IT Security News Weekly Summary – Week 07

• IT Security News Daily Summary 2023-02-19

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Frebniis malware abuses Microsoft IIS feature to create a backdoor

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• ENISA and CERT-EU warns Chinese APTs targeting EU organizations

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Indispensable but Insufficient: The Role and Limits of Special Operations in Strategic Competition

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Hackers disclose Atlassian data after the theft of an employee’s credentials

• GoDaddy: Hackers Grabbed Source Code And Inserts Malware

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Threat Analysts Identity an Incredibly Sneaky Windows Backdoor

• Zero-Knowledge Encryption Might Protect User Rights

• Fortinet Issues Patches for 40 Flaws Affecting FortiWeb, FortiOS, FortiNAC, and FortiProxy

• Tesla Recalls 363,000 Cars with ‘Full Self-Driving’ Function Following Safety Concerns

• How to Unlock Your iPhone With a Security Key

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Using ChatGPT by Employees Poses Some Risks

• Web3, Blockchain, and Cryptocurrency: Here’s All You Need to Know

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• 1000 Best Google Dorks List (Google Hacking Guide) – 2023

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• How to Build and Run a Security Operations Center (SOC Guide) – 2023

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Security Affairs newsletter Round 407 by Pierluigi Paganini

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Week in review: Microsoft, Apple patch exploited zero-days, tips for getting hired in cybersecurity

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• If you’re struggling to secure email forwarding, it’s not you, it’s … the protocols

• Cyber Security Management System (CSMS) for the Automotive Industry

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Hackers Start Using Havoc Post-Exploitation Framework in Attacks

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Fortinet Issues Patches for 40 Flaws Affecting FortiWeb, FortiOS, FortiOS, and FortiProxy

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• As ChatGPT Gains Popularity, Experts Call for Regulations Against Cybercrime

• RealDudesInc – 101,543 breached accounts

• Active Directory Penetration Testing Checklist – 2023

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• GoDaddy Hacked – Attacked Installed Malware on its Servers

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Alteryx Analytics Cloud platform updates boost decision intelligence

• QR code generator My QR Code leaks users’ login data and addresses

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Watching a Crypto Investment Scam WhatsApp Group

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• IT Security News Daily Summary 2023-02-18

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Twitter will allow using the SMS-based two-factor authentication (2FA) only to its Blue subscribers

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Twitter’s Two-Factor Authentication Change ‘Doesn’t Make Sense’

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• GoDaddy discloses a new data breach

• SMS-Based 2FA Will Be Limited to Twitter Blue Users

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• CAP Is Now Certified in Governance, Risk and Compliance (CGRC)

• New crypto-mining attack exploits vulnerabilities in Microsoft Exchange ProxyShell

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Twitter’s Two-Factor Authentication Change ‘Doesn’t Make Sense’

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• What Can Consumers Do to Protect Their Data?

• Small Businesses are Vulnerable to Cyberattacks

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Spain Orders Extradition of British Alleged Hacker to U.S.

• Hackers Ran Amok Inside GoDaddy for Nearly 3 Years

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Three Common Security Errors that Endanger Your Social Media Accounts

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Twitter Limits SMS-Based 2-Factor Authentication to Blue Subscribers Only

• Send me software, not hardware, Navy infowar leader says

• Utilizing an Integrated Approach for Application Security

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• GoDaddy Discloses Multi-Year Security Breach Causing Malware Installations and Source Code Theft

• Ransomware Group Siphons Data of 1 Million Patients Using a New Zero-Day Flaw

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Build or Buy your own antivirus product

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Latest Cyberthreats and Advisories – February 17, 2023

• Analysis: Cybersecurity Managers Fear ‘Catastrophic’ Cyber Event Now Likely Within Two Years

• Latest Cyberthreats and Advisories – February 10, 2023

• (ISC)² Puts Members at the Center of Our Cybersecurity Content in 2023

• The ethics of biometric data use in security

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Opsera enhances Salesforce DevOps platform to improve security and compliance standards

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Latest Cyberthreats and Advisories – February 17, 2023

• Are Industrial IoT Attacks Posing a Severe Threat to Businesses?

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• EU lawmakers argue against signing US data-transfer pact

• The Ultimate Guide What To Look Out for in Web Hosting

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• RSA Conference announces initial 2023 keynote speaker lineup

• Dynatrace and Snyk join forces to unify security insights across the entire software lifecycle

• China doesn’t care about your privacy, says ZeroFox CEO James Foster

• Why “Point-In-Time” Solutions Are Losing The Battle Against Sophisticated Fraud

• ‘Russian hacktivists’ brag of flooding German airport sites

• Intruder alert: FBI tackles ‘isolated’ IT security breach

• TikTok car theft challenge: Hyundai, Kia fix flaw

• Mortal Kombat ransomware forms tag team with crypto-stealing malware

• Two Supreme Court cases could change the Internet as we know it

• iPhone calendar spam: What it is, and how to remove it

• FBI contains ‘isolated cyber incident’ on its network

• What is Cyber Threat Hunting? Definition, Techniques & Steps

• Is OWASP at Risk of Irrelevance?

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• FBI Hack – Agency Investigating Internal Network Breach

• How To Collect and Ship Windows Events Logs With OpenTelemetry

• Facebook Is Still Auto-Generating Pages For Terrorist Groups

• IT Security News Daily Summary 2023-02-17

• Exploring the Top Cyber Security Career Options: From Ethical Hacking to Digital Forensics

• Twitter Created System To Promote Elon Musk Tweets – Report

• Google Launches Privacy Sandbox Beta for Android Users

• How To Test IoT Security

• Unlocking the Potential: Check Point’s Infinity Spark Offers Unmatched Benefits for Managed Service Providers (MSPs)

• How to achieve and maintain data compliance in 2023

• A Guide on 5 Common LinkedIn Scams

• FBI says its contained an ‘isolated cyber incident’ on its network

• What to Look for When Buying a Security Camera (2023): Tips and Risks

• Experts Warn of ‘Beep’ – A New Evasive Malware That Can Fly Under the Radar

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Traditional PAM solutions aren’t working, Keeper Security study finds

• Getting started with targeted public health interventions

• Google Translate Helps BEC Groups Scam Companies in Any Language

• Novel Spy Group Targets Telecoms in ‘Precision-Targeted’ Cyberattacks

• Check Point Boosts AppSec Focus With CNAPP Enhancements

• Meta Oversight Board Pledges Quicker Case Reviews

• Earthquake data powered by next-gen supercomputers

• New Protections for Food Benefits Stolen by Skimmers

• 9 Best Next-Generation Firewall (NGFW) Vendors

• Regular Pen Testing Is Key to Resolving Conflict Between SecOps and DevOps

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• IoC detection experiments with ChatGPT

• RedEyes Hackers Adopts New Malware, Steals Data From Devices

• Dragos Report Identifies Two New Threat Groups

• Gilad Gruber Appointed as Senior Vice President of Engineering at Salt Security

• ASML says ex-China employee misappropriated data relating to its critical chip technology

• PayPal Scammers Using Legitimate Accounts to Send Phishing Invoices

• Analysis: White House Cybersecurity Policy Maker – Secure Open Source Software Even If It Benefits ‘Adversaries’ We Should Do It Anyway

• Spoiler: It’s not the IRS calling

• Cyber training expands to local leaders

• Google Rolling Out Privacy Sandbox Beta on Android 13 Devices

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• A pullback in shares provides us a chance to buy more of this cybersecurity leader

• Hyundai and Kia issue software upgrades to thwart killer TikTok car theft hack

• Cybersecurity Industry News Review: February 15, 2023

• Think Twice Before Using Pirated Software

• The Center for Cyber Safety and Education Looking for Volunteer Leaders

• Building blocks for Cyber resilience:  MSSPs can lead the way

• Predicting which hackers will become persistent threats

• 10 Best Linux Distributions In 2023

• Mobile device management: Problems and solutions

• Inglis Retires as National Cyber Director Ahead of Biden’s Cybersecurity EO

• Data Breaches: The Complete WIRED Guide

• Update Now: Microsoft Releases Patches for 3 Actively Exploited Windows Vulnerabilities

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Two Ways The U.S. Patent Office Could Do Better At Examination

• Apple splats zero-day bug, other gremlins in macOS, iOS

• Navy ‘setting the pace’ among services, principal cyber advisor says

• Not Stoked: Burton Snowboards’ Online Orders Disrupted After Cyberattack

• FBI Investigating Cybersecurity Incident On Its Network

• Update Now: Urgent fix for macOS Ventura 13.2.1, iOS 16.3.1 resolves major vulnerability

• Identity Federation and SSO: The Fundamentals

• Security in Game Development

• 5 key cybersecurity trends for 2023

• ‘Russian hacktivists’ claim responsibility for DDoSing German airport websites

• Expel Tackles Cloud Threats With MDR for Kubernetes

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• EU lawmakers argue against signing US data pact

• CISA teases industry day for operational strategy support

• DOD updates job qualifications for cyber workers

• Cloud Infrastructure Used By WIP26 For Espionage Attacks on Telcos

• Massive GoAnywhere RCE Exploit: Everything You Need to Know

• 10 Best Free SSL Checker Tools 2023

• Google Cloud CISO Phil Venables: Zero trust ‘essential’ to protect the cloud

• Newly Disclosed Vulnerability Exposes EOL Arris Routers to Attacks

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Russian crook made $90M exploiting stolen info on Tesla, Roku, Avnet, Snap, more

• EU Cybersecurity Agency Warns Against Chinese APTs

• State comptroller: New York City agencies are using AI without guardrails

• Atlassian Investigating Security Breach After Hackers Leak Data

• Data Security Startup CommandK Raises $3 Million in Seed Funding

• Google Report Reveals Russia’s Elaborate Cyber Strategy in Ukraine

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Experts Warn of RambleOn Android Malware Targeting South Korean Journalists

• Admins, patch your Cisco enterprise security solutions! (CVE-2023-20032)

• SideWinder Behind Govt Phishing Spree Across the East

• GKE Security: Top 10 Strategies for Securing Your Cluster

• How Falling Crypto Prices Impacted Cyber Crime

• Armenia and Azerbaijan Hackers Use OxtaRAT to Monitor Conflict

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Fortinet fixes critical vulnerabilities in FortiNAC and FortiWeb

• Researchers Unearth Windows Backdoor That’s Unusually Stealthy

• FBI Says It Has Contained Cyber Incident On Their Network

• Actually, America Loves Spy Balloons

• Mirai Botnet Variant V3G4 Targeting 13 Unpatched IoT Vulnerabilities

• Overwhelm impacts 90% of payment compliance teams as they combat record levels of fraud

• What Are Deepfakes and How to Spot Them

• Consolidating Tech Stacks and Enhancing Cyber Resilience Require Self-healing Endpoints

• After a Cybersecurity Incident, the Indigo Website is Still Offline

• Cyber Attack on Succession Wealth and NHS Staff Data Leaked

• Hackers Exploit ProxyShell Flaws to Deploy ProxyShellMiner on Exchange Server

• How does ChatGPT differ from human intelligence?

• Hackers Earn $180,000 for ICS Exploits at Pwn2Own Miami 2023

• EU Organizations Warned of Chinese APT Attacks

• SolarWinds Announces Upcoming Patches for High-Severity Vulnerabilities

• Security Experts Warn of Foreign Cyber Threat to 2024 Voting

• ‘Frebniis’ Malware Hijacks Microsoft IIS Function to Deploy Backdoor

• What Is Managed Detection and Response? Guide to MDR

• Encrypted Traffic, Once Thought Safe, Now Responsible For Most Cyberthreats

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Five easy steps to keep your smartphone safe from hackers

• AppSec Threats Deserve Their Own Incident Response Plan

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Reducing Government Overclassification of National Security Information

• Afghanistan as a Site of U.S.-China Competition

• Atlassian Data Breach, Company Info Stolen From Third-Party App

• Backup Vs. Disaster Recovery: What Are the Key Differences?

• SideWinder APT Spotted Targeting Crypto

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• Earth Kitsune Delivers New WhiskerSpy Backdoor via Watering Hole Attack

• Top 10 Resources for Learning Solidity

• ⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter

• German airport websites hit by DDos attacks once again

• Strategy for Combating New Threat Actors and Emerging Cyberattacks and Risks

• Armenian Entities Hit by New Version of OxtaRAT Spying Tool

• Defending against AI Lobbyists

• Security amidst a global frost

• Elon Musk Denies Firing Tesla Staff After Unionisation Attempt

• Authorities break up gang responsible for €38 million CEO fraud

• Five Ways Heimdal® Can Help You Against Ransomware Attacks

• Burton Snowboards’ Online Orders Canceled Due to a Cyberattack

• Data Obfuscation: What It Is and How to Use It for Your Business

• CISA Warns About Four New Vulnerabilities Exploited as Zero-Days

• Seven German Airports Hit by Suspected Cyber Attack

• Scandinavian Airlines confirms cyberattack that exposed customer data

• Google Ads Spreads FatalRAT Malware, Disguised As Popular Apps

• Guest Blog: 5 Key Takeaways from One Identity’s Identity Security Survey

• Cybercriminals Use Havoc Post-Exploitation Framework in Attack Campaigns

• UK NCSC Launches Recommendations on Supply Chain Mapping

• Cry Havoc and let slip dogs of war … there’s an upgraded malware server in town

• Firm Fined £200K For “Exploitative” Call Campaign

• Upcoming Speaking Engagements

• Payment Security Key Factors You Should Be Familiar with In Detail

• Massive DDoS Attack was Thwarted by Cloudflare

• LockBit Attack: Royal Mail Refuses to Pay ‘Absurd’ Ransom, Says its Chat Logs

• Terra Co-Founder Do Kwon Charged By US SEC

• Hackers Fake Emsisoft Certificate to Hide Attack

• Data Leak Hits Thousands of NHS Workers

• Critical RCE Vulnerability Discovered in ClamAV Open Source Antivirus Software

• New Mirai Botnet Variant ‘V3G4’ Exploiting 13 Flaws to Target Linux and IoT Devices

• Cisco fixed critical RCE bug in ClamAV Open-Source Antivirus engine

• Analysis: White House Cybersecurity Policy Maker – Secure Open Source Software Even If It Benefits ‘Adversaries’ We Should Do It Anyway

• YouTube CEO Susan Wojcicki Steps Down

• EU lawmakers advise against signing US data pact

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Weekly Update 335

• ESET’s threat intelligence services extend an organizations’ security intelligence

• XIoT vendors get serious about security, devote resources to protect cyber-physical systems

• How hackers can cause physical damage to bridges

• Navigating the ever-changing landscape of digital security solutions

• New infosec products of the week: February 17, 2023

• 10 Best Free SSL Checker Tools

• Apocalypse with Artificial Intelligence is near with Microsoft AI powered ChatGPT

• Critical RCE Vulnerability Discovered in ClamAV Open-Source Antivirus Software

• Antivirus apps are there to protect you – Cisco’s ClamAV has a heckuva flaw

• CISA adds Cacti, Office, Windows and iOS bugs to its Known Exploited Vulnerabilities Catalog

• Norway finds a way to recover crypto North Korea pinched in Axie heist

• How to protect your car dealership from cyber-attacks

• The top 8 Cybersecurity threats facing the automotive industry heading into 2023

• PREDICTIONS 2023, PART 2: WHAT WILL THE NEW YEAR BRING FOR THE INFOSEC COMMUNITY?

• Dynatrace AppEngine enables teams to create custom, data-driven apps

• IGEL COSMOS platform secures cloud workspaces

• ESET’s threat intelligence services provide organisation with guidance on potential risks

• Rhymetec releases two compliance security offerings

• OneSpan Notary accelerates digital transformation for notarization

• Cybersecurity in the Next-Generation Space Age, Pt. 2: Cybersecurity Threats in the New Space

• Tile steps up measures against thieves and stalkers, criticizes Apple’s AirTag approach

• How Ukraine War Has Shaped US Planning for a China Conflict

• Cyber Defense Magazine– PQC & Biometrics

• Virtual Security and why it matters so much to SMEs

• Perimeter 81 integrates with ConnectWise to enable enhanced billing automation for MSPs

• VA delays health record go-live at key Michigan site

• The inventor of the web thinks everyone will have their own personal A.I. assistants like ChatGPT

• How No-Code Development Will Influence Tech Talent

• AI Image Editing Tool Cutout Leaked User Images and Data

• Four EU telco giants will start asking users if they want personalized targeted ads

• WordPress sites backdoored with ad fraud plugin

• Fake Hogwarts Legacy cracks lead to adware, scams

• Arris router vulnerability could lead to complete takeover

• Ransomware pushes City of Oakland into state of emergency

• Open-Source Authorization as a Service

• How To Reduce the Impact of a Cloud Outage

• How to update your iPhone, iPad, and Mac now to fix a critical security vulnerability

• IT Security News Daily Summary 2023-02-16

• What does 2023 have in store for cybersecurity?

• Twitter Revenues From Top Advertisers Plummets – Report

• Apple WebKit Zero-Day Vulnerability Exploited to Hack iPhones, iPads, and Macs

• VA pushes back health record go-live at key Michigan site

• Phygital Attacks: Protecting Critical Infrastructure from Cyber Threats

• ChatGPT and more: What AI chatbots mean for the future of cybersecurity

• How 1Password lets you secure a team of 10 for a flat $19.95 per month

• Atlassian: Leaked Data Stolen via Third-Party App

• The More You Look for Spy Balloons, the More UFOs You’ll Find

• Python Developers Beware: Clipper Malware Found in 450+ PyPI Packages!

• $100 Million In Stolen Crypto Disguised in Lazarus New Mixer

• Google’s big security cert log overhaul broke Android apps. Now it’s hit undo

• (ISC)² Certified in Cybersecurity Exam Now Available in More Languages

• Data Theft Feature Added by Russian Nodaria APT

• GraphQL vs Protobuf: Differences, Similarities, and Uses

• Private 5G takes stress off enterprise Wi-Fi

• ESXi Ransomware Update Outfoxes CISA Recovery Script

• Mirai V3G4 botnet exploits 13 flaws to target IoT devices

• Reading the Tea Leaves in Fulton County

• MLOps Security Best practices

• Lower Data Breach Insurance Costs with These Tips

• Apple Hitting Issues In Ramping Up India Manufacturing – Report

• Record-Breaking DDoS Attack – Over 71 Million RPS

• Check Point CloudGuard Spectral detects malicious crypto-mining packages on NPM – The leading registry for JavaScript Open-Source packages

• Atlas VPN upgrades servers for faster browsing

• Dragos: ICS/OT ransomware attacks up 87%

• MVP Vibe Fest Bridges Gap Between Athletics and Cybersecurity

• SASE Market to Exceed Over $60B Between 2022 and 2027, According to Dell’Oro Group

• Chinese Hackers Targeting South American Diplomatic Entities with ShadowPad

• A CISOs Practical Guide to Storage and Backup Ransomware Resiliency

• Cloudflare Stops Over 71 Million RPS Record-Breaking DDoS Attack

• SAS Airlines Hit by Cyber Attack

• Web3 access controls: How zero-knowledge encryption can secure user access

• VR map tracks ‘silent killer’ of extreme heat

• Google: Russia continues to set cyber sights on NATO nations

• VMware, Windows 11 shafted by Windows Server 2022

• Is your online date Googling you?

• Security warning: Beep malware can evade detection

• Infrastructure Risks Increase As IT and OT Converge

• US Border Protection Is Finally Able to Check E-Passport Data

• Massive HTTP DDoS Attack Hits Record High of 71 Million Requests/Second

• Thales and Quantinuum Offer a Trusted Foundation to Help Organizations Begin Creating Quantum Resilience Today

• How We Fought For and Won Access to Records About Predictive Policing in General Escobedo, Mexico

• Cybersecurity Jobs Remain Secure Despite Recession Fears

• WatchGuard Launches New Line of Firewall Products to Enhance Unified Security for Remote and Distributed Businesses

• Section 230 is On Trial. Here’s What You Need to Know.

• Detecting the Undetected: The Risk to Your Info

• Cybersecurity pros less likely to be impacted by layoffs if economy slows

• Patch Now: Apple’s iOS, iPadOS, macOS, and Safari Under Attack with New Zero-Day Flaw

• Romance scam targets security researcher, hilarity ensues

• Benchmarking your cybersecurity budget in 2023

• The worker shortage is real. Could tech help governors close gaps?

• Researchers Link SideWinder Group to Dozens of Targeted Attacks in Multiple Countries

• Researchers Hijack Popular NPM Package with Millions of Downloads

• Over 500 ESXiArgs Ransomware infections in one day, but they dropped the day after

• More victims of fake crypto investor scam speak to The Register

• Cryptocurrency users in the US hit by ransomware and Clipper malware

• S3 Ep122: Stop calling every breach “sophisticated”! [Audio + Text]

• Window Snyder’s Startup Launches Security Platform for IoT Device Makers

• Training and CTFs

• CISA Releases Fifteen Industrial Control Systems Advisories

• Pepsi Bottling Ventures says info-stealing malware swiped sensitive data

• Google Bard: How to use this AI Chatbot Service?

• Biden’s equity executive order includes data, AI provisions

• Legendary 9/11 Public Servants Raise Concerns Over FirstNet IG Report

• 1Password is now 50% off for teams: How the deal works

• Published XIoT Vulnerabilities Trend Down, but Vigilance Must Remain High: Report

• BEC Groups Target Firms With Multilingual Impersonation Attacks

• CISA Adds One Known Exploited Vulnerability to Catalog

• CISA Releases Fifteen Industrial Control Systems Advisories

• Google Ads drop FatalRAT malware from fake messenger, browser apps

• Taylor Swift ticket scams: How to stay safe

• Pending national cyber strategy to feature ‘strong stand’ on quantum cryptography

• SOAR vs. SIEM: What’s the difference?

• CISA Adds One Known Exploited Vulnerability to Catalog

• DDoS Mitigation with Microsoft Azure Front Door

• How to protect backup servers from ransomware

• Hyundai, Kia Flaw Lets Attackers Steal Car With a USB Cable

• City of Oakland Declares State of Emergency After Ransomware Attack

• Window Snyder’s Start-up Launches Security Platform for IoT Device Makers

• SideWinder APT Spotted Stealing Crypto

• Scandinavian Airlines Hit By Hackers, Anonymous Sudan Takes Credit

• Cybersecurity health and how to stay ahead of attackers with Linda Grasso

• New Phishing Campaign Exploits Geo Targetly URL Shortener

• US DoJ Speeds Up Apple Antitrust Investigation – Report

• Seismologists can’t predict an impending earthquake, but longer term forecasts and brief warnings after one starts are possible

• Chris Inglis Steps Down as US National Cyber Director

• E-Sign Act (Electronic Signatures in Global and National Commerce Act)

• Beep Malware Shows Clever Evasion Techniques, As Well As Rookie Mistakes

• ESXiArgs Ransomware Fights Off Team America’s Data Recovery Script

• Globally, Over 4 Million Shopify Users Are at Risk

• Here are all the changes to 1Password in the new update for Apple devices

• Fraudsters are using machine learning to help write scam emails in different languages

• TechRepublic Premium editorial calendar: IT policies, checklists, toolkits and research for download

• Mirai Variant V3G4 Targets 13 Vulnerabilities to Infect IoT Devices

• Firefox Updates Patch 10 High-Severity Vulnerabilities

• Hackers Leverage PayPal to Send Malicious Invoices

• Cisco Releases Security Advisories for Multiple Products

• Oakland Issues State of Emergency After Ransomware Attack

• Security Alert: New Fake Customs Invoicing Smishing Campaign Targeting Romanian Telecom Users

• Cisco Releases Security Advisories for Multiple Products

• Two Zero-Days Fixed In Patch Tuesday Can Escalate Privileges To SYSTEM

• CommonSpirit Health Cyberattack, Month-Long Network Outage Cost $150M

• Info For 1 Million Patients Stolen Using Critical GoAnywhere Vulnerability

• Intel Patches Up SGX Best It Can After Another Load Of Security Holes Found

• US Issues Declaration On Responsible Use Of AI In The Military

• Securing supply chains with quantum computing

• Recession, what recession? (ISC)² Study Shows Cybersecurity Expected to Weather Tech Sector Jobs Downturn

• FTX’s Sam Bankman-Fried Bond Backers Revealed

• What is the tokenization process and why it is so important?

• How Log Monitoring Prevents Web Attacks?

• What are the Duties of a Malware Analyst?

• Cybercriminal convicted of $90 million SEC earning reports hack

• Simplify to Survive: How Organizations Can Navigate Cyber-Risk

• Russian Cyberexpert Convicted in the U.S. for a $90 Million Hack-to-trade Scheme

• Endpoint Security Strategy – Key Components and How to Develop It

• The Cloud Shared Responsibility Model: An Overview

• Cisco Talos spots new MortalKombat ransomware attacks

• How to filter Security log events for signs of trouble

• Quarter of Crypto Tokens Linked to Pump-and-Dump

• Cloudflare Blocks Record DDoS Attack as Threats Surge

• Hackers Using Google Ads to Spread FatalRAT Malware Disguised as Popular Apps

• Eurostar: Users Forced Into Resetting Passwords, Then Fails and Locks Them Out

• Cryptocurrencies Industry is Impacted by AI and ML

• Ransomware attackers finding new ways to weaponize old vulnerabilities

• No relief in sight for ransomware attacks on hospitals

• Ransomware actors increasingly weaponizing old vulnerabilities

• AI Coding: A Security Problem?

• Congress Should Repeal and Replace JASTA

• The Fight Over Judicial Appointments in Israel

• Cybersecurity Fears in 2023

• Common Sources of Software Risk in Field Service Companies and How Field Service Software Help Minimize Them

• New Screenshotter Malware Campaign Targets Victims After Profiling

• Researchers Warn of Critical Security Bugs in Schneider Electric Modicon PLCs

• The Intersection of Translation and Technology: The Impact of Emerging Trends on the Industry

• Crypto Buyers Beware: 1 in 4 New Tokens of Any Value Is a Scam

• Oakland Declares State Of Emergency After Ransomware Attack

• Critical Vulnerability Patched in Cisco Security Products

• ChatGPT Is Ingesting Corporate Secrets

• Hyundai and Kia Offer Free Software Update to Patch a Vulnerability Allowing Car Thefts

• A brief overview of ChatGPT and the risks associated with it

• The war in Ukraine has shaken up the cyber-criminal ecosystem, Google says

• 10 signs that scammers have you in their sights

• New Threat Actor WIP26 Targeting Telecom Service Providers in the Middle East

• Breaking the Security “Black Box” in DBs, Data Warehouses and Data Lakes

• Upsurge In ESXiArgs Ransomware Attacks, New Targets In Europe

• How Blockchains Can Prevent Data Breaches?

• Is your device at risk? North Korean group launches new attack with Remote Access Trojan

• Is your web app vulnerable? Here’s how to solve the top 10 security issues

• The end of passwords as we know it: Why experts say the future of security is passwordless

• Choosing the Right Passwordless Authentication Method for Maximum Benefits!

• Protect your privacy: Why you should avoid ChatGPT apps on Google Play and App Store

• British Police At Risk From Chinese Drones, CCTV Cameras

• SAST and SCA Complemented with Dynamic Observability for CVE Prioritization

• Check Point Research uncovers a malicious campaign targeting Armenian based targets

• New Course Alert: Gateway Performance Optimization Course by Author, Timothy C. Hall

• Surge in ESXiArgs Ransomware Attacks as Questions Linger Over Exploited Vulnerability

• ESXiArgs Ransomware Hits Over 500 New Targets in European Countries

• New MortalKombat ransomware employed in financially motivated campaign

• Helping users and organizations build an instinctive data privacy habit

• What Is Cybercrime-as-a-Service (CaaS)?

• What Is Transmission Control Protocol (TCP)?

• January 2023 Cyber Attacks Statistics

• Apple Zero-Day Update, the Kia Challenge, and How to Factory Reset Apple Devices – Intego Mac Podcast Episode 279

• Mark Zuckerberg Gains Extra $4m To Protect Him, Family

• Invitation to a Secret Event: Uncovering Earth Yako’s Campaigns

• Four of the Oldest Tricks in Scammers’ Books

• Experts Warn of Surge in Multipurpose Malware

• City Of Oakland Declares State Of Emergency After Ransomware Attack

• Avaya Files For Chapter 11 Protection, Again

• The war in Ukraine has shaken up the cybercriminal ecosystem, Google says

• UK Policing Riddled with Chinese CCTV Cameras

• Descope Handles Authentication So Developers Don’t Have To

• Milestone reached for Asset Visibility and Intelligence company, Armis

• Exploring the Impact of Bahrain’s Smart City Initiative on Technology

• Hyundai and Kia to patch a flaw that allows the theft of the cars with a USB cable

• Do you know what your supply chain is and if it is secure?

• Best SIEM Tools List For SOC Team – 2023

• Spam and phishing in 2022

• The Pain of Double Extortion Ransomware

• Top senator says modernizing VA’s EHR ‘is not optional’

• Expected advancements in quantum cryptography

• Application and cloud security is a shared responsibility

• Cyber Attack news headlines trending on Google

• PSA: Don’t download ChatGPT apps from Google Play or the App Store

• Web 3.0 security risks: What you need to know

• 10,890 WordPress Sites Hacked for a Massive AdSense Fraud Campaign

• House, Senate Dems push bill to prevent the next Schedule F

• Challenging cost misconceptions in STEM education

• High-risk users may be few, but the threat they pose is huge

• Calling All CISSP-ISSMP and CISSP Certification Holders

• Analysis: CircleCI attackers stole session cookie to bypass MFA

• Stories from the SOC – RapperBot, Mirai Botnet – C2, CDIR Drop over SSH

• Open Systems strengthens MDR capabilities with Ontinue division

• Veeam Data Platform improves business resiliency in the case of disaster or cyberattacks

• Styra Load empowers engineering teams to solve critical authorization problems

• FireMon Policy Analyzer combats firewall misconfigurations

• Check Point Infinity Spark protects SMBs from security risks

• GoSecure Titan Identity detects attacks against enterprise identity systems

• Mirai Variant V3G4 Exploiting IoT Devices for DDoS Attacks

• Oligo Security Takes Aim at Open Source Vulnerabilities

• Protect Your Domain With DNSSEC on AWS Route53 and GoDaddy Registrar

• ESXiArgs ransomware fights off Team America’s data recovery script

• LogRhythm and Trend Micro help organizations defend their critical assets

• GitHub Copilot update includes security vulnerability filtering

• Deepwatch raises $180 million to accelerate platform innovation

• CompTIA collaborates with IBM to prepare more people for tech-related careers

• TrickBot gang members sanctioned after pandemic ransomware attacks

• Update now! Apple patches vulnerabilities in MacOS and iOS

• Update now! February’s Patch Tuesday tackles three zero-days

• Deepwatch and the MDR market get a $180M injection as orgs look to cut costs

• How to secure your iOS device to prevent unwanted access

• ChatGPT Subs In as Security Analyst, Hallucinates Only Occasionally

• Quantinuum appoints Rajeeb Hazra as CEO

• Biden’s IRS pick says he wants to move agency’s systems into the 21st century

• Cantwell presses FAA for NOTAM redundancy plan

• IT Security News Daily Summary 2023-02-15

• Connected vehicle data can improve traffic safety

• Lawmakers Vow To Protect Children From “Toxic Content” On Facebook

• 2023 Is the Year of Risk: 5 Ways to Prepare

• The East Palestine, Ohio Train Derailment Created a Perfect TikTok Storm

• New MortalKombat Ransomware Attack Aiming for Crypto Wallets

• Tech disruption powers smart city expansion

• Reversing the ‘Constitutional Revolution’: The Israeli Government’s Plan to Undermine the Supreme Court’s Judicial Review of Legislation

• How to build an effective crisis contact center

• Call for Speakers Now Open for the RH-ISAC Cyber Intelligence Summit

• Brivo Reveals Top Security Trends for 2023: Convenience Is King in Securing the Hybrid Workplaces of the Future

• Online Romance Scams Take Aim at Your Heart and Identity. Avoid these Red Flags

• City of Oakland issued a local state of emergency after recent ransomware attack

• Intel patches up SGX best it can after another load of security holes found

• What Twitter’s outage says about (over) zealous downsizing

• ESET PROTECT Review: Features & Benefits

• GAO Calls for Improved Data Privacy Protections

• Data protection regulations aren’t enough to safeguard your data

• Google Launches Privacy Sandbox Beta on Android 13 Devices

• 3 Ways CISOs Can Lead Effectively and Avoid Burnout

• What Purple Teams Wish Companies Knew

• What Is the Nslookup Command and How Can You Use It to Improve DNS Security?

• How data from connected cars can improve traffic safety

• Investigators uncover crypto scammers baiting ‘phish’ hooks on YouTube

• Cybersecurity Industry News Review: February 7, 2023

• Choosing the Right Passwordless Authentication Method for Maximum Benefits

• Update Now: iOS Devices Receive Vital Security Updates from Apple

• Hyundai And Kia Issue Software Upgrades To Thwart TikTok Car Theft Hack

• High Severity DLP Flaw Impacts Trellix For Windows

• Revealed: The Hacking And Disinformation Team Meddling In Elections

• Cloudflare Blocked Largest Reported DDoS Attack At 71M Requests Per Second

• We’re starting a position in a cybersecurity stock that’s been in our Bullpen watch list

• Navy looks to OTA consortium for advanced tech

• Ransomware Attack Pushes City of Oakland Into State of Emergency

• PE Firm Francisco Partners to Take Sumo Logic Private in $1.7B Deal

• Build Cyber Resiliency With These Security Threat-Mitigation Considerations

• Android Launches Another Way To Spy On Users With Privacy Sandbox Beta

• Apple Splats Zero-Day Bug, Other Gremlins In macOS, iOS

• Solving Open Source Security – From Alpha To Omega

• Latest Attack On PyPi Users Shows Crooks Are Only Getting Better

• A-Salt: Attacking SaltStack

• 5 Reasons You Need to Care About API Performance Monitoring

• Splunk Enterprise Updates Patch High-Severity Vulnerabilities

• LockBit and Royal Mail Ransomware Negotiation Leaked

• IGEL Unveils COSMOS, the Unified End User Computing Platform for Secure, Managed Access to Any Cloud Workspace

• The Long Descent to Insurrection

• Reversing the “Constitutional Revolution”: The Israeli Government’s Plan to Undermine the Supreme Court’s Judicial Review of Legislation

• Beep: New Evasive Malware That Can Escape Under The Radar

• The cyber security business is very strong, says Akamai CEO Tom Leighton

• Apple issues macOS Ventura 13.2.1, iOS 16.3.1 to fix zero-day vulnerability

• Report Reveals Record-Breaking Year for Cyber Threats

• Citrix released security updates for multiple High-Severity flaws in its products

• Microsoft shifts to a comprehensive SaaS security solution

• GuLoader – a highly effective and versatile malware that can evade detection

• 9 Ways smart devices can compromise your privacy

• How records of life’s milestones help solve cold cases, pinpoint health risks and allocate public resources

• Microsoft Patch Tuesday Includes Three Exploited Zero-Day Vulnerabilities

• 1898 & Co Launches New Cybersecurity Service for Critical Infrastructure

• 5th State of CCPA, CPRA, and GDPR Compliance Report Shows More Than 90% of Companies Are Not Compliant

• What Is OPSEC: Operational Security Explained

• Veeam offers $5 million data recovery warranty from ransomware attacks

• Here’s why the future of security is passwordless

• Microsoft remedies three zero-days on February Patch Tuesday

• ESXiArgs attack vector unclear as infections continue

• Crypto-Stealing Campaign Deploys MortalKombat Ransomware

• NIST’s New Crypto Standard a Step Forward in IoT Security

• Avoid Accidentally Sharing Your Location

• Change the Face ID Settings to Prevent Anyone Access to Your iPhone

• How to solve 10 of the most common web application security vulnerabilities

• Cybersecurity startup Oligo debuts with new application security tech

• Incident response automation: What it is and how it works

• US Border Patrol Is Finally Able to Check E-Passport Data

• North Korea’s APT37 Targeting Southern Counterpart with New M2RAT Malware

• Ways Automobile Companies Collect Customer Data

• North-Korean group attacks Windows and mobiles with new Remote Access Trojan

• Tesla To Open 7,500 Chargers In US To Other EVs

• Controller-level flaws can let hackers physically damage moving bridges

• What Twitter outage says about (over) zealous downsizing

• How Security Teams Can Protect Employees Beyond Corporate Walls

• Understanding Critical Event Management and How It Can Help Your Organization

• When Technology Broke and How We Fixed It (The Evolution of APIs)

• What’s Going Into NIST’s New Digital Identity Guidelines?

• Financially Motivated Threat Actor Strikes with New Ransomware and Clipper Malware

• Webinar — A MythBusting Special: 9 Myths about File-based Threats

• MortalKombat Ransomware Infects Computer, Steals Crypto From Users

• The Importance of File Encryption in Our Digital World: A Comprehensive Guide

• ASML Data Theft By Ex China Staffer Violated Export Controls

• Recently Patched IBM Aspera Faspex Vulnerability Exploited in the Wild

• Descope Targets Customer Identity Market with Massive $53M Seed Round

• Dozens of Vulnerabilities Patched in Intel Products

• Russian Cybercriminal Faces Decades in Prison for Hacking and Trading Operation

• Threat spotlight: Hydra

• CAP Is Now Certified in Governance, Risk and Compliance (CGRC)

• FTX’s Sam Bankman-Fried Ordered Back To Court, After VPN Use

• The Language of Cybersecurity Frameworks, Guidance, Regulations, and Standards

• Threat Analysis: VMware ESXi Attacks Soared in 2022

• A Hacker’s Mind Is Now Published

• Antivirus versus Anti Malware: Which One Should You Choose?

• With password security giving way to passwordless, Descope raises $53M

• Microsoft fixes three zero-days in its 75-flaw February Patch Tuesday

• Adobe addressed critical bugs in Illustrator, After Effects Software

• Russian Businessman Guilty in Hacking, Insider Trade Scheme

• SAP’s February 2023 Security Updates Patch High-Severity Vulnerabilities

• Citrix Patches High-Severity Vulnerabilities in Windows, Linux Apps

• Oligo Security Exits Stealth with $28M for AppSec, Open Source Security

• ICS Patch Tuesday: 100 Vulnerabilities Addressed by Siemens, Schneider Electric

• Camera the Size of a Grain of Salt

• Storage security toughen-up for compliance and cyberwar in 2023

• Bitwarden Password Manager introduces support for Argon2 KDF iterations

• Microsoft “Permanently Disables” Internet Explorer

• How monitoring libraries rather than containers is key to open-source security

• What to Look for When Buying a Security Camera (2023): Tips and Risks

• Google Launches Privacy Sandbox Beta for Android Users

• How to achieve and maintain data compliance in 2023

• A Guide on 5 Common LinkedIn Scams

• ICS Vulnerabilities Chained for Deep Lateral Movement and Physical Damage

• Experts Warn of ‘Beep’ – A New Evasive Malware That Can Fly Under the Radar

• Chinese Hackers Use ShadowPad Against South American Diplomatic Entities

• 1 Million CHS Patients Affected Due to Fortra`s GoAnywhere Data Breach

• Exploring the Top Cyber Security Career Options: From Ethical Hacking to Digital Forensics

• Twitter Created System To Promote Elon Musk Tweets – Report

• Unlocking the Potential: Check Point’s Infinity Spark Offers Unmatched Benefits for Managed Service Providers (MSPs)

• SAS App and Website Hit as Attacks Target Swedish Firms

• Microsoft Patches Three Zero-Day Bugs This Month

• Beep, a new highly evasive malware appeared in the threat landscape

• Traditional PAM solutions aren’t working, Keeper Security study finds

• Gilad Gruber Appointed as Senior Vice President of Engineering at Salt Security

• Regular Pen Testing Is Key to Resolving Conflict Between SecOps and DevOps

• Community Health Systems data breach caused by GoAnywhere MFT hack

• IoC detection experiments with ChatGPT

• RedEyes Hackers Adopts New Malware, Steals Data From Devices

• Dragos Report Identifies Two New Threat Groups

• 1 Million Downloads Later: How An Android Game Leaked Private Data

• ASML says ex-China employee misappropriated data relating to its critical chip technology

• Vulnerability Summary for the Week of February 6, 2023

• Meta Oversight Board Pledges Quicker Case Reviews

• Reverse Tabnabbing

• SideWinder APT Attacks Regional Targets in New Campaign

• Cybersecurity Industry News Review: February 15, 2023

• Why performing security testing on your products and systems is a good idea

• Google Rolling Out Privacy Sandbox Beta on Android 13 Devices

• AdSense fraud campaign relies on 10,890 sites that were infected since September 2022

• Artificial Intelligence Good, Bad and Ugly

• Apple urges iPhone users to upgrade to iOS16 amid device security hacking fears

• Spoiler: It’s not the IRS calling

• Hyundai and Kia issue software upgrades to thwart killer TikTok car theft hack

• Think Twice Before Using Pirated Software

• Combining identity and security strategies to mitigate risks

• Introducing the book – Threats: What Every Engineer Should Learn From Star Wars

• Attack surface management (ASM) is not limited to the surface

• 10 Best Linux Distributions In 2023

• Update Now: Microsoft Releases Patches for 3 Actively Exploited Windows Vulnerabilities

• Apple splats zero-day bug, other gremlins in macOS, iOS

• Identifying and securing your business’s dark data assets in the cloud

• SynSaber OT PCAP Analyzer simplifies the network analysis process

• (ISC)² Puts Members at the Center of Our Cybersecurity Content in 2023

• Akamai Connected Cloud helps enterprises deploy and secure distributed applications

• ThreatBlockr platform updates prioritize alert management

• CyberSaint Executive Dashboard empowers CISOs to take control of cyber risk communication

• Finite State releases Next Gen Platform for software supply chain security

• The risks and benefits of starting a vCISO practice

• ChatGPT, will you be my Valentine?

• Security in Game Development

• Identity Federation and SSO: The Fundamentals

• Expel Tackles Cloud Threats With MDR for Kubernetes

• Resecurity and CSG partner to help businesses navigate challenging situations

• Ping Identity and Deloitte secure identities and data across digital engagement channels

• The Pixel phones may be getting a long overdue feature

• Russian crook made $90M exploiting stolen info on Tesla, Roku, Avnet, Snap, more

• Elastic appoints Mathew Donoghue as CMO

• DirectDefense promotes Christopher Walcutt to CSO

• Zscaler acquires Canonic Security to accelerate how enterprises address SaaS-native threats

• Cloudflare thwarts largest reported HTTP DDoS attack

• Should you share passwords with your partner?

• Android 14 developer preview highlights multiple security improvements

• One in nine online stores are leaking your data, says study

• New ESXiArgs encryption routine outmaneuvers recovery methods

• 2023 年 2 月のセキュリティ更新プログラム (月例)

• LATEST CYBERTHREATS AND ADVISORIES – FEBRUARY 10, 2023

• Facebook Criticized For Allowing Hateful, Violent Content To Spread In Ethiopia

• OT Network Security Myths Busted in a Pair of Hacks

• EPA’s high-tech plane monitored toxic event site in Ohio

• How Kia and Hyundai’s new software update thwarts viral TikTok car thefts

• Microsoft Patch Tuesday: 36 RCE bugs, 3 zero-days, 75 CVEs

• 9 New Microsoft Bugs to Patch Now

• Adobe Releases Security Updates for Multiple Products

• An Overview Of Essential BlueTeam Tools For Cybersecurity

• IT Security News Daily Summary 2023-02-14

• Earthquake in Turkey exposes gap between seismic knowledge and action – but it is possible to prepare

• AI, sensors enhance wildfire detection

• Mozilla Releases Security Updates for Firefox 110 and Firefox ESR

• Adobe Releases Security Updates for Multiple Products

• Malware Delivered through Google Search

• The New Israeli Government’s ‘Constitutional Law Reforms’: Why now? What do they mean? And what will happen next?

• Microsoft delivers 75-count box of patches for Valentine’s Day

• The Rise of Security Service Edge (SSE): A Game-changer for the Modern Workforce

• Zscaler to Acquire Israeli Startup Canonic Security

• Mozilla Releases Security Updates for Firefox 110 and Firefox ESR

• How states can prepare for the rise of cryptocurrency

• VERT Threat Alert: February 2023 Patch Tuesday Analysis

• Microsoft Patch Tuesday, February 2023 Edition

• CISA Adds Four Known Exploited Vulnerabilities to Catalog

• Citrix Releases Security Updates for Workspace Apps, Virtual Apps and Desktops

• PWC highlights 11 ChatGPT and generative AI security trends to watch in 2023

• Army looking to experiment with autonomous, real-time technologies

• CISA Adds Four Known Exploited Vulnerabilities to Catalog

• Citrix Releases Security Updates for Workspace Apps, Virtual Apps and Desktops

• Microsoft Patch Tuesday for February 2023 fixed actively exploited zero-days

• Cisco Umbrella + Cisco Duo Are Better Together

• Veeam launches Data Platform, ransomware warranty

• Automated Security and Compliance Attracts Venture Investors

• Microsoft Releases February 2023 Security Updates

• Microsoft patches three exploited zero-days (CVE-2023-21715, CVE-2023-23376, CVE-2023-21823)

• Record-breaking number of record-breaking DDoS attacks confirmed

• How to Debug Websites Using Safari Developer Tools

• Government’s chief data scientist previews agencies’ work on equitable data

• Oakland City Services Struggle to Recover From Ransomware Attack

• Microsoft Releases February 2023 Security Updates

• 5 Cloud Security Challenges Solved by CNAPP

• OT Cybersecurity Plan to Prevent the 5Ds

• CISOs: Self-healing endpoints key to consolidating tech stacks, improving cyber-resiliency

• States sketch out roadmaps for zero trust ‘journey’

• Configuration Issues in SaltStack IT Tool Put Enterprises at Risk

• Vulnerability Summary for the Week of February 6, 2023

• Google Vertex AI Vision: Revolutionizing E-Commerce?

• Patch Tuesday: Microsoft Warns of Exploited Windows Zero-Days

• Hospitals Sued for Using Meta’s Ad-Tracking Code, Violating HIPAA

• Vulnerability Summary for the Week of February 6, 2023

• Security awareness and training policy

• Analysis: Cybersecurity Managers Fear ‘Catastrophic’ Cyber Event Now Likely Within Two Years

• Google’s Bard AI Bot Error Costed the Company $100 Billion Shares

• Why it’s time to supercharge data infrastructure funding

• Adobe Plugs Critical Security Holes in Illustrator, After Effects Software

• Lokibot, AgentTesla Grow in January 2023’s Most Wanted Malware List

• Why SecDataOps Is the Future of Your Security Program

• CISA Releases One Industrial Control Systems Advisory

• Apple Releases Security Updates for Multiple Products

• Decentralized Data Mesh With Apache Kafka in Financial Services

• social media policy

• Chinese Hackers Infiltrate South American Diplomatic Networks

• Apple Releases Security Updates for Multiple Products

• Massive AdSense Fraud Campaign Uncovered – 10,000+ WordPress Sites Infected

• Upcoming Speaking Engagements

• Five Compelling Benefits of a Managed SASE Solution

• Microsoft Azure Security expands variant hunting capacity at a cloud tempo

• Addressing cybersecurity at the board level with Difenda and Microsoft

• Google lets a few Android devices into its Privacy Sandbox

• RADIUS server authentication: Old but still relevant

• Hackers Could Use ChatGPT to Generate Convincing Scam Messages in Seconds

• AtlasVPN offers 83% off in privacy promotion

• What is Virtual Patching and How Does It Work?

• Vaultree Appoints Technology Industry Veteran Rinki Sethi to Its Board of Directors

• CISA Releases One Industrial Control Systems Advisory

• Mary Queen of Scots Letters Decrypted

• Romance Scam Targets Security Researcher, Hilarity Ensues

• Patch Tuesday February 2023 – Microsoft Releases Fixes for 13 Known Vulnerabilities

• Consenting to Cookies is Not Sufficient

• Before It’s Too Late, Switch to a New LastPass Password Manager

• Clipper Virus: 451 PyPI Packages Deploy Chrome Extensions to Steal Crypto

• Meet the new Mortal Kombat Ransomware

• Data Engineering Practices to Avoid

• CISA, South Korean agencies issue joint warning on North Korean ransomware

• 1Password is saying goodbye to passwords in favor of passkeys. Here’s why

• Spanish, US Authorities Dismantle Cybercrime Ring That Defrauded Victims of $5.3 Million

• Hackers Breach Pepsi Bottling Ventures’ Network

• Ping Identity and Deloitte Forge Alliance to Give Organizations Advanced Identity and Access Solutions

• Cyber-Physical Systems Vulnerability Disclosures Reach Peak, While Disclosures by Internal Teams Increase 80% Over 18 Months

• Experts discover over 451 clipper malware-laced packages in the PyPI repository

• The New Israeli Government’s “Constitutional Law Reforms”: Why now? What do they mean? And what will happen next?

• A Cyber Persistence Way to Countermeasures

• Amazon’s Zoox Begins Staff Rides On Public Roads In California

• Breaking Down the Seven Steps of an SQL Injection Kill Chain

• SynSaber Launches a Free OT PCAP Analyzer Tool for the Industrial Security Community

• ThreatConnect Closes 2022 with Accelerated Growth in Threat Intelligence Operations (TI Ops)

• 4 Best VPN Services (2023): For Routers, PC, iPhone, Android, and More

• ~11,000 Sites Have Been Infected With Malware That’s Good At Avoiding Detection

• EU Countries Told To Step Up Defenses Against State Hackers

• Pepsi Bottling Ventures Says Info-Stealing Malware Swiped Sensitive Data

• Alleged SIM Swapper Ransomed Instagram Influencer For Dates, Striptease Video

• The White House Wants You To Believe Those UFOs Weren’t Aliens

• Tools & Software That are Lifesavers for New Musicians

• Pepsi Bottling Ventures Discloses Data Breach

• CISO Conversations: The Role of the vCISO

• 2022 ICS Attacks: Fewer-Than-Expected on US Energy Sector, But Ransomware Surged

• Lessons All Industries Can Learn From Automotive Security

• Tesla Staff In NY Launch Union Campaign

• Adsense abused: 11,000 sites hacked in a backdoor attack

• Enhancing Security with Two-Factor Authentication: An Introduction to TOTP and HOTP

• Top 100 Women in Cybersecurity

• Upskilling And Automation The Keys To Cyber Resilience For Businesses

• User Behavior Analytics in Case Management

• Top 100 Cybersecurity Startups

• Top 100 CISOs

• Meta’s Chief Business Officer To Leave After 13 Years

• US Mobile Operators Suffer Outages, Issues

• EnterpriseDB adds Transparent Data Encryption to PostgreSQL

• Apple fixes zero-day spyware implant bug – patch now!

• Embattled VMware ESXi Hypervisor Flaw Exploitable in Myriad Ways

• (ISC)² Certified in Cybersecurity Exam Now Available in More Languages

• Phygital Attacks: Protecting Critical Infrastructure from Cyber Threats

• ChatGPT and more: What AI chatbots mean for the future of cybersecurity

• Real-time Ubuntu released, offers end-to-end security and reliability

• Record-Breaking 71 Million RPS DDoS Attack Seen by Cloudflare

• The More You Look for Spy Balloons, the More UFOs You’ll Find

• The Tor network hit by wave of DDoS attacks for at least 7 months

• $100 Million In Stolen Crypto Disguised in Lazarus New Mixer

• Data Theft Feature Added by Russian Nodaria APT

• Twitter Revenues From Top Advertisers Plummets – Report

• Apple WebKit Zero-Day Vulnerability Exploited to Hack iPhones, iPads, and Macs

• Hackers Target Bahrain Airport, News Sites to Mark Uprising

• GoAnywhere Zero-Day Attack Victims Start Disclosing Significant Impact

• Python Developers Beware: Clipper Malware Found in 450+ PyPI Packages!

• Apple fixes actively exploited WebKit zero-day in iOS, macOS (CVE-2023-23529)

• Madrid-Based Phishing Gang Disrupted By Spanish National Police & US Secret Service

• Pepsi Bottle Ventures Suffers Data Breach After Malware Attack

• Lazarus Hackers Use New Mixer to Hide Stolen Cryptocurrency

• Check Point CloudGuard Spectral detects malicious crypto-mining packages on NPM – The leading registry for JavaScript Open-Source packages

• Atlas VPN upgrades servers for faster browsing

• Apple Patches Actively Exploited WebKit Zero-Day Vulnerability

• Spanish Police Bust €5m Phishing Gang

• Chinese Hackers Targeting South American Diplomatic Entities with ShadowPad

• A CISOs Practical Guide to Storage and Backup Ransomware Resiliency

• Apple Hitting Issues In Ramping Up India Manufacturing – Report

• Dragos: ICS/OT ransomware attacks up 87%

• Cloudflare Stops Largest HTTP DDoS Attack on Record

• Cloudflare blocked record-breaking 71 million request-per-second DDoS attack

• Cloudflare Stops Over 71 Million RPS Record-Breaking DDoS Attack

• Resurrected Crypto-mixer Launders $100m in North Korean Funds

• Malware that can do anything and everything is on the rise

• Need to improve the detection capabilities in your security products?

• Is your online date Googling you?

• Thales and Quantinuum Offer a Trusted Foundation to Help Organizations Begin Creating Quantum Resilience Today

• Record-Breaking DDoS Attack – Over 71 Million RPS

• Massive HTTP DDoS Attack Hits Record High of 71 Million Requests/Second

• Expel MDR for Kubernetes simplifies security for Kubernetes applications

• Actionable intelligence is the key to better security outcomes

• How to prevent DDoS attacks

• Get hired in cybersecurity: Expert tips for job seekers

• Steps CISA should take in 2023

• AI and Cybersecurity: Some observational implications of the intersection between the two

• Beware of Romance Scams on Valentines Day as it could reach $7 billion

• Patch Now: Apple’s iOS, iPadOS, macOS, and Safari Under Attack with New Zero-Day Flaw

• Confident cybersecurity means fewer headaches for SMBs

• Romance scam targets security researcher, hilarity ensues

• Apple fixes the first zero-day in iPhones and Macs this year

• How to change your account password in Windows 11

• Enigma info-stealing malware targets the cryptocurrency industry

• Pepsi Bottling Ventures says info-stealing malware swiped sensitive data

• Training and CTFs

• Malwarebytes recognized as endpoint security leader by G2

• A week in security (February 6 – 12)

• Powering Manufacturing With MLOps

• What is AI good at (and what the heck is it, actually), with Josh Saxe: Lock and Code S04E04

• Jailbreaking ChatGPT and other large language models while we can

• CISA issues alert with South Korean government about DPRK’s ransomware antics

• French law to report cyberincidents within 3 days to become effective soon

• Consent to gather data is a “misguided” solution, study reveals

• EFF Backs California Bill to Protect People Seeking Abortion and Gender-Affirming Care from Dragnet Digital Surveillance

• Typosquatting: Legit Abquery Package Duped with Malicious Aabquerys

• Facebook Fined For “Egregious” Conduct In Privacy Case

• Dark Web Revenue Down Dramatically After Hydra’s Demise

• Why is New York City Removing Free Broadband In Favor of Charter?

• IT Security News Daily Summary 2023-02-13

• Check Point’s annual cybersecurity event spotlights power of AI

• 9 Scammers Busted for 5M Euro Phishing Fraud Ring

• Android 14 Will Block Malware With Enhanced Security Updates

• Digitized ID eases re-entry for formerly incarcerated

• Contact center modernization boosts satisfaction for city residents, staff

• Accenture Acquires Morphus, Brazil-Based Cybersecurity Company

• SOAR vs. SIEM: What’s the difference?

• How to become an incident responder: Requirements and more

• Chinese Hackers Keep Targeting Group-IB Cybersecurity Firm

• 2023-02-13 – IcedID (Bokbot) from fake Microsoft Teams page

• Healthcare in the Crosshairs of North Korean Cyber Operations

• Authenticate Users via Face Recognition on Your Website or App

• ‘Whole nation’ effort needed to build broadband workforce

• Chromo-encryption method encodes secrets with color

• Namecheap email system hacked, used for phishing campaign

• Russian Hackers Disrupt NATO Earthquake Relief Operations

• On Pig Butchering Scams

• Hackers Aim at Crypto Wallets with Hacked Namecheap Phishing Emails

• Small business participation in federal marketplace continues decline despite $159 billion in awards

• Serious Security: GnuTLS follows OpenSSL, fixes timing attack bug

• Widely available A.I. is ‘dangerous territory,’ says Tenable’s Amit Yoran

• Application Security: Complete Definition, Types & Solutions

• US NIST Uncovers Winning Encryption Algorithm for IoT Data Protection

• Best VPN for streaming in 2023: Unblock Netflix and more

• passwordless authentication

• Cybersecurity Experts Warn Against Valentine’s Day Romance Scams

• The US Government says companies should take more responsibility for cyberattacks. We agree.

• PREDICTIONS 2023, PART 2: WHAT WILL THE NEW YEAR BRING FOR THE INFOSEC COMMUNITY?

• Cloud security: Where do CSP and client responsibilities begin and end?

• New GSA benefits hub to pilot text notifications

• Pepsi Bottling Ventures Breached Following Malware Attack

• Watch CNBC’s full interview with Check Point Software CEO Gil Shwed

• Our margins are very healthy, says Check Point Software CEO Gil Shwed

• Google Search Boss Warns Of ‘Hallucinating’ AI Chatbots

• Multiple 0-Day Attacks in The PyPI Packages Aimed to Steal Developer Credentials

• Love Bites: Valentine’s Day shoppers advised to be aware of targeted online scams

• States scramble to replace ripped-off SNAP benefits

• Group-IB Blocks Attack By Chinese Tonto Team Hackers

• How to make sure the reputation of your products and company is good

• Beijing To Support ChatGPT-Style AI Services

• Namecheap admits ‘unauthorized emails’ pwning its customers

• The Center for Cyber Safety and Education Looking for Volunteer Leaders

• 12 ways to improve your website security

• Pepsi suffers a ransomware attack

• Reddit Discloses Security Breach Affecting Internal Docs

• New York Regulator Orders Shutdown Of Major Stablecoin

• How To Scan a URL for Malicious Content and Threats in Java

• A new strategy for western states to adapt to long-term drought: Customized water pricing

• 3.3 Million Impacted by Ransomware Attack at California Healthcare Provider

• The Lessons From Cyberwar, Cyber-in-War and Ukraine

• Majority of Firms Make Cybersecurity Decisions Without Attacker Insight

• Hackers Create Malicious Dota 2 Game Modes to Secretly Access Players’ Systems

• Oakland In Crisis: How The City Is Dealing With A Ransomware Attack

• Chinese Tonto Team Hackers’ Failed Attempt On Group-IB Fails

• Vulnerabilities open Korenix JetWave industrial networking devices to attack

• An Exploit on Reddit Shows MFA’s Limitations

• How Would You Deal with the Inevitable Breaches of 2023?

• Trickbot Hacking Group Jointly Sanctioned By the US and Britain

• Namecheap Emails Hacked To Send Phishing Email

• Adobe Acrobat will soon power Microsoft Edge’s PDF reader

• What Happened to #OpRussia?

• Pro-Russia hacker group Killnet targets NATO websites with DDoS attacks

• A New Trio Of Intrusions Leaves America’s Leaders Grasping For Explanations

• Telco Attacks Tied To Bad Third-Party Vendor Security Hygience

• The FBI’s Most Controversial Surveillance Tool Is Under Threat

• AI-Powered Bing Chat Spills Its Secrets Via Prompt Injection Attack

• The U.S. Government Should Try Harder to Minimize Costs of China Defensive Measures

• Getting to Ground Truth on the Reach of Domestic Violent Extremist Groups Into the Military, Veteran, and Law Enforcement Communities

• Generative AI for DevOps: A Practical View

• Avoid Being a Downstream Victim of Service Provider Attacks

• Cybersecurity Firm Group-IB Repeatedly Targeted by Chinese APT

• City of Oakland Hit by Ransomware Attack

• Dodge online banking fraudsters with these 12 cybersecurity tips

• Tor network experiencing massive ongoing DDoS attacks

• South Korean Start-Up Challenges Nvidia AI Dominance

• Play Ransomware Group Claims Attack on A10 Networks

• Cybercriminals target fans of The Last of Us with recent malware and phishing scams

• LockBit’s Royal Mail ransom deadline flies by. No data released

• A Closer Look at KeePass: Why Its Reputation as a Safe Password Manager is Being Questioned

• Cybersecurity M&A Roundup: 40 Deals Announced in January 2023

• Pig Butchering Scams Are Evolving Fast

• DHL, MetaMask phishing emails target Namecheap customers

• 16-31 January 2023 Cyber Attacks Timeline

• Slowly But Surely: The Decline of Online Advertising is Inevitable

• Italian Regulator Bans AI Chatbot Replika Over Data Concerns

• Funding Round Values China EV Maker Zeekr At $13bn

• SecurityWeek Cyber Insights 2023 Series

• North Korean Hackers Target the Healthcare Sector with Ransomware

• New Threat Group Hits Israel Institute of Technology with Ransomware

• January 2023’s Most Wanted Malware: Infostealer Vidar Makes a Return while Earth Bogle njRAT Malware Campaign Strikes

• Researchers Uncover 700+ Malicious Open Source Packages

• Honeypot-Factory: The Use of Deception in ICS/OT Environments

• St Kitts & Nevis Passport in the Digital Age: The Impact of Technology on the Application Process

• Namecheap Email Hacked, Phishing Emails Sent To MetaMask & DHL

• Regulator Warns Over Surveillance Oversight As System ‘Simplified’

• Cybersecurity Is Necessary for Mission-Critical Energy Grids

• How to protect organizations against Brute Force Attacks

• MoneyGram Fraud Victims Get $115m in Compensation

• Namecheap Customers Flooded with Phishing Emails

• Chinese Tonto Team Hackers’ Second Attempt to Target Cybersecurity Firm Group-IB Fails

• Software developers, how secure is your software?

• Learn the art of malicious compliance: doing exactly what you were asked, even when it’s wrong

• Hackers Targeting U.S. and German Firms Monitor Victims’ Desktops with Screenshotter

• Hacktivists hacked Iranian State TV during President’s speech on Revolution Day

• China’s spy balloon barrage earns six of its companies a spot on US entity list

• As regulations skyrocket, is compliance even possible anymore?

• Reimagining zero trust for modern SaaS

• Cyber Attack news headlines trending on Google

• Hackers Using Geotargeting Tools to Launch Attacks Targeting Specific Locations

• Cybercriminals exploit fear and urgency to trick consumers

• Can we predict cyber attacks? Bfore.AI says they can

• The ethics of biometric data use in security

• Integreon CyberHawk-AI identifies patterns of frequently compromised information

• How We Can Make Public Safety More Proactive

Generated on 2023-02-19 23:59:23.325248