IT Security News Daily Summary 2024-04-24

• IBM Cyber Security Report 2024 – New

• Nation-state actors exploited two zero-days in ASA and FTD firewalls to breach government networks

• IBM Cyber Security Report: Unveiling the Evolving Threat Landscape

• Driving fast or braking hard? Your connected car may be telling your insurance company

• Retail Tech Deep-Dive: Meraki Switching

• Shouldn’t Teams, Zoom, Slack all interoperate securely for the Feds? Wyden is asking

• USENIX Security ’23 – Token Spammers, Rug Pulls, and Sniper Bots: An Analysis of the Ecosystem of Tokens in Ethereum and in the Binance Smart Chain (BNB)

• 7 Top Threat Intelligence Platforms & Software in 2024

• CoralRaider Group Delivers Three Infostealers via CDN Cache

• Security bugs in popular phone-tracking app iSharing exposed users’ precise locations

• Helping the health of our planet, one bottle at a time

• Cisco Raises Alarm for ‘ArcaneDoor’ Zero-Days Hitting ASA Firewall Platforms

• HelloKitty Ransomware Renames to ‘HelloGookie,’ Unveils CD Projekt and Cisco Data

• Hackers backdoored Cisco ASA devices via two zero-days (CVE-2024-20353, CVE-2024-20359)

• UnitedHealth Group Pays Ransom After Cyberattack: What You Need to Know

• CISA Adds Three Known Exploited Vulnerabilities to Catalog

• Cisco Releases Security Updates Addressing ArcaneDoor, Vulnerabilities in Cisco Firewall Platforms

• UK CMA Seeks Feedback On Microsoft, Amazon AI Partnerships

• Coalition: Insurance claims for Cisco ASA users spiked in 2023

• Security Bugs in a Popular Phone-Tracking App Exposed Users’ Precise Locations

• Microsoft cannot keep its own security in order, so what hope for its add-ons customers?

• Google Fires More Staff Over Israel Protest

• Prompt Hacking, Private GPTs, Zero-Day Exploits and Deepfakes: Report Reveals the Impact of AI on Cyber Security Landscape

• ‘ArcaneDoor’ Cyberspies Hacked Cisco Firewalls to Access Government Networks

• Google Ad for Facebook Redirects to Scam

• KnowBe4 Plans to Acquire Egress for Email Security Tech

• USENIX Security ’23 – Snapping Snap Sync: Practical Attacks on Go Ethereum Synchronising Nodes

• DirectDefense Report Sees Shifts in Cyberattack Patterns

• Here’s How to Remove Unnecessary Files from Your Android Phone’s Web Browser

• Where Hackers Find Your Weak Spots: A Closer Look

• ArcaneDoor – New espionage-focused campaign found targeting perimeter network devices

• Ransomware testing being done on developing countries

• Google yet again delays killing third-party cookies in Chrome. Here’s what you need to know

• GitHub vulnerability leaks sensitive security reports

• Iran Dupes US Military Contractors, Gov’t Agencies in Cyber Campaign

• Australian PM Hits Out At Elon Musk Over Knife Attack Video

• Celebrating a New Era in Partnering: NTT DATA and Cisco

• Expert Insight: ‘Minding the Gap’: How can we work to make cyber accessible for women?

• North Korean Hackers Hijack Antivirus Updates for Malware Delivery

• Navigating Vendor Speak: A Security Practitioner’s Guide to Seeing Through the Jargon

• Malware Author Lures Child Abusers Into Honeytrap to Extort Them

• Stock Market Scam in Bengaluru: Businessman Loses Rs 5.2 Crore

• Dark Web Nightmare: Scots NHS Patient Data Breach Exposes Medical Files

• US SEC Seeks $5.3 Billion Fine From Terra’s Do Kwon

• Phishing Attacks Rise By 58% As The Attackers Leverage AI Tools

• Management company settles for $18.4M after nuclear weapons plant staff fudged their timesheets

• Traditional MFA isn’t enough, phishing-resistant MFA is key

• Google cools on cookie phase-out while regulators chew on plans

• The Next Chapter of Behavioral Threat Assessment for Ontic and SIGMA

• 1Kosmos CSP enables government agencies to digitally verify resident identity

• CoralRaider Hacker Evade Antivirus Detections Using Malicious LNK File

• Multiple MySQL2 Flaw Let Attackers Arbitrary Code Remotely

• Hackers hijacked the eScan Antivirus update mechanism in malware campaign

• Tines Bags $50 Million Funding for Security Workflow Automation

• Cyberint platform enhancements boost protection against external threats

• US Congress Passes Bill to Ban TikTok

• Researchers develop malicious AI ‘worm’ targeting generative AI systems

• US charges Iranians with cyber snooping on government, companies

• 5 Best VPN Services (2024): For Routers, PC, iPhone, Android, and More

• Security bugs in a popular phone-tracking app exposed users’ precise locations

• Report: Attacker Dwell Time Down, Ransomware up in 2023

• Major Security Flaws Expose Keystrokes of Over One Billion Chinese Keyboard App Users

• Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt Strike

• U.S. Treasury Sanctions Iranian Firms and Individuals Tied to Cyber Attacks

• US Sanctions Iranian “Fronts” for Cyber-Attacks on American Entities

• Multiple Vulnerabilities Found In Forminator WordPress Plugin

• Spyroid RAT Attacking Android Users to Steal Confidential Data

• Check Point Named Strategic Leader in AV-Comparatives EPR Report

• Hackers Publish Fake Story About Ukrainians Attempting To Assassinate Slovak President

• Threat Actor Uses Multiple Infostealers in Global Campaign

• CISA Warns of Windows Print Spooler Flaw After Microsoft Sees Russian Exploitation

• Nagomi Security Emerges From Stealth With $30 Million in Funding

• Amplifier Security Emerges From Stealth With AI Copilot, Human-in-the-Loop Automation

• Google Patches Critical Chrome Vulnerability

• Nigeria, Romania, Russia, U.S. Among Top Cybercrime Nations

• Zero Networks unveils identity segmentation solution to prevent credential theft

• Capture the CISO S2E2: HYAS, Nudge Security, and SlashNext

• Dexalot Announces Launch of Its Central Limit Order Book DEX on Arbitrum

• KnowBe4 acquires UK’s Egress to create advanced AI-driven platform to manage human risk

• Report: Fifth of UK Companies Admit Staff Leaked Data via GenAI

• Cybersecurity Trends and Predictions for 2024

• Tines taps $50M to expand its workflow automation beyond security teams

• US Gov Slaps Visa Restrictions on Spyware Honchos

• TikTok comes one step closer to a US ban

• Russian APT28 Exploiting Windows Vulnerability with GooseEgg Tool

• Cyber Security Today, April 24, 2024 – Good news/bad news in Mandiant report, UnitedHealth admits paying a ransomware gang, and more

• PoC for critical Progress Flowmon vulnerability released (CVE-2024-2389)

• Leeds Talent Pool Attracts BlueVoyant’s First UK Security Operations Center

• Researchers Uncover that UK.GOV Websites Sending Data to Chinese Ad Vendor Analysts

• Dan Solove on Privacy Regulation

• Veeam Acquires Coveware to Boost its Ransomware Protection Capabilities

• Prophet Security Emerges From Stealth Mode With $11 Million in Funding

• New Password Cracking Analysis Targets Bcrypt

• SD-WAN: Don’t Build a Dead End, Prepare for Future-Proof Secure Networking

• Comcast Business MDR limits the impact of cyber threats

• Global attacker median dwell time continues to fall

• Microsoft Launches Smallest AI Model, Phi-3-mini

• Popular Keyboard Apps Leak User Data: Billion Potentially Exposed

• FTC Commercial Surveillance Rules Could Arrive Within Months, Sources Say

• North Korean Hackers Targeted Dozens of South Korean Defense Companies

• New Relic AI monitoring helps enterprises use AI with confidence

• Security Leaders Braced for Daily AI-Driven Attacks by Year-End

• ShotSpotter Keeps Listening for Gunfire After Contracts Expire

• US Treasury Sanctions Iranians Linked to Government Cyberattacks

• GISEC Global 2024 video walkthrough

• Secureworks enables users to view known vulnerabilities in the context of threat data

• Cyber Security Headlines: Iranian hackers charged, Siemens fixing Palo bug, Russia hacks water plant

• US Senate Passes TikTok Ban Or Divestment Bill

• Autodesk hosting PDF files used in Microsoft phishing attacks

• Assessing the Y, and How, of the XZ Utils incident

• Siemens Working on Fix for Device Affected by Palo Alto Firewall Bug

• The 5 Best Practices for PCI DSS Compliance

• Binarly releases Transparency Platform v2.0 to improve software supply chain security

• CISO Perspectives on Complying with Cybersecurity Regulations

• Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App Users

• Cyber Security Headlines: RedLine GitHub connection, MITRE Ivanti breach, E-ZPass spoof sites

• Cyber Security Headlines: TikTok ban update, Sandworm hits Ukraine, North Korean streaming animators

• We’ll Invest in Resilience as Soon as the Ransom Payment Clears

• Cyber Security Today, April 22, 2024 – Vulnerability found in CrushFTP file transfer software, security updates for Cisco’s controller management application, and more

• Cyber Security Today, April 24, 2024 – Good news/bad news in Mandiant report, UnitedHealth admits paying a ransomware gang, and more

• Google’s Core Update is ‘Biggest’ Algorithm Update in History

• Swedish Signals Intelligence Agency to Take Over National Cybersecurity Center

• People Doubt Their Own Ability to Spot AI-Generated Deepfakes

• 5 Ways to Step Up Your AD Hygiene with Silverfort

• Prophet Security emerges from stealth and raises $11 million

• Photos: GISEC Global 2024

• Fifth of CISOs Admit Staff Leaked Data Via GenAI

• Ransomware Victims Who Opt To Pay Ransom Hits Record Low

• January 2024 Cyber Attacks Statistics

• Pentagon Launches DIB Vulnerability Disclosure Program

• Understanding and Responding to Distributed Denial-of-Service Attacks

• IBM Nearing Talks to Acquire Cloud-software Provider HashiCorp

• Back to Security Basics

• North Korean Hackers Target Dozens of Defense Companies

• Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan

• “All for One and One for All”: The EU Cyber Solidarity Act Strengthens Digital Defenses

• UK IT Leaders Are Prioritizing Cybersecurity: But Is This a Good Thing?

• Implementing ISO 27001:2022 Annex A.17 – Information Security Aspects of Business Continuity Management

• eScan Antivirus Update Mechanism Exploited to Spread Backdoors and Miners

• Overcoming security alert fatigue

• Rewards Up to $10 Million for Information on Iranian Hackers

• If Britain is so bothered by China, why do these .gov.uk sites use Chinese ad brokers?

• The street lights in Leicester City cannot be turned off due to a cyber attack

• US offers a $10 million reward for information on four Iranian nationals

• Study: GPT-4 Agent can Exploit Unpatched Vulnerabilities

• T2 – 94,584 breached accounts

• Change healthcare faces data leak threat despite paying $22 million as ransom

• Strategies for Building Resilient Cloud Security in Small and Medium Enterprises (SMEs)

• CoralRaider Malware Campaign Exploits CDN Cache to Spread Info-Stealers

• $10 Million Bounty on Iranian Hackers for Cyberattacks on US Gov, Defense Contractors

• GenAI can enhance security awareness training

• Four ways to make yourself a harder target for cybercriminals

• Cybersecurity jobs available right now: April 24, 2024

• AI set to play key role in future phishing attacks

• The relationship between cybersecurity and work tech innovation

• eBook: Cloud security skills

• ISC Stormcast For Wednesday, April 24th, 2024 https://isc.sans.edu/podcastdetail/8952, (Wed, Apr 24th)

• API Rug Pull – The NIST NVD Database and API (Part 4 of 3), (Wed, Apr 24th)

• This tiny chip can safeguard user data while enabling efficient computing on a smartphone

• Miggo Unfurls Real-Time Application Detection and Response Platform

• IT Security News Daily Summary 2024-04-23

• Google ad for Facebook redirects to scam

• HHS Strengthens Privacy of Reproductive Health Care Data

• Dutch Government Might Leave Facebook Over Privacy Concerns

• $10 Million Bounty on Iranian Hackers for Cyber Attacks on US Gov, Defense Contractors

• North Korea-linked APT groups target South Korean defense contractors

• Screen Printing 101: EFF’s Spring Speakeasy at Babylon Burning

• Speaking Freely: Obioma Okonkwo

• Analyzing Forest Blizzard’s custom post-compromise tool for exploiting CVE-2022-38028 to obtain credentials

• UnitedHealth: Ransomware Attackers Stole Huge Amount of Data

• Cyber Attack Hits UK’s Carpetright, Affecting Customer Orders

• Wells Fargo Data Breach: Safeguarding Customer Information in a Digital Age

• CCNA in the Age of AI

• GuptiMiner: Hijacking Antivirus Updates for Distributing Backdoors and Casual Mining

• CISA to Issue List of Software Products Critical to Agency Security by End of September

• Spain Reopens a Probe Into a Pegasus Spyware Case After a French Request to Work Together

• U.S. cracks down on commercial spyware with visa restrictions

• Oak Ridge, McCrary Institute Establish Cybersecurity Center Focused on Electrical Grid

• MITRE Breach: State Hackers Exploit Ivanti Zero-Days

• The best free VPNs of 2024: Expert tested

• Nespresso Domain Hijacked in Phishing Attack Targeting Microsoft Logins

• US Imposes Visa Restrictions on Alleged Spyware Figures

• Veeam acquires Coveware to boost its ransomware protection

• 0G and OnePiece Labs Collaborate to Create Crypto x AI Incubator

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• The best VPN for streaming in 2024: Expert tested and reviewed

• The best free VPNs

• TuxCare Names Glen Kuhne as Vice President of Enterprise Sales

• CISA Releases Two Industrial Control Systems Advisories

• CISA Adds One Known Exploited Vulnerability to Catalog

• New Cisco Defense Orchestrator (CDO) API

• How Cisco is Redefining Security and Our Partner Experience

• Full Stack Observability: Everything, everywhere, all at once

• Infrastructure Automation and Defense: Introducing DevSecOps Essentials

• Expert Insight: Outdated Recruitment Methods Are Impeding The Global Cyber Army

• Indian Banks Mull New Move for Faster Freezing of Scammers’ Accounts

• Invicti Predictive Risk Scoring identifies highest-risk applications

• Apache Cordova App Harness Targeted in Dependency Confusion Attack

• End-to-End Encryption Sparks Concerns Among EU Law Enforcement

• $493 Bounty Awarded for Arbitrary Options Update Vulnerability Patched in WP Datepicker WordPress Plugin

• Over A Million Neighbourhood Watch Members Exposed

• Microsoft DRM Hack Could Allow Movie Downloads From Streaming

• UnitedHealth Admits Breach Could Cover Substantial Proportion Of People In America

• Windows Vulnerability Reported By The NSA Exploited To Install Russian Malware

• Authorities Investigate LabHost Users After Phishing Service Shutdown

• AI is Revolutionizing Phishing for Both Sides. What will make the Difference?

• “Substantial proportion” of Americans may have had health and personal data stolen in Change Healthcare breach

• UnitedHealth Says Patient Data Exposed in Change Healthcare Cyberattack

• Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations

• The Battle Continues: Mandiant Report Shows Improved Detection But Persistent Adversarial Success

• Survey Finds Two-Thirds of Leading Pharmas Restrict ChatGPT Usage, While Many in Life Sciences Industry Deem AI ‘Overrated’

• Entrust protects users against fraud, phishing and other account takeover attacks

• Forcepoint DSPM safeguards sensitive information by examining data context and content

• Millions of Americans’ Data Potentially Exposed in Change Healthcare Hack

• Passwords, passkeys and familiarity bias

• Netwrix 1Secure enhancements accelerate threat detection

• Mandiant’s M-Trends Report Reveals New Insights from Frontline Cyber Investigations

• Resilient Together with Priority Telecommunications Services (PTS)

• Russian hackers’ custom tool exploits old Windows Print Spooler flaw (CVE-2022-38028)

• Vulnerability Exploitation on the Rise as Attackers Ditch Phishing

• WordPress PWA – how to protect your Progressive Web Apps

• GitHub Comments Abused to Spread Malware in Fake Microsoft Repositories

• Tracing the Steps of Cyber Intruders: The Path of Lateral Movement

• PoC Exploit Released For Critical Oracle VirtualBox Vulnerability

• Protecting Against DDoS Tsunami Attacks

• Key Findings from the 2024 Cloud Security Report

• Fraudsters Exploit Telegram’s Popularity for Toncoin Scam

• Mandiant: Orgs are detecting cybercriminals faster than ever

• DTEX i3 Threat Advisory Provides Detections for LOTL, C2 Abuse

• The Boosters: Don’t Get Used to the Boost

• The Only API Penetration Testing Checklist You Need

• Women in Cybersecurity Face Continued Pay Disparities

• Veritas enhances cyber resilience with AI-powered solutions

• Struts “devmode”: Still a problem ten years later?, (Tue, Apr 23rd)

• UnitedHealth admits breach could ‘cover substantial proportion of people in America’

• Suspected CoralRaider continues to expand victimology using three information stealers

• U.S. to Impose Visa Restrictions on 13 Individuals Involved in Commercial Spyware Operations

• Can a VPN Be Hacked?

• Grab 9 Ethical Hacking Courses for $30 and Improve Your Business Security

• Mandiant: Attacker dwell time down, ransomware up in 2023

• Microsoft Warns of North Korean Hackers Turning to AI-Fueled Cyber Espionage

• Nespresso Domain Serves Up Steamy Cup of Phish, No Cream or Sugar

• Data Breach at Real America’s Voice: User Information Compromised

• Veeam acquires Coveware to boost its ransomware protection capabilities

• Drop in ransomware payment, 2024 Q1 sees a record low of 28%

• Stellar Cyber launches MITRE ATT&CK Coverage Analyzer

• Webinar: Learn Proactive Supply Chain Threat Hunting Techniques

• Vulnerability Exploitation on the Rise as Attacker Ditch Phishing

• How a new law protects your thoughts from tech companies – and why it matters

• Microsoft and Security Incentives

• HHS Beefs Up Privacy Protection for Reproductive Health Info

• Russian Sandworm Hackers Targeted 20 Critical Organizations in Ukraine

• Behavioral Patterns of Ransomware Groups are Changing

• Leicester streetlights take ransomware attack personally, shine on 24/7

• Microsoft DRM Hack Could Allow Movie Downloads From Popular Streaming Services

• Ransomware Gang Leaks Data Allegedly Stolen From Government Contractor

• Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability

• This Website is Selling Billions of Private Messages of Discord Users

• Volkswagen Group’s Systems Hacked: 19,000+ Documents Stolen

• Server Inventory Checklist (Free Download)

• German Authorities Issue Arrest Warrants for Three Suspected Chinese Spies

• Police Chiefs Call for Solutions to Access Encrypted Data in Serious Crime Cases

• Unmasking the True Cost of Cyberattacks: Beyond Ransom and Recovery

• GitLab Affected by GitHub-Style CDN Flaw Allowing Malware Hosting

• Feds Issue Guide for Change Health Breach Reporting Duties

• CrushFTP zero-day exploited by attackers, upgrade immediately! (CVE-2024-4040)

• Cloud Companies Reject Broadcom VMware Pricing Changes

• Raimondo Downplays Huawei Smartphone Chip

• Free and Downloadable Account Management Policy Template

• Cloud Console Cartographer: Open-Source Tool Helps Security Teams Transcribe Log Activity

• Trellix Email Security for Microsoft Office 365 improves email defense

• Russian Sandworm Group Hit 20 Ukrainian Energy and Water Sites

• Leading the charge against GuptiMiner

• University Cybersecurity Clinics Can Now Use the New CISA Resource Guide

• Enhancing Endpoint Security with Advanced Host-Based Intrusion Detection Capabilities

• Majority of Businesses Worldwide are Implementing Zero Trust, Gartner Finds

• GitHub Comments Abused to Push Malware via Microsoft Repository URLs

• Over a million Neighbourhood Watch members exposed through web app bug

• Russian APT28 Group in New “GooseEgg” Hacking Campaign

• Meta Opens Quest VR OS To Third Party Gadget Makers

• UK Lawsuit Claims Grindr Shared HIV Status

• Hacker Offers Upto $300 To Mobile Networks Staff For Illegal SIM Swaps

• Critical Apache HugeGraph Flaw Let Attackers Execute Remote Code

• U.S. Gov imposed Visa restrictions on 13 individuals linked to commercial spyware activity

• Uncertainty is the Most Common Driver of Noncompliance

• Critical Flaw with Popular API Portal Let Attackers Launch SSRF Attacks

• Atera vs. ConnectWise: Head-to-Head Comparison (And Alternative)

• Cyber Insurance Gaps Stick Firms With Millions in Uncovered Losses

• Researchers Warn Windows Defender Attack can Delete Databases

• Align introduces ransomware prevention feature, powered by Adlumin

• U.S. Imposes Visa Restrictions on 13 Linked to Commercial Spyware Misuse

• EU Prepares Action Against ‘Addictive’ TikTok Lite Features

• Europol calls for Tech Giants to Get Lawful Access To end-to-end Encryption

• A cyber attack paralyzed operations at Synlab Italia

• Sharp Stealer: New Info-stealer Malware Targets Gamers, Crypto Enthusiasts

• Podcast Episode: Right to Repair Catches the Car

• Executive summary: NIS2 Directive for the EU members (updated)

• Response to CISA Advisory (AA24-109A): #StopRansomware: Akira Ransomware

• Russian cyber forces cyber attack water tower just to make it overflow

• Is Your Password Strong Enough? Brute Force Attack on the Rise!

• Misconfigured cloud server leaked clues of North Korean animation scam

• Russia’s APT28 Exploited Windows Print Spooler Flaw to Deploy ‘GooseEgg’ Malware

• The rising influence of AI on the 2024 US election

• People doubt their own ability to spot AI-generated deepfakes

• 10 colleges and universities shaping the future of cybersecurity education

• Change Healthcare Finally Admits It Paid Ransomware Hackers—and Still Faces a Patient Data Leak

• Behavioral patterns of ransomware groups are changing

• What is multi-factor authentication (MFA), and why is it important?

• ToddyCat Hacker Group Uses Advanced Tools for Industrial-Scale Data Theft

• ISC Stormcast For Tuesday, April 23rd, 2024 https://isc.sans.edu/podcastdetail/8950, (Tue, Apr 23rd)

• Old Windows print spooler bug is latest target of Russia’s Fancy Bear gang

• USENIX Security ’23 – The Case for Learned Provenance Graph Storage Systems

Generated on 2024-04-24 23:55:13.358104