IT Security News Weekly Summary – Week 16

• IT Security News Daily Summary 2023-04-23

• Zero Trust Network for Microservices With Istio

• What is Single Sign-on (SSO) ? – Solution to Ensure Your Company Data Security

• Linux Malware Set to Be Deployed by North Korean APT Group

• Experts spotted first-ever crypto mining campaign leveraging Kubernetes RBAC

• Can Messaging Apps Locate You? Here’s All You Need to Know

• Why Security Assistance Often Fails

• Deepfake Apps Remain Popular in China Despite Crackdown

• Shadow IT, SaaS Pose a High Security Threat for Businesses

• Do RFID blocking cards actually work? My Flipper Zero revealed the truth

• Hacker Group Names Are Now Absurdly Out of Control

• Security Affairs newsletter Round 416 by Pierluigi Paganini – International edition

• Week in review: 5 free online cybersecurity resources for SMBs, AI tools might fuel BEC attacks

• Cyber Security Management System (CSMS) for the Automotive Industry

• Terravision – 2,075,625 breached accounts

• Cordoniq Newest Competitor in 2023 ‘ASTORS’ Homeland Security Awards

• Abandoned Eval PHP WordPress plugin abused to backdoor websites

• IT Security News Daily Summary 2023-04-22

• The Current State of Wireless (In)security, by Bastille CTO

• ChatGPT Can be Tricked To Write Malware When You Act as a Developer Mode

• CISA adds MinIO, PaperCut, and Chrome bugs to its Known Exploited Vulnerabilities catalog

• DNS Malware Toolkit Discovered by Infoblox and Urged to be Blocked

• ChatGPT may hinder the cybersecurity industry

• For recession-proof security spending, embrace the value of multi-layered integrations

• How to Handle Secrets in Jenkins

• At least 2 critical infrastructure orgs breached by North Korea-linked hackers behind 3CX attack

• Data of 2.5 Lakh Customers Sent to Personal Account by CFPB Employee

• Ransomware Attacks Surge in March 2023

• Summary Of News And Events That Happened This Week

• OpenAI’s Insatiable Need for Data is Coming Back to Harm it

• ChatGPT: A Threat to Privacy?

• First-Ever Cyber Attack Via Kubernetes RBAC to Create Backdoor on Clusters

• Criminals Are Using Tiny Devices to Hack and Steal Cars

• North Korean 3CX Hackers Also Hit Critical Infrastructure Orgs: Symantec

• The Best Laser Cutting Machine Wood: Tech Tips 2023

• 3D Revolution: The Industries Transformed by 3D Modeling – 2023 Guide

• Build or Buy your own antivirus product

• Accidental ‘write’ Permissions In Alibaba PostgreSQL Let Attackers Access Sensitive Data

• European air traffic control confirms website ‘under attack’ by pro-Russia hackers

• Accidental ‘write’ Permissions In Alibaba postgreSQL let Attackers Access Sensitive Data

• CISA Adds 3 Actively Exploited Flaws to KEV Catalog, including Critical PaperCut Bug

• Lazarus X_TRADER Hack Impacts Critical Infrastructure Beyond 3CX Breach

• A10 integrates Next-Gen WAF to enable multi-layered security

• Onapsis updates its platform to strenghten ERP cybersecurity

• Next DLP adds ChatGPT policy to its Reveal platform

• Virsec automates the path to zero trust workload protection

• AuKill – A Malware That Kills EDR Clients To Attack Windows Systems

• Two qudits fully entangled

• Stop This Dangerous Bill That Would Normalize Face Surveillance in California

• Update now, there’s a Chrome zero-day in the wild

• Would-be hitman busted after being fooled by parody website

• US Facebook users can now claim Cambridge Analytica settlement cash

• If Apple allows sideloading in iOS 17, how will iPhone security be affected?

• 2023-04-19 – Quick post: Qakbot (Qbot) activity, distribution tags BB24 and obama254

• Top 10 Citizenship By Investment Programs For IT Firms In 2023

• Microsoft pushes for more women in cybersecurity

• Attackers Continue to Leverage Signed Microsoft Drivers

• Be Lawfare’s Next Director of Development!

• The STOP CSAM Act Would Put Security and Free Speech at Risk

• IT Security News Daily Summary 2023-04-21

• Friday Squid Blogging: More on Squid Fishing

• Most multicloud troubles are self-inflicted, security researchers say

• How local governments can rise to the infrastructure complexity challenge

• Shields Health Breach Exposes 2.3M Users’ Data

• American Bar Association (ABA) suffered a data breach,1.4 million members impacted

• 7 Database Security Best Practices: Database Security Guide

• SSE Decoded: Answers to Your Questions About Secure Service Edge

• Common Vulnerability Scoring System (CVSS)

• ‘EvilExtractor’ All-in-One Stealer Campaign Targets Windows User Data

• North Korea’s Kimsuky APT Keeps Growing, Despite Public Outing

• TSA wants automated ID verification, ML detection algorithms at security gates

• API security becoming C-level cybersecurity concern

• Symantec: North Korean 3CX Hackers Also Hit Critical Infrastructure Orgs

• Intel Prioritizes Security in Latest vPro Chips

• EvilExtractor Infostealer Campaign Targeting Windows OS

• Chromium vulnerabilities threaten Electron app security

• How to vet your vendors: Ensuring data privacy and security compliance

• How Veza helps companies map data access and stop insider threats

• Transit agency’s cloud-based customer service boosts efficiency, visibility

• GhostToken GCP Bug Gives Entry To Attackers Into Google Accounts

• VMware patches break-and-enter hole in logging tools: update now!

• Hacking Pickleball

• Halcyon Secures $50M Funding for Anti-Ransomware Protection Platform

• China Building Cyberweapons To Hijack Enemy Satellites, Says US Leak

• DHS Announces AI Task Force, Security Sprint On China Related Threats

• WhatsApp Used In BEC Scam To Pilfer $6.4M

• APT Mint Sandstorm Quickly Exploits New PoC Hacks

• Shadow IT, SaaS Pose Security Liability for Enterprises

• Criminal Records Service Still Not Working Four Weeks After Cyber Attack

• A Corporate Secret is not Destroyed, it’s Discarded: Threat of Old Routers

• CFPB Employee Sends 256,000 Consumers’ Data to Personal Email

• Indian ICICI Bank data breach exposes 3.8 million customer information

• Identity and Access Management (IAM) in Payment Card Industry (PCI) Data Security Standard (DSS) environments.

• AI/ML advancements outpacing government policies, cyber experts warn

• Evil Extractor Targets Windows Devices to Steal Sensitive Data

• Arizona Teachers’ Sensitive Data Stolen in Ransomware Attack on TUSD

• Hackers are Employing This Top Remote Access Tool to Get Unauthorised Access to Your Company’s Networks

• DevSecOps: AI is reshaping developer roles, but it’s not all smooth sailing

• Trojanized Installers Used to Distribute Bumblebee Malware

• Security a top priority in the software development process, report finds

• Google Cloud Platform Vulnerability Led to Stealthy Account Backdoors

• Five Eyes Agencies Issue Cybersecurity Guidance for Smart Cities

• Abandoned WordPress Plugin Abused for Backdoor Deployment

• How to create an SBOM, with example and template

• Kubernetes RBAC Exploited in Large-Scale Campaign for Cryptocurrency Mining

• Pro-Russia hackers launched a massive attack against the EUROCONTROL agency

• Using the iPhone Recovery Key to Lock Owners Out of Their iPhones

• Cisco and VMware Issues Security Updates For Critical Flaws

• How the Talent Shortage Impacts Cybersecurity Leadership

• The Tangled Web of IR Strategies

• The Black Sea Grain Deal: Fragile Cooperation Between Ukraine and Russia

• Celebrities Lose Blue Ticks, As Twitter Purges Legacy Verified Accounts

• Open Questions After Halkbank

• ICICI Bank Data Leak – Millions of Customers’ Sensitive Data Exposed

• Malware is proliferating, but detection measures bear fruit: Mandiant

• 14 Kubernetes and Cloud Security Challenges and How to Solve Them

• GhostToken Flaw Could Let Attackers Hide Malicious Apps in Google Cloud Platform

• Alphabet To Merge AI Units Deepmind And Google Brain

• Stay Ahead of Cyberthreats with Proactive Threat Hunting

• US Medical Service Data Breach Impacts 2.3M People

• GitHub Announces New Security Improvements

• #CYBERUK23: Five Takeaways From the NCSC Conference on the UK’s Cyber Strategy

• Q1 2023 Cyber Attacks Statistics

• The Rise Of Online Betting Houses In Japan: A Threat To Society Or An Economic Opportunity?

• Microsoft To Remove Twitter From Advertising Platform, Musk Threatens Lawsuit

• Securing our Sustainable Future

• Top Considerations for Securing AWS Lambda, part 1

• Capita Confirms Data Breach After Ransomware Group Offers to Sell Stolen Information

• House Committee Hears Testimony on DC Health Data Breach

• The War on Passwords Enters a Chaotic New Phase

• N.K. Hackers Employ Matryoshka Doll-Style Cascading Supply Chain Attack on 3CX

• Cisco fixed critical flaws in the Industrial Network Director and Modeling Labs solutions

• Cybercriminals Abusing an Abandoned WordPress Plugin for Malicious Code Injection

• International cops urge Meta not to implement secure encryption for all

• The Best Crypto Games For Winning Big

• 3CX Cyber Attack: It Was The Aftermath Of Another Supply-Chain Attack

• 6 Best Marketing Data Extractor Tools for Your Business Needs

• Russian APT28 Group Exploiting Vulnerabilities in Cisco Routers

• Operation DreamJob – New Linux Malware Linked With 3CX Supply-Chain Attack

• Millions of Records With Sensitive Data Leaked by ICICI Bank

• Russia-linked APT28 Group Exploiting Vulnerabilities in Cisco Routers

• Government Agencies Release Blueprint for Secure Smart Cities

• China Developing Anti-Satellite Weapons – Report

• Intro to phishing: simulating attacks to build resiliency

• Healthcare organisations urged to improve system security

• Capita: Data Was Taken in March Cyber Incident

• The Ultimate Guide To Building A Passive Income Portfolio 2023

• 5 Best Airflow PC Cases to Buy in 2023 – Beat the Heat

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Is Twitter Blue Tick removal a data security concern

• Understanding the Different Types and How to Detect Them

• Thanks for fixing the computer lab. Now tell us why we shouldn’t expel you?

• Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products

• Scammers using social media to dupe people into becoming money mules

• New infosec products of the week: April 21, 2023

• The staying power of shadow IT, and how to combat risks related to it

• How Can You Identify and Prevent Insider Threats?

• Bugcrowd’s new self-serve PTaaS enable buyers to manage pen tests directly online

• Cofense Protect+ defends mid-size organizations from cyber threats

• Armorblox releases Graymail and Recon Attack Protection to stop malicious emails

• Sotero Ransomware Protection encrypts data to prevent theft and extortion

• Top three factors leading to burnout at work

• We’ve built A.I. and machine learning into our platform instead of ‘bolting’ them on: Software firm

• Catalyst Award

• Industry Eagle Award

• Government Eagle Award

• Infamous ransomware gang is now trying to target Mac users

• ChatGPT won’t take over from humans for now, says Infosys founder

• 3CX Breach Was a Double Supply Chain Compromise

• ChatGPT won’t take over from humans for now, says founder of Indian tech giant

• Talon Cyber Security collaborates with Microsoft to provide ChatGPT access

• Dashlane launches Confidential SSO powered by AWS Nitro Enclaves

• Intruder joins Google Cloud Partner Advantage program

• Orange Cyberdefense strengthens position in healthcare security sector

• Fancy Bear known to be exploiting vulnerability in Cisco routers

• FTC tackles tech support scams by chasing payment processor firms

• QBot changes tactic, remains a menace to business networks

• What your peers said: G2 comparison of top Endpoint Security vendors

• Multinational ICICI Bank leaks passports and credit card numbers

• Bitsight Expands into Integrated Cyber-Risk Management

• Infoblox Uncovers DNS Malware Toolkit & Urges Companies to Block Malicious Domains

• VMware fixed a critical flaw in vRealize that allows executing arbitrary code as root

• ‘GhostToken’ Opens Google Accounts to Permanent Infection

• Major US CFPB Data Breach Caused by Employee

• 3CX Supply Chain Attack Tied to Financial Trading App Breach

• Red Canary Announces Readiness

• Lazarus APT group employed Linux Malware in recent attacks and was linked to 3CX supply chain attack

• IT Security News Daily Summary 2023-04-20

• New Google Chrome Zero-Day Bug Actively Exploited in Wide – Emergency Update!

• One city’s unexpected open-data benefits

• International Law Enforcement Agencies Condemn Facebook Encryption Plans

• ChatGPT’s other risk: Oversharing confidential data

• Cyberattack accelerates county’s modernization, cloud push

• Fortra completes GoAnywhere MFT investigation

• Cybersecurity still ‘high risk’ in GAO’s book after over 25 years

• Best VPN for streaming TV and movies in 2023

• VMware Patches Pre-Auth Code Execution Flaw in Logging Product

• The Double-edged Sword of Hybrid Work

• Why data gravity is helping cloud providers become cybersecurity companies

• Report highlights procurement innovation hubs that may help achieve White House equity goals

• 6 Mac antivirus options to improve internet security

• S3 Ep131: Can you really have fun with FORTRAN?

• Trigona Ransomware Trolling for ‘Poorly Managed’ MS-SQL Servers

• SECURITY ALERT: Heimdal® Detects Massive MitID Smishing Campaign Targeting Nordea Bank Customers

• EU Agrees Comprehensive Framework For Crypto Regulation

• Data Encryption: Benefits, Types, and Methods

• Microsoft Will Name Threat Actors After Weather Events

• Tech Insight: Dangers of Using Large Language Models Before They Are Baked

• New Ransomware Attack Hits Health Insurer Point32Health

• Fletch raises $12.5 million for NLP engine to scan cyber threat landscape

• AI/ML advancements outpacing federal policies, cyber experts warn

• DC Health Link breach caused by misconfigured server

• Twitter’s 2FA Policy Is a Call for Passkey Disruption

• Experts disclosed two critical flaws in Alibaba cloud database services

• The EARN IT Bill Is Back, Seeking To Scan Our Messages and Photos

• Malware is proliferating, but defenses are stronger: Mandiant

• Microsoft Will Name APTs Actors After Weather Events

• North Korean Hacker Suspected in 3CX Software Supply Chain Attack

• Get ready for RSA 2023: Stronger Together

• SpaceX Starship Rocket Explodes After Launch

• What’s in Your Policy: Insurance Markets and Nation State Cyberattacks

• How prompt injection can hijack autonomous AI agents like Auto-GPT

• US charges three men with six million dollar business email compromise plot

• Daggerfly APT Targets African Telecoms Firm With New MgBot Malware

• Global Spyware Attacks Spotted Against Both New & Old iPhones

• ‘AuKill’ Malware Hunts & Kills EDR Processes

• Google TAG warns of Russia-linked APT groups targeting Ukraine

• Criminal Records Service Still Disrupted 4 Weeks After Hack

• Experts Warn Patching Won’t Protect Critical Infrastructure Against New Age Malware

• Another Supply Chain Attack Discovered During 3CX Investigation

• Crime Agencies Condemn Meta’s Encryption Plans

• Dragos OT-CERT Celebrates One Year of Service

• ChatGPT may be Able to Forecast Stock Movements, Finance Professor Demonstrates

• Microsoft Entra delivers 240 percent ROI, according to new Forrester study

• Cost of state cyber attacks not to be covered under insurance says Lloyd

• US teams up with partner nations to release smart city cyber guidance

• Ransomware Attack Hits Health Insurer Point32Health

• ChatGPT-Related Malicious URLs on the Rise

• Pillars of Threat Blocking-as-a-Service

• Triple Extortion and Erased Data are the New Ransomware Norm

• What Is a Vulnerability Assessment? Types, Steps & Benefits

• Two Critical Flaws Found in Alibaba Cloud’s PostgreSQL Databases

• Daggerfly Cyberattack Campaign Strikes African Telecom Providers

• Companies Affected by Ransomware [2022-2023]

• Sports And Fitness: How Fitness Apps Make Exercise Management Easier

• Jack Dorsey’s Twitter Clone, Bluesky, Launches On Android

• 3 iOS Zero-Click Exploits Exploited by NSO Group to Deploy Spyware

• ChatGPT Unbound

• How to Strengthen your Insider Threat Security

• LockBit Operators Target Apple MacOS Devices

• Air Force Unit in Document Leaks Case Loses Intel Mission

• Cisco Patches Critical Vulnerabilities in Industrial Network Director, Modeling Labs

• Cascading Supply Chain Attack: 3CX Hacked After Employee Downloaded Trojanized App

• Phylum Adds Open Policy Agent to Open Source Analysis Engine

• #CYBERUK23: UK Strengthens Cybersecurity Audits for Government Agencies

• GPT-4 Provides Improved Answers While Posing New Questions

• The Role Of Artificial Intelligence In Detecting And Preventing Problem Gambling In Online Casinos

• Domino Backdoor Malware Created by FIN7 and Ex-Conti

• Tesla Likely To Launch Full Self-Drive ‘This Year’, Says Elon Musk

• The best VPN services for iPhone and iPad in 2023

• Capita has ‘evidence’ customer data was stolen in digital burglary

• The Value of CYBERFORCE — Breakaway 1=5

• Iranian Hackers Target U.S. Energy and Transit Systems

• Seagate hit with $300 million penalty for $1 billion relationship with blacklisted firm Huawei

• Zaraza Malware Exploits Web Browsers To Steal Stored Passwords And Data

• APT43: An investigation into the North Korean group’s cybercrime operations

• Seagate To Pay $300m Penalty Over Huawei Exports

• Newer Authentication Tech a Priority for 2023

• Lazarus Group Adds Linux Malware to Arsenal in Operation Dream Job

• Beyond Traditional Security: NDR’s Pivotal Role in Safeguarding OT Networks

• The Developing Law of AI Regulation: A Turn to Risk Regulation

• UK government employees receive average of 2,246 malicious emails per year

• The Huge 3CX Breach Was Actually 2 Linked Supply Chain Attacks

• Raspberry Robin Adopts Initiates Evasion Techniques

• An earlier supply chain attack led to the 3CX supply chain attack, Mandiant says

• Mandiant: 3CX breach caused by second supply chain attack

• ChatGPT’s Data Protection Blind Spots and How Security Teams Can Solve Them

• Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks

• Russian Hacktivists Shifting Interest to Business Sector, UK Cyber-agency Warns

• Fortra Completes Investigation Into GoAnywhere Zero-Day Incident

• PaperCut Warns of Exploited Vulnerability in Print Management Solutions

• UK Warns of Russian Hackers Targeting Critical Infrastructure

• Proton Pass: new password manager announced

• Meta Lays Off Technical Staffers, In Another Workforce Blow

• Cloud Risk Mitigation: Putting it in Context

• FTC accuses payments firm of knowingly assisting tech support scammers

• Daggerfly Cyberattack Campaign Hits African Telecom Services Providers

• New Zero-Click Exploits Against iOS

• Top 5 Infrastructure as Code Security Challenges

• Cyber Threat Intelligence: The Power of Data

• How to update your router’s firmware (and why you should be doing it regularly)

• NSO Group Used 3 Zero-Click iPhone Exploits Against Human Rights Defenders

• Trigona Ransomware Deployed Through Vulnerable Microsoft SQL Servers

• What is a Customer Data Platform and How Does It Work?

• Google Patched Second Chrome Zero-Day Within A Week

• Preventing Malware & Cyber Attacks: Simple Tips for Your Computer

• Ex-Conti and FIN7 Hackers Team Up To Develop Domino Backdoor Malware

• Salt Security Announce New Investigation Capabilities to Help API Threat Detection

• Revamp Remote Working: The Ultimate Guide To Developing A Comprehensive Digital Communications Strategy

• Sideloading on iOS, Lockbit Ransomware on Mac, and Zero-Day Chrome Vulnerabilities – Intego Mac Podcast Episode 288

• DC Health Link Data Breach Blamed on Human Error

• #CYBERUK23: Russian Cyber Offensive Exhibits ‘Unprecedented’ Speed and Agility

• Recycled Network Devices Exposing Corporate Secrets

• The importance of independent third-party testing of anti-malware solutions

• Designing user management for machine-to-machine interactions

• Critical Infrastructure Firms Concerned Over Insider Threat

• SIEM vs XDR: A Comparison of Two Advanced Detection and Response Solutions

• AI defenders ready to foil AI-armed attackers

• Commscope Ransomware Attack Exposes Sensitive Employee Data

• Small Business Interest in Cyber-Hygiene is Waning

• Protect the Industrial Control Systems (ICS)

• Trigona Ransomware targets Microsoft SQL servers

• Do you know what your supply chain is and if it is secure?

• Protecting Gig Identities – The 7 CIAM Capabilities You Need

• PCI DSS reporting details to ensure when contracting quarterly CDE tests

• ChatGPT Account Takeover Bug Allows Hackers To Gain User’s Online Account

• Trending Google news headlines on Ransomware, Penalties and Espionage

• The biggest data security blind spot: Authorization

• 1Password ending support for classic browser extensions

• Used Routers Fully Loaded With Corporate Secrets for Just $100

• CISOs struggling to protect sensitive data records

• How companies are struggling to build and run effective cybersecurity programs

• Urgent: 2nd Chrome zero-day vulnerability patched in 5 days

• Venafi Firefly enhances the security of machine identities for cloud-native applications

• NICE Actimize launches SAM-10 to detect suspicious activity while reducing false positives

• Picus Security expands its CTEM solution with CAASM and CSPM capabilities

• IT and business services market shows resilience with positive growth outlook

• Outdated cybersecurity practices leave door open for criminals

• Tentacle AI Control Mapping enables organizations to centralize security information

• VMware Cross-Cloud managed services helps customers secure multi-cloud environments

• Daon unveils TrustX platform for identity proofing and authentication

• Oracle updates Fusion Cloud Applications Suite with automation capabilities

• Digi WAN Bonding delivers bonded Gigabit internet speeds and improved connection reliability

• Web3 Onboarding Is Terrible: How To Make It Better With Account Abstraction and Flow

• Dominion v. Fox Is Just the Beginning

• LogRhythm and Zscaler integration streamlines website access control

• Instagram scam promises money in exchange for your image

• Malware authors join forces and target organisations with Domino Backdoor

• Introducing the Malwarebytes Admin app: Endpoint security at your fingertips

• Medusa ransomware crew brags about spreading Bing, Cortana source code

• The 3Cs of Best Security: Comprehensive, Consolidated, and Collaborative

• KnowBe4 Q1 Phishing Report reveals IT and online services emails drive dangerous attack trend

• Appeals court spares Google from $20m patent payout over Chrome

• Appeals court spares Google from $20m patent payout over Chrome sandbox

• Ransomware attacks increased 91% in March, as threat actors find new vulnerabilities

• Warning From UK Cyber Agency For A New ‘Class’ Of Russian Hackers

• 7 Sizzling Sessions to Check Out at RSA Conference 2023

• Russian Fancy Bear APT Exploited Unpatched Cisco Routers to Hack US, EU Gov’t Agencies

• Killnet Boss Exposes Rival Leader in Kremlin Hacktivist Beef

• Russian national sentenced to time served for committing money laundering for the Ryuk ransomware operation

• IT Security News Daily Summary 2023-04-19

• GlobalFoundries Sues IBM, Again

• Coro raises $75M for all-in-one platform to tackle SOC complexity

• Portnox Cloud: NAC Product Review

• European Union Finalises €43bn Chips Act

• The top 20 zero-trust startups to watch in 2023

• Inside one state’s decade-long effort to map broadband availability

• IoT network insights drive smart city planning

• Risk management through resilient technology

• How to prepare for a cybersecurity audit

• Facebook Scores Rare Win In Privacy Case

• CrowdStrike turns to managed XDR to help orgs navigate the cyber skills gap

• House Democrats bring back customer experience bill targeting student loan, passport updates

• CrowdStrike Announces Managed XDR to Close the Cybersecurity Skills Gap, Expands MDR Portfolio

• Coro Raises an Additional $75M Bringing the Total Raised to $155M in 12 Months

• Spyware slinger QuaDream’s reported demise may be the canary in the coal mine

• Point32Health confirms service disruption due to ransomware

• Dashlane releases ‘first’ SSO powered by confidential computing

• The Hacker Who Hijacked Matt Walsh’s Twitter Was Just ‘Bored’

• The Hacker Who Hijacked Matt Walsh’s Twitter Was Just ‘Bored’

• Want a Flipper Zero without paying inflated prices? Now’s your chance

• Google fixed the second actively exploited Chrome zero-day of 2023

• Guidance on network and data flow diagrams for PCI DSS compliance

• Chinese fraudsters: evading detection and monetizing stolen credit card information

• Security at the Masters

• cloud workload protection

• How to defend against TCP port 445 and other SMB exploits

• OT Zero Trust

• Diving Into Cloud Infrastructure: An Exploration of Its Different Components

• The best VPN trials of 2023: Top VPNs to test for free

• #CYBERUK23: Threat Posed by ‘Irresponsible’ Use of Commercial Hacking Tools Increasing, NCSC Warns

• Iranian Nation-State Actor “Mint Sandstorm” Weaponizes N-day Flaws

• Gary Bowser, Former Nintendo Hacker, Released From Prison

• Dominion v. Fox is Just the Beginning

• If you have a tell-a-friend feature on your website, disable it right now

• GitHub debuts pedigree check for npm packages via Actions

• Investors Bet Big on Safe Security for Cyber Risk Management

• Raspberry Robin Adopts Unique Evasion Techniques

• Blind Eagle Cyber Espionage Group Strikes Again: New Attack Chain Uncovered

• Google TAG Warns of Russian Hackers Conducting Phishing Attacks in Ukraine

• Auditing Algorithms for Responsible AI

• Kidnapping Scam Implicates AI Cloning

• Simplified endpoint management with Microsoft Intune Suite: Adopting a long-term approach with intelligence and automation

• Facebook introduces new AI model capable of detecting objects in images

• US must be more aware of ‘adversarial side’ of AI, DHS official warns

• Nurse Call Systems, Infusion Pumps Riskiest Connected Medical Devices

• Call for Papers: The University of Texas at Austin Announces the 2023 “Bobby R. Inman Award” for Student Scholarship on Intelligence

• Google Chrome Hit By Second Zero-Day Attack, Urgent Patch Update Released

• These medical IoT devices carry the biggest security risks

• Dasera Scores $12M Funding for Cloud Data Security

• Russian Man Who Laundered Money for Ryuk Ransomware Gang Sentenced

• Popular Fitness Apps Leak Location Data Even When Users Set Privacy Zones

• US and UK agencies warn of Russia-linked APT28 exploiting Cisco router flaws

• Google Chrome Hit By Second Zero-Day Attack – Urgent Patch Update Released

• Tornado vs. FastAPI: Why We Made the Switch

• firewall

• Akamai Technologies to Acquire API Security Company Neosec

• Imperva and Kong Partner to Bring API Security to the Gateway for Enhanced API Management

• How to Spot and Avoid Phishing Scams While Gambling Online

• Google’s Pixel Fold, Set For June Launch – Report

• Hackers Storing Malware in Google Drive as Encrypted ZIP Files To Evade Detection

• 9 Top Network Access Control (NAC) Solutions for 2023

• How to Prevent 2 Common Attacks on MFA

• Google Chrome Hit by Second Zero-Day Attack – Urgent Patch Update Released

• The Mentality That Finland’s Mandatory Military Service Brings to NATO

• ChatGPT’s Cybersecurity Threats and How to Mitigate Them

• The Importance of Accessible and Inclusive Cybersecurity

• Enterprises Exposed to Hacker Attacks Due to Failure to Wipe Discarded Routers

• NSO Group Escalates Spyware Tactics With 3 New iPhone Zero-Click Exploit Chains

• Four Charged With Pushing Pro-Kremlin Disinfo, Election Interference

• Russian Snoops Just Love Invading Unpatched Cisco Gear, America And UK Warn

• Russia-linked Hackers Want To ‘Destroy’ UK, Minister Warns

• #CYBERUK23: NCSC Urges International Collaboration to Build Cyber Resilience

• Oracle Releases 433 New Security Patches With April 2023 CPU

• Google Patches Second Chrome Zero-Day Vulnerability of 2023

• Pakistani Hackers Use Linux Malware Poseidon to Target Indian Government Agencies

• Top 7 data loss prevention tools for 2023

• APT28 Russian Hackers Inject Routers with Jaguar Tooth Custom Malware

• US Company CommScope Hit by Ransomware

• Are public USB charging stations to be trusted?

• How ChatGPT—and Bots Like It—Can Spread Malware

• Uncovering (and Understanding) the Hidden Risks of SaaS Apps

• Iran-linked Mint Sandstorm APT targeted US critical infrastructure

• Electric Vs. Manual Gaming Desks: Which Is Right For You – 2023 Guide

• US, UK: Russia Exploiting Old Vulnerability to Hack Cisco Routers

• Microsoft: Iranian Hackers Moved From Recon to Targeting US Critical Infrastructure

• Coro Raises $75 Million for Mid-Market Cybersecurity Platform

• U.S. and U.K. Warn of Russian Hackers Exploiting Cisco Router Flaws for Espionage

• EFF on the UN Cybercrime Treaty

• Prioritize what matters most

• UK Government To Deliver Crypto Laws In Next 12 Months – Report

• Hackers Using Old Nokia 3310 Phone to Start Car Without Key

• Police Escape $1.2m Fine For Secretly Recording Phone Calls

• Why Cybercriminals Love The Rust Programming Language

• Privilege Elevation and Delegation Management (PEDM) Explained: Definition, Benefits and More

• Microsoft’s new naming convention for threat groups sound like an order at a cocktail bar

• EPA Has ‘New Rules’ for Protecting Public Drinking Water

• Electrical Grid Security: NERC CIP, Cyber Threats and Key Challenges

• Triple-digit Increase in API and App Attacks on Tech and Retail

• Researchers discover sensitive corporate data on decommissioned routers

• How To Install Shqiperia Chat In PC ( Windows 7, 8, 10, and Mac )

• Netflix Ends DVD By Post, Amid Password-Sharing Crackdown

• These medical IoT devices carry biggest security risks

• NCSC Warns of Destructive Russian Attacks on Critical Infrastructure

• Why performing security testing on your products and systems is a good idea

• Iranian Government-Backed Hackers Targeting U.S. Energy and Transit Systems

• Auto-GPT: New autonomous ‘AI agents’ Can Act Independently & Modify Their Own Code

• The State of Kubernetes Security in 2023

• 5 free online cybersecurity resources for small businesses

• Over 25 billion email address and phone numbers available on dark web and Putin hacking British Power Network

• Is it time to move to a Passwordless future

• PWNYOURHOME, FINDMYPWN, LATENTIMAGE: 3 iOS Zero-Click exploits used by NSO Group in 2022

• Critical Flaws in vm2 JavaScript Library Can Lead to Remote Code Execution

• Quantifying cyber risk vital for business survival

• Ransomware reinfection and its impact on businesses

• Security beyond software: The open source hardware security evolution

• 10 Reasons why businesses need mobile device management (MDM)

• Versa Zero Trust Everywhere strengthens security posture for onsite, remote and hybrid workers

• Tight budgets and burnout push enterprises to outsource cybersecurity

• Veracode Fix helps organizations tackle software security issues

• Phylum adds OPA and continuous reporting to its policy engine

• Armis enables enterprises to identify gaps in security controls with CAASM enhancements

• LastPass University improves password management habits

• Edgio Advanced Bot Management protects users against bot attacks

• Goldoson Android Malware Found in 60 Apps with 100M Downloads

• SIMS a Returning ‘ASTORS’ Sponsor: ‘State of 2023 Facility Security Officer’

• BlackCat (ALPHV) Gang Claims Ransomware Attack on NCR Data Center

• Payment giant’s point-of-sale outage caused by ALPHV ransomware

• Spring cleaning tips for your browser

• Avoid this “lost injured dog” Facebook hoax

• Swatting-as-a-Service is a growing and complicated problem to solve

• LockBit ransomware on Mac: Should we worry?

• Styra appoints Mark Pundsack as CEO

• DigiCert launches new partner program to deliver digital trust

• Allurity acquires CloudComputing and Securix to expand into new markets

• Swimlane collaborates with AWS to accelerate investigation and response when threats occur

• US citizens charged with pushing pro-Kremlin disinfo, election interference

• Scammers target older people online. Here are the 3 warning signs to watch for

• ‘ASTORS’ Sponsor SIMS Software ‘State of 2023 Facility Security Officer’

• Report: Facebook Ignored Reported Hate Speech That Led To Murder

• Netwrix Annual Security Survey: 68% of Organizations Experienced a Cyberattack Within the Last 12 Months

• Report: Over Half of North American Consumers Are Open to Passwordless

• Cyberattacks Can Cost Enterprises Up to 30% of Operating Income According to ThreatConnect

• IT Security News Daily Summary 2023-04-18

• NSO Group is Back in Business With 3 New iOS Zero-Click Exploits

• Marlinspike Adds Charles Carmakal to its Advisory Board

• KnowBe4 Phishing Test Results Reveal IT and Online Services Emails Drive Dangerous Attack Trend

• Giving a Face to the Malware Proxy Service ‘Faceless’

• Russian snoops just love invading unpatched Cisco gear, America and UK warn

• What is Spear Phishing Attack? – Guide for Motives, Techniques & Prevention Methods

• Wanted: 3D mapping drones for indoor search and rescue

• QBot Expands Initial Access Malware Strategy With PDF-WSF Combo

• DoNot APT Hackers Attack Individuals Using Android Malware via Chatting Apps

• GAO says Army procurement plans to replace aging helicopter fleet don’t have credible cost estimates

• Not all encryption is created equal

• Breaking the Wall Between Dev, Sec, and Ops

• Learn To Become a Web3 Developer by Exploring the Web3 Stack

• EU Cyber Solidarity Act aims to establish a ‘European cybersecurity shield’

• New York City to weigh strict facial recognition ban

• Microsoft opens up Defender threat intel library with file hash, URL search

• 10 best antivirus software for businesses in 2023

• Researchers Discover First Ever Major Ransomware Targeting macOS

• OpenShift vs. Kubernetes: The Unfair Battle

• Cybersecurity Consolidation — What It Is and Why You Should Care

• New DDoS attacks on Israel’s enterprises, infrastructure should be a wake-up call

• Experts temporarily disrupted the RedLine Stealer operations

• Microsoft Vulnerability Severity Classification for Online Services Publication

• Payments firm accused of aiding ‘contact Microsoft about a virus’ scammers must cough $650k

• Report: Security teams take an average of 6 days to resolve alerts

• Standardized data collection methods can help fight cybercrime

• Where There’s No Code, There’s No SDLC

• On Tax Day, it’s time for a more equitable and accessible way to file

• Tanium Helps to Increase Employee Satisfaction and Productivity with DEX

• Ex-CEO of breached pyschotherapy clinic gets prison sentence for bad data security

• APT41 Taps Google Red Teaming Tool in Targeted Info-Stealing Attacks

• Goldoson Malware Hits 100 Million Downloads On Google Play Store

• Demystifying Data Fabric Architecture: A Comprehensive Overview

• Secure-by-Design: A 2023 Cybersecurity Prime

• GSA unveils new USA.gov websites

• Virginia election officials change process for removing dead people from voter rolls

• New ‘Domino’ Malware Linked to FIN7 Group, Ex-Conti Members

• Takedown of GitHub Repositories Disrupts RedLine Malware Operations

• Why Your Anti-Fraud, Identity & Cybersecurity Efforts Should Be Merged

• Chrome, Edge Browsers Targeted In Zaraza Bot Malware Attacks

• The Car Thieves Using Tech Disguised Inside Of Old Nokia Phones And Bluetooth Speakers

• New Lockbit Variant Targets MacOS, Another Relies On Conti Source Code

• Hikvision Denies Leaked Pentagon Spy Claim

• Digital Rights Updates with EFFector 35.5

• The best home automation systems of 2023

• Goldoson Malware Found in Dozens of Google Play Store Apps

• ‘Goldoson’ Malware Sneaks into Google Play Apps, Racks Up 100M Downloads

• KOTRA and KISIA will showcase 10 Korean cybersecurity companies at RSA Conference 2023

• Securely Hosting User Data in Modern Web Applications

• Cyber Attack news headlines trending on Google

• New resources to defend public health systems against cyber threats

• NSO Group Used at Least 3 iOS Zero-Click Exploits in 2022: Citizen Lab

• SpecterOps Scores $25M Funding to Secure ID Attack Paths

• MuddyWater Uses SimpleHelp to Target Critical Infrastructure Firms

• Armis Identifies the Riskiest Medical and IoT Devices in Clinical Environments

• Payment Processing Giant NCR Global Hit By Ransomware Attack

• NSO Group’s Pegasus Spyware Found on High-Risk iPhones

• Armis Announces Significant Business Momentum in Healthcare

• You Should Be Concerned Regarding Browser Modifiers; Here’s Why

• Elon Musk Says He’ll Create ‘TruthGPT’ to Counter AI ‘Bias’

• Hackers Exploit Action1 RMM in Ransomware Attacks

• Latitude Financial Breaches Customer Data, Coles Warns

• Nation-state threat actor Mint Sandstorm refines tradecraft to attack high-value targets

• Microsoft shifts to a new threat actor naming taxonomy

• New DDoS attacks on Israel’s enterprises should be a wake-up call

• YouTube Videos Distributing Aurora Stealer Malware via Highly Evasive Loader

• The Manhattan District Attorney Sued Jim Jordan. Why? And What Now?

• Water Wars: AUKUS Goes Nuclear

• Beyond CVEs: The Key to Mitigating High-Risk Security Exposures

• CISA adds bugs in Chrome and macOS to its Known Exploited Vulnerabilities catalog

• Phishing Operations Escalating As Threat Actors Utilize AI Tools

• How Online Casinos Partner With Video Game Developers To Create Unique Gaming Experiences ?

• Brit cops rapped over app that recorded 200k phone calls

• Swedish Radio Quits Twitter, Joining Others

• Securing Your Remote Workforce: How to Reduce Cyber Threats

• Lockr Raises $2.5 Million for Identity and Data Protection Platform

• Mandiant 2023 M-Trends Report Provides Factual Analysis of Emerging Threat Trends

• Recycled Core Routers Exposed Sensitive Corporate Network Info

• Alibaba Integrates AI Chatbot Into Collaboration App

• Mandiant: 63% of breaches were discovered externally in 2022

• Cyber Intrusion Detection Time at an All-Time Low

• ZeroFox Acquires LookingGlass

• As Consumer Privacy Evolves, Here’s How You Can Stay Ahead of Regulations

• New Solution: Learn Enterprise

• Guarding Against Insider Threats

• 10 Best Anonymous Instagram Story Viewer Apps (Free and Legal)

• Cyberinsurance Backstop: Can the Industry Survive Without One?

• Used Routers Often Come Loaded With Corporate Secrets

• Goldoson Android Malware Infects Over 100 Million Google Play Store Downloads

• SpecterOps raises $25M for attack path analysis to show hacker’s perspective

• DFIR via XDR: How to expedite your investigations with a DFIRent approach

• Apple MacOS Devices Now Subject Of LockBit Ransomware

• TUC Warns Workers Left Exposed To AI-Made Decisions

• WhatsApp, Signal Claim Online Safety Bill Threatens User Privacy and Safety

• Using LLMs to Create Bioweapons

• Wrong time to weaken encryption, UK IT chartered institute tells government

• Tim Cook Opens First Apple Store In India

• Retail Giant Walmart Ranks First in List of Brands Most Likely to be Imitated in Phishing Attempts in Q1 2023

• Cybersecurity M&A Roundup for April 1-15, 2023

• CISA Adds Chrome, macOS Bugs to Known Exploited Vulnerabilities Catalog

• Rheinmetall Suffers Another Cyberattack – Company Operations Still Functional

• New ”Domino” Malware Strain Targets Corporate Networks

• Iranian Hackers Using SimpleHelp Remote Support Software for Persistent Access

• Malware found in James Webb Space Telescope revealed by US President Joe Biden

• Hikvision Denies Illegally Supplying US Government

• Embracing Automation to Unlock New Innovations

• Cloud Security Alerts Take Six Days to Resolve

• The intricate relationships between the FIN7 group and members of the Conti ransomware gang

• Creative Software Maker Affinity Informs Customers of Forum Breach

• An Analysis of the BabLock (aka Rorschach) Ransomware

• 5 Types of Cyber Crime Groups

• WhatsApp, Other Messaging Firms Urge Online Safety Bill ‘Rethink’

• Digital Home Hygiene Checklist | Avast

• Fortra: Your Cybersecurity Ally

• A Day in the Life of a SOC Team

• Conversational Attacks Fastest Growing Mobile Threat

• How To Install Happymod In PC ( Windows 7, 8, 10, 11, and Mac )

• UK’s SMEs to Benefit From New Cyber Advisors

• March 2023 Cyber Attacks Statistics

• Ransomware Hackers Steal Sensitive Charity Data

• Quest Software Podcast: The Democratisation of Data: Episode 3: Management, Trust, and Visibility

• After BlackCat Ransomware Attack, NCR Suffers Aloha POS Outage

• Need to improve the detection capabilities in your security products?

• LockBit Ransomware Now Targeting Apple macOS Devices

• RSA Conference 2023: Meet Thales Where the World Talks Security!

• Podcast Episode: Safer Sex Work Makes a Safer Internet

• Capita IT breach gets worse as Black Basta claims it’s now selling off stolen data

• Phishing Attacks Surge as Threat Actors Leverage New AI Tools

• New Android Malware Infecting 60 Google Play Apps with Over 100M Installs

• Israeli surveillance firm QuaDream is shutting down amidst spyware accusations

• Wargaming an effective data breach playbook

• US alleges China created troll army that tried to have dissidents booted from Zoom

• Implementing a zero-trust system that uses workload identity across a service mesh in Kubernetes

• Imperva is an Overall Leader in the 2023 KuppingerCole Leadership Compass Data Security Platforms Report

• Pre-pandemic techniques are fueling record fraud rates

• Balancing cybersecurity with business priorities: Advice for Boards

• Military helicopter crash blamed on failure to apply software patch

• D3 Security Smart SOAR improves response to incidents

• Battery Bird protects customers from vulnerabilities in public Wifi networks

• Zyxel SCR 50AXE boosts network security for small businesses and remote workers

• Imperva collaborates with Fortanix to provide end-to-end data security

• LockBit Ransomware Expands Attack Spectrum to Mac Devices

• Woman tracks down and turns table on Airbnb scammer

• Update Chrome now! Google patches actively exploited flaw

• Beware: Fake IRS tax email wants your Microsoft account

• Ransomware in Germany, April 2022 – March 2023

• Living Off the Land (LOTL) attacks: Detecting ransomware gangs hiding in plain sight

• lockr raises $2.5 million to help customers take control of their personal identity and data

• Mobb raises $5.4 million and launches community tool

• How to create Portainer teams for restricted development access

• States abandon access to shared voter registration data

• FIN7, Former Conti Gang Members Collaborate on ‘Domino’ Malware

• New QBot campaign delivered hijacking business correspondence

• NCR Datacenter Affected By Massive Ransomware Attack

• LockBit crew cooks up half-baked Mac ransomware

• IT Security News Daily Summary 2023-04-17

• The best travel VPNs of 2023: Expert tested

• lockr Raises $2.5M

• Microsoft Azure Key Vault

• OPSWAT MetaAccess: NAC Product Review

• NSA’s National Centers for Academic Excellent (NCAE) Cyber Games to Hold National Finals on April 22

• Google Issues Emergency Chrome Update for Zero-Day Bug

• Chinese Cops Ran Troll Farm and Secret NY Police Station, US Says

• GAO wants Air Force, Navy plans for directed energy weapons to transition the ‘valley of death’

• How digital twins can enrich emergency response

• Pen Testers Need to Hack AI, but Also Question Its Existence

• Montana could be first state to ban TikTok

• How CISOs Can Craft Better Narratives for the Board

• Apple’s Macs Have Long Escaped Ransomware. That May Be Changing

• Google Uncovers “APT41” Tools Targeting Media And Job Sites

• Aloha PoS Restaurant Software Downed by Ransomware Attack

• How to establish network security for your hybrid workplace

• E-mail header analysis

• Goldoson Android Malware Target Korean Users Via Legit Apps

• Examine a captured packet using Wireshark

• From Zero to Hero: Learning Web3 With Infura and Python

• Why unifying endpoints and identities is the future of zero trust

• Child Advocates Blast Facebook For “Appalling” Push To Let Kids In Metaverse

• LockBit Ransomware Samples for Apple Macs Hint at New Risks for macOS Users

• Name That Toon: Lucky Charm

• New QBot Banking Trojan Campaign Hijacks Business Emails to Spread Malware

• Israeli Spyware Vendor QuaDream to Shut Down Following Citizen Lab and Microsoft Expose

• It’s 2023 – You MUST Know The SaaS Applications Your Employees Are Using

• USDA aims to build in-house tech talent, CX expertise with new digital services team

• Protect intellectual property with Govern 365 and Microsoft Purview

• What is Discord? An internet researcher explains the social media platform at the center of Pentagon leak of top-secret intelligence

• Montana Becomes First US State to Pass TikTok Ban

• This New Cybercrime Group Uses Ransomware to Target Businesses

• The Montana Legislature Banned TikTok

• Hackers Selling ChatGPT Premium Accounts On the Dark Web

• Embedded Systems Security Vulnerabilities and Protection Measures

• Report finds 82% of open-source software components ‘inherently risky’

• Ransomware Attack Hits Payments Giant NCR’s Datacenter

• Who’s Tackling Classified AI?

• Can Whistleblowing Save Tech?

• The Main Trends In The Development Of Mobile Application

• See product news and on-demand sessions from Microsoft Secure

• How to make sure the reputation of your products and company is good

• LockBit Ransomware gang focusing on MacOS

• OpenAI ChatGPT Bug Bounty Program Rewards Upto $20k

• NIST wants to mitigate smart home telehealth cybersecurity risks

• The Security and Productivity Implications of Low Code/No Code Development

• Qbot Banking Trojan Increasingly Delivered Via Business Emails

• Chinese App Uses Android Flaw To Spy On Users, CISA Warns

• QuaDream, Israeli iPhone hacking spyware firm, to shut down

• Credential harvesting malware appears on deep web

• How to build a cybersecurity deception program

• FBI and FCC warn about “Juicejacking” – but just how useful is their advice?

• Friendly Hacker, Keren Elazari, to Announced as Keynote Speaker at Infosecurity Europe 2023

• Zero Day In Google Chrome Patched: Bug Exploited In The Wild

• Mass Layoffs and Corporate Security Risks

• What’s the Difference Between CSPM & SSPM?

• FIN7 and Ex-Conti Cybercrime Gangs Join Forces in Domino Malware Attacks

• Cryptocurrency Scams: How to Detect and Avoid Them

• SpaceX Postpones Starship Launch, Citing Technical Glitch

• Shadow and Zombie APIs: How to Minimize Vulnerabilities

• How Zero Trust Changed the Course of Cybersecurity

• ZeroFox to Acquire Threat Intelligence Firm LookingGlass for $26 Million

• Top 5 Data Security RSAC 2023 Sessions to Attend

• China-linked APT41 group spotted using open-source red teaming tool GC2

• How To Win From Online Roulette

• Photographer Refuses Major Award For Image Created Using AI

• Marketing biz sent 107 million spam emails… to just 437k people

• Why IT Outsourcing Services are Vital for B2B Companies?

• Google Patched High-Severity Zero-Day Flaw With Latest Chrome Release

• Education Firm Offers GPT-4 Powered Tool Amidst Controversy

• Are Smart Home Devices Invading Your Privacy?

• Tour of the Underground: Master the Art of Dark Web Intelligence Gathering

• Google Uncovers APT41’s Use of Open Source GC2 Tool to Target Media and Job Sites

• Tencent ‘Enters Mass Production’ With Video Chip

• LockBit Ransomware Group Developing Malware to Encrypt Files on macOS

• Vice Society gang is using a custom PowerShell tool for data exfiltration

• Top 8 in-demand cybersecurity jobs for 2023 and beyond

• ICE Records Reveal How Agents Abuse Access to Secret Data

• Swatting as a Service

• US Congress Targets China’s Shein, Temu In Latest Backlash

• The Power of Zero Trust in DevOps Supply Chains

• How to Protect Your Ecommerce Site from Cybersecurity Threats

• UK Government (Kind Of) Bans TikTok

• SpaceX Prepares To Launch Most Powerful Rocket Ever Made

• Mobb Raises $5.4 Million in Seed Funding for Automatic Vulnerability Fixing Tool

• Payments Giant NCR Hit by Ransomware

• Experts warn of an emerging Python-based credential harvester named Legion

• QBot banker delivered through business correspondence

• How to Turn Off Phone Without Power Button (Android and iPhone) – A Complete Guide

• Firmware is on shaky ground – let’s see what it’s made of

• Silicon UK In Focus Podcast: Privacy-Preserving Machine Learning

• Spyware Company QuaDream Set to Close

• Vice Society Ransomware Using Stealthy PowerShell Tool for Data Exfiltration

• Sega Offers £625m For Studio Behind ‘Angry Birds’

• CISA: Patch Bug Exploited by Chinese E-commerce App

• Anti-malware tests: How to interpret them

• Cybersecurity in the Energy Sector: Risks and Mitigation Strategies

• What Is Microsegmentation and 5 Compelling Security Use Cases

• Police Crack Comms to Bust Money Laundering Group

• New Zaraza Bot Credential-Stealer Sold on Telegram Targeting 38 Web Browsers

• Software developers, how secure is your software?

• Western Digital Hack – Attackers Demanding “Minimum 8 Figures” as Ransom

• Student requested access to research data. And waited. And waited. And then hacked to get root

• What Are Computer Worms And How To Prevent Them

• Economic uncertainty drives upskilling as a key strategy for organizations

• WhatsApp introduces new mobile security features

• How reliable are Cloud based Security solutions

• API security: the new security battleground

• AI verification systems give businesses an edge over scammers

• AI tools like ChatGPT expected to fuel BEC attacks

• 10 Best Zippyshare Alternatives – Best File Sharing Services

• Update now: Google emits emergency fix for zero-day Chrome vulnerability

• On Validation, pt II

• 5 DNS Troubleshooting Tips for Network Teams

• Securing MQTT With Username and Password Authentication

• IT Security News Weekly Summary – Week 15

• IT Security News Daily Summary 2023-04-16

• Experts found the first LockBit encryptor that targets macOS systems

• Keeper Security Newest Competitor in 2023 Homeland Security Awards

• Urgent Update: Chrome, Edge, Brave browsers patch zero-day vulnerability

• Dridex malware, the banking trojan

• How Can You Identify and Prevent Insider Threats?

• Identity and Access Management (IAM) in Payment Card Industry (PCI) Data Security Standard (DSS) environments.

• Email Security Guide: Protecting Your Organization from Cyber Threats

• Why Is Vladimir Putin So Difficult to Deter?

• NCR was the victim of BlackCat/ALPHV ransomware gang

• Security Affairs newsletter Round 415 by Pierluigi Paganini – International edition

• Russian APT Hackers Increasingly Attacking NATO Allies in Europe

• Defense Leak Case Arrests 21-year-old Air Force Guardsman

• Russian SolarWinds Attackers Launch New Wave of Cyber Espionage Attacks

• Deploying confidential containers on the public cloud

• EU Privacy Watchdog Forms ChatGPT Task Force

• Remcos RAT campaign targets US accounting and tax return preparation firms

• Behind the Attack: Account Takeover (ATO)

• Week in review: Microsoft patches zero-day, Apple security updates, HashiCorp Vault vulnerability

• Cyber Security Management System (CSMS) for the Automotive Industry

• Lynis – Open Source Security Auditing & Pentesting Tool – 2023

• KeePassXC security audit published, recommends this security setting

• Snowflake Manufacturing Data Cloud improves supply chain performance

• CYFIRMA raises an undisclosed amount in Pre-Series B funding for product innovation

• Khoros and Cerby join forces to secure social media platforms

• Tentacle partners with Oread Risk & Advisory to simplify SOC 2 compliance for organizations

Generated on 2023-04-23 23:59:17.439007