Executive Order

• Citrix UberAgent Flaw Let Attackers Elevate Privileges

• Beware Of Weaponized Zip Files That Deliver WINELOADER Malware

• Malicious PyPI Package Attacking Discord Users To Steal Credentials

• The Role of Cybersecurity Training in Compliance

• Hackers Group Claims To Have Broke Into IDF & Stolen Documents

• Watchdog tells Dutch govt: ‘Do not use Facebook if there is uncertainty about privacy’

• CVEs Targeting Remote Access Technologies

• CrushFTP Patches Exploited Zero-Day Vulnerability

• Rural Texas Towns Report Cyberattacks That Caused One Water System to Overflow

• The Future of Automated Testing with DAQ

• Taking Steps Toward Achieving FedRAMP

• Getting to Know Netzer Shohet

• Hackers threaten to leak a copy of the World-Check database used to assess potential risks associated with entities

• Malware Developer Lures Child Exploiters Into Honeytrap to Extort Them

• Story 1: Removing super-admin tokens across 33 GitHub tenants in 2 hours

• Cloud Security Stories: From Risky Permissions to Ransomware Execution

• The 10 Women in Cybersecurity You Need to Follow

• Tech Outages: Exposing the Web’s Fragile Threads

• Binary Defense enhances BDVision to improve security for SMBs

• apexanalytix Passkeys protects data with biometric authentication

• Dependency Confusion Vulnerability Found in Apache Project

• US House of Representatives passes new TikTok ban bill to Senate

• Transforming Operations to Eliminate Technical Debt

• TA547 Phishing Attack: German Companies Hit With Infostealer

• GUEST ESSAY: Here’s why securing smart cities’ critical infrastructure has become a top priority

• The Essential KVM Cheat Sheet for System Administrators

• Understanding Spectre V2: A New Threat to Linux Systems

• Thousands of Palo Alto Firewalls Potentially Impacted by Exploited Vulnerability

• Cybercriminals Threaten Release of Stolen World-Check Database, Exposing Millions to Financial Risk

• MITRE breached by nation-state threat actor via Ivanti zero-days

• Trend Micro launches AI-driven cyber risk management capabilities

• Malvertising: Fake Popular Software Ads Deliver New MadMxShell Backdoor

• Windows MagicDot Path Flaw Lets Attackers Gain Rootkit-Like Abilities

• VMware ESXi Shell Service Exploit on Hacking Forums: Patch Now

• UK Cyber Agency NCSC Announces Richard Horne as its Next Chief Executive

• Ukrainian Soldiers’ Apps Increasingly Targeted for Spying, Cyber Agency Warns

• Billions of scraped Discord messages up for sale

• UK data watchdog questions how private Google’s Privacy Sandbox is

• MITRE Corporation Breached by Nation-State Hackers Exploiting Ivanti Flaws

• Pentera’s 2024 Report Reveals Hundreds of Security Events per Week, Highlighting the Criticality of Continuous Validation

• IT Security News Weekly Summary – Week 17

• Alert! Zero-day Exploit For WhatsApp Advertised On Hacker Forums

• Has the ever-present cyber danger just got worse?

• Sharp-Project: New Stealer Family on the Market

• Researchers Find Dozens of Fake E-Zpass Toll Websites After FBI Warning

• Ransomware Double-Dip: Re-Victimization in Cyber Extortion

• CrushFTP File Transfer Vulnerability Lets Attackers Download System Files

• It appears that the number of industrial devices accessible from the internet has risen by 30 thousand over the past three years, (Mon, Apr 22nd)

• EU Set To Approve Apple Plan For Opening NFC Access

• Trump Media Warns Of ‘Potential Market Manipulation’

• Deciphering the Economics of Software Development: An In-Depth Exploration

• Windows DOS-to-NT flaws exploited to achieve unprivileged rootkit-like capabilities

• ACDS Launches Revolutionary OBSERVATORY Solution: Redefining Attack Surface Management

• Report: 51% of Enterprises Experienced a Breach Despite Large Security Stacks

• MITRE Hacked by State-Sponsored Group via Ivanti Zero-Days

• NSA Launches Guidance for Secure AI Deployment

• Concerned About Your Online Privacy in 2024? You Are Not the Only One.

• Apple Removed Numerous Apps From China App Store

• Palo Alto Networks Patched A Pan-OS Vulnerability Under Attack

• CrushFTP Servers Zero-day Under Active Attack: Update Now

• ToddyCat is making holes in your infrastructure

• Critical Flaw in the Forminator Plugin Impacts Hundreds of Thousands of WordPress Sites

• Researchers Uncover Windows Flaws Granting Hackers Rootkit-Like Powers

• NCSC Announces PwC’s Richard Horne as New CEO

• Netflix Reports Profits Surge, But Forecast Disappoints

• Group Supporting Women In Tech Abruptly Closes

• Google Shifts Rules For Contract Firms Amidst Labour Battle

• TSMC Shocks Investors With Lower Chip Growth Forecast

• Victorian Councils Data Exposed in OracleCMS Breach

• Rising Ransomware Issue: English-Speaking Western Affiliates

• Researchers Claim that Windows Defender Can Be Bypassed

• JavaScript Malware Switches to Server-Side Redirects and Uses DNS TXT Records as TDS

• A week in security (April 15 – April 21)

• Google all at sea over rising tide of robo-spam

• Apple Removes WhatsApp & Threads from its App Store for China

• NATO to Launch New Cyber Center to Contest Cyberspace ‘At All Times’

• MITRE Reveals Ivanti Breach By Nation State Actor

• Securing cloud perimeters

• NSA Debuts Top 10 Cloud Security Mitigation Strategies

• Exploring Cybersecurity Risks in Telemedicine: A New Healthcare Paradigm

• HelloKitty Ransomware Rebrands, Releases CD Projekt and Cisco Data

• Rarest, strangest, form of Windows saved techie from moment of security madness

• 10 Essentials Every Anti-Phishing Course Must Have

• Tesla Recalls Thousands Of Cybertrucks Over Accelerator Fault

• North Koreans Secretly Animated Amazon and Max Shows, Researchers Say

• Implementing ISO 27001:2022 Annex A.16 – Information Security Incident Management

• A flaw in the Forminator plugin impacts hundreds of thousands of WordPress sites

• Jury Dishes Out Guilty Verdict in Mango Markets Fraud Case

• The first steps of establishing your cloud security strategy

• Microsoft Warns: North Korean Hackers Turn to AI-Fueled Cyber Espionage

• T2 – 85,894 breached accounts

• Safeguarding Your Gmail Account: Strategies to Defend Against Fraud

• Hellokity Ransomware Actors Returns Under New Name

• What is HSM Integration?

• EASA Alerts Airlines Amid Suspected Cyber-Attacks on UK-Bound Flights

• Cannes Hospital Cancels Medical Procedures Following Cyberattack

• Researchers claim Windows Defender can be fooled into deleting databases

• How to optimize your bug bounty programs

• Fuxnet malware: Growing threat to industrial sensors

• Cloud Console Cartographer: Open-source tool helps security teams transcribe log activity

• Uncertainty is the most common driver of noncompliance

• China creates ‘Information Support Force’ to improve networked defence capabilities

• How to improve response to emerging cybersecurity threats

• ISC Stormcast For Monday, April 22nd, 2024 https://isc.sans.edu/podcastdetail/8948, (Mon, Apr 22nd)

• MITRE admits ‘nation state’ attackers touched its NERVE R&D operation

• USENIX Security ’23 – On the Security Risks of Knowledge Graph Reasoning

• Akira Ransomware Group Takes In $42 million from 250 Attacks in a Year

Generated on 2024-04-23 23:55:12.764075