IT Security News Weekly Summary – Week 08

• IT Security News Daily Summary 2024-02-25

• Safeguarding Children in the Era of Big Data

• Securing Space Infrastructure for US And Allied Collaboration

• Understand Cyber Insurance: Rising Risks and How to Right-Size Policies

• Cell Service Restored Following Extensive AT&T Outage

• A cyber attack hit the Royal Canadian Mounted Police

• From deepfakes to digital candidates: AI’s political play

• Security is hard because it has to be right all the time? Yeah, like everything else

• Crooks stole $10 million from Axie Infinity co-founder

• Canadian University Vending Machine Malfunction Discloses Use of Facial Recognition

• Cybersecurity Nightmare Unfolds as Malawi’s Immigration Systems Under Attack

• Rise in Fake Life Insurance Emails, Action Fraud Warns

• Using Webhooks with your Privileged Access Management Tool

• Security Affairs newsletter Round 460 by Pierluigi Paganini – INTERNATIONAL EDITION

• Week in review: 10 cybersecurity startups to watch, admins urged to remove VMware vSphere plugin

• Authorities Claim LockBit Admin “LockBitSupp” Has Engaged with Law Enforcement

• FTC Orders Avast To Pay $16.5M For Selling User’s Browsing Data

• Social Engineering Awareness for Employees

• Apple created post-quantum cryptographic protocol PQ3 for iMessage

• 3 Ways the Cybersecurity Industry Advanced ‘Secure by Design’ in 2023

• IT Security News Daily Summary 2024-02-24

• A Vending Machine Error Revealed Secret Face Recognition Tech

• White House Wades Into Debate on ‘Open’ Versus ‘Closed’ Artificial Intelligence Systems

• USENIX Security ’23 – Dawei Wang, Ying Li, Zhiyu Zhang, Kai Chen – CarpetFuzz: Automatic Program Option Constraint Extraction from Documentation for Fuzzing

• Nation-State Cyber Attacks Cause Pharmacy Delays: A Critical Healthcare Concern

• Critical DNS Bug Poses Threat to Internet Stability

• Recent Joomla Update Brings Multiple Security Fixes

• Russian Ministry Software Backdoored with North Korean KONNI Malware

• Russian hacker is set to face trial for the hack of a local power grid

• Cybercriminals Exploit Google Cloud Run in Extensive Banking Trojan Scheme

• PyRIT – A Red Team Tool From Microsoft For Generative AI Systems

• A Look At Threat Intel, Through The Lens Of The r77 Rootkit

• Here’s Why Robust Space Security Framework is Need of the Hour

• PSYOP campaigns targeting Ukraine – Week in security with Tony Anscombe

• A Mysterious Leak Exposed Chinese Hacking Secrets

• AI’s Dark Side: Splunk Report Forecasts Troubled Trends in Privacy and Security

• ConnectWise ScreenConnect Vulnerability: Navigating the Breach Risk

• Begin a career in IT with this cybersecurity training bundle

• Microsoft Expands Free Logging Capabilities for all U.S. Federal Agencies

• Conti Ransomware Gang’s Russia-Based Music Album Labels and Plastika Recording Studio – An OSINT Analysis

• Outlook Users Beware 0-Day Exploit Released On Hacking Forums

• Why Do We Need Endpoint Security in 2024?

• Resilience to Acquire BreachQuest for an undisclosed price

• Remediation and Hardening Guide for ConnectWise ScreenConnect Vulnerabilities (CVE-2024-1708 and CVE-2024-1709)

• 2024-02-09, 02-22 and 02-23 – Data dump: Latrodectus from Contact Forms campaign

• Business Cloud Security: Protecting Cloud Assets

• Nevada AG Asks Court to Ban Meta from Providing End-to-End Encryption to Minors

• Data From Chinese Security Services Company i-Soon Linked to Previous Chinese APT Campaigns

• Generative AI, IAM, culture-based programs will shape cybersecurity in 2024, Gartner says

• Insider Threat Mitigation: Strategies for Businesses

• Announcing the Smart SOAR Documentation Site

• The U.S. Military Is Monitoring Another High Altitude Balloon

• U-Haul Tells 67k Customers Crooks Drove Away With Their Personal Data

• Rotech Says Third Party Hacked Partner Philips Respironics

• Avast Ordered To Stop Selling Browsing Data From Its Browsing Privacy Apps

• 2024 is Here:  Will This Be the Year We Get Passwords Right?

• Updated: Top Cyber Actions for Securing Water Systems

• 230K individuals impacted by a data breach suffered by Telco provider Tangerine

• LockBit extorted billions of dollars from victims, fresh leaks suggest

• IT Security News Daily Summary 2024-02-23

• Hackers Leak 2.5M Private Plane Owners’ Data Linked to LA Intl. Airport Breach

• Microsoft released red teaming tool PyRIT for Generative AI

• EFF Urges Ninth Circuit to Reinstate X’s Legal Challenge to Unconstitutional California Content Moderation Law

• February 2024 Web Server Survey

• Avast Hit With $16.5 Million Fine for Selling Customer Data

• U-Haul tells 67K customers that cyber-crooks drove away with their personal info

• Cyber Security Today, Week in Review for week ending Friday, Feb. 23, 2024

• Get the most out of Microsoft Copilot for Security with good prompt engineering

• Announcing Microsoft’s open automation framework to red team generative AI Systems

• Breaking news: RCMP facing ‘alarming’ cyber attack

• Sintrex Wins 2024 ThousandEyes Integration Partner of the Year EMEA

• Ransom-War Escalation: The New Frontline in Cyber Warfare

• Reducing Burnout and Increasing SOC Retention: How Leaders Can Improve Their Employees’ Lives and Improve Security

• Daniel Stori’s ‘Rest Easy, Sysadmin’

• EFF Opposes California Initiative That Would Cause Mass Censorship

• Dormant PyPI Package Compromised to Spread Nova Sentinel Malware

• Advocating for Inclusion in Tech

• The Future of MATIC and What to Expect in 2024

• USENIX Security ’23 – Hui Peng, Zhihao Yao, Ardalan Amiri Sani, Dave (Jing) Tian, Mathias Payer – GLeeFuzz: Fuzzing WebGL Through Error Message Guided Mutation

• Secure Your API With These 16 Practices With Apache APISIX (Part 1)

• Using SD-WAN for securing distributed renewable energy

• Spyware leak offers ‘first-of-its-kind’ look inside Chinese government hacking efforts

• AIs Hacking Websites

• Navigating Cybersecurity Challenges with the Essential Eight

• Joomla! patches XSS flaws that could lead to remote code execution

• LockBit identity reveal a bigger letdown than Game of Thrones Season 8

• Operation Cronos: Who Are the LockBit Admins

• $2,063 Bounty Awarded for Unauthenticated SQL Injection Vulnerability Patched in Ultimate Member WordPress Plugin

• AT&T Denies Outage Was Due To Cyberattack

• Signal21 Beta Launch Bridges Gap in Blockchain Intelligence Services

• Enabling Compliance and Security in AI-Driven, Low-Code/No-Code Development

• New Facebook Funeral Scam Targets Grieving Families

• Calling, the Cloud, and the New Era of Collaboration

• Analysis: AI-Driven Online Financial Scams Surge

• Cybersecurity Breach Hits Global Software Developer PSI Software SE

• Indian Authorities Probes Data Breach Concerns Involving PMO and EPFO

• Repeat Ransomware attacks on 78% of victims who pay

• What Is an Application Level Gateway? How ALGs Work

• Tips To Help GitHub Admins Prepare A Company For SOC 2 And ISO 27001 Audits

• The Use of Machine Learning in Cybersecurity: Threat Detection and Prevention

• Hackers Exploit ConnectWise Bugs to Deploy LockBit Ransomware

• Intuitive Machines Becomes First Commercial Firm To Land On Moon

• What Is Identity and Access Management (IAM)?

• In Other News: Spyware Vendor Shutdown, Freenom-Meta Settlement, 232 Threat Groups

• Apple Shortcuts Vulnerability Exposes Sensitive Information

• Toward Better Patching — A New Approach with a Dose of AI

• Watch Now: Cloudy With a Chance of Threats: The Active Threat Landscape in the Cloud

• Securing Sensitive Information in Cloud Repositories

• Exploring the Spike in Data Breaches in 2023

• How to Properly Handle Cyber Security Incident Management

• Update now! ConnectWise ScreenConnect vulnerability needs your attention

• Tips on meeting complex cloud security challenges

• ICO Bans Serco Leisure’s Use of Facial Recognition for Employee Attendance

• NSFOCUS Innovative DDoS Protection Technology Secures Your Network Perimeter

• Organizations Unprepared to Face Cloud Security Threats

• Intruders in the Library: Exploring DLL Hijacking

• Deepfake Threat: $2 Deceptive Content Undermines Election Integrity

• Exploring the Nexus Between DevSecOps and Cybersecurity

• Bridging innovation and standards compliance: Red Hat’s drive towards the next-generation of government computing standards

• Delivering a better view of system vulnerabilities with Red Hat Insights

• Cyber Security Today, Feb. 23, 2024 – A cyber warning on the second anniversary of Russia’s invasion of Ukraine, and more LockBit news

• GM Cruise To Resume Robotaxi Tests On Public Roads – Report

• 230k Individuals Impacted by Data Breach at Australian Telco Tangerine

• ‘SlashAndGrab’ ScreenConnect Vulnerability Widely Exploited for Malware Delivery

• How to Use Tines’s SOC Automation Capability Matrix

• Microsoft Releases PyRIT – A Red Teaming Tool for Generative AI

• As India Prepares for Elections, Government Silences Critics on X with Executive Order

• ALPHV Ransomware Strikes: LoanDepot and Prudential Financial Targeted

• Checklist: Network and Systems Security

• Avast ordered to pay $16.5 million for misuse of user data

• 78% of Organizations Suffer Repeat Ransomware Attacks After Paying

• Microsoft Releases Red Teaming Tool for Generative AI

• AT&T Says the Outage to Its US Cellphone Network Was Not Caused by a Cyberattack

• CISA And FBI Share Cyber Attack Defenses For Securing Water Systems

• Cyber Mindfulness Corner Company Spotlight: Jamf

• MIWIC24: Plexal Alumni Receive Multiple Nominations From Peers at This Year’s Awards

• Hackers are exploiting ConnectWise flaws to deploy LockBit ransomware, security experts warn

• New Infostealer Malware Attacking Oil and Gas Industry

• Researchers Detail Apple’s Recent Zero-Click Shortcuts Vulnerability

• X protests forced suspension of accounts on orders of India’s government

• New infosec products of the week: February 23, 2024

• The old, not the new: Basic security issues still biggest threat to enterprises

• Cyber Attack news headlines trending on Google

• Top 7 best Practices for Mobile Security in a BYOD Environment

• 2024 will be a volatile year for cybersecurity as ransomware groups evolve

• Secure email gateways struggle to keep pace with sophisticated phishing campaigns

• Business Data Backup and Recovery Planning

• Cybersecurity in the Age of Remote Work

• 92% of companies eyeing investment in AI-powered software

• Leaked documents may show the inside of China’s hacking strategy

• FTC Slams Avast with $16.5 Million Fine for Selling Users’ Browsing Data

• The Real Deal About ZTNA and Zero Trust Access

• Is the Justice Department Even Following Its Own Policy in Cybercrime Prosecution of a Journalist?

• Here Are the Secret Locations of ShotSpotter Gunfire Sensors

• UnitedHealth says Change Healthcare hacked by nation state, as pharmacy outages drag on

• CISA orders federal agencies to fix ConnectWise ScreenConnect bug in a week

• Avast shells out $17M to shoo away claims it peddled people’s personal data

• Cybersecurity’s Class Conundrum

• Leak Reveals the Unusual Path of ‘Urgent’ Russian Threat Warning

• FTC charged Avast with selling users’ browsing data to advertising companies

• IT Security News Daily Summary 2024-02-22

• Identify Weak Links in Your Application Stack – Part 2, Anomaly Detection

• Cyberattack downs pharmacies across America

• USENIX Security ’23 – Junjie Wang, Zhiyi Zhang, Shuang Liu, Xiaoning Du, Junjie Chen – FuzzJIT: Oracle-Enhanced Fuzzing for JavaScript Engine JIT Compiler

• Playbooks on-prem

• FTC Accuses Avast of Selling Customer Browsing Data to Advertisers

• The best VPN routers of 2024

• Leak Shows Alarm in Congress Over a Russian ‘Threat’ Is a Real Anomaly

• Webex Connect’s Second Quarter

• “Beyond the border scam”, pay attention to the instance of the new Nigerian fraud

• Authorities dismantled LockBit before it could unleash revamped variant

• Google To Pause Gemini AI’s Image Generation Of People

• cloud architect

• FTC bans antivirus giant Avast from selling its users’ browsing data to advertisers

• Coming Soon to Wi-SUN Field Area Network: Versatility to connect sensors with low power and high throughput capabilities

• Top Cyber Threats Automotive Dealerships Should Look Out For

• TikTok’s latest actions to combat misinformation shows it’s not just a U.S. problem

• 6 Best Open Source IAM Tools in 2024

• Secure Coding – A critical skill in today’s threat landscape

• NSA Spying Shirts Are Back Just In Time to Tell Congress to Reform Section 702

• Gartner Predicts Concerns For Enterprises Using Cloud-based Generative AI

• AT&T Outage Disrupts Service for Millions of Users Across US

• Hiding Data in DB2

• Threat Hunting Powered by Efficient and Straightforward Anomaly Detection on Your Data Lake

• Imperva successfully defends against CVE-2024-25600 in WordPress Bricks Builder

• Randall Munroe’s XKCD ‘Crossword Constructors’

• PRC State Hacking: ‘Chinese Edward Snowden’ Spills I‑Soon Secrets in Huge Dump of TTPs

• Researchers Unveil Sound-Based Attack: Swipe Sounds Used to Recreate Fingerprints

• Nvidia Nears $2 Trillion Value, As AI Boosts Profits, Sales

• Apple Shortcuts Vulnerability Exposes Sensitive Data, Update Now!

• Bring us the head of LockBit! $15 million bounty offered for information on leaders of notorious ransomware gang

• 5 Best Free Password Managers for 2024

• New Image/Video Prompt Injection Attacks

• Indian SMEs Lead in Cybersecurity Preparedness and AI Adoption

• UK Led Global Operations Disrupt LockBit’s Criminal Network

• Cactus Ransomware Strikes Schneider Electric, Demands Ransom

• UOB, Samsung Back Singapore’s Startale Labs in $7 Million Web3 Push

• How to Analyse Linux Malware in ANY.RUN

• Securing the power grid: Are you ready for NERC CIP’s upcoming mandate?

• Why ransomware gangs love using RMM tools—and how to stop them

• Eye Care Services Firm Faces Lawsuit Over Data Breach Impacting 2.3 Million

• Apple Unveils PQ3 Protocol – Post-Quantum Encryption for iMessage

• Common Cybersecurity Threats and How To Protect Yourself

• CISA Adds One Known Exploited Vulnerability to Catalog

• CISA Releases One Industrial Control Systems Advisory

• Delta Electronics CNCSoft-B DOPSoft

• ConnectWise Says ScreenConnect Flaw Being Actively Exploited

• SMBs at Risk From SendGrid-Focused Phishing Tactics

• IBM and Cisco: A Powerful Partnership Unveiled at Cisco Live EMEA

• Multiple XSS flaws in Joomla can lead to remote code execution

• Threat Actors Quick to Abuse ‘SSH-Snake’ Worm-Like Tool

• Russian Turla Cyberspies Target Polish NGOs With New Backdoor

• Toshiba and Orange offer quantum secure data transmission with utmost security

• Intel Signs Microsoft As Foundry Customer

• Securing the Digital Frontline: Cybersecurity Trends and Best Practices in Networking

• AT&T Cell Service Outage in United States – Analysis Report

• Ukrainian police arrest father and son in suspected LockBit affiliate double act

• An Online Dump Of Chinese Hacking Documents Offers A Rare Window Into Pervasive State Surveillance

• ConnectWise Exploit Could Spur Ransomware Free-For-All

• VMware Issues No Patch Advisory For Critical Flaw In Old SSO Plugin

• Oh Geez The Coast Guard Is Just Now Going To Think About Infosec?

• Threat Actors Quick To Abuse SSH-Snake Worm-Like Tool

• Change Healthcare Cyber-Attack Leads to Prescription Delays

• Google To Manufacture Pixel Smartphones In India – Report

• Tenable: Cyber Security Pros Should Worry About State-Sponsored Cyber Attacks

• State Department Puts Up $10 Million for Info on LockBit Leaders

• Wordfence Intelligence Weekly WordPress Vulnerability Report (February 12, 2024 to February 18, 2024)

• Why one in 20 people fall for dating scams – and how to not be one of them

• IoMT device tips for healthcare IT departments

• US Government Issues Guidance on Securing Water Systems

• Webinar Today: Cloudy With a Chance of Threats: The Active Threat Landscape in the Cloud

• An Online Dump of Chinese Hacking Documents Offers a Rare Window Into Pervasive State Surveillance

• TEGWAR, AI and the FTC – Gov’t Agency Warns of Deceptive AI Contract Language

• Russian-Aligned Network Doppelgänger Targets German Elections

• Bluzelle’s Curium App Makes Crypto Earning Effortless

• Apex Code Vulnerabilities Let Hackers Steal Salesforce Data

• Leak of China’s Hacking Documentation Stunned Researchers

• 5 tips for securing SSH on your Linux server or desktop

• New Leak Shows Business Side of China’s APT Menace

• Palo Alto Networks and Kyndryl: Unlocking Industry 4.0 with Private 5G

• New Cybereason ‘True Cost to Business Study 2024’ Reveals it Still Doesn’t Pay to Pay

• Techstrong Research: Navigating the Future of Security With Resilience

• IBM Signals Major Paradigm Shift as Valid Account Attacks Surge

• GitHub Copilot makes insecure code even less secure, Snyk says

• Develop Advanced Cybersecurity Skills for Just $80

• OWASP Releases Security Checklist Generative AI Deployment

• TinyTurla-NG in-depth tooling and command and control analysis

• From childhood curiosity to Cisco’s FIFA Women’s World Cup all-female Dream Team

• To win against cyber attackers at Super Bowl LVIII, the NFL turns to Cisco XDR

• US Offering $10M for LockBit Leaders as Law Enforcement Taunts Cybercriminals

• Change Healthcare Cyberattack Causes Significant Disruption

• Microsoft begins broadening free cloud logging capabilities

• Cyber Pros Embrace AI, Over 80% Believe It Will Enhance Jobs

• IT Email Templates: Security Alerts

• Signal to shield user phone numbers by default

• Terra’s Do Kwon Should Be Extradited to US, Montenegro Court Rules

• TikTok safety for schools: K-12 best practices

• Apple Approves Fake App Before Real Rabby Wallet, Users’ Funds Stolen

• US to Pay $15M for Info About Lockbit Ransomware Operator Data

• Beware of New AsukaStealer Steal Browser Passwords & Desktop Screens

• Employees input sensitive data into generative AI tools despite the risks

• Russian Government Software Backdoored to Deploy Konni RAT Malware

• A New Age of Hacktivism

• Cybercriminals Weaponizing Open-Source SSH-Snake Tool for Network Attacks

• Customizing Security with Security Configuration Management (SCM)

• Attackers exploiting ConnectWise ScreenConnect flaws, fixes available for all users (CVE-2024-1709, CVE-2024-1708)

• Chinese Duo Found Guilty of $3m Apple Fraud Plot

• Ransomware Warning as CVSS 10.0 ScreenConnect Bug is Exploited

• A Comprehensive Guide on GraphQL Testing

• Scattered Spider laying new eggs

• UK government seeks to strengthen national cyber resilience

• Earth Preta Hackers Abuses Google Drive to Deploy DOPLUGS Malware

• LockBit Attempts to Stay Afloat With a New Version

• Swiggy Account Hacked, Hackers Placed Orders Worth Rs 97,000

• Digital Deception at the Ballot Box: The Shadow Machinery of Election Manipulation: How Deepfake Technology Threatens the 2024 U.S. Elections

• New Mustang Panda campaign targets Asia with a backdoor dubbed DOPLUGS

• SASE Survey Reveals User Experience Is Top of Mind

• Giant leak reveals Chinese infosec vendor I-Soon is one of Beijing’s cyber-attackers for hire

• Cloud-Native Data Security Posture Management Deployments on AWS with Symmetry Systems

• A step-by-step plan for safe use of GenAI models for software development

• Air Canada AI Chatbot spreads misinformation only to fetch hefty legal penalty

• U.S. Offers $15 Million Bounty to Hunt Down LockBit Ransomware Leaders

• Attack velocity surges with average breakout time down to only 62 minutes

• Wire fraud scams escalate in real estate deals

• Cybersecurity fears drive a return to on-premise infrastructure from cloud computing

• MSPs undergo transformation in response to persistent cyber threats

• Safe Clones With Ansible

• Facebook Marketplace – 77,267 breached accounts

• Threat Brief: ConnectWise ScreenConnect Vulnerabilities (CVE-2024-1708 and CVE-2024-1709)

• Top 5 Cybersecurity Risks Facing Businesses Today

• Face off: Attackers are stealing biometrics to access victims’ bank accounts

• 2024-02-21 – Parrot TDS –> SogGholish –> Aysnc RAT

• Cybercriminals are using Meta’s Llama 2 AI, according to CrowdStrike

• US health tech giant Change Healthcare hit by cyberattack

• IT Security News Daily Summary 2024-02-21

• Discord took no action against server that coordinated costly Mastodon spam attacks

• Biden asks Coast Guard to create an infosec port in a stormy sea of cyber threats

• US GOV OFFERS A REWARD OF UP TO $15M FOR INFO ON LOCKBIT GANG MEMBERS AND AFFILIATES

• Unregulated, Exploitative, and on the Rise: Vera Institute’s Report on Electronic Monitoring

• Frontline PCI-ASV Scanning Datasheet

• How sponsorship is a catalyst for change

• Duo face 20 years in prison over counterfeit iPhone scam

• Apple promises to protect iMessage chats from quantum computers

• How is a Container Scan Done?

• Artificial Intelligence set to drive major tech advancements in 2024, IEEE study finds

• $1,313 Bounty Awarded for Privilege Escalation Vulnerability Patched in Academy LMS WordPress Plugin

• CISA, OMB, ONCD and Microsoft Efforts Bring New Logging Capabilities to Federal Agencies

• Types of SaaS Applications: Categories and Examples

• What to Look for in a Secrets Scanner

• What Is a Circuit-Level Gateway? Definitive Guide

• How to Perform a Firewall Audit in 11 Steps (+Free Checklist)

• Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #279 – What Happens in the Management Meeting

• Abuse of valid accounts by threat actors hits a high, says IBM

• US Smartphone Sales Slump, As Customers Delay Upgrading

• Top Software Development Outsourcing Trends

• Ping Identity (ForgeRock) vs Okta (2024): Compare IAM software

• Consumer Advocates Warn About “Epidemic Of Fraud” On Facebook

• Cyber Insights 2024: Ransomware

• Hyperautomation: Revolutionizing the Security Market

• How The Security of The Cloud’s Supply Chain Will Shift in 2024

• Webinar: Managing Without Governing? Why Your Organization Needs a Management System to Govern Your Information Resilience Program

• New Year, New Consumer Demands in Cybersecurity: Navigating the Landscape of Consumer Expectations and App Developer Responsibility in Mobile App Security

• Building a Better Perimeter Defense Strategy to Meet the Challenges of 2024

• Apple Beefs Up iMessage With Quantum-Proof PQ3 Protocol

• New Linux Malware “Migo” Exploits Redis for Cryptojacking, Disables Security

• Cybersecurity: A Trojan Horse in Our Digital Walls?

• How to update apps in MacOS: Two options

• Exploiting the latest max-severity ConnectWise bug is ’embarrassingly easy’

• ‘PrintListener’ Attack on Fingerprint Readers — Can You Trust Biometrics?🤞

• White House Hardens Cybersecurity at U.S. Ports, with China a Focus

• Researchers warn high-risk ConnectWise flaw under attack is ’embarrassingly easy’ to exploit

• ConnectWise Confirms ScreenConnect Flaw Under Active Exploitation

• Researchers Devise ‘VoltSchemer’ Attacks Targeting Wireless Chargers

• To Achieve Cyber Resilience, We Need to Rethink One Core Security Principle

• ‘PrintListener’ Attack on Fingerprint Readers — Can You Trust Biometrics?🤞

• AI’s Influence in Scientific Publishing Raises Concerns

• New Wi-Fi Vulnerabilities Expose Android and Linux Devices to Hackers

• Understanding GDPR and the Importance of Employee Training

• Beware of VietCredCare Malware that Steals businesses’ Facebook Accounts

• The five most alarming cyber threats from CrowdStrike’s 2024 Global Threat Report

• Apple secures iMessage against threats from the future

• Organizations increasingly look to observability to solve critical challenges

• Network Resilience: Accelerating Efforts to Protect Critical Infrastructure

• Navigating the Uncertain Path: Why AI Adoption in Cybersecurity Remains Hesitant, and How to Move Forward

• ‘PrintListener’ Attack on Fingerprint Readers — Can You Trust Biometrics?🤞

• Is Network Security Still a Thing in the Age of Public Cloud?

• Data Matters ? Empowering Threat Hunters to Reduce API Risk

• Exploitation Observed: Ivanti Connect Secure ? CVE-2023-46805 and CVE-2024-21887

• United States Suspends Exports To China’s Top Chipmaker SMIC – Report

• Over 40% of Firms Struggle With Cybersecurity Talent Shortage

• Launch Your Ethereum Donation dApp Today: Easy Steps With MetaMask, Alchemy, and GitHub Codespaces

• Should IT and Security Teams Play a Role in Crisis Communications?

• Driving Sustainability in Solutions: The Cisco-Computacenter Partnership

• New Redis miner Migo uses novel system weakening techniques

• LockBit Leaks Expose Almost 200 Affiliates And Custom Malware

• Apple Adds Post-Quantum Encryption To iMessage

• Cactus Ransomware Claims 1.5TB Of Schneider Electric Data

• Code Injection Or Backdoor: A New Look At Ivanti’s CVE-2021-44529

• Webinar Tomorrow: The Active Threat Landscape in the Cloud

• US Ports cybersecurity now a top priority for Joe Biden

• Open Letter Urges AI Deepfake Regulation

• Crypto Exchange FixedFloat Hacked: $26 Million in BTC, ETH Stolen

• Searchlight Cyber integrates MITRE ATT&CK Mapping into DarkIQ for dark web monitoring

• Beyond Identity Device360 identifies device security risks

• Can enterprise identities fix Gen AI’s flaws? This IAM startup thinks so

• Mozilla Releases Security Updates for Firefox and Thunderbird

• Apple readies iMessage for when quantum computers could break encryption

• Adarma Collaborates with Scottish Enterprise to Unveil Neurodiversity Strategy

• Diversifying Defenses: FjordPhantom Malware Shows Importance of a Multi-Pronged Approach

• Apple Adds Post-Quantum Encryption to iMessage

• Executive Order on Port Cybersecurity Points to IT/OT Threat Posed by Chinese Cranes

• Identity-Based Attacks Grow While Ransomware Declines: IBM X-Force

• AI Solutions Address Military Concerns: Speeding Up Soldier Recruitment Amidst Shrinking Forces

• Qloo Raises $25M in Series C Funding to Expand Cultural Reach with AI

• Generative AI Revolutionizing Indian Fintech

• Navigating the Challenges of Personhood Data in the Age of AI

• Biden Executive Order to Bolster US Maritime Cybersecurity

• Why Front-End Development Matters for Online Businesses?

• Coalition: Vulnerability scoring systems falling short

• LockBit leaks expose nearly 200 affiliates and bespoke data-stealing malware

• 5 Trends Shaping Cybersecurity Strategy: AI Threats, SASE, ZTNA & XDR

• Bitsight empowers enterprises to secure the digital supply chain

• How CVSS 4.0 changes (or doesn’t) the way we see vulnerability severity

• Signal Takes User Privacy a Step Further with Optional Usernames: An Analysis

• Apple iOS 17.4: iMessage Gets Post-Quantum Encryption in New Update

• UScellular and Palo Alto Networks Join Forces to Secure 5G

• Harness the power of security automation

• Exclusive: eSentire Confirms Rhysida Ransomware Victims

• Vibrator virus steals your personal information

• Cyber Security Today, Feb. 21, 2024 – A patch warning from ConnectWise, the latest ransomware news, and more

• Check Point introduces Quantum Force, series of AI-powered firewalls

• Mustang Panda Targets Asia with Advanced PlugX Variant DOPLUGS

• Redis Servers Targeted With New ‘Migo’ Malware

• VMware pushes admins to uninstall vulnerable, deprecated vSphere plugin (CVE-2024-22245, CVE-2024-22250)

• IBM: Identity Compromises Surge as Top Initial Access Method for Cybercriminals

• Google Magika: Open-Sourcing AI-Powered File Type Identification

• CrowdStrike Global Threat Report: Cloud intrusions up 75%

• Anne Neuberger, a Top White House Cyber Official, Is Staying Surprisingly Optimistic

• Details of a Phone Scam

• Hummingbird Automations improves efficiency for compliance professionals

• 6 Ways to Simplify SaaS Identity Governance

• BT Tower In London Sold, And Will Become Luxury Hotel

• Google Chrome 122 Update Addresses Critical Security Vulnerabilities

• Critical flaw found in deprecated VMware EAP. Uninstall it immediately

• NSA Announces Retirement of Cybersecurity Director Rob Joyce

• Control Systems Firm PSI Struggles to Recover From Ransomware Attack

• Chrome 122, Firefox 123 Patch High-Severity Vulnerabilities

• Russian Hackers Launch Email Campaigns to Demoralize Ukrainians

• X Briefly Suspends Account Of Alexei Navalny’s Widow

• New Malicious PyPI Packages Use DLL Sideloading In A Supply Chain Attack

• The Five Most Alarming Cyber Threats from CrowdStrike’s 2024 Global Threat Report

• A first analysis of the i-Soon data leak

• Unsecured Database Leaks 153 GB of Filipino Student and Family Data

• New Mingo Malware Attacking Linux Redis Servers To Mine Cryptocurrency

• Impact of Badbox and Peachpit Malware on Android Devices

• Portfolio Optimization & Cyber Risk Management | Kovrr blog

• CampusGuard introduces new online training courses

• Following MITRE’s footsteps in analyzing malware behavior

• Security Onion 2.4.50 Released for Defenders With New Features

• Six things we learned from the LockBit takedown

• Attackers Quick to Weaponize CVE-2023-22527 for Malware Delivery

• Cybersecurity for Healthcare—Diagnosing the Threat Landscape and Prescribing Solutions for Recovery

• NCSC Sounds Alarm Over Private Branch Exchange Attacks

• Following in Mitre’s footsteps and malware behavior

• Building Customer Trust through Transparent Safety and Security Practices

• Cybersecurity Trends in 2024: 5 Key Areas to Follow

• Attacker Breakout Time Falls to Just One Hour

• Silicon In Focus Podcast: Connectivity in Orbit

• Orgs are having a major identity crisis while crims reap the rewards

• A common goal for European cyber security

• Signal Introduces Usernames, Allowing Users to Keep Their Phone Numbers Private

• New ‘VietCredCare’ Stealer Targeting Facebook Advertisers in Vietnam

• 2024’s Cyber Battleground Unveiled: Escalating Ransomware Epidemic, the Evolution of Cyber Warfare Tactics and strategic use of AI in defense – Insights from Check Point’s Latest Security Report

• Microsoft Exchange flaw CVE-2024-21410 could impact up to 97,000 servers

• VMware Urges to Remove Enhanced EAP Plugin to Stop Auth & Session Hijack Attacks

• Hybrid Mesh and the Check Point Infinity Platform

• Europe’s data protection laws cut data storage by making information-wrangling pricier

• Quebec Law 25: All You Need to Know

• Definition of Data Resilience and Cyber Resilience and their attainment

• Navigating NIS2 requirements with Microsoft Security solutions

• Tainted NSO Group gets involved in another data privacy controversy

• VMware Alert: Uninstall EAP Now – Critical Flaw Puts Active Directory at Risk

• Russian Hackers Target Ukraine with Disinformation and Credential-Harvesting Attacks

• TruffleHog: Open-source solution for scanning secrets

• 10 cybersecurity startups to watch in 2024

• Ransomware Declines as InfoStealers and AI Threats Gain Ground: IBM X-Force

• Unveiling Mandiant’s Cyber Threat Intelligence Program Maturity Assessment

• China could be doing better at censorship, think tank finds

• 10 steps to effective board leadership on cyber security

• A closer look at Israeli cybersecurity funding and M&A activity in 2023

• The importance of a good API security strategy

• Alleged Raccoon Infostealer operator extradited, verification site set up for victims

• Active Directory outages can cost organizations $100,000 per day

• True Alliance Mitigates Online Retail Bot Threats and Improves Website Uptime by 99% with Kasada and AWS

• Early adopters’ fast-tracking gen AI into production, according to new report

• The world according to Hinton: Slowing AI down is not the answer

• Decoding Digital Transformation: AI, ML, and RPA in the Modern Era

• Singapore’s monetary authority advises banks to get busy protecting against quantum decryption

• API Security in 2024: Navigating New Threats and Trends

• It’s time to bolster defenses for an AI / Quantum Future

• Beware of OpenAI and ChatGPT-4 Turbo in Financial Services Organizations’ Growing API Attack Surface

• Social Justice: a global perspective

• IT Security News Daily Summary 2024-02-20

• ConnectWise fixed critical flaws in ScreenConnect remote access tool

• Menlo Security Adds SaaS Platform to Manage Secure Browsers

• Vulnerability Summary for the Week of February 12, 2024

• U.S. Joins U.K. to Seize LockBit Site, Disrupt Massive Ransomware Variant

• Authentic or counterfeit? How QED Vault is using tokens to redefine asset ownership

• Defending Access to the Decentralized Web

• ThreatDown EDR update: Streamlined Suspicious Activity investigation

• Wireless Visibility: The MUST for Zero Trust

• 5 Ways to Counteract Increasing Cyber Insurance Rates

• Here are all the red flags Charlotte Cowles missed in that viral NY Mag article

• LockBit Ransomware Gang’s Website Shut Down by FBI and International Law Enforcement

• Law enforcement trolls LockBit, reveals massive takedown

• EU Opens Official Probe of TikTok Over Content, Minors, Privacy

• An Obsession With Impact: The Inspiring Journey of a Dreamer That Led to a Career at Microsoft

• New Stellar Cyber Alliance to Deliver Email Security for SecOps Teams

• Signal Finally Rolls Out Usernames, So You Can Keep Your Phone Number Private

• Joomla: Multiple XSS Vulnerabilities

• Fairwinds Insights Release Notes 15.0-15.2: Aggregated Action Items

• How a Fake CIA Agent Duped Someone out of $50,000

• New Typosquatting and Repojacking Tactics Uncovered on PyPI

• Wyze Cameras Glitch: 13,000 Users Saw Footage from Others’ Homes

• Feds Seize LockBit Ransomware Websites, Offer Decryption Tools, Troll Affiliates

• VulnRecap 2/19/24 – News from Microsoft, Zoom, & SolarWinds

• ConnectWise Rushes to Patch Critical Vulns in Remote Access Tool

• Singapore struggles with scams as cybercrime cases keep climbing

• CISA Releases Three Industrial Control Systems Advisories

• Commend WS203VICM

• Mitsubishi Electric Electrical Discharge Machines

• Ethercat Zeek Plugin

• More details about Operation Cronos that disrupted Lockbit operation

• Linux Malware Campaign “Migo” Targets Redis For Cryptomining

• ALERT! New iOS Trojan Steals Data for Bank Account Hacking

• A network compliance checklist for remote work

• US sanctions LockBit members after ransomware takedown

• Cops turn LockBit ransomware gang’s countdown timers against them

• USENIX Security ’23 -Tamer Abdelaziz, Aquinas Hobor – Smart Learning to Find Dumb Contracts

• ManageEngine unveils ML-powered exploit triad analytics feature

• LockBit Ransomware Takedown: What You Need to Know about Operation Cronos

• Anonymous Sudan launches DDOS Cyber Attack on University of Cambridge

• Recommended Practices for Enterprise Electronic Messaging Security and Governance

• LockBit Ransomware Members Charged by Authorities, Free Decryptor Released

• Cops turn LockBit’s ransomware gang’s countdown timers against them

• New Migo Malware Targeting Redis Servers for Cryptocurrency Mining

• Partner Competencies, Credentials Valued as Key Success Metrics by Customers

• Pindrop Pulse offers protection against audio deepfakes

• Top UK Universities Recovering Following Targeted DDoS Attack

• SQL Injection Vulnerability Patched in RSS Aggregator by Feedzy WordPress Plugin

• Threat Intelligence as-a-Service: As good or better than D-I-Y?

• Reddit Signed a $60,000,000 Content Licensing Deal with an AI company

• Vietnam To Collect Biometrics – Even DNA – For New ID Cards

• Law Enforcement Hacks LockBit Ransomware, Delivers Major Blow To Operation

• Recent Zero Day Could Impact Up To 97k Microsoft Exchange Servers

• Insider Steals 79,000 Email Addresses At Work To Promote Own Business

• Websites Hacked Via Vuln In Bricks Builder WordPress Plugin

• Wyze admits 13,000 users could have viewed strangers’ camera feeds

• Recent Zero-Day Could Impact Up to 97,000 Microsoft Exchange Servers

• When is PCI Required? (+ 4 Tips for Maintainig Compliance)

• About 13,000 Wyze Customers Affected by Camera Glitch

• Here’s How to Safeguard Your Online Travel Accounts from Hackers

• US House Forms AI Task Force As Legislation Stalls

• How I got started: Cyber AI/ML engineer

• Top 4 Ivanti Competitors and Alternatives for 2024

• VulnRecap 2/19/2024 – News from Microsoft, Zoom, SolarWinds

• Cofense Annual Report Indicates 105% Increase in Malicious Emails Bypassing Secure Email Gateways

• Hackers can Spy on Cameras Through Walls, New Study Reveals

• 1Password acquires Kolide to improve modern workforce security

• 2024 Unit 42 Incident Response Report: Navigating the Shift in Cybersecurity Threat Tactics

• First Neuralink Patient ‘Controls Mouse With Thoughts’

• The New York Times vs. OpenAI: A Turning Point for Web Scraping?

• Cactus Ransomware Group Confirms Hacking Schneider Electric

• Websites Hacked via Vulnerability in Bricks Builder WordPress Plugin

• Volt Typhoon Seen Exfiltrating Sensitive OT Data

• Cyber Insights 2024: Supply Chain

• Why API Security is Crucial in Defending Against Ransomware Attacks

• Does Your Security Team Need a Dedicated Collaboration Tool?

• LockBit Takedown by Brits — Time for ‘Operation Cronos’

• End-User Risks: Enterprises on Edge Amid Growing Concerns of the Next Major Breach

• Pentera collaborates with SpyCloud to reduce dwell time of compromised credentials

• Two Arrested In LockBit Ransomware Gang Takedown

• How to Launch a Successful ICO: 2024 Guide

• 1Password expands its endpoint security offerings with Kolide acquisition

• Wyze cameras show the wrong feeds to customers. Again.

• UPDATED: UK leads takedown of LockBit ransomware gang’s website

• Metomic launches human firewall features to scale data security workflows

• LockBit Ransomware Operation Shut Down; Criminals Arrested; Decryption Keys Released

• NCA’s LockBit Takedown: Source Code, Arrests and Recovery Tool Revealed

• Meta Unveils 8 Spyware Companies Targeting iOS, Android, & Windows Devices

• The Notorious Lockbit Ransomware Gang Has Been Disrupted by Law Enforcement

• Astaroth, Mekotio & Ousaban abusing Google Cloud Run in LATAM-focused malware campaigns

• Lockbit: How A Global Police Operation Just Took Down a Notorious Ransomware Gang

• Meeting Financial Regulatory Requirements with Duo Multi-Factor Authentication

• Initial Ransomware Demands Jump 20% to $600,000 in 2023

• Xpeng To Hire 4,000 Staff Amidst EV ‘Bloodbath’

• China’s SMIC, Huawei Amongst Top Gov’t Funding Recipients

• Microsoft Is Spying on Users of Its AI Tools

• Anatsa Android Banking Trojan Continues to Spread via Google Play

• Law Enforcement Hacks LockBit Ransomware, Delivers Major Blow to Operation

• Automating Threat Detection and Response

• LockBit takedown: Infrastructure disrupted, criminals arrested, decryption keys recovered

• Exploring Data Privacy and Security in B2B Gaming Data

• Authorities disrupt operations of notorious LockBit ransomware gang

• New Gold Pickaxe Malware Aims To Steal Users’ Faces

• Microsoft Patch Tuesday For February Addressed Two Zero-Days

• Zoom Patched Multiple Security Vulnerabilities With Latest Update

• Outsmarting PayPal Scammers to Keep Your Cash Safe

• Raccoon Infostealer operator extradited to the United States

• Malvertising: This cyberthreat isn’t on the dark web, it’s on Google

• Insider steals 79,000 email addresses at work to promote own business

• LockBit disrupted by international law enforcement task force

• Critical Flaws Found in ConnectWise ScreenConnect Software – Patch Now

• New Report Reveals North Korean Hackers Targeting Defense Firms Worldwide

• Learn How to Build an Incident Response Playbook Against Scattered Spider in Real-Time

• SaaS Compliance through the NIST Cybersecurity Framework

• Ivanti Patched Another Vulnerability While The Former Went Under Attack

• London Tribunal Approves £3bn Facebook Lawsuit

• Authorities seize dark web leak site from LockBit ransomware gang

• Integrating AlmaLinux with Existing Enterprise Systems

• High-Severity Squid Vulnerabilities Fixed in Ubuntu

• LockBit Ransomware Gang Domains Seized in Global Operation

• Critical ConnectWise ScreenConnect vulnerabilities fixed, patch ASAP!

• LockBit Infrastructure Disrupted by Global Law Enforcers

• Insider Steals 80,000 Email Addresses From District Councils

• Earth Preta Campaign Uses DOPLUGS to Target Asia

• Law Enforcement Seizes LockBit Ransomware Infrastructure

• Alpha Ransomware Uses Living-Off-The-Land Tools To Attack Windows Computers

• LockBit Ransomware Gang Disrupted by Global Law Enforcement Operation

• CPX Vienna 2024: Celebrating the Pinnacle of Partnership Excellence

• Singapore looks to accelerate AI development with investment in compute and talent

• PCI DSS Compliance – Meeting the Third-Party Vendor Requirements

• WordPress Bricks Theme Under Active Attack: Critical Flaw Impacts 25,000+ Sites

• Lockbit Infrastructure Disrupted by Global Law Enforcers

• US, UK authorities claim seizure of LockBit ransomware gang’s dark web leak site

• Warning: Agniane Stealer Targeting Users to Steal Financial Data

• Two days into the Digital Services Act, EU wields it to deepen TikTok probe

• Cactus ransomware gang claims the theft of 1.5TB of data from Energy management and industrial automation firm Schneider Electric

• MoqHao Evolution Poses Immense Threat to Android Users

• Maryland Busts $9.5 Million #BEC Money Laundering Ring

• How to make sense of the new SEC cyber risk disclosure rules

• Iran and Hezbollah Hackers Launch Attacks to Influence Israel-Hamas Narrative

• Hackers Arrested For Stealing Banking Credentials Using Android Malware

• LockBit Ransomware’s Darknet Domains Seized in Global Law Enforcement Raid

• UK NCA takes control of LockBit Ransomware gang website

• The Digital Services Act is Here. Nisos Can Help!

• Why identity fraud costs organizations millions

• How decentralized identity is shaping the future of data protection

• Vietnam to collect biometrics – even DNA – for new ID cards

• Hackers Arrested For Stealing Banking Credentials Using Novel Android Malware

• Clean links and sophisticated scams mark new era in email attacks

• 36% of code generated by GitHub CoPilot contains security flaws

• Secure File Sharing for Businesses: Best Practices

• UK leads takedown of LockBit ransomware gang’s website

• Artificial Intelligence in Business Security

• LockBit ransomware gang disrupted by global operation

• Titanium and LogRhythm: Elevating Visibility into Cybersecurity Risks in Pakistan

• LockBit, the world’s worst ransomware, is down

• 8 LockBit Ransomware Gang Domains Seized in Global Operation

• Operation Cronos: law enforcement disrupted the LockBit operation

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• VulnRecap 2/19/2024: News from Microsoft, Zoom, SolarWinds

• IT Security News Daily Summary 2024-02-19

• Do you need antivirus on Linux?

• Wyze camera breach let 13,000 strangers look into other people’s homes

• Anatsa Android banking Trojan expands to Slovakia, Slovenia, and Czechia

• Israeli El Al Alleges Hackers Targeted Flights in Mid-Air Hijack Attempt

• NSO Group and Its ‘MMS Fingerprint’ Attack

• Everything You Need To Know About VPN

• Edge Browser Vulnerability Fixed, Ensuring Protection Against Chrome Tab Theft

• Anatsa Banking Trojan Resurfaces, Targets European Banks

• Tech giants promise to combat fraudulent AI content in mega elections year

• 6 Best Cloud Security Companies & Vendors in 2024

• Russian Hackers Hit Mail Servers in Europe for Political and Military Intel

• EU Court of Human Rights Rejects Encryption Backdoors

• Fake Tokens Exploit BRICS Investment Hype

• Why keeping track of user accounts is important

• Two Israel aircrafts hijacked via Cyber Attack

• NIST AI Risk Management Framework: Developer’s Handbook

• A Ukrainian Raccoon Infostealer operator is awaiting trial in the US

• Ukrainian Raccoon Infostealer Operator Extradited to US

• Data Security: Beyond Threat Hunting to Monitoring Data Flow and User Behavior

• 3 Ways the CTO Can Fortify the Organization in the Age of Generative AI

• Google Initiative Aims to Boost AI for Cybersecurity

• Integration of AI and Blockchain: Here’s All You Need to Know

• EU Launches Investigation Into TikTok Over Child Protection and Privacy Concerns

• EU Opens Probe Into TikTok Over Potential DSA Breaches

• Securing Your iPhone from GoldPickaxe Trojan

• Hackers Target Police Officers and Prosecutors in Miami-Dade

• China’s JD.com Considers Bid For UK Retailer Currys

• 1 in 5 Youth Engage in Cybercrime, NCA Finds

• SolarWinds ARM Flaw Let Attackers Execute Remote Code

• Russia-linked APT TAG-70 targets European government and military mail servers exploiting Roundcube XSS

• XSS Marks the Spot: Digging Up Vulnerabilities in ChatGPT

• ALPHV gang claims it’s the attacker that broke into Prudential Financial, LoanDepot

• Continuous Vulnerability and Exposure Management: Unifying Detection Assessment and Remediation for Elevated IT Security

• UK Mobile Network Choice ‘Fell By 25 Percent’ In Past Decade

• Time to Leverage the USDA’s Distance Learning and Telemedicine Program

• How To Weaponize LLMs To Auto-Hijack Websites

• Russia Exploits Roundcube Flaws Against European Governments

• New Google Initiative To Foster AI In Cybersecurity

• Feds Post $15 Million Bounty For Info On ALPHV/BlackCat Ransomware Crew

• Big Surprise – Musk’s X Is Allowing Chinese Propaganda

• Meta Warns of 8 Spyware Firms Targeting iOS, Android, and Windows Devices

• Cyber Security Today, Feb. 19, 2024 – Fake police data breach notification fools Maine’s AG site

• Cisco Secure Access Accelerates SSE Innovation with AI, User Experience Monitoring, and Identity Intelligence

• Ransomware Group Takes Credit for LoanDepot, Prudential Financial Attacks

• Russian Cyberspies Exploit Roundcube Flaws Against European Governments

• China Offers Public Security Support For EU Member Hungary

• Exploring the Phenomenal Rise of Ethereum as a Digital Asset

• Akira Ransomware Actively Exploiting Cisco Anyconnect Vulnerability

• How BRICS Got “Rug Pulled” – Cryptocurrency Counterfeiting is on the Rise

• How to Achieve the Best Risk-Based Alerting (Bye-Bye SIEM)

• X ‘Takes Payments’ From Sanctioned Groups

• Insights from the NSA 2023 Cybersecurity Report

• Data Brokering: A Thousand Things About Yourself

• Presidents Day 2024

• Anatsa Android Trojan Bypasses Google Play Security, Expands Reach to New Countries

• Ukrainian Faces Decades in Prison for Leading Prolific Malware Campaigns

• How do I block Taylor Swift news from invading my Facebook timeline?

• Australia raps telcos for sending through bulk SMS that contain scam messages

• iOS Trojan Collects Face and Other Data for Bank Account Hacking

• New Google Initiative to Foster AI in Cybersecurity

• The State of M-Commerce 2024

• ESET Privilege Escalation Flaw Let Attackers Delete Arbitrary Files

• Arcitecta enhances Mediaflux Livewire to optimize data movement

• Israeli Aircraft Survive “Cyber-Hijacking” Attempts

• Tech Giants Vow To Combat AI Misuse In Election Year

• New TicTacToe Malware Dropper Attacking Windows Users

• Twitter Ghana Staff Finally Paid, More Than A Year After Layoffs

• Fifth of British Kids Have Broken the Law Online

• Safeguarding cyber-physical systems for a smart future

• Turla APT’c New Tool Designed to Steal Login Credentials

• SolarWinds addressed critical RCEs in Access Rights Manager (ARM)

• A week in security (February 12 – February 18)

• The Danger Lurking Just Below Ukraine’s Surface

• Russian-Linked Hackers Target 80+ Organizations via Roundcube Flaws

• Balancing “super app” ambitions with privacy

• First Ever iOS Trojan Steals Facial Recognition Data

• CVE Prioritizer: Open-source tool to prioritize vulnerability patching

• Russian-Linked Hackers Breach 80+ Organizations via Roundcube Flaws

• Details of Ransomania and iOS Face ID Scans stolen by hackers

• How to defend against credential stuffing attacks

• Inside the strategy of Salesforce’s new Chief Trust Officer

• Business Data Encryption: Protecting Sensitive Information

• RCE vulnerabilities fixed in SolarWinds enterprise solutions

• Iranian Hackers Target Middle East Policy Experts with New BASICSTAR Backdoor

• The double-edged sword of zero trust

• Fraudsters have found creative ways to scam some businesses

• Cybersecurity Training for Small Businesses

• Feds post $15 million bounty for info on ALPHV/Blackcat ransomware crew

• Does moving to the cloud mean compromising on security?

• Integrated Risk Prioritization for Lightspeed Remediation

• IT Security News Weekly Summary – Week 07

• IT Security News Daily Summary 2024-02-18

• Hackers Claim Data Breach at Staffing Giant Robert Half, Sell Sensitive Data

• Corporate Accountability: Tech Titans Address the Menace of Misleading AI in Elections

• Changing How Healthcare Works: Big News in Communication

• ESET fixed high-severity local privilege escalation bug in Windows products

• Election security threats in 2024 range from AI to … anthrax?

• USENIX Security ’23 – Zhuo Zhang, Zhiqiang Lin, Marcelo Morales, Xiangyu Zhang, Kaiyuan Zhang – Your Exploit is Mine: Instantly Synthesizing Counterattack Smart Contract

• Security Affairs newsletter Round 459 by Pierluigi Paganini – INTERNATIONAL EDITION

• Generative AI Guardrails: How to Address Shadow AI

• Massive Breach Shakes Microsoft Azure to its Core

• RansomHouse Gang Streamlines VMware ESXi Attacks Using Latest MrAgent Tool

• Beware, iPhone Users: iOS GoldDigger Trojan can Steal Face ID and Banking Details

• Tech Companies Sign Accord to Combat AI-Generated Election Trickery

• Week in review: AnyDesk phishing campaign targets employees, Microsoft fixes exploited zero-days

• FBI’s Most-Wanted Zeus and IcedID Malware Mastermind Pleads Guilty

• Cyber-insurance and vulnerability scanning – Week in security with Tony Anscombe

• Lean In for Yourself

• IoT Security: Safeguarding Business IoT Devices

Generated on 2024-02-26 00:00:21.075511