IT Security News Weekly Summary – Week 21

• IT Security News Daily Summary 2024-05-26

• Becoming Resilient to The Cyber Incidents of Today And Tomorrow

• Shut the back door: Understanding prompt injection and minimizing risk

• Anatomy Of an Endpoint Attack: How A Cyberattack Can Compromise an Enterprise Network

• CERT-UA warns of malware campaign conducted by threat actor UAC-0006

• 4 Reasons Why SaaS Security Must Change | Grip

• OpenSSL Is Hiring

• USENIX Security ’23 – ARGUS: Context-Based Detection of Stealthy IoT Infiltration Attacks

• Don’t Be a Victim: How to Avoid Digital House Arrest

• Google Issues Emergency Update for New Chrome Vulnerability

• Truecaller Introduces AI Voice Feature for Personalized Call Responses

• Invest in Future-Proofing Your Cybersecurity AI Plan

• Adapting Cybersecurity Policies to Combat AI-Driven Threats

• Microsoft Uncovers Moroccan Cybercriminals Exploiting Gift Card Scams

• Security Affairs newsletter Round 473 by Pierluigi Paganini – INTERNATIONAL EDITION

• Navigating the AI Revolution: The Global Battle for Tech Supremacy

• YARA 4.5.1 Release, (Sun, May 26th)

• What is Azure Identity Protection and 7 Steps to a Seamless Setup

• Week in review: Google fixes yet another Chrome zero-day exploit, YouTube as a cybercrime channel

• Malware-laced JAVS Viewer deploys RustDoor implant in supply chain attack

• Fake AV websites used to distribute info-stealer malware

• pcTattletale – 138,751 breached accounts

• IT Security News Daily Summary 2024-05-25

• USENIX Security ’23 – Network Detection of Interactive SSH Impostors Using Deep Learning

• The modern CISO: Scapegoat or value creator?

• Grab the best weatherproof Wyze Cam alternative for just $40 this Memorial Day right now

• Spyware app pcTattletale was hacked and its website defaced

• PSNI Faces £750,000 Fine for Major Data Breach

• Gurugram: Deputy Manager Arrested For Providing Bank Details To Cyber Thieves

• Massive Cyber Attack on MoD Raises Job Concerns for Army Staff

• Microsoft’s Windows 11 Recall Feature Sparks Major Privacy Concerns

• Enhancing Cyber Resilience in Banking: Leveraging Live Patching to Combat Rising Threats

• Data Leak Exposes 500GB of Indian Police, Military Biometric Data

• The OG of Instant Messaging ICQ Shutting Down

• Top Cyber Security Companies in Bangalore

• Hidden Cyber Threat Exposed After Six Years

• Securing Trust: How to Partner With Customers to Build World-Class Cybersecurity Solutions

• Microsoft’s New Recall AI Tool May Be a ‘Privacy Nightmare’

• MITRE December 2023 attack: Threat actors created rogue VMs to evade detection

• Experts Find Flaw in Replicate AI Service Exposing Customers’ Models and Data

• csvkit, (Sat, May 25th)

• Cybercriminals Exploit Cloud Storage for SMS Phishing Scams

• Beware of HTML Masquerading as PDF Viewer Login Pages

• NSA Issues Guidance for Maturing Application, Workload Capabilities Under Zero Trust; Dave Luber Quoted

• Cyber Signals: Inside the growing risk of gift card fraud

• Sharp Dragon Expands Towards Africa and The Caribbean

• Mandatory reporting for ransomware attacks? – Week in security with Tony Anscombe

• Man behind deepfake Biden robocall indicted on felony charges, faces $6M fine

• Courtroom Recording Software Compromised in Supply Chain Attack

• Best Buy and Geek Squad were most impersonated orgs by scammers in 2023

• How to Recover Deleted Emails from Exchange Server?

• IT Security News Daily Summary 2024-05-24

• An XSS flaw in GitLab allows attackers to take over accounts

• ShrinkLocker Ransomware Leverages BitLocker for File Encryption

• Suspected supply chain attack backdoors courtroom recording software

• Cyber Security Today, Week in Review for week ending May 24, 2024

• USENIX Security ’23 – Detecting Union Type Confusion in Component Object Model

• Top Cloud Services Used for Malicious Website Redirects in SMS Scams

• Resolving the Zero Trust Encryption Paradox

• The best VPN for streaming in 2024: Expert tested and reviewed

• Apple explains why iOS 17.5 restored your deleted photos – and what you can do now

• The Rise and Risks of Shadow AI

• Black Basta Ascension Attack Redux — can Patients Die of Ransomware?

• Case Study: Implementing an Anti-Phishing Product and Take-Down Strategy

• Attempts to Regulate AI’s Hidden Hand in Americans’ Lives Flounder in US Statehouses

• Evolving Detection Engineering Capabilities with Breach & Attack Simulation (BAS)

• Understanding the SOC 2 Certification

• Beware: These Fake Antivirus Sites Spreading Android and Windows Malware

• Hackers Created Rogue VMs to Evade Detection in Recent MITRE Cyber Attack

• The best VPN services for iPhone and iPad in 2024: Expert tested and reviewed

• Cisco Meraki Secures the Postman “Best API Award”

• New Ransomware Gang exploits Microsoft Bitlocker to lockup databases

• US Probe Of Waymo Uncovers More Incidents – Report

• How FHE Technology Is Making End-to-End Encryption a Reality

• USENIX Security ’23 – Mitigating Security Risks in Linux with KLAUS: A Method for Evaluating Patch Correctness

• APT41 Strikes Again: Attacks Italian Industry Via Keyplug Malware

• Mike Lynch Defends Himself At HP-Autonomy Trial In US

• Fake Accounts Proliferating On X, Study Warns

• BloodAlchemy Malware Used to Target Government Agencies in Southern and Southeastern Asia

• CISOs Pursuing AI Readiness Should Start by Updating Their Email Security Policy

• Cybersecurity Insights with Contrast CISO David Lindner | 5/24/24

• Shadow IT Surge Poses Growing Threat to Corporate Data Security

• Cloud Security Fundamentals: Understanding the Basics

• Cisco Releases May 2024 Cisco ASA, FMC, and FTD Software Security Publication

• Three-Year-Old Apache Flink Flaw Now Under Active Attack

• Bugcrowd Buys Informer to Enhance Attack Surface Management

• Morocco-based Cybercriminals Cashing in on Bold Gift Card Scams

• The Critical Role of Training and Phishing Testing in Safeguarding Financial Data

• US pharma giant Cencora says Americans’ health information stolen in data breach

• Google fixes eighth actively exploited Chrome zero-day this year, the third in a month

• High-Severity GitLab Flaw Lets Attackers Take Over Accounts

• Wanna Make Big Tech Monopolies Even Worse? Kill Section 230

• Have You Been Defrauded? This Scam Survival Toolkit Can Help You Recover

• YouTube Emerging as a Hotspot for Cyber Threats: Avast Report

• EPA Report Reveals Cybersecurity Risks in U.S. Water Systems

• AI Seoul Summit: 4 Key Takeaways on AI Safety Standards and Regulations

• Get a Lifetime of 1TB Cloud Storage for Only $80 With FolderFort

• US drug maker Cencora says Americans’ health information stolen in data breach

• Cyber Force Provision Gets House Committee’s Approval

• Fake Antivirus Websites Deliver Malware to Android and Windows Devices

• Health Information Published Online After MediSecure Ransomware Attack

• 5 Patch Management Best Practices for Success in 2024

• CISOs in Australia Urged to Take a Closer Look at Data Breach Risks

• Machine Identities Lack Essential Security Controls, Pose Major Threat

• Google Fixes Eighth Actively Exploited Chrome Zero-Day This Year

• Averlon Emerges From Stealth Mode With $8 Million in Funding

• JAVS Courtroom Audio-Visual Software Installer Serves Backdoor

• Hackers Weaponizing Microsoft Access Documents To Execute Malicious Program

• Unveiling CNAPP+P: The Extra Mile in Cyber Defense

• AI and Automation in the Race to Reduce Attack Dwell Time

• Monetize Magnet – Understanding What This Crypto CPA Network Provides to Affiliate Marketers

• Courtroom Recording Software Compromised With Backdoor Installer

• A Transformative Landscape in Legal Technology: From the Past to AI-Powered Future

• Chinese Hackers Stay Hidden On Military And Government Networks For Six Years

• NSA Releases Guidance On Zero Trust Maturity To Secure Application From Attackers

• Kinsing Malware Attacking Apache Tomcat Server With Vulnerabilities

• Microsoft Warns Of Storm-0539’s Aggressive Gift Card Theft

• White House Seeks Critical Cyber Assistance for Water Utilities, Healthcare

• In Other News: China’s Undersea Spying, Hotel Spyware, Iran’s Disruptive Attacks

• Russian Hackers Shift Tactics, Target More Victims with Paid Malware

• DNSBomb : A New DoS Attack That Exploits DNS Queries

• Ireland Police Facing Nearly a Million-Dollar Fine After Data Breach Exposes Officers’ Details

• Chinese Cyberespionage Campaign Targets Governmental Entities in the Middle East, Africa, and Asia

• SoSafe Human Risk OS reduces human-related security risks

• How Do Hackers Blend In So Well? Learn Their Tricks in This Expert Webinar

• Malicious PyPI & NPM Packages Attacking MacOS Users

• CISA adds Apache Flink flaw to its Known Exploited Vulnerabilities catalog

• On the Zero-Day Market

• APT41 Deploys KeyPlug Backdoor Against Italian Industries

• Chinese State-Backed Hackers Turn to Massive ORB Proxy Networks to Evade Detection

• What are the Hallmarks of Strong Software Security?

• CISO Cite Human Error as Top IT Security Risk

• Google Detects 4th Chrome Zero-Day in May Actively Under Attack – Update ASAP

• DevOps Dilemma: How Can CISOs Regain Control in the Age of Speed?

• Mike Lynch Defends Himself At HP, Autonomy Trial In US

• 11 Cloud Security Best Practices & Tips in 2024 + Free Checklist

• Bolster Raises $14M Led by Microsoft’s M12

• LockBit Ransomware Gang Claims Responsibility for London Drugs Cyberattack

• US retailers under attack by gift card-thieving cyber gang

• Microsoft: Gift Card Fraud Rising, Costing Businesses up to $100,000 a Day

• Cyberattacks are Good for Security Vendors, and Business is Booming

• Japanese Experts Warn of BLOODALCHEMY Malware Targeting Government Agencies

• Courtroom Software Backdoored to Deliver RustDoor Malware in Supply Chain Attack

• Cybersecurity News: Chinese hack military, search engine outage, Mattis speaks out

• Usage of TLS in DDNS Services leads to Information Disclosure in Multiple Vendors

• US Man Gets 10 Years for Laundering Cash From Online Fraud

• Google Patches Fourth Chrome Zero-Day in Two Weeks

• Ekran System Enhances Privileged Access Management: New Workforce Password Management Feature

• Huntress adds Active Remediation and macOS coverage to its EDR solution

• Cyber Security Today, May 24, 2024 – A threat actor leverages Windows BitLocker in ransomware attacks, beware of ORB networks, and more

• Beware Of HTML That Masquerade As PDF Viewer Login Pages

• Get a Lifetime Subscription of FastestVPN for just $32

• UK Government in $10.8m Bid to Tackle AI Cyber-Threats

• Why Shareable SBOMs are Essential for Software Security

• Fake Pegasus Spyware Strains Populate Clear and Dark Web

• Recall feature in Microsoft Copilot+ PCs raises privacy and security concerns

• Pakistani-Aligned APT36 Targets Indian Defense Organizations

• Optimizing CI/CD Security: Best Practices for a Robust Software Delivery Pipeline

• Illumio and Netskope join forces to strengthen enterprise resilience against cyberattacks

• Google fixes yet another Chrome zero-day exploited in the wild (CVE-2024-5274)

• Picus Security introduces security validation for Kubernetes

• Introducing Nimfilt: A reverse-engineering tool for Nim-compiled binaries

• Microsoft President Set to Testify Before Congress on ‘Security Shortcomings’

• Code42 partners with Mimecast to protect organizations from data leaks

• Operation SpecTor: Authorities Seized Dark Markets Offering Illicit Goods

• Gift Card Fraud on the Rise: Storm-0539 and Their Deceptive Techniques

• Cryptojacking Alert: GhostEngine Disables Endpoint Protections

• Leveraging Data Consolidation to Strengthen Cybersecurity: A Comprehensive Approach

• Product showcase: Alert – Data breach detector for your email, credit card, and ID

• US to stop GPS data communication from Foreign Satellites

• Fail2Ban: Ban hosts that cause multiple authentication errors

• Worried about job security, cyber teams hide security incidents

• Despite increased budgets, organizations struggle with compliance

• Effective GRC programs rely on team collaboration

• New infosec products of the week: May 24, 2024

• ISC Stormcast For Friday, May 24th, 2024 https://isc.sans.edu/podcastdetail/8996, (Fri, May 24th)

• 6 Factors to Consider When Choosing a SIEM Solution

• 2024: The Year of Secure Design

• Ad Protect: Mastering the Detection of Bot-Driven Ad Fraud

• Three-year-old Apache Flink flaw under active attack

• Three-year-old Apache Flink flaw now under active attack

• Stark Industries Solutions: An Iron Hammer in the Cloud

• NETMundial+10 Multistakeholder Statement Pushes for Greater Inclusiveness in Internet Governance Processes

• IT Security News Daily Summary 2024-05-23

• Efficient Document Merging Strategies for Professionals

• Here’s yet more ransomware using BitLocker against Microsoft’s own users

• Leading LLMs Insecure, Highly Vulnerable to Basic Jailbreaks

• Compromised courtroom recording software was served from vendor’s official site

• The SEC slaps NYSE’s parent company with a $10M fine for not immediately reporting a hack

• Casino cyberattacks put a bullseye on Scattered Spider – and the FBI is closing in

• Anthropic’s Generative AI Research Reveals More About How LLMs Affect Security and Bias

• Apple API Allows Wi-Fi AP Location Tracking

• Elon Musk Disagrees With US Tariffs On Chinese EVs

• Google guru roasts useless phishing tests, calls for fire drill-style overhaul

• IBM X-Force Report: Grandoreiro Malware Targets More Than 1,500 Banks in 60 Countries

• US Intelligence Agencies’ Embrace of Generative AI Is at Once Wary and Urgent

• GitHub Issues Patch for Critical Exploit in Enterprise Server

• Apple and Google are taking steps to curb the abuse of location-tracking devices — but what about others?

• WhatsApp Engineers Fear Encryption Flaw Exposes User Data, Memo

• He Trained Cops to Fight Crypto Crime—and Allegedly Ran a $100M Dark-Web Drug Market

• CISA Warns of Actively Exploited Apache Flink Security Vulnerability

• Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming Pattern

• Former Cybersecurity Boss Warns UK Not Heeding China Threat

• He Trained Crypto Cops to Fight Crypto Crime—and Allegedly Ran a $100M Dark Web Drug Market

• Randall Munroe’s XKCD ‘Exponential Growth’

• Sharenting: What parents should consider before posting their children’s photos online

• The 10 most common ERP security issues and ways to fix them

• Cisco Live Customer Experience Activations and Sweepstakes

• New Bitcoin Token Protocol “Runes” Carries Potential Phishing Risk

• How I got started: AI security researcher

• The WAF Oath: Primum Non Nocere | Impart Security

• Cybercriminals Exploit Cloud Storage For SMS Phishing Scams

• Deepfakes turn into second most common cybersecurity incident

• 93% of vulnerabilities unanalyzed by NVD since February

• A Leak of Biometric Police Data Is a Sign of Things to Come

• What America’s Federal Privacy Bill Means for Data Protection

• YouTube Threatens To Block Russian Protest Group’s Anti-War Content

• 8 Best Penetration Testing Tools and Software

• Cybercriminals are Targeting Elections in India With Influence Campaigns

• Defending Digital Frontiers: Strategies for Organizations in an Unstable World

• Indian Election Faces Cyber-Attacks, Data Leaks on Dark Web

• Wordfence Intelligence Weekly WordPress Vulnerability Report (May 13, 2024 to May 19, 2024)

• Guntech 2.5 to Launch in Upland’s Gaming Ecosystem

• AutomationDirect Productivity PLCs

• Navigating Multicloud Security: How MSPs Can Leverage the Cloud Protection Suite to Secure their Customers

• Chinese Hackers Hide on Military and Government Networks for Six Years

• Veeam says critical flaw can’t be abused to trash backups

• Compromised recording software was served from vendor’s official site, threat researchers say

• New Frontiers, Old Tactics: Chinese Espionage Group Targets Africa & Caribbean Govts

• 55,000 Impacted By Cyberattack On California School Association

• Veeam Patches Critical Flaw That Puts Enterprise Backups At Risk

• 70% Of CISOs Worry Their Org Is At Risk Of A Material Cyber Attack

• VMware Abused In Recent MITRE Hack For Persistence, Evasion

• How Apple Wi-Fi Positioning System Can Be Abused To Track People Around The Globe

• Microsoft’s Recall Stokes Security and Privacy Concerns

• VMware Abused in Recent MITRE Hack for Persistence, Evasion

• Hospitals Hacked: Urgent Care Needed

• Beyond the Basics: Exploring Uncommon NTLM Relay Attack Techniques

• Breach Forums Plans Dark Web Return Despite FBI Crackdown

• ICO Warns PSNI It Faces £750k Fine Over Data Breach

• Analog Launches Testnet, Allocates 2% Token Supply for Participants

• Consumer Industries at Cisco Live 2024

• U.S. House Panel Takes on AI Security and Misuse

• Keylogger Malware Campaign Exploits Microsoft Exchange Server Flaws to Hit Over 30 Victims

• 70% of CISOs worry their org is at risk of a material cyber attack

• Chinese Espionage Campaign Expands to Target Africa and The Caribbean

• Estimate the financial benefits of using CloudGuard Network Security

• 10 Years in Prison for $4.5 million BEC Scammer Who Bought Ferrari to Launder Money

• APT41: The threat of KeyPlug against Italian industries

• CLOUD#REVERSER Campaign Leverages Cloud Storage for Malware Delivery

• Cybersecurity Labeling for Smart Devices Aims to Help People Choose Items Less Likely to be Hacked

• 55,000 Impacted by Cyberattack on California School Association

• Bolster Raises $14 Million for AI-Powered Phishing Protection

• Ransomware Fallout: 94% Experience Downtime, 40% Face Work Stoppage

• Major Security Flaw Discovered in Popular Cloud Logging Tool

• NVD Leaves Exploited Vulnerabilities Unchecked

• Snowflake’s Anvilogic Investment Signals Changes in SIEM Market

• Consumer-Grade Spyware App Found on US Hotel Check-in Computers

• Legacy Windows OSes Fall Prey to Rapid Online Attacks

• LastPass Rolls Out URL Encryption In Password Vaults

• Demystifying Multicloud Networking with Cisco Multicloud Defense

• ShrinkLocker: Turning BitLocker into ransomware

• Creating a Security Program with Less Complexity and More Visibility

• Apple’s Wi-Fi Positioning Can Be System Abused To Track Users

• Inside Operation Diplomatic Specter: Chinese APT Group’s Stealthy Tactics Exposed

• Are Your SaaS Backups as Secure as Your Production Data?

• Bugcrowd, the crowdsourced white-hat hacker platform, acquires Informer to ramp up its security chops

• Critical SQL Injection flaws impact Ivanti Endpoint Manager (EPM)

• Heimdal to Showcase Widest Cybersecurity Tech Stack at Infosecurity Europe 2024

• Apple Wi-Fi Positioning System Open to Global Tracking Abuse

• Rockwell Automation Urges Disconnection of ICS from the Internet

• NYSE Operator Intercontinental Exchange Gets $10M SEC Fine Over 2021 Hack

• 400,000 Impacted by CentroMed Data Breach

• Newly Detected Chinese Group Targeting Military, Government Entities

• Why We Need to Get a Handle on AI

• Zero-Day Attacks and Supply Chain Compromises Surge, MFA Remains Underutilized: Rapid7 Report

• EU Data Centers to Report Energy and Water Use Under New Rules

• National Records of Scotland Data Breached in NHS Cyber-Attack

• Apple Appeals Against EU’s $2bn Music Streaming Fine

• Spyware App Found Running on Multiple US Hotel Check-In Computers

• OpenText Acquires Cybersecurity MDR Platform for MSPs

• Personal AI Assistants and Privacy

• Former White House Cyber Official Jeff Greene to Join CISA

• How AI will change your credit card behind the scenes

• My 5 must-have extensions for Firefox on Android (and what I use them for)

• Using AI, Mastercard Expects to Find Compromised Cards Quicker, Before They Get Used by Criminals

• GitHub fixes maximum severity Enterprise Server auth bypass bug (CVE-2024-4985)

• How Do We Build a Security Program to Thwart Deepfakes?

• Operation Diplomatic Specter: An Active Chinese Cyberespionage Campaign Leverages Rare Tool Set to Target Governmental Entities in the Middle East, Africa and Asia

• OpenAI Agrees Content Deal With News Corp

• SEC Fines NYSE Owner ICE for Delay in Reporting VPN Breach

• Ivanti Patches Critical Remote Code Execution Flaws in Endpoint Manager

• Cybersecurity News: NY Stock Exchange owner fined, $50 million towards hospital security, LockBit no longer reigns supreme

• Chinese actor ‘Unfading Sea Haze’ remained undetected for five years

• Scammers are Selling Fake NSO Pegasus Spyware

• OpenText Boosts MDR Offering for MSPs With Pillr Acquisition

• Watch on Demand: Threat Detection and Incident Response (TDIR) Summit

• OneTrust helps organizations meet the framework requirements

• GitHub Fixes Maximum Severity Flaw in Enterprise Server

• A journey into forgotten Null Session and MS-RPC interfaces

• UK data watchdog wants six figures from N Ireland cops after 2023 data leak

• RSAC Fireside Chat: Qwiet AI leverages graph-database technology to reduce AppSec noise

• Dota2 – 1,907,205 breached accounts

• PSNI Faces £750,000 Data Breach Fine After Spreadsheet Leak

• SOCRadar raises $25.2 million to accelerate investments in key areas

• What happens when AI goes rogue (and how to stop it)

• A consumer-grade spyware app found in check-in systems of 3 US hotels

• Server-Side Credit Card Skimmer Lodged in Obscure Plugin

• HHS pledges $50M for autonomous vulnerability management solution for hospitals

• Microsoft Replacing VBScript With JavaScript & PowerShell

• How Apple Wi-Fi Positioning System can be abused to track people around the globe

• Would you buy Pegasus spyware from this scammer?

• The End of an Era: Microsoft Phases Out VBScript for JavaScript and PowerShell

• Cyber Threat news headlines trending on Google

• Frida-JIT-unPacker: An Imperva Contribution to the Security Research Community, Presented at Black Hat Asia 2024

• CISOs pursuing AI readiness should start by updating the org’s email security policy

• Strategies for transitioning to a SASE architecture

• Ransomware fallout: 94% experience downtime, 40% face work stoppage

• ‘China-aligned’ spyware slingers operating since 2018 unmasked at last

• Machine identities lack essential security controls, pose major threat

• 2024 sees continued increase in ransomware activity

• The Crux of Android 14 Application Migration and Its Impact

• ISC Stormcast For Thursday, May 23rd, 2024 https://isc.sans.edu/podcastdetail/8994, (Thu, May 23rd)

• Human Error and AI Emerge as Key Challenges in Survey of CISOs

• BTS #30 – Systems Of Trust – Robert Martin

• Lawmakers advance bill to tighten White House grip on AI model exports

• Analysis of ?redtail? File Uploads to ICS Honeypot, a Multi-Architecture Coin Miner [Guest Diary], (Wed, May 22nd)

• Nominations Open for 2024 EFF Awards!

• Go after UnitedHealth, not us, 100+ medical groups urge Uncle Sam

• 15 Best DevSecOps Tools for Seamless Security in 2024

• IT Security News Daily Summary 2024-05-22

• Microsoft Build 2024: Copilot AI Will Gain ‘Personal Assistant’ and Custom Agent Capabilities

• New APT Group “Unfading Sea Haze” Hits Military Targets in South China Sea

• How to find out if an AirTag is tracking you

• USENIX Security ’23 – PET: Prevent Discovered Errors from Being Triggered in the Linux Kernel

• Prompt Injection Threats Highlight GenAI Risks

• ISPM & ITDR Synergize for AI-Based Identity Security

• Sustainability 101: What is a resilient ecosystem?

• SOCRadar Raises $25M Series B for Threat Intel Tech

• Canada’s London Drugs confirms ransomware attack after LockBit demands $25M

• NYSE parent gets $10M wrist tap for failing to report 2021 systems break-in

• How to change your IP address, why you’d want to – and when you shouldn’t

• Security Compliance 101: What It Is and How to Master It

• 15 Best DevSecOps Tools For Seamless Security in 2024

• Spyware found on US hotel check-in computers

• Critical Veeam Backup Enterprise Manager authentication bypass bug

• Ransomware, BEC, GenAI Raise Security Challenges

• CFO Deepfake Redux — Arup Lost $26M via Video

• Microsoft Recall Triggers Enquiry From UK Data Regulator

• AttackGen- A MITRE ATT&CK framework For Cybersecurity Incident

• The best identity theft protection and credit monitoring services of 2024

• The best travel VPNs of 2024: Expert tested and reviewed

• Laundering cash from healthcare, romance scams lands US man in prison for a decade

• Hackers Sell Fake Pegasus Spyware on Clearnet and Dark Web

• Cybercriminals are targeting elections in India with influence campaigns

• What You Need to Know About SEC Compliance Requirements

• Upcoming Honor Smartphones To Feature Google AI Tech

• Confused by the SEC’s breach reporting rules? Read this

• Top things to do at InfoSecurity Europe 2024 – Learn, Explore and Have Fun

• Virtual Event Now Live: Threat Detection and Incident Response (TDIR) Summit

• Cybersecurity Risks and Solutions for Millennials and Gen Z

• Patient Privacy at Risk: Experts React to Health Company Data Leak

• Enhancing Workplace Security and Productivity with Effective Web Filtering

• Report Reveals 341% Rise in Advanced Phishing Attacks

• Google shows Microsoft Cybersecurity failures to US Government to gain business

• Amazon To Refresh Alexa With AI, Charge Monthly Subscription – Report

• Ikaruz Red Team Leveraging LockBit Builder To Launch Ransomware Attacks

• Turla Hackers Leveraging Microsoft Build Engine To Deliver Malware Stealthily

• Why IT Leaders Are Evolving the Network into a High-Performance Digital Engine

• Congo Lawyers Say They Have New Evidence On Apple’s Minerals Supply Chain

• LockBit Dethroned As Ransomware Leader Since Takedown

• Uncle Sam To Inject $50M Into Auto-Patcher For Hospital IT

• Microsoft’s AI Recall Feature Raises Security, Privacy Concerns

• Researchers Spot Cryptojacking Attack That Disables Endpoint Protections

• USENIX Security ’23 – USENIX Security ’23 – Content-Type: multipart/oracle – Tapping into Format Oracles in Email End-to-End Encryption

• Researchers Warn of Chinese-Aligned Hackers Targeting South China Sea Countries

• UserPro Plugin Vulnerability Allows Account Takeover

• Up to 30X Faster PHP Malware Scans with Wordfence CLI 4.0.1

• Top 7 generative AI development companies

• Electric Vehicles Twice As Likely To Hit Pedestrians – Study

• As tech evolves at full tilt, power skills are critical for IT leaders

• Stopping ransomware in multicloud environments

• Arctic Wolf CPO: Most AI deployment is generic, ‘pretty weak’

• Bolster, creator of the CheckPhish phishing tracker, raises $14M led by Microsoft’s M12

• Fortifying Digital Health Against Cyber Attacks

• Indian Govt Targets Cyber Criminals: DoT To Deactivate 1.8 Million SIMs

• Chinese Hackers Rely on Covert Proxy Networks to Evade Detection

• An ongoing malware campaign exploits Microsoft Exchange Server flaws

• BeyondTrust vs. Delinea: Which Is Best for Privileged Access Management?

• Strengthening Cyber Defense with Threat Intelligence Operations

• Strike Graph VerifyAI gives businesses flexibility and control for audits

• IOC Extinction? China-Nexus Cyber Espionage Actors Use ORB Networks to Raise Cost on Defenders

• Breaking Down the WebTPA Data Breach: Expert Analysis and Perspectives

• Teslas Can Still Be Stolen With a Cheap Radio Hack—Despite New Keyless Tech

• Rockwell Automation Urges Customers to Disconnect ICS From Internet

• US to Invest $50 Million in Securing Hospitals Against Cyber Threats

• Criminal IP: Enhancing Security Solutions through AWS Marketplace Integration

• Block Ads and Boost Security with AdGuard DNS

• Revolutionizing Connectivity: The Rise of iSIMs in the Mobile Industry

• Google Unhappy: Microsoft’s Cybersecurity Struggles: What Went Wrong?

• Safeguard Your Future with Seven Layers of Data Resilience

• Stealerium Malware Targeting Wi-Fi Networks, Outlook to Steal Login Credentials

• PlexTrac Plex AI helps offensive security teams write reports

• Kelp DAO Secures $9 Million in Private Sale for Restaking Innovations

• Zoom Announces Advanced Encryption for Increased Meeting Security

• Public Sector at Cisco Live 2024

• A Consolidated Approach to Fraud: Bringing Together Risk Insights, Organizations and Technology

• Critical Authentication Bypass Resolved in GitHub Enterprise Server

• Critical Veeam Vulnerability Leads to Authentication Bypass

• Exploring the Role of ISO/IEC 42001 in Ethical AI Frameworks

• AU10TIX Risk Assessment Model identifies potential vulnerabilities

• Rockwell Advises Disconnecting Internet-Facing ICS Devices Amid Cyber Threats

• From trust to trickery: Brand impersonation over the email attack vector

• EU Countries Endorse AI Act, Due Next Month

• Critical SAML Auth Bypass Vulnerability Found in GitHub Enterprise Server

• Windows’ new Recall feature: A privacy and security nightmare?

• NMAP Scanning without Scanning (Part 2) – The ipinfo API, (Wed, May 22nd)

• Hackers Claiming Access to Qatar National Bank Database

• AI in Cyber Is Here to Stay — How to Weather This Sea Change

• More Than 70% of Surveyed Water Systems Failed to Meet EPA Cyber Standards

• Critical Vulnerability in Honeywell Virtual Controller Allows Remote Code Execution

• Virtual Event Today: Threat Detection and Incident Response (TDIR) Summit

• Ivanti Patches Critical Code Execution Vulnerabilities in Endpoint Manager

• Breakthrough for Solv Protocol: $1 Billion TVL, Now a Top 32 DeFi Player

• Cloud-Based Malware Attack Abusing Google Drive & Dropbox

• Unredacting Pixelated Text

• GhostEngine Mining Attacks Kill EDR Security Using Vulnerable Drivers

• OmniVision Technologies Cyber Attack, Hackers Stolen Personal Data in Ransomware Attack

• Criminal record database of millions of Americans dumped online

• LockBit dethroned as leading ransomware gang for first time post-takedown

• How to Change Your VPN Location (A Step-by-Step Guide)

• ARPA-H Pledges $50M for Hospital IT Security Auto-Patching

• The Ultimate SaaS Security Posture Management Checklist, 2025 Edition

• Mastercard Doubles Speed of Fraud Detection with Generative AI

• SpaceX Demos First Video Call Of T-Mobile’s Direct To Cell Service

• Critical GitHub Enterprise Server Authentication Bypass bug. Fix it now!

• Snapchat Revises AI Privacy Policy Following UK ICO Probe

• Beware – Your Customer Chatbot is Almost Certainly Insecure: Report

• Chrome 125 Update Patches High-Severity Vulnerabilities

• Join Us 06-07-24 for “Hacking SOC 2 Vs. ISO 27001” – Super Cyber Friday

• Optimizing LMS Integration: 7 Strategies for Enhanced Blended Learning

• Stealers, stealers and more stealers

• Set of Bugs Puts Software Company and IoT Device Makers Into Motion

• GHOSTENGINE Exploits Vulnerable Drivers to Disable EDRs in Cryptojacking Attack

• US Unveils $50M Program to Help Hospitals Patch Cybersecurity Gaps

• Cybersecurity News: UK ransomware reporting, Tech Against Scams, secure Windows 11 defaults

• Microsoft AI “Recall” feature records everything, secures far less

• Top 7 Cybersecurity Trends for Enterprises in 2024

• HITRUST: the Path to Cyber Resilience

• 15 Best DevSecOps Tools For Seamless Security In 2024

• Exploring the Depths of SolarMarker’s Multi-tiered Infrastructure

• Authelia: Open-Source Authentication and Authorization Server

• UK Government in £8.5m Bid to Tackle AI Cyber-Threats

• Cyber Security Today, May 22, 2024 – LockBit ransomware gang hits more victims, Fluent Bit servers need to be updated, and more

• Choosing the Right Pricing Intelligence Solution for Your Business

• 100 Groups Urge Feds to Put UHG on Hook for Breach Notices

• Veeam fixes auth bypass flaw in Backup Enterprise Manager (CVE-2024-29849)

• CyberArk CORA AI accelerates identity threat detection

• Authorized Push Payment Fraud Cases Surge 12% Annually

• Hackers run away with 3,000 gallons of fuel stolen from a gas station in Washington

• OmniVision disclosed a data breach after the 2023 Cactus ransomware attack

• Zoom Adds ‘Post-Quantum’ Encryption for Video Conferencing

• Veeam Warns of Critical Backup Enterprise Manager Auth Bypass Bug

• Threat Actors Leverage Bitbucket Artifacts to Breach AWS Accounts

• Critical Flaw In Confluence Server Let Attackers Execute Arbitrary Code

• GitHub Enterprise Server patches 10-outta-10 critical hole

• OneTrust empowers organizations to govern data and AI without slowing down innovation

• MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks

• Bridging the NHI security gap: Astrix and Torq partner up

• LockBit demands $25 million from London Drugs in 48 hours

• Can a Cyber Threat Abruptly Evolve into a Ransomware Attack

• Hackers Breached Western Sydney University Microsoft 365 & Sharepoint Environments

• Zoom Adopts NIST-Approved Post-Quantum End-to-End Encryption for Meetings

• QNAP Patches New Flaws in QTS and QuTS hero Impacting NAS Appliances

• Authelia: Open-source authentication and authorization server

• Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass

• Cybersecurity jobs available right now: May 22, 2024

• CEOs accelerate GenAI adoption despite workforce resistance

• Technological complexity drives new wave of identity risks

• Kentik for Ansible Automation Platform now certified with Red Hat

• ISC Stormcast For Wednesday, May 22nd, 2024 https://isc.sans.edu/podcastdetail/8992, (Wed, May 22nd)

• Uncle Sam to inject $50M into auto-patcher for hospital IT

• Hackers Leverage AI as Application Security Threats Mount

• AI Companies Make Fresh Safety Promise at Seoul Summit, Nations Agree to Align Work on Risks

• FUD: How Fear, Uncertainty, and Doubt can ruin your security program

• Back to Cooking: Detection Engineer vs Detection Consumer, Again?

• Breach Forums Plans Dark Web Return This Week Despite FBI Crackdown

• SaaS BOM: The Advantage for Securing SaaS Ecosystems

• USENIX Security ’23 – Rods with Laser Beams: Understanding Browser Fingerprinting on Phishing Pages

• EFF Urges Supreme Court to Reject Texas’ Speech-Chilling Age Verification Law

• Have Web Trust Issues? Bot Management Can Help

• IT Security News Daily Summary 2024-05-21

• 5 Mitre ATT&CK framework use cases

• Cybersecurity or Cyber Resilience: Which Matters More?

• Using Open-Souce and Built-In Tools for Supply Chain Validation

• The best VPN trials of 2024: Expert tested and reviewed

• Facebook Joins New Anti-Scam Coalition To Fight Financial Fraud

• CISA adds NextGen Healthcare Mirth Connect flaw to its Known Exploited Vulnerabilities catalog

• How to remove a user from a shared Windows device

• How to remove a user from a shared Mac

• How to remove a user from a shared Android device

• Zoom adds ‘post-quantum’ encryption for video nattering

• Getting Your Copilot Pilot Out of Pilot

• How the new Microsoft Recall feature fundamentally undermines Windows security

• cloud penetration testing

• Critical Fluent Bit bug affects all major cloud providers, say researchers

• AI Safety Summit 2024: Tech Firms Agree AI Safety Pledges

• Soft skills every entrepreneur needs

• Microsoft’s new Recall feature for Copilot+PCs criticized as ‘spyware’

• Speaking Freely: Ethan Zuckerman

• Sensitive Data Detection using AI for API Hackers

• Legacy Systems: Learning From Past Mistakes

• Critical GitHub Enterprise Server Flaw Allows Authentication Bypass

• The Wordfence Affiliate Program Officially Launches Today

• Microsoft’s latest Windows 11 security features aim to make it ‘more secure out of the box’

• QNAP Rushes Patch for Code Execution Flaw in NAS Devices

• USENIX Security ’23 – Knowledge Expansion and Counterfactual Interaction for Reference-Based Phishing Detection

• Why Deleting Your Temu Account Might Be the Best Move

• Former OpenAI Executive Raises Safety Concerns

• Why Your Wi-Fi Router Doubles as an Apple AirTag

• Prowling the Wilds — Upgrade Your SOC and Hunt Down Threats

• CISA Warns Of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw

• Zoom Adding Post-Quantum End-to-End Encryption To All Products

• You Can Now Buy A 4-Foot-Tall Humanoid Robot For $16k

• Julian Assange Can Appeal Extradition To The US, London Court Rules

• OpenSSF Sings A Siren Song To Steer Developers Away From Buggy FOSS

• Russia’s DoppelGänger Campaign Manipulates Social Media

• OpenAI ChatGPT Cyber Threat to Scarlett Johansson

• 23-Year-Old Arrested for Running 100M Incognito Dark Web Market

• Memcyco Report Reveals Only 6% Of Brands Can Protect Their Customers From Digital Impersonation Fraud

• Windows System Admins Targeted by Hackers Via Fraudulent PuTTy, WinSCP Ads

• 70% of CISOs Expect Cyber-Attacks in Next Year, Report Finds

• US Warns Rising Cyberattacks Against Water Supplies

• cloud workload protection platform (CWPP)

• Conservative cell carrier Patriot Mobile hit by data breach

• Malware Delivery via Cloud Services Exploits Unicode Trick to Deceive Users

• 70% of CISOs Expect Cyberattacks in Next Year, Report Finds

• Guardz Launches Pioneering Cyber Insurance with Active Protection Exclusively for SMBs

• Working in the security clearance world: How security clearances impact jobs

• LCDS LAquis SCADA

• CISA Releases One Industrial Control Systems Advisory

• News alert: Memcyco report reveals only 6% of brands can stop digital impersonation fraud

• AI Seoul Summit: 16 AI Companies Sign Frontier AI Safety Commitments

• The Year in GenAI: Security Catches Up with Innovation

• Scarlett Johansson ‘Shocked, Angered’ Over OpenAI’s Artificial Voice

• Blackbasta group claims to have hacked Atlas, one of the largest US oil distributors

• Vulnerability Summary for the Week of May 13, 2024

• 15 QNAP NAS bugs and one PoC disclosed, update ASAP! (CVE-2024-27130)

• Ransomware and AI-Powered Hacks Drive Cyber Investment

• Holes in Your Bitbucket: Why Your CI/CD Pipeline Is Leaking Secrets

• 2024 Cloud Security Report: Unveiling the Latest Trends in Cloud Security

• CISSP or CISM: Which should you pursue?

• Zoom Adding Post-Quantum End-to-End Encryption to Products

• Slack Faces Backlash Over AI Data Policy: Users Demand Clearer Privacy Practices

• Digital Impersonation Fraud: a Growing Challenge for Brands

• SolarMarker Malware Evolves to Resist Takedown Attempts with Multi-Tiered Infrastructure

• Scanning without Scanning with NMAP (APIs FTW), (Tue, May 21st)

• Why Game Companies Are Adopting Distributed Cloud Computing

• Memcyco Report: Just 6% of Brands Guard Against Digital Impersonation Fraud

• North Korean Hackers Hijacked Military Officials Personal Email

• Microsoft Unveild New Windows 11 Features To Strengthen Security

• Critical Memory Corruption In Cloud Logging Infrastructure Enables Code Execution Attack

• DoppelGänger Attack: Malware Routed Via News Websites And Social Media

• AAPI Heritage Month Spotlight: Archana Ragothaman

• Many Stumble Into Cybersecurity, But Leadership is By Design

• Recent Healthcare Ransomware Attacks

• Ransomware Attack Leaves Michigan Hospitals in Chaos Nine Days On

• Understanding the SOC 2 Certification

• HR and IT related phishing scams still most popular according to KnowBe4’s latest Phishing Report

• New ‘Siren’ Mailing List Aims to Share Threat Intelligence for Open Source Projects

• Five Core Tenets Of Highly Effective DevSecOps Practices

• Hyperconverged Infrastructure: Your Complete Guide to HCI

• Iranian State Hackers Partner Up for Large-Scale Attacks, Report

• Empowering Growth: My Journey with the Cisco MentorMe Program

• QNAP QTS Zero-Day in Share Feature Gets Public RCE Exploit

• Productivity Increases in Sectors Exposed To AI, PwC Finds

• Detecting Malicious Trackers

• Void Manticore Launches Destructive Attacks on Albania and Israel

• EPA Issues Alert After Finding Critical Vulnerabilities in Drinking Water Systems

• CISA Warns of Attacks Exploiting NextGen Healthcare Mirth Connect Flaw

• Insider Q&A: CIA’s Chief Technologist’s Cautious Embrace of Generative AI

• Critical Fluent Bit flaw affects major cloud platforms, tech companies’ offerings (CVE-2024-4323)

• Researchers Uncover Flaws in Python Package for AI Models and PDF.js Used by Firefox

• Over 60% of Network Security Appliance Flaws Exploited as Zero Days

• With ransomware whales becoming so dominant, would-be challengers ask ‘what’s the point?’

• How to Install a VPN on Your Router

• Eventbrite Promoted Illegal Opioid Sales to People Searching for Addiction Recovery Help

• Chinese Telco Gear May Get Banned in Germany

• How to Drive Down Skyrocketing Data Costs with the Only Cost-Optimized SIEM

• Ask the Analyst: Nisos Events and Ticket Fraud Expert Kirk Maguire

• Latest Ubuntu Security Updates: Fixing Linux Kernel Vulnerabilities

• What Is Risk Management in Cybersecurity | Kovrr

• TuxCare and DOSIsoft Partner to Offer Ongoing Support and Cyber Protections for Radiation Oncology and Nuclear Medicine Software

• BT Extends Deadline For PSTN Switch To Digital Landlines

• Experts warn of a flaw in Fluent Bit utility that is used by major cloud platforms and firms

• Consumers Continue to Overestimate Their Ability to Spot Deepfakes

• CISA Warns of Actively Exploited NextGen Mirth Connect Pre-Auth RCE Vulnerability

• OmniVision Says Personal Information Stolen in Ransomware Attack

• Windows 11 to Deprecate NTLM, Add AI-Powered App Controls and Security Defenses

• You Can’t Leak What You Don’t Collect

• Multiple Vulnerabilities in Honeywell VirtualUOC Let Attackers Execute Remote Code

• The Interplay of AI and Cybersecurity: Survey Results

• The UK’s Cybersecurity: Where Is it and Where Is it Going?

• ‘Linguistic Lumberjack’ Flaw in Logging Utility Fluent Bit Impacts Cloud Services

• Cybersecurity News: Military cyber service, GetCaught abuses services, chatbot jailbreaks

• North Korea-Linked Kimsuky APT Attack Targets Victims via Messenger

• The Mystery of the Targeted Ad and the Library Patron

• Authorities Arrest $100m Incognito Drugs Market Suspect

• Cybercriminals Shift Tactics to Pressure More Victims Into Paying Ransoms

• Critical Fluent Bit Bug Impacts All Major Cloud Platforms

• Grandoreiro Malware Hijacks Outlook Client to Send Phishing Emails

• Experts released PoC exploit code for RCE in QNAP QTS

• Fortinet FortiSIEM Command Injection Flaw (CVE-2023-34992) Deep-Dive

• What is ISO 42001? Structure, Responsibilities and Benefits

• Critical Memory Corruption In Cloud Logging Infrastructure Enables Code Execution Attack

• CyberArk Snaps up Venafi for $1.54B to Ramp up in Machine-to-Machine Security

• NextGen Healthcare Mirth Connect Under Attack – CISA Issues Urgent Warning

• GitCaught Campaign Leverages GitHub Repositories and Fake Profiles for Malicious Infrastructure

• Podcast Episode: Chronicling Online Communities

• Best Security Questionnaire Automation Software – Top Features To Look For

• PoC Exploit Released for QNAP QTS zero-day RCE Flaw

• “Linguistic Lumberjack” Vulnerability Discovered in Popular Logging Utility Fluent Bit

• Master of Puppets: Uncovering the DoppelGänger pro-Russian influence campaign

• USA initiates $50m incentive program to thwart ransomware threats

• Strategies for combating AI-enhanced BEC attacks

• Phishing statistics that will make you think twice before clicking

• Big Tech is not much help when fighting a junta, and FOSS doesn’t ride to the rescue

• Challenging Times Remain Among the Ever-Evolving Email Landscape

• Fighting identity fraud? Here’s why we need better tech

• YouTube has become a significant channel for cybercrime

• eBook: 10 reasons why demand for cloud security is sky-high

• ISC Stormcast For Tuesday, May 21st, 2024 https://isc.sans.edu/podcastdetail/8990, (Tue, May 21st)

• GitLab unveils GitLab 17, AI for devsecops

• Shots Fired: Congressional Letter Questions DHS Funding of ShotSpotter

• OpenSSF sings a Siren song to steer developers away from buggy FOSS

• Julian Assange can appeal extradition to the US, London High Court rules

• Shifting the Security Mindset: From Network to Application Defense

• Vulnerability Recap 5/20/24 – Patch Tuesday, Chrome & D-Link

• Get the best weatherproof Wyze Cam alternative for only $40 before Memorial Day

• CyberArk to acquire Venafi from Thoma Bravo for $1.5B

• How micro1’s AI interviewer could make tech hiring more efficient and fair

• Georgia Prosecutors Stoke Fears over Use of Encrypted Messengers and Tor

• USENIX Security ’23 – You’ve Got Report: Measurement and Security Implications of DMARC Reporting

• CISA and ONCD Award the Winners of the Fifth Annual President’s Cup Cybersecurity Competition

• What Is DRM? Understanding Digital Rights Management

• Fluent Bit Tool Vulnerability Threatens Billions of Cloud Deployments

• Are you being tracked? What new privacy features from Apple and Google can (and can’t) tell you

• iOS 17.5.1 patches cringey bug that was resurrecting old, deleted photos

• Google Cites ‘Monoculture’ Risks in Response to CSRB Report on Microsoft

• Google takes shots at Microsoft for shoddy security record with enterprise apps

• Randall Munroe’s XKCD ‘Bloom Filter’

• Hacktivist Groups Target Indian Elections, Leak Personal Data, Says Report

• Chinese Duo Indicted for Laundering $73m in Pig Butchering Case

• Sunsetting Section 230 Will Hurt Internet Users, Not Big Tech

• Apple Slashes iPhone Prices In China

• Top ITSM Certifications for 2024

• Too Many ICS Assets are Exposed to the Public Internet

• Julian Assange Granted Right To Challenge US Extradiction Order

• Bitcoin ‘Creator’ Craig Wright Repeatedly Lied, Rules UK Judge

• Reconnaissance in Cybersecurity: Types & Prevention

• The Importance of Bot Management in Your Marketing Strategy

• Can I phone a friend? How cops circumvent face recognition bans

• Vermont’s Data Privacy Law Sparks State Lawmaker Alliance Against Tech Lobbyists

• Bengaluru Man Arrested for Exploiting Woman in Online Interview

• Punjab Police Break Up Two Scam Call Centers, Arrest 155 Suspects

• Iranian MOIS-Linked Hackers Behind Destructive Attacks on Albania and Israel

• Network Outages Hit 59% of Multi-Site Businesses Monthly

• CyberArk to acquire Venafi Cybersecurity for $1.5 Billion

• YouTube, The Backdrop Of A Scammer’s Play | Avast

• US SEC Approves Wall Street Data Breach Reporting Regs

• Vulnerability Found in Fluent Bit Utility Used by Major Cloud, Tech Companies

• SMTP Error Codes Explained

• USENIX Security ’23 – “To Do This Properly, You Need More Resources”: The Hidden Costs Of Introducing Simulated Phishing Campaigns

• ATM jackpotting

• CISA Adds Two Known Exploited Vulnerabilities to Catalog

• GitCaught campaign relies on Github and Filezilla to deliver multiple malware

• BeyondTrust vs. CyberArk: Pros, Cons, and Alternatives for Privileged Access Management

• Security review for Microsoft Edge version 125

• Your vacation, reservations, and online dates, now chosen by AI: Lock and Code S05E11

• Top Cybersecurity Risks in Edge Computing : Here’s All You Need to Know

• Iran-Linked Void Manticore Intensifies Cyber-Attacks on Israel

• Another Billionaire Is Suing Facebook For Scam Ads Using His Image

• Harnessing Network and Application Performance Insights for Effective Automation

• With a startup’s assist, the UK Government publishes new AI security guidelines

• Latrodectus Malware Loader Emerges as Potential Replacement for IcedID

• Strata’s Maverics Platform Provides Zero Downtime for Cloud-based Identity

• Engineering Giant Arup Falls Victim to £20m Deepfake Video Scam

• Microsoft Patch Tuesday May 2024 Fixed 3 Zero-Days

• Critical Git Vulnerability Let Attackers Execute Remote Code : PoC Published

• SWARM – Switchable Backdoor Attack Against Pre-trained Models

• WikiLeaks’ Julian Assange Can Appeal His Extradition to the US, British Court Says

• Researchers Call Out QNAP For Dragging Its Heels On Patch Development

• 2.4 Million Affected By WebTPA Data Breach

• How I Upgraded My Water Heater And Discovered How Bad Smart Home Security Can Be

• User Outcry As Slack Scrapes Customer Data For AI Model Training

• 6k-plus AI Models May Be Affected By Critical RCE Vulnerability

• The Importance of Access Controls in Incident Response

• Eric Goldstein Leaving CISA for Private Sector Role

• CyberArk to Acquire Machine Identity Firm Venafi for $1.54 Billion

• Teaching AI Sarcasm: The Next Frontier in Human-Machine Communication

• AI Chatbots Highly Vulnerable to Jailbreaks, UK Researchers Find

• Researchers call out QNAP for dragging its heels on patch development

• The 5 Best Encryption Key Management Software for 2024

• Guide to Third Party Risk Management: Dealing with Vendor Vulnerabilities

• Unlocking the Power of Governance in Cybersecurity: NIST CSF 2.0 Introduces ‘Govern’ to Redefine CISO Leadership in 2024

• DoJ, ByteDance ask court: Hurry up and rule on TikTok ban already

• Strata Maverics Identity Continuity provides real-time IDP failover capabilities

• 5 steps to stop Ransomware as a Service in its tracks

• Tesla Layoffs Continue With Another 600 Jobs In California

• New Antidot Android Malware Poses as Google Update to Steal Funds

• Akira Ransomware Escalates Privilege To Exfiltrate Domain Controller Files

• Implement a Continuous Threat Exposure Management (CTEM) Program with Check Point IGS Consulting Services

• Unveiling Void Manticore: Structured Collaboration Between Espionage and Destruction in MOIS

• WikiLeaks’ Julian Assange Can Appeal His Extradition to the US, British Court Says

• Kinsing Hacker Group Expands its Cryptoming Botnet Network with More Vulnerability Exploits

• Strata Identity Maverics Identity Continuity provides real-time IDP failover capabilities

• How to Defend Against Relentless DNS Attacks

• Financial Organizations Need To Disclose Data Breach Within 30-Days

• Whole of State: Leveraging Security Platforms in Government

• CISA Senior Official Goldstein to Leave Agency in June

• White House Unveils AI Safety Framework for US Workers

• What is real-time protection and why do you need it?

• How to Manage IAM Compliance and Audits

• CVE-2023-34992: Fortinet FortiSIEM Command Injection Deep-Dive

• Foxit PDF Reader Flaw Exploited by Hackers to Deliver Diverse Malware Arsenal

• YouTube, the backdrop of a scammer’s play

• CyberArk snaps up Venafi for $1.54B to ramp up in machine-to-machine security

• Prevention Maintenance: Strategies To Bolster Your Organisation’s Cybersecurity

• Are All Linux Vendor Kernels Insecure? A New Study Says Yes, but There’s a Fix

• Intel Discloses Max Severity Bug in Its AI Model Compression Software

• Cybersecurity M&A Roundup for First Half of May 2024

• 2.4 Million Impacted by WebTPA Data Breach

• CyberArk to acquire Venafi for $1.54 billion

• Defending Your Commits From Known CVEs With GitGuardian SCA And Git Hooks

• Two Chinese Nationals Arrested for Stealing $73M+ Via Cryptocurrency Scams

• Strengthen Your Security Operations: MITRE ATT&CK Mapping in Cisco XDR

• Two Students Uncover Security Bug That Could Let Millions Do Their Laundry for Free

• How to Remove Your Personal Info From Google’s Search Results

• Two students uncovered a flaw that allows to use laundry machines for free

• IBM Sells Cybersecurity Group

• Financial institutions ordered to notify customers after a breach, have an incident response plan

• American Radio Relay League Hit by Cyberattack

• MediSecure Data Breach Impacts Patient and Healthcare Provider Information

• Start-Ups: 10 Tips for Navigating the Headwinds Against High-Growth

• Cyber Security Today, May 20, 2024 – A ransomware gang claims it hit a Canadian internet provider

• Analyzing MSG Files, (Mon, May 20th)

• AI Python Package Flaw ‘Llama Drama’ Threatens Software Supply Chain

• PoC exploit for Ivanti EPMM privilege escalation flaw released (CVE 2024-22026)

• Cyber Criminals Exploit GitHub and FileZilla to Deliver Cocktail Malware

• UK Regulator Declines To Investigate Microsoft’s Mistral AI Deal

• PoC Exploit Published for 0-day Vulnerability in Google Chrome

• UK Government Publishes AI Cybersecurity Guidance

• Radiant Security Gen AI SOC Co-Pilot

• Navigating Employee GPS Tracking in Ontario: What Employers Need to Know

• Mastering the Cybersecurity Tightrope: Risks and Threats in Modern Organizations

• YARA is dead, long live YARA-X

• UK AI Safety Institute To Open Office In US

• Making Data Integrity Easy: Simplifying NIST CSF with Tripwire

• Closing the Skills Gap for Women in Cybersecurity

• Antivirus Policy

• British Library’s candid ransomware comms driven by ’emotional intelligence’

• SEC requires financial institutions to notify customers of breaches within 30 days

• Cybersecurity News: Grandoreiro Trojan reappears, Kimsuky’s new backdoor, More healthcare breaches

• Silicon In Focus Podcast: Does Security Block Innovation?

• Researchers Report High-Impact Cat-Phishing Targeting Users

• New Tracker Warning Features on iPhones & Androids, 2024 Verizon Data Breach Investigations Report

• RSAC Fireside Chat: SquareX introduces security-infused browser extension to stop threats in real time

• Grandoreiro Banking Trojan is Back With Major Updates

• 12 principles for improving devsecops

• CISA Issues Guidance to Help Federal Agencies Better Encrypt DNS Traffic

• IBM’s Exit from Cybersecurity Software Shakes the Industry

• CISA Warns of Hackers Exploiting Chrome, EoL D-Link Bugs

• Chinese Duo Indicted For Laundering $73m in Pig Butchering Case

• How to make your Android phone easier to use

• Kinsing Malware Attacking Apache Tomcat Servers To Deploy Cryptominers

• Norway Recommends Replacing SSL VPN to Prevent Breaches

• Grandoreiro Banking Trojan is back and targets banks worldwide

• A week in security (May 13 – May 19)

• Sonicwall SSL-VPN exploit Advertised on the Dark web

• Strict 30 day timeline fixed for Financial Institutions on data breaches says SEC

• Achieving Resilient SASE Deployment: Strategies for Success

• Chinese telco gear may become verboten on German networks

• Latrodectus Malware Loader Emerges as IcedID’s Successor in Phishing Campaigns

• The challenges of GenAI in fintech

• Grafana: Open-source data visualization platform

• Cybercriminals shift tactics to pressure more victims into paying ransoms

• Consumers continue to overestimate their ability to spot deepfakes

• Understanding cyber risks beyond data breaches

• Nissan infosec in the spotlight again after breach affecting more than 50K US employees

• Financial Institutions Now Required to Disclose Breaches Within 30 Days

• ISC Stormcast For Monday, May 20th, 2024 https://isc.sans.edu/podcastdetail/8988, (Mon, May 20th)

• IT Security News Weekly Summary – Week 20

• IT Security News Daily Summary 2024-05-19

• USENIX Security ’23 – Guarding Serverless Applications with Kalium

• Why data breaches have become ‘normalized’ and 6 things CISOs can do to prevent them

• Cybercriminals Exploit Windows Quick Assist in Latest Ransomware Campaign

• Deepfakes and AI’s New Threat to Cyber Security

• North Korean Hacker Group Kimsuky Deploys New Linux Malware ‘Gomir’ via Trojanized Software Installers

• Banco Santander Reports Data Breach, Reaffirms Transaction Security

• Healthcare firm WebTPA data breach impacted 2.5 million individuals

• Security Affairs newsletter Round 472 by Pierluigi Paganini – INTERNATIONAL EDITION

• North Korea-linked Kimsuky used a new Linux backdoor in recent attacks

• AI’s Energy Appetite: Challenges for Our Future Electricity Supply

• Chinese Nationals Arrested for Laundering $73 Million in Pig Butchering Crypto Scam

• Week in review: New Black Basta’s social engineering campaign, passing the CISSP exam in 6 weeks

• Grandoreiro Banking Trojan Resurfaces, Targeting Over 1,500 Banks Worldwide

• Hackers Exploiting Docusign With Phishing Attack To Steal Credentials

Generated on 2024-05-26 23:58:23.665943