IT Security News Monthly Summary – May

• IT Security News Weekly Summary – Week 17

• IT Security News Daily Summary 2023-04-30

• Crooks broke into AT&T email accounts to empty their cryptocurrency wallets

• The Evolving Threat From Terrorist Drones in Africa

• Enhance Employee Productivity by Adopting a Modern Approach to Password Security

• Complexity is Still the Enemy of Security

• Fake Reviews and Subscription Traps to be Banned Under New Bill in UK

• Russia-linked APT28 uses fake Windows Update instructions to target Ukraine govt bodies

• The best security cameras of 2023

• Atomic macOS Infostealer Malware Actively Targets Crypto Wallets

• Workers are secretly using ChatGPT, AI and it will pose big risks for companies

• How AI is Helping Threat Actors to Launch Cyber Attacks

• White hat hackers showed how to take over a European Space Agency satellite

• The big cybersecurity risks when ChatGPT and AI are secretly used by employees

• Apple, Google, and Microsoft Just Fixed Zero-Day Security Flaws

• Security Affairs newsletter Round 417 by Pierluigi Paganini – International edition

• Numerous Vulnerabilities Spotted In Intel TDX

• Week in review: PaperCut vulnerabilities, VMware fixes critical flaws, RSA Conference 2023

• Ransomware Clop and LockBit Attacked PaperCut Servers

• Cyber Security Management System (CSMS) for the Automotive Industry

• Chinese APT Group Hijacks Software Updates for Malware Delivery

• DOJ Prioritizes Disruptions Over Arrests in Cyberattack Cases

• Mac malware-for-hire steals passwords and cryptocoins, sends “crime logs” via Telegram

• ViperSoftX uses more sophisticated encryption and anti-analysis techniques

• UK Cyber Security Council launches certification mapping tool

• IT Security News Daily Summary 2023-04-29

• CyberSec Community Rolls Out ETHOS – An Open Early Warning System

• Apache Superset Shipped With Unpatched RCE Vulnerability

• Atomic macOS Stealer is advertised on Telegram for $1,000 per month

• The future of Red Hat security data

• Google Takes Down Cryptbot Malware Infrastructure

• Your Details are Hidden on this Secret ID on Your Phone

• Weekly Summary Of News And Events This Week

• Google Cloud Rolls Out Security AI Workbench For Threat Detection

• How deepfakes ‘hack the humans’ (and corporate networks)

• This AI Tool Can Crack Your Password in Sixty Seconds; Here’s How to Protect Yourself

• Android Penetration Testing Cheatsheet: The Ultimate Guide

• The Tragic Fallout From a School District’s Ransomware Breach

• A Comprehensive Look At Email-Based Threats In 2023

• Hackers are Selling a new Atomic macOS (AMOS) Stealer on Telegram

• Is this ThinkPad-inspired phone the best for business users? It sure looks like it

• 11 Benefits of Smart Contract Auditing Services

• How to Remove Your Personal Info From Google’s Search Results

• Nuclei Cheatsheet: The Go-to Resource for Penetration Testers

• CISA warns of a critical flaw affecting Illumina medical devices

• The US Cyber Command is Deploying Experts Abroad to Assist Collaborators in Detecting Hackers

• Build or Buy your own antivirus product

• Google Adds New Cyber Security Tools & Features to ChromeOS

• ChatGPT is Back in Italy After Addressing Data Privacy Concerns

• CISA Warns of Critical Flaws in Illumina’s DNA Sequencing Instruments

• Codenotary unveils SBOMcenter to ensure software supply chain security

• CSI releases IT Governance to meet growing regulatory expectations

• What Does Mass Layoffs & Angry Workers Mean for Your Cybersecurity?

• Microsoft adopts Rust to boost Windows security and performance

• Update now: Critical flaw in VMWare Fusion and VMWare Workstation

• LockBit and Cl0p ransomware gangs actively exploiting Papercut vulnerabilities

• OpenAI reinstates ChatGPT service in Italy after meeting Garante Privacy’s demands

• Stupid Patent of the Month: Trying to Get U.S. Patents On An AI Program

• 3CX data breach shows organizations can’t afford to overlook software supply chain attacks

• What early adopters get wrong

• Automated Patch Management: Definition, Tools & How It Works

• At Congressional Hearing, PCLOB Members Suggest Bare Minimum of 702 Reforms

• IT Security News Daily Summary 2023-04-28

• Appeals Court Should Reconsider Letting The FBI Block Twitter’s Surveillance Transparency Report

• Cowen’s Shaul Eyal breaks down headwinds facing cybersecurity stocks

• EVs rev up cybersecurity challenges

• Patch Management vs Vulnerability Management: What’s the Difference?

• ‘BellaCiao’ Showcases How Iran’s Threat Groups Are Modernizing Their Malware

• Cisco discloses a bug in the Prime Collaboration Deployment solution

• The Proud Boys Seditious Conspiracy Conundrum

• Beyond Anti-Virus ‘Shark Nets’: Why Current Approaches to Cybersecurity Need to Change.

• How to Improve your Security Posture and ROI

• Announcements at RSAC 2023 show alliances, AI defining the future of cybersecurity

• Army looks to bring $22B headset program into production in 2025

• OPM’s plan to upgrade federal employee data

• TCP vs UDP – Understanding the Difference

• Are people getting better at avoiding misinformation?

• OpenAI: ChatGPT Back in Italy After Meeting Watchdog Demands

• How To Manage Vulnerabilities in Modern Cloud Native Applications

• It’s time to harden AI and ML for cybersecurity

• Google Bans Thousands of Play Store Developer Accounts to Block Malware

• DOJ Detected SolarWinds Breach Months Before Public Disclosure

• Severe Flaws In Illumina DNA Sequencing Technology, CISA Warns

• Migrating FileNet Into AWS Cloud and Migrating FileNet Security Into AWS Cloud

• AI for security is here. Now we need security for AI

• Zero-trust citizen access: Secure services for residents and agencies

• ChatGPT uses for cybersecurity continue to ramp up

• Amid supply chain attacks, emerging vendor rethinks SBOM

• Firmware Looms as the Next Frontier for Cybersecurity

• DDoS is Emerging as the Most Important Business Concern for Edge Networks

• Google wins court order to force ISPs to filter botnet traffic

• Man used brother’s credentials to steal $4.8M seized Bitcoin

• Threat actor APT28 targets Cisco routers with an old vulnerability

• Google’s 2FA app update lacks end-to-end encryption, researchers find

• Germany Denies Chip Making Chemical Export Ban To China

• Ransomware Attack Disrupts IT Network at Hardenhuish School

• Secure mobile payment transactions enabled by Android Protected Confirmation

• Google bans 173,000 malicious app developers

• 401 and 403 Bypass Cheat Sheet for Penetration Testers

• Intel Posts Largest Ever Quarterly Loss, But Shares Rise

• Smart Contracts Step-By-Step: A Beginner’s Guide To Debugging and Deploying Smart Contracts With Infura and Truffle

• Global Cyber Attacks Rise by 7% in Q1 2023

• SOC Analyst Training – Cyber Attack Intrusion Analysis With SIEM Tools – 2023

• Cisco Working on Patch for Vulnerability Reported by NATO Pentester

• Russian APT Hacked Tajikistani Carrier to Spy on Government, Public Services

• Google Blocked 1.4 Million Bad Apps From Google Play in 2022

• The pros and cons of VPNs for enterprises

• Android Apps Fail to Protect User Data During Device Transfer

• SECURITY ALERT: Heimdal® Identifies Active Phishing Campaign Singleing Out Romanian Telecom Users

• Chinese hackers outnumber FBI cyber staff 50 to 1, bureau director says

• Beware of This Dangerous Android malware As It Can Hold Your Phone Hostage

• Microsoft Says No More Feature Updates For Windows 10

• How one city transformed its approach to data

• 50 Crypto Wallets Targeted by Atomic MacOS Malware

• Online Safety Bill age checks? We won’t do ’em, says Wikipedia

• Why People Skills Matter as Much as Industry Experience

• Dyson Air-Purifying Headphones To Cost £820

• SOSSA and CRA Spell Trouble for Open Source Software

• Zyxel fixed a critical RCE flaw in its firewall devices and urges customers to install the patches

• Google Authenticator’s New Syncing Feature Raises Security Concerns

• Attacks On PaperCut Servers Tied To Ransomware Groups

• Google Gets Court Order To Shut Down Malware Domains

• 6 Key Moments From House Republicans’ Hearing On Warrant-Free FISA Surveillance

• Protect your money: AT&T email accounts under attack by hackers

• FDA, CISA: Illumina Medical Devices Vulnerable to Remote Hacking

• Biden’s Spyware Order: A Needed First Step

• Google Authenticator Introduces Google Account Sync

• Zyxel Firewall Devices Vulnerable to Remote Code Execution Attacks — Patch Now

• Why Your Detection-First Security Approach Isn’t Working

• New Atomic macOS Malware Steals Keychain Passwords and Crypto Wallets

• AI Powers the Branch of the Future, Today

• EU moves to regulate tech titans with Digital Services Act

• RTM Locker Ransomware Gang Targets VMware ESXi Servers

• Managed Threat Hunting: The Next Step from Traditional Cybersecurity

• Attackers Can Hide Malicious Apps Using the Ghost Token Flaw

• RSA Conference 2023 – ICS/OT Cybersecurity Roundup

• RTM Locker Ransomware Variant Targeting ESXi Servers

• Cyber Certainty: Investing in Resilience During a Post-Correction Market

• ViperSoftX InfoStealer Adopts Sophisticated Techniques to Avoid Detection

• Ukraine cyber police arrested a man for selling data of 300M people

• Google Bans And Deletes 173K Bad Developers Accounts In 2022

• Rapture, a Ransomware Family With Similarities to Paradise

• Cyber Certainty: Investing in Resilience During a Post Correction Market

• AuKill Malware Actively Used To Disable EDR In Ongoing Attacks

• Critical Vulnerability in Zyxel Firewalls Leads to Command Execution

• Google obtained a temporary court order against CryptBot distributors

• Man Gets Four Years for Stealing Bitcoins Seized by Feds

• Attention Online Shoppers: Don’t Be Fooled by Their Sleek, Modern Looks — It’s Magecart!

• How To Install Acer Care Center in Windows 7, 8.1, 10, 11, Mac, Linux, and Ubuntu

• How To Install Vidmate PC, Mac, Linux, Ubuntu – Step-by-Step Guide

• Minecraft Clones with 35 Million Installs Contained Adware

• Google Bans 173,000 Bad Developers in 2022

• Cosmos Bank Cyber Attack – 11 Accused in Cyber Fraud Case

• Charming Kitten Using New Malware in Multi-Country Attacks

• Tonto Team Uses Anti-Malware File to Launch Attacks on South Korean Institutions

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Is mood tracking feature in Apple iOS 17 a privacy concern

• It is illegal to use undetectable spying devices on partners

• Password reset woes could cost FTSE 100 companies $156 million each month

• New infosec products of the week: April 28, 2023

• The double-edged sword of generative AI

• Get ready for RSA 2023: Stronger Together

• Git Project Security Vulnerabilities Let Attackers Execute Arbitrary Code

• Imperva® and Fortanix Partner to Protect Confidential Customer Data

• 5G surpasses expectations, becomes a global game-changer

• Phishing-resistant MFA shapes the future of authentication forms

• Many Public Salesforce Sites are Leaking Private Data

• Swissbit iShield Key Pro safeguards online accounts, web services

• Program Execution

• ChatGPT writes insecure code

• Fileless attacks: How attackers evade traditional AV and how to stop them

• Magecart threat actor rolls out convincing modal forms

• Google sues CryptBot slingers, gets court order to shut down malware domains

• Uptycs Launches Cloud Security Early Warning System

• Tessian Fully Integrates With M365 To Provide Threat Protection and Insider Risk Protection

• Microsoft is busy rewriting core Windows code in memory-safe Rust

• DHS cyber talent management system boasts just 80 hires after nearly two years

• #RSAC: AI Dominates RSA as Excitement and Questions Surround its Potential in Cybersecurity

• Delinea Onsite RSA Conference Survey Reveals Cloud Security Remains Top Cybersecurity Concern in 2023

• MajorKey Accelerates Pureplay Information Security Strategy With Acquisition of Legion Star

• The Return of the Joint Service Academy Cybersecurity Summit

• IT Security News Daily Summary 2023-04-27

• Critical VMware Vulnerabilities Let Attackers Execute Arbitrary Code

• Q1 marked lowest VC funding for security in a decade, but there’s a silver lining

• DHS R&D arm to drive climate change response under new bill

• City pilots sensors that track street activity, detect conflicts

• Can Fortran survive another 15 years?

• ‘Anonymous Sudan’ Claims Responsibility for DDoS Attacks Against Israel

• 35M Downloads Of Android Minecraft Clones Spreads Adware

• How to block tracking pixels in Apple Mail (and why you might want to)

• #RSAC: Organizations Warned About the Latest Attack Techniques

• Microsoft is busy rewriting core Windows library code in memory-safe Rust

• Clean up technical debt before chasing shiny objects, state CTO advises

• 10 ways to speed up your internet connection today

• The best browsers for privacy in 2023

• Report: Facebook And Instagram Are Still Widely Used For Child Sex Trafficking

• How post-quantum cryptography will help fulfill the vision of zero trust

• Secureworks CEO weighs in on XDR landscape, AI concerns

• China’s ‘Evasive Panda’ Hijacks Software Updates to Deliver Custom Backdoor

• Threat Actor Names Proliferate, Adding Confusion

• User Data Governance and Processing Using Serverless Streaming

• Global Cyberattacks Continue to Rise with Africa and APAC Suffering Most

• Why security and resilience are essential for enterprise risk management

• Were you caught up in the latest data breach? Here’s how to find out

• Automated Bots Pose Growing Threat To Businesses

• Elon Musk Meets US Lawmakers To Discuss AI Regulation

• Design Patterns for Microservices: Ambassador, Anti-Corruption Layer, and Backends for Frontends

• Implementing RBAC in Quarkus

• S3 Ep132: Proof-of-concept lets anyone hack at will

• ChatGPT Security and Privacy Issues Remain in GPT-4

• SANS Reveals Top 5 Most Dangerous Cyberattacks for 2023

• Tenable report shows how generative AI is changing security research

• VA’s health record ‘reset’ has budget fallout

• How Target built its DevSecOps culture using psychology

• Google Gets Court Order to Take Down CryptBot That Infected Over 670,000 Computers

• Vodafone Appoints Finance Boss Margherita Della Valle As Group CEO

• Cybersecurity: Why It’s More Important Than Ever

• Takeaways from our investigation into Wisconsin’s racially inequitable dropout algorithm

• (ISC)2 Urges Countries to Strengthen Collaboration on Cybersecurity Regulation

• Continuous Scanning Is Imperative for Effective Web Application Security

• The White House National Cybersecurity Strategy Has a Fatal Flaw

• NSA Cybersecurity Director Says ‘Buckle Up’ for Generative AI

• Researchers found the first Linux variant of the RTM locker

• Good, Better And Best Security

• Industrial Espionage: Here’s All You Need to Know

• PCI DSS reporting details to ensure when contracting quarterly CDE tests

• How I Got Started: SOC Analyst

• #RSAC: Cyber-Attacks on Civilian Infrastructure Should Be War Crimes, says Ukraine Official

• Vietnamese Hackers Linked to ‘Malverposting’ Campaign

• CommScope Workers Left In The Dark After A Ransomware Attack

• Email Threat Report 2023: Key Takeaways

• What Is a Ping Flood and How to Prevent It?

• Intel allows Google to hack its servers

• Semiconductor Revenue To Decline In 2023, Gartner Warns

• Charming Kitten targets critical infrastructure in US and elsewhere with BellaCiao malware

• RTM Locker Ransomware Targets Linux Architecture

• Why you should practice rollbacks to prevent data loss in a ransomware attack

• UK Regulator Defends Microsoft Activision Decision, After Angry Response

• 3 in 4 Americans worry AI will take their jobs

• CISA aims to reduce email threats with serial CDR prototype

• #RSAC: Securing Software Supply Chains Requires Outside-the-Box Thinking

• APT Groups Expand Reach to New Industries and Geographies

• What Is Cyber Threat Hunting? Process, Types and Solutions

• How we fought bad apps and bad actors in 2022

• Canada Attempts to Control Big Tech as Data Gets More Potent

• APT Groups Tomiris and Turla Target Governments

• TP-Link WAN-Side Vulnerability Exploited to Install Mirai Malware

• Aadya Raises $5 Million for SMB-Focused Security Platform

• Crooks use PaperCut exploits to deliver Cl0p and LockBit ransomware

• Hackers Leaked Minneapolis Students’ Psychological Reports

• Sifting Through The Top Cyber Myths In The Military Service Branches

• Microsoft Probes Complaints Of Edge Leaking URLs To Bing

• VMware Releases Patches For Workstation, Fusion Exploits

• SSL vs. TLS: Which should you be using?

• Paperbug Attack: New Politically-Motivated Surveillance Campaign in Tajikistan

• Technologies Such As ChatGPT And Applications Are Affecting Modern Services

• What Is a Root Certificate? Differences Between Root and Intermediate Certificates

• Combating Kubernetes — the Newest IAM Challenge

• Security Risks of AI

• Microsoft Admits PaperCut Servers Used In LockBit and Cl0p Ransomware

• TP-Link High-Severity Flaw Added to Mirai Botnet Arsenal

• Zero Trust Data Security: It’s Time To Make the Shift

• Innovation Sandbox: Cybersecurity Investors Pivot to Safeguarding AI Training Models

• New ‘Atomic macOS Stealer’ Malware Offered for $1,000 Per Month

• Chinese Cyberspies Delivered Malware via Legitimate Software Updates

• Climate Change Impacts on Subsea Cables and Ramifications for National Security—A Legal Perspective

• 911? We Have an Emergency: Cyberattacks On Emergency Response Systems

• Photos: RSA Conference 2023 Early Stage Expo

• How To Choose The Right Software Development Service Provider For Your Startup

• Major Iot Technology Trends To Watch Out For In 2023

• Secure API Management For IoT: Basics And Fundamentals

• Tenable Makes Generative AI Security Tools Available to the Research Community

• Photos: RSA Conference 2023, part 3

• Thales CTE-RWP protects critical files and folders from ransomware attacks

• Skyhigh Security unveils major updates to product portfolio

• Securing Public Sector Software Throughout 2023 and Beyond

• Big Tech Crackdown Looms as EU, UK Ready New Rules

• Google Obtains Court Order to Disrupt CryptBot Distribution

• LimeRAT Malware Analysis: Extracting the Config

• CryptoRom: OkCupid scam cost Florida man $480k – we followed the money to Binance

• New LOBSHOT Malware Deployed Via Google Ads

• Cisco Zero-Day Flaw: Let Remote Attackers Launch XSS Attacks

• Brace Yourself for the 2024 Deepfake Election

• Securing Safari Browsers with Perception Point’s New Safari Extension

• Google Goes After CryptBot Distributors Stealing Sensitive Data

• PaperCut vulnerabilities leveraged by Clop, LockBit ransomware affiliates

• ThreatX strengthens API and application protection with Botnet Console and API Catalog 2.0

• OFAC Takes Action Against Accused Providing Material Support To North Korean Hackers

• Meta Pleases Investors After Sales Rise, As Profits Dive

• When Cyberattacks Have Nothing to Do with You – The Escalation of DDoS Cyberattacks due to Hacktivism

• RSA Conference 2023 – Announcements Summary (Day 3)

• Microsoft: Cl0p Ransomware Exploited PaperCut Vulnerabilities Since April 13

• Chinese APT Alloy Taurus Is Back – Linux Variant of PingPull Malware Is Active

• April 2023 Web Server Survey

• RTM Locker’s First Linux Ransomware Strain Targeting NAS and ESXi Hosts

• APT trends report Q1 2023

• Man Arrested for Selling Data on 300 Million Victims to Russians

• Microsoft Blames Clop Affiliate for PaperCut Attacks

• What Is SOC-as-a-Service (SOCaaS) and How Could Your Company Benefit?

• How To Install Mcent Browser In PC ( Windows 7, 8, 10, 11, and Mac )

• Despite Soaring Prices, Cybersecurity Insurance Keeps Growing Briskly

• Iranian Charming Kitten APT used a new BellaCiao malware in recent wave of attacks

• AI to Aid Democracy

• GitHub introduces private vulnerability reporting for open source repositories

• AI Is Everywhere, and How to Set Up an Old Mac as a Server – Intego Mac Podcast Episode 289

• Quest Software Podcast: The Democratisation of Data: Episode 4: In Data We Trust?

• Google Goes After CryptBot Distributors

• Microsoft Confirms PaperCut Servers Used to Deliver LockBit and Cl0p Ransomware

• The Importance Of Youtube Tags For Video Optimization And Discovery

• How To Install Premiere Pro Transitions

• Drones will deliver medical supplies through this pioneering 5G service

• Do you know what your supply chain is and if it is secure?

• The State of Responsible Technology

• What Are the Latest Developments from Thales in Data Security and IAM at RSA Conference 2023?

• The true numbers behind deepfake fraud

• LockBit Ransomware Group feels ashamed for the Cyber Attack

• Generative AI and security: Balancing performance and risk

• New Phishing Attacks Using ChatGPT to Develop Sophisticated Campaigns

• eBook: Security Compliance for CISOs

• CISOs struggle to manage risk due to DevSecOps inefficiencies

• Why juice jacking is overhyped

• Tessian Respond enables security teams to identify and respond to email threats

• How to set up your own Mac server (with an old or new Mac)

• Accenture partners with Palo Alto Networks to improve visibility across IT networks

• Decoy dog toolkit plays the long game with Pupy RAT

• APC warns about critical vulnerabilities in online UPS monitoring software

• Update your PaperCut application servers now: Exploits in the wild

• US senator open letter calls for AI security at ‘forefront’ of development

• #RSAC: Experts Urge Applying Lessons Learned from Russia-Ukraine Cyberwar to Potential China-Taiwan Scenario

• IBM launches QRadar Security Suite for accelerated threat detection and response

• How ransomware victims can make the best of a bad situation

• Google 2FA Syncing Feature Could Put Your Privacy at Risk

• Microsoft probes complaints of Edge leaking visited URLs to Bing

• Smart city lab tests IoT network to protect pedestrians, cyclists

• RSA Conference 2023 – How AI will infiltrate the world

• #RSAC: Pro Sports Grapple with Convergence of Cyber and Physical Security Challenges

• China-linked Alloy Taurus APT uses a Linux variant of PingPull malware

• IT Security News Daily Summary 2023-04-26

• Maine Gets Another (Necessary) Opportunity to Defund Its Local Intelligence Fusion Center

• Et esse laboriosam At consequatur nemo eum quibusdam voluptatum?

• Accelerated FAA modernization will suffer under stopgap funding, says agency head

• Urban-rural collaborations help eliminate transit deserts and improve mobility equity

• Microsoft probes complaints of Edge leaking URLs to Bing

• BigID and Thales Collaborate to Deliver Comprehensive Data Protection and Privacy Compliance

• Security Leaders Are Finally Getting a Seat at The Table with Corporate Leadership – Make Good Use of Your Time There.

• Greenpeace Stands Up Against SLAPPs And Wins

• President’s AI advisory committee says the government needs clearer leadership on the technology

• Generative AI helps spot malicious open-source code

• AFRL wants white papers for $500M quantum information science solicitation

• Find high-paying cybersecurity and IT support jobs in these U.S. cities

• CrowdStrike details new MFA bypass, credential theft attack

• Linux Shift: Chinese APT Alloy Taurus Is Back With Retooling

• A US Bill Would Ban Kids Under 13 From Joining Social Media

• High-Severity SLP Flaw Can Amplify DDoS Attacks up to 2,200 Times

• DoJ, Treasury accuses 3 men of laundering crypto for North Korea

• TrickBot malware

• Google leaking 2FA secrets – researchers advise against new “account sync” feature for now

• RCE Attacks Against Thousands Of Apache Superset Servers

• The Cybersecurity Talent Gap – Where do We Go from Here?

• US Bill To Require Parental Consent For Kids Use Of Social Media

• CyberGRX Announces Winners of the Inaugural Cyber Risk Nation Awards

• A component in Huawei network appliances could be used to take down Germany’s telecoms networks

• ASML Boss Warns Of Chip Supply Uncertainty

• Evasive Panda’s Backdoor MgBot Delivered Via Chinese Software Updates

• #RSAC: ISACA’s New Ransomware Incident Checklist to Aid Cyber Pros

• Forcepoint Data Security Everywhere simplifies DLP management

• Graylog 5.1 optimizes threat detection and response

• Cybersecurity leaders introduced open-source information sharing to help OT community

• Application Programming Interface (API) testing for PCI DSS compliance

• Critical Flaw Patched in VMware Workstation and Fusion

• Chinese Hackers Spotted Using Linux Variant of PingPull in Targeted Cyberattacks

• Alphabet Beats Expectations, Announces $70 Billion Share Buyback

• NIST releases draft post-quantum encryption document

• #RSAC: Google Cloud Introduces Generative AI to Security Tools as LLMs Reach Critical Mass

• Celebrating SLSA v1.0: securing the software supply chain for everyone

• Cloud Storage: Is Stored Data Secure ?

• Decoy Dog Malware Toolkit: A New Cybersecurity Threat

• Healthy security habits to fight credential breaches: Cyberattack Series

• F-Secure to acquire Lookout Mobile Security

• UK’s CMA Blocks Microsoft’s $69bn Acquisition Of Activision Blizzard

• Benefits of Manual Penetration Testing

• Cybersecurity Futurism for Beginners

• RSAC panel warns AI poses unintended security consequences

• Alloy Taurus Hackers Update PingPull Malware to Target Linux Systems

• Facebook Glitch Charged Users Hundreds Of Thousands For Ads

• Metaverse Version of the Dark Web Could be Nearly Impenetrable

• IMA Financial Group Targeted in Cyberattack. Confidential Consumer Data Spilled

• Be Wary Because Cybercriminals Are Getting More Ingenious

• Google Delivers Bumblebee Malware

• Google’s New Two-Factor Authentication Isn’t End-To-End Encrypted

• How AI Subverts Democracy And How To Fight Back

• US Charges North Korean In Crypto Laundering Conspiracies

• Apache Superset: A Story Of Insecure Default Keys, Thousands Of Vulnerable Systems, Few Paying Attention

• Evilflare: Circumventing Cloudflare’s Protection

• Photos: RSA Conference 2023, part 2

• Eclypsium launches Supply Chain Security Platform with SBOM capability

• How AIoT Will Reshape the Security Industry in 2023

• How to lock an Apple Note to keep prying eyes out of your ideas

• Challenges of Implementing AI With “Democratic Values”: Lessons From Algorithmic Transparency

• A New Approach to Prosecuting Border Militias

• Cynet announces platform updates to help organizations protect their systems and infrastructure

• Common insecure configuration opens Apache Superset servers to compromise

• Uptycs unveils cloud security early warning system

• 3 reasons why Motorola’s $699 ThinkPhone is a dream phone for business power users

• RSA Conference 2023 – Announcements Summary (Day 2)

• SLP Vulnerability Allows DoS Attacks With Amplification Factor of 2,200

• FIN7 Hackers Caught Exploiting Recent Veeam Vulnerability

• Malware-Free Cyberattacks Are On the Rise; Here’s How to Detect Them

• Effects of the Hive Ransomware Group Takedown

• Charming Kitten’s New BellaCiao Malware Discovered in Multi-Country Attacks

• Thousands of publicly-exposed Apache Superset installs exposed to RCE attacks

• The Anatomy of a Scalping Bot: NSB Was Copped!

• KuppingerCole Secrets Management Report Names Keeper Security an Overall Leader

• Why you shouldn’t turn on Google Authenticator’s cloud sync feature

• RSA Conference 2023 video walkthrough

• ExtraHop simplifies approach to intrusion detection for security teams with new solutions

• Code42 adds real-time blocking capabilities to the Incydr IRM solution

• Traceable AI Zero Trust API Access detects and classifies the data that APIs are handling

• Cisco Launches Advanced Threat Detection XDR Platform

• CISOs Rethink Data Security With Info-Centric Framework

• Chinese Hackers Using MgBot Malware to Target International NGOs in Mainland China

• Saas Security: The Need For Continuous Sustenance

• SMB cyber safety: De-risking catastrophic events

• Microsoft Shares Rise As Q3 Earnings Beat Forecasts

• Browser Security Survey: 87% of SaaS Adopters Exposed to Browser-borne Attacks

• Sophos’ MDR service’s customer base grows 33% in first 6 months since launching new capabilities

• VMware fixes critical flaws in virtualization software (CVE-2023-20869, CVE-2023-20870)

• ManageEngine releases MSSP Edition of Log360 Cloud

• Google Authenticator updated, finally allows syncing of 2FA codes

• 7,413 People Were Impacted by Alaska Railroad Data Breach

• Japan’s ispace Admits Moon Lander Likely Crashed

• Top Considerations for Securing AWS Lambda, part 2

• Join Check Point at RSA Conference in San Francisco

• VMware Patches Critical Vulnerability Disclosed at Pwn2Own Hacking Contest

• Organizations Warned of Security Risk in Default Apache Superset Configurations

• VMware Resolves Crucial Pwn2Own Zero-Day Exploit Chain

• Western Digital hit by hackers

• Operation Cookie Monster Shuts Down a Global Dark Web Marketplace

• Decoy Dog Malware Tool Kit Spotted Via Malicious DNS Queries

• Apache Superset Vulnerability: Insecure Default Configuration Exposes Servers to RCE Attacks

• World IP Day 2023: Defending Against the On-Going Threat to Intellectual Property

• New SLP Vulnerability Could Enable Massive DDoS Attacks

• New Type of Side-Channel Attack Impacts Intel CPUs and Allows Data Leakage

• What is a WAF? (Web Application Firewall)

• Explaining the PCI DSS Evolution & Transition Phase

• Quad Countries Prepare For Info Sharing on Critical Infrastructure

• Pro-Russia hacking group executed a disruptive attack against a Canadian gas pipeline

• The good, the bad and the generative AI

• Update Now: PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation

• UK Cyber Pros Burnt Out and Overwhelmed

• Why performing security testing on your products and systems is a good idea

• VMware Releases Critical Patches for Workstation and Fusion Software

• Quad nations unite to fight Cyber Attacks on Critical Public Infrastructure

• Is the fear of AI being overblown

• Overcoming industry obstacles for decentralized digital identities

• Google Authenticator Major Update Brings Cloud Backup Feature

• New coercive tactics used to extort ransomware payments

• Are you ready for PCI DSS 4.0?

• CISOs: unsupported, unheard, and invisible

• Guidance on network and data flow diagrams for PCI DSS compliance

• Halo Security detects exposed secrets and API keys in JavaScript

• Immuta releases new data security features to help users accelerate remediation efforts

• Seclore puts risk into focus with new data classification and risk insights capabilities

• Akamai Prolexic Network Cloud Firewall defends organizations against DDoS attacks

• Corporate boards pressure CISOs to step up risk mitigation efforts

• US Cyberwarriors Thwarted 2020 Iran Election Hacking Attempt

• Accenture and Google Cloud expand collaboration to accelerate cybersecurity resilience

• #RSAC: Ransomware Poses Growing Threat to Five Eyes Nations

• #RSAC: Characterless Security Training Fails to Change User Behavior

• CISOs Rethink Data Security with Info-Centric Framework

• Black Basta ransomware attacks Yellow Pages Canada

• GuLoader returns with a rotten shipment

• NetRise raises $8 million to advance XIoT security technology

• Deep Instinct partners with eSentire to protect customers from unknown and zero-day attacks

• Apache Superset: A story of insecure default keys, thousands of vulnerable systems, few paying attention

• RSA: Cisco launches XDR, with focus on platform-based cybersecurity

• 8 Best Password Managers for Business & Enterprises in 2023

• Dig Security Announces New Integration With CrowdStrike

• Datadog’s 2023 State of Application Security Report Presents Top AppSec Trends

• CODE PA to design simple, seamless, secure digital services

• BlackBerry Extends Partnership With Managed Security Services Provider (MSSP) to Ensure SMBs are Set Up for Cyber Success

• VR drives next-gen situational awareness for public safety

• AI Experts: Account for AI/ML Resilience & Risk While There’s Still Time

• SLP flaw allows DDoS attacks with an amplification factor as high as 2200 times

• IT Security News Daily Summary 2023-04-25

• Mobile device security policy

• Top 10 Cloud Access Security Broker (CASB) Solutions for 2023

• ReliaQuest Adds AI Capabilities to GreyMatter Intelligent Analysis

• NetWitness Partners With Palo Alto Networks, Broadcom to Launch SASE Packet Integrations at RSA Conference 2023

• Forcepoint Delivers Data Security Everywhere, Extending DLP Policies From Endpoints to the Cloud

• Akamai Introduces Prolexic Network Cloud Firewall

• Welcome to FCW Insider Chat

• Vantage Travel Experiences Data Security Incident

• SmartStoreNET: Malicious Message Leading To E-Commerce Takeover

• #RSAC: AI Can Help Save Our Democracy

• Large 2,200x DDoS Amplification Assault Due To New SLP Flaw

• Menaced by miscreants, critical infrastructure needs a good ETHOS. Ah, here’s one

• Azure Data Box

• OMB, CISA set to release common form for software self-attestation

• NASCIO’s game plan for enterprise portfolio management

• VMware addressed two zero-day flaws demonstrated at Pwn2Own Vancouver 2023

• Texas Should Leave Its Anti-SLAPP Law Alone

• RSAC 2023: SecurityScorecard launches ‘first’ GPT-4 security ratings platform

• NASA struggles to improve workforce diversity

• Bugcrowd CTO talks hacker feedback, vulnerability disclosure

• PaperCut security vulnerabilities under active attack – vendor urges customers to patch

• ‘Good’ AI Is the Only Path to True Zero-Trust Architecture

• Active Directory Penetration Testing Cheatsheet

• DOD components on the clock to certify compliance with classified access rules in the wake of Discord leaks

• A Security Team Is Turning This Malware Gang’s Tricks Against It

• How ChatGPT and other advanced AI tools are helping secure the software supply chain

• Attackers Abuse PaperCut RCE Flaws to Take Over Enterprise Print Servers

• Cloud-native security metrics for CISOs

• #RSAC: Election Protection is CISA’s Top Priority for Next 18 Months

• BigID launches BigAI, a ‘privacy-by-design’ LLM  designed to discover data

• #RSAC: GPT-4 Empowers Cybersecurity Leaders to Make Smarter Risk Decisions

• The Decline in Ransomware: Does It Actually Increase Risks for Organizations?

• Internal Documents Show How Little the FBI Did to Correct Misuse of Section 702 Databases

• How to send password-protected emails in Gmail

• Secure Access Startup Sonet.io Emerges From Stealth With $6 Million in Funding

• Token Gets $30M Funding for Biometrics MFA Smart Ring

• NetRise Adds $8 Million in Funding to Grow XIoT Security Platform

• Exposed Artifacts Seen In Misconfigured Cloud Software Registries

• Cyera enhances its AI-powered data security platform to stop sensitive data exfiltration

• Cisco XDR prioritizes security incidents using evidence-backed automation

• SecurityScorecard introduces security ratings platform with OpenAI’s GPT-4 search system

• Yellow Pages Canada Suffered a Cyberattack

• Improving your bottom line with cybersecurity top of mind

• Cloud forensics – An introduction to investigating security incidents in AWS, Azure and GCP

• What Comes After the Digital Transformation?

• Pennsylvania says it’s eligible for up to $5.2M cyber grant

• Yellow Pages Canada Hit by Cyber-Attack, Black Basta Claims Credit

• PoC Exploit Code Released for Critical Papercut Flaw

• Iranian Hackers “Educated Manticore” Target Israel With New Tools

• Google’s Authenticator App Now Lets You Sync 2FA Codes Across Devices

• A new Mirai botnet variant targets TP-Link Archer A21

• Google Adds Generative AI To Its Cloud Security Offerings

• Artificial Intelligence Takes RSA Conference By Storm

• Terra Co-Founder And 9 Staff Indicted For Role In Crypto Collapse

• Eight Years Since The Obama-Xi Agreement, Chinese Hacking Is Worse Than Ever

• Microsoft announces the 2023 Microsoft Security Excellence Awards winners

• New SLP Vulnerability to play catalyst to 2000x DDoS attacks

• Cybersecurity for Kids: 7 Tips for Teaching the Basics

• Space Force should look to the private sector to fill data gaps, watchdog says

• DOJ’s Monaco addresses ‘misperception’ of Joe Sullivan case

• Google, Mandiant highlight top threats, evolving adversaries

• Google Finds Flaws in Intel TDX After Nine-Month Audit

• Palo Alto Networks Unit 42 expands its DFIR service globally

• Most SaaS adopters exposed to browser-borne attacks

• Thales’ new secrets management solution improves DevOps and cloud security

• Macbook Security: Do I Need Antivirus for Macbook?

• Security Benefits of Enhanced Cloud Visibility

• Build a Web3 Ticketing System and Disrupt Online Ticketing

• Google Authenticator will now sync your 2FA codes to use on different devices

• Apiiro Launches Application Attack Surface Exploration Tool

• Millions of Exposed Artifacts Found in Misconfigured Cloud Software Registries

• Iranian Hackers Launch Sophisticated Attacks Targeting Israel with PowerLess Backdoor

• New SLP Vulnerability Could Let Attackers Launch 2200x Powerful DDoS Attacks

• Google researchers found multiple security issues in Intel TDX

• Global Infosec Award Winners Announced at RSA

• Abnormal Security expands its platform and launches new products

• VMware announces new security capabilities to help protect hybrid workforce

• How to Create a New Discord Account in 2 Minutes – A Comprehensive Guide

• Data on Resold Corporate Routers can be Used by Hackers to Access Networks

• US Sanctions Two For Aiding North Korean Crypto Thieves

• Reach Out to Peers and Vendors to Build Your Security

• Nvidia helps enterprises guide and control AI responses with NeMo Guardrails

• RSA Conference 2023 – Announcements Summary (Day 1)

• Kaspersky Analyzes Links Between Russian State-Sponsored APTs

• Building a Better SBOM

• The Political Cybersecurity Blindfold in Latin America

• Ukraine’s Nuclear Moment

• Imperva Unveils Latest API Security Enhancements

• Lookout Launches Mobile Endpoint Detection and Response for MSSPs to Help Close the Mobile Security Gap for Customers

• Iranian Hackers Launch Sophisticated Attacks Targeting Israel with Powerless Backdoor

• Spotify Surpasses Half-Billion Monthly Users

• Check Point Software Technologies and BBT.live Join Forces to Bring Enhanced Cybersecurity to Remote Networks with Secure SD-WAN Solution

• RidgeShield monitors traffic across workloads and enforces unified security policies

• Key Tech Dominating On Online Sportsbooks

• Vehicles Stolen Using High-Tech Methods by Criminals

• Modernizing Vulnerability Management: The Move Toward Exposure Management

• Google Audit Finds Vulnerabilities in Intel TDX

• Insider Q&A: OpenAI CTO Mira Murati on Shepherding ChatGPT

• Google Cloud Introduces Security AI Workbench for Faster Threat Detection and Analysis

• Lazarus Subgroup Targeting Apple Devices with New RustBucket macOS Malware

• Google adds new risk assessment tool for Chrome extensions

• GrammaTech and ArmorCode unify application security tools and intelligence

• AWS boosts Amazon GuardDuty with 3 new capabilities to protect varied workloads

• AnimeUltima 2023 – Top Alternatives to Watch Anime Online

• European Payments Initiative Buys Two Fintech Firms

• #RSAC: US DoJ Prioritizes Victim Support in Cybercrime Crackdown

• OTP Codes Synchronized Across Devices With Google Authenticator

• PaperCut Flaw Exploited to Hijack Servers, Fix Released

• Shanghai To Back Chip, AI Investments

• Google Authenticator App now supports Google Account synchronization

• IBM Security QRadar Suite streamlines security analysis throughout the incident process

• PoC exploit for abused PaperCut flaw is now public (CVE-2023-27350)

• Attackers are logging in instead of breaking in

• MITRE Caldera for OT tool enables security teams to run automated adversary emulation exercises

• Leveraging SaaS Data Security and Compliance Tools

• Check Point Research uncovers rare techniques used by Iranian-affiliated threat actor, targeting Israeli entities

• Falling Dwell Time May Be Due to Faster Threat Activity

• Cyberweapons Manufacturer QuaDream Shuts Down

• What Is Privileged Account and Session Management (PASM)?

• The Importance of Data Sciences in Today’s Day and Age

• The dark side of budgeting apps: potential security risks

• CISA Warns Of PaperCut Print Software Vulnerabilities Under Attack

• VirusTotal Code Insight: AI-powered malware analysis feature

• Japan Start-Up iSpace Prepares First Commercial Moon Landing

• Peugeot leaks access to user information in South America

• Arista Networks unveils AI-driven network identity service

• IBM’s Security QRadar Suite streamlines security analysis throughout the incident process

• How to Join a Playstation Party on PC? – Connecting with Friends

• Financial Trading Desktop And Mobile Apps To Try Out In 2023

• Cool, Funny, Best Gaming Names – Creative Ideas for Your ING Personality

• 4 Key Elements Of Successful Construction Management

• CyberSmart makes waves in SME cybersecurity market

• Root Cause Analysis for Deployment Failures

• Cloud security 101: Understanding and defending your cloud infrastructure

• Thousands of Social Media Takedowns Hit People Smugglers

• North Korea-linked BlueNoroff APT is behind the new RustBucket Mac Malware

• This Evil Extractor Malware Steals Data from Windows Devices

• Indian Court Rejects Xiaomi Plea To Return Seized Funds

• Researchers Find 250 Million Artifacts Exposed in Misconfigured Registries

• UK Introduces Long-Delayed Digital Markets Legislation

• Need to improve the detection capabilities in your security products?

• Thales CipherTrust Manager Integrates with archTIS NC Encrypt to Secure Business Critical Content in Microsoft 365 Applications

• How to fortify your cryptocurrency security

• Cyber Attack news headlines trending on Google

• Securing the rapidly developing edge ecosystem

• The silent killers in digital healthcare

• AI tools help attackers develop sophisticated phishing campaigns

• Microsoft Changed the Method of Naming the Hacker Groups

• Google Authenticator App Gets Cloud Backup Feature for TOTP Codes

• How to establish network security for your hybrid workplace

• E-mail header analysis

• The double-edged sword of open-source software

• Rethinking the effectiveness of current authentication initiatives

• Google’s here to boost your cloud security and the magic ingredient? AI, of course

• SentinelOne unveils cybersecurity AI platform

• ByteDance is pushing a new app in the U.S. as TikTok faces a ban

• On Validation, pt III

• New Events Ripper Plugins

• #RSAC: Climate Change is Increasing Cyber-Risks

• A week in security (April 17 – 23)

• Adult content malvertising scheme leads to clickjacking

• Removing the human: When should AI be used in emotional crisis? Lock and Code S03E09

• #RSAC: Cyber Intrusion Campaign Against Three US Federal Agencies Thwarted

• National Cybersecurity Alliance launches HBCU Scholarship Program

• Tangled Up: ‘Tomiris’ APT Uses Turla Malware, Confusing Researchers

• Millions of Artifacts, Misconfigured Enterprise Software Registries Are Ripe for Pwning

• Your Messaging Service Should Not Be a DEA Informant

• State health data sharing limited by access to broadband, staff and funds

• #RSAC: Understanding AI’s Role in Cybersecurity Beyond the Hype

• AuKill tool uses BYOVD attack to disable EDR software

• ZScaler and Rubrik CEOs on securing the cloud through new partnership

• IT Security News Daily Summary 2023-04-24

• Analysis paralysis: When too much data reduces decision-making

• Security Experts Warn About New Scam Involving Hackers Who Impersonate Facebook

• California Bill to Stop Dragnet Surveillance of People Seeking Reproductive and Gender-Affirming Care Passes Key Committees

• ZScaler and Robrik CEOs on securing the cloud through new partnership

• How fiends abuse an out-of-date Microsoft Windows driver to infect victims

• DHS outlines cyber priorities in release of delayed review

• How a shift to the cloud streamlined one state’s professional licensing

• Google Workspace Extends Enterprise-Grade Security and Device Management for Hybrid Work With Okta and VMware

• Beyond Anti-Virus ‘Shark Nets’: Why Current Approaches to Cybersecurity Need to Change

• ImmuniWeb AI Platform

• How this gang abuses an out-of-date Microsoft Windows driver to infect victims

• NIST sets sights on implementing identity provisions from the CHIPS Act

• Misconfigured Registries: Security Researchers Find 250 Million Artifacts Exposed

• First US Appellate Court to Decide Finds Geofence Warrant Unconstitutional

• How Cyber Insurance Changed Cybersecurity

• Is the Biden administration’s management agenda getting back on track?

• Investors Place Early $4 Million Bet on Stack Identity

• Experts released PoC Exploit code for actively exploited PaperCut flaw

• SPanel: Taking Website Security to the Next Level

• If you haven’t patched Microsoft Process Explorer, prepare to be pwned

• AI-generated spam may soon be flooding your inbox – and it will be personalized to be especially persuasive

• North Korean Foreign Trade Bank Representative Charged in Crypto Laundering Conspiracies

• KuCoin Twitter Account Hacked, Losses $22.6K In Crypto Scam

• Huntress: Most PaperCut Installations Not Patched Against Already-Exploited Security Flaw

• Adrian Stone Joins Moderna as CISO

• Double zero-day in Chrome and Edge – check your versions now!

• #RSAC: Computer Science Courses Must Teach Cybersecurity to Meet US Government Goals

• Intel Let Google Cloud Hack Its New Secure Chips and Found 10 Bugs

• Don’t let manual processes hold you back, automate your AppSec

• Google Authenticator now supports Google Account synchronization

• Stay compliant and protect sensitive data with Zero Trust security

• Securing the Edge Ecosystem Global Research released – Complimentary report available

• Microsoft launches bug bounty program for the new Bing

• Scammers Impersonate Meta in Facebook Campaign With 3200 Profiles

• Google Cloud Announces New Security AI Workbench and Ecosystem Expansion at RSAC 2023

• Proton Launches ProtonPass Password Manager With E2E Encryption

• Mullvad VPN Received Data Warrant – Had None To Share

• Introducing VirusTotal Code Insight: Empowering threat analysis with generative AI

• Google releases security LLM at RSAC to rival Microsoft’s GPT-4-based copilot

• Incident response policy

• RSA Conference 2023 highlights strength through alliances

• US Navy Contractor Fincantieri Marine Group Hit by Cyber-attack

• ZeroFox to Acquire LookingGlass, Broadening Global Attack Surface Intelligence Capabilities

• Akamai Brand Protector defends against phishing attacks and fake websites

• Flashpoint Ignite accelerates cross-functional risk mitigation and prevention

• D3 Security MSSP Client Portal simplifies information sharing between MSSPs and clients

• DNS Layer Security Explained. How It Stops Ransomware and Other Cyberattacks

• Getting started with the CDMC framework—Microsoft’s guide to cloud data management

• How to make sure the reputation of your products and company is good

• SSD with in-built ransomware prevention capabilities

• DHS announces first-ever AI task force

• Gmail App Passwords: What they are, how to create one, and why to use them

• Tomiris and Turla APT Groups Collaborate to Target Government Entities

• Cisco Unveils Solution to Rapidly Detect Advanced Cyber Threats and Automate Response

• Avoiding Mandatory Transparency’s Pitfalls in Online Safety Legislation

• The Supreme Court’s Halkbank Decision Explained

• Tourist Cyber Threats Exposed: Where and When to Use a Travel VPN

• ChatGPT: A Game-Changer or a Cybersecurity Threat

• The IRS is Deploying Four Investigators Across the Globe to Combat Cybercrime

• The Needs of a Modernized SOC for Hybrid Cloud

• SentinelOne experiments with GPT-4 as part of new threat hunting platform

• North Korean Hackers Target Mac Users With New ‘RustBucket’ Malware

• New Data Sharing Platform Serves as Early Warning System for OT Security Threats

• Capita Admits Data Stolen During Cyberattack

• Pro-Russian Hackers Target European Air Traffic Control

• GhostToken Vuln Could Permanently Expose Data Of Google Users

• If You Haven’t Patched Microsoft Process Explorer, Prepare To Get Pwned

• The Incidence of EvilExtractor Malware Rises Across Europe and the U.S.

• EFF and ECNL’s Comment to the Meta Oversight Board on the Term ‘Shaheed’

• 10 Best Practices for Using Kubernetes Network Policies

• Ransomware Hackers Using AuKill Tool to Disable EDR Software Using BYOVD Attack

• Russian Hackers Tomiris Targeting Central Asia for Intelligence Gathering

• 3CX breach linked to previous supply chain compromise

• Organizations are stepping up their game against cyber threats

• Trellix Threat Intelligence enhancements accelerate threat analysis and response

• How To Build Your Online Course And Get Some Profit Out Of It?

• UK Government Pledges £100m For AI Taskforce

• These two countries are teaming up to develop AI for cybersecurity

• Cybersecurity Survival: Hide From Adversarial AI

• EvilExtractor, a new All-in-One info stealer appeared on the Dark Web

• China To Explore 3D Printing For Moon Base

• CrowdStrike Introduces CrowdStream to Accelerate and Simplify XDR Adoption

• Palo Alto Networks Takes Aim At Cyberattacks With the Expansion of Unit 42’s Digital Forensics & Incident Response Service Globally

• Rethinking Safer AI: Can There Really Be a ‘TruthGPT’?

• Zimperium Launches Unified Mobile Security Platform for Threat Detection, Visibility, and Response

• Hackers Abuse Outdated Eval PHP WordPress Plugin To Deploy Backdoors

• Machine Learning and Deep Learning with GPU servers

• Evil Extractor Infostealer Targets Windows In Recent Phishing Campaign

• Attackers Abuse Kubernetes RBAC to Deploy Persistent Backdoor

• Hackers Exploit Outdated WordPress Plugin to Backdoor Thousands of WordPress Sites

• Study: 84% of Companies Use Breached SaaS Applications – Here’s How to Fix it for Free!

• Russian cybercrime group likely behind ongoing exploitation of PaperCut flaws

• Cato Networks Introduces Instant RBI Featuring Single-Click Activation

• Enterprise-Attacking Malware Toolkit Analyzing 70 Billion DNS Queries Daily

• 5 Years On: What did we learn from the Government Cryptojacking Attack?

• External Signs of Narcissism – Raising Awareness to Avoid Collateral Damage

• SolarWinds Platform Update Patches High-Severity Vulnerabilities

• Critical Flaw in Inea ICS Product Exposes Industrial Organizations to Remote Attacks

• Yellow Pages Canada Alerts of Cyberattack As Black Basta Leaks Data

• Threat Actors Can Use Old Routers’ Data to Breach Corporate Networks

• US Urges South Korea Not To Fill Micron Shortfall In China

• Silicon In Focus Podcast: How Green is Your Tech Budget?

• Former OpenSea Employee Faces Criminal Charges Over NFT Trades

• If you haven’t patched Microsoft Process Explorer, prepare to get pwned

• Outpost24 Appoints New Chief Strategy Officer

• VMware plugs security holes in VMware Aria Operations for Logs (CVE-2023-20864, CVE-2023-20865)

• Securing Your Business Through Advanced Detection Technology

• The Future Of ‘fortnite’ Is In The Hands Of Its Players

• Ireland is the next country to ban TikTok

• ViperSoftX Updates Encryption, Steals Data

• UK Threatens End-to-End Encryption

• Does my local police station use face recognition?

• 38 Countries Take Part in NATO’s 2023 Locked Shields Cyber Exercise

• 7 Security Tips When Setting Up Your Smart Home

• Lockbit Ransomware Aims To Target macOS Systems – But May Not Be As Successful

• GhostToken Zero-Day Vulnerability Found In Google Cloud

• Budget Shopping App Temu Launches In Europe

• Ghosttoken – A Zero-Day Bug Let Hackers Create Invisible Google Accounts

• Cloud Complexity Means Bugs Are Missed in Testing

• Ofcom Finds Millions Missing Out On Cheaper Broadband

• Twitter Restores Blue Ticks For High-Profile Users

• The K-12 Report: A Cybersecurity Assessment of the 2021-2022 School Year

• Spring is the Perfect Season for a Digital Declutter

• American Bar Association Breach Hits 1.5 Million Members

• Hackers can hack organizations using data found on their discarded enterprise network equipment

• How product security reached maturity

• Resecurity to showcase innovative cybersecurity solutions at RSA Conference 2023

• 3CX Hackers Also Compromised Critical Infrastructure Firms

• Tomiris called, they want their Turla malware back

• Software developers, how secure is your software?

• New All-in-One “EvilExtractor” Stealer for Windows Systems Surfaces on the Dark Web

• Tails Operating System: The Means To Privacy and Security On Internet

• Russian Hackers Suspected in Ongoing Exploitation of Unpatched PaperCut Servers

• A third-party’s perspective on third-party InfoSec risk management

• Unlocking the passwordless era

• Lung Cancer detection possible 10 Years prior with AI

• What is offensive Cyber Capabilities

• Over 70 billion unprotected files available on unsecured web servers

• How CISOs navigate security and compliance in a multi-cloud world

• MEO – 8,227 breached accounts

• Study of past cyber attacks can improve organizations’ defense strategies

• That 3CX supply chain attack keeps getting worse: More victims found

• Expel Vulnerability Prioritization identifies critical and‌ damaging vulnerabilities

• Patented.ai releases LLM Shield to safeguard sensitive info from chatbots

• Chinese scientists calculate the Milky Way’s mass as 805 billion times that of our Sun

• Biden’s cybersecurity strategy is bold, but it may get held up in Congress

• Health insurer Point32Health suffered a ransomware attack

• IT Security News Weekly Summary – Week 16

• IT Security News Daily Summary 2023-04-23

• Zero Trust Network for Microservices With Istio

• What is Single Sign-on (SSO) ? – Solution to Ensure Your Company Data Security

• Linux Malware Set to Be Deployed by North Korean APT Group

• Experts spotted first-ever crypto mining campaign leveraging Kubernetes RBAC

• Can Messaging Apps Locate You? Here’s All You Need to Know

• Why Security Assistance Often Fails

• Deepfake Apps Remain Popular in China Despite Crackdown

• Shadow IT, SaaS Pose a High Security Threat for Businesses

• Do RFID blocking cards actually work? My Flipper Zero revealed the truth

• Hacker Group Names Are Now Absurdly Out of Control

• Security Affairs newsletter Round 416 by Pierluigi Paganini – International edition

• Week in review: 5 free online cybersecurity resources for SMBs, AI tools might fuel BEC attacks

• Cyber Security Management System (CSMS) for the Automotive Industry

• Terravision – 2,075,625 breached accounts

• Cordoniq Newest Competitor in 2023 ‘ASTORS’ Homeland Security Awards

• Abandoned Eval PHP WordPress plugin abused to backdoor websites

• IT Security News Daily Summary 2023-04-22

• The Current State of Wireless (In)security, by Bastille CTO

• ChatGPT Can be Tricked To Write Malware When You Act as a Developer Mode

• CISA adds MinIO, PaperCut, and Chrome bugs to its Known Exploited Vulnerabilities catalog

• DNS Malware Toolkit Discovered by Infoblox and Urged to be Blocked

• ChatGPT may hinder the cybersecurity industry

• For recession-proof security spending, embrace the value of multi-layered integrations

• How to Handle Secrets in Jenkins

• At least 2 critical infrastructure orgs breached by North Korea-linked hackers behind 3CX attack

• Data of 2.5 Lakh Customers Sent to Personal Account by CFPB Employee

• Ransomware Attacks Surge in March 2023

• Summary Of News And Events That Happened This Week

• OpenAI’s Insatiable Need for Data is Coming Back to Harm it

• ChatGPT: A Threat to Privacy?

• First-Ever Cyber Attack Via Kubernetes RBAC to Create Backdoor on Clusters

• Criminals Are Using Tiny Devices to Hack and Steal Cars

• North Korean 3CX Hackers Also Hit Critical Infrastructure Orgs: Symantec

• The Best Laser Cutting Machine Wood: Tech Tips 2023

• 3D Revolution: The Industries Transformed by 3D Modeling – 2023 Guide

• Build or Buy your own antivirus product

• Accidental ‘write’ Permissions In Alibaba PostgreSQL Let Attackers Access Sensitive Data

• European air traffic control confirms website ‘under attack’ by pro-Russia hackers

• Accidental ‘write’ Permissions In Alibaba postgreSQL let Attackers Access Sensitive Data

• CISA Adds 3 Actively Exploited Flaws to KEV Catalog, including Critical PaperCut Bug

• Lazarus X_TRADER Hack Impacts Critical Infrastructure Beyond 3CX Breach

• A10 integrates Next-Gen WAF to enable multi-layered security

• Onapsis updates its platform to strenghten ERP cybersecurity

• Next DLP adds ChatGPT policy to its Reveal platform

• Virsec automates the path to zero trust workload protection

• AuKill – A Malware That Kills EDR Clients To Attack Windows Systems

• Two qudits fully entangled

• Stop This Dangerous Bill That Would Normalize Face Surveillance in California

• Update now, there’s a Chrome zero-day in the wild

• Would-be hitman busted after being fooled by parody website

• US Facebook users can now claim Cambridge Analytica settlement cash

• If Apple allows sideloading in iOS 17, how will iPhone security be affected?

• 2023-04-19 – Quick post: Qakbot (Qbot) activity, distribution tags BB24 and obama254

• Top 10 Citizenship By Investment Programs For IT Firms In 2023

• Microsoft pushes for more women in cybersecurity

• Attackers Continue to Leverage Signed Microsoft Drivers

• Be Lawfare’s Next Director of Development!

• The STOP CSAM Act Would Put Security and Free Speech at Risk

• IT Security News Daily Summary 2023-04-21

• Friday Squid Blogging: More on Squid Fishing

• Most multicloud troubles are self-inflicted, security researchers say

• How local governments can rise to the infrastructure complexity challenge

• Shields Health Breach Exposes 2.3M Users’ Data

• American Bar Association (ABA) suffered a data breach,1.4 million members impacted

• 7 Database Security Best Practices: Database Security Guide

• SSE Decoded: Answers to Your Questions About Secure Service Edge

• Common Vulnerability Scoring System (CVSS)

• ‘EvilExtractor’ All-in-One Stealer Campaign Targets Windows User Data

• North Korea’s Kimsuky APT Keeps Growing, Despite Public Outing

• TSA wants automated ID verification, ML detection algorithms at security gates

• API security becoming C-level cybersecurity concern

• Symantec: North Korean 3CX Hackers Also Hit Critical Infrastructure Orgs

• Intel Prioritizes Security in Latest vPro Chips

• EvilExtractor Infostealer Campaign Targeting Windows OS

• Chromium vulnerabilities threaten Electron app security

• How to vet your vendors: Ensuring data privacy and security compliance

• How Veza helps companies map data access and stop insider threats

• Transit agency’s cloud-based customer service boosts efficiency, visibility

• GhostToken GCP Bug Gives Entry To Attackers Into Google Accounts

• VMware patches break-and-enter hole in logging tools: update now!

• Hacking Pickleball

• Halcyon Secures $50M Funding for Anti-Ransomware Protection Platform

• China Building Cyberweapons To Hijack Enemy Satellites, Says US Leak

• DHS Announces AI Task Force, Security Sprint On China Related Threats

• WhatsApp Used In BEC Scam To Pilfer $6.4M

• APT Mint Sandstorm Quickly Exploits New PoC Hacks

• Shadow IT, SaaS Pose Security Liability for Enterprises

• Criminal Records Service Still Not Working Four Weeks After Cyber Attack

• A Corporate Secret is not Destroyed, it’s Discarded: Threat of Old Routers

• CFPB Employee Sends 256,000 Consumers’ Data to Personal Email

• Indian ICICI Bank data breach exposes 3.8 million customer information

• Identity and Access Management (IAM) in Payment Card Industry (PCI) Data Security Standard (DSS) environments.

• AI/ML advancements outpacing government policies, cyber experts warn

• Evil Extractor Targets Windows Devices to Steal Sensitive Data

• Arizona Teachers’ Sensitive Data Stolen in Ransomware Attack on TUSD

• Hackers are Employing This Top Remote Access Tool to Get Unauthorised Access to Your Company’s Networks

• DevSecOps: AI is reshaping developer roles, but it’s not all smooth sailing

• Trojanized Installers Used to Distribute Bumblebee Malware

• Security a top priority in the software development process, report finds

• Google Cloud Platform Vulnerability Led to Stealthy Account Backdoors

• Five Eyes Agencies Issue Cybersecurity Guidance for Smart Cities

• Abandoned WordPress Plugin Abused for Backdoor Deployment

• How to create an SBOM, with example and template

• Kubernetes RBAC Exploited in Large-Scale Campaign for Cryptocurrency Mining

• Pro-Russia hackers launched a massive attack against the EUROCONTROL agency

• Using the iPhone Recovery Key to Lock Owners Out of Their iPhones

• Cisco and VMware Issues Security Updates For Critical Flaws

• How the Talent Shortage Impacts Cybersecurity Leadership

• The Tangled Web of IR Strategies

• The Black Sea Grain Deal: Fragile Cooperation Between Ukraine and Russia

• Celebrities Lose Blue Ticks, As Twitter Purges Legacy Verified Accounts

• Open Questions After Halkbank

• ICICI Bank Data Leak – Millions of Customers’ Sensitive Data Exposed

• Malware is proliferating, but detection measures bear fruit: Mandiant

• 14 Kubernetes and Cloud Security Challenges and How to Solve Them

• GhostToken Flaw Could Let Attackers Hide Malicious Apps in Google Cloud Platform

• Alphabet To Merge AI Units Deepmind And Google Brain

• Stay Ahead of Cyberthreats with Proactive Threat Hunting

• US Medical Service Data Breach Impacts 2.3M People

• GitHub Announces New Security Improvements

• #CYBERUK23: Five Takeaways From the NCSC Conference on the UK’s Cyber Strategy

• Q1 2023 Cyber Attacks Statistics

• The Rise Of Online Betting Houses In Japan: A Threat To Society Or An Economic Opportunity?

• Microsoft To Remove Twitter From Advertising Platform, Musk Threatens Lawsuit

• Securing our Sustainable Future

• Top Considerations for Securing AWS Lambda, part 1

• Capita Confirms Data Breach After Ransomware Group Offers to Sell Stolen Information

• House Committee Hears Testimony on DC Health Data Breach

• The War on Passwords Enters a Chaotic New Phase

• N.K. Hackers Employ Matryoshka Doll-Style Cascading Supply Chain Attack on 3CX

• Cisco fixed critical flaws in the Industrial Network Director and Modeling Labs solutions

• Cybercriminals Abusing an Abandoned WordPress Plugin for Malicious Code Injection

• International cops urge Meta not to implement secure encryption for all

• The Best Crypto Games For Winning Big

• 3CX Cyber Attack: It Was The Aftermath Of Another Supply-Chain Attack

• 6 Best Marketing Data Extractor Tools for Your Business Needs

• Russian APT28 Group Exploiting Vulnerabilities in Cisco Routers

• Operation DreamJob – New Linux Malware Linked With 3CX Supply-Chain Attack

• Millions of Records With Sensitive Data Leaked by ICICI Bank

• Russia-linked APT28 Group Exploiting Vulnerabilities in Cisco Routers

• Government Agencies Release Blueprint for Secure Smart Cities

• China Developing Anti-Satellite Weapons – Report

• Intro to phishing: simulating attacks to build resiliency

• Healthcare organisations urged to improve system security

• Capita: Data Was Taken in March Cyber Incident

• The Ultimate Guide To Building A Passive Income Portfolio 2023

• 5 Best Airflow PC Cases to Buy in 2023 – Beat the Heat

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Is Twitter Blue Tick removal a data security concern

• Understanding the Different Types and How to Detect Them

• Thanks for fixing the computer lab. Now tell us why we shouldn’t expel you?

• Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products

• Scammers using social media to dupe people into becoming money mules

• New infosec products of the week: April 21, 2023

• The staying power of shadow IT, and how to combat risks related to it

• How Can You Identify and Prevent Insider Threats?

• Bugcrowd’s new self-serve PTaaS enable buyers to manage pen tests directly online

• Cofense Protect+ defends mid-size organizations from cyber threats

• Armorblox releases Graymail and Recon Attack Protection to stop malicious emails

• Sotero Ransomware Protection encrypts data to prevent theft and extortion

• Top three factors leading to burnout at work

• We’ve built A.I. and machine learning into our platform instead of ‘bolting’ them on: Software firm

• Catalyst Award

• Industry Eagle Award

• Government Eagle Award

• Infamous ransomware gang is now trying to target Mac users

• ChatGPT won’t take over from humans for now, says Infosys founder

• 3CX Breach Was a Double Supply Chain Compromise

• ChatGPT won’t take over from humans for now, says founder of Indian tech giant

• Talon Cyber Security collaborates with Microsoft to provide ChatGPT access

• Dashlane launches Confidential SSO powered by AWS Nitro Enclaves

• Intruder joins Google Cloud Partner Advantage program

• Orange Cyberdefense strengthens position in healthcare security sector

• Fancy Bear known to be exploiting vulnerability in Cisco routers

• FTC tackles tech support scams by chasing payment processor firms

• QBot changes tactic, remains a menace to business networks

• What your peers said: G2 comparison of top Endpoint Security vendors

• Multinational ICICI Bank leaks passports and credit card numbers

• Bitsight Expands into Integrated Cyber-Risk Management

• Infoblox Uncovers DNS Malware Toolkit & Urges Companies to Block Malicious Domains

• VMware fixed a critical flaw in vRealize that allows executing arbitrary code as root

• ‘GhostToken’ Opens Google Accounts to Permanent Infection

• Major US CFPB Data Breach Caused by Employee

• 3CX Supply Chain Attack Tied to Financial Trading App Breach

• Red Canary Announces Readiness

• Lazarus APT group employed Linux Malware in recent attacks and was linked to 3CX supply chain attack

• IT Security News Daily Summary 2023-04-20

• New Google Chrome Zero-Day Bug Actively Exploited in Wide – Emergency Update!

• One city’s unexpected open-data benefits

• International Law Enforcement Agencies Condemn Facebook Encryption Plans

• ChatGPT’s other risk: Oversharing confidential data

• Cyberattack accelerates county’s modernization, cloud push

• Fortra completes GoAnywhere MFT investigation

• Cybersecurity still ‘high risk’ in GAO’s book after over 25 years

Generated on 2023-05-01 00:02:31.443013