IT Security News Weekly Summary – Week 13

• IT Security News Daily Summary 2024-03-31

• PyPI Halts New User Registrations to Combat Malware Campaign

• XZ Utils backdoor update: Which Linux distros are affected and what can you do?

• Checking CSV Files, (Sun, Mar 31st)

• Security Affairs newsletter Round 465 by Pierluigi Paganini – INTERNATIONAL EDITION

• Wireshark 4.2.4 Released, (Sun, Mar 31st)

• Rust developers at Google are twice as productive as C++ teams

• Enterprise AI Adoption Raises Cybersecurity Concerns

• Inside the failed attempt to backdoor SSH globally — that got caught by chance

• What to Do When Someone Steals Your Identity Online? – 8 Expert Tips

• What are Deepfakes and How to Spot Them

• Virtual Reality Headsets: A Gateway for Hackers?

• DinodasRAT Linux variant targets users worldwide

• Critical Backdoor Found in XZ Utils (CVE-2024-3094) Enables SSH Compromise

• Protecting Data in The Final Stretch of The Supply Chain

• Sophisticated Dutch Bank Helpdesk Scam Unveils Database with Over 7 Million Email Addresses

• Understanding and Shrinking Attack Surfaces: A Comprehensive Guide

• Passwords In the Air

• Cybersecurity Tabletop Exercises: How Far Should You Go?

• You Should Update Apple iOS and Google Chrome ASAP

• RDP remains a security concern – Week in security with Tony Anscombe

• Week in review: Backdoor found in XZ utilities, weaponized iMessages, Exchange servers at risk

• Understanding ISO 27001:2022 Annex A.8 – Asset Management

• Secure Remote Access: Enabling Remote Work Without Compromising Security

• Washington State Food Worker Card – 1,594,305 breached accounts

• AT&T Says Data on 73 Million Customers Leaked on Dark Web

• Threat Brief: Vulnerability in XZ Utils Data Compression Library Impacting Multiple Linux Distributions (CVE-2024-3094)

• Cybersecurity Metrics: Measuring Security Effectiveness

• AT&T confirmed that a data breach impacted 73 million customers

• An Accidental Discovery of a Backdoor Likely Prevented Thousands of Infections

• IT Security News Daily Summary 2024-03-30

• Understanding and Mitigating the Fedora Rawhide Vulnerability (CVE-2024-3094)

• Lateral Movement in Cybersecurity: Sneaking Sideways Through a Network

• Technologist Versus Spy: The xz Backdoor Debate

• AT&T Says PII From 73 Million Account Holders Leaked Onto Dark Web

• Expert found a backdoor in XZ tools used many Linux distributions

• Israeli LGBTQ App Atraf Faces Data Leak, 700,000 Users Affected

• Can generative AI help address the cybersecurity resource gap?

• EU AI Act to Impact US Generative AI Deployments

• Assessing ChatGPT Impact: Memory Loss, Student Procrastination

• Data Broker Tracked Visitors to Jeffrey Epstein’s Island, New Report Reveals

• Protecting Your Privacy: How to Safeguard Your Smart TV Data

• Hackers Exploit Flaw in Ray Framework to Breach Servers

• Novel Darcula Phishing Campaign is Targeting iPhone Users

• GitHub CodeQL – AutoFix Your Code Scanner

• Organizations Are Shifting Ransomware Defense Tactics, But Malware Is Still the Problem

• AT&T resets account passcodes after millions of customer records leak online

• How did CVE-2024-27198 Lead to Critical Vulnerability in JetBrains?

• Blockchain in Identity Management: Securing Personal Data and Identities

• Yogurt Heist Reveals a Rampant Form of Online Fraud

• Open AI Exec Warns AI is “Extremely Addictive,” Humanity Could Become “Enslaved”

• German BSI warns of 17,000 unpatched Microsoft Exchange servers

• Understanding ISO 27001:2022 Annex A.7 – Human Resource Security

• Hackers Target macOS Users with Malicious Ads Spreading Stealer Malware

• Urgent: Secret Backdoor Found in XZ Utils Library, Impacts Major Linux Distros

• Cybersecurity for Educational Institutions: Protecting Student Data

• Exploring SASE and SSE Roadmaps with the Two Taylor Swifts of the Decade – AI and Quantum

• Understanding and Shrinking Attack Surfaces: A Comprehensive Guide for Organizational Leaders

• Getting rid of a 20+ year old known vulnerability: It’s like a PSA for Runtime Security

• Cisco Nexus Insights: Proactive Day 2 Operations

• Malicious SSH backdoor sneaks into xz, Linux world’s data compression library

• IT Security News Daily Summary 2024-03-29

• Malicious backdoor sneaks into xz, Linux world’s data compression library and tool

• U.S. Supreme Court Does Not Go Far Enough in Determining When Government Officials Are Barred from Censoring Critics on Social Media

• Easy-to-use make-me-root exploit lands for recent Linux kernels. Get patching

• Friday Squid Blogging: The Geopolitics of Eating Squid

• Facebook Accused Of Censoring Reproductive Health Content

• TheMoon Malware Returns: 6,000 Asus Routers Hacked in 72 Hours

• Honey, I Lost My Credentials! Finding Plaintext Credentials on the Internet

• Cyber Security Today, Week in Review for the week ending Friday, March 29, 2024

• What Is Data Loss Prevention (DLP)? Definition & Best Practices

• ‘Darcula’ PhaaS Campaign Sinks Fangs into Victims

• 5 tips for building a cybersecurity culture at your company

• Reported Supply Chain Compromise Affecting XZ Utils Data Compression Library, CVE-2024-3094

• Beware! Backdoor found in XZ utilities used by many Linux distros (CVE-2024-3094)

• The Pentagon Cybersecurity Strategy For Defense Industrial Bases

• Nvidia’s Newborn ChatRTX Bot Patched For Security Bugs

• The Complexity And Need To Manage Mental Well-Being In The Security Team

• Ubuntu Will Manually Review Snap Store After Crypto Wallet Scams

• JetBrains Keeps Mum On 26 Security Problems Fixed After Rapid7 Spat

• PyPI Goes Quiet After Huge Malware Attack: 500+ Typosquat Fakes Found

• The Rising Energy Demand of Data Centres and Its Impact on the Grid

• Data Breach Alert: 3TB of NHS Scotland Data Held Ransom by Cyber Threat

• The Netherlands To Spend Billions To Retain ASML Operations

• MFA bombing taken to the next level

• How to Conduct an Internal Audit: A Comprehensive Guide

• Meet the Phishing service platform named Darcula

• Hot Topic customers targeted by Credential Stuffing attacks

• Kiosks in Brookline is Tracking Cell Phone Data

• Smartphone Shipments To Rebound In 2024, Says Counterpoint

• ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

• Manufacturing on the Cyber Frontlines: Enhancing Cybersecurity on the Factory Floor

• Collaboration Innovation at Enterprise Connect 2024

• In Other News: Airline Privacy Review, SEC’s SolarWinds Hack Probe, Apple MFA Bombing

• SydeLabs Emerges From Stealth Mode With $2.5 Million in Funding

• Dormakaba Locks Used in Millions of Hotel Rooms Could Be Cracked in Seconds

• Payment authorization and one-time passwords – Mobile Token

• Hacker Generates 1 Billion CGT Tokens Valued at $40 Million within Curio Ecosystem

• IdeaSoft To Launch an Innovative Perpetual DEX on INTMAX’s Open-source L2 Plasma Next

• Restricting Flipper is a Zero Accountability Approach to Security: Canadian Government Response to Car Hacking

• How to back up your iPhone to iCloud

• How to back up your iPhone to a Mac

• How to back up your iPhone to a Windows computer

• How to back up your Windows 10/11 PC to OneDrive

• How to back up your Mac

• CISA Launches New Cyber Incident Reporting Rules for US Defense Contractors

• World Backup Day 2024: Navigating the Future of Cyber security with Cloud Solutions

• Pentagon Outlines Cybersecurity Strategy for Defense Industrial Base

• Exclusive: Waffle House Risk Index 1.0 Open For Public Comment Period

• CRM Backup Trends to Watch on World Backup Day

• TheMoon Botnet Resurfaces, Exploiting EoL Devices to Power Criminal Proxy

• China Bans Intel, AMD Chips, Windows OS From Government Computers

• Cisco warns of password-spraying attacks targeting Secure Firewall devices

• Making Our Infrastructure Resilient: 5 Priorities for Security R&D

• Energy Department Invests $15 Million in University Cybersecurity Centers

• The Complexity and Need to Manage Mental Well-Being in the Security Team

• Data Highways: Navigating the Privacy Pitfalls of New Automobiles

• Unveiling the New Era of Hacking Ethics: Profit Over Principles

• Microsoft unveils safety and security tools for generative AI

• The Power of ISP Proxies: Unlocking Local Content and Resources

• Linux Kernel Privilege Escalation Vulnerability (CVE-2024-1086) Alert

• Industrial Enterprise Operational Technology Under Threat From Cyberattacks

• WarzoneRAT Returns Post FBI Seizure: Utilizing LNK & HTA File

• Beware Of Weaponized Air Force invitation PDF Targeting Indian Defense And Energy Sectors

• The Golden Age of Automated Penetration Testing is Here

• Compromised SaaS Supply Chain Apps: 97% of Organizations at Risk of Cyber Attacks

• Google Revealed Kernel Address Sanitizer To Harden Android Firmware And Beyond

• Lessons from a Ransomware Attack against the British Library

• 26 Security Issues Patched in TeamCity

• Massachusetts Health Insurer Data Breach Impacts 2.8 Million

• Cyber Security Today, March 29, 2024 – PyPI repository shuts to stop malicious uploads, a plea to developers to stop creating apps with SQL vulnerabilities, and more

• New Linux Bug Could Lead to User Password Leaks and Clipboard Hijacking

• Stream.Security unveils threat investigation and AI-powered remediation capabilities

• American fast-fashion firm Hot Topic hit by credential stuffing attacks

• LockBit Hacker Sentenced To 4 Years Jail Plus Fined $860K

• Understanding the Surge in Cyber Kidnapping: Exploring the Factors Behind the Rise

• IT and security Leaders Feel Ill-Equipped to Handle Emerging Threats: New Survey

• Understanding ISO 27001:2022 Annex A.6 – Organization of Information Security

• Quick Forensics Analysis of Apache logs, (Fri, Mar 29th)

• How to Analyse .NET Malware? – Reverse Engineering Snake Keylogger

• Symmetry Systems Ramps Up Hybrid-Cloud Data Security with $15 Million Series A Funding

• PyPI Halts Sign-Ups Amid Surge of Malicious Package Uploads Targeting Developers

• AI abuse and misinformation campaigns threaten financial institutions

• How much does cloud-based identity expand your attack surface?

• Advanced cybersecurity strategies boost shareholder returns

• Cloud Security Posture Management (CSPM): Ensuring Cloud Compliance

• What is Threat Management?

• New infosec products of the week: March 29, 2024

• England Cricket – 43,299 breached accounts

• C2A Security’s EVSec Platform: Driving Cybersecurity Compliance in the Automotive Industry

• Next-Generation Firewall (NGFW): Enhancing Network Security

• ISC Stormcast For Friday, March 29th, 2024 https://isc.sans.edu/podcastdetail/8916, (Fri, Mar 29th)

• Thread Hijacking: Phishes That Prey on Your Curiosity

• Tax scams: Scams to be aware of this tax season

• The Importance of User Roles and Permissions in Cybersecurity Software

• IT Security News Daily Summary 2024-03-28

• SydeLabs raises $2.5M seed to develop an intent-based firewall guard for AI

• New iMessage Phishing Campaign Targets Postal Service Users Globally

• Activision investigating password-stealing malware targeting game players

• Go Big & Go Chrome: Strengthen Cybersecurity in Education, the Enterprise & Beyond

• Stopping a K-12 cyberattack (SolarMarker) with ThreatDown MDR

• Powering the future of ThreatDown with AI

• Unleashing generative AI’s power: Secure the future of your enterprise at the Atlanta AI Impact Tour (April 10th)

• LastPass Review 2024: Features, Pricing, Pros & Cons

• Jeffrey Epstein’s Island Visitors Exposed by Data Broker

• Cisco addressed high-severity flaws in IOS and IOS XE software

• Apple OTP FAIL: ‘MFA Bomb’ Warning — Locks Accounts, Wipes iPhones

• Ericsson To Cut 1,200 Jobs in Sweden Amid ‘Challenging’ Market

• sensitive information

• retina scan

• Malware Upload Attack Hits PyPI Repository

• Enter the substitute teacher

• Wilder World Launches on Epic Games Store as The First ‘GTA of Web3’ Game

• US offers $10M to help catch Change Healthcare hackers

• Linux Version of DinodasRAT Spotted in Cyber Attacks Across Several Countries

• FTX’s Sam Bankman-Fried Sentenced To 25 Years In Prison For $8bn Fraud

• CISA Urges Patching Microsoft SharePoint Vulnerability (CVE-2023-24955)

• PyPI Inundated by Malicious Typosquatting Campaign

• Microsoft wants to stop you from using AI chatbots for evil

• JetBrains keeps mum on 26 ‘security problems’ fixed after Rapid7 spat

• Elon Musk Orders FSD Demo For Every Tesla US Sale

• Google: Zero-Day Attacks Rise, Spyware and China are Dangers

• Finland Blames Chinese Hacking Group APT31 for Parliament Cyber Attack

• PyPI Suspends New Projects and Users Due to Malicious Packages

• C2A Security’s EVSec Risk Management and Automation Platform Gains Automotive Industry Favor as Companies Pursue Regulatory Compliance

• Sam Bankman-Fried Sentenced To 25 Years In Prison

• Splunk Patches Vulnerabilities in Enterprise Product

• Checkmarx Aligns With Wiz to Improve Application Security

• GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

• Ransomware Strikes Tarrant Appraisal District

• Unmasking Cyber Shadows: New Zealand’s Battle Against State-Backed Hackers

• Wordfence Intelligence Weekly WordPress Vulnerability Report (March 18, 2024 to March 24, 2024)

• NHS patient data published on the Dark Web

• Facebook spied on Snapchat users to get analytics about the competition

• Nvidia’s newborn ChatRTX bot patched for security bugs

• Darcula Phishing Network Leveraging RCS and iMessage to Evade Detection

• US Treasury Urges Financial Sector to Address AI Cybersecurity Threats

• OpenSSL at FOSDEM 24

• Cisco Releases Security Updates for Multiple Products

• Celebrating Women’s History Month and International Women’s Day at Fortinet

• Cyberespionage Campaign Targets Government, Energy Entities in India

• Cybersecurity Mesh: Overcoming Data Security Overload

• Zero-day exploitation surged in 2023, Google finds

• Amazon Pumps Another $2.75 Billion Into Anthropic

• Partnering for Purpose: Bridging the Gender Gap in Leadership Development

• Key Differences in Securing OT & IT Environments

• Facebook Spied on Users’ Snapchat Traffic in a Covert Operation, Documents Reveal

• New ZenHammer Attack Bypasses RowHammer Defenses on AMD CPUs

• NIST Unveils New Consortium to Operate its National Vulnerability Database

• Robust remote access security for the utilities sector advances with Zero Trust

• GoPlus Report: Blockchain Networks Using API Security Data to Mitigate Web3 Threats

• Masa Network Integrates with LayerZero to Power Its Cross-chain AI Data Network

• These 17,000 Microsoft Exchange Servers Are A Ticking Time Bomb

• Sellafield To Be Prosecuted For IT Security Offenses

• Sam Bankman-Fried’s Sentencing Hearing Over FTX Fraud Begins Today

• Coro Raises $100 Million for All-in-One Security Platform

• Cybersecurity Infrastructure Investment Crashes and Burns Without Governance

• ‘Tycoon’ Malware Kit Bypasses Microsoft and Google Multifactor Authentication

• Snowflake Data Clean Rooms helps organizations preserve the privacy of their data

• C2A Security’s EVSec Platform Gains Automotive Industry Traction for Compliance

• Zoom Unveils AI-Powered All-In-One AI Work Workplace

• Wireshark 4.2.4 Released: What’s New!

• How will the Merck settlement affect the insurance industry?

• Making applications more sustainable with Cisco

• From ChatBot To SpyBot: ChatGPT Post Exploitation

• US critical infrastructure cyberattack reporting rules inch closer to reality

• Using Generative AI to Understand How an Obfuscated Script Works

• Hundreds of Clusters Attacked Due to Unpatched Flaw in Ray AI Framework

• AppViewX partners with Fortanix to address critical enterprise security challenges

• New Webinar: Avoiding Application Security Blind Spots with OPSWAT and F5

• NIST Unveils New Consortium to Manage its National Vulnerability Database

• Trove of UK Student Records Exposed in School Software Server Leak

• Getting to Know Emma Pember

• Zafran Emerges From Stealth With Risk and Mitigation Platform, $30M in Funding

• Cisco Patches DoS Vulnerabilities in Networking Products

• How a Security Data Fabric Approach Can Transform the GRC Function

• C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

• The Great Data Heist: China’s Alleged Theft of Voter Data and Its Potential Impact

• Safeguarding the NHS: Protecting Against Potential Cyber Attacks from China

• The human-AI partnership: a guide towards secure coding

• The Sustainability of AI

• iPhone Users Beware! Darcula Phishing Service Attacking Via iMessage

• Hacking internal AI chatbots with ASCII art is a security team’s worst nightmare

• Google: China dominates government exploitation of zero-day vulnerabilities in 2023

• DinodasRAT Linux implant targeting entities worldwide

• Institutionalizing Awareness to Stop Cyberattacks

• Microsoft Teams phishing attacks and how to prevent them

• Coro Secures $100 Million Funding Round

• Threat Indicators Show 2024 Is Already Promising to be Worse Than 2023

• Chinese Cyberspies Targeting ASEAN Entities

• NHS Scotland confirms ransomware attackers leaked patients’ data

• 17 Billion Personal Records Exposed in Data Breaches in 2023

• Trump’s Truth Social Makes Successful Market Debut

• New ZenHammer Attack Bypasses Rowhammer Defenses on AMD CPUs

• Behind the Scenes: The Art of Safeguarding Non-Human Identities

• Update Chrome now! Google patches possible drive-by vulnerability

• Canonical cracks down on crypto cons following Snap Store scam spree

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• Jeffrey Epstein’s Island Visitors Exposed by Data Broker

• Hardware Vulnerability in Apple’s M-Series Chips

• US Offering $10 Million Reward for Information on Change Healthcare Hackers

• Threat Indicators Show 2024 is Already Promising to be Worse Than 2023

• Zero Trust Meets Insider Risk Management

• Dutch PM Raises Cyber Espionage Case With China’s Xi

• From JavaScript to AsyncRAT, (Thu, Mar 28th)

• Hiring Kit: Security Analyst

• INC Ransom claims responsibility for attack on NHS Scotland

• CISA Moving Forward With Cyber Incident Reporting Rules Impacting 316,000 Entities

• Details and Lessons Learned From the Ransomware Attack on the British Library

• Patch actively exploited Microsoft SharePoint bug, CISA orders federal agencies (CVE-2023-24955)

• Half of British SMEs Have Lost Data in Past Five Years

• The Moon Malware Hacked 6,000 ASUS Routers in 72hours to Use for Proxy

• 2 Chrome Zero-Days Exploited at Pwn2Own 2024: Patch Now

• Android Malware Vultur Expands Its Wingspan

• Coro, building cybersecurity for SMBs, locks down $100M at a $750M valuation

• Calls to Incident Response Helpline Double in a Year

• Telegram Offers Premium Subscription in Exchange for Using Your Number to Send OTPs

• These 17,000 unpatched Microsoft Exchange servers are a ticking time bomb

• Understanding ISO 27001:2022 Annex A.5 – Information Security Policies

• AI hallucinates software packages and devs download them – even if potentially poisoned with malware

• Exvagos – 2,121,789 breached accounts

• Execs in Japan busted for winning dev bids then outsourcing to North Koreans

• Enterprises increasingly block AI transactions over security concerns

• Debunking compliance myths in the digital era

• Cyber Attack suspected behind Baltimore Bridge Collapse

• Ransomware attack on Big Issue and University of Winnipeg

• How CISOs tackle business payment fraud

• AI weaponization becomes a hot topic on underground forums

• China encouraged armed offensive against Myanmar government to protest proliferation of online scams

• Cybercriminals use cheap and simple infostealers to exfiltrate data

• Cybersecurity Awareness Month: Promoting Cyber Hygiene

• Unleashing the Power of AI in Data Security and Compliance Through Advanced Data Discovery

• StealthMole raises $7M Series A for its AI-powered dark web intelligence platform

• ISC Stormcast For Thursday, March 28th, 2024 https://isc.sans.edu/podcastdetail/8914, (Thu, Mar 28th)

• Secure Email Communication: Protecting Against Phishing and Spoofing

• Google addressed 2 Chrome zero-days demonstrated at Pwn2Own 2024

• EFF Asks Oregon Supreme Court Not to Limit Fourth Amendment Rights Based on Terms of Service

• Apple fans deluged with phony password reset requests

• IT Security News Daily Summary 2024-03-27

• Apple fans flooded with phony password reset requests

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Majority of Americans now use ad blockers

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• AI risk management startup ValidMind raises $8.1M to help banks comply with regulations

• Facebook Accused Of Snooping On Users’ Snapchat Data Via Secret Project

• INC Ransom stole 3TB of data from the National Health Service (NHS) of Scotland

• ‘Thousands’ of businesses at mercy of miscreants thanks to unpatched Ray AI flaw

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Google TAG Reports Zero-Day Surge and Rise of State Hacker Threats

• SANS 2024 Threat Hunting Survey: Hunting for Normal Within Chaos

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Do iPhones Need Antivirus Software? iPhone Security Considerations + Safety Tips

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Check Point Software Technologies Recognized as a Top Leader in Frost Radar™ 2024 Global Managed Detection and Response Report

• Beware the Tax Scam Tsunami: Unmasking QR Code schemes, Bogus Refunds and AI imposters

• NIST CSF 2.0 – Top 10 Things You Should Know

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Vodafone Germany Confirms 2,000 Job Losses, Amid European Restructuring

• Check Point Software Technologies Recognized as a Top Leader in Frost Radar™ 2024 Global Managed Detection and Response Report

• Zscaler finds enterprise AI adoption soars 600% in less than a year, putting data at risk

• Code Execution Flaws Haunt NVIDIA ChatRTX for Windows

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Check Point Software Technologies Recognized as a Top Leader in Frost Radar™ 2024 Global Managed Detection and Response Report

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• AI Poses ‘Jobs Apocalypse’, Warns Report

• Check Point Software Technologies Recognized as a Top Leader in Frost Radar™ 2024 Global Managed Detection and Response Report

• General Data Protection Regulation (GDPR)

• 15 Best Encryption Software & Tools for 2024

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• UK Cybercrime agency warns AI will turbocharge hacking

• Check Point Software Technologies Recognized as a Top Leader in Frost Radar™ 2024 Global Managed Detection and Response Report

• New password reset attack targets Apple device users – what to do if it happens to you

• Revealed: Facebook’s “Incredibly Aggressive” Alleged Theft of Snapchat App Data

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Europe’s Longest Hyperloop Test Track Opens

• Check Point Software Technologies Recognized as a Top Leader in Frost Radar™ 2024 Global Managed Detection and Response Report

• ‘Malicious Activity’ Hits the University of Cambridge’s Medical School

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• NHS Trust Confirms Clinical Data Leaked by “Recognized Ransomware Group”

• Check Point Software Technologies Recognized as a Top Leader in Frost Radar™ 2024 Global Managed Detection and Response Report

• Protect Your Business With This Seamless Firewall — Now $150 Off

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Hackers Hit Indian Defense, Energy Sectors with Malware Posing as Air Force Invite

• Has the third world war started with Baltimore Bridge Collapse with Cyber Attack

• DeFi Protocol Unstable Raises $2.5M to Drive LRTfi Sector Forward

• Check Point Software Technologies Recognized as a Top Leader in Frost Radar™ 2024 Global Managed Detection and Response Report

• Your smart TV is snooping on you. Here’s how to limit the personal data it gathers

• CISA adds Microsoft SharePoint bug disclosed at Pwn2Own to its Known Exploited Vulnerabilities catalog

• Meta accused of snarfing people’s Snapchat data via traffic decryption

• What Are The Risks of Generative AI?

• Data Breach at Giant Tiger: Protecting Customer Information in the Digital Age

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ZenHammer Memory Attack Exploits Rowhammer Against AMD CPUs

• NHS Scotland Confirms Clinical Data Published By Ransomware Gang

• INC Ransomware Hits NHS Scotland, Threatens Leak of 3TB Patient Data

• Hackers Actively Exploiting Ray AI Framework Flaw to Hack Thousands of Servers

• Check Point Software Technologies Recognized as a Top Leader in Frost Radar™ 2024 Global Managed Detection and Response Report

• 5 simple things you should do to make MacOS more secure

• Unpatched flaw in Anyscale’s Ray AI framework under attack

• Security review for Microsoft Edge version 123

• Here Are Three Ways AI Will Transform Gaming Forever

• Security Failure in Ray Framework Leads to Server Breach

• Hidden Dangers of Public Wi-Fi: What A Traveler Needs To Know

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• 2024-03-26: Google ad leads to Matanbuchus infection with Danabot

• Check Point Software Technologies Recognized as a Top Leader in Frost Radar™ 2024 Global Managed Detection and Response Report

• Apple Released Security Updates for Safari and macOS

• SD-Routing: Unlock Agility and Efficiency for the Secure WAN Edge

• Ray AI Framework Vulnerability Exploited To Hack Hundreds Of Clusters

• Google Reveals 0-Day Exploits In Enterprise Tech Surged 64% Last Year

• Fortinet FortiClient EMS SQL Injection Flaw Exploited In The Wild

• VPN Apps On Google Play Turn Android Devices Into Proxies

• Analyse, Hunt, And Classify Malware Using .NET Metadata

• Implementing ZTA: Benefits and Best Practices

• VPN Apps on Google Play Turn Android Devices Into Proxies

• Google Report: Despite Surge in Zero-Day Attacks, Exploit Mitigations Are Working

• Chrome Update Patches Zero-Day Vulnerabilities Exploited at Pwn2Own

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• CyberArk Secure Browser helps prevent breaches resulting from cookie theft

• CISA Marks Important Milestone in Addressing Cyber Incidents; Seeks Input on CIRCIA Notice of Proposed Rulemaking

• COTI and Civic Partner to Give Users Self-sovereignty of Their Digital Identity

• Chinese Hackers Attacking Southeast Asian Nations With Malware Packages

• Check Point Software Technologies Recognized as a Top Leader in Frost Radar™ 2024 Global Managed Detection and Response Report

• Google reveals zero-day exploits in enterprise tech surged 64% last year

• CISA, FBI Push Software Developers to Eliminate SQL Injection Flaws

• Securing the Future: Navigating the Complexities of Cloud Security

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Exposing a New BOLA Vulnerability in Grafana

• 3 Strategies to overcome data security challenges in 2024

• Check Point Software Technologies Recognized as a Top Leader in Frost Radar™ 2024 Global Managed Detection and Response Report

• ‘ShadowRay’ vulnerability on Ray framework exposes thousands of AI workloads, compute power and data

• CISA Warns: Hackers Actively Attacking Microsoft SharePoint Vulnerability

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• AU10TIX’s Digital ID suite identifies potentially fraudulent activities

• Check Point Software Technologies Recognized as a Top Leader in Frost Radar™ 2024 Global Managed Detection and Response Report

• Data Security Compliance: How to Comply with Security Laws

• Beneath the Shadows: DarkGate

• Navigating the Complexities of Data Privacy: Balancing Innovation and Protection

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Microsoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions

• Zero-Day Vulnerabilities Surged by Over 50% Annually, Says Google

• Fewer People Using Twitter After Musk Takeover – Report

• Chinese APTs Targeted ASEAN During Summit with Espionage Malware

• GoMining Review: This Platform Makes Bitcoin Mining Possible Through NFTs

• Microsoft Expands Edge Bounty Program to Include WebView2!

• CISA Warns of Hackers Exploiting Microsoft SharePoint Server

• Check Point Software Technologies Recognized as a Top Leader in Frost Radar™ 2024 Global Managed Detection and Response Report

• The DDR Advantage: Real-Time Data Defense

• Witnessing a Revolution in Cybersecurity with AI

• Attackers Keep Evolving: Lessons from Expel’s Q2 2023 Quarterly Threat Report

• Organizations Informed of 10 Vulnerabilities in Rockwell Automation Products

• Ray AI Framework Vulnerability Exploited to Hack Hundreds of Clusters

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Scans for Apache OfBiz, (Wed, Mar 27th)

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Top 51 Cyber Security Interview Questions

• Databricks launches DBRX, challenging Big Tech in the open source AI race

• AI fuels startup success: 86% of founders report positive impact, HubSpot finds

• Balancing agility and predictability to achieve major engineering breakthroughs

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Only 3% of Businesses Resilient Against Modern Cyber Threats

• Beware of Free Android VPN Apps that Turn Your Device into Proxies

• The Cyber Sleuth’s Handbook: Digital Forensics and Incident Response (DFIR) Essentials

• Skills shortage and unpatched systems soar to high-ranking 2030 cyber threats

• Cybereason Disrupt SIEM and XDR Market with New SDR Solution

• CHR Cautions Bacolod City Regarding QR Code Proposal for Entertainers

• Parent Company of Vans Alerts 35.5 Million Customers Following Data Breach

• Cyber Security Today, March 27, 2024 – A botnet exploits old routers, a new malware loader discovered, and more warnings about downloading code from open source repositories

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• AI framework vulnerability is being used to compromise enterprise servers (CVE-2023-48022)

• Julian Assange Wins Temporary Reprieve For US Extradition Appeal

• Street newspaper appears to have Big Issue with Qilin ransomware gang

• Flashpoint observes 84% surge in ransomware attacks in 2023

• Security Vulnerability in Saflok’s RFID-Based Keycard Locks

• Meta to abandon social media tracking tool CrowdTangle

• Disturbing robocaller fined $9.9 million

• CISA: Second SharePoint Flaw Disclosed at Pwn2Own Exploited in Attacks

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Malwarebytes adds AI functionality to ThreatDown Security Advisor

• Critical Unpatched Ray AI Platform Vulnerability Exploited for Cryptocurrency Mining

• SASE Solutions Fall Short Without Enterprise Browser Extensions, New Report Reveals

• Chinese Hackers Target ASEAN Entities in Espionage Campaign

• Out of the shadows – ’darcula’ iMessage and RCS smishing attacks target USPS and global postal services

• Brute Force and Dictionary Attacks: A Guide for IT Leaders

• WatchGuard Threat Lab Analysis Shows Surge in Evasive Malware

• Big Issue working with NCSC, NCA and Met Police to investigate cyber incident

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Bedrock Security protects sensitive data within one unified platform

• Attackers leverage weaponized iMessages, new phishing-as-a-service platform

• Bake-off: Ensuring Security in the Cyber Kitchen

• Acumen enters UK market offering expertise and market leading tooling to protect organisations against complex cyberattacks

• Tackling DORA Compliance With a Focus on PAM

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• UK Law Enforcers Arrest 400 in Major Fraud Crackdown

• ZENHAMMER – First Rowhammer Attack Impacting Zen-based AMD Platforms

• Escape vs Burp Suite Enterprise

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Alert: New Phishing Attack Delivers Keylogger Disguised as Bank Payment Notice

• Annex A of ISO 27001:2022 explained and tips to prepare for an audit

• 17,000+ Microsoft Exchange Servers Vulnerable to Multiple Critical Vulnerabilities

• Airbus to Acquire INFODAS to Strengthen its Cybersecurity Portfolio

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• GSM Hosting – 2,607,440 breached accounts

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Agenda Ransomware Targeting VMware and 17k Microsoft Exchange servers vulnerable to cyber attacks

• Securing Mobile Application Development: 9 Best Practices for Data Security

• Finnish police linked APT31 to the 2021 parliament attack

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• How security leaders can ease healthcare workers’ EHR-related burnout

• Metasploit Framework 6.4 Released: What’s New!

• Essential elements of a strong data protection strategy

• Cybersecurity jobs available right now: March 27, 2024

• Two Chinese APT Groups Ramp Up Cyber Espionage Against ASEAN Countries

• Drozer: Open-source Android security assessment framework

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Sketchy NuGet Package Likely Linked to Industrial Espionage Targets Developers

• Cybersecurity Threats in the Healthcare Sector

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Cybersecurity essentials during M&A surge

• The easy road to pervasive DLP

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ISC Stormcast For Wednesday, March 27th, 2024 https://isc.sans.edu/podcastdetail/8912, (Wed, Mar 27th)

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• One More Time on SIEM Telemetry / Log Sources …

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• AI Generated Fake Obituary Websites Target Grieving Users

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• IT Security News Daily Summary 2024-03-26

• TheMoon bot infected 40,000 devices in January and February

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• The foundation for responsible analytics with Microsoft Purview

• Facebook snooped on users’ Snapchat traffic in secret project, documents reveal

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• SQL injection vulnerability in Fortinet software under attack

• Securing the LLM Stack

• Binarly Attracts $10.5M to Tackle Software Supply Chain Security

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ASEAN Entities in the Spotlight: Chinese APT Group Targeting

• 6 ways to protect yourself from getting scammed online, by phone, or IRL

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Facebook Could Get Hit With “Heavy” Fines In New Privacy Probe

• The Cybersecurity Skills Gap: Time to Step Up with OffSec’s Red Teaming and IoT Learning Paths

• Everything you need to know about the Microsoft Exchange Server hack

• Meta Oversight Board’s Latest Policy Opinion a Step in the Right Direction

• BEC Scammers Adventures on the Run

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• New ShadowRay Campaign Targets Ray AI Framework in Global Attack

• Researchers Discover 40,000-Strong EOL Router, IoT Botnet

• 2024 IT Risk and Compliance Benchmark Report Findings: Why Unifying Risk and Compliance Work Is No Longer Optional

• Complex Supply Chain Attack Targets GitHub Developers

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Sign1 Malware Targeted Over 2500 WordPress Sites In Recent Campaign

• AI is a data problem — Cyera is raising up to $300M on a $1.5B valuation to secure it

• Speaking Freely: Robert Ssempala

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• JCDC Builds Foundation for Pipelines Cyber Defense Planning Effort

• Details of Millions of Voters and Several MPs Targeted in a Cyberattack by the Chinese State

• Telegram Privacy Nightmare: Don’t Opt In to P2PL

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Malicious NuGet Package Linked to Industrial Espionage Targets Developers

• Uncle Sam’s had it up to here with ‘unforgivable’ SQL injection flaws

• Webinar Today: How to Reduce Cloud Identity Risk

• UK Court Says Assange Can’t be Extradited on Espionage Charges Until US Rules Out Death Penalty

• Airbus to Buy German Cybersecurity Firm Infodas

• UK Firm Think Cyber Raises $3.8 Million for Staff Security Nudging

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• #MIWIC2024: Samantha Humphries, Senior Director of International Security Strategy at Exabeam

• USENIX Security ’23 – XCheck: Verifying Integrity Of 3D Printed Patient-Specific Devices Via Computing Tomography

• Cyber readiness and SBOMs

• Spoutible Enhances Platform Security through Partnership with Wallarm

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• New Zealand accuses China for hacking the Parliament

• Exclusive: Standard AI shifts focus to computer vision analytics for retailers, now valued at $1.5 billion

• Telegram is offering some users a free premium plan, but there’s a huge risk

• Recent ‘MFA Bombing’ Attacks Targeting Apple Users

• Bitwarden Review 2024: Features, Pricing, Pros & Cons

• Only 5% of Boards Have Cybersecurity Expertise, Despite Financial Benefits

• Top Cybersecurity Threats Of This Year And How To Defend Against Them

• Microsoft Releases Out-of-band Update to Fix Windows Server Memory Leak Flaw

• Digital Arrest Scam: Woman Doctor Duped for 40 Lakhs, Loses Her Entire Savings

• Living-Off-the-Land (LOTL) Attacks: Here’s Everything You Need to Know

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Legit Security launches enterprise secrets scanning solution

• US and UK Governments Take Stand Against APT31, State-Affiliated Hacking Group

• Rockwell Automation PowerFlex 527

• Rockwell Automation FactoryTalk View ME

• Automation-Direct C-MORE EA9 HMI

• Rockwell Automation Arena Simulation

• CISA Releases Four Industrial Control Systems Advisories

• Cisco Wins CRN 5-Star Award for the 13th Year Straight

• Over A Third of IT Leaders Are Ill-Equipped to Cope With AI-Powered Attacks

• What are the Essential Skills for Cyber Security Professionals in 2024?

• Greylock Makes $10M Bet on Bedrock Security

• ZenHammer Attack Targets DRAM on Systems With AMD CPUs

• Suspicious NuGet Package Harvesting Information From Industrial Systems

• Vercara UltraAPI offers protection against malicious bots and fraudulent activity

• BackBox platform update enhances CVE mitigation and risk scoring

• Microsoft: 87% of UK Businesses Are Unprepared for Cyberattacks

• 6 Best Authenticator Apps for 2024

• Judges Block US Extradition of WikiLeaks Founder Julian Assange—for Now

• StrelaStealer Malware Hits More Than 100 EU And US Organizations

• ZenHammer Attack Targets DRAM On Systems With AMD CPUs

• FreeBSD Foundation Hands Out Beacon Gongs For Safer Software

• Ransomware Can Mean Life Or Death At Hospital, But DEF CON Hackers Have A Plan

• Justice Dept Indicts 7 Accused In 14 Year Long Hack Campaign By Chinese Government

• Patch now: Mozilla patches two critical vulnerabilities in Firefox

• What is Managing Secrets?

• Embrace Generative AI for Security, But Use Caution

• US, UK Accuse China of Years-Long Cyberespionage Campaign

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• How personalized phish training can thwart evolving cyberattacks

• ICS CERT predictions for 2024: What you need to know

• UK, New Zealand against China-linked cyber operations

• UK Government’s New AI System to Monitor Bank Accounts

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Swimlane partners with Dragos to automate threat detection across both IT and OT environments

• ArmorCode Risk Prioritization provides visibility into security findings with business context

• Portugal Forces Sam Altman’s Worldcoin to Stop Collecting Biometric Data

• New tool: linux-pkgs.sh, (Sun, Mar 24th)

• What is Global Threat Intelligence? – SOC/DIFR Team Guide

• AI is a data problem. Cyera is raising up to $300M on a $1.5B valuation to secure it

• YouTube ordered to reveal the identities of video viewers

• Ransomware can mean life or death at hospitals, but DEF CON hackers have a plan

• Cybersecurity a Top Priority for Audit Committees

• Vulnerability Summary for the Week of March 18, 2024

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• GitGuardian SCA automates vulnerability detection and prioritization for enhanced code health

• 17,000+ Microsoft Exchange servers in Germany are vulnerable to attack, BSI warns

• Enhancing The Nation’s Cybersecurity Workforce

• Tech giants grapple with ballooning software supply chain risk, JFrog report reveals

• New GoFetch Vulnerability in Apple’s M Chips Allows Secret Keys Leak on Compromised Computers

• Apple Patches Code Execution Vulnerability in iOS, macOS

• New Car Owners Beware: Study Finds Serious Data Protection Flaws

• US, UK Impose Sanctions On China Over Spying, Infrastructure Hacks

• Apple Hit By Private Lawsuits Imitating Justice Department Approach

• Report: Apple To Use Baidu’s Ernie Bot In China iPhones

• New Tycoon 2FA Phishing Kit Attacking Microsoft 365 & Gmail Users

• AI is a data problem. Now Cyera is raising up to $300M on a $1.5B valuation to secure it

• The Identity Underground Report: Deep insight into the most critical identity security gaps

• DataVisor’s AML solution helps combat sophisticated financial crimes

• Crafting Shields: Defending Minecraft Servers Against DDoS Attacks

• U.S. Charges 7 Chinese Nationals in Major 14-Year Cyber Espionage Operation

• Best Practices for Kafka Management to Ensure High Availability

• Hackers Claiming that EagleSpy Android RAT 3.0 Steals 2FA Google Authenticator Code

• From Academia to Cisco: How I’m Inspired and Empowered as a Woman in Tech

• Hiding in Plain Sight: How Subdomain Attacks Use Your Email Authentication Against You

• Expert Insight: DEI and the Recruitment Wall

• Award Winning Cyber Start-up Raises £3m Led By Fuel Ventures To Empower Employees To Protect Themselves

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• US Government Urges Software Makers to Eliminate SQL Injection Vulnerabilities

• NIST NVD “Under Construction”

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Julian Assange Won’t Be Extradited to the US Yet

• US Treasury Dep announced sanctions against members of China-linked APT31

• SwordFantasy – 2,690,657 breached accounts

• 2024 Cyber Attacks Statistics

• UK, New Zealand Accuse China of Cyberattacks on Government Entities

• Recent Fortinet FortiClient EMS Vulnerability Exploited in Attacks

• X ‘Selling Real-Time Data’ For Law-Enforcement Purposes

• CISA Warns Of Active Exploitation Of Flaws In Fortinet, Ivanti, & Nice Linear

• What Are Mobile VPN Apps and Why You Should Be Using Them

• FreeBSD Foundation hands out Beacon gongs for safer software

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Apps secretly turning devices into proxy network nodes removed from Google Play

• US Targets Crypto Firms Aiding Russia Sanctions Evasion

• CrowdStrike Partnered with HCLTech to Drive Enterprise Cybersecurity Transformation

• Browser Security in 2024: Technologies and Trends

• AI Platforms Name Cybersecurity Threats and Advice for 2024

• AI is a data problem. Now Cyera is raising up to $300M on a $1.5B valuation, to secure it

• The Best 10 Vendor Risk Management Tools

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• CISA and FBI Urge Renewed Effort to Eliminate SQL Injection Flaws

• Binance Executive Evades Nigerian Custody

• X Loses Case Against Hate-Speech Nonprofit

• UK elections are unaffected by China’s cyber-interference, says deputy PM

• Understanding ISO 27001:2022 Annex A.8 – Asset Management

• U.S. Sanctions 3 Cryptocurrency Exchanges for Helping Russia Evade Sanctions

• Agenda Ransomware Propagates to vCenters and ESXi via Custom PowerShell Script

• Row breaks out over true severity of two DNSSEC flaws

• WordPress: Critical Flaw Detected in MiniOrange Plugins

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• ISO 27001:2022: chapter by chapter description

• Giant Tiger Data Breach: Customers Data Exposed Via Vendor

• Podcast Episode: About Face (Recognition)

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• CISA & FBI Warns that Hackers Use SQL Injection Vulnerabilities to hack Servers

• Is iPhone’s Journal App Sharing Your Personal Data Without Permission?

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• CISA Alerts on Active Exploitation of Flaws in Fortinet, Ivanti, and Nice Products

• Medusa Ransomware group demands $700k from victims

• Reinforcement learning is the path forward for AI integration into cybersecurity

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• How threat intelligence data maximizes business operations

• Strengthening critical infrastructure cybersecurity is a balancing act

• Scammers exploit tax season anxiety with AI tools

• Tech industry’s focus on innovation leaves security behind

• Cybersecurity Governance: Ensuring Effective Oversight

• New Zealand to world: China attacked us, too!

• ISC Stormcast For Tuesday, March 26th, 2024 https://isc.sans.edu/podcastdetail/8910, (Tue, Mar 26th)

• Secure Software Development: Building Resilient Applications

• The Next Evolution of IAM: How Generative AI is Transforming Identity and Access

• ​​Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024

• Can iPhones Get Viruses? + How to Remove Them

• Cybersecurity in Financial Disclosures: 11 Topics Your Section 1C of 10-K Filings Should Address

• Vans warns customers of data breach

• US charges Chinese nationals with cyber-spying on pretty much everyone for Beijing

• IT Security News Daily Summary 2024-03-25

• Chinese nationals charged with cyber-spying on US biz and more for Beijing

• Constella and Social Links Join Forces to Deliver Transformative OSINT Solutions

• How to Get the Most From Your Secrets Scanning

• CISA adds FortiClient EMS, Ivanti EPM CSA, Nice Linear eMerge E3-Series bugs to its Known Exploited Vulnerabilities catalog

• USENIX Security ’23 – Lukas Lamster, Martin Unterguggenberger, David Schrammel, and Stefan Mangard – HashTag: Hash-based Integrity Protection for Tagged Architectures

• Sustainability 101: What is environmental reporting?

• Vulnerability Recap 3/25/24 – More Ivanti Issues to Patch

• AI Regulation at a Crossroads

• Top 4 Industries at Risk of Credential Stuffing and Account Takeover (ATO) attacks

• It’s Shockingly Easy To Get Around Facebook’s Content Moderation Rules

• Pure Storage, Nvidia partner to democratize AI with new infrastructure solutions

• International Sting Takes Down Major Dark Web Marketplace “Nemesis Market”

• Cloud account hijacking: How it works and how to prevent it

• A Solution Engineer’s Journey into Programmability

• Over 170K users caught up in poisoned Python package ruse

• Apple Updates for MacOS, iOS/iPadOS and visionOS, (Mon, Mar 25th)

• The OODA Loop: The Military Model That Speeds Up Cybersecurity Response

• Leen Banks Early Stage Funding for Data Security Technology

• US Treasury Slaps Sanctions on China-Linked APT31 Hackers

• EU Opens Investigation Into Apple, Google, Meta

• Chinese Hackers Charged in Decade-Long Global Spying Rampage

• Over 170K users hit by poisoned Python package ruse

• What is a Deepfake?

• No KOSA, No TikTok Ban | EFFector 36.4

• Identify and Investigate Uncommon DNS Traffic

• Is it time to enforce an Authority-to-Operate (ATO) for Healthcare Organizations?

• China Steals Defense Secrets ‘on Industrial Scale’

• New Tycoon 2FA Phishing Kit Raises Cybersecurity Concerns

• 11 Types of Phishing + Tips to Prevent Phishing Attacks

• Puppet’s devops report plumbs the benefits of platform engineering

• MixMode Garners Spot in 2024 CRN® Partner Program Guide

• USENIX Security ’23 – Design Of Access Control Mechanisms In Systems-On-Chip With Formal Integrity Guarantees

• Are GPUs Ready for the AI Security Test?

• This Security Flaw Enables Hackers to Unlock Millions of Hotel Doors

• Notorious Nemesis Market Seized by German Police

• Securing your home network is long, tiresome, and entirely worth it, with Carey Parker: Lock and Code S05E07

• Building Resiliency in the Face of Ransomware

• Hackers steal Roku credit card details to make fraudulent purchases

• March 2024 Web Server Survey

• UK blames China for massive breach of voter data

• Simplify Manufacturing Operations with Cloud Platforms

• Tech trade union confirms cyberattack behind IT, email outage

• UK Blames China for 2021 Hack Targeting Millions of Voters’ Data

• Fake Ozempic Deals on the Rise as Experts Warn of Phishing Scams

• #MIWIC2024: Lianne Potter, Head of SecOps at ASDA and Cyber Anthropologist at Compromising Positions

• The National Cybersecurity Strategy One Year Later

• 3 important lessons from a devastating ransomware attack

• Authorities Warn of AI Being Employed by Scammers to Target Canadians

• Mule Recruitment Scheme: Scammers Making Innocents Accomplices Into Money Laundering

• Mozilla fixes $100,000 Firefox zero-days following two-day hackathon

• Differentiated Experience with Cisco Catalyst Center and CX Services

• Iran-Linked APT TA450 embeds malicious links in PDF attachments

• Some 300,000 IPs Vulnerable To This Loop DoS Attack

• Biden Administration To Accuse Chinese Hackers Of Targeting US Companies In Espionage Campaign

• Developers Hacked In Sophisticated Supply Chain Attack

• Mozilla Patches Firefox Zero Days Exploited At Pwn2Own

• Why Digital Trust Has Become More Critical Than Cybersecurity & Privacy

• Does Zero Trust Improve Productivity?

• Evasive Sign1 Malware Hits 39,000 WordPress Sites in Widespread Cyber Assault

• How Hackers Breached 3 Million Hotel Keycard Locks

• Sekoia.io and GLIMPS: a new example of interoperability within the Open XDR platform

• GoFetch security exploit can’t be disabled on M1 and M2 Apple chips

• Over 100 Organizations Targeted in Recent ‘StrelaStealer’ Attacks

• Microsoft To Ban 50+ Products For Users In Russia

• 170K+ Python Developers GitHub Accounts Hacked in Supply Chain Attack

• Interos Resilience Watchtower enables companies to monitor vulnerabilities

• Russian Hackers Attacking Political Parties In Recent Cyber Attacks

• Exclusive: Foundational emerges from stealth with $8 million to tackle data quality and AI readiness challenges

• CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate SQL Injection Vulnerabilities

• Linux Kernel 6.8 Released: New Features and Hardware Support

• What is Key Management?

• Tax Scams Ramping Up as the April 15 Deadline Approaches

• New GEOBOX Tool Hijacks Raspberry Pi, Lets Hackers Fake Location

• StrelaStealer Malware Hacked 100+ Organizations Across The EU And U.S

• Martin Lund Joining Cisco’s Executive Leadership Team

• Cybersecurity Threats in Global Satellite Internet

• Scammers steal millions from FTX, BlockFi claimants

• Key Lesson from Microsoft’s Password Spray Hack: Secure Every Account

• Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting Top-gg and Others

• Unsaflok Flaws Allow Unlocking Saflok Door Locks With Forged Cards

• Beware of New ‘HelloFire’ Ransomware Actor Mimic as a Pentester

• Agent vs. agentless security: Learn the differences

• Cyber Security Today, March 25, 2024 – A suspected China threat actor going after unpatched F5 and ScreenConnet installations

• Linux Admins Beware! Fake PuTTY Client that Installs Rhadamanthys stealer

• Top Python Developers Hacked in Sophisticated Supply Chain Attack

• The Online Safety Act: new digital offences in the UK

• Amazon Challenges £28m French Fine Over Worker Monitoring

• Russian Hackers Lure German Politicians With Fake Dinner Party Invite

• Linux Admins Beware! Fake PuTTY Client that Rhadamanthys stealer

• StrelaStealer targeted over 100 organizations across the EU and US

• Step-by-Step Guide to Creating Your First Crypto Wallet

• The best VPN trials of 2024

• White House Nominates First Assistant Secretary of Defense for Cyber Policy

• Mozilla Patches Firefox Zero-Days Exploited at Pwn2Own

• Tycoon 2FA: an in-depth analysis of the latest version of the AiTM phishing kit

• SMIC ‘May Have Violated’ US Law In Producing Advanced Chip

• Trump’s Truth Social Moves Closer To $5bn Merger

• The best travel VPNs of 2024: Expert tested and reviewed

• Time to examine the anatomy of the British Library ransomware nightmare

• APT29 hit German political parties with bogus invites and malware

• New “GoFetch” Vulnerability in Apple M-Series Chips Leaks Secret Encryption Keys

• Police Bust Multimillion-Dollar Holiday Fraud Gang

• Payments Regulator Probing String Of Payments Failures

• Microsoft Pays Anthropic AI $650m After Poaching Staff

• A week in security (March 18 – March 24)

• Russian Cozy Bear Group Targets German Politicians

• 10 cloud development gotchas to watch out for

• The Looming Cyber Threat in Real Estate

• Managed Cybersecurity Services Secure Modern Environments

• GoFetch side-channel attack against Apple systems allows secret keys extraction

• Kubernetes RCE Vulnerability Allows Remote Code Execution

• Fears Over ‘Mass Surveillance’ With Bill Changes

• Iran-Linked MuddyWater Deploys Atera for Surveillance in Phishing Attacks

• Data Security Trends: 2024 Report Analysis

• The ISO 27000 family of protocols and their role in cybersecurity

• Hackers Claiming Unauthorized Access to the Fortinet Devices of Many Companies

• That Asian meal you eat on holidays could launder money for North Korea

• Understanding the Various Types of DDoS Attacks and Their Implications

• 20 essential open-source cybersecurity tools that save you time

• Over 40m UK voters personal data breached in hack by China

• 8 cybersecurity predictions shaping the future of cyber defense

• Hackers Transform the Raspberry Pi into an Online Anonymity Tool

• How immersive AI transforms skill development

• Scams are becoming more convincing and costly

• Cybersecurity Automation: Enhancing SOC Efficiency

• Cybercriminals use ChatGPT’s prompts as weapons

• Tool updates: le-hex-to-ip.py and sigs.py, (Sun, Mar 24th)

• ISC Stormcast For Monday, March 25th, 2024 https://isc.sans.edu/podcastdetail/8908, (Mon, Mar 25th)

• Penetration Testing: Assessing Security Posture

• Microsoft confirms memory leak in March Windows Server security update

• IT Security News Weekly Summary – Week 12

• IT Security News Daily Summary 2024-03-24

• Some 300,000 IPs vulnerable to this Loop DoS attack

• Controversy Surrounds Flipper Zero Amid Car Theft Concerns

• Security Affairs newsletter Round 464 by Pierluigi Paganini – INTERNATIONAL EDITION

• USENIX Security ’23 – Jinwen Wang, Yujie Wang, Ao Li, Yang Xiao, Ruide Zhang, Wenjing Lou, Y. Thomas Hou, Ning Zhang – ARI: Attestation of Real-time Mission Execution Integrity

• Unpatchable Security Flaw in Apple Silicon Macs: A Cryptocurrency Nightmare

• Critical Flaw Identified in Apple’s Silicon M-Series Chips – And it Can’t be Patched

• General Motors Ceases Sharing Driver Behavior Data with Data Brokers

• Unveiling the MaaS Campaign: Safeguarding Android Users in India

• Akamai Research Exposes Vulnerability: APIs Now Prime Targets for 29% of Web Attacks

• Classic Information Security Management Errors

• The Rise of Open-Source AI: How Companies like Mistral AI are Shaping the Future

• Cybercriminals Accelerate Online Scams During Ramadan and Eid Fitr

• Vans claims cyber crooks didn’t run off with its customers’ financial info

• Federal, State, Local Cyber Leaders Meet to Discuss Threats

• Week in review: Ivanti fixes RCE vulnerability, Nissan breach affects 100,000 individuals

• Building Resilient Web Applications on AWS: A Comprehensive Approach to Security

• N. Korea-linked Kimsuky Shifts to Compiled HTML Help Files in Ongoing Cyberattacks

• German Police Seize ‘Nemesis Market’ in Major International Darknet Raid

• Sign1 Malware Hijacked 39,000 WordPress Websites

• Cloud Security Best Practices: Protecting Cloud Environments

• Get A Day’s Schedule From Fantastical On The Command Line With Shortcuts

• Prioritizing Action After the Threat Headlines

• How to Identify and Respond to End-of-Life and Out-of-Service Operating Systems?

Generated on 2024-04-01 00:00:15.718269