IT Security News Daily Summary 2024-05-01

• United HealthCare CEO says ‘maybe a third’ of US citizens were affected by recent hack

• Red Hat’s latest enterprise Linux delivers new features to tackle hybrid-cloud complexity

• remote access

• United HealthCare CEO says ‘maybe a third’ of U.S. citizens were affected by recent hack

• 4 Takeaways from Hannover Messe 2024

• Ex-NSA employee sentenced to 262 months in prison for attempting to transfer classified documents to Russia

• Lawsuits After Ransomware on the Rise, Comparitech Says

• TikTok Viewed As Chinese Influence Tool By Most Americans – Poll

• Infosec biz boss accused of BS’ing the world about his career, anti-crime product, customers

• Cuttlefish malware targets enterprise-grade SOHO routers

• Ex-NSA employee sentenced to 262 months for attempting to transfer classified documents to Russia

• Speaking Freely: Rebecca MacKinnon

• Traceable AI Raises $30 Million to Safeguard Cloud APIs

• Oasis Security Raises $35 Million to Tackle Non-Human Identity Management

• Product Release: PreVeil 5.0

• Ofcom Confirms OnlyFans Investigation Over Age Verification

• Which Programming Language to Choose for AI?

• Muddling Meerkat Group Suspected of Espionage via Great Firewall of China

• Quantum Technology: Implications for Digital Security

• Ex Google Staff Fired Over Israel Protest File NLRB Complaint

• US charges 16 over ‘depraved’ grandparent scams

• The US Government Is Asking Big Tech to Promise Better Cybersecurity

• CISA and Partners Release Fact Sheet on Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity

• A flaw in the R programming language could allow code execution

• What’s hot at RSAC 2024: 8 SSCS talks you don’t want to miss

• Fraudulent npm Packages Deceive Software Developers into Malware Installation

• Vulnerabilities in employee management system could lead to remote code execution, login credential theft

• Cyber-attacks in the APAC region driven by espionage motives

• Cybersecurity Startup Resonance Secures Funding To Meet Its Ambitious Growth Targets

• Tesla Axes Entire Supercharger Team, Plus Senior Executives

• CISA Adds One Known Exploited Vulnerability to Catalog

• Island Raises $175 Million at $3 Billion Valuation

• Zero-Day Nightmare: Palo Alto, Cisco, and MITRE Under Attack

• LockBit, Black Basta, Play Dominate Ransomware in Q1 2024

• Spoofing Shein for Credential Harvesting

• UnitedHealth CEO tells Senate all systems now have multi-factor authentication after hack

• Beyond visibility, there’s observability

• China’s Attacks On Critical Infrastructure Tip Of Iceberg

• London Drugs Pharmacy Closes All Stores To Respond To Cyber Incident

• Google Boosts Bug Bounty Payouts Tenfold In Mobile App Security Push

• Adobe Adds Content Credentials And Firefly To Bug Bounty Program

• Qantas App Glitch Sees Boarding Passes Fly To Other Accounts

• New “Goldoon” Botnet Targeting D-Link Devices

• New Cuttlefish Malware Infects Routers to Monitor Traffic for Credential Theft

• Cuttlefish Malware Targets Routers, Harvests Cloud Authentication Data

• Adobe Adds Content Credentials and Firefly to Bug Bounty Program

• Google Boosts Bug Bounty Payouts Tenfold in Mobile App Security Push

• Redefining Education: The AI Revolution in Classrooms Everywhere

• Dutch Threat Experts Issues Warning to Companies Regarding Ransomware Attack

• UnitedHealth CEO Confirms Breach Tied to Stolen Credentials, No MFA

• Qantas app glitch sees boarding passes fly to other accounts

• CISA Unveils Guidelines for AI and Critical Infrastructure

• Venafi Launches 90-Day TLS Certificate Renewal Initiative

• Bitcoin Forensic Analysis Uncovers Money Laundering Clusters and Criminal Proceeds

• Thinking about a Career in Software Security? Follow This Path

• Microsoft, OpenAI Sued By More Newspaper Publishers

• Learn Cybersecurity Skills From Scratch for Just $40

• New Wpeeper Android Malware Hides Behind Hacked WordPress Sites

• DeepKeep Launches AI-Native Security Platform With $10 Million in Seed Funding

• Machine Identity Firm Venafi Readies for the 90-day Certificate Lifecycle

• Belgium’s Aikido lands $17M Series A for its ‘no BS’ security platform aimed at developers

• A closer look at Apiiro’s SHINE partner program

• Android Malware Wpeeper Uses Compromised WordPress Sites to Hide C2 Servers

• Capture the CISO S2E3: BugProve, Egress, and Zenity

• Identity Verification Payments Challenges in the Age of AI

• Adobe Adds Firefly and AI Watermarking to Bug Bounty Program

• A Vast New Data Set Could Supercharge the AI Hunt for Crypto Money Laundering

• How SaaS-Based Identity Governance Can Help Future-Proof Your Security

• Ransomware Strikes St-Jerome Company: Everest Group Suspected

• HackerOne Survey Reveals Organizations Feel Equipped to Fight AI Threats Despite Security Incidents

• Unpacking the New DHS Guidelines for Securing Critical Infrastructure from AI-related Threats

• Extending SASE Protection Into the Browser

• A Vast New Dataset Could Supercharge the AI Hunt for Crypto Money Laundering

• 1 in 5 US Ransomware Attacks Triggers Lawsuit

• Organizations Need Fully Autonomous Security Powered by Gen-AI

• Wpeeper Android Trojan Uses Compromised WordPress Sites to Shield Command-and-Control Server

• CISO Conversations: Talking Cybersecurity With LinkedIn’s Geoff Belknap and Meta’s Guy Rosen

• Lawsuits and Company Devaluations Await For Breached Firms

• Binance’s Changpeng Zhao Sentenced To Four Months In Prison

• Are VPNs Legal To Use?

• AI Voice Scam

• Intel 471 Acquires Cyborg Security to Expand Its Cyber Threat Intelligence Portfolio with Innovative Threat Hunting Capabilities

• Data Breaches in April 2024 – Infographic

• Protecting Users Against Bugs: Software Providers’ Scalable Attempts

• ZLoader Malware Evolves with Anti-Analysis Trick from Zeus Banking Trojan

• Everyone’s an Expert: How to Empower Your Employees for Cybersecurity Success

• TechRepublic Premium Editorial Calendar: Policies, Checklists, Hiring Kits and Glossaries for Download

• DBIR: Vulnerability Exploits Triple as Initial Access Point for Data Breaches

• Cyber Security Headlines: UnitedHealth Group CEO faces congress, U.S. wireless carriers face majors fine, Marriott backtracks protection claims

• ISC Stormcast For Wednesday, May 1st, 2024 https://isc.sans.edu/podcastdetail/8962, (Wed, May 1st)

• Judge0 Vulnerabilities Could Allow Sandbox Escape

• Wireless carriers fined $200 million after illegally sharing customer location data

• Infosecurity Europe Keynote: Building Strong Teams and Driving Change with F1’s Claire Williams

• Programming Language R Patches Code Execution Security Flaw

• Cyber Security Today, May 1, 2024 – Data may have been stolen in London Drugs cyber attack, Congressional testimony today by UnitedHealth CEO on ransomware attack, and more

• Router Roulette: Cybercriminals and Nation-States Sharing Compromised Networks

• Google Guide! How to Detect Browser Data Theft Using Windows Event Logs

• Muddling Meerkat, a mysterious DNS Operation involving China’s Great Firewall

• NCSC’s New Mobile Risk Model Aimed at “High-Threat” Firms

• Patched Deserialization Flaw in Siemens Product Allows RCE

• US Government Releases New Resources Against AI Threats

• Millions of Malicious “Imageless” Docker Hub Repositories Drop Malware

• New Latrodectus Malware Attacks Use Microsoft, Cloudflare Themes

• Belarus Secret Service Website Still Down After Hackers Claim the Breach

• Ex-NSA Employee Sentenced to 22 Years for Trying to Sell U.S. Secrets to Russia

• RSAC 2024 Innovation Sandbox | VulnCheck: A Solution to the Challenge of Vulnerability Prioritization

• Google blocks millions of apps from Playstore for Mobile Security

• Crafting an Airtight Security Posture Against Ransomware Threats

• Attackers Leverage Sidecar Container Injection Technique To Stay Stealthy

• How space exploration benefits life on Earth: Q&A with David Eicher

• Why cloud vulnerabilities need CVEs

• Making cybersecurity more appealing to women, closing the skills gap

• How to Utilize Azure Logs to Identify Threats: Insights From Microsoft

• Verizon DBIR: Vulnerability exploitation in breaches up 180%

• Building a strong cloud security posture

• Cybersecurity jobs available right now: May 1, 2024

• UnitedHealth CEO Says Hackers Lurked in Network for Nine Days Before Ransomware Strike

• Essential steps for zero-trust strategy implementation

• Linux Trojan – Xorddos with Filename eyshcjdmzg, (Mon, Apr 29th)

• Open source programming language R patches gnarly arbitrary code exec flaw

• Infosec products of the month: April 2024

• Navigating the Future: Insights From the M&A Symposium at Kaseya Connect Global

• Open source programming language R patches critical arbitrary code exec flaw

• PGP Encryption: The Email Security Standard

• Cyber-bastard jailed for stealing psychotherapy files, blackmailing patients

• TrustCloud Product Updates: April 2024

• Opening Statement by CISA Director Jen Easterly

• Facebook Faces Scrutiny For Allowing Russian Disinformation To Spread

• Notorious Finnish Hacker sentenced to more than six years in prison

• IT Security News Monthly Summary – May

• IT Security News Daily Summary 2024-04-30

• USENIX Security ’23 – Sherlock on Specs: Building LTE Conformance Tests through Automated Reasoning

• UnitedHealth CEO: ‘Decision to pay ransom was mine’

• FCC Fines Verizon, AT&T and T-Mobile for Sharing User Location Data

• 5 Steps to Make Zero Trust Achievable

• The best travel VPNs of 2024: Expert tested and reviewed

• China Has a Controversial Plan for Brain-Computer Interfaces

• FCC Fines Verizon, AT&T, and T-Mobile for Sharing User Location Data

• How To Set Up a Firewall in 8 Easy Steps + Best Practices

• How To Set Up DMZ on Servers: 7-Step DMZ Configuration

• NSA guy who tried and failed to spy for Russia gets 262 months in the slammer

• Randall Munroe’s XKCD ‘Doppler Effect’

• Unlocking the Prioritization Secrets of Top CISOs

• Brits Ban Default Passwords — and More IoT Stupidity

• Island Secures $175M Investment as Enterprise Browser Startups Defy Tech Giants

• Apptega Raises $15 Million for Cybersecurity Compliance Platform

• Critical Vulnerabilities in Judge0 Lead to Sandbox Escape, Host Takeover

• Docker Hub Users Targeted With Imageless, Malicious Repositories

• Finnish Hacker Gets Prison for Accessing Thousands of Psychotherapy Records and Demanding Ransoms

• Qlik Sense Servers Prone To Cactus Ransomware Threats

• The Dangerous Rise of GPS Attacks

• CISA guidelines to protect critical infrastructure against AI-based threats

• NSA employee who tried and failed to spy for Russia gets 262 months in the slammer

• Announcing the General Availability of Spectra Detect v5.0: Enhancing File Analysis for Advanced Threat Detection

• Introducing the Unified RL Spectra Suite

• Releases Distribution Changes

• Commvault projects Cleanroom Recovery for ransomware thwarting customers

• EDR vs. EPP: What’s the difference?

• Delta Electronics CNCSoft-G2 DOPSoft

• Vulnerability In R Programming Language Could Fuel Supply Chain Attacks

• UK Outlaws Awful Default Passwords On Connected Devices

• Hacker Jailed For Blackmailing Therapy Patients

• Apple’s Incredibly Private Safari Is Not So Private In Europe

• Defending Infrastructure, Securing Systems Key To CISA’s New AI Guidelines

• Sysdig Extends CNAPP Reach to AI Workloads

• Ransomware Rising Despite Takedowns, Says Corvus Report

• Another Day, Another NAS: Attacks against Zyxel NAS326 devices CVE-2023-4473, CVE-2023-4474, (Tue, Apr 30th)

• Redline Malware Using Lua Bytecode to Challenge the SOC/TI Team to Detect

• employee onboarding and offboarding

• How SASE convergence affects organizational silos

• US fines telcos $200M for sharing customer location data without consent

• Guest Blog: Securing K12 Schools with Centripetal and LANRover

• Hacking and Cybersecurity

• FCC Fines Wireless Carriers for Sharing User Locations Without Consent

• YMCA Fined for Data Breach, ICO Raises Concerns About Privacy for People with HIV

• CISA Releases Three Industrial Control Systems Advisories

• Delta Electronics CNCSoft-G2 DOPSoft DPAX

• Microsoft Releases New-Open Source Tool for OT Security

• SSH vs. SSL/TLS: What’s The Difference?

• 3 Ways File Integrity Monitoring Identifies Zero-Day Attacks

• Defense-in-Depth: A Layered Approach for Modern Cybersecurity

• Japanese Authorities Deploy Counterfeit Payment Cards to Alert Victims of Support Scams

• Researchers Discover Coordinated Attacks on Docker Hub to Plant Millions of Malicious Repositories

• KnowBe4 to Acquire Egress

• Malwarebytes Premium Security earns “Product of the Year” from AVLab

• Vulnerability in R Programming Language Could Fuel Supply Chain Attacks

• SafeBase Scores $33M Series B Investment

• Apple ID Shuts Down: Users Panic While Trying to Reset Password

• Banish Browser Clutter: How to Easily Remove Junk Files on Android

• Teachers’ Taxes Fraudulently Filed in Glendale Ransomware Attack

• Adaptive Shield unveils SaaS security for AI

• Analyzing Malware in Binaries and Executables with AI

• AI cybersecurity solutions detect ransomware in under 60 seconds

• Man Who Mass-Extorted Psychotherapy Patients Gets Six Years

• The White House Has a New Master Plan to Stop Worst-Case Scenarios

• Malwarebytes Premium earns “Product of the Year” from AVLab

• Island raises $175 million at $3 billion valuation

• Onyxia launches AI-powered predictive insights to optimize security management

• Millions of Malicious ‘Imageless’ Containers Planted on Docker Hub Over 5 Years

• The internet is now at the mercy of open source vulnerabilities.

• Infinity Global Services’ Cyber Park Introduces “Nemesis” – A Cyber Security Adventure Awaits!

• SafeBase taps AI to automate software security reviews

• Synopsys Introduces Polaris Assist: AI-Powered Application Security Assistant

• Synopsys Polaris Assist automates repetitive, time-consuming tasks for security and development teams

• Millions of Malicious Containers Found on Docker Hub

• Keeper Security Forges Cybersecurity Partnership With Williams Racing

• European Commission starts formal probe of Meta over election misinformation

• Palo Alto firewalls: CVE-2024-3400 exploitation and PoCs for persistence after resets/upgrades

• FCC fines major wireless carriers over illegal location data sharing

• Disinformation: EU Opens Probe Against Facebook and Instagram Ahead of Election

• Why Using Microsoft Copilot Could Amplify Existing Data Quality and Privacy Issues

• LockBit, RAGroup Drive Ransomware Attacks in March

• Guarding Democracy: Assessing Cyber Threats to 2024 Worldwide Elections

• Cisco Talos at RSAC 2024

• Threat Actor Claims Selling of Dell Database with 49M User Records

• How We’re Navigating Parenthood, Careers, and Connection at Cisco

• Computing that’s purpose-built for a more energy-efficient, AI-driven future

• Researchers Unveil Novel Attack Methods Targeting Intel’s Conditional Branch Predictor

• Prompt Fuzzer: Open-Source Tool for Strengthening GenAI Apps

• Cybersixgill Third-Party Intelligence module identifies potential supply chain risks

• Ransom Payments Surge by 500% to an Average of $2m

• Change Healthcare hackers broke in using stolen credentials — and no MFA, says UHG CEO

• UK Enacts IoT Cybersecurity Law

• FBI warns online daters to avoid “free” online verification schemes that prove costly

• Google Blocks 2.28M Malicious Apps Entering The Play Store

• WhatsApp in India

• Muddling Meerkat Hackers Manipulate DNS Using China’s Great Firewall

• Considerations for Operational Technology Cybersecurity

• U.S. Government Releases New AI Security Guidelines for Critical Infrastructure

• Cyber Security Headlines: USPS phishing, UK IoT law, industrial USB attacks

• I Really Shouldn’t Have Agreed to Variable Rate Technical Debt

• New Android Malware Mimic As Social Media Apps Steals Sensitive Data

• LightSpy Malware Actively Targeting MacOS Devices

• ESET launches two MDR subscription tiers for SMBs and enterprises

• OpenAI Hit By Austrian Complaint Over ChatGPT ‘False Data’

• Kaiser Permanente Cyber Attack Exposes 13.4 Million Users Data

• Safari Vulnerability Exposes EU iOS Users to Malicious Marketplaces

• FCC Imposes $200 Million in Fines on Four US Carriers

• ThreatX provides always-active API security from development to runtime

• FCC Fines Carriers $200m For Selling User Location Data

• Darkgate Malware Leveraging Autohotkey Following Teams

• DMARC – The Next Step in Email Hygiene and Security

• Defending Against Supply Chain Spoofing in Critical Manufacturing

• Managed Detection and Response in 2023

• CyberQP unveils solutions to help MSPs proactively prevent security incidents

• Austria Conference Calls For Controls On ‘Killer Robots’

• Beating the Barbarians in the Cloud

• EU Designates Apple’s iPad OS As DMA ‘Gatekeeper’

• Google Rejected 2.28 Million Risky Android Apps From Play Store in 2023

• Google Blocks 2.3 Million Apps From Play Store Listing

• Why space exploration is important for Earth and its future: Q&A with David Eicher

• Security Flaws in IRS Systems Pose Risk to Financial Statements, GAO Says

• The Darkgate Menace: Leveraging Autohotkey & Attempt to Evade SmartScreen

• RSAC 2024 Innovation Sandbox | RAD Security: New Solutions for Cloud-Native Anomaly Detection and Response

• MITRE ATT&CK v15: A Deeper Dive into SaaS Identity Compromise

• KapeKa Backdoor: Russian Threat Actor Group’s Recent Attacks

• Taiwanese Chip Giant Exits China Mainland

• Increasing cybersecurity awareness and skills training across India

• NCSC: New UK law bans default passwords on smart devices

• Apple’s ‘incredibly private’ Safari is not so private in Europe

• Meet the New Exclusive AI Malware Analyst: Gemini 1.5 Pro

• New U.K. Law Bans Default Passwords on Smart Devices Starting April 2024

• An Empty S3 Bucket Can Make Your AWS Bills Explode

• The FCC imposes $200 million in fines on four US carriers for unlawfully sharing user location data

• Tesla wins data security concerns in China

• Tracecat: Open-source SOAR

• Triangulation fraud: The costly scam hitting online retailers

• Why the automotive sector is a target for email-based cyber attacks

• Security analysts believe more than half of tasks could be automated

• Passwords under seven characters can be easily cracked

• MovieBoxPro – 6,009,014 breached accounts

• eBook: Do you have what it takes to lead in cybersecurity?

• ISC Stormcast For Tuesday, April 30th, 2024 https://isc.sans.edu/podcastdetail/8960, (Tue, Apr 30th)

• Tech CEOs Altman, Nadella, Pichai and Others Join Government AI Safety Board Led by DHS’ Mayorkas

• External Penetration Testing: Cost, Tools, Steps, & Checklist

Generated on 2024-05-01 23:55:10.210691