IT Security News Daily Summary 2024-05-06

• Police resurrect LockBit’s site and troll the ransomware gang

• The waterproof Blink Mini 2 is the best Wyze Cam alternative available

• SSPM vs. CSPM: What’s the difference?

• Colorado Passes Law To Stop Facebook From Reading Your Thoughts

• Vulnerability Recap 5/6/24 – Aruba, Dropbox, GitLab Bugs

• How to Block a Program in a Firewall (Windows & Mac)

• VR may pose privacy risks for kids: A new study finds parents aren’t as worried as they should be

• RSA: Google Enhances its Enterprise SecOps Offerings With Gemini AI

• risk-based vulnerability management (RBVM)

• Mastodon delays fix for link previews DDoSing websites

• Vulnerability Summary for the Week of April 29, 2024

• RSAC: 70% of Businesses Prioritize Innovation Over Security in Generative AI Projects

• #RSAC: Law Enforcement Takedowns Force Ransomware Affiliates to Diversify

• Smart, Secure and Sustainable Manufacturing with Cisco + Splunk at Hannover Messe 2024

• Key Insights from the OpenText 2024 Threat Perspective

• AT&T Spins Out Its Cybersecurity Business to Create LevelBlue

• Fortinet Report Sees Faster Exploitations of New Vulnerabilities

• Boeing Starliner Set For First Crewed Flight After Delays

• Top 7 Multicloud Security Providers for 2024

• Google Steps Up The Battle Against Gmail Spam

• Google Debuts New Security Products, Hyping AI and Mandiant Expertise

• Germany Warns Russia: Hacking Will Have Consequences

• DHS, CISA Announce Membership Changes to the Cyber Safety Review Board

• Recorded Future observes ‘concerning’ hacktivism shift

• NiceCurl and TameCat Custom Backdoors Leveraged by Damselfly APT

• HijackLoader Evolves with New Evasion Techniques

• Belgium’s Aikido Lands $17M Series A for its Security Platform Aimed at Developers

• Randall Munroe’s XKCD ‘Software Testing Day’

• Consultant charged over $1.5M extortion scheme against IT giant

• Continuing to support cybersecurity teams with Award winning & innovative training in April

• Russian GRU Hackers Compromised German, Czech Targets

• The Evolution of Sports Fans: From Game Day to Experience Day

• BlackBasta Ransomware targets Synlab Italia

• cloud infrastructure entitlement management (CIEM)

• Splunk details Sqrrl ‘screw-ups’ that hampered threat hunting

• Police resurrect Lockbit’s site and troll the ransomware gang

• Android Flaw Exposes DNS Queries Despite VPN Kill Switch

• Microsoft Introduces Passkey Authentication for Personal Microsoft Accounts

• APT42 Hackers Posing As Event Organizers To Hijack Victim Network

• New Atomic Stealer Malware Copies Passwords & Wallets from Infected Macs

• EFF Zine on Surveillance Tech at the Southern Border Shines Light on Ever-Growing Spy Network

• Tracing what went wrong in 2012 for today’s teens, with Dr. Jean Twenge: Lock and Code S04E10

• Synopsys Sells Software Integrity Business in $2.1 Billion Deal

• USENIX Security ’23 – Remote Code Execution from SSTI in the Sandbox: Automatically Detecting and Exploiting Template Escape Bugs

• Experts Warn Criminals Could Exploit Jogging Apps for Targeting People

• $563 Bounty Awarded for Reflected Cross-Site Scripting Vulnerability Patched in Yoast SEO WordPress Plugin

• RSAC: Partners Make The Art of Possible, Possible

• City of Wichita hit by a ransomware attack

• Backdoor Malware: Iranian Hackers Disguised as Journalists

• Are Big Tech Companies Getting Rich from AI?

• Data of Domestic Violence Victims Leaked in ZircoDATA Hack

• Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution

• Best SIEM Tools List For SOC Team – 2024

• Why Your VPN May Not Be As Secure As It Claims

• Swimlane Marketplace simplifies automation for security teams

• VirusTotal’s Mission Continues: Sharing Knowledge, Protecting Together

• Beware of Phishing Attacks Targeting AmericanExpress Card Users

• StateRAMP: Understanding Authorization of Cisco’s Security Solutions

• MS Overhauls Cybersecurity Strategy After Scathing CSRB Report

• RSA Conference 2024: What To Expect

• What Palo Alto Networks and CrowdStrike Teach us About Using a Mobile Defense Platform

• Strengthening Cyber Defense with Threat Intelligence Operations

• CISA says ‘no more’ to decades-old directory traversal bugs

• New Cuttlefish Malware Hijacks Router Connections, Cloud Data Stolen

• China-Linked Hackers Suspected in ArcaneDoor Cyberattacks Targeting Network Devices

• Indonesia Emerging As A Hub For Highly Invasive Spyware

• What to know about hybrid data center security strategies

• IBM study shows security for GenAI projects is an afterthought

• Key Findings from the 2H 2023 FortiGuard Labs Threat Report

• Anetac Emerges From Stealth Mode With $16 Million in Funding

• CyberNut Emerges From Stealth With K-12 Security Awareness Training Solution

• Iranian Cyberspies Hit Targets With New Backdoors

• Identity, Credential Misconfigurations Open Worrying Security Gaps

• Tidal Cyber unveils customizations and integrations that improve data-driven defense

• Anomali introduces AI-powered Security Operations Platform

• #RSAC: 70% of Businesses Prioritize Innovation Over Security in Generative AI Projects

• Organizational Cybersecurity Hinges on End-User Satisfaction

• Critical Cybersecurity Loopholes Found in Paris 2024 Olympics Infrastructure

• New Gemini-powered Google Threat Intelligence platform fuses data from Mandiant, VirusTotal

• Gen AI innovation race is leading to security gaps, according to IBM and AWS

• Splunk Asset and Risk Intelligence accelerates security investigations

• Stanford AI Scientist Working On ‘Spatial Intelligence’ Start-Up

• Google, DOJ Closing Arguments Clash Over Search ‘Monopoly’

• Organizations Patch CISA KEV List Bugs 3.5 Times Faster Than Others, Researchers Find

• Apple’s iPhone Spyware Problem Is Getting Worse. Here’s What You Should Know

• Cisco & Splunk: A Complete SOC Platform Purpose-Built for the AI-Driven Future

• Cisco Hypershield – Our Vision to Combat Unknown Vulnerabilities

• Outshift Leads the Way with AI at RSA Conference 2024

• El Salvador suffered a massive leak of biometric data

• Finland Warns of Android Malware Attacks Breaching Bank Accounts

• Tracking CVE-2024-2876: Why does the latest WordPress exploit compromise over 90,000 websites?

• NinjaOne platform enhancements help security teams identify potential vulnerabilities

• It Costs How Much?!? The Financial Pitfalls of Cyberattacks on SMBs

• New Lawsuit Attempting to Make Adversarial Interoperability Legal

• Law Enforcement Seized LockBit Group’s Website Again

• Ransom Recovery Costs Reach $2.73 Million

• Cybersecurity M&A Roundup: 33 Deals Announced in April 2024

• US Cyber Command Appoints Morgan Adamski as Executive Director

• BlackBasta claims Synlab attack, leaks some stolen documents

• Cyber Security Headlines: Neuberger proposes improvements, Olympic cybersecurity preparations, North Korea DMARC warning

• Hackers Use Custom Backdoor & Powershell Scripts to Attack Windows Machines

• LayerX Raises $26 Million for its Browser Security Platform

• Proofpoint enhances email security with pre-delivery social engineering and link protection

• Xiaomi Android Devices Hit by Multiple Flaws Across Apps and System Components

• Financial cyberthreats in 2023

• Biden Vetoes Republican Measure In Row Over Contractors’ Unions

• Apple Shares Surge Ahead Of New AI Hardware Launches

• Europe’s Most Wanted Teenage Hacker Arrested

• Microsoft, Google Widen Passkey Support for Its Users

• Cisa Warned 1,750 Organizations of Ransomware Vulnerabilities Last Year. Only Half Took Action.

• Permira to Acquire Majority Stake in BioCatch at $1.3 Billion Valuation

• City of Wichita Shuts Down Network Following Ransomware Attack

• Cyber Security Today, May 6, 2024 – Ransomware gang claims responsibility for attacking Italian healthcare service, Russian gang blamed for attacks in Europe, and more

• Russia-Linked APT28 and Crooks are Still Using the Moobot Botnet

• European Raids Shut Down Call Centers Used to ‘Shock and Cheat’ Victims

• A week in security (April 29 – May 5)

• Taylor Swift tickets – how not to be scammed

• London Black Cabs Sue Uber In Latest Legal Tangle

• Lawyers Say Strict Child Controls In China Show TikTok Could Do Better

• New ‘Cuckoo’ Persistent macOS Spyware Targeting Intel and Arm Macs

• McAfee and Intel collaborate to combat deepfakes with Deepfake Detector

• Ensuring Privacy in the Age of AI: Exploring Solutions for Data Security and Anonymity in AI

• The Impact of NIST SP 800-171 on SMBs

• Finland authorities warn of Android malware campaign targeting bank users

• Electric Vehicle Turned Away From Hospital Car Park

• Crypto Recovery Scams – And How They Add Insult to Injury

• Linksys Router Flaw Let Attackers Perform Command Injection, PoC Released

• Tinyproxy Flaw Let Attackers Execute Remote Code

• Understanding GitGuardian’s Self-Hosted Solution

• KnowBe4 to acquire Egress Email Security

• Dealing with Stolen Data in Ransomware Attacks: A Comprehensive Guide

• Using MITM to bypass FIDO2 phishing-resistant protection

• Strategies for preventing AI misuse in cybersecurity

• How to prepare for the CISSP exam: Tips from industry leaders

• Organizations go ahead with AI despite security risks

• How MFA can improve your online security

• Privacy requests increased 246% in two years

• Germany points finger at Fancy Bear for widespread 2023 hacks, DDoS attacks

• eBook: CISSP fundamentals in focus

• ISC Stormcast For Monday, May 6th, 2024 https://isc.sans.edu/podcastdetail/8968, (Mon, May 6th)

• Ransomware drama: Law enforcement seized Lockbit group’s website again

• Top 9 Compliance Automation Software in 2024

• Celebrating our 12th Anniversary at RSA conference 2024

• Fully Offline Electronic Cash: Is It an Intractable Problem?

• IT Security News Weekly Summary – Week 18

• IT Security News Daily Summary 2024-05-05

• USENIX Security ’23 – A Bug’s Life: Analyzing the Lifecycle and Mitigation Process of Content Security Policy Bugs – Distinguished Paper Award Winner

• Don’t Overlook the Cyber Risks for Operational Technology

• Lineaje Tackles Open-Source Management with New Solution

• The Quantum Security Challenge: Data Resilience Around the Unknown

• AI Could Transform Detection and Response as Legacy MDRs Lack

• Report: Spanish Authorities Discover CPF Nomination Note on iPad of Slain Singaporean Woman in Spain

• Hackers are Targeting Routers Across the Globe

• NATO and the EU formally condemned Russia-linked APT28 cyber espionage

• Offensive Awakening: The 2024 Shift from Defensive to Proactive Security

• End-to-end encryption may be the bane of cops, but they can’t close that Pandora’s Box

• Security Affairs newsletter Round 470 by Pierluigi Paganini – INTERNATIONAL EDITION

• Navigating the Digital Age: AI’s Crucial Role in Cybersecurity Reinforcement

• CISA Ask Companies to Fix Path Traversal Vulnerabilities

• NSW Cybercrime Squad Arrests Suspect in Million-Person Data Breach Case

• GenAI Continues to Dominate CIO and CISO Conversations

• RSAC 2024 Innovation Sandbox | Reality Defender: Deepfake Detection Platform

• Insect Farmers Embrace AI to Drive Down Production Costs

• Week in review: PoCs allow persistence on Palo Alto firewalls, Okta credential stuffing attacks

• nslookup’s Debug Options, (Sun, May 5th)

Generated on 2024-05-06 23:55:07.264869