IT Security News Daily Summary 2024-05-04

• Pay up, or else? – Week in security with Tony Anscombe

• Facial Recognition System Breach Sparks Privacy Concerns in Australia

• DropBox E-Signature Breach Exposes Customer Data

• A Mind at Play: Rediscovering Minesweeper in the Professional Arena

• Dating apps kiss’n’tell all sorts of sensitive personal info

• A Checklist for What Every Online Coding Class for Kids Needs

• Blackbasta gang claimed responsibility for Synlab Italia attack

• French Hospital CHC-SV Refuses to Pay LockBit Ransomware Demand

• Strengthening Password Security: Addressing Misconceptions and Best Practices

• Sweden Faces Influx of DDoS Attacks Following NATO Membership

• Navigating the API Security Landscape: A CEO’s Perspective on Embedding Zero Trust Principles

• Google’s Med-Gemini: Advancing AI in Healthcare

• Your Google Account allows you to create passkeys on your phone, computer and security keys

• German Foreign Minister Says Russia will Face Consequences for Monthslong Cyber Espionage

• French Cyberwarriors Ready to Test Their Defense Against Hackers and Malware During the Olympics

• AI vs Human Intelligence: Who Is Leading The Pack?

• A New Surveillance Tool Invades Border Towns

• AI Takes the Controller: Revolutionizing Computer Games

• Microsoft Outlook Flaw Exploited by Russia’s APT28 to Hack Czech, German Entities

• Privacy Breach Rocks Australian Nightlife as Facial Recognition System Compromised

• Ukraine Records Increase in Financially Motivated Attacks by Russian Hackers

• The Real Risk is Not Knowing Your Real Risk: Perspectives from Asia Pacific Tour with EY

• CISA Urges Software Devs to Weed out Path Traversal Vulnerabilities

• Ex-Cybersecurity Consultant Jailed For Trading Confidential Data

• 13 Years of Keeping You Update: A Heartfelt HOC Anniversary Message

• Android Bug can Leak DNS Traffic With VPN Kill Switch Enabled

• Cybersecurity professional Madison Horn runs for Congress. Cyber Security Today Weekend Show May 3, 2024

• New Goldoon Botnet Targeting D-Link Devices by Exploiting 9-Year-Old Flaw

• Kaspersky hits back at claims its AI helped Russia develop military drone systems

• New Goldoon Botnet Targeting D-Link Devices by Exploiting Weak Credentials

• Airsoft Data Breach Exposes Data of 75,000 Players

• Kaspersky hits back at claims it helped Russia develop military drone systems

• What is Data Encryption Standard (DES)?

• Adding insult to injury: crypto recovery scams

• Security above all else—expanding Microsoft’s Secure Future Initiative

• LockBit published data stolen from Simone Veil hospital in Cannes

• Kaspersky accused of helping Russia develop military drone systems

• IT Security News Daily Summary 2024-05-03

• Breaking down Microsoft’s pivot to placing cybersecurity as a top priority

• You get a passkey, you get a passkey, everyone should get a passkey

• Healthcare Needs To Be Laser-Focused on API Security and Its Blind Spots

• Dangerous Militia Groups Are Organizing On Facebook Nationwide

• CCTV Cambridge, Addressing Digital Equity in Massachusetts

• Russia-linked APT28 and crooks are still using the Moobot botnet

• AMSI Write Raid 0day Vulnerability

• CEO Discusses MDR Service With a Risk-Based Approach

• The impact of automating open source dependency management

• Palo Alto Networks Extends SASE Reach to Unmanaged Devices

• Code faster with generative AI, but beware the risks when you do

• UnitedHealth data breach should be a wake-up call for the UK and NHS

• My TED Talks

• Proactive, Responsible Disclosure Is One Crucial Way Fortinet Strengthens Customer Security

• “Dirty Stream” Attack Affects Popular Android Apps

• Microsoft Overhauls Cybersecurity Strategy After Scathing CSRB Report

• Hackers Claim Biggest Attack On UAE in History

• Cyber Criminal Sentenced for Targeting Therapy Patients

• Industrial Cyberattackers Reverting to USB Tactics, Says Honeywell Report

• It may take decade to shore up software supply chain security, says infosec CEO

• More Than Two Dozen Android Vulnerabilities Fixed

• GitLab ‘Perfect 10’ Bug Gets a CISA Warning: PATCH NOW

• U.K., U.S. and Canadian Cyber Authorities Warn of Pro-Russia Hacktivist Attacks on Operational Technology Systems

• Top 5 Global Cyber Security Trends of 2023, According to Google Report

• North Korean Hackers Spoofing Journalist Emails to Spy on Experts

• The U.S. House Version of KOSA: Still a Censorship Bill

• How Are APAC Tech Salaries Faring in 2024?

• Proactive Responsible Disclosure is One Crucial Way Fortinet Strengthens Customer Security

• US Says North Korean Hackers Exploiting Weak DMARC Settings

• LayerX Raises $26 Million for Browser Security Platform

• Understanding the Link Between API Exposure and Vulnerability Risks

• Most of the ransomware incidents invite lawsuits in the United States

• Compare Azure Government vs. commercial cloud offering

• UnitedHealth data breach should be a wakeup call for the UK and NHS

• On World Press Freedom Day (and Every Day), We Fight for an Open Internet

• How remote work is changing patch management

• Apple Working to Patch Alarming iPhone Issue

• Russia Accused Of Cyberattack On Germany’s Ruling Party, Defence Firms

• Unifying Excellence with Strategic Partnerships: Cisco Black Belt Academy and VQ Communications

• DeepKeep Secures $10M in Seed Funding to Boost GenAI Protection Endeavors

• A Closer Look at Top 5 Vulnerabilities of April 2024

• Streamline NIS2 Compliance with Automation

• No MFA, No Defense: Change Healthcare Falls Victim to Citrix Account Hijacking

• What we can learn from the best collegiate cyber defenders

• Europol Op Shutters 12 Scam Call Centers And Cuffs 21 Suspected Fraudsters

• Indonesia Sneakily Buys Spyware, Claims Amnesty International

• Microsoft, Google Do A Victory Lap Around Passkeys

• Lessons From LOCKED SHIELDS 2024 Cyber Exercise

• Botnet Disrupted By FBI Still Used By Russian Spies, Cybercriminals

• reNgine: Open-Source Automated Reconnaissance Framework for Web Applications

• In Other News: Locked Shields 2024, Data Exposure Bugs, NVIDIA Patches

• Bug hunters can get up to $450,000 for an RCE in Google’s Android apps

• Alphabet Axes Hundreds Of Staff From ‘Core’ Organisation

• Mal.Metrica Malware Hijacks 17,000+ WordPress Sites

• tproxy To Monitor gRPC And TCP Connections

• document sanitization

• Dirty stream attack poses billions of Android installs at risk

• Hackers Increasingly Abusing Microsoft Graph API for Stealthy Malware Communications

• Expert-Led Webinar – Uncovering Latest DDoS Tactics and Learn How to Fight Back

• AAPI Heritage Month Spotlight: Jenny Nguyen

• Cybersecurity Consultant Arrested After Allegedly Extorting IT Firm

• Identity Management Challenges

• ArcaneDoor Espionage Campaign Targeting Cisco Firewalls Linked to China

• CISA, FBI Urge Organizations to Eliminate Path Traversal Vulnerabilities

• Botnet Disrupted by FBI Still Used by Russian Spies, Cybercriminals

• Insider Risk Digest: April

• North Korean Hackers Spoofing Journalist Emails to Spy on Policy Experts

• ApacheMQ Authentication Flaw Let Unauthorized Users Perform Multiple Actions

• Hackers Exploit Microsoft Graph API For C&C Communications

• Strengthening our U.S. Public Sector Leadership Team with the Promotion of two Industry Veterans

• Safeguarding Your Employee Data From Identity Theft

• 68% of Data Breach Occurs Due to Social Engineering Attacks

• What is Proxmox VE – and Why You Should Live Patch It

• Microsoft Alerts Users as Russian Hackers Target Windows Systems

• Cyber Security Today, May 3, 2024 – North Korea exploits weak email DMARC settings, and the latest Verizon analysis of thousands of data breaches

• Trellix Wise automates security workflows with AI, streamlining threat detection and remediation

• ZLoader Malware adds Zeus’s anti-analysis feature

• AI-Driven Phishing Attacks Deceive Even the Most Aware Users

• Cyble Vision X covers the entire breach lifecycle

• Microsoft, Google widen passkey support for its users

• Rare Interviews with Enigma Cryptanalyst Marian Rejewski

• Investigation Uncovers Substantial Spyware Exports to Indonesia

• Microsoft Warns of ‘Dirty Stream’ Vulnerability in Popular Android Apps

• Horizon3.ai Introduces AI-Assisted Service to Prioritize and Patch Vulnerabilities Faster

• “Dirty stream” attack: Discovering and mitigating a common vulnerability pattern in Android apps

• Microsoft introduces passkeys for consumer accounts

• Apple Announces Record Share Buyback, Amid iPhone Sales Decline

• RSA Conference 2024 – Where it all started and where to find our team

• FortiGate 200G series boosts campus connectivity for Wi-Fi 7

• BlackBerry CylanceMDR improves cybersecurity defensive strategy

• New Guide Explains How to Eliminate the Risk of Shadow SaaS and Protect Corporate Data

• Cyber Security Headlines: Goldoon exploits D-Link, CISA GitLab warning, Dropbox Sign breach

• How Structured Cabling Can Help With Cyber Security Attacks

• Cybercriminals and Nation-State Actors Found Sharing Compromised Networks

• US Charges 16 Over ‘Depraved’ Grandparent Scams

• Indonesia is a Spyware Haven, Amnesty International Finds

• Essential Steps for Zero-Trust Strategy Implementation

• Lenovo launches AI-based Cyber Resiliency as a Service

• Nokod Security Platform secures low-code/no-code development environments and apps

• NSA, FBI Alert on N. Korean Hackers Spoofing Emails from Trusted Sources

• Attack Report: Custom QR Code Phishing Templates

• White House Issues National Security Memorandum for Critical Infrastructure

• Edgio ASM reduces risk from web application vulnerabilities

• Cyber Security Today, May 3, 2024 – North Korea exploits weak email DMARC settings, and the latest Verizon analysis of thousands of data breaches

• Vulnerability Scanning vs. Penetration Testing

• These Dangerous Scammers Don’t Even Bother to Hide Their Crimes

• U.S. Govt Warns of Massive Social Engineering Attack from North Korean Hackers

• NASA Doesn’t Know if Its Spacecraft Have Adequate Cyber Defenses, GAO Warns

• Ukrainian REvil Ransomware Affiliate Gets 13 Years in US Prison

• Gurucul REVEAL empowers organizations with full control over data

• The Crucial Role of Data in Sustainability

• Using Our Environmental Management System to Create a Sustainable Future

• Mal.Metrica Redirects Users to Scam Sites

• GUEST ESSAY: A primer on how, why ‘dynamic baselining’ fosters accurate DDoS protection

• Orum No Code Verify helps businesses validate bank accounts

• Why Cloud Vulnerabilities Need CVEs

• Essential programming languages to be learnt by Cybersecurity Professionals

• Threat Actors Renting Out Compromised Routers To Other Criminals

• Cisco IP Phone Vulnerability Let Attackers Trigger DoS Attack

• Google Announces Passkeys Adopted by Over 400 Million Accounts

• Microsoft issues cyber threat alert to Google on Vulnerable Mobile Apps

• New “Goldoon” Botnet Hijacking D-Link Routers to Use for Other Attacks

• Europol op shutters 12 scam call centers and cuffs 21 suspected fraudsters

• Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks

• Indonesia sneakily buys spyware, claims Amnesty International

• Ransom recovery costs reach $2.73 million

• Most companies changed their cybersecurity strategy in the past year

• 97% of security leaders have increased SaaS security budgets

• What is cybersecurity mesh architecture (CSMA)?

• New infosec products of the week: May 3, 2024

• Mitigating breaches on Red Hat OpenShift with the CrowdStrike Falcon Operator

• Simplify hybrid cloud operations with Red Hat Enterprise Linux 9.4

• Beyond the lingo: What does Red Hat Insights and FedRAMP mean for your workload?

• Chinese government website security is often worryingly bad, say Chinese researchers

• ISC Stormcast For Friday, May 3rd, 2024 https://isc.sans.edu/podcastdetail/8966, (Fri, May 3rd)

• Biden Signed the TikTok Ban. What’s Next for TikTok Users?

Generated on 2024-05-04 23:55:07.622637