IT Security News Daily Summary 2024-05-09

• How to inspire the next generation of scientists | Cybersecurity podcast

• Ex-White House election threat hunter weighs in on what to expect in November

• The Road to CTEM, Part 1: The Role of Validation

• Recent Breaches in Israel and Iran: A Closer Look at Cybersecurity Vulnerabilities

• TikTok To Label AI-Generated Content From Other Platforms

• No Country Should be Making Speech Rules for the World

• Why Reddit’s new content policy is a big win for your privacy

• Accenture Lands $789 Million Contract to Bolster U.S. Navy Cybersecurity

• Why Reddit’s new content policy is a big win for user privacy

• New Mexico Attorney General Blasts Facebook Again For Failing To Stop Child Exploitation

• US faith-based healthcare org Ascension says ‘cybersecurity event’ disrupted clinical ops

• Climate concerns: Personal advice on how to navigate eco-anxiety

• Cybersecurity Training and Cyber Insurance: Bridging the Gap with Continuous Improvement

• Massive Online Shopping Scam Racks Up 850,000 Victims

• New TunnelVision Attack Allows Hijacking of VPN Traffic via DHCP Manipulation

• RSAC: How CISOs Should Protect Themselves Against Indictments

• RSAC: Why Cybersecurity Professionals Have a Duty to Secure AI

• One in Four Tech CISOs Unhappy with Compensation

• A new alert system from CISA seems to be effective — now we just need companies to sign up

• GitHub takes aim at software supply chain security

• Dell discloses data breach impacting millions of customers

• Global attackers targeting US critical infrastructure should be ‘wake-up call’

• Dell customer order database of ’49M records’ stolen, now up for sale on dark web

• Dell Says Customer Names, Addresses Stolen in Database Breach

• London Drugs cyber attack: What businesses can learn from their week-long shutdown

• #RSAC: Why Cybersecurity Professionals Have a Duty to Secure AI

• Wordfence Intelligence Weekly WordPress Vulnerability Report (April 29, 2024 to May 5, 2024)

• Tesla Ordered To Provide NHTSA With Autopilot Recall Data

• Neuralink’s First Human Brain Implant Develops Malfunction

• FBI Warns US Retailers That Cybercriminals Are Targeting Their Gift Card Systems

• Answering Your Top 9 Questions About Monitoring in Kubernetes

• OpenAI and Stack Overflow Partnership: A Controversial Collaboration

• Crypto’s New Cybersecurity Initiative Led by Justine Bone

• #RSAC: How CISOs Should Protect Themselves Against Indictments

• Combatting foreign interference

• How Criminals Are Using Generative AI

• Network Security for Schools: Tools, Tips, And Best Practices

• Ascension suffers Cyber Attack

• Navigating the Future: Zero Trust and SSE in Cybersecurity Leadership Strategies

• The Top Four Things Tech Manufacturers can do to Bolster the Cybersecurity of Target-Rich, Cyber-Poor Organizations

• Graduation to Adulting: Navigating Identity Protection and Beyond!

• alpitronic Hypercharger EV Charger

• CISA Releases Four Industrial Control Systems Advisories

• Rockwell Automation FactoryTalk Historian SE

• Delta Electronics InfraSuite Device Master

• How Workforce Reductions Affect Cybersecurity Postures

• Kremlin-Backed APT28 Targets Polish Institutions in Large-Scale Malware Campaign

• New ‘LLMjacking’ Attack Exploits Stolen Cloud Credentials

• CrowdStrike Enhances Cloud Asset Visualization to Accelerate Risk Prioritization

• FBI Warns US Retailers That Cybercrimnals Are Targeting Their Gift Card Systems

• ‘Secure by design’ makes waves at RSA Conference 2024

• Dell discloses data breach of customers’ physical addresses

• Zscaler Investigates Hacking Claims After Data Offered For Sale

• TunnelVision DHCP Flaw Lets Attackers Bypass VPNs, Redirect Traffic

• UK Armed Forces’ Personal Data Hacked In MoD Breach

• LockBit Takes Credit For City Of Wichita Ransomware Attack

• AWS CloudQuarry: Digging For Secrets In Public AMIs

• CIOs and CFOs, two parts of the same whole

• Update: Boeing Confirms Attempted $200 Million Ransomware Extortion Attempt

• Criminal Use of AI Growing, But Lags Behind Defenders

• Chinese Attackers Deployed Backdoor Quintet to Down MITRE

• MITRE Links Recent Attack to China-Associated UNC5221

• Analyzing PDF Streams, (Thu, May 9th)

• How Data Fabric Architecture Helps Enhance Security Governance

• Microsoft Will Hold Executives Accountable for Cybersecurity

• Poland Says it was Targeted by Russian Military Intelligence Hackers

• With Nation-State Threats in Mind, Nearly 70 Software Firms Agree to Secure by Design Pledge

• Mobile Banking Malware Surges 32%

• Biden Admin Mulls Export Restrictions For AI Models – Report

• Social engineering in the era of generative AI: Predictions for 2024

• Generative AI is a Looming Cybersecurity Threat

• Empowering Indigenous Data Sovereignty: The TTP-Microsoft Partnership

• ASD’s ACSC, CISA, and Partners Release Secure by Design Guidance on Choosing Secure and Verifiable Technologies

• Mirai botnet also spreads through the exploitation of Ivanti Connect Secure bugs

• Security Tools Fail to Translate Risks for Executives

• LockBit Takes Credit for City of Wichita Ransomware Attack

• F5 fixes BIG-IP Next Central Manager flaws with public PoCs (CVE-2024-21793, CVE-2024-26026)

• Threat Actors Accessed Cancer Patients’ Data left Open by Testing Lab

• April 2024’s Most Wanted Malware: Surge in Androxgh0st Attacks and the Decline of LockBit3

• Five business use cases for evaluating Azure Virtual WAN security solutions

• Upgrade Your Cybersecurity With This VPN That’s Only $70 for Three Years

• Build a resilient network: What I learned from 5 thought leaders

• Mirai Botnet Exploits Ivanti Connect Secure Flaws for Payload Delivery

• Zscaler swats claims of a significant breach

• Threat Actors Accessed Cancer patients’ Data left Open by Testing Lab

• CISA Extends CIRCIA Rule Comment Period

• Quishing Campaign Exploits Microsoft Open Redirect Vulnerability

• BetterHelp Customers Begin Receiving Refund Notices From $7.8M Data Privacy Settlement, FTC Says

• CISA Announces CVE Enrichment Project ‘Vulnrichment’

• Ofcom Urges Tech Firms To Tame Toxic Algorithms

• Cyber Attack On Data Center Cooling Systems Leads To Disruption

• Report: 97% of Organizations Hit by Ransomware Turn to Law Enforcement

• AI-Powered Russian Network Pushes Fake Political News

• IntelBroker Hacker Leaks Alleged HSBC & Barclays Bank Data

• Zscaler is investigating data breach claims

• Fake E-commerce Network Scams $50M from American, European, Australian Shoppers

• Android App Security Alert: Proactive Measures to Prevent Unauthorized Control

• Mirai Botnet Exploits Ivanti Connect Secure Flaws for Malicious Payload Delivery

• New Guide: How to Scale Your vCISO Services Profitably

• Microsoft Passkey Authentication Now Available For Personal Accounts

• DocGo patient health data stolen in cyberattack

• F5 Patches Dangerous Vulnerabilities in BIG-IP Next Central Manager

• Cyber Security Headlines: Lockbit hit Wichita, AI export bans, Pathfinder on Intel

• Understanding the Zero-Trust Landscape

• SocGholish Attacks Enterprises Via Fake Browser Updates

• Pktstat: Open-Source Ethernet Interface Traffic Monitor

• FBI Warns of Gift Card Fraud Ring Targeting Retail Companies

• AuditBoard enhances InfoSec Solutions to reduce compliance fatigue across the organization

• How long does it take to crack a password in 2024?

• The Future of Phishing Email Training for Employees in Cybersecurity

• Data Classification Policy

• CISA starts CVE “vulnrichment” program

• Jack Dorsey Resigns From Bluesky Board, Calls X ‘Freedom Technology’

• Alert! Hackers Running Thousands of Fake Webshops : 850,000+ Cards Stolen

• APT trends report Q1 2024

• Silverfort Announces New Integration with Microsoft Entra ID EAM

• BigID equips security teams with AI-guided data security and risk remediation recommendations

• Secureworks Taegis NDR identifies malicious activity on the network

• Ransomware Criminals SIM Swap Executives’ Kids to Pressure Parents

• RSA Conference 2024 – Announcements Summary (Day 3)

• Critical Start adds multiple frameworks to Risk Assessments

• US Advances on Cyber Goals Amid Rapidly Changing Threat Environment, White House Says

• Crypto Mixer Money Laundering: Samourai Founders Arrested

• Veeam Fixes RCE Flaw in Backup Management Platform

• Two-Thirds of Organizations Failing to Address AI Risks, ISACA Finds

• AI Regulation in Finance: Steering the Future with Consumer Protection at the Helm

• Skyhigh Security boosts data protection measures with AI innovations

• Fake Online Stores Scam Over 850,000 Shoppers

• F5’s Next Central Manager Vulnerabilities Let Hackers Take Full Device Control Remotely

• Experts warn of two BIG-IP Next Central Manager flaws that allow device takeover

• Undetectable Threats Found in F5 BIG-IP Next Central Manager

• Zscaler Investigates Hacking Claims After Data Offered for Sale

• Polish Government Under Sophisticated Cyber Attack From APT28 Hacker Group

• Bangladesh IT Provider Database Compromise: 95k Email Addresses Leaked

• Critical F5 Central Manager Vulnerabilities Allow Enable Full Device Takeover

• How Nudge Security is useful in a merger or acquisition

• LockBit Ransomware Group demands $200 million ransom from Boeing

• Regulators are coming for IoT device security

• ISC Stormcast For Thursday, May 9th, 2024 https://isc.sans.edu/podcastdetail/8974, (Thu, May 9th)

• Global ransomware crisis worsens

• Why SMBs are facing significant security, business risks

• Ransomware attacks impact 20% of sensitive data in healthcare orgs

• Build Strong Information Security Policy: Template & Examples

• 3 CIS resources to help you drive your cloud cybersecurity

• Tappware – 94,734 breached accounts

• RSAC: Three Strategies to Boost Open-Source Security

• API Security and The Silent Menace of Unknown APIs

• What do Europeans, Americans and Australians have in common? Scammed $50M by fake e-stores

• CISA Announces Secure by Design Commitments from Leading Technology Providers

• Undersea cables must have high-priority protection before they become top targets

• IT Security News Daily Summary 2024-05-08

• Undersea cables are high-priority targets – it’s high time to make these global pathways more resilient

• IntelBroker Hacker Claims Breach of Top Cybersecurity Firm, Selling Access

• Facebook Accused Of Doing Nothing To Stop Taylor Swift Ticket Scams

• #RSAC: Three Strategies to Boost Open-Source Security

• Advantages of Adopting SOCaaS for Organizations

• Encrypted services Apple, Proton and Wire helped Spanish police identify activist

• US Patent and Trademark Office confirms another leak of filers’ address data

• LockBit gang claimed responsibility for the attack on City of Wichita

• Token Security Raises $7 Million Seed Funding for Machine-First Identity Security

• Ransomware Attacks are Up, but Profits are Down: Chainalysis

• Looking for reliable AI? Enkrypt identifies safest LLMs with new tool

• RSAC: Researchers Share Lessons from the World’s First AI Security Incident Response Team

• RSAC: CISA Launches Vulnrichment Program to Address NVD Challenges

• New TunnelVision technique can bypass the VPN encapsulation

• Big Vulnerabilities in Next-Gen BIG-IP

• Aembit Launches Terraform Provider to Enable Infrastructure as Code

• Implementing Zero Trust: Beyond Internal Network Models

• US Revokes Some Intel, Qualcomm China Export Licences – Report

• FTX To Repay Creditors In Full, $11 Billion

• SAFECOM Publishes 2024 SAFECOM Strategic Plan

• Desperate Taylor Swift Fans Defrauded by Ticket Scams

• Blackwell Security Raises $13M in Funding

• Shields Up: How to Minimize Ransomware Exposure

• FBI Investigates Thousands of Fake Emails Warning of Cyber Threat You Must Do 1 Thing

• Top FBI Official Urges Agents to Use Warrantless Wiretaps on US Soil

• Heimdal Welcomes Jesper Frederiksen as Its New Chief Executive Officer

• Akamai to Acquire Noname for $450 Million

• Debating the Risks and Realities of Artificial General Intelligence

• #RSAC: CISA Launches Vulnrichment Program to Address NVD Challenges

• How Does ANY RUN Sandbox Protect Enterprise Users By Utilizing Advanced Tools

• #RSAC: Researchers Share Lessons from the World’s First AI Security Incident Response Team

• LiteSpeed Cache Plugin XSS Vulnerability Affects 1.8M WordPress Sites

• Patch management vs. vulnerability management: Key differences

• What Can Go Wrong When Police Use AI to Write Reports?

• Free Speech Around the World | EFFector 36.6

• TrustRadius recognises KnowBe4 for fifth year running in Security Awareness Training

• BetterHelp Agrees to $7.8 Million Settlement for Health Data Sharing with 800,000 Users

• Talos discloses multiple zero-day vulnerabilities, two of which could lead to code execution

• How to prevent social media data leak

• EU Requests Content Moderation Data From X

• CISA boss: Secure code is the ‘only way to make ransomware a shocking anomaly’

• Six Austrians Arrested in Multi-Million Euro Crypto Scheme

• The best VPN for Mac in 2024: Expert tested and reviewed

• How Tech Can Help you Obtain a Building Passport: Net-Zero Building Certification Guide

• Press Release: OX Security and HCLSoftware Announce Strategic Partnership to Launch AppScan Supply Chain Security

• LAPD Website Unexpectedly Offline; Ransomware Ruled Out, Cause Unclear

• Chinese Hack Exposes Ministry Of Defence Payroll Data

• Go Beyond at Cisco Live with Cisco Customer Experience

• Secure Firewall & Multicloud Defense: Secure Connectivity With Simplified Policy Across Clouds

• Is Your iPhone at Risk? Understanding iPhone Spyware Issue

• New Spectre-Style ‘Pathfinder’ Attack Targets Intel CPU, Leak Encryption Keys and Data

• A SaaS Security Challenge: Getting Permissions All in One Place

• 10,000 Customers’ Data Exposed in UK Government Breaches

• Breaking down Microsoft’s pivot to placing cybersecurity as a top priority

• CISA Unveils New Public Service Announcement – We Can Secure Our World

• Findings Show MFA Bypass in Microsoft Azure Entra ID Using Seamless SSO

• Microsoft touts expansion of Secure Future Initiative

• 20+ Xiaomi Vulnerabilities Put Users’ Data and Devices at Risk

• Desperate Taylor Swift fans defrauded by ticket scams

• One year on, universities org admits MOVEit attack hit data of 800k people

• Free Workshop from Security Risk Advisors Empowers Organizations to Select Optimal OT Security Tools

• New Attack Renders Most VPN Apps Vulnerable

• SentinelOne Singularity Cloud Native Security simulates harmless attacks on cloud infrastructure

• Akamai Recognized as a Customers? Choice for Cloud WAAP for the 5th Year

• Expert Insight: ‘Minding the gap’: how can we work to make cyber accessible for women?

• Healthcare Cybersecurity Firm Blackwell Raises $13 Million

• New ‘TunnelVision’ Technique Leaks Traffic From Any VPN System

• News alert: Hunters announces full adoption of OCSF, introduces OCSF-native search

• Harnessing the Power of the Kraken: A Deep Dive into the Kraken Model of Innovation

• TikTok Ban — ByteDance Sues US to Kill Bill

• A (Strange) Interview With the Russian-Military-Linked Hackers Targeting US Water Utilities

• Fortinet and NATO’s Annual “Exercise Locked Shields” Cyber Wargames

• Overcoming Common Data Security Challenges

• Cado Security launches solution for forensic investigations in distroless container environments

• Attackers may be using TunnelVision to snoop on users’ VPN traffic (CVE-2024-3661)

• CrushFTP Vulnerability Exploited in Wild to Execute Remote Code

• Double Threat to WordPress- Patch Now to Stay Secure

• Stop Chasing Breaches: Build a Resilient Security Architecture

• 1-15 February 2024 Cyber Attacks Timeline

• CyberSaint releases NIST CSF Benchmarking Feature

• Is fear slowing down the adoption of self-driving cars?

• Apple ‘Let Loose’ Event Updates iPad Air, iPad Pro, Accessories

• Sophos vs. Palo Alto: Intercept X vs. Cortex XDR (Comparison, Reviews, And Alternatives)

• RSA Conference 2024 – Announcements Summary (Day 2)

• Android Update Patches Critical Vulnerability

• Brandywine Realty Trust Hit by Ransomware

• Assessing F Society’s Latest Ransomware Targets: Are They at Risk?

• Scattered Spider: Hackers Attacking Commercial Sectors, Cops Troubled

• Hackers Abuse Google Search Ads to Deliver MSI-Packed Malware

• LiteSpeed Cache WordPress plugin actively exploited in the wild

• BetterHelp to Pay $7.8 Million to 800,000 in Health Data Sharing Settlement

• Ghost Security Phantasm detects attackers targeting APIs

• UK opens investigation of MoD payroll contractor after confirming attack

• MITRE breach details reveal attackers’ successes and failures

• Traceable launches Generative AI API Security to combat AI integration risks

• Photos: RSA Conference 2024

• Cyber Security Headlines: LockBit ringleader indicted, DocGo cyberattack, UK military data compromise

• Hijack Loader Malware Employs Process Hollowing, UAC Bypass in Latest Version

• The Fundamentals of Cloud Security Stress Testing

• Registration Opens for International Cyber Expo 2024: Where Cyber Leaders Converge to Shape Tomorrow’s Defences

• Report: Log4J Still Among Top Exploited Vulnerabilities

• Certificate Lifecycle Management Best Practices

• MITRE and NVIDIA build AI supercomputer for federal agency use

• Cloudflare for Unified Risk Posture identifies cyber threats

• TikTok Sues To Halt US Divest Or Ban Law

• Veeam RCE Flaws Let Hackers Gain Access To VSPC Servers

• Salt Security Unveils First AI-Infused API Security Platform to Address Proliferation of GenAI Application Development

• University System of Georgia Says 800,000 Impacted by MOVEit Hack

• Inpher SecurAI protects the privacy of user inputs on large language models

• nodeQ launches PQtunnel to simplify the migration to PQC for both SMEs and large enterprises

• Forcepoint ONE Data Security simplifies data protection with zero-trust principles for all organizations

• Critical PDF.js & React-PDF Vulnerabilities Threaten Millions Of PDF Users

• A (Strange) Interview the Russian-Military-Linked Hackers Targeting US Water Utilities

• Most Tinyproxy Instances are potentially vulnerable to flaw CVE-2023-49606

• State of ransomware in 2024

• CyberSmart announces expansion into the Australian market with HAT Distribution partnership

• Update: MITRE Attributes the Recent Attack to China-linked UNC5221

• Ransomware Operations are Becoming Less Profitable

• Red Hat launches RHEL AI for streamlined GenAI model testing and deployment

• Theori unveils Xint to automate security operations in cloud and hybrid environments

• Stephen Khan Receives Infosecurity Europe Hall of Fame Award, to Deliver Keynote on Four Essential Attributes CISOs Need to Succeed

• Netcraft Announces New AI-Powered Innovations to Disrupt and Expose Criminal Financial Infrastructure

• Combatting Deepfakes in Australia: Content Credentials is the Start

• Scattered Spider Group a Unique Challenge for Cyber Cops, FBI Leader Says

• Eclypsium offers protection for GenAI hardware infrastructure

• Veeam fixes RCE flaw in backup management platform (CVE-2024-29212)

• AppOmni introduces ZTPM for enhanced cisibility in SaaS security

• A Third of Tech CISOs Are Unhappy With Their Income

• Cyber Security Today, May 8, 2024 – Alleged LockBit ransomware leader is identified, the gang makes false claims of new victims

• Hackers Employing Steganography Methods to Deliver Notorious RemcosRAT

• Hackers Actively Exploiting Ivanti Pulse Secure Vulnerabilities

• Price Drop: This Complete Ethical Hacking Bundle is Now $40

• Hackers Exploit LiteSpeed Cache Flaw to Create WordPress Admins

• ExtraHop releases AI tools to automate SOC workflows

• MedStar Health and DocGo Reveal Data Breaches

• ANSI and the International Society of Automation Explained

• Hey, You. Get Off of My Cloud

• Over 50,000 Tinyproxy Servers Vulnerable to Critical RCE Flaw

• Law Enforcement Agencies Identified LockBit Ransomware Admin and Sanctioned Him

• Forgepoint Capital boosts Nudge Security’s seed round

• AppViewX AVX ONE provides visibility, automation and control of certificates and keys

• New Relic introduces Secure Developer Alliance for enhanced security insights

• Hackers Exploiting LiteSpeed Cache Bug to Gain Full Control of WordPress Sites

• UK Ministry of Defense disclosed a third-party data breach exposing military personnel data

• Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight

• Liongard unveils Managed Attack Surface Solution for SMBs, mid-market, and enterprise clients

• Accenture partners with Mandiant to improve cybersecurity operations

• Bitwarden adds mobile passkey support for everyone

• Global Cybercrime Report 2024: Which Countries Face the Highest Risk?

• Relyance AI release Asset Intelligence and DSPM for data visibility and compliance

• Analyzing Synology Disks on Linux, (Wed, May 8th)

• Ransomware hackers calling parents from their Children mobile phone numbers

• Safeguarding Your Family: Strategies for Achieving Data Security

• Google Simplifies Two-Factor Authentication Setup Process

• 97% of organizations hit by ransomware turn to law enforcement

• Best API Security Product: Wallarm wins 2024 Cybersecurity Excellence Award

• Security tools fail to translate risks for executives

• ISC Stormcast For Wednesday, May 8th, 2024 https://isc.sans.edu/podcastdetail/8972, (Wed, May 8th)

• Cybersecurity jobs available right now: May 8, 2024

• Pktstat: Open-source ethernet interface traffic monitor

• From infosec to skunks, RSA Conference SVP spills the tea

• UnitedHealth’s ‘egregious negligence’ led to Change Healthcare ransomware infection

• The complexities of third-party risk management

• Kaseya Connect Global 2024 Day 3 Recap

• How workforce reductions affect cybersecurity postures

• UnitedHealth’s ‘egregious negligence’ led to Change Healthcare infection

• How to inspire the next generation of scientists | Unlocked 403: Cybersecurity podcast

• Detecting XFinity/Comcast DNS Spoofing, (Mon, May 6th)

• America’s War on Drugs and Crime will be AI powered, says Homeland Security boss

Generated on 2024-05-09 23:55:12.093536