IT Security News Monthly Summary – June

• IT Security News Daily Summary 2023-05-31

• Crypto Discord Communities Targeted by Malicious Bookmarks & JavaScript

• Never Use Credentials in a CI/CD Pipeline Again

• US deploys tech diplomacy to cultivate leadership in emerging fields

• DHS faces slow disaster response burdened by legacy systems, officials warn

• 8 best practices for securing your Mac from hackers in 2023

• Yet Another Toyota Cloud Data Breach Jeopardizes Thousands of Customers

• Experts warn of backdoor-like behavior within Gigabyte systems

• Decoding eBPF Observability: How eBPF Transforms Observability as We Know It

• Machine Learning Applications in the Cybersecurity Space

• Serious Security: That KeePass “master password crack”, and what we can learn from it

• British Healthcare System Accused Of Sharing Intimate Patient Details With Facebook Without Consent

• Can Cloud Services Encourage Better Login Security? Netflix’s Accidental Model

• The Right to Repair Is Law in Minnesota. California Should Be Next

• Debt ceiling politics could derail plans for modernizing unemployment benefits delivery

• MacOS ‘Migraine’ Bug: Big Headache for Device System Integrity

• Ways to Help Cybersecurity’s Essential Workers Avoid Burnout

• Shadow Data Concerns, Public Cloud Breaches Remain Sky-High: Here’s How Organizations Can Protect Themselves

• AI and China are ‘defining challenges of our time,’ CISA director says

• NASA team’s plan to decode UFO sightings hinges on better data

• Amazon Staff Walkout Over Environment, Return To Office Policies

• Draft AI Code Drafted Within Weeks – EU Official

• Phishing defense, one simulated email at a time

• Barracuda Email Security Gateways bitten by data thieves

• Barracuda zero-day bug exploited months prior to discovery

• Top 5 Application Security Tools & Software for 2023

• Organizations Warned Of Backdoor In Hundreds Of Gigabyte Motherboards

• Criminals spent 10 days in US dental insurer’s systems extracting data of 9 million

• How agencies can automate data extraction at scale

• Bitdefender GravityZone Security for Mobile provides protection against mobile attack vectors

• Rezilion Smart Fix improves software supply chain security

• Bitdefender Introduces GravityZone Security for Android, iOS, and Chromebook

• 10 ways to speed up your internet connection today

• The best VPN trials of 2023: Top VPNs to test for free

• 6 Best Bot Protection Solutions and Software for 2023

• Checkmarx Announces GenAI-powered AppSec Platform, Empowering Developers and AppSec Teams to Find and Fix Vulnerabilities Faster

• Investment May Be Down, but Cybersecurity Remains a Hot Sector

• Apple’s iOS 16.5 Fixes 3 Security Bugs Already Used in Attacks

• Cybercriminals Targeting Apache NiFi Instances for Cryptocurrency Mining

• Warning! WordPress Plugin ”Gravity Forms” Vulnerable to PHP Object Injection

• Adding Chrome Browser Cloud Management remediation actions in Splunk using Alert Actions

• Vulnerability Summary for the Week of May 22, 2023

• Buy-Now-Pay-Later (BNPL) is Revolutionising the E-Commerce Landscape

• New Mexico trying to build and train new workforce for broadband expansion

• New “Migraine” Flaw Enables Attackers to Bypass MacOS Security

• New eID Scheme Gives EU Citizens Easy Access to Public Services Online

• Software Liability And Hard Truths Of Manufacturer Responsibility

• Critical Barracuda 0-Day Was Used To Backdoor Networks For 8 Months

• Cyberwar Manufacturers Plot To Stay On Right Side Of US

• XFS Bug In Linux Kernel 6.3.3 Coincides With SGI Code Comebank

• Solar Panels at Risk of Cyber Attacks, warn Experts

• SeroXen RAT for sale

• Phishing-resistant MFA 101: What you need to know

• Twitter Sued By Janitors, As Musk Meets Chinese Officials

• Were you caught up in the latest data breach? Here’s how to find out

• SpinOk Trojan Compromises 421 Million Android Devices

• Virginia ABC officials say they’ve ‘automated’ liquor lotteries to prevent future errors

• Organizations Warned of Backdoor Feature in Hundreds of Gigabyte Motherboards

• Chrome 114 Released With 18 Security Fixes

• IDSA: Only 49% of Firms Invest in Identity Protection Before Incidents

• Mirai Variant Opens Tenda, Zyxel Gear to RCE, DDoS

• A Roadmap for Becoming a Penetration Tester in 2023

• Here’s How Quantum Computing can Help Safeguard the Future of AI Systems

• Critical Firmware Vulnerability in Gigabyte Systems Exposes ~7 Million Devices

• Chinese Hacking of US Critical Infrastructure

• Salt Security Attains AWS Security Competency Status

• 3 ways to spot a malware-infected app on your smartphone

• Threatening botnets can be created with little code experience, Akamai finds

• Threat actors are exploiting Barracuda Email Security Gateway bug since October 2022

• PingSafe helps organizations securely deploy containers with KSPM module

• ConnectSecure enhances its cybersecurity platform with deep attack surface scanning and EPSS

• Someone is roping Apache NiFi servers into a cryptomining botnet

• Permit.io launches FoAz to give frontend developers the keys to security

• NYC’s Metropolitan Opera Faces Lawsuit for 2022 Data Breach

• The pros and cons of the debt deal for states and localities

• Focus Security Efforts on Choke Points, Not Visibility

• Beware of Ghost Sites: Silent Threat Lurking in Your Salesforce Communities

• Critical Firmware Backdoor in Gigabyte Systems Exposes ~7 Million Devices

• AI: the cause of the metaverse’s demise?

• AI Leaders Warn Of ‘Extinction’ Risk To Humans

• Shut Down Phishing Attacks – Types, Methods, Detect, Prevention Checklist

• Critical Jetpack WordPress Flaw Exposes Millions of Website

• XFS bug in Linux kernel 6.3.3 coincides with SGI code comeback

• Millions of Gigabyte Motherboards Were Sold With a Firmware Backdoor

• Swiss real estate agency Neho fails to put a password on its systems

• When the popular safeguarding tool is anything but

• PyPI Enforces the Usage of Two-factor Authentication for All Software PUBLISHES

• This Campaign Delivers Three Malware Via Pirated Software Videos On YouTube

• Many Gigabyte PC models affected by major supply chain issue

• Salesforce ‘Ghost Sites’ Expose Sensitive Corporate Data

• Netskope integrates with AWS to simplify security data management

• Zyxel patches vulnerability in NAS devices (CVE-2023-27988)

• PingOne Protect prevents account takeover

• Hitachi Data Reliability Engineering improves the consistency of business-critical data

• 1Password tightens the thumbscrews for users of the old version of the password manager

• Spyware Found in Google Play Apps With Over 420 Million Downloads

• Breaking Enterprise Silos and Improving Protection

• 6 Steps to Effective Threat Hunting: Safeguard Critical Assets and Fight Cybercrime

• Microsoft Details Critical Apple macOS Vulnerability Allowing SIP Protection Bypass

• China Urges Japan To Drop Chip Export Restrictions

• Danni Brooke to Spotlight the Role of Women in Cyber at Infosecurity Europe 2023

• Nvidia Briefly Hits $1 Trillion Valuation

• Mirantis Lens Control Center simplifies secure Kubernetes deployments

• How APTs target SMBs

• MacOS Vulnerability Enables Hackers to Bypass SIP Root Restrictions

• Hackers Can Bypass Fingerprint Locks On Phones With BrutePrint Attack

• Investigating BlackSuit Ransomware’s Similarities to Royal

• Barracuda Zero-Day Exploited to Deliver Malware for Months Before Discovery

• Millions of WordPress Sites Patched Against Critical Jetpack Vulnerability

• Dark Pink APT Group Leverages TelePowerBot and KamiKakaBot in Sophisticated Attacks

• Cybersecurity Standards in the Banking Industry

• The Issue of Insider Threats: What you Need to Know

• Learn how to protect your company from cyberattacks for just $46

• Pentagon Cyber Policy Cites Learnings from Ukraine War

• Affiliate Marketing Meets Tech: Conferences Every Tech Geek Should Have On Their Radar

• How To Fulfil Your Dream Of Becoming A Digital Nomad In Australia

• Thinking straight in the SoC: How AI erases cognitive bias

• WordPress Rushes Out Jetpack Patch to Millions

• Centripetal Extends Innovative CleanINTERNET® Technology to the Cloud

• Dark Pink APT Group Expands Tooling and Targets

• RomCom RAT Using Deceptive Web of Rogue Software Sites for Covert Attacks

• Microsoft found a new bug that allows bypassing SIP root restrictions in macOS

• Kali Linux 2023.2 released: New tools, a pre-built Hyper-V image, a new audio stack, and more!

• Why performing security testing on your products and systems is a good idea

• UberEats to use 2000 AI powered robots for delivery by 2026

• The Transformative Power of Artificial Intelligence in Healthcare

• Alert: Hackers Exploit Barracuda Email Security Gateway 0-Day Flaw for 7 Months

• The strategic importance of digital trust for modern businesses

• Attackers leave organizations with no recovery option

• Organizations are placing OT cybersecurity responsibility on CISOs

• Managing mental health in cybersecurity

• RaidForums – 478,604 breached accounts

• A.I. poses human extinction risk on par with nuclear war, Sam Altman and other tech leaders warn

• Kali Linux 2023.2 Released – What’s New!

• Spotlight on 2023 Dan Kaminsky Fellow: Dr. Gus Andrews

• BackBox Launches Cisco CIS Benchmark Automation Templates

• Discord Admins Hacked by Malicious Bookmarks

• Barracuda Networks patches zero-day vulnerability in Email Security Gateway

• Polish Credentials – 1,204,870 breached accounts

• 1. This crypto-coin is called Jimbo. 2. $8m was stolen from its devs in flash loan attack

• Reduce Healthcare Insider Threats with Identity and Access Management

• 90+ orgs tell Slack to stop slacking when it comes to full encryption

• How Generative AI Will Remake Cybersecurity

• Ransomware Takes No Prisoners

• Web3 Needs A Truly Decentralized Infrastructure That IPFS Alone Cannot Deliver

• BlackCat (ALPHV) Ransomware Levels Up for Stealth, Speed and Exfiltration

• Human-Assisted CAPTCHA-Cracking Services Supercharge Shopper Bots

• IT Security News Daily Summary 2023-05-30

• Clean energy advancements hinge on steady funding, Energy official says

• Unmonitored networks put US nuclear arsenal at risk, GAO finds

• Windows 11: Enforcing password resets for local group users

• 421M Spyware Apps Downloaded Through Google Play

• Go Phish: How Attackers Utilize HTML Files to Evade Security

• SimpleTire Database Leak: Over 2.8 Million Records Exposed

• State looks to better assess vendor security

• IoT network streamlines state DOT traffic monitoring

• Agencies launch initiative to better identify minority-owned contractors

• Google offers certificate in cybersecurity, no dorm room required

• The Rush to SaaS Modernization Can Result in Reputational Damage

• Tenet and LayerZero Forge Cross-Chain LSD Adoption

• Debt limit deal would save feds’ paychecks, but freeze agency spending

• Federal Judge Makes History in Holding That Border Searches of Cell Phones Require a Warrant

• Pegasus-pusher NSO gets new owner keen on the commercial spyware biz

• The Perfect Blend: Qdoba’s SASE Information

• Vendors: Threat actor taxonomies are confusing but essential

• PyPI enforces 2FA authentication to prevent maintainers’ account takeover

• The Challenges with Passkeys: Addressing Limitations

• Authorization: Get It Done Right, Get It Done Early

• Budget and tech challenges loom over IRS’s direct file pilot

• GOP-led states plan new voter data systems to replace one they rejected

• Serious Security: Verification is vital – examining an OAUTH login bug

• Undetected Attacks Against Middle East Targets Conducted Since 2020

• Attackers hacked Barracuda ESG appliances via zero-day since October 2022

• EU’s Proposed Cyber Resilience Act Raises Concerns for Open Source and Cybersecurity

• Elon Musk Withdraws Twitter from EU’s Disinformation Code of Practice

• 9M Dental Patients Affected by LockBit Attack on MCNA

• New macOS vulnerability, Migraine, could bypass System Integrity Protection

• Telesign Trust Index a call to action for any enterprise that’s discounting cybersecurity

• Human Error Fuels Industrial APT Attacks, Kaspersky Reports

• Nigerian Cybercrime Ring’s Phishing Tactics Exposed

• CERN Spots Strange Higgs Boson Decay Breaking The Rules

• ABB Confirms Data Stolen In Black Basta Ransomware Attack

• Artificial Intelligence Could Lead To Extinction, Experts Warn

• Hacker Wins $105k For Reporting Flaws In Sonos One Speakers

• Introduction to the purpose of AWS Transit Gateway

• Warning: Lazarus Targets Windows IIS Web Servers For Initial Access

• Things ChatGPT cannot but Google Bard can do

• DogeRAT Malware Impersonates BFSI, Entertainment, E-commerce Apps

• Facebook Under Pressure For Allowing Racist Content To Spread In Australia

• ‘Hot Pixel’ Attack Exploits Novel GPUs and SoCs to Siphon Browsing History

• Raidforums Database Leak: Data of 460,000 Users Dumped Online

• How Web3 Is Driving Social and Financial Empowerment

• Now Social Engineering Attackers Have AI. Do You?

• PCI DSS 4.0: How to Delight the Auditors

• How Large is Your Target? Advice for the Smallest Businesses

• A database containing 478,000 RaidForums members leaked online

• RaidForums Members Data Leaked on New Hacking Forum

• Promoting Trust in Facial Recognition: Principles for Biometric Vendors

• Void Rabisu’s Use of RomCom Backdoor Shows a Growing Shift in Threat Actors’ Goals

• China Approves Microsoft-Activision Deal ‘Unconditionally’

• Incident Response Guide

• Many Vulnerabilities Found in PrinterLogic Enterprise Software

• Personal Information of 9 Million Individuals Stolen in MCNA Ransomware Attack

• PyPI Enforcing 2FA for All Project Maintainers to Boost Security

• Pentagon Leaks Emphasize the Need for a Trusted Workforce

• Why Attackers Target the Gaming Industry

• TenSec 2019

• Exploiting Wi-Fi Stack on Tesla Model S

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• Tencent Security Keen Lab: Experimental Security Assessment of Mercedes-Benz Cars

• Nvidia Set To Surpass $1tn As AI Surge Continues

• Google CTF 2023 – Rewards over $32,000 For Winners

• Implementing Risk-Based Vulnerability Discovery and Remediation

• CAPTCHA-Breaking Services with Human Solvers Helping Cybercriminals Defeat Security

• Hackers Win $105,000 for Reporting Critical Security Flaws in Sonos One Speakers

• Is Your Organization Prepared Against Insider Threats?

• Enhancing Collaboration and Efficiency in DataOps With Git

• Demystifying SPF Record Limitations

• Frontegg launches entitlements engine to streamline access authorization

• Tricks of the trade: How a cybercrime ring operated a multi‑level fraud scheme

• Operation Red Deer

• Facebook Shares Private Information With NHS Trusts

• Laravel vs. Django: A Head-to-Head Comparison

• Bitcoin Trades At Steep Discount On Binance Australia

• Check Point offers new OffSec course via the MIND Learning and Training Portal

• Ransomware Gangs Adopting Business-like Practices to Boost Profits

• Beware of the new phishing technique “file archiver in the browser” that exploits zip domains

• To Save the News, We Must Ban Surveillance Advertising

• Play-to-Earn Games: A Beginner’s Guide

• Samsung ‘Pushes For Tax Payouts’ In Vietnam

• Get 9 cybersecurity courses for just $46

• April 2023 Cyber Attacks Timeline

• Crypto Bosses Look To China Ahead Of Hong Kong Rules

• The Right Help Desk for You: Is It That Complicated?

• Dark Web Data Leak Exposes RaidForums Members

• BrutePrint Attack allows to unlock smartphones with brute-forcing fingerprint

• A Comprehensive Guide to Online Gaming Withdrawals in Michigan

• Pension Funds Warn Members Over Capita Breach

• Disaster recovery in the cloud

• Retailer Database Error Leaks Over One Million Customer Records

• Nine Million MCNA Dental Customers Hit by Breach

• Amazon Offers Term Time-Only Working Amidst Strikes

• The Gravitational Pull of Data

• Sneaky DogeRAT Trojan Poses as Popular Apps, Targets Indian Android Users

• What Are the Key Trends in Cybersecurity Right Now?

• The root causes of API incidents and data breaches

• Need to improve the detection capabilities in your security products?

• Podcast Episode: Who Inserted the Creepy?

• Nvidia Builds AI Supercomputer In Israel Amidst Surging Demand

• Cybersecurity news headlines trending on Google

• New Phishing Attack Abuses .Zip Domain to Emulate Fake WinRAR Within the Browser

• Organizations spend 100 hours battling post-delivery email threats

• Generative AI: The new attack vector for trust and safety

• Penetration tester develops AWS-based automated cracking rig

• DOD submits classified cyber strategy to Congress

• A week in security (May 22-28)

• 2023-05-29 – Pcap and malware for ISC Diary (ModiLoader/Remcos RAT)

• IT Security News Daily Summary 2023-05-29

• Lockbit ransomware attack on MCNA Dental impacts 8.9M individuals

• GitLab Released Emergency Fix For Critical Vulnerability – Update Now!

• Android Phone Hacked by ‘Daam’ Virus, Government Warns

• Chinese-Sponsored Hacking Group Targeting Critical U.S. Infrastructure, Microsoft Claims

• The Media & Entertainment Industries’ Major Public Cloud Security Issues

• Invicta Malware Delivered Through Fake GoDaddy Refund Invoices

• The Top 10 endpoint security challenges and how to overcome them

• The Future of Data Security: Staying Ahead of AI Threats

• XSS Flaw Riddled Beautiful Cookie Consent Banner WP Plugin

• New BrutePrint Attack Lets Attackers Unlock Smartphones with Fingerprint Brute-Force

• How to make sure the reputation of your products and company is good

• US Augusta City targeted by BlackByte Ransomware Group

• New Phishing Kit: File Archivers in the Browser

• Nvidia Builds AI Supercomputer In Israeli Amidst Surging Demand

• Comparing Cloud Hosting vs. Self Hosting

• New Go-written GobRAT RAT targets Linux Routers in Japan

• Is Cybersecurity An Unsolvable Problem?

• OneMain Pays $4.5M After Ignored Security Flaws Caused Data Breaches

• AI Opinion: I Do Not Think Ethical Surveillance Can Exist

• Senator Wyden Seems Surprised By US Govt Spyware Stance

• Arm Rolls Out Next-Gen Smartphone Chip Tech

• Data Breach at MCNA Dental Insurer Impacts 9 Million Users

• Kyocera AVX: Electronic Manufacturer Company the Current Target of LockBit

• Free VPN Experiences Massive Data Breach, Putting Users at Risk

• Jimbos Protocol Hack: $7.5 Million Lost in Latest DeFi Attack

• Researchers analyzed the PREDATOR spyware and its loader Alien

• New Mirai Variant Campaigns are Targeting IoT Devices

• Top Cyberattacks Revealed in New Threat Intelligence Report

• 3 Challenges in Building a Continuous Threat Exposure Management (CTEM) Program and How to Beat Them

• AceCryptor: Cybercriminals’ Powerful Weapon, Detected in 240K+ Attacks

• Foxconn Raises Pay At Key China iPhone Plant

• China ‘To Put Humans On Moon’ By 2030

• Gaming Popularity Reaching Transcendental Status

• New Bandit Malware Attacks Browsers to Steal Personal & Financial Logins

• Why is Montana banning TikTok?

• Lawyer Submits Brief With False ChatGPT-Generated References

• The Royal & BlackCat Ransomware: What you Need to Know

• A Brief Introduction to the World of IP Addresses

• New GobRAT Remote Access Trojan Targeting Linux Routers in Japan

• Twitter Quits EU Code Of Practice On Disinformation

• Tech-Driven House Hunting: How Technology is Revolutionizing the Rental Search Process

• Online Marketing Essentials: Budgeting and Strategy for Growing Businesses

• 5 Ways Technology is Simplifying the Certificate of Conduct Application Process

• Main Features of World of Warcraft Wrath of the Lich King

• Singapore Wealth Fund Cuts Pay Amidst FTX Fallout

• Protecting your business: Advice to SMB CEOs from a former CIO

• Software developers, how secure is your software?

• Don’t Click That ZIP File! Phishers Weaponizing .ZIP Domains to Trick Victims

• Attackers use encrypted RPMSG messages in Microsoft 365 targeted phishing attacks

• New York county still dealing with ransomware eight months after attack

• Critical Google Cloud’s SQL Service Flaw Exposes Sensitive Data

• PyPI Implements Mandatory Two-Factor Authentication for Project Owners

• CISO-approved strategies for software supply chain security

• What is SaaS Security? – Types, Challenges, Threats & Protection Guide

• Now ransomware hackers targeting backups for ransom pay assurance

• Cybersecurity Research Topics for Beginners: Exploring the Fundamentals

• Digital nomads drive changes in identity verification

• Company size doesn’t matter when it comes to cyberattacks

• Top public cloud security concerns for the media and entertainment industry

• 3 principles biometric vendors should embrace to promote trust in facial recognition technology

• Leadership Is Still Washing Their Hands of Cyber Risk

• Machine Identity Management: The Key to Managing Compliance Risk in a Multi-Cloud, Multi-Cluster World

• Protecting Accounting Firms from Cyberattacks

• IT Security News Weekly Summary – Week 21

• IT Security News Daily Summary 2023-05-28

• Best Practices For Website Design In 2023

• Industrial automation giant ABB disclosed data breach after ransomware attack

• What you need to know about the mindset and motivation of ethical hackers

• padre – Padding Oracle Attack Exploiter Tool

• OpenAI, the Maker of ChatGPT, Does not intend to Leave the European Market

• Three Ways AI-Powered Patch Management is Influencing Cybersecurity’s Future

• A Vulnerability in OAuth Exposed Social Media Logins to Account Takeover

• What is AceCryptor Malware? A Quick Insight

• Unleashing the Power of AI with Caution: Understanding Cybersecurity Risks

• New Bandit Stealer targets web browsers and cryptocurrency wallets

• Week in review: Zyxel firewalls vulnerability, phishing campaign targets ChatGPT users

• Cyber Security Management System (CSMS) for the Automotive Industry

• Commercial PREDATOR Spyware – Delivered Through Zero-Click Exploit

• CISA adds recently patched Barracuda zero-day to its Known Exploited Vulnerabilities catalog

• Security Affairs newsletter Round 421 by Pierluigi Paganini – International edition

• IT Security News Daily Summary 2023-05-27

• Is the BlackByte ransomware gang behind the City of Augusta attack?

• Stealing From Wallets to Browsers: Bandit Stealer Hits Windows Devices

• Safeguarding Your Data: 10 Best Practices to Prevent a Data Breach

• Man Accuses Facebook Of Censoring Harmless Religious Post

• American Financial Data Exposed by Debt Collector

• Netwrix Reports: Enterprises Experience More Cyber Security Incidents Than Smaller Organizations

• Confidential Report Highlights Bitfinex Security Breach in Massive 2016 Hack

• Email Scams v/s Phishing: Here’s All You Need to Know

• The Security Hole: Prompt Injection Attack in ChatGPT and Bing Maker

• Netflix’s Password-Sharing Crackdown Has Hit the US

• Why Effective Password Management Is Essential for Your Business

• Industrial Giant ABB Confirms Ransomware Attack, Data Theft

• New Buhti ransomware operation uses rebranded LockBit and Babuk payloads

• Recap Of The Week: Exploring Key News And Events

• Free VPN Data Breach – Over 360 Million User Records Exposed

• Critical OAuth Vulnerability in Expo Framework Allows Account Hijacking

• New Stealthy Bandit Stealer Targeting Web Browsers and Cryptocurrency Wallets

• Build or Buy your own antivirus product

• ChatGPT CEO May Leave Europe If It Could Not Compile With AI Regulations

• ChatGPT & Bing – Indirect Prompt-Injection Attacks Leads to Data Theft

• Alien versus Predator? No, this Android spyware works together

• Zyxel patches two critical vulnerabilities

• 2023-05-24 – Bye bye Pikabot… We’re back to Qak! (obama264 Qakbot infection)

• What is Confidential Computing? Definition, Benefits, & Uses

• New PowerExchange Backdoor linked to an Iranian APT group

• Californians: Speak Up To Protect People Seeking Repro and Gender-Affirming Care

• New Cyber Threats Calls for New Approaches

• IT Security News Daily Summary 2023-05-26

• If Businesses Are To Get A Grip On Cybersecurity, They Need To Close Gender Gap

• 2 Lenses for Examining the Safety of Open Source Software

• US govt pushes spyware to other countries? Senator Wyden would like a word

• Gaming Firms and Community Members Hit by Dark Frost Botnet

• GAO identifies new infosec deficiencies in IRS system controls

• Solving digital inequity with resident input

• Dell called on NVIDIA hardware for Project Helix generative AI

• 130K+ Patients’ Social Security Numbers Leaked in UHS of Delaware Data Breach

• Prisons ‘under attack’ from drones delivering contraband

• CIO-SP4 protests move toward final decision

• How to use Google Smart Lock on iOS to lock down your Google Account

• Mirai Malware Hits Zyxel Devices After Command Injection Bug

• Tesla Whistleblower Leaks 100GB of Data, Revealing Safety Complaints

• List of Malicious Chrome Extensions: 9 Popular Add-Ons

• Why you should consider outcome-based security

• Travel-Themed Phishing, BEC Campaigns Get Smarter as Summer Season Arrives

• Edgewater Wireless launches MLX 488 WiFi7 Spectrum Slicing platform

• Keysight E5081A ENA-X produces error vector magnitude measurements

• Time to challenge yourself in the 2023 Google CTF!

• Data Does Not Slow Down For Justice – how smart IT systems can better protect victims of serious crime

• Does Congress need a chief data officer?

• Phishing Domains Tanked After Meta Sued Freenom

• Events Ripper Updates

• Severe Flaw in Google Cloud’s Cloud SQL Service Exposed Confidential Data

• Rheinmetall Hit by BlackBasta Ransomware: Disruption to Arms Production

• How Inductive Automation’s endpoint security strategy makes manufacturing more secure

• Eliminating the speedbumps in EV charging station buildout

• What Is ZTNA? Zero Trust Network Access Explained.

• Using Ransomware to Extort Employers by Impersonating a Gang

• Insider threat leads to Tesla data breach

• iRecorder Android App Targeted Its Users With AhRAT Malware

• Dark Frost Botnet targets the gaming sector with powerful DDoS

• Augusta Cyberattack Claimed By BlackByte Ransomware Group

• Coalesce Partner Program helps automate the modern data stack

• Hopr raises $500K to accelerate product-led go-to-market strategy

• New Russian-Linked Malware Poses “Immediate Threat” to Energy Grids

• Iranian Attackers Employ Novel Moneybird Ransomware to Target Israeli Organizations

• Ericsson Whistleblower Awarded $279m By SEC

• Despite Tech Layoffs, Cybersecurity Positions are Hiring

• Predator Android Spyware: Researchers Uncover New Data Theft Capabilities

• Dutch Watchdog Looking Into Alleged Tesla Data Breach

• BlackByte Ransomware Crew Claims City Of Augusta, Georgia

• CosmicEnergy Malware Poses Plausible Threat To Electric Grids

• Google Cloud Patches Vulnerability In CloudSQL Service

• Cognigy and Black Box partnership to accelerate deployment of conversational AI

• GitLab announces AI-DevSecOps platform GitLab 16

• How Safe Is Your Wearable Device?

• CosmicEnergy: The New Russian-Linked Malware Targets Industrial System

• Companies May Now Prepare for a Shorter TLS Certificate Lifespans

• Organizations Worldwide Targeted in Rapidly Evolving Buhti Ransomware Operation

• Predator Android Spyware: Researchers Sound the Alarm on Alarming Capabilities

• 5 Must-Know Facts about 5G Network Security and Its Cloud Benefits

• Twitter Likely To Quit EU Code Against Disinformation, Says Official

• EFF at RightsCon 2023

• NCC Group Releases Open Source Tools for Developers, Pentesters

• Watch Now: Threat Detection and Incident Response Virtual Summit

• Zyxel Firewalls Hacked by Mirai Botnet

• Google Cloud Users Can Now Automate TLS Certificate Lifecycle

• Buhti Ransomware: Blacktail’s Newest Operation Affects Multiple Countries

• Elon Musk’s Neuralink Brain Chip Approved For Human Testing

• APT Hacker Group Attacking SMBs to Use Their Infrastructure

• New CosmicEnergy ICS malware threatens energy grid assets

• Rogue IT security worker failed to cover his tracks

• CIAM in insurance: A unified, secure user experience with a single login

• The Impact Of Technology On Modern Dating

• New Info Stealer Bandit Stealer Targets Browsers, Wallets

• Romania’s Safetech Leans into UK Cybersecurity Market

• Phishers use encrypted file attachments to steal Microsoft 365 account credentials

• Has Technology Brought Us Closer Together Or Further Apart?

• Breaking Barriers: How a Business Coach Can Support Your Professional Development

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• New COSMICENERGY Malware Exploits ICS Protocol to Sabotage Power Grids

• Silicon UK Pulse: Your Tech News Update: Episode 4

• Don’t fall for it! How scammers are tricking businesses with fake invoices

• Heimdal®’s Threat Prevention Endpoint Wins ‘Cloud-Based Solution of the Year’ at the Network Computing Awards 2023

• AI demand accelerates NVIDIA market value to $1 trillion

• Will AI technology change our lives to good or bad

• New infosec products of the week: May 26, 2023

• New Buhti ransomware uses leaked payloads and public exploits

• Phishers use encrypted file attachments steal Microsoft 365 account credentials

• CosmicEnergy, Russian New Strain Of Malware Attacking Electric Grids

• Barracuda Warns of Zero-Day Exploited to Breach Email Security Gateway Appliances

• Cybercriminals masquerading as MFA vendors

• Strengthening travel safety protocols with ISO 31030

• Threat actors exploit new channels for advanced phishing attacks

• Fresh perspectives needed to manage growing vulnerabilities

• BlackByte ransomware crew lists city of Augusta after cyber ‘incident’

• It’s 2023 and Sri Lanka doesn’t have a cyber security authority

• Russia’s War in Ukraine Shows Cyberattacks Can Be War Crimes

• “Beautiful Cookie Consent Banner” WordPress plugin vulnerability: Update now!

• Hasta La Vista Human Powers — Automating the Automation

• Operation Magalenha: Brazilian Hackers Hit Portuguese Banks in Malware Attack

• SSA says it will offer data matches to government benefit programs

• Experts laud GDPR at five year milestone

• Launch your cybersecurity career with this ethical hacking bundle

• D-Link fixes two critical flaws in D-View 8 network management suite

• Chinese state-sponsored hackers infiltrated U.S. naval infrastructure, secretary of the Navy says

• User-friendly data reporting helps one agency tackle hate acts

• CosmicEnergy Malware Emerges, Capable of Electric Grid Shutdown

• Red Hat Tackles Software Supply Chain Security

• ‘Volt Typhoon’ Breaks Fresh Ground for China-Backed Cyber Campaigns

• IT Security News Daily Summary 2023-05-25

• DHS’ cyber agency seeks small biz support for strategic planning

• Building better maps with open data on building heights

• Lazarus Group Striking Vulnerable Windows IIS Web Servers

• Chinese state-sponsored hackers infiltrated U.S. naval infrastructure, Secretary of the Navy says

• Spotted: Suspected Russian malware designed to disrupt Euro, Asia energy grids

• RBAC With API Gateway and Open Policy Agent (OPA)

• 9 smart contract vulnerabilities and how to mitigate them

• Game over for negligence: What game companies need to know about fast-approaching new trust and safety regulations

• House passes bill to permanently authorize VA’s tech training program

• Microsoft warns of Volt Typhoon, latest salvo in global cyberwar

• Chinese hackers targeting U.S. critical infrastructure

• Netflix’s Password-Sharing Ban Offers Security Upsides

• Smart contract vulnerabilities and how to mitigate them

• Prepare for the Azure Security Engineer Associate certification

• Zyxel firewall and VPN devices affected by critical flaws

• Victory in California! Police Instructors Can’t Claim Copyright Protections to Block Release of Use-of-Force and Other Training Materials

• AI Technology Is Drastically Disrupting the Background Screening Industry

• Memcyco Delivers Real-Time Brandjacking Detection and Protection Solution

• Perception Point Report Finds That Advanced Phishing Attacks Grew by 356% in 2022

• Bcrypt, a Popular Password Hashing Algorithm, Starts Its Long Goodbye

• State turns to the cloud to manage transportation projects

• Microsoft warning about China hacking highlights tensions in South China Sea, says Phosphorus CEO

• Netflix’s Password Sharing Crackdown Goes Global: 103 Countries Affected

• AI Revolutionizes Job Searching, Promotions, and Workplace Success in America

• Virgin Galactic Spaceplane Lands Safely After Test Flight

• How to conduct a smart contract audit and why it’s needed

• WithSecure launches ‘outcome-based’ security at Sphere23 conference

• S3 Ep136: Navigating a manic malware maelstrom

• The Imperative of Automating Fraud Detection in Financial Institutions

• Bank of Ghana Opens SOC to Enable Threat Intelligence Sharing

• EU Approves Viasat Inmarsat Merger

• How I Got Started: White Hat Hacker

• New Russia-Linked CosmicEnergy ICS Malware Could Disrupt Electric Grids

• Memcyco Raises $10 Million in Seed Funding to Prevent Website Impersonation

• Users dish on ransomware protection, recovery at VeeamON

• Data Breach At Apria Healthcare Affects 2 Million People Now Notified

• NordPass unveils File Attachments functionality

• Civil Liberties Groups Demand California Police Stop Sharing Drivers’ Location Data With Police In Anti-Abortion States

• Cyber agencies unveil updated ransomware guide

• Advanced Phishing Attacks Surge 356% in 2022

• Reflections On Ten Years Past The Snowden Revelations

• Google Trust Services ACME API available to all users at no cost

• Happy Mother’s Day! Serving, surviving, and thriving as a mom with a cyber career

• Expo Framework API Flaw Reveals User Data in Online Services

• ChatGPT now generates Malware mutations

• Google Introduces Mobile VRP For Its Android Apps

• NCSC Warns Against Chinese Cyber Attacks on Critical Infrastructure

• Google Cloud Bug Allows Server Takeover From CloudSQL Service

• ‘Operation Magalenha’ Attacks Gives Window Into Brazil’s Cybercrime Ecosystem

• Zyxel Issues Critical Security Patches for Firewall and VPN Products

• Dark Frost Botnet Launches Devastating DDoS Attacks on Gaming Industry

• Tufin R23-1 prevents security blind spots with improved network access automation

• AI Knife Detection System Fails at Hundreds of US Schools

• Microsoft Issues Alert Over Rise in Advanced Phishing Scams

• How is 3-2-1 Backup Policy now Out-dated?

• Criminal Digitisation: How UK Police Forces Use Technology

• Volt Typhoon targets US critical infrastructure with living-off-the-land techniques

• Major Massachusetts Health Insurer Hit by Ransomware Attack, Member Data May Be Compromised

• Security Pros: Before You Do Anything, Understand Your Threat Landscape

• New Russia-Linked CosmicEnergy ICS Malware Could Disrupt Electric Grid

• Chinese Hackers That Triggered US Alarm Hit Defense Targets

• Why Are 1.8M Apria Patients Just Now Being Notified Of A 2021 Breach?

• API Bug In OAuth Dev Tool Opened Apps To Account Hijacking

• UN Official And Others In Armenia Hacked By NSO Group Spyware

• Legion Malware Expands Scope To Target AWS CloudWatch Monitoring Tool

• So the FBI ‘persistently’ abused its snoop powers. What’s to worry about?

• Microsoft Appeals CMA Veto Of Activision Blizzard Acquisition

• New PowerExchange Backdoor Used in Iranian Cyber Attack on UAE Government

• Cynet Protects Hospital From Lethal Infection

• China-linked APT Volt Typhoon targets critical infrastructure organizations

• Invisible Chinese Hackers Penetrate American Bases And Guam

• Corvus Signal provides continuous threat analysis, tailored alerts and always-on recommendations

• Dangerous Regions: Isolating Branch Offices in High-Risk Countries

• What Makes React.js and Node.js the Best Technologies for Building High-Performance Web Apps in 2023?

• CISO Criminalization, Vague Cyber Disclosure Rules Create Angst for Security Teams

• Malicious Windows Kernel Drivers Utlized in BlackCat Ransomware Attacks

• Downing Street Acknowledges ‘Existential’ Risk Of AI

• How Cross-Chain DEXes are Democratizing the Crypto Market?

• Heads Up CEO! Cyber Risk Influences Company Credit Ratings

• Today’s Cyber Defense Challenges: Complexity and a False Sense of Security

• European Cybersecurity Firm Sekoia.io Raises $37.5 Million

• Apria Healthcare Notifying 2 Million People of Years-Old Data Breaches

• How Cybersecurity Reporting Tools Can Help Enhance Your Incident Response Capabilities

• Samsung ASLR Bypass Flaw Is Actively Exploited – Warns CISA

• Buhti Ransomware Adopts Stolen Encryptors For Windows & Linux

• Microsoft, Five Eyes Warn Of Chinese Spying On US Critical Infrastructure

• Wireshark 4.0.6 Released – Fix for 9 vulnerabilities

• Buhti Ransomware Gang Switches Tactics, Utilizes Leaked LockBit and Babuk Code

• Webinar with Guest Forrester: Browser Security New Approaches

• Alert: Brazilian Hackers Targeting Users of Over 30 Portuguese Banks

• Phishing campaign targets ChatGPT users

• Five Eyes agencies detail how Chinese hackers breached US infrastructure

• North Korea-linked Lazarus APT targets Microsoft IIS servers to deploy malware

• New security model launched to eliminate 95% of cyber breaches

• Tips to Protect Against Holiday and Airline Scams

• Latest Chinese state-sponsored attacks on critical US infrastructure spies a continuation of trend, Reports Check Point Research

• Azure Virtual WAN security is enhanced by Check Point CloudGuard, now Generally Available

• Check Point Announces Quantum DDoS Protector X Series with Advanced SecOps Capabilities

• Zero-Day Vulnerability Exploited to Hack Barracuda Email Security Gateway Appliances

• GitLab Security Update Patches Critical Vulnerability

• Drop in Insider Breaches Drives Decline in Intrusions at OT Organizations

• Barracuda email security appliances hacked via zero-day vulnerability (CVE-2023-2868)

• 16-30 April 2023 Cyber Attacks Timeline

• Facial recog system used by Met Police shows racial bias at low thresholds

• Virgin Orbit Shuts Down After Chapter 11 Filing

• File Upload Security and Malware Protection

• Why Today’s Online Entertainment Can Be Compulsive and Self-Control Techniques

• When Does Your iPhone Become Unsafe to Use? – Intego Mac Podcast Episode 293

• Be Cyber-Vigilant on Your Cruise with These Cyber Security Tips

• China’s Stealthy Hackers Infiltrate U.S. and Guam Critical Infrastructure Undetected

• Abusing Web Services Using Automated CAPTCHA-Breaking Services and Residential Proxies

• Biden Picks New NSA Head, Key to Support of Ukraine, Defense of US Elections

• Microsoft Catches Chinese .Gov Hackers Targeting US Critical Infrastructure

• SMBs Targeted by State-Aligned Actors for Financial Theft and Supply Chain Attacks

• AI Used to Create Malware, WithSecure Observes

• Combining GCN and Route Fifty: A note to our readers

• Do you know what your supply chain is and if it is secure?

• Apria Healthcare Hacked – Over 2M Users Data Exposed

• Cybersecurity Asset Inventory in Your Home

• The Rise of the Sovereign Cloud

• Iran-linked Tortoiseshell APT behind watering hole attacks on shipping and logistics Israeli websites

• KnowBe4 Helps Organisations Battle QR Code Phishing Attacks With New Tool

• Navigating the complex world of Cybersecurity compliance

• OneNote documents have emerged as a new malware infection vector

• Fully Encrypted GuLoader Uses Google Drive to Download Payloads

• The Security Hole at the Heart of ChatGPT and Bing

• GUAC 0.1 Beta: Google’s Breakthrough Framework for Secure Software Supply Chains

• Iranian Agrius Hackers Targeting Israeli Organizations with Moneybird Ransomware

• What are the Common Security Challenges CISOs Face?

• Microsoft alerts United States on Volt Typhoon Cyber Attack campaign

• The essence of OT security: A proactive guide to achieving CISA’s Cybersecurity Performance Goals

• Combining FCW and Nextgov: A Note to Our Readers

• 12 vulnerabilities newly associated with ransomware

• Realistic simulations are transforming cybersecurity training

• How smart bots are infecting and exploiting the internet

• Five Eyes and Microsoft accuse China of attacking US infrastructure again

• Space Force will look at how to hack targets from space

• Debt ceiling furloughs are unconstitutional, union will argue before court next week

• Top 10 Cloud Workload Protection Platforms (CWPP) in 2023

• CISA updates ransomware guidance

• Webinar alert: How Coffee County Schools safeguards 7500 students and 1200 staff

• Tracking down a trojan: An inside look at threat hunting in a corporate network

• Rheinmetall attacked by BlackBasta ransomware

• This legit Android app turned into audio-snooping malware – and Google missed it

• Barracuda Alerts Of Breaches In Email Gateways From Zero-Day Flaws

• China Hacks US Critical Networks in Guam, Raising Cyberwar Fears

• How Must IT Leaders Develop Contingency Plans to Combat Geopolitical and Environmental Risks?

• How the Increasing IT Talent Gap is Impacting the Cybersecurity Industry

• Updated ‘StopRansomware Guide’ warns of shifting tactics

• ‘Volt Typhoon’ China-Backed APT Infiltrates US Critical Infrastructure Orgs

• Honeywell Releases Cyber Insights to Better Identify Cybersecurity Threats and Vulnerabilities

• IT Security News Daily Summary 2023-05-24

• FDA seeks industry support to develop standardized data ‘supersets’

• Netwrix Report: Enterprises Suffer More Ransomware and Other Malware Attacks Than Smaller Organizations

• Appdome Launches Build-to-Test, Automated Testing Option for Protected Mobile Apps

• Technology Veterans James Wickett and Ken Johnson Launch DryRun Security to Bring Security to Developers

• Harvard Pilgrim Health Care Notifies Individuals of Privacy Incident

• Apria Healthcare Discloses Major Data Breach Impacting 1.8M Users

• Microsoft Catches Chinese .Gov Hackers in Guam Critical Infrastructure Orgs

• Threat Actors Compromise Barracuda Email Security Appliances

• DHS wants answers on how well digital identity systems work

• Is the census still the only reliable population data source?

• The top 6 enterprise VPN solutions to use in 2023

• Cloudflare releases new AI security tools with Cloudflare One

• Barracuda discloses zero-day flaw affecting ESG appliances

• Philly Inquirer says Cuba ransomware gang’s data leak claims are fake news

• The challenge in identifying problematic online gambling

• Facial Recognition Software: Top Vendors in 2023

• Biden Picks New NSA head, Key to Support of Ukraine, Defense of US Elections

• Top breach and attack simulation use cases

• The best security cameras of 2023

• Addigy exposes RSR update gap in 25% of managed macOS devices

• Congress Must Exercise Caution in AI Regulation

• Spearphishing report: 50% of companies were impacted in 2022

• Ransomware tales: The MitM attack that really had a Man in the Middle

• Digital security for the self‑employed: Staying safe without an IT team to help

• Google’s .zip, .mov Domains Give Social Engineers a Shiny New Tool

• Barracuda Email Security Gateway (ESG) hacked via zero-day bug

• Researchers Spot APTs Targeting Small Business MSPs

• OAuth Flaw in Expo Platform Affects Hundreds of Third-Party Sites, Apps

• Top 10 Pillars of Zero Trust Networks

• DataRobot and Microsoft join forces to accelerate AI adoption

• Wipro and Google Cloud expand partnership to advance generative AI adoption

• Kasten K10 V6.0 enables organizations to create proactive ransomware protection strategies

• Kyndryl unveils new services to help Red Hat OpenShift customers move to hybrid cloud environments

• Announcing the launch of GUAC v0.1

• Memcyco Raises $10M To Deliver Real-Time Brandjacking Protection

• Apple Signs Multi-Billion Dollar Deal With Broadcom For US Chips

• Bail Rescinded For Terra Co-Founder Do Kwon

• Free VPN Service SuperVPN Exposes 360 Million User Records

• Is generative AI bad for the environment? A computer scientist explains the carbon footprint of ChatGPT and its cousins

• How Universities Can Bridge Cybersecurity’s Gender Gap

• Vulnerability Summary for the Week of May 15, 2023

• DevOps Midwest: A Community Event Full of DevSecOps Best Practices

• Israeli Shipping, Logistics Companies Targeted in Watering Hole Attacks

• Why Your Branch of the Future Needs Next-Gen SD-WAN and Prisma SASE

• Apria Loses Financial Data of Nearly Two Million Customers Due to Cyberattack

• British pregnant women are unwittingly handing over their Genetic data to China

• When internet security is a requirement, look to dedicated fiber

• Encrypting files and emails: A beginner’s guide to securing sensitive information

• Meta Starts Axing Nearly 20 Percent Of Irish Workforce

• White House releases new AI national frameworks, educator recommendations

• ‘Chin up and don’t put a lot of money to work’ — why Cramer is getting worried about the market

• Ethical Issues Mount as AI Takes Bigger Decision-Making Role in Multiple Sectors

• Kimsuky Hackers from North Korea Back in Action with Advanced Reconnaissance Malware

• China’s Assessment of Micron’s Security Was Rejected

• Onfido Acquires Airside to Strengthen Digital ID Verification

• Iranian Hackers Set Sights On Israeli Shipping & Logistics Firms

• Dell introduces Project Fort Zero to provide an end-to-end zero trust security solution

• Honeywell launches Cyber Insights to identify cybersecurity threats in OT environments

• Ofcom Allows BT Openreach To Lower Fibre Wholesale Prices

• Memcyco Introduces Real-Time Solution to Combat Brandjacking

• SRE vs. DevOps

• OAuth Vulnerabilities in Widely Used Expo Framework Allowed Account Takeovers

• Now Live: Threat Detection and Incident Response Virtual Summit

• Lazarus Group Targeting Microsoft Web Servers to Launch Espionage Malware

• New Apple RSR Flaw Blocks MDM Functionality on macOS Devices

• Iranian Tortoiseshell Hackers Targeting Israeli Logistics Industry

• Infecting SSH Public Keys With Backdoors

• Identify and Fix XSS Vulnerabilities in Your Web App

• The US government sanctioned four entities and one individual for supporting cyber operations conducted by North Korea

• Quantum Attack Would Trigger Great Depression, Think Tank Warns

• OpenAI Leaders Call For Regulation To Prevent AI Destroying Humanity

• Widespread FBI Abuse Of Foreign Spy Law Sets Off Alarm Bells

• BlackCat Ransomware Takes Control With New Kernel Driver

• Netflix Puts U.S. Password Sharing Customers On Notice

• Memcyco raises $10 million to deliver real-time brandjacking protection

• Cohesity partners with Google Cloud to bring the power of AI to data security and management

• Appdome’s Build-to-Test streamlines mobile app cybersecurity testing

• US Sanctions North Korean Entities Training Expat IT Workers in Russia, China and Laos

• 5 Questions to Ask When Evaluating a New Cybersecurity Technology

• A.I. poses existential risk of people being ‘harmed or killed,’ ex-Google CEO Eric Schmidt says

• CISA, NSA Issue New IAM Best Practice Guidelines

• Improving supply chain resiliency with Red Hat Trusted Software Supply Chain

• What’s Russia Planning?

• Salt Security Uncovers API Security Flaws in Expo Framework, Issues have been Remediated

• Gartner Names Synopsys Leader in Application Security Testing for Seventh Consecutive Year

• Red Hat Service Interconnect solves cross-platform and multi-cloud communication challenges

• Axiado introduces AI-driven security processors

• Dell NativeEdge secures and automates edge infrastructure

• Europe’s largest known illegal IPTV operation dismantled by police

• Android App With 50,000 Downloads in Google Play Turned Into Spyware via Update

• Private Sector Cybersecurity Task Force Called for to Defend Democracies

• To Save the News, We Must Shatter Ad-Tech

• Password manager Bitwarden will soon be able to store passkeys

• Meta Sells Giphy At Huge Loss After CMA Order

• New Android Malware on Google Play Store with Over 50,000 Installs

• Auditing Tools for Kubernetes

• Breach Alert! Rheinmetall AG Confirms Being Hit by BlackBasta Ransomware Attack

• New Honeywell OT Cybersecurity Solution Helps Identify Vulnerabilities, Threats

• US Sanctions North Korean University for Training Hackers

• Data Stealing Malware Discovered in Popular Android Screen Recorder App

• What to Look for When Selecting a Static Application Security Testing (SAST) Solution

• Ukraine’s CERT-UA warns of espionage activity conducted by UAC-0063

• Indiana, Iowa, and Tennessee Pass Comprehensive Privacy Laws

• IT employee piggybacked on cyberattack for personal gain

• Microsoft, GitHub announce application security testing tools for Azure DevOps

• Sekoia.io raises €35 million to strengthen its positioning on the international stage

• Opti9 collaborates with Wasabi to provide clients with AI-powered ransomware detection

• Cool, Funny, Best Gaming Names – Creative Ideas For Your Ing Personality

• AnimeUltima 2023 – Top 10 Alternatives to Watch Anime Online

• Secure Your Netflix Account: Limited Sharing Can Result in Dark Web Sales for €2 per Month

• What is DKIM Email Security Technology? DKIM Explained

• Netflix Password Crackdown Arrives In UK, US

• Diversity advocate and renowned practitioner, Becky Pinkard, to be Inaugurated into Infosecurity Europe’s Hall of Fame

• Legion Malware Upgraded to Target SSH Servers and AWS Credentials

• Legion AWS credential harvester and hijacker analyzed

• White House Unveils New Efforts to Guide Federal Research of AI

• 50% of UK CEOs See Cyber as a Bigger Business Risk than the Economy

• Backup Repositories Targeted in 93% of Ransomware Attacks

• How Your Business Could Protect Its Cybersecurity in a Surprisingly Cost-Effective Fashion

• How to Streamline Communication with Microsoft Teams Operator Connect

• What Is the Ghost of Tsushima Legends Mode – Everything You Need to Know

• Security Awareness Training (SAT) is finally having its day. Here’s why.

• Understanding how Polymorphic and Metamorphic malware evades detection to infect systems

• Legitimate Android app transforms into data-snooping malware

• IT security analyst admits hijacking cyber attack to pocket ransom payments

• AhRat Android RAT was concealed in iRecorder app in Google Play

• Confidential Containers on Azure with OpenShift: A technical deep dive

• Pros and Cons of Android vs. iOS Game Development

• The rising trend of phishing on IPFS: What you need to know

• Virtual Event Today: Threat Detection and Incident Response Summit

• Cyber Attacks Strike Ukraine’s State Bodies in Espionage Operation

• N. Korean Lazarus Group Targets Microsoft IIS Servers to Deploy Espionage Malware

• Why performing security testing on your products and systems is a good idea

• Facebook Hit With record-breaking $1.3 Billion Fine Over Data Rules

• Almost 300k People Affected by Ransomware Attack on Dish Network

• How to Track Ransomware Attacks: A Comprehensive Guide

• Ransomware news trending on Google

• China’s tech sector may see fewer regulatory surprises — not zero, says S&P Global Ratings

• GoldenJackal: Threat Risk For Organizations In Middle East & South Asia

• CISO-level tips for securing corporate data in the cloud

• How to avoid shadow AI in your SOC

• CISOs: How to improve cybersecurity in an ever-changing threat landscape

• 6 ChatGPT risks for legal and compliance leaders

• Navigating the quantum leap in cybersecurity

• US bans North Korean outsourcer and its feisty freelancers

• Against the Clock: Cyber Incident Response Plan

• Google Adds Guardrails to Keep AI in Check

• Hackers Use Weaponized DOCX File to Deploy Stealthy Malware

• Cloud-based IT operations are on the rise

• 2023-05-23 – Pikabot infection with Cobalt Strike

• Here’s the secret sauce that fueled Palo Alto Networks’ beat and raise despite tough times

• Palo Alto Networks CEO calls generative AI a boon for customer satisfaction and company efficiency

• Malvertising via brand impersonation is back again

• Update now! Apple issues patches for three actively used zero-days

• Google to pay $40m for “deceptive and unfair” location tracking practices

• Employee guilty of joining ransomware attack on his own company

• AI generated Pentagon explosion photograph goes viral on Twitter

• Apria Healthcare says potentially 2M people caught up in IT security breach

• What Is Sender Policy Framework? SPF Email Explained

• 2023-05-22 – Pikabot infection with Cobalt Strike

• DOJ tees up infrastructure program management recompete

• The best home security systems of 2023

• Over 300k People Affected by Ransomware Attack on Dish Network

• The Pros and Cons of Smart Homes

• IT Security News Daily Summary 2023-05-23

• Email Spoofing: What it Is & How to Prevent It

• SuperMailer Abuse Bypasses Email Security for Super-Sized Credential Theft

• Most Organizations Expect Ransomware Attack Within a Year

• 8 Data Anonymization Techniques to Safeguard User PII Data

• DOD aims to leverage AI and automation in records management

• EY survey: Tech leaders to invest in AI, 5G, cybersecurity, big data, metaverse

• Understand the Evolution of Captive Portal to Cloud Authentication Solutions

• Threat actors leverage kernel drivers in new attacks

• 5 Ways Smart Contracts Are Making A Real-World Difference

• Metadata catalog refreshes one state’s water use insights

• County’s integrated platform delivers client-focused social services

• Report: Facebook Layoffs Could Hurt Effort To Stop Misinformation

• 5 Best Bot Protection Solutions and Software for 2023

• What Security Professionals Need to Know About Aggregate Cyber Risk

• Navigating the Web with Confidence: Tips for a Cleaner, Safer Experience

• Lawmakers advocate more funds for state fusion centers

• Dell’s Project Helix heralds a move toward specifically trained generative AI

• Chinese Labs Are Selling Fentanyl Ingredients for Millions in Crypto

• The previously undocumented GoldenJackal APT targets Middle East, South Asia entities

• Threat Actor Abuses SuperMailer for Large-scale Phishing Campaign

• Mikrotik Belatedly Patches RouterOS Flaw Exploited at Pwn2Own

• There’s Finally a Way to Improve Cloud Container Registry Security

• GAO Urges Federal Agencies to Implement Key Cloud Security Practices

• Microsoft Build 2023: Announcing new identity, compliance, and security features from Microsoft Security

• Security Challenges for Microservice Applications in Multi-Cloud Environments

• Cohesity partners with Google Cloud to empower organizations with generative AI and data capabilities

• The hidden key to stopping public sector fraud

• City greenlights autonomous vehicle testing for public transit

• How to become a bug bounty hunter: Getting started

• How to use Wfuzz to find web application vulnerabilities

• PyPI open-source code repository deals with manic malware maelstrom

• LogRhythm vs Splunk: Top SIEM Solutions Compared

• Red Hat Advanced Cluster Security Cloud Service scales cloud-native security across the hybrid cloud

• Hornetsecurity 365 Permission Manager helps companies protect critical data

• Delinea Cloud Suite updates reduce the risk of lateral movement in cybersecurity breaches

• NETSCOUT introduces visibility and instrumentation for threat detection in 4G and 5G networks

• What the Supreme Court’s Decision in Warhol Means for Fair Use

• 6 Ways to Mitigate Risk While Expanding Access

• Why Republican-led states keep leaving a group that verifies voter rolls

• How to use Bitwarden Send (and when you should)

• Microsoft Dataverse: Going from Excel to new AI-powered tools

• New ‘GoldenJackal’ APT Targets Middle East, South Asia Governments

• A New Look for Risk in Awareness Training

• 100% OSCP Certified Team: How PacketLabs Recruits Top Talent

• How the Chrome Root Program Keeps Users Safe

• Dish confirms 300,000 people’s data was exposed in February’s attack

• A TikTok ban isn’t a data security solution. It will be difficult to enforce – and could end up hurting users

• Google Unveils Bug Bounty Program For Android Apps

• GoldenJackal: New Threat Group Targeting Middle Eastern and South Asian Governments

• Avos Ransomware takes control of emergency systems in Bluefield University

• The intersection of telehealth, AI, and Cybersecurity

• Popular Android Screen Recorder iRecorder App Revealed as Trojan

• WhatsApp Now Allow You to Edit Sent Messages

• Fata Morgana Watering Hole Attack Targets Shipping, Logistics Firms

• Red Hat Trusted Software Supply Chain enhances an organization’s resilience to vulnerabilities

• Stytch expands its platform to offer B2B authentication

• Veriff Age Estimation prevents users from accessing age restricted products or services

• Vaultree unveils Fully Functional Data-In-Use Encryption solution for the healthcare sector

• Radware Cloud Web DDoS Protection blocks Tsunami DDoS attacks

• The Royal Gang Is Developing Its Own Malware Loader

• GoldenJackal Targets Diplomatic Entities in Middle East, South Asia

• Google announced its Mobile VRP (vulnerability rewards program)

• 12 Ways To Protect Small Businesses From Cyberattacks

• Fake ChatGPT Apps may Fraud you out of Your Money

• How Hackers Launched an Attack on European Spacecraft

• Data And Employees Of BSI Shared On The Dark Web By LockBit Ransomware Gang

• TikTok to let Oracle view source code, algorithm, and content moderation

• Red Hat Pushes New Tools to Secure Software Supply Chain

• Rheinmetall Says Military Business Not Impacted by Ransomware Attack

• Google Launches Bug Bounty Program for Mobile Applications

• Iranian Hackers Using New Windows Kernel Driver in Attacks

• Bridgestone CISO: Lessons From Ransomware Attack Include Acting, Not Thinking

• Microsoft: BEC Attackers Evade ‘Impossible Travel’ Flags With Residential IP Addresses

• TikTok to let Oracle view source code, algorithm and content-moderation

• China Says AI Disruption Could Pose ‘Serious Challenge’

• North Korean Kimsuky Hackers Strike Again with Advanced Reconnaissance Malware

• German arms manufacturer Rheinmetall suffered Black Basta ransomware attack

• 5 Ways Hackers Will Use ChatGPT For Cyberattacks

• Conceal and White Rock Cybersecurity partner to isolate browsing sessions

• IRONSCALES and Infinigate collaborate to provide customers with email security solution

• Fusion Risk Management TPRM enhancements deliver continuous monitoring of third parties

• Dark Web Monitoring: Unveiling the Underground Ecosystem of Cybercriminals

• EU Restarts Apple Tax Case Before EU’s Top Court

• Enterprises Must Prepare Now for Shorter TLS Certificate Lifespans

• Amazon’s PillPack Reports Data Breach Affecting More Than 19,000

• China Hasn’t Told Micron Why It Failed Security Review, Or What Its Ban Means

• Uncle Sam Strangles Criminals’ Cash Flow By Reining In Money Mules

• Ads For Lucrative Jobs In Asia Fail To Mention Chance Of Slavery As Crypto-Scammer

• KeePass Bug Lets Attackers Extract The Master Password From Memory

• FBI Warns of Hackers Exploiting Public Charging Stations to Steal iPhone Data

• This Brute-force Fingerprint Attack has the Potential to Compromise Your Android Phone

• Hypervisors and Ransomware: Defending Attractive Targets

• SFPD Obtained Live Access to Business Camera Network in Anticipation of Tyre Nichols Protest

• Ensuring Qr Code Safety: Best Practices For Secure Scanning

• How To Reduce The Security Risk Of Remote Work

• Mastercard collaborates with HealthLock to protect medical data

• WithSecure releases Cloud Security Posture Management to identify insecure cloud configurations

• N-able partners with JCDC to reduce security risk for MSPs

• ESET: Android App ‘iRecorder – Screen Recorder’ Trojanized with AhRat

• How To Plan An App Launch

• Microsoft China Exec Warns Of Hasty China AI Investments

• New WinTapix.sys Malware Engages in Multi-Stage Attack Across Middle East

• The Rising Threat of Secrets Sprawl and the Need for Action

• Why is electronics so important today and how to secure your data?

• Schools’ AI Weapon Detection Systems Accused Of Flaws

• Mitigating Risks in Cloud Native Applications

• Cutting Through the Noise: What is Zero Trust Security?

• Two-Thirds of IT Leaders Say GDPR Has Reduced Consumer Trust

• A deeper insight into the CloudWizard APT’s activity revealed a long-running activity

• Regulator Group Proposes First Global Crypto Rules

• AppMap: A map to reduce developer toil

• A Bright Future for Forensic Analysis

• #TripwireBookClub – How to Hack Like a Legend

• Simple OSINT techniques to spot AI-fueled disinformation, fake reviews

• Future Exploitation Vector: File Extensions as Top-Level Domains

• TikTok Sues Montana Over App Ban

• Employer Of Record Germany And Hiring: What You Need To Know

• FBI Misuse of Surveillance Tool on Jan. 6 Protesters

• WhatsApp Lets Users Edit Sent Messages – For 15 Minutes

• Meet the GoldenJackal APT group. Don’t expect any howls

• An Exploding Pentagon In A Fake Photo Sends Twitter Into Frenzy

• Privileged Access Management (PAM) Best Practices

• IAM-Driven Biometrics: The Security Issues with Biometric Identity and Access Management

• Need to improve the detection capabilities in your security products?

• China Bans U.S. Chip Giant Micron, Citing “Serious Cybersecurity Problems”

• 8 Key Components of a CIAM Platform

• BlackCat Ransomware affiliate uses signed kernel driver to evade detection

• BrutePrint – Bruteforce Attack to Bypass User Authentication on Smartphones

• 7 access management challenges during M&A

• Ads for lucrative jobs in Asia fail to mention chance of slavery as crypto-scammer

• Cyber threat with iPhone Phone Link feature on Windows 11 laptops

• Online scams target bargain-hunting holiday travelers

• The fragmented nature of API security ownership

• Gap between OT security assumptions and reality

• FCW Insider Chat: The top winners of the Fed100

• A Threat to Passkeys? BrutePrint Attack Bypasses Fingerprint Authentication

• China hasn’t told Micron why it failed security review, or what its ban means

• Interview With a Crypto Scam Investment Spammer

• A week in security (May 15-21)

• Update now: 9 vulnerabilities impact Cisco Small Business Series

• ChatGPT: Cybersecurity friend or foe?

• Webinar recap: EDR vs MDR for business success

• Identity crisis: How an anti-porn crusade could jam the Internet, featuring Alec Muffett: Lock and Code S04E11

• Uncle Sam strangles criminals’ cashflow by reining in money mules

• Newly Public FISC Opinion is The Best Evidence For Why Congress Must End Section 702

• Iowa hospital discloses breach following Royal ransomware leak

• Google Cloud launches new cloud region in Doha

• Stop Backing Up Ransomware

• Chinese state-sponsored attack uses custom router implant to target European governments

• CapCut Users Beware: Phishing Sites Distributing Malware

• Improving Cybersecurity Requires Building Better Public-Private Cooperation

• IT Security News Daily Summary 2023-05-22

• Meta Hit With $1.3B Record-Breaking Fine for GDPR Violations

• PyPI Shuts Down Over the Weekend, Says Incident Was Overblown

• EFF to Court: California’s Public Records Law Must Remain a Check on Police Use of Drones

• Follow a 6-phase roadmap to secure cyber-physical systems

• EU Regulators Hit Meta with Record $1.3 Billion Fine for Data Transfer Violations

• How to manage and share files online using NordLocker

• DarkBERT: Enhancing Cybersecurity Efforts on the Dark Web

• What Is Istio Ambient Mesh?

• FBI and CIA combat cyber talent shortage with new hiring methods

• Gurucul Powered by Snowflake to Rapidly ID and Mitigate Risks

• China bars Micron chips from critical infrastructure purchases

• Leaked EU Document Shows Spain Wants to Ban End-to-End Encryption

• Carper says he won’t run for fifth Senate term

• Leaked Government Document Shows Spain Wants to Ban End-to-End Encryption

• CISA adds iPhone bugs to its Known Exploited Vulnerabilities catalog

• Ferrari teams up with Bitdefender, as car racing security shifts into high gear

• Micron: China Issues Ban On US Chipmaker

• First responders need presumptive ID technology to better assess and act on hazardous incidents

• Palo Alto Networks Recognized in Critical Capabilities Report

• From Past Lessons to Future Protections: EFF’s Advice to the EU Commission on Extended Reality Governance

• Developers Are Scaling Faster Than Ever: Here’s How Security Can Keep Up

• Start students early to build semiconductor talent pipeline

• Phone scamming kingpin gets 13 years for running “iSpoof” service

• Digital twins for cities promising, yet problematic

• Update: Facebook Hit With Record $1.3 Billion Fine For Data Transfers

• Hackers Utilise Azure Serial Console to Get Unauthorized Access to Virtual Machines

• From Harvard to Ukraine

• Cyber Threat Hunting vs Incident Response: What’s the Difference?

• Forrester predicts 2023’s top cybersecurity threats: From generative AI to geopolitical tensions

• Fish and Wildlife to deploy drones in battle against invasive plants

• Indonesian Cybercriminals Exploit AWS for Profitable Crypto Mining Operations

• EU hits Meta with $1.3 billion fine for transferring European user data to the US

• Google Settles Location Tracking Lawsuit For Only $39.9M

• More UK Councils Caught By Capita’s Open AWS Bucket Blunder

• Meta Fined $1.3 Billion, Ordered To Stop Sending EU Data To US

• The Undergound History Of Russia’s Most Ingenious Hacker Group

• Sharing your business’s data with ChatGPT: How risky is it?

• How and why to use multiple Apple IDs on the same Mac

• How to make sure the reputation of your products and company is good

• Facebook Meta faces €1.3 billion penalty by GDPR

• Ohio Senate approves DATA Act standardizing elections information statewide

• 5 simple ways to improve your Android phone security today

• China Issues Ban on US Chipmaker Products

• IBM’s Polar Buy Creates Focus on a New ‘Shadow Data’ Cloud Security Area

• How Blockchain Technology is Playing a Major Role in Combating Crypto Hacking Risk

• Tackling the Top Initial Attack Vectors in Ransomware Campaigns

• Changing Methods of Tracking and Sharing Healthcare Data

• Meta’s $1.3 Billion Fine Is a Strike Against Surveillance Capitalism

• New Type of Attack: BrutePrint Can Breach Your Smartphone’s Fingerprint Security

• Google settles location tracking lawsuit for only $39.9M

• Italy Data Protection Office Plans Broader AI Review

• Report: More organizations still plan to increase their tech staff

• Food Distributor Sysco Says Cyberattack Exposed 126,000 Individuals

• GAO Tells Federal Agencies to Fully Implement Key Cloud Security Practices

• Cyber Warfare Lessons From the Russia-Ukraine Conflict

• Onfido acquires Airside to boost identity verification for individuals and businesses

• Nvidia Builds ‘Grace’ CPU-Powered Supercomputer

• NIST Launches Cybersecurity Initiative for Small Businesses

• Bad Magic’s Extended Reign in Cyber Espionage Goes Back Over a Decade

• API security

• Dish Network says the February ransomware attack impacted +300,000 individuals

Generated on 2023-06-01 00:02:03.064904