IT Security News Weekly Summary – Week 12

• IT Security News Daily Summary 2024-03-24

• Some 300,000 IPs vulnerable to this Loop DoS attack

• Controversy Surrounds Flipper Zero Amid Car Theft Concerns

• Security Affairs newsletter Round 464 by Pierluigi Paganini – INTERNATIONAL EDITION

• USENIX Security ’23 – Jinwen Wang, Yujie Wang, Ao Li, Yang Xiao, Ruide Zhang, Wenjing Lou, Y. Thomas Hou, Ning Zhang – ARI: Attestation of Real-time Mission Execution Integrity

• Unpatchable Security Flaw in Apple Silicon Macs: A Cryptocurrency Nightmare

• Critical Flaw Identified in Apple’s Silicon M-Series Chips – And it Can’t be Patched

• General Motors Ceases Sharing Driver Behavior Data with Data Brokers

• Unveiling the MaaS Campaign: Safeguarding Android Users in India

• Akamai Research Exposes Vulnerability: APIs Now Prime Targets for 29% of Web Attacks

• Classic Information Security Management Errors

• The Rise of Open-Source AI: How Companies like Mistral AI are Shaping the Future

• Cybercriminals Accelerate Online Scams During Ramadan and Eid Fitr

• Vans claims cyber crooks didn’t run off with its customers’ financial info

• Federal, State, Local Cyber Leaders Meet to Discuss Threats

• Week in review: Ivanti fixes RCE vulnerability, Nissan breach affects 100,000 individuals

• Building Resilient Web Applications on AWS: A Comprehensive Approach to Security

• N. Korea-linked Kimsuky Shifts to Compiled HTML Help Files in Ongoing Cyberattacks

• German Police Seize ‘Nemesis Market’ in Major International Darknet Raid

• Sign1 Malware Hijacked 39,000 WordPress Websites

• Cloud Security Best Practices: Protecting Cloud Environments

• Get A Day’s Schedule From Fantastical On The Command Line With Shortcuts

• Prioritizing Action After the Threat Headlines

• How to Identify and Respond to End-of-Life and Out-of-Service Operating Systems?

• IT Security News Daily Summary 2024-03-23

• Windows Server 2012 / 2012 R2 End of Life – Here’s How to Secure your Legacy Servers

• Russia-linked APT29 targeted German political parties with WINELOADER backdoor

• Will AI augment or annex cybersecurity jobs?

• Cyber Extortion Stoops Lowest: Fake Attacks, Whistleblowing, Cyber Extortion

• USENIX Security ’23 – Yijie Bai, Yanjiao Chen, Hanlei Zhang, Wenyuan Xu, Haiqin Weng, Dou Goodman – VILLAIN: Backdoor Attacks Against Vertical Split Learning

• Multi-Cloud and Hybrid Cloud Backup: Best Practices to Reliably Secure Your Data

• GitHub Unveils AI-Driven Tool to Automatically Rectify Code Vulnerabilities

• Gmail and Facebook Users Advised to Secure Their Accounts Immediately

• A hacker’s view of the civic infrastructure: Hashtag Trending, the Weekend Edition for March 23rd, 2024

• Spain Temporarily Suspends Telegram – Here is The Reason?

• Payments Watchdog Assessing McDonald’s and Greggs Tech Outages

• VulnCheck’s Free Community KEV & CVE APIs (Code & Golang CLI Utility)

• Ivanti Releases Security Updates for Neurons for ITSM and Standalone Sentry

• CISA Releases One Industrial Control Systems Advisory

• Mozilla fixed Firefox zero-days exploited at Pwn2Own Vancouver 2024

• Large-scale Sign1 malware campaign already infected 39,000+ WordPress sites

• From Personal Computer to Innovation Enabler: Unveiling the Future of Computing

• Splunk, Azure, or Sentinel for FedRAMP/NIST Compliance

• The Akamai Foundation Continues to Give Back and Amplify Impact

• Distributed Cloud and Edge Computing: A Cheat Sheet for IT Leaders

• Apple Chip Flaw Leaks Secret Encryption Keys

• 1768.py’s Experimental Mode, (Sat, Mar 23rd)

• German police seized the darknet marketplace Nemesis Market

• Hackers Deploy STRRAT & VCURMS Malware on Windows Via GitHub

• Evolving beyond your core expertise: it’s time to add security

• Microsoft Xbox Gaming Services Flaw Let Attackers Gain SYSTEM Privileges

• GoFetch Side-Channel Attack Impact Apple CPUs: Attackers Steal Secret Keys

• Russia’s Cozy Bear caught phishing German politicos with phony dinner invites

• AceCryptor attacks surge in Europe – Week in security with Tony Anscombe

• Unsafelok Threat Highlights It’s About Both IoT Devices and Applications

• Russian Hackers Use ‘WINELOADER’ Malware to Target German Political Parties

• Finite State Raises $20 Million to Grow Software Supply Chain Security Business

• Data Privacy Regulations: Compliance and Beyond

• German Authorities Shut Down Online Marketplace for Drugs, Data and Cybercrime Services

• USENIX Security ’23 – ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning Paradigms

• Incident Response Planning: Effective Cyber Crisis Management

• Accenture’s $1 billion LearnVantage platform tackles the growing AI skills gap

• Responding to ShotSpotter, Police Shoot at Child Lighting Fireworks

• IT Security News Daily Summary 2024-03-22

• Unsaflok flaws allow to open millions of doors using Dormakaba Saflok electronic locks

• Chinese snoops use F5, ConnectWise bugs to sell access into top US, UK networks

• Empowering Developers With Scalable, Secure, and Customizable Storage Solutions

• Chinese snoops use F5, ConnectWise bugs to sell access to top US, UK networks

• JumpCloud vs Okta (2024): IAM Software Comparison

• What It Takes to be a Cybersecurity Professional: The Non-Technical Skills You Need

• Cybersecurity: The Core of Computer Science Expertise

• New Go loader pushes Rhadamanthys stealer

• Cyber Security Today, Week in Review for week ending Friday, March 22, 2024

• Java 22 brings security enhancements

• Top 6 Google Authenticator Alternatives in 2024

• Mozilla Drops Onerep After CEO Admits to Running People-Search Networks

• AT&T won’t say how its customers’ data spilled online

• Cops Running DNA-Manufactured Faces Through Face Recognition is Tornado of Bad Ideas

• Canada revisits decision to ban Flipper Zero

• Why SSH Certificates Can Be A Better Option For Remote Access Than SSH Keys

• Randall Munroe’s XKCD ‘Moon Armor Index’

• RaaS Groups Go Recruiting in Wake of LockBit, BlackCat Takedowns

• Apple M-Series FAIL: GoFetch Flaw Finds Crypto Keys

• China Relaxes Some Security Review Rules For Data Exports

• Apple Lawsuit: US Says iPhone Monopoly Undermines Security

• Hackers Can Unlock Over 3 Millions Hotel Doors In Seconds

• FBI Reports Surge in Cryptocurrency Scams, Highlighting Growing Threat of Confidence Scams

• Thousands of WordPress Websites Hacked with New Sign1 Malware

• CISA, NSA, FBI and Five Eyes Issue New Alert on Chinese APT Volt Typhoon

• CISA, DC HSEMA and Regional Partners Conduct Exercise to Ensure National Capital Region Water Service Resilience

• Democratizing Development: The Rise of No-Code Platforms

• Security expert Chris Krebs on TikTok, AI and the key to survival (part 2)

• 3 million doors open to uninvited guests in keycard exploit

• Data protection impact assessment template and tips

• UN Adopts Resolution Backing Efforts to Ensure Artificial Intelligence is Safe

• Russian APT29 Hackers Caught Targeting German Political Parties

• Is Your Data Safe? Fujitsu Discovers Breach, Customers Warned

• IONIX Advances Industry Leading Attack Surface Management (ASM) Platform With Centralized Threat Center for Swift Zero-day Response

• Privacy concerns makes Airbnb ban security cameras indoors

• 8 Best Enterprise Password Managers

• #MIWIC2024: Chelsea Jarvie, CISO and Director at Neon Circle

• Vans Warns Consumers of Fraudsters Following ALPHV Data Breach

• NIA Investigates Cyberattack on Aerospace Research Firm

• Strengthening Cyber Resiliency through Collaboration

• Hardware-level Apple Silicon vulnerability can leak cryptographic keys

• In Other News: Google’s PQC Threat Model, Keyboard Sounds Expose Data, AI Roadmap

• ‘Brain Weasels’: Impostor Syndrome in Cybersecurity

• Ransomware Group Takes Credit for Attack on Boat Dealer MarineMax

• Click Farms: How to Block Click Farming & Protect Your Ads

• The Impact of Click Spamming On Your Business & How You Can Prevent It

• What is PPC Bot Traffic? 5 Methods for Securing Ad Campaigns

• New StrelaStealer Phishing Attacks Hit Over 100 Organizations in E.U. and U.S.

• Building Bridges: The Power of Purpose Alignment for Positive Impact

• The human impact of ransomware attacks: how can businesses protect their security professionals?

• UN Adopts First Global Resolution For Artificial Intelligence

• The DOJ Puts Apple’s iMessage Encryption in the Antitrust Crosshairs

• AI Trends in Program Management

• CrowdStrike Enhances Cloud Detection and Response (CDR) Capabilities to Protect CI/CD Pipeline

• AWS Patches Critical ‘FlowFixation’ Bug in Airflow Service to Prevent Session Hijacking

• Investors’ pledge to fight spyware undercut by past investments in US malware maker

• NVD slowdown leaves thousands of vulnerabilities without analysis data

• US Government Issues New DDoS Mitigation Guidance

• 39,000 Websites Infected in ‘Sign1’ Malware Campaign

• New AcidPour Wiper Targeting Linux Devices Spotted in Ukraine

• How to build a data protection policy, with template

• Application Security for Dummies: The Only Way Forward

• The Rise of Temu: A Game-Changer in Online Shopping

• US Government Releases New DDoS Attack Guidance for Public Sector

• Top Zero Trust Platforms Evaluated by Miercom: Check Point Ranks #1

• Implementing Risk Compliance and Management in Linux Systems: A Practical Guide

• US organizations targeted with emails delivering NetSupport RAT

• EFF and 34 Civil Society Organizations Call on Ghana’s President to Reject the Anti-LGBTQ+ Bill

• Nvidia Unveils Latest AI Chip, Promising 30x Faster Performance

• China-Linked Group Breaches Networks via Connectwise, F5 Software Flaws

• Modern Digital Authentication Protocols

• AI is changing cybersecurity and businesses must wake up to the threat

• Introducing Cisco XDR Playbooks: Finding the balance in automating and guiding incident response

• DTX + UCX Manchester is Back: Global brands, cutting-edge technology and world-renowned speakers take centre stage

• Cybaverse launches new platform to streamline cyber security management for organisations and MSPs

• New ‘GoFetch’ Apple CPU Attack Exposes Crypto Keys

• Saflok Lock Vulnerability Can Be Exploited to Open Millions of Doors

• BlueFlag Security Emerges From Stealth With $11.5M in Funding

• Cyber Security Today, March 22, 2024 – Mac CPUs are vulnerable to encrypted key theft, white hat hackers win a second Tesla, and more

• CISA: Here’s how you can foil DDoS attacks

• Google Cloud Launches Security Command Center Enterprise

• UK Gives Three, Vodafone Five Days To Avoid In-depth Merger Probe

• Pwn2Own Vancouver 2024: participants earned $1,132,500 for 29 unique 0-days

• Implementing Zero Trust Controls for Compliance

• New Loop DoS Attack Can Cause Indefinite System Crash

• Google Pays $10M in Bug Bounties in 2023

• I-Soon Leak: Exposing China’s Cyber Espionage

• Large-Scale StrelaStealer Campaign in Early 2024

• Reddit Shares Surge After Successful NYSE IPO

• DHCP Hacked to Escalate Privileges in Windows Domains

• Exploit Released For Critical Fortinet RCE Flaw: Patch Soon!

• One-Click AWS Vulnerability Let Attackers Takeover User’s Web Management Panel

• Tesla, OS, Software Exploits Earn Hackers $1.1 Million at Pwn2Own 2024

• OpenSSL 3.3 Alpha Release Live

• Upcoming Webinar: Writing Your First OpenSSL Application

• Unmasking the Vulnerabilities in Telecom Signaling: A Call for Enhanced Security

• Silicon UK In Focus Podcast: Circular Computing Equals a Circular Economy

• Understanding ISO 27001:2022 Annex A.7 – Human Resource Security

• TeamCity Vulnerability Exploits Leads to Surge in Ransomware Attacks

• TinyTurla Evolved TTPs To Stealthly Attack Enterprise Organizations

• How Microsoft Incident Response and Microsoft Defender for Identity work together to detect and respond to cyberthreats

• Unsaflok Vulnerability Lets Hackers Open 3M+ Hotel Doors in Seconds

• MediaWorks – 162,710 breached accounts

• Evasive Panda Cyber Attacks: Threat Actor Targets Tibetans

• Ex-Secret Service agent and convicted hacker share stage at GISEC Global

• Russian Hackers May Have Targeted Ukrainian Telecoms with Upgraded ‘AcidPour’ Malware

• U.S. Justice Department Sues Apple Over Monopoly and Messaging Security

• Thoughts on AI and Cybersecurity

• Balancing functionality and privacy concerns in AI-based Endpoint Security solutions

• Apple Chip Flaw Lets Hackers Steal Encryption Keys

• Researchers Propose An Invisible Backdoor Attack Dubbed DEBA

• DOJ calls Apple’s privacy justifications an ‘elastic shield’ for financial gains

• Attackers are targeting financial departments with SmokeLoader malware

• Russia bans Microsoft followed by Amazon and Google

• Unraveling the Cyber Threats Lurking Behind QR Codes

• Shadow AI is the latest cybersecurity threat you need to prepare for

• Organizations under pressure to modernize their IT infrastructures

• Inside the book – See Yourself in Cyber: Security Careers Beyond Hacking

• New infosec products of the week: March 22, 2024

• 95% of companies face API security problems

• Russian Hackers Target Ukrainian Telecoms with Upgraded ‘AcidPour’ Malware

• A Practical Guide to the SEC Cybersecurity Rules

• Paid Cybersecurity Courses: Why They Are Not the Solution for Security Awareness

• IoT Security Best Practices: Safeguarding Connected Devices

• ISC Stormcast For Friday, March 22nd, 2024 https://isc.sans.edu/podcastdetail/8906, (Fri, Mar 22nd)

• Akamai Customer Trust Built on Partnership and Best User Experience

• Getting Started With NCache Java Edition (Using Docker)

• Security Awareness Training: Building a Cyber-Resilient Culture

• Threat Actors Dropping Multiple Ransomware Variants

• A Look At Threat Intel Through The Lens Of Kimsuky

• Truck-to-truck worm could infect – and disrupt – entire US commercial fleet

• Securing Cloud Storage Access: Approach to Limiting Document Access Attempts

• Cross Tenant Microsoft 365 Migration

• IT Security News Daily Summary 2024-03-21

• Role-Based Multi-Factor Authentication

• Transforming communities, one drop of water at a time

• Critical Fortinet’s FortiClient EMS flaw actively exploited in the wild

• FBI v the bots: Feds urge denial-of-service defense after critical infrastructure alert

• Apple’s iMessage Encryption Puts Its Security Practices in the DOJ’s Crosshairs

• Patch Ivanti Standalone Sentry and Ivanti Neurons for ITSM now

• The Role of Data Brokers in Software Development: Navigating Ethics and Privacy Concerns

• Microsoft faces bipartisan criticism for alleged censorship on Bing in China

• Can Parents See Internet History on Wi-Fi?

• 1Password Review: Features, Pros, Cons & Pricing 2024

• Congress votes unanimously to ban brokers selling American data to enemies

• Exploring the Comprehensive World of Burp Suite

• Nothing Scares the PRC More Than a Russian Defeat in Ukraine

• Lost Crypto Wallet? New Firm Promises Ethical, Transparent and Inexpensive Recovery

• New Bipartisan Bill Would Require Online Identification, Labeling of AI-Generated Videos and Audio

• Facebook Shuts Down Critical Tool For Tracking Fake News

• Microsoft, Meta, X, Match Group Challenge Apple App Store Terms

• Pwn2Own Vancouver 2024 Day 1 – team Synacktiv hacked a Tesla

• How To Respond To An AWS Key Honeytoken Trigger: A Detailed Guide

• USENIX Security ’23 – Sparsity Brings Vulnerabilities: Exploring New Metrics in Backdoor Attacks

• CISA, NSA, Others Outline Security Steps Against Volt Typhoon

• Unpatched Zephyr OS Expose Devices to DoS Attacks via IP Spoofing

• Why adversarial AI is the cyber threat no one sees coming

• “Pig butchering” is an evolution of a social engineering tactic we’ve seen for years

• DataDome Releases Ruby Server-Side Integration

• USENIX Security ’23 – A Data-Free Backdoor Injection Approach In Neural Networks

• Sentry, GitHub Use AI to Help Fix Coding Errors

• GPT-4 ‘Kinda Sucks’ Admits Sam Altman, Says GPT-5 Will Be Better

• Remote Work Security Tips for Developers

• Pwn2Own 2024 Awards $700k as Hackers Pwn Tesla, Browsers, and More

• 6 Most Secure Cloud Storage Solutions in 2024 Reviewed

• Cisco portfolio for manufacturing: What can we help you solve today?

• Massive Data Breach Sends Shockwaves Through Businesses

• Russia Hackers Using TinyTurla-NG to Breach European NGO’s Systems

• US Treasury Targets Russian Entities in Cyber Influence Campaign

• Whois “geofeed” Data, (Thu, Mar 21st)

• US Government, US States Sue Apple For Smartphone Monopoly

• Wordfence Intelligence Weekly WordPress Vulnerability Report (March 11, 2024 to March 17, 2024)

• Now FCC endorses IoT products with Cyber Trust Mark Logo

• NCC Group: Ransomware attacks jump 73% in February

• Dymium Snags $7M to Build Data Security Platform with Secure AI Chat

• Sentry, GitHub Use AI to Help Fixing Coding Errors

• Critical Bug in aiohttp: Ransomware Attackers On A Roll

• US Legislation Targets Data Sharing With Foreign Adversaries

• Neuralink Livestreams Chip-Implant Patient Playing Chess

• Yacht dealer to the stars attacked by Rhysida ransomware gang

• Tarsal Raises $6 Million for Security Data Movement Platform

• House Passes Bill Barring Sale of Personal Information to Foreign Adversaries

• Tiktok Ban: China Criticizes a Proped Bill in the US Congress

• The Cisco Observability Platform is the right solution at the right time

• 5 Ways SMB Leaders Can Make Better IT Decisions

• Fairness is a Critical And Challenging Feature of AI

• Over 800 npm Packages Found with Discrepancies, 18 Exploitable to ‘Manifest Confusion’

• How I got started: Ransomware negotiator

• How to avoid internet black holes for the network

• New chapter begins as ENISA celebrates 20 years of strengthening cybersecurity

• Hackers Found a Way to Open Any of 3 Million Hotel Keycard Locks in Seconds

• Ransomware, RATs, And More Deployed On Compromised TeamCity Servers

• Exposed: Chinese Smartphone Farms That Run Thousands Of Barebone Mobes To Do Crime

• $200,000 Awarded At Pwn2Own 2024 For Tesla Hack

• The art and science of product security: A deep dive with Jacob Salassi

• Premiums Affected as Internet-Connected Cars Share Data with Insurers

• CISA, FBI, and MS-ISAC Release Update to Joint Guidance on Distributed Denial-of-Service Techniques

• A Recognized Leader in SSE

• MIWIC2024: Rebecca Taylor, Threat Intelligence Knowledge Manager at Secureworks

• Ivanti Patches Critical Vulnerabilities in Standalone Sentry, Neurons for ITSM

• Watch Now: Supply Chain & Third-Party Risk Summit 2024

• Vulnerability Allowed One-Click Takeover of AWS Service Accounts

• Microsoft Patches Xbox Vulnerability Following Public Disclosure

• Risk and Regulation: Preparing for the Era of Cybersecurity Compliance

• Vishal Rao joins Skyhigh Security as CEO

• AttackIQ Ready! 2.0 enables organizations to validate their cyber defense

• AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials

• Hacker Pleads Guilty For Stealing 132,000+ Users Data

• Nemesis Market: Leading Darknet Market Seized

• DOT to investigate data security and privacy practices of top US airlines

• IoT Consumer Labeling Goes Global – What This Means for Vendors and Consumers

• Deceptive Calls in Kolkata, Residents Targeted in Elaborate Scam

• Security Leaders Acknowledge API Security Gaps Despite Looming Threat

• New details on TinyTurla’s post-compromise activity reveal full kill chain

• Best Practices for AI Training Data Protection

• Making Sport of Sports: The Growing Cyber Threat to Global Sports Events in 2024

• The Student-Centric Experience: Technologies

• A Decade of Trust — Meeting the Needs of the DoD

• Ordr Taps AI to Augment Attack Surface Management

• Veritas Backup Exec enhancements protect SMBs’ critical data

• Apricorn releases 24TB hardware encrypted USB drive

• ICO Probes Kate Middleton Medical Record Breach

• Five Steps to Overcoming Cyber Complacency

• Why Browser Security Matters More Than You Think

• GitHub Rolls Out ‘Code Scanning Autofix’ in Public Beta

• Microsoft Warns of New Tax Returns Phishing Scams Targeting You

• Keeper Security Bolsters Administrative Control Over Passwords and Privileged Access Management With UI Updates and Streamlined Onboarding

• Q4 2023 Cyber Attacks Statistics

• Disinformation and Elections: EFF and ARTICLE 19 Submit Key Recommendations to EU Commission

• UK council won’t say whether two-week ‘cyber incident’ impacted resident data

• EPA and White House Send Water Industry Cybersecurity Warning

• Public AI as an Alternative to Corporate AI

• LogicGate introduces cyber and operational risk suite offerings

• GitHub Launches AI-Powered Autofix Tool to Assist Devs in Patching Security Flaws

• How to Accelerate Vendor Risk Assessments in the Age of SaaS Sprawl

• North Korea’s Kimsuky Group Equipped to Exploit Windows Help files

• White House Warns Of Cyberattacks On US Water Infrastructure

• New Application-Layer Loop DoS Attack – 300,000 Online Systems At Risk

• 19 million plaintext passwords exposed by incorrectly configured Firebase instances

• Kyndryl partners with Cloudflare to help enterprises migrate to next-generation networks

• Fake Obituary Sites Send Grievers to Porn and Scareware Pages

• Curious Serpens’ FalseFont Backdoor: Technical Analysis, Detection and Prevention

• Quick Glossary: Cybersecurity Countermeasures

• Ivanti urges customers to fix critical RCE flaw in Standalone Sentry solution

• Intel To Spend $100bn In US, After Biden’s $20bn Award

• $200,000 Awarded at Pwn2Own 2024 for Tesla Hack

• Attackers are exploiting JetBrains TeamCity flaw to deliver a variety of malware

• Hackers Claimed to have Breached the Israeli Nuclear Facility’s Networks

• Making Sense of Operational Technology Attacks: The Past, Present, and Future

• Security Researchers Win Second Tesla At Pwn2Own

• Phishing Campaign Uses Microsoft Office Docs to Spread NetSupport RAT

• NIST’s National Vulnerability Database Put CVE Enrichment on Hold

• U.S. Sanctions Russians Behind ‘Doppelganger’ Cyber Influence Campaign

• Authorities Dismantle Grandoreiro Banking Malware Operation

• Recent Windows Server Updates Trigger Domain Controller Reboots & Crash

• New Loop DoS attack may target 300,000 vulnerable hosts

• AI Transparency: Why Explainable AI Is Essential for Modern Cybersecurity

• Aligning With NSA’s Cloud Security Guidance: Four Takeaways

• Python Snake Info Stealer Spreading Via Facebook Messages

• GitHub’s New AI Tool that Fixes Your Code Automatically

• Exposed: Chinese smartphone farms that run thousands of barebones mobes to do crime

• Ransomware turns innovative and hides in websites where files are being uploaded

• It’s 2024 and North Korea’s Kimsuky gang is exploiting Windows Help files

• Fake data breaches: Countering the damage

• Bridging the Gap: Integrating SOCs into Application Security for Enhanced Cyber Resilience

• Using cloud development environments to secure source code

• WebCopilot: Open-source automation tool enumerates subdomains, detects bugs

• Ivanti Releases Urgent Fix for Critical Sentry RCE Vulnerability

• Secrets sprawl: Protecting your critical secrets

• Malware stands out as the fastest-growing threat of 2024

• Atlassian Releases Fixes for Over 2 Dozen Flaws, Including Critical Bamboo Bug

• The Not-so-True People-Search Network from China

• Mobile Device Security: Protecting Your Smartphone

• ISC Stormcast For Thursday, March 21st, 2024 https://isc.sans.edu/podcastdetail/8904, (Thu, Mar 21st)

• Controversial Clearview AI Added to US Government’s Tech Marketplace

• Cybersecurity for Small Businesses: Essential Protection

• How to Build a Phishing Playbook Part 3: Playbook Development

• New Loop DoS Attack Threatens Hundreds of Thousands of Systems

• USENIX Security ’23 – How The Great Firewall Of China Detects And Blocks Fully Encrypted Traffic

• Apex Legends Global Series plagued by hackers

• IT Security News Daily Summary 2024-03-20

• Users say Glassdoor added real names to user profiles without their consent

• OpenAI’s GPT store is brimming with promise – and spam

• The best VPN routers of 2024

• How to defend against phishing as a service and phishing kits

• Introducing Cisco U. Spotlight

• Critical flaw in Atlassian Bamboo Data Center and Server must be fixed immediately

• What Is Spoofing? 10 Types + How to Prevent It

• Texas Adult Site Age Verification Law Sparks 234.8% VPN Surge

• Securing Cloud Infrastructure: Leveraging Key Management Technologies

• U.S. data privacy protection laws: 2024 guide

• It’s tax season, and scammers are a step ahead of filers, Microsoft says

• EFF Seeks Greater Public Access to Patent Lawsuit Filed in Texas

• API Governance: Ensuring Control and Compliance in the Era of Digital Transformation

• GitHub previews AI-powered code scanning autofix

• US task force aims to plug security leaks in water sector

• Ivanti fixes RCE vulnerability reported by NATO cybersecurity researchers (CVE-2023-41724)

• Theft Of Tesla Battery Manufacturing Secrets Triggers Arrest

• Some of the Most Popular Websites Share Your Data With Over 1,500 Companies

• DevSecOps: Bridging the Gap Between Speed and Security

• AI used extensively for security but not coding, JFrog survey finds

• 1 in 4 Organizations Shut Down OT Operations Due to Cyberattacks: Survey

• Pwned by the Mail Carrier

• New Sysrv Botnet Variant Makes Use of Google Subdomain to Spread XMRig Miner

• Misconfigurations in Google Firebase lead to over 19.8 million leaked secrets

• Google Fined 250 Million Euros By French Competition Watchdog

• Russia Warns US Over SpaceX ‘Spy Satellites’

• Cyber Flashing: A Digital Intrusion

• CISA Warns Critical Infrastructure Leaders of Volt Typhoon

• Fraudsters Are Posing As The FTC To Scam Consumers

• GitHub’s latest AI tool can automatically fix code vulnerabilities

• Hacker Caught Stealing Personal Data of 132,000 Individuals Pleads Guilty

• Microsoft Hires Influential AI Figure Mustafa Suleyman to Head up Consumer AI Business

• EPA and White House Raise Alarm on Water Cybersecurity

• Microsoft Threat Intelligence unveils targets and innovative tactics amidst tax season

• Netgear wireless router open to code execution after buffer overflow vulnerability

• Abusing the DHCP Administrators Group to Escalate Privileges in Windows Domains

• Biden Administration issues emergency alert against cyber-attacks on critical infrastructure

• Apple’s Tim Cook Reassures China Of Supply Chain Importance

• London Clinic probes claim staffer tried to peek at Princess Kate’s records

• Facebook Will Make Its “Pay For Privacy” Model Cheaper To Appease Regulators

• Apex Legends hacker said he hacked tournament games ‘for fun’

• GitHub’s latest AI tool that can automatically fix code vulnerabilities

• Here’s Why Tracking Everything on the Dark Web Is Vital

• AT&T Denies Involvement in Massive Data Leak Impacting 71 Million People

• E-Commerce Scam: Read These 5 Tips to Stay Safe from Fake Sites

• Zoom Compliance Manager helps organizations fulfill regulatory requirements

• Study Uncovers 27% Spike in Ransomware; 8% Yield to Demands

• 2024-03-19: DarkGate infection

• New ‘Loop DoS’ Attack Impacts Hundreds of Thousands of Systems

• Threat actors actively exploit JetBrains TeamCity flaws to deliver malware

• #MIWIC2024: Lisa Ventura MBE, Founder of Cyber Security Unity Ltd.

• The Tech Apocalypse Panic is Driven by AI Boosters, Military Tacticians, and Movies

• DataDome Account Protect provides security for login and registration endpoints

• $601 Bounty Awarded for Interesting Cross-Site Request Forgery to Local JS File Inclusion Vulnerability Patched in File Manager WordPress Plugin

• Microsoft Hires DeepMind Co-Founder Mustafa Suleyman

• SOC 2 Audits as a Pillar of Data Accountability

• Proofpoint: APAC Employees Are Choosing Convenience, Speed Over Cyber Security

• Increase Market Share Quickly with Cisco Specializations and GTM Tools

• Serial extortionist of medical facilities pleads guilty to cybercrime charges

• Atlassian Patches Critical Vulnerability in Bamboo Data Center and Server

• RaaS groups increasing efforts to recruit affiliates

• A prescription for privacy protection: Exercise caution when using a mobile health app

• Stalkerware Usage Surging, Despite Data Privacy Concerns

• Fraud Risk For Vans Customers After Data Breach

• Google Firebase May Have Exposed 125M Records From Misconfigurations

• ControlUp Secure DX reduces endpoint management complexity

• Semgrep Assistant boosts AppSec team productivity using AI

• NCSC Released an Advisory to Secure Cloud-hosted SCADA

• Secure Your Heroku Apps With SSL

• AI-generated deepfakes and investment scams

• The UK energy sector faces an expanding OT threat landscape

• UK Government: 75% of UK Businesses Experienced a Cyber Incident in 2023

• Scans for Fortinet FortiOS and the CVE-2024-21762 vulnerability, (Wed, Mar 20th)

• Elon Musk Replies To Far Right User, After Reinstatement Of X Account

• Check Point Wins First Place in Head-to-Head Firewall Testing Miercom 2024 NGFW Firewall Security Benchmark

• BunnyLoader 3.0 surfaces in the threat landscape

• Stalkerware usage surging, despite data privacy concerns

• Kubernetes 1.30: A Security Perspective

• Closing the False Positives Gap for SOC Efficiency

• ChatGPT Meets Music: Suno’s Trailblazing Initiative Marks a New Era

• Colombian Government Impersonation Campaign Targets Latin American Individuals in Cyberattack

• Apiiro and Secure Code Warrior join forces for developer training integration

• Androxgh0st Exploits SMTP Services To Extract Critical Data

• Hackers Selling GlorySprout Malware with Anti-VM Features in underground Fourm for $300

• Exclusive: AWS, Accenture and Anthropic partner to accelerate enterprise AI adoption

• New Open License Generator helps ensure AI is used responsibly

• NSTAC’s Cyber Report — Leveraging AI to Measurably Reduce Risk

• Enhancing the Polaris Software Integrity Platform: Synopsys Introduces Dynamic Security Testing Features

• Tax scammer goes after small business owners and self-employed people

• Chrome 123, Firefox 124 Patch Serious Vulnerabilities

• Five Eyes Agencies Issue New Alert on Chinese APT Volt Typhoon

• Ukraine Arrests Hackers for Selling 100 Million Email, Instagram Accounts

• What Is the Dark Web? Myths and Facts About the Hidden Internet

• CyberSaint raises $21 million to accelerate market expansion

• Portnox Conditional Access for Applications improves data security for organizations

• Dissecting a complex vulnerability and achieving arbitrary code execution in Ichitaro Word

• Microsoft Notifies of Major Domain Change With Teams is Coming

• Cisco and Nvidia: Redefining Workload Security

• White House Calls on States to Boost Cybersecurity in Water Sector

• Virtual Event Today: Supply Chain & Third-Party Risk Summit 2024

• WordPress Plugin Flaw Exposes 40,000+ Websites to Cyber Attack

• Cyber Security Today, March 20, 2024 – Misconfigured Firebase instances are leaking passwords, a China-related threat actor is hacking governments and more

• TeamCity Flaw Leads to Surge in Ransomware, Cryptomining, and RAT Attacks

• Generative AI Security – Secure Your Business in a World Powered by LLMs

• Android malware, Android malware and more Android malware

• The ‘AT&T breach’—what you need to know

• Risk Management Firm CyberSaint Raises $21 Million

• Venafi Firefly with SPIFFE capability enables security teams to ensure governance and reduce risk

• The most prevalent malware behaviors and techniques

• Growing AceCryptor attacks in Europe

• Beyond Ctrl+Alt+Delete: Strategies For Erasing Negative Online Content

• Mintlify Confirms Data Breach Through Compromised GitHub Tokens

• Workings of MalSync Malware Unveiled: DLL Hijacking & PHP Malware

• What Is Log Management and Why you Need it

• Five Eyes tell critical infra orgs: take these actions now to protect against China’s Volt Typhoon

• New BunnyLoader Malware Variant Surfaces with Modular Attack Features

• Ukrainian Police Arrest Suspected Brute-Force Account Hijackers

• Understanding ISO 27001:2022 Annex A.6 – Organization of Information Security

• 300,000 Systems Vulnerable to New Loop DoS Attack

• Nirmata Policy Manager combats cloud security threats

• Glassdoor Wants to Know Your Real Name

• Pokemon Company resets some users’ passwords

• Deepfakes and AI’s New Threat to Security

• White House Convenes States to Discuss Water Sector Breaches

• How to deploy software to Linux-based IoT devices at scale

• Elon Musk hints a flying Tesla at Don Lemon’s show

• Tor Unveils WebTunnel – Let Users Bypass Censorship

• Ukraine Arrests Trio for Hijacking Over 100 Million Email and Instagram Accounts

• Introducing OpenShift Service Mesh 2.5

• Red Hat Quay 3.11: Smarter permissions, lifecycle, and AWS integration

• Hackers Attacking Critical US Water Systems, White House Warns

• Five 5G Security Concerns: Safeguarding the Future of Connectivity

• Azorult Malware Abuses Google Sites To Steal Login Credentials

• Andariel Hackers Leveraging Remote Tools To Exploit Organizations

• U.S. EPA Forms Task Force to Protect Water Systems from Cyberattacks

• Kate Middleton Medical Record Data was hacked

• NIST Launches Cybersecurity Framework (CSF) 2.0

• Red teaming in the AI era

• Security best practices for GRC teams

• 1% of users are responsible for 88% of data loss events

• API environments becoming hotspots for exploitation

• The Impact of Biometric Authentication on User Privacy and the Role of Blockchain in Preserving Secure Data

• ISC Stormcast For Wednesday, March 20th, 2024 https://isc.sans.edu/podcastdetail/8902, (Wed, Mar 20th)

• Australian techie jailed for accessing museum’s accounting system and buying himself stuff

• Malware

• Understanding Your Attack Surface: AI or bust

• The Future of Incident Response: SOAR’s Impact on Cybersecurity Defense

• Cybersecurity Hygiene: Best Practices for Individuals

• Design Principles-Building a Secure Cloud Architecture

• Pokémon resets some users’ passwords after hacking attempts

• Microsoft Sentinel delivered 234% ROI, according to new Forrester study

• 10 Commandments of API-First Development

• Millions of Cisco Umbrella Roaming Client Users to Benefit From Upgrading to Cisco Secure Client

• Lucy Parsons Labs Takes Police Foundation to Court for Open Records Requests

• IT Security News Daily Summary 2024-03-19

• This Acoustic Side-Channel Attack Steals Keystrokes Via Typing Patterns

• Pro Players Hacked Live On Stream! Apex Legends Tournament Postponed

• Pokemon resets some users passwords after hacking attempts

• Ukraine cyber police arrested crooks selling 100 million compromised accounts

• Daniel Stori’s ‘I’m Fine’

• USENIX Security ’23 – Abderrahmen Amich, Birhanu Eshete, Vinod Yegneswaran, Nguyen Phong Hoang – DeResistor: Toward Detection-Resistant Probing for Evasion Of Internet Censorship

• MacOS Sonoma 14.4 bug round-up: What to know before you update

• Crypto scams more costly to the US than ransomware, Feds say

• Beijing-backed cyberspies attacked 70+ orgs across 23 countries

• How To Craft The Perfect Data Loss Prevention Strategy

• Zero Day Moves to Ghost

• Crypto scams more costly to the US than ransomware, feds say

• Upcoming webinar: How a leading architecture firm approaches cybersecurity

• Lazarus Group Hackers Resurface Utilizing Tornado Cash for Money Laundering

• Encina Wastewater Authority Reportedly Targeted by BlackByte Ransomware

• The best VPN for streaming in 2024: Expert tested and reviewed

• 7 Best Network Security Tools to Use in 2024

• Speaking Freely: Maryam Al-Khawaja

• Powerful Cloud Permissions You Should Know: Series Final

• Discovering API secrets & endpoints using APKLeaks

• Why IT General Controls Are Important for Compliance and Cybersecurity

• 3 ways we tried to outwit AI last week: Legislation, preparation, intervention

• Owning Versus Renting – The Circumstances of Web3 Domains

• The Power of AI: Building a Robust Data Ecosystem for Enterprise Success

• Best Enterprise Security Tools For Tip-top Business Protection

• CISA and Partners Release Joint Fact Sheet for Leaders on PRC-sponsored Volt Typhoon Cyber Activity

• Cisco Launches CCST IT Support Certification: Your Pathway to a Career in IT

• APIs Drive the Majority of Internet Traffic and Cybercriminals are Taking Advantage

• Cybercriminals Beta Test New Attack to Bypass AI Security

• Vulnerability Recap 3/19/24 – Microsoft, Fortinet & More

• How Rogue ISPs Tamper With Geofeeds

• Taking Cyber Asset and Exposure Management to the Boardroom

• Nude Deepfakes: What is EU Doing to Prevent Women from Cyber Harassment

• BunnyLoader 3.0 Detected With Advanced Keylogging Capabilities

• Novel Script-Based Attack That Leverages PowerShell And VBScript

• Simplifying Data Management in the Age of AI

• Appdome launches Social Engineering Prevention service to safeguard mobile users

• Researchers Uncover New “Conversation Overflow” Tactics

• United Health spends $2 billion in ransomware recovery

• CISA Releases One Industrial Control Systems Advisory

• Franklin Fueling System EVO 550/5000

• Cisco’s Bill Davenport Starts Term on FCC Technological Advisory Council

• New AcidPour wiper targets Linux x86 devices. Is it a Russia’s weapon?

• Cloudflare Loses 22% Of Its Domains In Freenom .tk Shutdown

• Kasada introduces CDN edge API integrations to block abuse and online fraud

• Tufin Orchestration Suite R24-1 enhances cloud security and compliance

• CalypsoAI Platform provides real-time LLM cybersecurity insights

• SQL Injection Vulnerability Patched in Tutor LMS WordPress Plugin

• How to manage third-party risk in the cloud

• Building Data Center Infrastructure for the AI Revolution

• Update Delays To NIST Vulnerability DB Alarms Researchers

• Nations Direct Mortgage Data Breach Affects 83,000 Individuals

• Apex Legends Esports Final Delayed By Hack Claims

• Airbus Pulls Out of Deal to Buy Atos Cybersecurity Unit

• Threat Actors Exploit the Aiohttp Bug to Locate Susceptible Networks

• Ordr launches OrdrAI CAASM+ to provide asset visibility with AI/ML classification

• Research Shows IT and Construction Sectors Hardest Hit By Ransomware

• DarkGPT OSINT AI Assistant To Find Leaked Database

• Crypto wallet providers urged to rethink security as criminals drain them of millions

• Cato Unveils Industry First AI-driven Networking and Security Incident Detection and Response

• Innovative Web Automation Solutions Unveiled by Skyvern AI

• WhatsApp Beta Testing Expanded Authentication Methods for App Lock Feature

• Synopsys fAST Dynamic enables DevOps teams to fix security vulnerabilities in modern web apps

• eSentire Threat Intelligence reduces false positive alerts

• Drata unveils Adaptive Automation for streamlined compliance

• From Deepfakes to Malware: AI’s Expanding Role in Cyber Attacks

• Secure Your API With JWT: Kong OpenID Connect

• How AI can be hacked with prompt injection: NIST report

• BigID Raises $60 Million at $1 Billion Valuation

• Chinese APT Hacks 48 Government Organizations

• Traefik Labs updates address rising Kubernetes adoption and API management

• NIST’s NVD has encountered a problem

• Attacker Hunting Firewalls, (Tue, Mar 19th)

• Lurking in the Shadows: Attack Trends Shine Light on API Threats

• Flexible Billing now available in the Avast Business Hub for MSPs

• Delivering Digital Immunity: Taking a Holistic Approach to Optimize Your Network

• Sonatype SBOM Manager identifies and mitigates vulnerabilities within the software supply chain

• Mintlify Data Breach Exposes Customer GitHub Tokens

• Providing Optimal Cloud Security Outcomes Through StateRAMP

• Atos says Airbus flew off, no longer interested in infosec and big data biz

• AI and the Evolution of Social Media

• Case Study: Fatty Liver Foundation Improves Enterprise Domain Security with PowerDMARC

• Verimatrix Counterspy safeguards content across various devices

• NHS Dumfries and Galloway Faces Cyberattack, Patient Data at Risk

• Social media influencers targeted by identity thieves

• Preparing Society for AI-Driven Disinformation in the 2024 Election Cycle

• Nations Direct Mortgage Data Breach Impacts 83,000 Individuals

• SUSE announces new enhancements to help users manage business-critical workloads

• Recognizing Progress and Living Our Values: Akamai?s 2023 ESG Impact Report

• 900+ websites Exposing 10M+ Passwords: Most in Plaintext

• Exploring Zero-Trust Architecture Implementation in Modern Cybersecurity

• Cisco Secure Access named Leader in Zero Trust Network Access

• Navigating the Internship Odyssey: Taking a Leap To Love Where I Work

• December 2023 Cyber Attacks Timeline

• Store manager admits SIM swapping his customers

• PoC exploit for critical Fortra FileCatalyst MFT vulnerability released (CVE-2024-25153)

• Nvidia Introduces Next-Generation ‘Blackwell’ AI Chips

• AI Researchers In West, China Identify AI ‘Red Lines’

• 5 Types of Crypto You Didn’t Know Existed

• Players hacked during the matches of Apex Legends Global Series. Tournament suspended

• Pentest People Announces its Assured Service Provider status for NCSC’s Cyber Incident Exercising Scheme

• Alleged AT&T (unverified) – 49,102,176 breached accounts

• Vultr Cloud Inference simplifies AI deployment

• NCSC Publishes Security Guidance For Cloud-Hosted SCADA

• Hackers Exploiting Microsoft Office Templates to Execute Malicious Code

• What are non-human identities?

• Suspected Russian Data-Wiping ‘AcidPour’ Malware Targeting Linux x86 Devices

• Hackers Exploiting Popular Document Publishing Sites for Phishing Attacks

• Crafting and Communicating Your Cybersecurity Strategy for Board Buy-In

• Apple In Talks With Google To Bring Gemini AI To iPhones

• Aiohttp Vulnerability in Attacker Crosshairs

• Mintlify Data Breach Leads to Exposure of Customer GitHub Tokens

• Misconfigured Firebase Instances Expose 125 Million User Records

• Microsoft Copilot for Security: General Availability details

• Cohesity partners with NVIDIA to harness the power of generative AI

• NCSC Publishes Security Guidance for Cloud-Hosted SCADA

• Unit 42 Collaborative Research With Ukraine’s Cyber Agency To Uncover the Smoke Loader Backdoor

• US Senators Voice Support For TikTok Bill

• How ANY.RUN Malware Sandbox Process IOCs for Threat Intelligence Lookup?

• Achieving continuous compliance with Tripwire’s Security Configuration Manager

• Critical insights into Australia’s supply chain risk landscape

• Threat landscape for industrial automation systems. H2 2023

• What is Credential Harvesting? Examples & Prevention Methods

• GlobalSign PKIaaS Connector enhances ServiceNow certificate lifecycle management

• SpaceX ‘Developing Spy Satellites’ For US Agency

• Government Wants Flying Taxis In Operation By 2028

• Earth Krahang APT breached tens of government organizations worldwide

• BigID raises $60 million to accelerate AI data security innovation

• Prolific Chinese Threat Campaign Targets 100+ Victims

• Uber To Pay £149m In Settlement With Australian Taxi Drivers

• CryptoWire Ransomware Attacking Abuses Schedule Task To maintain Persistence

• Keep Your Data Safe as You Become More Productive for Just $30 Through 3/24

• Streamline your SBOM management with SBOM Manager

• Alleged A&TT (unverified) – 49,102,176 breached accounts

• E-Root Admin Sentenced to 42 Months in Prison for Selling 350,000 Credentials

• Jenkins Args4j CVE-2024-23897: Files Exposed, Code at Risk

• WhiteSnake Stealer Checks for Mutex & VM Function Before Execution

• Your FAQ Guide to RSA Conference 2024

• Researchers Hack AI Assistants Using ASCII Art

• Surviving the “quantum apocalypse” with fully homomorphic encryption

• New Phishing Attack Uses Clever Microsoft Office Trick to Deploy NetSupport RAT

• CISA Hacked and over 70m files leaked online from AT&T database

• Microsoft Deprecate 1024-bit RSA Encryption Keys in Windows

• Why USB Attacks Are Back and How to Prevent Them

• Cybersecurity jobs available right now: March 19, 2024

• E-Root Marketplace Admin Sentenced to 42 Months for Selling 350K Stolen Credentials

• Why is everyone talking about certificate automation?

• Outsmarting cybercriminal innovation with strategies for enterprise resilience

• Lynis: Open-source security auditing tool

• Decoding the California DMV’s Mobile Driver’s License

• UnitedHealth Says It Has Made Progress on Recovering From Massive Cyberattack

• ISC Stormcast For Tuesday, March 19th, 2024 https://isc.sans.edu/podcastdetail/8900, (Tue, Mar 19th)

• Beware Of Free wedding Invite WhatsApp Scam That Steal Sensitive Data

• NVIDIA GTC Keynote: Blackwell Architecture Will Accelerate AI Products in Late 2024

• Insider Threat Detection: Identifying Internal Risks

• EFF to California Appellate Court: Reject Trial Judge’s Ruling That Would Penalize Beneficial Features and Tools on Social Media

• Microsoft Teams Notifications Integration

• IT Security News Daily Summary 2024-03-18

• Mintlify says customer GitHub tokens exposed in data breach

• Don’t be like these 900+ websites and expose millions of passwords via Firebase

• PoC exploit for critical RCE flaw in Fortra FileCatalyst transfer tool released

• Fujitsu Scrambles After Malware Attack: Customer Data Potentially Breached

• Rethinking DevOps in 2024: Adapting to a New Era of Technology

• Five AI topics to discuss with your CEO

• Fujitsu reveals malware installed on internal systems, risk of customer data spill

• 5 Best Practices to Secure Azure Resources

• Exploitation activity increasing on Fortinet vulnerability

• US Government Investigating Facebook For Role In Illegal Drug Sales

• Fujitsu finds malware on company systems, investigates possible data breach

• New AcidRain Linux Malware Variant “AcidPour” Found Targeting Ukraine

• USENIX Security ’23 – Network Responses To Russia’s Invasion of Ukraine In 2022: A Cautionary Tale For Internet Freedom

• Vulnerability Summary for the Week of March 11, 2024

• cloud load balancing

• cloud application

• Fujitsu suffered a malware attack and probably a data breach

• More than 133,000 Fortinet appliances still vulnerable to month-old critical bug

• SOPS [Security Zines]

• TikTok ‘Ban’ — ByteDance CEO and EFF are BFFs

• McDonald’s Attributes Worldwide Outage to Third-Party Provider

• New DEEP#GOSU Malware Campaign Targets Windows Users with Advanced Tactics

• SubdoMailing and the Rise of Subdomain Phishing

• C++ creator rebuts White House warning

• Cyber baddies leak 70M+ files online, claim they’re from AT&T

• Moldovan Behind E-Root Marketplace Gets US Federal Prison Term

• Tor Launches WebTunnel Bridges To Evade Censorship

• User Privacy: Reddit Discloses FTC Probe into AI Data Licensing Ahead of IPO

• CISA Publishes Repository for Software Attestation and Artifacts

• FBI and Interpol issue cyber alerts on ransomware and pig butchering scams

• Esports league postponed after players hacked midgame

• FCC Agrees to Cyber Trust Mark for IoT Products

• Repository for Software Attestation and Artifacts Now Live

• UK Government Releases Cloud SCADA Security Guidance

• USENIX Security ’23 – Wentao Guo, Jason Walter, Michelle L. Mazurek – The Role Of Professional Product Reviewers In Evaluating Security And Privacy

• Too Much Escaping Backfires, Allows Shortcode-Based XSS Vulnerability in Contact Form Entries WordPress Plugin

• Hackers Using Weaponized SVG Files in Cyber Attacks

• Productiv launches Sidekick, an AI-powered assistant for smarter SaaS management

• A Tale of Overcoming Cyber Threats with Auto Pentesting and CTEM

• North Korean Hackers’ $12M Ethereum Laundering Via Tornado Cash Unveiled

• Russian Hackers Breach Microsoft’s Security: What You Need to Know

• Over 50,000 Vulnerabilities Discovered in DoD Systems Through Bug Bounty Program

• Splunk Joins Cisco: Our Partner Ecosystems Just Got Even Stronger

• New Attack Shows Risks Of Browser Giving Websites Access To GPU

• Haiti: Machete-Wielding Militias Battle Gangs In Port-au-Prince

• STOP Ransomware Gains Stealthier Variant

• Pentagon Received Over 50k Vulnerability Reports Since 2016

• Cisco Completes $28 Billion Acquisition of Splunk

• Fujitsu Data Breach Impacts Personal, Customer Information

• Decentralised Identity: The Next Revolution Enabled by Block Chain Technology

• Microsoft Addressed ~60 Vulnerabilities With March Patch Tuesday

• New GhostRace Vulnerability In CPUs May Leak Data

• Dark Web Tool Arms Ransomware Gangs: E-commerce & Aviation Industries Targeted

• COTI Announces Upcoming V2 Airdrop Campaign Worth +10M USD

• Embrace the Future of Remote Access: Transitioning from Legacy VPNs to SASE

• The Hidden Risks Within Ethereum’s CREATE2 Function: A Guide to Navigating Blockchain Security

• Top 40 Cybersecurity Companies You Need to Know 2024

• Fortra Patches Critical RCE Vulnerability in FileCatalyst Transfer Tool

• Remove WordPress miniOrange plugins, a critical flaw can allow site takeover

• Cyberattack gifts esports pros with cheats, forcing Apex Legends to postpone tournament

• New Attack Shows Risks of Browsers Giving Websites Access to GPU

• Hacker Conversations: Stephanie ‘Snow’ Carruthers, Chief People Hacker at IBM X-Force Red

• Pentagon Received Over 50,000 Vulnerability Reports Since 2016

• Zero-Trust Network Access: Why so Many Teams Get it Wrong

• TRAI Updates Regulations to Prevent SIM Swap Fraud in Telecom Porting

• Deloitte unveils CyberSphere platform for simplified cyber program management

• Three New Critical Vulnerabilities Uncovered in Argo

• New Acoustic Keyboard Side Channel Attack Let Attackers Steal Sensitive Data

• Initializing Services in Node.js Application

• Google researchers unveil ‘VLOGGER’, an AI that can bring still photos to life

• See How Our Cloud-Delivered Security Services Provide 357% ROI

• Hackers Using Sneaky HTML Smuggling to Deliver Malware via Fake Google Sites

• Microsoft: 87% of UK Organizations Vulnerable to Costly Cyber-Attacks

• Tech giant Fujitsu says it was hacked, warns of data breach

• A New Day for Data: Cisco and Splunk

• Drones and the US Air Force

• Navigating the NSA’s New Zero-Trust Guidelines

• Cyber Security Today, March 18, 2024 – Fix this Python vulnerability, patch these industrial control system products, the latest data breaches and more

• NIST NVD Halt Leaves Thousands of Vulnerabilities Untagged

• Sign up for a Tour at the RSA Conference 2024 SOC

• Bankman-Fried Deserves Up To 50 Years In Jail, Prosecutors Say

• TikTok US Sales ‘Hit $16bn’, ByteDance Nears Meta In World Revenues

• CISA Adds JetBrains TeamCity Vulnerability To KEV Catalog

• IoT Live Patching Techniques: Securing a Future without Disruption

• Cyberattackers Exploit QEMU for Stealthy Network Tunneling

• Ransomware attack on Fujitsu Servers

• Demystifying Serverless Security: Safeguarding the Future of Cloud Computing

• Discontinued WordPress Plugin Flaw Exposes Websites to Cyber Attacks

• The Aviation and Aerospace Sectors Face Skyrocketing Cyber Threats

• PoC Published for Critical Fortra Code Execution Vulnerability

• Moldovan Operator of Credential Marketplace Sentenced to US Prison

• Nissan breach exposed data of 100,000 individuals

• Loft Labs simplifies multi-cluster Kubernetes management for Rancher users

• AI Security Company Backtracks On UK Testing Claims

• Senators Take Up TikTok Bill After Italy Fine Over Harmful Content

• ShadowSyndicate Hackers Exploiting Aiohttp Vulnerability To Access Sensitive Data

• NHS Dumfries and Galloway Warns of “Significant” Data Theft

• WordPress Admins Urged to Remove miniOrange Plugins Due to Critical Flaw

• McDonald’s International Outage Caused By Third Party

• Norfolk County Council Wins $490m Payout From Apple

• Hackers Launching AI-Powered Cyber Attacks to Steal Billions

• A week in security (March 11 – March 17)

• Federated Learning for Cybersecurity: Collaborative Intelligence for Threat Detection

• Firmware Monitoring is Just a Snapshot Away

• IMF Investigates Serious Cybesecurity Breach

• Earth Krahang Exploits Intergovernmental Trust to Launch Cross-Government Attacks

• Fujitsu Hacked – Attackers Infected The Company Computers with Malware

• Understanding ISO 27001:2022 Annex A.5 – Information Security Policies

• Email accounts of the International Monetary Fund compromised

• IMF Emails Hacked

• Africa Internet Outages Persist After Multiple Cables Cut

• 43 million workers potentially affected in France Travail data breach

• The UK’s Online Safety Act: a breakdown of key changes

• GBHackers Weekly Round-Up: Cyber Attacks, Vulnerabilities, Threats & New Cyber Stories

• Get on CompTIA Certification Track With These $30 Study Guides

• Infosec teams must be allowed to fail, argues Gartner

• Hackers Stolen 70 Million AT&T Sensitive Customers Data

• The TikTok Ban Bill, Your Car is Spying on You, Signal’s Username Update

• APT28 Hacker Group Targeting Europe, Americas, Asia in Widespread Phishing Scheme

• Filipino police free hundreds of slaves toiling in romance scam operation

• Public anxiety mounts over critical infrastructure resilience to cyber attacks

• Microsoft Entra ID: The Complete Guide to Conditional Access Policies

• Harnessing the power of privacy-enhancing tech for safer AI adoption

• DarkGPT – A ChatGPT-4 Powered OSINT Tool To Detect Leaked Databases

• Quicmap: Fast, open-source QUIC protocol scanner

• The dark side of GenAI

• Protecting distributed branch office environments from ransomware

• ChatGPT side-channel attack has easy fix: token obfuscation

• ISC Stormcast For Monday, March 18th, 2024 https://isc.sans.edu/podcastdetail/8898, (Mon, Mar 18th)

• Gamified Learning: Using Capture the Flag Challenges to Supplement Cybersecurity Training [Guest Diary], (Sun, Mar 17th)

• IT Security News Daily Summary 2024-03-17

• Threat actors leaked 70,000,000+ records allegedly stolen from AT&T

• USENIX Security ’23 – Tanusree Sharma, Zhixuan Zhou, Andrew Miller, Yang Wang – A Mixed-Methods Study Of Security Practices Of Smart Contract Developers

• 10 Takeaways from the 2024 Gartner IAM Summit UK

• Industry Benchmark Report, Issued by The FAIR Institute, Unveils the Dollar Impact of Cyber Incidents

• Beyond Resumes: Uncovering Hidden Talent at the New Jersey Judiciary

• Leak of Greek Diaspora Emails Shakes Government: A Closer Look

• “gitgub” malware campaign targets Github users with RisePro info-stealer

• Fraudulent Antivirus Software Faces FTC Lawsuit After Raking in Millions

• Private AI Chatbot Not Safe From Hackers With Encryption

• Cyber Attacks Threaten Essential Services

• Security Affairs newsletter Round 463 by Pierluigi Paganini – INTERNATIONAL EDITION

• I tested this $40 security camera from Amazon and it now has a place in my home

• How to Think Like a Hacker — and Defend Your Data

• In the rush to build AI apps, please, please don’t leave security behind

• Week in review: Cybersecurity job openings, hackers use 1-day flaws to drop custom Linux malware

• Dark Web Market Admin Gets 42 Months Prison for Selling Login Passwords

• StopCrypt Ransomware Utilizing Multi-Stage Shellcodes To Attack Windows

• eSIM Vulnerabilities: SIM Swappers Exploit Flaws, Hijack Phone Numbers

• Obfuscated Hexadecimal Payload, (Sat, Mar 16th)

• Green Technology Innovations: Sustainable Solutions

Generated on 2024-03-25 00:00:32.073191