IT Security News Daily Summary 2024-04-30

• USENIX Security ’23 – Sherlock on Specs: Building LTE Conformance Tests through Automated Reasoning

• UnitedHealth CEO: ‘Decision to pay ransom was mine’

• FCC Fines Verizon, AT&T and T-Mobile for Sharing User Location Data

• 5 Steps to Make Zero Trust Achievable

• The best travel VPNs of 2024: Expert tested and reviewed

• China Has a Controversial Plan for Brain-Computer Interfaces

• FCC Fines Verizon, AT&T, and T-Mobile for Sharing User Location Data

• How To Set Up a Firewall in 8 Easy Steps + Best Practices

• How To Set Up DMZ on Servers: 7-Step DMZ Configuration

• NSA guy who tried and failed to spy for Russia gets 262 months in the slammer

• Randall Munroe’s XKCD ‘Doppler Effect’

• Unlocking the Prioritization Secrets of Top CISOs

• Brits Ban Default Passwords — and More IoT Stupidity

• Island Secures $175M Investment as Enterprise Browser Startups Defy Tech Giants

• Apptega Raises $15 Million for Cybersecurity Compliance Platform

• Critical Vulnerabilities in Judge0 Lead to Sandbox Escape, Host Takeover

• Docker Hub Users Targeted With Imageless, Malicious Repositories

• Finnish Hacker Gets Prison for Accessing Thousands of Psychotherapy Records and Demanding Ransoms

• Qlik Sense Servers Prone To Cactus Ransomware Threats

• The Dangerous Rise of GPS Attacks

• CISA guidelines to protect critical infrastructure against AI-based threats

• NSA employee who tried and failed to spy for Russia gets 262 months in the slammer

• Announcing the General Availability of Spectra Detect v5.0: Enhancing File Analysis for Advanced Threat Detection

• Introducing the Unified RL Spectra Suite

• Releases Distribution Changes

• Commvault projects Cleanroom Recovery for ransomware thwarting customers

• EDR vs. EPP: What’s the difference?

• Delta Electronics CNCSoft-G2 DOPSoft

• Vulnerability In R Programming Language Could Fuel Supply Chain Attacks

• UK Outlaws Awful Default Passwords On Connected Devices

• Hacker Jailed For Blackmailing Therapy Patients

• Apple’s Incredibly Private Safari Is Not So Private In Europe

• Defending Infrastructure, Securing Systems Key To CISA’s New AI Guidelines

• Sysdig Extends CNAPP Reach to AI Workloads

• Ransomware Rising Despite Takedowns, Says Corvus Report

• Another Day, Another NAS: Attacks against Zyxel NAS326 devices CVE-2023-4473, CVE-2023-4474, (Tue, Apr 30th)

• Redline Malware Using Lua Bytecode to Challenge the SOC/TI Team to Detect

• employee onboarding and offboarding

• How SASE convergence affects organizational silos

• US fines telcos $200M for sharing customer location data without consent

• Guest Blog: Securing K12 Schools with Centripetal and LANRover

• Hacking and Cybersecurity

• FCC Fines Wireless Carriers for Sharing User Locations Without Consent

• YMCA Fined for Data Breach, ICO Raises Concerns About Privacy for People with HIV

• CISA Releases Three Industrial Control Systems Advisories

• Delta Electronics CNCSoft-G2 DOPSoft DPAX

• Microsoft Releases New-Open Source Tool for OT Security

• SSH vs. SSL/TLS: What’s The Difference?

• 3 Ways File Integrity Monitoring Identifies Zero-Day Attacks

• Defense-in-Depth: A Layered Approach for Modern Cybersecurity

• Japanese Authorities Deploy Counterfeit Payment Cards to Alert Victims of Support Scams

• Researchers Discover Coordinated Attacks on Docker Hub to Plant Millions of Malicious Repositories

• KnowBe4 to Acquire Egress

• Malwarebytes Premium Security earns “Product of the Year” from AVLab

• Vulnerability in R Programming Language Could Fuel Supply Chain Attacks

• SafeBase Scores $33M Series B Investment

• Apple ID Shuts Down: Users Panic While Trying to Reset Password

• Banish Browser Clutter: How to Easily Remove Junk Files on Android

• Teachers’ Taxes Fraudulently Filed in Glendale Ransomware Attack

• Adaptive Shield unveils SaaS security for AI

• Analyzing Malware in Binaries and Executables with AI

• AI cybersecurity solutions detect ransomware in under 60 seconds

• Man Who Mass-Extorted Psychotherapy Patients Gets Six Years

• The White House Has a New Master Plan to Stop Worst-Case Scenarios

• Malwarebytes Premium earns “Product of the Year” from AVLab

• Island raises $175 million at $3 billion valuation

• Onyxia launches AI-powered predictive insights to optimize security management

• Millions of Malicious ‘Imageless’ Containers Planted on Docker Hub Over 5 Years

• The internet is now at the mercy of open source vulnerabilities.

• Infinity Global Services’ Cyber Park Introduces “Nemesis” – A Cyber Security Adventure Awaits!

• SafeBase taps AI to automate software security reviews

• Synopsys Introduces Polaris Assist: AI-Powered Application Security Assistant

• Synopsys Polaris Assist automates repetitive, time-consuming tasks for security and development teams

• Millions of Malicious Containers Found on Docker Hub

• Keeper Security Forges Cybersecurity Partnership With Williams Racing

• European Commission starts formal probe of Meta over election misinformation

• Palo Alto firewalls: CVE-2024-3400 exploitation and PoCs for persistence after resets/upgrades

• FCC fines major wireless carriers over illegal location data sharing

• Disinformation: EU Opens Probe Against Facebook and Instagram Ahead of Election

• Why Using Microsoft Copilot Could Amplify Existing Data Quality and Privacy Issues

• LockBit, RAGroup Drive Ransomware Attacks in March

• Guarding Democracy: Assessing Cyber Threats to 2024 Worldwide Elections

• Cisco Talos at RSAC 2024

• Threat Actor Claims Selling of Dell Database with 49M User Records

• How We’re Navigating Parenthood, Careers, and Connection at Cisco

• Computing that’s purpose-built for a more energy-efficient, AI-driven future

• Researchers Unveil Novel Attack Methods Targeting Intel’s Conditional Branch Predictor

• Prompt Fuzzer: Open-Source Tool for Strengthening GenAI Apps

• Cybersixgill Third-Party Intelligence module identifies potential supply chain risks

• Ransom Payments Surge by 500% to an Average of $2m

• Change Healthcare hackers broke in using stolen credentials — and no MFA, says UHG CEO

• UK Enacts IoT Cybersecurity Law

• FBI warns online daters to avoid “free” online verification schemes that prove costly

• Google Blocks 2.28M Malicious Apps Entering The Play Store

• WhatsApp in India

• Muddling Meerkat Hackers Manipulate DNS Using China’s Great Firewall

• Considerations for Operational Technology Cybersecurity

• U.S. Government Releases New AI Security Guidelines for Critical Infrastructure

• Cyber Security Headlines: USPS phishing, UK IoT law, industrial USB attacks

• I Really Shouldn’t Have Agreed to Variable Rate Technical Debt

• New Android Malware Mimic As Social Media Apps Steals Sensitive Data

• LightSpy Malware Actively Targeting MacOS Devices

• ESET launches two MDR subscription tiers for SMBs and enterprises

• OpenAI Hit By Austrian Complaint Over ChatGPT ‘False Data’

• Kaiser Permanente Cyber Attack Exposes 13.4 Million Users Data

• Safari Vulnerability Exposes EU iOS Users to Malicious Marketplaces

• FCC Imposes $200 Million in Fines on Four US Carriers

• ThreatX provides always-active API security from development to runtime

• FCC Fines Carriers $200m For Selling User Location Data

• Darkgate Malware Leveraging Autohotkey Following Teams

• DMARC – The Next Step in Email Hygiene and Security

• Defending Against Supply Chain Spoofing in Critical Manufacturing

• Managed Detection and Response in 2023

• CyberQP unveils solutions to help MSPs proactively prevent security incidents

• Austria Conference Calls For Controls On ‘Killer Robots’

• Beating the Barbarians in the Cloud

• EU Designates Apple’s iPad OS As DMA ‘Gatekeeper’

• Google Rejected 2.28 Million Risky Android Apps From Play Store in 2023

• Google Blocks 2.3 Million Apps From Play Store Listing

• Why space exploration is important for Earth and its future: Q&A with David Eicher

• Security Flaws in IRS Systems Pose Risk to Financial Statements, GAO Says

• The Darkgate Menace: Leveraging Autohotkey & Attempt to Evade SmartScreen

• RSAC 2024 Innovation Sandbox | RAD Security: New Solutions for Cloud-Native Anomaly Detection and Response

• MITRE ATT&CK v15: A Deeper Dive into SaaS Identity Compromise

• KapeKa Backdoor: Russian Threat Actor Group’s Recent Attacks

• Taiwanese Chip Giant Exits China Mainland

• Increasing cybersecurity awareness and skills training across India

• NCSC: New UK law bans default passwords on smart devices

• Apple’s ‘incredibly private’ Safari is not so private in Europe

• Meet the New Exclusive AI Malware Analyst: Gemini 1.5 Pro

• New U.K. Law Bans Default Passwords on Smart Devices Starting April 2024

• An Empty S3 Bucket Can Make Your AWS Bills Explode

• The FCC imposes $200 million in fines on four US carriers for unlawfully sharing user location data

• Tesla wins data security concerns in China

• Tracecat: Open-source SOAR

• Triangulation fraud: The costly scam hitting online retailers

• Why the automotive sector is a target for email-based cyber attacks

• Security analysts believe more than half of tasks could be automated

• Passwords under seven characters can be easily cracked

• MovieBoxPro – 6,009,014 breached accounts

• eBook: Do you have what it takes to lead in cybersecurity?

• ISC Stormcast For Tuesday, April 30th, 2024 https://isc.sans.edu/podcastdetail/8960, (Tue, Apr 30th)

• Tech CEOs Altman, Nadella, Pichai and Others Join Government AI Safety Board Led by DHS’ Mayorkas

• External Penetration Testing: Cost, Tools, Steps, & Checklist

• AT&T, Verizon, Sprint, T-Mobile US fined $200M for selling off people’s location info

• Wireless Network Security: WEP, WPA, WPA2 & WPA3 Explained

• Google blocked 2.3M apps from Play Store last year for breaking the G law

• Fake AI-Generated Images Are Running Wild On Facebook

• IT Security News Daily Summary 2024-04-29

• FCC Fines Major U.S. Wireless Carriers for Selling Customer Location Data

• Vulnerability Recap 4/29/24 – Cisco, Microsoft, Palo Alto & More

• Google prevented 2.28 million policy-violating apps from being published on Google Play in 2023

• Congress Should Just Say No to NO FAKES

• USPS Phishing Scams Generate Almost as Much Traffic as the Real Site

• What Is Integrated Risk Management? Definition & Implementation

• Rubrik Sets Cyber Resiliency Course Following IPO

• Google Meet Now Offers Client-Side Encryption For All Calls

• During National Small Business Week, Take Steps to Secure Your Business

• London Drugs closes all of its pharmacies following ‘cybersecurity incident’

• Vulnerability Summary for the Week of April 22, 2024

• Ford’s hands-free driver system is under investigation after fatal crashes – what to know

• Stop Managing Identities, Segment them Instead

• How TikTok Grew From a Fun App for Teens Into a Potential National Security Threat

• CISA Rolls Out New Guidelines to Mitigate AI Risks to US Critical Infrastructure

• Thoma Bravo to Buy Cybersecurity Firm Darktrace for $5.3 Billion

• Orca Security Allies with ModePUSH for Cloud Incident Response

• Google Prevented 2.28 Million Malicious Apps from Reaching Play Store in 2023

• Tesla Shares Surge On China Advanced Self-Driving Push

• Google Says it Blocked 2.28 Million Apps from Google Play Store

• digital identity

• How Compliance Can Launch Your Risk Program with Vanta

• What is MFA bombing? Apple users were targeted using this phishing technique

• UK to Take Steps in Helping Protect Consumers Against Cyber Threats from Smart Devices

• South Korean iPhone Ban: MDM DMZ PDQ

• Why Shouldn’t You Upload Files So Readily On Your Browser?

• From IcedID to Dagon Locker Ransomware in 29 Days

• Cyber Attack forces London Drugs to close temporarily

• UK Law Aims To Boost Security For ‘Smart’ Devices

• Study Reveals Alarming Levels of USPS Phishing Traffic

• Kaiser Permanente Data Breach Impacts 13.4 Million Patients

• Should Cybersecurity Leadership Finally be Professionalized?

• Managing Generative AI Risk and Meeting M-24-10 Mandates on Monitoring & Evaluation

• USENIX Security ’23 – Instructions Unclear: Undefined Behaviour in Cellular Network Specifications

• Cactus Ransomware Exposes Thousands of Vulnerable Qlik Sense Servers

• Researchers Successfully Sinkhole PlugX Malware Server, Recording 2.5 Million Unique IPs

• SpaceX Data Breach: Hunters International Publishes Alleged Stolen Data

• Judge0 Sandbox Vulnerabilities Expose Systems to Takeover Risk

• $197 Bounty Awarded for Unauthenticated Arbitrary Post Deletion Vulnerability Patched in LeadConnector WordPress Plugin

• UK PSTI Act – New Law To Protect Smart Devices

• Ten Years Of Heartbleed: Lessons Learned

• Meta To Face EU Probe For Not Doing Enough To Stop Russian Disinformation

• Watchdog Reveals Google Privacy Sandbox Worries

• Okta Warns Of Credential Stuffing Attacks Using Tor, Residential Proxies

• OpenAI’s ChatGPT Targeted In Austrian Privacy Complaint

• 91% of ransomware victims paid at least one ransom in the past year, survey finds

• D-Link NAS Device Backdoor Abused, (Mon, Apr 29th)

• Grafana Tool Vulnerability Let Attackers Inject SQL Queries

• CISA and FEMA IPAWS in Partnership with FCC Host Second National Meeting of Alerting Officials

• DDoS Attacks Continue, Post-Election, Against Russian Independent Media Site Meduza

• Honeywell: USB Malware Attacks on Industrial Orgs Becoming More Sophisticated

• Beyond the Buzz: Rethinking Alcohol as a Cybersecurity Bonding Ritual

• Everything you need to know about network penetration testing [+checklist to follow]

• 5 Attack Trends Your Company Should Be Aware Of

• UK enacts IoT cybersecurity law

• China-Linked ‘Muddling Meerkat’ Hijacks DNS to Map Internet on Global Scale

• Financial Business and Consumer Solutions (FBCS) data breach impacted 2M individuals

• More Than 800 Vulnerabilities Resolved Through CISA Ransomware Notification Pilot

• Hackers Tool 29 Days from Initial Hack to Sabotage Ransomware Attack

• Celebrating 5 Years of Excellence with Check Point’s Hacking Point Program

• France willing to buy key Atos assets to keep them French

• Comply-to-Connect and Cisco ISE: Revolutionizing the Department of Defense

• British Intelligence Moves to Protect Research Universities From Espionage

• Voter Registration System Taken Offline in Coffee County Cyber-Incident

• Report: 73% of SME Security Professionals Missed or Ignored Critical Alerts

• Modern Phishing Attacks: Insights from the Egress Phishing Threat Trends Report

• James Nutland studies what makes threat actors tick, growing our understanding of the current APT landscape

• UK lays down fresh legislation banning crummy default device passwords

• Silobreaker empowers users with timely insight into key cybersecurity incident filings

• Navigating the Threat Landscape: Understanding Exposure Management, Pentesting, Red Teaming and RBVM

• OpenAI’s ChatGPT is Breaking GDPR, Says Noyb

• Whale Song Code

• DHS Announces AI Safety Board with OpenAI Founder, CEOs of Microsoft, Nvidia, IBM

• Collection Agency FBCS Says Data Breach Exposed Nearly 2 million People

• Okta Warns of Credential Stuffing Attacks Using Tor, Residential Proxies

• OfflRouter Malware Ukraine: Govt Network Breach Since 2015

• Compounded Crisis: Change Healthcare’s Breach Escalates with New Threats

• Multiple PHP 7.4 Vulnerabilities Addressed in Debian 11

• Cyber Security Today, April 29, 2024 – Credential stuffing attacks are hitting firms using Okta ID management solutions, and more

• Ensuring Robust Security in Multi-Cloud Environments: Best Practices and Strategies

• UK says NO to ransom passwords such as admin, 123456 and qwerty

• Kaiser health insurance leaked patient data to advertisers

• 10 Database Security Best Practices You Should Know

• Machines vs Minds: The Power of Human Ingenuity Against Cyber Threats

• Know-Your-Customer Executive Order Facing Stiff Opposition From Cloud Industry

• Researchers unveil novel attack methods targeting Intel’s conditional branch predictor

• Okta warns customers about credential stuffing onslaught

• Sandbox Escape Vulnerabilities in Judge0 Expose Systems to Complete Takeover

• Cyber Security Headlines: Kaiser Permanente breach, DSH Safety Board, Okta stuffing attack

• Email Provider Complains To EU Over Reduced Google Rankings

• Intel Shares Sink As AI Surge Hits Chip Revenue

• Snap Sees Surge In Users, Ad Revenues

• Google Asks US Court To Dismiss Federal Adtech Case

• Alphabet Value Surges Over $2tn On Dividend Plan

• Fake Chrome Updates Hide Android Brokewell Malware Targeting Your Bank

• Cyber-Partisans hacktivists claim to have breached Belarus KGB

• Watchdog reveals lingering Google Privacy Sandbox worries

• North Korean Hackers Exploit LinkedIn in Targeted Attacks

• Agent Tesla and Taskun Malware Targeting US Education and Govt Entities

• Most People Still Rely on Memory or Pen and Paper for Password Management

• Okta Warns of Unprecedented Scale in Credential Stuffing Attacks on Online Services

• DHS establishes AI Safety and Security Board to protect critical infrastructure

• New UK Smart Device Security Law Comes into Force

• Cyber Security Today, April 29, 2024 – Credential stuffing attacks are hitting firms using Okta ID management solutions, and more

• Chinese Botnet As-A-Service Bypasses Cloudflare & Other DDoS Protection Services

• PoC Exploit Released For Windows Kernel EoP Vulnerability

• Palo Alto Updates Remediation for Max-Critical Firewall Bug

• Japanese police create fake support scam payment cards to warn victims

• New UK Smart Device Security Law Comes into Force Today

• KageNoHitobito Ransomware Attacking Windows Users Around the Globe

• The Los Angeles County Department of Health Services disclosed a data breach

• Analysis of Native Process CLR Hosting Used by AgentTesla

• US Post Office Phishing Sites Get as Much Traffic as the Real One

• Okta Warns Customers of Credential Stuffing Barrage

• 1,200+ Vulnerabilities Detected In Microsoft Products In 2023

• A week in security (April 22 – April 28)

• US Regulator Probes Effectiveness Of Tesla Autopilot Recall

• Multiple Brocade SANnav SAN Management SW flaws allow device compromise

• Android Malware Brokewell With Complete Device Takeover Capabilities

• Okta Warns of Credential Stuffing Attacks Using Proxy Services

• Exploring the Key Sections of a SOC 2 Report (In Under 4 Minutes)

• Fileless .NET Based Code Injection Attack Delivers AgentTesla Malware

• RSAC 2024 Innovation Sandbox | Mitiga: A New Generation of Cloud and SaaS Incident Response Solutions

• Prompt Fuzzer: Open-source tool for strengthening GenAI apps

• How insider threats can cause serious security breaches

• AI is creating a new generation of cyberattacks

• Closing the cybersecurity skills gap with upskilling programs

• Anticipating and addressing cybersecurity challenges

• Discord dismantles Spy.pet site that snooped on millions of users

• The next step up for high-impact identity authorization

• ISC Stormcast For Monday, April 29th, 2024 https://isc.sans.edu/podcastdetail/8958, (Mon, Apr 29th)

Generated on 2024-04-30 23:55:10.462659