IT Security News Daily Summary 2024-05-17

• Balancing generative AI cybersecurity risks and rewards

• Brothers Indicted for Stealing $25 Million of Ethereum in 12 Seconds

• Feds Bust N. Korean Identity Theft Ring Targeting US Firms

• Three cuffed for ‘helping North Koreans’ secure remote IT jobs in America

• A Former OpenAI Leader Says Safety Has ‘Taken a Backseat to Shiny Products’ at the AI Company

• How AI-driven patching could transform cybersecurity

• Three cuffed for ‘helping North Koreans’ secure remote IT jobs in US

• Cyber Security Today, Week in Review for Friday, May 17, 2024

• Three arrested for helping North Koreans to secure remote IT jobs in US

• How To Deploy HYAS Protect

• North Korea IT Worker Scam Brings Malware and Funds Nukes

• Two Santa Cruz students uncover security bug that could let millions do their laundry for free

• EFF to Court: Electronic Ankle Monitoring Is Bad. Sharing That Data Is Even Worse.

• How ID Scanning Apps Can Prevent Fraud

• EFF to Court: Electronic ankle monitoring is bad. Sharing that data is even worse.

• User Outcry as Slack Scrapes Customer Data for AI Model Training

• EFF Urges Ninth Circuit to Hold Montana’s TikTok Ban Unconstitutional

• Kinsing Hacker Group Exploits More Flaws to Expand Botnet for Cryptojacking

• RSAC 2024 reveals the impact AI is having on strengthening cybersecurity infrastructure

• Singing River Health System Suffers Major Data Breach, 895,000 Impacted

• Two students uncover security bug that could let millions do their laundry for free

• Is an Open-Source AI Vulnerability Next?

• Disadvantages of Cyber Insurance

• Breach Forums Admin ShinyHunters Claims Domain Reclaimed from FBI

• SEC to Require Financial Firms to Have Data Breach Incident Plans

• EU Probes Meta Over Its Provisions For Protecting Children

• Google Patches 3rd Chrome Browser Zero Day Inside Of A Week

• Microsoft Quick Assist Tool Abused For Ransomware Delivery

• Critical Flaw In AI Python Package Can Lead To System And Data Compromise

• Fortinet Contributes to World Economic Forum’s Strategic Cybersecurity Talent Framework

• In Other News: MediSecure Hack, Scattered Spider Targeted by FBI, New Wi-Fi Attack

• RSA Conference 2024: AI and the Future Of Security

• New Survey Finds a Paradox of Confidence in Software Supply Chain Security

• AI Enables the Return of Private Cloud

• Privacy and Security Risks in Chinese Electric Vehicles: Unraveling the Data Dilemma

• EU Widens Investigations Into Chinese Imports, Subsidies

• What AI Can Do Today in Cybersecurity – Top 8

• An overview of storage encryption for enterprises

• Healthcare company WebTPA discloses breach affecting 2.5 million people

• Lookback Analysis in ERP Audit

• Akamai?s Perspective on May?s Patch Tuesday 2024

• OWASP Dep-Scan: Open-Source Security and Risk Audit Tool

• Reddit Deal With OpenAI Gives ChatGPT Access To Content

• How a new wave of deepfake-driven cybercrime targets businesses

• May 2024 Patch Tuesday: Two Zero-Days Among 61 Vulnerabilities Addressed

• Falcon Fusion SOAR and Machine Learning-based Detections Automate Data Protection Workflows

• New CrowdStrike Capabilities Simplify Hybrid Cloud Security

• New Wi-Fi Vulnerability Exposes Users to Eavesdropping Attacks

• Critical Flaw in AI Python Package Can Lead to System and Data Compromise

• CISA Warns of Exploited Vulnerabilities in EOL D-Link Products

• Government Struggles with Low Arrest Rate Amidst 31 Lakh Cyber Fraud Complaints

• UK Councils Warn of Data Breach After Attack on Medical Supplier

• DDoS Attacks Against Life Sciences Organizations Likely to Rise

• Connect the Security Dots by CloudGuard Effective Risk Management

• Black Basta Ransomware Struck More Than 500 Organizations Worldwide

• City of Wichita disclosed a data breach after the recent ransomware attack

• New UK System Will See ISPs Benefit From Same Protections as Government Networks

• Cybersecurity Leaders Expect Their SOC Budgets to Grow, KPMG Finds

• China-Linked Hackers Adopt Two-Stage Infection Tactic to Deploy Deuterbear RAT

• New XM Cyber Research: 80% of Exposures from Misconfigurations, Less Than 1% from CVEs

• New Android Banking Trojan Mimics Google Play Update App

• Another PDF Streams Example: Extracting JPEGs, (Fri, May 17th)

• Accessing Secure Client Cloud Management after the SecureX EoL

• Cloud Security Incidents Make Organizations Turn to AI-Powered Prevention

• First LockBit, now BreachForums: Are cops winning the war or just a few battles?

• Microsoft Quick Assist Tool Abused for Ransomware Delivery

• New ‘Antidot’ Android Trojan Allows Cybercriminals to Hack Devices, Steal Data

• US exposes scheme enabling North Korean IT workers to bypass sanctions

• Get on Cybersecurity Certification Track With $145 Off These Courses

• CISA adds D-Link DIR router flaws to its Known Exploited Vulnerabilities catalog

• FBI Seizes BreachForums Website

• FCC Might Require Telecoms to Report on Securing Internet’s BGP Technology

• Ransomware Attacks Evolve as Average Ransom Demand Tops $1.26 Million

• How to Get a VAPT Certificate?

• Patient Data at Risk in MediSecure Ransomware Attack

• Microsoft Invests 4 Billion Euros In France For AI, Cloud

• ViperSoftX Malware Uses Deep Learning Model To Execute Commands

• New Linux Backdoor Attacking Linux Users Via Installation Packages

• Norway Recommends Replacing SSLVPN/WebVPN to Stop Cyber Attacks

• Critical Git Vulnerability Allows RCE When Cloning Repositories With Submodules

• Remote-Access Tools the Intrusion Point to Blame for Most Ransomware Attacks

• Cybersecurity News: Nissan NA breach, VMware Pwn2Own fix, GE Ultrasound flaws

• Cybersecurity Analysis Exposes High-Risk Assets in Power and Healthcare Sectors

• C/side Emerges From Stealth Mode With $1.7 Million Investment

• Woman Accused of Helping North Korean IT Workers Infiltrate Hundreds of US Firms

• CISA adds Google Chrome zero-days to its Known Exploited Vulnerabilities catalog

• GhostSec Announces Shift in Operations from Ransomware to Hacktivism

• Watch Out for Cyber Scams Impersonating Police

• The importance of access controls in incident response

• Kimsuky APT Deploying Linux Backdoor Gomir in South Korean Cyber Attacks

• Cyber Security Today, May 17, 2024 – Malware hiding in Apache Tomcat servers, new backdoors found, and more

• Unsafe Software Development Practices Persist, Despite CISA’s Push

• Threat Actors Misusing Quick Assist in Social Engineering Attacks Leading to Ransomware

• Us Offers $5 Million for Info on North Korean IT Workers Involved in Job Fraud

• Santander Data Breach: Hackers Accessed Company Database

• Restore Damaged Files & Save Your Business for Only $50

• North Korea-linked Kimsuky APT attack targets victims via Messenger

• Flaw in Wi-Fi-Standard can Enable SSID Confusion Attacks

• Kroll expands its document review capabilities to accelerate incident response

• CISA Warns of Actively Exploited D-Link Router Vulnerabilities – Patch Now

• U.S. Govt Announces Rewards up to $5 Million for North Korean IT Workers

• Critical Steps to Bolster UK’s Cyber Resilience: Insights for Policy Makers from Cisco’s Cyber Readiness Index

• Ongoing Malvertising Campaign leads to Ransomware

• GitLab unveils AI capabilities to help organizations better secure their software

• Russian APT Hackers Attacking Critical Infrastructure

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Know the least common PIN numbers that can thwart Cyber Threats

• 7 Essential Security Tips to Identify Fake Mobile Apps

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• The IT skills shortage situation is not expected to get any better

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Organizations struggle to defend against ransomware

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Too many ICS assets are exposed to the public internet

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• New infosec products of the week: May 17, 2024

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• ISC Stormcast For Friday, May 17th, 2024 https://isc.sans.edu/podcastdetail/8986, (Fri, May 17th)

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Crims abusing Microsoft Quick Assist to deploy Black Basta ransomware

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Efficient Document Merging Strategies for Professionals

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Electronic prescription provider MediSecure impacted by a ransomware attack

• How to do Penetration Testing effectively

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• HP Exposes Low-Effort, High-Impact Cat-Phishing Targeting Users

• Are all Linux vendor kernels insecure? A new study says yes, but there’s a fix

• Hackers Use Fake DocuSign Templates to Scam Organizations

• IT Security News Daily Summary 2024-05-16

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• CrowdStrike launches advanced SIEM to power the AI-native SOC at RSAC 2024

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• RSA Conference 2024: Embracing Responsible Radical Transparency

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Risks of GenAI Rising as Employees Remain Divided About its Use in the Workplace

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Four Reasons Why Assurance Is More Critical Than Ever

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Facebook Is Again Being Investigated Over Child Safety Concerns

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Toshiba Axes 4,000 Staff In Post-Delisting Restructuring Operation

• MIT Graduate Brothers Arrested for $25 Million Ethereum Heist

• Rounding up some of the major headlines from RSA

• CISA Publishes Encrypted DNS Implementation Guidance to Federal Agencies

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• #MIWIC2024 One To Watch: Valeen Oseh-Ovarah, Founder and CEO of TisOva

• VFCFinder Highlights Security Patches in Open Source Software

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• Exabeam Recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for SIEM, for the Fifth Year

• European Union Opens Child Safety Probe Into Meta

• Shadow IT: Personal GitHub Repos Expose Employee Cloud Secrets

• Palo Alto Networks and IBM Align Cybersecurity Strategies

• New Wi-Fi Vulnerability Enables Network Eavesdropping via Downgrade Attacks

• Millions Of IoT Devices Vulnerable To Attacks Leads To Full Takeover

• BreachForums seized! One of the world’s largest hacking forums is taken down by the FBI… again

• Brothers Arrested for $25 Million Theft in Ethereum Blockchain Attack

• Windows Quick Assist Exploited in Ransomware Attacks

• Cyber Attack news headlines trending on Google

• How do cybercriminals use artificial intelligence?

• Prepared Together – Cyber Storm IX Recap

• Google patches another zero-day exploit in Chrome – and this one affects Edge too

• What LockBitSupp charges mean for ransomware investigations

• Siemens Polarion ALM

• Siemens Parasolid

• CISA Releases Seventeen Industrial Control Systems Advisories

• Siemens Desigo Fire Safety UL and Cerberus PRO UL Fire Protection Systems

• Siemens Solid Edge

• Flock Safety’s solar-powered cameras could make surveillance more widespread

• Ireland privacy watchdog confirms Dell data breach investigation

• Hacker claims theft of India’s Samco account data

• Get Inspired and Go Beyond with Cisco Customer Experience at Cisco Live

• UK: NCSC to Defend ‘High-Risk’ Political Candidates from Cyberattacks

• EU probes Meta over its provisions for protecting children

• Enhance security with Sonatype Lifecycle and ServiceNow Application Vulnerability Response (AVR) integration

• The new Sonatype Learn: Self-service educational materials where and when you need them

• Digital Arrest Scam: Bengaluru Man Loses Rs 3.8 Crore to Scammers

• Digital diagnosis: Why are email security breaches escalating in healthcare?

• Microsoft Offering Relocation Out Of China For AI, Cloud Engineers

• RSA Conference 2024: Embracing Responsible, Radical Transparency

• SugarGh0st RAT Variant Used in Targeted AI Industry Attacks

• The Wordfence Affiliate Program Officially Launches Today

• The six rules of secure software development

• 7 application security startups at RSAC 2024

• GPT-4o Unveiled: A Game Changer For Security Experts (But With Caution)

• Siemens PS/IGES Parasolid Translator Component

• Siemens Simcenter Nastran

• Siemens SICAM Products

• Cisco and Nutanix: Taking Hyperconverged Infrastructure to the .NEXT Level

• Partners, Let’s Go Beyond Customer Experience at Cisco Live!

• Automated Policy-as-Code. Start Small. Think Big.

• Veeam Ransomware Protection with Red Hat Enterprise Linux as the Immutable Repository

• Android to Add New Anti-Theft and Data Protection Features

• Stifling Beijing in cyberspace is now British intelligence’s number-one mission

• Nissan Data Breach Impacts 53,000 Employees

• Legacy of Wisdom: Security Lessons Inspired by My Father

• Alkira Raises $100 Million for Secure Network Infrastructure Platform

• When it comes to threat modeling, not all threats are created equal

• 64% of Indian Firms Hit by Ransomware in the Last Year: Sophos

• Cyber Attack Disrupts Christie’s £670m Art Auctions

• Immutable Backups: Enhancing Data Resilience Through 5 Key Strategies

• Flock Safety’s solar-powered cameras could make surveilliance more widespread

• Google fixes seventh actively exploited Chrome zero-day this year, the third in a week

• BreachForums Seized By FBI For 2nd Time

• Intel Publishes 41 Security Advisories For Over 90 Vulnerabilities

• Crook Brags About US Army And $75b Defense Biz Pwnage

• Ransomware Attack On Nissan Results In Employee Data Loss

• Android 15 Brings Improved Fraud And Malware Protections

• Palo Alto Networks is Buying Security Assets From IBM to Expand Customer Base

• North Korean Hackers Exploit Facebook Messenger in Targeted Malware Campaign

• Wireshark 4.25 Released: A Look at the New Features for Network Analysis Enthusiasts

• Cisco’s Splunk Acquisition Should Help Security Pros See Threats Sooner in Australia and New Zealand

• Top 6 Active Directory Security Tools for Auditing, Monitoring & Protection

• Cisco Releases Security Updates for Multiple Products

• Integrating IT and Campus Facilities for Future-Ready Learning Space

• Most Companies Affected by Software Supply Chain Attacks in the Last Year, Struggling to Detect and React Effectively

• Cato Networks Partners with e& Further Expanding Global SASE Platform with New UAE PoP

• Deleted iPhone photos show up again after iOS update

• LockBit Ransomware Group Challenges FBI: Opens Contest to Find Dmitry Yuryevich

• 53,000 Employees’ Social Security Numbers Exposed in Nissan Data Breach

• out-of-band authentication

• 5 data security concepts you need to know

• Advanced Cyber Defence Systems Joins Elite Group in Signing CISA’s Secure by Design Pledge

• Researchers Discover 11 Vulnerabilities in GE Ultrasound Devices

• Cyber Trust Label Could be in Place by End of the Year, White House Says

• Android 15 Brings Improved Fraud and Malware Protections

• Wordfence Intelligence Weekly WordPress Vulnerability Report (May 6, 2024 to May 12, 2024)

• Will We Ever See Federal Data Breaches End Entirely?

• Apple Store Workers Vote To Strike Over Contract Talks Delay

• Alexa, Siri, Google Assistant vulnerable to malicious commands, study reveals

• Building a diverse and inclusive cyber workforce

• Apple and Google Join Forces to Stop Unwanted Tracking

• Unjammable Navigation System Successfully Tested in Airborne Trial

• CISO Confidence in AI Security Grows as GenAI Adoption Rises

• Enhancing Security with AI: Revolutionizing Protection in the Digital Era

• Scammers Fake DocuSign Templates to Blackmail & Steal From Companies

• Why yq? Adventures in XML, (Thu, May 16th)

• Talos releases new macOS open-source fuzzer

• IoT Cameras Exposed by Chainable Exploits, Millions Affected

• Scammers can easily phish your multi-factor authentication codes. Here’s how to avoid it

• Email Security Reinvented: How AI is Revolutionizing Digital Defense

• Tipping the Scales for DoD Cybersecurity with Prisma Access IL5

• Google Patches Third Exploited Chrome Zero-Day in a Week

• Alkira Raises $100M in Series C Funding to Simplify, Secure and Scale Critical Network Infrastructure

• Navigating Yesterday’s Battles: Insights from Cybersecurity Reports

• How to Analyze Malicious Scripts in a Sandbox

• 4 Cybersecurity Threats to Business

• Vulnerabilities In Cinterion Cellular Modems Threatened IoT And Industrial Devices

• Zero-Trust DNS

• Tornado Cash Co-Founder Convicted of Laundering $1.2 Billion by Dutch Court

• Palo Alto Networks Teams Up With IBM, Acquires QRadar SaaS Assets

• Personal Information Stolen in City of Wichita Ransomware Attack

• Master Third-Party Vendor Monitoring: Join Our Exclusive Webinar Hosted by Jonathan Care

• Critical Git vulnerability allows RCE when cloning repositories with submodules (CVE-2024-32002)

• Federal Court Orders Elon Musk To Testify In SEC Twitter Takeover Probe

• Public Sector IT is Broken: Turning the System Back On

• Adobe Fixed Multiple Critical Flaws in Acrobat and Reader

• Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines

• Apple Has Terminated 370 Million+ Developer & Customer Accounts

• Does a VPN Slow Down Your Internet Speed?

• Thoma Bravo’s LogRhythm merges with Exabeam in more cybersecurity consolidation

• Introduction to CISA’s Secure by Design Initiative

• Unmasking a Cyberattack that Targets Meta Business Accounts

• Russia-Linked Threats to Operational Technology

• Where Are Secure Web Gateways Falling Short?

• How to ​​empower the MSSP business with the Sekoia SOC platform?

• Payload Trends in Malicious OneNote Samples

• YouTube Blocks Hong Kong Protest Anthem After Court Order

• Business Intelligence: Next-Generation Data Analytics

• Cyber Pros Weigh an Intel-Sharing Quandary: What To Share When Attacks Hit Close to Home

• NCSC CTO: Broken market must be fixed to usher in new tech

• Threat actors misusing Quick Assist in social engineering attacks leading to ransomware

• Cybersecurity News: FBI seizes BreachForums, Android threat detection, US AI investment

• Santander: a data breach at a third-party provider impacted customers and employees

• SIEM Stalwart LogRhythm to Merge With Exabeam

• Third Chrome Zero-Day Patched by Google Within One Week

• UK Lags Europe on Exploited Vulnerability Remediation

• QakBot Malware Exploiting Windows zero-Day To Gain System Privileges

• Vmware Workstation & Fusion Flaws Let Attackers Execute Arbitrary Code

• VirusTotal’s Crowdsourced AI Initiative to Analyze Macros With Word & Excel Files

• FBI Seizes Criminal Site BreachForums

• Google fixes third exploited Chrome zero-day in a week (CVE-2024-4947)

• Nissan Data Breach – 53,000+ Employees Data Stolen

• BreachForums Hacking Marketplace Taken Down Again

• Tracking the Progression of Earth Hundun’s Cyberespionage Campaign in 2024

• Nissan Data breach – 53,000+ Employees Data Stolen

• Multifactor Authentication: Great tool with some limitations

• How Scammers Hijack Your Instagram

• BreachForums Shut Down in Apparent Law Enforcement Operation

• Palo Alto Networks partners with IBM to deliver AI-powered security offerings

• 5G home internet explained

• Hackers Tracking Victims with DNS Tricks

• PoC Exploit Released For D-LINK RCE Zero-Day Vulnerability

• Cybersecurity in Utilities: How the Utility Industry has Become a Pioneering Force in Cybersecurity Tech

• Google Android to lock screen of stolen smart phones with AI

• Cybereason announces the availability of Cybereason Mobile Threat Defense

• Is an open-source AI vulnerability next?

• Ebury botnet compromises 400,000+ Linux servers

• OWASP dep-scan: Open-source security and risk audit tool

• Cloud security incidents make organizations turn to AI-powered prevention

• Product showcase: Block ads, cookie pop-ups, trackers with CleanWeb

• Google Patches Yet Another Actively Exploited Chrome Zero-Day Vulnerability

• Cybercriminals Exploiting Microsoft’s Quick Assist Feature in Ransomware Attacks

• Wireshark 4.2.5 Released: What’s New!

• The critical role of IT staffing in strengthening cybersecurity

• In First AI Dialogue, US Cites ‘Misuse’ of AI by China, Beijing Protests Washington’s Restrictions

• ISC Stormcast For Thursday, May 16th, 2024 https://isc.sans.edu/podcastdetail/8984, (Thu, May 16th)

Generated on 2024-05-17 23:55:13.179606