IT Security News Weekly Summary – Week 15

• IT Security News Daily Summary 2023-04-16

• Experts found the first LockBit encryptor that targets macOS systems

• Keeper Security Newest Competitor in 2023 Homeland Security Awards

• Urgent Update: Chrome, Edge, Brave browsers patch zero-day vulnerability

• Dridex malware, the banking trojan

• How Can You Identify and Prevent Insider Threats?

• Identity and Access Management (IAM) in Payment Card Industry (PCI) Data Security Standard (DSS) environments.

• Email Security Guide: Protecting Your Organization from Cyber Threats

• Why Is Vladimir Putin So Difficult to Deter?

• NCR was the victim of BlackCat/ALPHV ransomware gang

• Security Affairs newsletter Round 415 by Pierluigi Paganini – International edition

• Russian APT Hackers Increasingly Attacking NATO Allies in Europe

• Defense Leak Case Arrests 21-year-old Air Force Guardsman

• Russian SolarWinds Attackers Launch New Wave of Cyber Espionage Attacks

• Deploying confidential containers on the public cloud

• EU Privacy Watchdog Forms ChatGPT Task Force

• Remcos RAT campaign targets US accounting and tax return preparation firms

• Behind the Attack: Account Takeover (ATO)

• Week in review: Microsoft patches zero-day, Apple security updates, HashiCorp Vault vulnerability

• Cyber Security Management System (CSMS) for the Automotive Industry

• Lynis – Open Source Security Auditing & Pentesting Tool – 2023

• KeePassXC security audit published, recommends this security setting

• Snowflake Manufacturing Data Cloud improves supply chain performance

• CYFIRMA raises an undisclosed amount in Pre-Series B funding for product innovation

• Khoros and Cerby join forces to secure social media platforms

• Tentacle partners with Oread Risk & Advisory to simplify SOC 2 compliance for organizations

• UltraViolet Cyber launches to address the ever-expanding cyber threat

• IT Security News Daily Summary 2023-04-15

• HIPAA Compliance Testing in Software Applications

• GitHub Exposed a Private SSH Key: What You Need to Know

• Paint by Numbers: The Perfect Therapy for Stress, Anxiety, and Boredom

• New Android malicious library Goldoson found in 60 apps +100M downloads

• New Google Chrome Zero-day Exploited in Wide – Emergency Update!!

• New Google Chrome Zero-day Exploited to Crash Browser – Emergency Update!!

• Why privacy-preserving synthetic data is a key tool for businesses

• This New Mirai Variant Uses Peculiar Malware Distribution Methods

• Siemens Metaverse exposes sensitive corporate data

• Lazarus Group’s Deathnote Cluster: A Threat to the Defense Sector

• Digitally Crafted Swatting Service Is Wreaking Havoc Across United States

• What is Insider Attacks? : How Prepared Are You?

• Data Breaches: What Do They Mean?

• ChatGPT: Researcher Develops Malicious Data-stealing Malware Using AI

• Security Roundup: Leak of Top-Secret US Intel Risks a New Wave of Mass Surveillance

• Online Gaming Chats Have Long Been Spy Risk for US Military

• CISA adds bugs in Android and Novi Survey to its Known Exploited Vulnerabilities catalog

• Catch Up On News And Events That Happened This Week

• Are You Being Tracked by an AirTag? Here’s How to Check

• 2023: What Awaits Us?

• ChatGPT and You

• Volvo retailer leaks sensitive files

• European Data Protection Board Creates Task Force to Investigate ChatGPT

• Build or Buy your own antivirus product

• Google New Initiative to Reduce the Risk of Zero-Day Vulnerabilities

• Google Releases Urgent Chrome Update to Fix Actively Exploited Zero-Day Vulnerability

• PCI DSS reporting details to ensure when contracting quarterly CDE tests

• How often should security audits be?

• 2023-04-14 – Quick post: IcedID (Bokbot) activity

• Daon brings IdentityX to healthcare industry

• Cobalt Iron updates Compass platform with new data governance capabilities

• Cybercriminals Selling Python-based Hacking Tool via Telegram

• Montana’s Looming TikTok Ban Is a Dangerous Tipping Point

• Votiro collaborates with Sumo Logic to provide analytics on file-borne threats

• Deloitte and Riskified help eCommerce merchants analyze their fraud exposure

• Thales prepares to protect European infrastructures from quantum attacks

• Google Warns of New Chrome Zero-Day Attack

• 5 Best Bot Protection Solutions and Software for 2023

• Massive malvertising campaign targets seniors via fake Weebly sites

• Is AI being used for virtual kidnapping scams?

• Port scan attacks: Protecting your business from RDP attacks and Mirai botnets

• Russia-pushed UN Cybercrime Treaty may rewrite global law. It’s … not great

• Russia-pushed UN Cybercrime Treaty may rewrite global law. It’s not great

• Safety first: 5 cybersecurity tips for freelance bloggers

• A cyberattack on the Cornwall Community Hospital in Ontario is causing treatment delays

• Western Digital Cyber Attack a ‘Wake Up Call for ASIC Vendors’

• IT Security News Daily Summary 2023-04-14

• How mass layoffs can create new risks for corporate security

• Russian SolarWinds Culprits Launch Fresh Barrage of Espionage Cyberattacks

• US extradites Nigerian charged in $6m email fraud scam

• Short, sweet, simple: Tips for effective government communications

• Why is ‘Juice Jacking’ Suddenly Back in the News?

• Google fixed the first Chrome zero-day of 2023

• Comunicado de prensa para Latinoamérica: La propuesta de tratado de la ONU sobre ciberdelincuencia carece de suficientes salvaguardias de derechos humanos, lo que agrava las amenazas a la privacidad y las libertades civiles en Latinoamérica

• Combating fraud and bias this tax season

• Upcoming Speaking Engagements

• Darktrace Research Reveals No Proof Of LockBit Compromise

• EFF, International Allies Warn That Proposed UN Cybercrime Treaty, Rather Than Making Us More Secure, Could Legitimize Intrusive Surveillance and Drag Down Global Privacy and Free Expression Standards

• The Biden administration tells agencies to scale back telework

• 21-year-old Air Force IT specialist charged with leaking classified documents

• Why xIoT Devices Are Cyberattackers’ Gateway Drug for Lateral Movement

• Elon Musk is reportedly planning an A.I. startup to compete with OpenAI, which he cofounded

• Smart cameras ID bus lane violators

• Pen testing amid the rise of AI-powered threat actors

• Software-Dependency Data Delivers Security to Developers

• Hacking Suicide

• Ex-Conti and FIN7 Actors Collaborate with New Domino Backdoor

• Security Is a Revenue Booster, Not a Cost Center

• Elon Musk is reportedly planning an AI startup to compete with OpenAI, which he cofounded

• 2023-04-13 – Metastealer infection

• The 2023 Federal 100

• SASE Market Worth $5.9B by 2028 — Report by MarketsandMarkets™

• Western Digital Hackers Demand 8-Figure Ransom Payment for Data

• Latam Media Briefing: Proposed UN Cybercrime Treaty Lacks Sufficient Human Rights Safeguards, Exacerbating Threats to Privacy and Civil Liberties in Latam

• International Information Systems Security Certification Consortium (ISC)2

• International guidance pushes security by design

• SASE Market Worth $5.9B by 2028 — Report by MarketsandMarkets™

• From Data Breaches and Spyware, to New Cybersecurity Guidelines…

• Compatibility mess breaks not one but two Windows password tools

• Ivanti Policy Secure: NAC Product Review

• SASE Market Worth $5.9B by 2028 — Report by MarketsandMarkets™

• SASE Market Worth $5.9B by 2028 — Report by MarketsandMarkets™

• Be Skeptical of FBI Warnings About Phone Chargers

• The reopening that wasn’t: As government employees work from home, people find services curtailed

• CISA Asks Manufacturers to Prioritize Cybersecurity in Product Design

• SASE Market Worth $5.9B by 2028 — Report by MarketsandMarkets™

• Most of US IT professionals asked to stay silent about data breaches

• Chinese fraudsters: evading detection and monetizing stolen credit card information

• RTM Locker Gang Targets Corporate Environments with Ransomware

• Top Endpoint Detection and Response (EDR) Solutions in 2023

• SASE Market Worth $5.9B by 2028 — Report by MarketsandMarkets™

• Kodi discloses data breach after its forum was compromised

• LinkedIn Deploys New Secure Identity Verification For All Members

• Inside Look At Cybercriminal Organizations

• Ether Jumps To 11-Month High In Wake Of Software Upgrade

• Linux Kernel Logic Allowed Spectre Attack On Major Cloud Provider

• Robots are everywhere – improving how they communicate with people could advance human-robot collaboration

• Microsoft warns accounting firms of targeted attacks as Tax Day approaches

• Hyundai Experiences Cybersecurity Issues: Breach and App Bugs

• SASE Market Worth $5.9B by 2028 — Report by MarketsandMarkets™

• Spyware Offered to Cyberattackers via PyPI Python Repository

• How To Build on Linea: A ZK-rollup on Ethereum

• CISA Introduces Secure-by-design and Secure-by-default Development Principles

• FBI Arrests 21-Year-Old Guardsman in Leak of Classified Military Documents

• Kodi Data Breach Hits 400,000 Users’ Records & Private Messages

• How To Easily Cut Cloud Costs In A Time Of Soaring Expenses

• Employing Zero Trust to Defend Against Backdoor Attacks

• WordPress Security: 1 Million WordPress Sites Hacked via Zero-Day Plug-in Bugs

• Enforcement of Cybersecurity Regulations: Part 3

• Why Divergent Civil Society and Military Approaches Matter for CHMR-AP Implementation

• Detection Methods: Do You Know Where Your Credentials are?

• What the Recent Collapse of SVB Means for Privacy

• WhatsApp announces features to prevent account takeover

• Google To Face Trial Over Sonos Patents, Judge Rules

• Improve AWS Security and Compliance With CDK-nag?

• How to completely remove your data from LastPass’s servers (eventually)

• Google, CISA Warn of Android Flaw After Reports of Chinese App Zero-Day Exploitation

• Microsoft Warns Accounting, Tax Return Preparation Firms of Remcos RAT Attacks

• Russia-Linked Hackers Launches Espionage Attacks on Foreign Diplomatic Entities

• 3 Ways Tech Can Help To Build Stronger Customer Relationships

• Firmware Caution Advises MSI Cyberattack

• Western Digital hackers claim to have copied 10TB of company data

• LATEST CYBERTHREATS AND ADVISORIES – APRIL 14, 2023

• Murdered Tech Executive Knew His Alleged Killer, Say Police

• For cybercriminal mischief, it’s dark web vs deep web

• Juniper Networks Patches Critical Third-Party Component Vulnerabilities

• UK Education Sector Suffered Most from Ransomware in 2022

• Gaining an Advantage in Roulette

• Kodi Confirms Data Breach: 400K User Records and Private Messages Stolen

• RTM Locker, a new RaaS gains notorieties in the threat landscape

• WhatsApp Improves Defense Against Malware-Based Account Takeover

• Humans Needed To Avoid Cybersecurity Missteps, Gartner Says

• Darktrace Denies Getting Hacked After Ransomware Group Names Company on Leak Site

• Cerbos Raises $7.5 Million for Authorization Platform

• While Twitter wants to sell its verification, Microsoft will do it for free on LinkedIn

• Glamourizing fraudsters hurts victims of fraud, and society

• Post-Quantum Cryptography (PQC): Three Easy Ways to Prepare

• Syxsense’s Latest Product Release Gives Organizations Robust Capabilities to Easily Automate Complex Security and IT Management Playbooks

• Hackers Shifting DDoS Attacks to VPS Infrastructure for Increased Power

• Zelle users targeted with social engineering tricks

• Five Arrests in Crackdown on $98m Investment Fraud Gang

• Volume of Opaque Breach Notices Surges in Q1

• Webinar: Tips from MSSPs to MSSPs – Building a Profitable vCISO Practice

• Severe Android and Novi Survey Vulnerabilities Under Active Exploitation

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Linux kernel logic allowed Spectre attack on ‘major cloud provider’

• Over 12k Indian Govt websites disrupted due to cyber-attack from Indonesia

• The Security Risks of ChatGPT in an Enterprise Environment

• Hikvision fixed a critical flaw in Hybrid SAN and cluster storage products

• New infosec products of the week: April 14, 2023

• To improve security, consider how the aviation industry stopped blaming pilots

• Conquering modern data stack complexities

• Organizations face an uphill battle to keep their sensitive data secure

• Tactics that make crypto giveaway scams so successful

• WhatsApp New Features Protect Users From Unknown Account Take-Over Attacks

• OGUsers (2022 breach) – 529,020 breached accounts

• Cymulate ASM bridges vulnerability management and ASM gaps in hybrid infrastructure

• Cerbos Cloud manages and enforces authorization policies

• Code42 Instructor now offers risk reduction training videos to Microsoft Teams

• Entrust offers zero-trust solutions for authentication, HSM, and multi-cloud compliance

• Qwiet AI releases a suite of targeted AppSec and DevSecOps services

• DirectDefense and Claroty join forces to secure XIoT environments

• SentinelOne announces integration of firewalls and NDR capabilities with key industry players

• Troubleshooting No Signal Monitor Issue: Steps to Get Computer Display Back

• Google Pay accidentally handed out free money, bug now fixed

• Sextortion “assistance” scammers con victims further

• Ransomware in France, April 2022–March 2023

• Ransomware review: April 2023

• Infosys Uses Cortex XSIAM to Revolutionize Your SOC

• Palo Alto Networks Named a Leader in 2023 Magic Quadrant for SSE

• Fake “Geek Squad” emails: Call center scam leverages Intuit QuickBooks servers

• CISA’s plan to bake security into software development

• Western Digital restores service; attack details remain unclear

• Revisions to the FTC Safeguards Rule Affect Auto Dealers

• IT Security News Daily Summary 2023-04-13

• How to use the John the Ripper password cracker

• New Mirai Variant Employs Uncommon Tactics to Distribute Malware

• Google Proposes More Transparent Vulnerability Management Practices

• Remcos RAT Targets Tax Pros to Scurry Off With Workers’ Filing Info

• Why the US Needs Quantum-Safe Cryptography Deployed Now

• Money Ransomware Group Enters Double-Extortion Fray

• Google Launches New Cybersecurity Initiatives to Strengthen Vulnerability Management

• The Russia-linked APT29 is behind recent attacks targeting NATO and EU

• CISA pressures tech vendors to ship secure software ‘out of the box’

• Amazon Sidewalk promises secure, wide-ranging IoT network

• One-stop access to city’s childcare, jobs, business services

• How state and local governments can fortify security at tax time (or any time)

• Air National Guardsman Arrested in Leaking Classified Documents

• Learn about Confidential Containers

• Join us for EFF’s 7th Annual Tech Trivia Night!

• Google unveils new council and legal fund to support vulnerability disclosure

• Taxpayer data at risk due to cybersecurity deficiencies at IRS, report warns

• School District Joins Suit Accusing Facebook Of Harming Young Users

• Super-Yacht Specialist Lürssen in Dry Dock After Ransomware Attack

• How insecure is America’s FirstNet emergency response system? Seriously, anyone know?

• Pentagon super-leak suspect cuffed: 21-year-old Air National Guardsman

• Senator calls for cybersecurity audit of law enforcement wireless network

• The Import of Cybersecurity in Small Business – ChamberofCommerce.org

• LockBit 3.0 Posts Dubious Claims of Breaching Darktrace Cybersecurity Firm

• How UPX Compression Is Used to Evade Detection Tools

• Texas legislators pursue fix to costly law that requires nonexistent election equipment

• Congratulations to the Top MSRC 2023 Q1 Security Researchers!

• Building a Network Security Strategy: Complete Checklist To Protect Your Network

• Key Apple-native macOS security features for administrators

• private CA (private PKI)

• A flaw in the Kyocera Android printing app can be abused to drop malware

• Wireshark 4.0.5 Released With New Protocol Support

• What are passkeys? A cybersecurity researcher explains how you can use your phone to make passwords a thing of the past

• RTM Locker: Emerging Cybercrime Group Targeting Businesses with Ransomware

• 2022 Industry Threat Recap: Energy

• Managing machine identities in a zero-trust world

• Google Play threats on the dark web are big business

• Patch Tuesday: Microsoft fixes a zero-day, and two curious bugs that take the Secure out of Secure Boot

• S3 Ep130: Open the garage bay doors, HAL [Audio + Text]

• The Internet Reform Trilemma

• Wagner, PMSCs, and the Limits of Transnational Governance

• Supply chain security for Go, Part 1: Vulnerability management

• Cambodia Deports 19 Japanese Cybercrime Scam Suspects

• Threat actors strive to cause Tax Day headaches

• Twitter No Longer Exists, As X Corp Takes Over

• Over 20,000 Iowa Medicaid Members Affected By Data Breach

• The Hacking of ChatGPT Is Just Getting Started

• Cloud forensics – An introduction to investigating security incidents in AWS, Azure and GCP

• 10 Reasons why businesses need mobile device management (MDM)

• Government Sets Aside £150 Million For Full 5G Connectivity By 2030

• Economies of scale: How and why enterprises are outsourcing their data centers

• Pakistan-Aligned Hackers Disrupt Indian Education Sector

• Majority of US IT Pros Told to Keep Quiet About Data Breaches

• Superyacht-Maker Lürssen, Targeted By Ransomware Attacks

• Windows Admins Warned About a Critical MSMQ QueueJumper Vulnerability

• Users of Android can Now Save Space by Auto Archiving

• This Twitter Bug is Making Users Secret Circle Tweets Public

• GuLoader Targets US Financial Firms With Tax-Themed Phishing Lures

• Legion Malware Marches onto Web Servers to Steal Credentials, Spam Mobile Users

• FBI: How Fake Xi Cops Prey On Chinese Nationals In The US

• Healthcare Sites Flooded By Fake Requests In Ongoing DDoS Attacks

• European Privacy Watchdog Creates ChatGPT Task Force

• Free Public Charging Stations May Come With A Price, Federal Agencies Warn

• 5 reasons to join us at Securely Migrate and Optimize with Azure

• Improve supply chain security and resiliency with Microsoft

• Legion: Credential Harvesting & SMS Hijacking Malware Sold on Telegram

• Hyundai Data Breach In France & Italy Reveals Car Owners

• How to Define Tier-Zero Assets in Active Directory Security

• Verimatrix’s Triple-Threat Initiative Enhances Mobile App Security

• Enhanced Threat Intelligence Technology Announced by Outpost24

• Juice Jacking: FBI Warns Against Using Public USB Stations

• Data Encryption Is the First Line of Defense Against Identity Theft and Cybercrime

• Can Zero-Knowledge Proofs Save Cryptocurrency?

• WhatsApp Introduces New Device Verification Feature to Prevent Account Takeover Attacks

• Mastering The Instagram Algorithm: Technology Hacks To Stay Ahead

• Quantum Computing Threats: A How-to Guide for Preparing Your Company’s Cybersecurity Defenses

• FBI Warns Against Use Of Public Charging Stations For Mobile Phones

• Don’t Risk It: Critical Cybersecurity Areas New Managers Must Not Overlook

• Cyfirma Raises $6 Million for Threat Management Platform

• Google Tackles Open Source Security With New Dependency Service

• Tackling Software Supply Chain Security: A Toolbox for Policymakers

• Google delivers secure open source software packages

• (ISC)² Security Congress in Nashville – See Y’all There!

• Nokoyawa Ransomware Attacks Use Windows Zero-Day Vulnerability

• Tech Giant Alibaba to Launch ChatGPT Rival

• Microsoft Patch Tuesday April Fixed 97 Flaws Including 1 Zero-Day

• Apple Makes Nearly 7 Percent Of iPhones In India – Report

• 16-31 March 2023 Cyber Attacks Timeline

• Computer Turns on but Monitor Says No Signal – 9 Ways to Fix

• Malicious ChatGPT & Google Bard Installers Distribute RedLine Stealer

• Looking for a New Security Technology? Choose a Partner, not a Vendor

• Critical Vulnerability in Hikvision Storage Solutions Exposes Video Security Data

• Lazarus Hacker Group Evolves Means In DeathNote Campaign

• Cybersecurity Learning Across Sectors: How ICCWS Brings Academics, Government, and Private Companies Together

• New Python-Based “Legion” Hacking Tool Emerges on Telegram

• Bypassing a Theft Threat Model

• DISA releases the first Ansible STIG

• Demystifying risk using CVEs and CVSS

• Elon Musk Axed 80 Percent Of Staff, Admits Painful Tenure

• Hyundai Hacked – Attackers Stole Car Owners’ Personal Details

• The U.S. Army Is Revamping Its Cybersecurity Approach

• Irrigation Systems in Israel Disrupted by Hacker Attacks on ICS

• Microsoft Shares Resources for BlackLotus UEFI Bootkit Hunting

• Fortinet fixed a critical vulnerability in its Data Analytics product

• CIEM vs CWPP vs CSPM Use Cases

• Intel To Optimise Factories For ARM Chip Manufacturing

• Pakistan-based Transparent Tribe Hackers Targeting Indian Educational Institutions

• Why Shadow APIs are More Dangerous than You Think

• LinkedIn now allows you to verify your workplace

• How To Install Winminer in Windows 7, 8.1, 10, 11, Mac, Linux, and Ubuntu

• How to Combat Insider Threats

• Tripwire’s Vulnerability Exposure Research Team (VERT): What you need to know

• Stolen Card Volumes Plummet 94% Globally

• Lazarus Hacker Group Evolves Tactics, Tools, and Targets in DeathNote Campaign

• Superyacht-Maker Hit by Easter Ransomware Attack

• Juice Jacking, Best Buy Phishing, and Garage Doors Redux

• Rapid7 Has Good News for UK Security Posture

• The new weakest link in the cybersecurity chain

• Uncommon infection methods—part 2

• Do you know what your supply chain is and if it is secure?

• DDoS alert traffic reaches record-breaking level of 436 petabits in one day

• Technology investments feel the impact of weakening economy

• 5 steps to building NSA-level access control for your app

• The Kodi Foundation – 400,635 breached accounts

• Kodi Hacked – Attackers Stole the Forum Database

• 2FA: Why to use it — and what are the best options?

• Twitter works on secret AI project in contradiction to sayings of owner Elon Musk

• MERCURY – A Destructive Operation From Iranian Hackers Wipe Cloud Environments

• ChatGPT Security: OpenAI’s Bug Bounty Program Offers Up to $20,000 Prizes

• 2023-04-12 – Quick Post: Qakbot (Qbot), distribution tag obama251

• BlackGuard stealer extends its capabilities in new variant

• Regula updates Face SDK to protect users against different attack vectors

• Binarly Transparency Platform identifies vulnerabilities and malicious threats in code

• Searchlight Cyber launches Stealth Browser for secure dark web access

• Fleet MDM platform provides mobile workstation security with GitOps and workflow automation

• CloudCasa for Velero manages and protects Kubernetes applications

• Edgio Applications platform v7 accelerates developer team velocity

• Wazuh 4.4 combats breaches, ransomware, and cyberattacks all from a single agent

• Cynalytica OTNetGuard provides visibility into critical infrastructure networks

• Rezonate’s new ITDR module empowers security teams to stop active threats in real-time

• Armis and TrueFort collaborate to increase operational resilience

• Syncro joins forces with Proofpoint to offer MSPs an email security suite

• Don’t plug your phone into a free charging station, warns FBI

• KFC, Pizza Hut owner employee data stolen in ransomware attack

• Ransomware in the UK: April 2022–March 2023

• Update now! April’s Patch Tuesday includes a fix for one zero-day

• How insecure is America’s FirstNet emergency response system? No one’s sure

• Cloud Security Alliance opens registration for the CSA Summit at RSAC 2023

• Concentric AI channel partner program enhances partner revenue opportunities

• Raytheon and SpiderOak partner to secure satellite communications

• FBI: How fake Xi cops prey on Chinese nationals in the US

• Inside the 2022 Email Cyber Threat Landscape

• How To Safely Navigate the World of Crypto Finance

• Top Mobile Security Considerations for Business Travelers

• Google Cloud offers Assured Open Source Software for free

• Hyundai suffered a data breach that impacted customers in France and Italy

• The best VPN services for iPhone and iPad in 2023

• Cybersecurity leaders see risk from email attacks, hybrid work

• VulnCheck Named CVE Numbering Authority for Common Vulnerabilities and Exposures

• Menlo Security Illustrates Importance of Browser Security as 4 in 5 Ransomware Attacks Include Threats Beyond Data Encryption

• Turning the heat up on election security

• OpenAI launches bug bounty program with Bugcrowd

• Lazarus Group’s ‘DeathNote’ Cluster Pivots to Defense Sector

• (ISC)² Certified in Cybersecurity Earns ANAB Accreditation to ISO 17024 and Surpasses 15,000 Certification Holders

• Report Reveals ChatGPT Already Involved in Data Leaks, Phishing Scams & Malware Infections

• Leaked Pentagon Documents May Herald a New Era of Revelations

• IT Security News Daily Summary 2023-04-12

• 83% of organizations paid up in ransomware attacks

• Better ID management could help DMVs become ‘departments of citizen engagement’

• When Banking Laws Don’t Protect Consumers From Cybertheft

• IARPA’s plan to hack the brains of hackers

• Were you caught up in the latest data breach? Here’s how to tell

• TechRepublic Premium editorial calendar: IT policies, checklists, toolkits and research for download

• Opera Adds Free VPN to Opera for iOS

• Some states may be barring the door to unemployment benefits

• The best AirTag wallets of 2023

• What are the cybersecurity concerns of SMBs by sector?

• How to use a CASB to manage shadow IT

• Nokoyawa ransomware exploits Windows CLFS zero-day

• Cisco provides extra-secure Webex for U.S. government

• OpenAI Launches ChatGPT Bug Bounty Program – Earn $200 to $20k

• 7 Steps of the Vulnerability Assessment Process Explained

• Microsoft: NSO Group-Like ‘QuaDream’ Actor Selling Mobile Spyware to Governments

• Data on 400K Kodi Forum Members Stolen and Put Up for Sale

• QuaDream surveillance firm’s spyware targeted iPhones with zero-click exploit

• Top 10 AI Jobs Taking Over With Automation

• Google launches dependency API and curated package repository with security metadata

• Banning TikTok could weaken personal cybersecurity

• Gartner: Human-Centric Design Is Top Cybersecurity Trend for 2023

• OpenAI To Offer Bug Bounties Up To $20,000

• OpenAI Launched Bug Bounty Program – Rewards up to $20,000

• FCC proposes rule to boost cell service from space

• Securing the Chaos – Harnessing Dispersed Multi-Cloud, Hybrid Environments

• How to enable Active Directory fine-grained password policies

• How to create fine-grained password policy in AD

• The Bot Invasion: Is Your Digital Ad Campaign at Risk?

• How to use a public key and private key in digital signatures

• CISA Updates Zero Trust Maturity Model With Public Feedback

• QuaDream Apple Spyware Maker Just Popped Up On The Radar Again

• Microsoft Patches Zero Day Under Active Attack

• OpenAI Unleases Bug Bounty Program With Rewards Up To $20,000

• Much-Hyped Water Plant Hack Wasn’t A Hack, Just User Error

• E-mail header analysis

• DHS seeks solutions to ‘dark swarms’ of drones

• For AI laws, China joins the U.S. in asking the public to chime in

• Lazarus Group’s DeathNote Campaign Reveals Shift in Targets

• Australia to issue ban on ransomware payments after Latitude Financial Cyber Attack

• Emotet Climbs March 2023’s Most Wanted Malware List With OneNote Campaign

• Windows CLFS Vulnerability Used for Ransomware Attacks

• Zigbee PRO 2023 introduces new security mechanisms, feature enhancements

• Cybercriminals Set Android Apps For Sale for Up to $20K a Piece

• Three Commonly Neglected Attack Vectors in Cloud Security

• TSMC Investment Plans For Taiwan Unchanged – Report

• US, India and China Most Targeted in DDoS Attacks, StormWall Q1 2023 Report

• How To Build for Payment Processing Resiliency

• ‘ASTORS’ Champion Cymulate – Ups the Game on Exposure Management

• Fortinet Patches Critical Vulnerability in Data Analytics Solution

• Microsoft mends Windows zero-day on April Patch Tuesday

• LinkedIn Verification Now Lets You Verify Your Job and Account

• 5G Security — A Shared Responsibility

• A Brief History of Programmatic Collection Pre-Section 702

• The Dangerous Cycle of Pentagon Sexual Assault and Harassment ‘Lowest Level’ Policy

• Massive Surge in DDoS Attacks Reported in First Quarter of 2023

• Quest Software Podcast: The Democratisation of Data: Episode 2: Legacy Technology – A Burden and a Vulnerability?

• US Government Looks To Establish Rules For AI

• Android App Trojans Sold on Dark Web for $25-$20,000

• Defending against backdoor attacks with zero trust

• 400,000 Users Hit by Data Breach at Media Player Maker Kodi

• Microsoft fixes a zero-day – and two curious bugs that take the Secure out of Secure Boot

• Role of the Modern CISO in the Rapidly Evolving Cybersecurity Landscape

• HashiCorp Vault vulnerability could lead to RCE, patch today! (CVE-2023-0620)

• Warning: Threat Actors Compromise 3CX Desktop App in a Supply Chain Attack (Updated)

• Sushiswap Smart Contract Exploited in $3.3 Million Hack

• PC Shipments Decline 30 Percent, Gartner Finds

• How Secure are Composable Architectures?

• Four Ways to Harden Your Network Perimeter

• Cisco adds air-gapping to Webex in response to national security concerns

• SAP Patches Critical Vulnerabilities in Diagnostics Agent, BusinessObjects

• Windows Zero-Day Exploited in Nokoyawa Ransomware Attacks

• CrowdStrike Expands Falcon to Include IoT

• The Service Accounts Challenge: Can’t See or Secure Them Until It’s Too Late

• Israel-based Spyware Firm QuaDream Targets High-Risk iPhones with Zero-Click Exploit

• Upper Galilee Irrigation Systems Crippled by Cyberattack

• LinkedIn and Microsoft Entra introduce a new way to verify your workplace

• Finding ChatGPT Vulnerabilities May Pay Hackers Up To $20,000

• China follows in US footsteps, seeks public opinion on draft AI laws

• Details Emerge on Israeli Spyware Vendor QuaDream and Its iOS Malware

• CISA Publishes New Guidance for Achieving Zero Trust Maturity

• Virtual Event Today: Zero Trust Strategies Summit

• Mandiant Also Links 3CX Supply Chain Attack to North Korean Hackers

• FBI Advising People to Avoid Public Charging Stations

• Kodi forum breach: User data, encrypted passwords grabbed

• 3CX compromise: More details about the breach, new PWA app released

• Apple Doubles Investment In Carbon Removal Fund

• iPhones Hacked Via iOS Zero-Click Exploit To Deploy Spyware

• CISA Publishes Advisory on Improving Network Monitoring and Hardening

• Top 17 Free Online Phishing Tools

• Spyware Used Across 10 Countries, Says Citizen Lab, Microsoft

• OpenAI starts bug bounty program with cash rewards up to $20,000

• Insider Threat and Ransomware: A Growing Issue

• Researchers Uncover 7000 Malicious Open Source Packages

• Mission possible

• Unmasking NIS2: Europe’s Secret Weapon Against Cybersecurity Threats

• Ethical Hackers Could Earn up to $20,000 Uncovering ChatGPT Vulnerabilities

• New Zero-Click iOS Exploit Deploys Israeli Spyware

• SAP April 2023 security updates fix critical vulnerabilities

• Microsoft Fixes Zero-Day Bug This Patch Tuesday

• OpenAI launched a bug bounty program

• Following the Lazarus group by tracking DeathNote campaign

• 5 Smallest ATX Cases for Best Compact PC Builds in 2023 – Power in a Tiny Package

• 8 Fun And Engaging Online Casual Games You Might Have Missed

• Why performing security testing on your products and systems is a good idea

• Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit

• This Identity Management Day, Go BIG or Go HOME!

• Hackers Using Fake Google Chrome Error Screens To Inject Malware

• GitGuardian Honeytoken helps companies secure their software supply chains

• Cloud security firm Ericom Software acquired by Cradlepoint

• CYBERSECURITY INDUSTRY NEWS REVIEW – APRIL 11, 2023

• #IdentityManagementDay – Best Practices to Help Keep Your Organization Secure

• The Top Challenges Faced by CISOs in 2023

• (ISC)² Supports Cyber Newcomers

• Kodi confirms user forum data breach

• Pay $20K To Infect Android Devices Via Google Play Store – Darkweb Report

• North Korean Hackers Uncovered as Mastermind in 3CX Supply Chain Attack

• Cybercrime group exploits Windows zero-day in ransomware attacks

• Lazarus Sub-Group Labyrinth Chollima Uncovered as Mastermind in 3CX Supply Chain Attack

• Key factors driving changes in the perception of the CISO role

• 3CX teases security-focused client update, plus password hashing

• New Imperva Office & Customer Experience Centre Aims to Meet the Needs of Customers In Singapore & Across Asia Pacific and Japan

• Threat hunting programs can save organizations from costly security breaches

• Hybrid work environments are stressing CISOs

• Data-backed insights for future-proof cybersecurity strategies

• Netskope Endpoint SD-WAN helps enterprises accelerate edge networking

• AutoRABIT expands Salesforce security posture management services

• 11:11 Systems Managed SteelDome provides protection from ransomware attacks

• US cyber chiefs warn AI will help crooks, China develop nastier cyberattacks faster

• Xerox improves productivity and security for hybrid workers

• 2023 年 4 月のセキュリティ更新プログラム (月例)

• Another zero-click Apple spyware maker just popped up on the radar again

• Microsoft (& Apple) Patch Tuesday, April 2023 Edition

• A week in security (April 3 – 9)

• Apple releases emergency updates for two known-to-be-exploited vulnerabilities

• Check Point vs Palo Alto Networks: Top NGFWs Compared

• Trellix names Ash Parikh as CMO

• Flashpoint and Google Cloud expand partnership to deploy generative AI

• VERT Threat Alert: April 2023 Patch Tuesday Analysis

• April Patch Tuesday: Ransomware gangs already exploiting this Windows bug

• QuaDream: Israeli Cyber Mercenary Behind iPhone Hacks

• Microsoft Patches 97 CVEs, Including Zero-Day & Wormable Bugs

• OpenAI announces bug bounty program to address AI security risks

• NYPD pilots GPS darts, autonomous patroller and reintroduces robot dog

• ChatGPT Creator OpenAI Ready to Pay Hackers for Security Flaws

• IT Security News Daily Summary 2023-04-11

• State grounds Chinese-made drones over security concerns

• NextGen TV to deliver data-rich emergency alerts

• Stakeholders wonder how to sustain CX momentum long-term

• Virtual Event Tomorrow: Zero Trust Strategies Summit

• Researchers Discover Well-Known Malware Hidden In Facebook Ads

• Microsoft Azure Shared Key Misconfiguration Could Lead to RCE

• Microsoft patches zero-day exploited by attackers (CVE-2023-28252)

• Protect your data with a USB condom

• The best free PC antivirus software of 2023

• A “By-Design” flaw in Microsoft Azure can allow storage accounts takeover

• Ukrainian Hackers Breach Email of APT28 Leader, Who’s Wanted by FBI

• Microsoft Patches Another Already-Exploited Windows Zero-Day

• How to Provide Relevant Threat Intelligence

• CISA releases updated guidance for zero trust security architectures

• Inside the never-ending race to update the Pentagon’s IT

• Adobe Plugs Gaping Security Holes in Reader, Acrobat

• FTX bankruptcy filing highlights security failures

• ‘Blatantly Obvious’: Spyware Offered to Cyberattackers via PyPI Python Repository

• The U.S. Deserves Stronger Spyware Protections Than Biden’s Executive Order

• 10 hot topics to look for at RSA Conference 2023

• Attention gamers! Motherboard maker MSI admits to breach, issues “rogue firmware” alert

• Nokoyawa ransomware attacks with Windows zero-day

• Major Hack Hits South Korean Exchange GDAC, $13.9M Stolen

• How to fix the top 5 API vulnerabilities

• Cybercriminals To Add Android Malware On Google Play Up To $20,000

• Protect your company data with an Ivacy VPN lifetime subscription for $18

• 7 Things Your Ransomware Response Playbook Is Likely Missing

• Where Are the Women? Making Cybersecurity More Inclusive

• Announcing the deps.dev API: critical dependency data for secure supply chains

• Guidance for investigating attacks using CVE-2022-21894: The BlackLotus campaign

• Strategy Reporting Essentials: A Guide to Efficient Data Collection

• 10 things to look out for when buying a password manager

• Apple Patches Two Zero-Days Exploited in the Wild

• Malicious Android Apps Sold For Up to $20,000 on Darknet

• Sophos Web Appliance Critical Flaw Let Attacker Execute Arbitrary Code

• Don’t bet with ChatGPT – study shows language AIs often make irrational decisions

• Balada Injector Infects Nearly 1 Million WordPress Sites

• DEV-0196: QuaDream’s “KingsPawn” malware used to target civil society in Europe, North America, the Middle East, and Southeast Asia

• Eliminating 2% of Exposures Could Protect 90% of Critical Assets

• Beware of companies offering paid sextortion assistance

• BigID’s data minimization capabilities enable organizations to identify duplicate data

• CYBERSECURITY INDUSTRY NEWS REVIEW – APRIL 11, 2023

• What to Look For If Your Phone Is Hacked

• Thieves Use JBL Speakers to Hack Cars with Keyless Entry

• Now ransomware leads to three more additional Cyber Threats

• Apple Patched Two New Zero-days That Were Exploited to Hack iPhones and macOS

• ICS Patch Tuesday: Siemens, Schneider Electric Address Dozens of Vulnerabilities

• Microsoft Azure Users Warned of Potential Shared Key Authorization Abuse

• OSINT Company Fivecast Raises $20 Million

• Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads

• Yum! Brands, the owner of KFC, Taco Bell and Pizza Hut, discloses data breach

• Yum! Brands Report Data Breach After Ransomware Attack

• Keeper Security introduces new user interface

• Two New Emergency Patches from Apple

• Design Like A Pro: Top 6 Floor Plan Software Programs For Every Budget

• Estonian Arrested: Accused of Supplying Hacking Tools to Russia

• Azure Admins Warned To Disable Shared Key Access As Backdoor Attack Detailed

• FTX’s Cybersecurity Was Hilariously Bad

• Illinois Hospital Forced Into EHR Downtime After Cyberattack

• Malware Campaign Infects A Million WordPress Sites Since 2017

• One of the Stiffest Charges Against Jan. 6 Insurrectionists Hangs on by a Thread in the D.C. Circuit

• Addressing the Security Risks of AI

• Digital Spring Cleaning: Here is How You Can Declutter Your Digital Space

• Amazon Bans Flipper Zero for Being a Card Skimming Tool

• Former Twitter Executives Sue Over $1m In Unpaid Legal Bills

• GPT has entered the security threat intelligence chat

• Recorded Future launches OpenAI GPT model for threat intel

• Israeli Irrigation Water Controllers & Postal Service Breached

• How CIEM Can Improve Identity, Permissions Management for Multicloud Deployments

• How Password Managers Can Get Hacked

• Newly Discovered “By-Design” Flaw in Microsoft Azure Could Expose Storage Accounts to Hackers

• Syxsense platform updates simplify endpoint security and management

• ThreatX Runtime API & Application Protection goes beyond basic observability

• Indian Start-Ups Demand Delay For New Google Payment System

• SD Worx Shuts Down its UK & Ireland IT Systems Following Cyberattack

• XDR vs MDR: A Comparison of Two Detection and Response Solutions

• Best practices regarding Azure Storage Keys, Azure Functions, and Azure Role Based Access

• #IdentityManagementDay – Best Practices to Help Keep Your Organization Secure

• What’s Going On With LastPass, and is it Safe to Use?

• Azure admins warned to disable shared key access as backdoor attack detailed

• Samsung Engineers Feed Sensitive Data to ChatGPT, Sparking Workplace AI Warnings

• How to Use Apple’s New All-In-One Password Manager

• Cybercriminals Turn to Android Loaders on Dark Web to Evade Google Play Security

• South Korea Fines Google £26m For Blocking Rival App Store

• [eBook] A Step-by-Step Guide to Cyber Risk Assessment

• Apple rushes fixes for exploited zero-days in iPhones and Macs (CVE-2023-28205, CVE-2023-28206)

• Ethereum Upgrade Set To Release Billions In Value

• Yum Brands Discloses Data Breach Following Ransomware Attack

• Potential Outcomes of the US National Cybersecurity Strategy

• Apple Rolls Out Zero-Day Patches to Older iOS, macOS Devices

• Car Thieves Hacking the CAN Bus

• Military Intel Leak Investigated By US Officials

• CISA Urges to Fix Backup Exec Bug Exploited to Deploy Ransomware

• GitGuardian’s honeytokens in codebase to fish out DevOps intrusion

• Apple released emergency updates to fix recently disclosed zero-day bugs on older devices

• UK Casino Site Bonuses – A Guide to Maximizing Your Bankroll

• What is the Most Gambling Addicted Country?

• Gamblers in the USA

• China’s SenseTime Shows AI Chat, Image Tools

• 30 Ransomware Prevention Tips

• Microsoft Exchange Server 2013 Reaches End of Support

• US Scrambles to Investigate Military Intel Leak

• Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages

• 40% of IT security pros say they’ve been told not to report a data leak

• KFC Owner Discloses Data Breach

• Vodafone Fixes Broadband Outage That Affected Thousands

• 3 overlooked cloud security attack vectors

• A cyber attack hit the water controllers for irrigating fields in the Jordan Valley

• Latitude Financial Refuses to Pay Ransom

• Alibaba Launches ChatGPT-Like AI Chatbot

• Cyber spring cleaning: Maintaining your digital home

• Need to improve the detection capabilities in your security products?

• Reduce SaaS App Risks with Cloud Security Broker & Zero Trust

• Tesla Employees Shared Sensitive Images of Cameras on Customers‘ Cars

• Round-Robin DNS Explained. What It Is and How It Works

• FBI warns: avoid public charging stations

• How to transform cybersecurity learning and make content more engaging

• Making risk-based decisions in a rapidly changing cyber climate

• Why it’s time to move towards a passwordless future

• People disclose more personal info when question is repeated

• Criminal businesses adopt corporate behavior as they grow

• Consumers take data control into their own hands amid rising privacy concerns

• Australian Finance Company Refuses Hackers’ Ransom Demand

• Renewed Focus on Incident Response Brings New Competitors and Partnerships

• Ethereum’s Shanghai Update Opens a Rift in Crypto

• AI can crack most password in less than a minute

• Generative AI and Cybersecurity: Advantages and Challenges

• FBI: Don’t use public phone charging stations

• Last-gen ultralight laptops are nearly as fast as new models—and much cheaper

• How the cops buy a “God view” of your location data, with Bennett Cyphers: Lock and Code S04E09

• 4 ways to secure your remote work setup

• Tesla Sued Over Workers’ Alleged Access to Car Video Imagery

• Metaverse as a New Game Reality: Does it Make Sense to Invest in VR Development?

• How much to infect Android phones via Google Play store? How about $20k

• KillNet Claims Creating Gay Dating Profiles with NATO Logins

• DHA preps for MHS Genesis follow-on contract

• In SAS v. WPL, the Federal Circuit Finally Gets Something Right on Computer Copyright

• Organizations Have Security Priorities Mismatched as Breaches Continue to Rise

• The Practical Side of ZTNA: How it Helps Harden Defenses

• Inside FTX: Jokes about misplaced funds, diabolical IT, poor oversight, and worse

• IT Security News Daily Summary 2023-04-10

• Apps for Sale: Cybercriminals Sell Android Hacks for Up to $20K a Pop

• API Governance: Best Practices and Strategies for Effective API Management

• VA paid for but didn’t deploy an emergency communications system

• How an AI tool could crack your passwords in seconds

• Apple squashes iOS, macOS zero-day bugs already exploited by snoops

• Apple zero-day spyware patches extended to cover older Macs, iPhones and iPads

• Cybersecurity Risks and Threats in the Satellite Sector: An Overview

• ARPA-H nets data, design experts in new Presidential Innovation Fellows cohort

• Pair of Apple Zero-Days Under Active Exploit; Patch & Update Accordingly

• People can only tell if AI wrote something 50% of the time

• County sees huge performance gains when permitting moves to the cloud

• FBI warns of public ‘juice jacking’ charging stations that steal your data. How to stay protected

• Israel Faces Fresh Wave of Cyberattacks Targeting Critical Infrastructure

• Clearing visibility and unifying security tools with a cloud-native application protection platform (CNAPP)

• State lawmakers pitch gold-backed cryptocurrency

• Google to kill Dropcam, Nest Secure hardware next year

• High-Stakes Ransomware Response: Know What Cards You Hold

• Ping Identity launches decentralized identity management

• IPFS Network Technology is Being Used in More Phishing Attacks

• PingIdentity launches decentralized identity management

• How and Why to Put Multicloud to Work

• Russia’s Joker DPR Claims Access to Ukraine Troop Movement Data

• SD Worx shuts down UK and Ireland services after cyberattack

• CISA adds zero-day bugs in iPhones, Macs, and iPads to its Known Exploited Vulnerabilities catalog

• Learn what you need to protect your business with ethical hacking for just $45

• Microsoft, Fortra are this fed up with cyber-gangs abusing Cobalt Strike

• MSI Confirms Cyberattack, Issues Firmware Download Guidance

• New Tool Helps Facebook Users Opt Out Of Data Tracking

• Qbot: The Ever Expanding Malware Family

• Tasmanian Hit by Big Data Breach Confirmed by Minister

• Could infrastructure dollars solve the lack of broadband in public housing?

• The best personal safety alarms of 2023

• Sophos patches three issues in the Sophos Web Security appliance, one of them rated as critical

• Vimeo To Pay $2.25M In AI-Related Biometric Privacy Lawsuit

• Leaked Pentagon Documents Provide Rare Window Into Depth Of US Intelligence On Allies And Foes

• Nexx Fixes Vulnerability By Breaking Customers’ Devices

• Dish Network Lawsuits Pile Up After Crippling Ransomware Attack

• MSI Hit By Cyberattack, Warns Against Installing Knock-Off Firmware

• Oldest Law Practice in NYC Hacked, over 90,000 Clients Impacted

• How to make sure the reputation of your products and company is good

• White House Cybersecurity Strategy warns of “Complex Threat Environment”

• Rilide Malware: Hackers Use Malicious Browser Extension to Bypass 2FA and Steal Crypto

• A New Era of Data Analytics: Exploring the Innovative World of Data Lakehouse Architectures

• Most Attack Paths Are Dead Ends, but 2% Lead to Critical Assets: Report

• Veritas Vulnerabilities Exploited in Ransomware Attacks Added to CISA ‘Must Patch’ List

• Microsoft: Iranian Gov Hackers Caught in Azure Wiper Attacks

• Iran-linked MERCURY APT behind destructive attacks on hybrid environments

• Estonian National Charged in U.S. for Acquiring Hacking-Tools

• AI can Crack Your Password in Seconds, Here’s how to Protect Yourself

• FBI warns against using public phone charging stations

• Alcasec Hacker, aka “Robin Hood of Spanish Hackers,” Arrested

• How LockBit Changed Cybersecurity Forever

• Rethinking Cybersecurity’s Structure & the Role of the Modern CISO

• Hackers Flood NPM with Bogus Packages Causing a DoS Attack

• Estonian National Charged in U.S. for Acquiring Electronics and Metasploit Pro for Russian Military

• When it comes to technology, securing your future means securing your present

• Nexx Garage Door Cyber Vulnerabilities: Risks in Smart Home Security

• Cornwall Mines ‘May Have To Export’ Lithium For EVs

• What’s at Stake for the Ukrainian National Bar Association

• Content Moderation Through the Apple App Store

• Report Details ‘Unauditable’ Chaos At FTX

• Container Security: Top 5 Best Practices for DevOps Engineers

• Detailed Analysis Of The Best Password Managers In 2023

• IDENTITY MANAGEMENT DAY 2023: Advice from Cyber Pros

• Top 10 Cybersecurity Trends for 2023: From Zero Trust to Cyber Insurance

• PC Shipments Slump 29 Percent, Led By Apple

• Okta as Code: Identity Management in the Cloud Native Era

• Report: FTX Collapse Due To ‘Hubris, Incompetence, Greed’

• Hardware Giant MSI Hacked – Ransomware Group Issues Demand

• Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign

• AI: The Double-Edged Sword of Cybersecurity

• How Does Your Snap Score Go Up? 5 Ways to Increase It

• Dutch Government to Adopt RPKI on All Its Networks for Safety Reasons

• Five New Actively Exploited Vulnerabilities Added by CISA to its KEV Catalog

• Protecting your business with Wazuh: The open source security platform

• Samsung employees unwittingly leaked company secret data by using ChatGPT

• Volkswagen To Build EV Academy In China’s Hainan

• BBC Protests ‘Government Funded’ Label On Twitter

• Tesla To Build Major Battery Plant In Shanghai

• Overview of Google Play threats sold on the dark web

• Software developers, how secure is your software?

• CISA Warns of 5 Actively Exploited Security Flaws: Urgent Action Required

• Ransomware gang attacks MSI and demands $4m for decryption

• How to detect and respond to a DDoS network cyber attack

• MSPs urged to refine security solutions in response to growing SMB needs

• Cybercriminals use simple trick to obtain personal data

• 5G connections set to rise past 5.9 billion by 2027

• What is Cloud Mining and How Does it Work?

• Cybercriminals Exploit CAN Injection Hack to Steal Cars

• IT Security News Weekly Summary – Week 14

• IT Security News Daily Summary 2023-04-09

• Researchers disclose critical sandbox escape bug in vm2 sandbox library

• How to Create a Mobile Application for Android OS Step by Step?

• Security Affairs newsletter Round 414 by Pierluigi Paganini – International edition

• Russia’s Far-Right Campaign in Europe

• Estonian National charged with helping Russia acquire U.S. hacking tools and electronics

• How machine learning can help crack the IT security problem

• CISA Moving Further Towards Pre-Emptive Stance with Ransomware Attack Alert System

• MSI Acknowledges Security Breach Following Ransomware Attack Allegations

• eFile.com Hosted Malware on its Website

• APT43: Cyberespionage Group Targets Strategic Intelligence

• Ambient computing is coming; security teams may not be ready

• The impact of remote work on cybersecurity: Tips for staying safe

• Unlocking the Power of Zero Trust Security: 5 Reasons to Adopt the Framework

• Microsoft & Fortra Seeks Court Order to Remove a Ransomware Hacking Tool Targeted Hospitals

• Week in review: Western Digital network security incident, QNAP vulns, Patch Tuesday forecast

• Cyber Security Management System (CSMS) for the Automotive Industry

• CYBERSECURITY INDUSTRY NEWS REVIEW – APRIL 4, 2023

• Amazon Banned Flipper Zero Pentesting Tool

• Popular server-side JavaScript security sandbox “vm2” patches remote execution hole

• How to Create and Manage Groups on iPhone

Generated on 2023-04-16 23:59:15.247448