IT Security News Weekly Summary – Week 22

• IT Security News Daily Summary 2023-06-04

• Friday Squid Blogging: Squid Chromolithographs

• The Unintended Consequences of Netflix’s Password Sharing Ban

• Security Affairs newsletter Round 422 by Pierluigi Paganini – International edition

• Music Streaming Royalties To Be Examined by The UK Government

• Which Country Ranked the Highest in the Global National Privacy Test?

• Government and Military Institutions Under Persistent Attacks by Dark Pink Hackers

• What B2C Service Providers can Learn From Netflix’s Accidental Model

• Most Important Web Server Penetration Testing Checklist

• Cybersecurity Crisis: Anonymous Sudan Demands $3 Million from SAS Airlines

• Confidential computing: From root of trust to actual trust

• Xplain hack impacted the Swiss cantonal police and Fedpol

• Zyxel published guidance for protecting devices from ongoing attacks

• Week in review: MOVEit Transfer critical zero-day vulnerability, Kali Linux 2023.2 released

• Cyber Security Management System (CSMS) for the Automotive Industry

• KeePass password manager update improves security

• IT Security News Daily Summary 2023-06-03

• Insider Q&A: Artificial Intelligence and Cybersecurity In Military Tech

• SAS Airlines Faces $3 Million Ransom Demand After DDoS Attacks

• Kimsuky APT poses as journalists and broadcast writers in its attacks

• Harvard Pilgrim Health Care Hit by Ransomware Attack

• Upsurge in UPI Fraud Cases: How can you Guard Against These Scams

• Deepfake Deception: Man Duped of Rs 5 Crore as Chinese Scammer Exploits AI Technology

• Fraudsters Target Kolkatans With Message-Forwarding Software

• Mata: Challenges in Data Transfer Between Countries May Affect Services

• “Facebook Receipts” Project Reveals The Company’s Shadowy Influence

• AI Is Being Used to ‘Turbocharge’ Scams

• 5 Common Myths About Binary Trading

• Cyberattack Diverted Ambulances of Idaho Hospital

• Splunk Flaw Let Attackers Escalate Privilege Using crafted web Request

• In Other News: Government Use of Spyware, New Industrial Security Tools, Japan Router Hack

• How AI Protects (and Attacks) Your Inbox

• New Linux Ransomware BlackSuit is similar to Royal ransomware

• FTC Slams Amazon with $30.8M Fine for Privacy Violations Involving Alexa and Ring

• Cloud Security Tops Concerns for Cybersecurity Leaders: EC-Council’s Certified CISO Hall of Fame Report 2023

• New Linux Ransomware Strain BlackSuit Shows Striking Similarities to Royal

• Uncle Sam wants DEF CON hackers to pwn this Moonlighter satellite in space

• Build or Buy your own antivirus product

• Amazon Ring Employees Able to Access Every Single Camera Customer Video

• Millions of PC Motherboard Were Sold With Backdoor Installed

• Update now! MOVEit Transfer vulnerability actively exploited

• The Messy US Influence That’s Helping Iranians Stay Online

• Galvanick Banks $10 Million for Industrial XDR Technology

• OpenAI Unveils Million-Dollar Cybersecurity Grant Program

• The Messy US Influence That’s Helping Iranians Stay Online

• CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog

• How to enable Bitwarden biometric unlock (and why you should)

• IT Security News Daily Summary 2023-06-02

• AI in the workplace: Local officials explore responsible use

• PyPI’s 2FA Requirements Don’t Go Far Enough, Researchers Say

• Cybersecurity standards gain ground in counties

• Kaspersky Reveals iPhones of Employees Infected with Spyware

• Agencies issue rule to ban TikTok on contractor devices

• ‘PostalFurious’ SMS Attacks Target UAE Citizens for Data Theft

• New botnet Horabot targets Latin America

• Google’s Latest Android Feature Drop: Dark Web Search for Gmail ID

• NASA puts error data to use to speed up tsunami detection

• Fūsus Competes in Fourth ‘ASTORS’ Homeland Security Awards

• New QBot Malware Campaign Exploits WordPad for Infection

• Shiba Inu: The Meme Coin Fueling an Open-Source Ecosystem

• Malaysia goes its own Huawei, won’t ban Chinese vendor from 5G network

• U.S., South Korean agencies warn of state-sponsored spearphishing

• Point32Health ransomware attack exposed info of 2.5M people

• Two Years Since the Colonial Pipeline Hack, Here’s What We’ve Learned

• Microsoft is finally making Edge a much more secure place to surf the web

• Improve your app security on Azure

• Streamers Ditch Netflix for Dark Web After Password Sharing Ban

• ‘Picture-in-Picture’ Obfuscation Spoofs Delta, Kohl’s for Credential Harvesting

• Understanding SEBI’s Framework for Cloud Services Adoption by Financial Entities in India

• Digital Rights Updates with EFFector 35.7

• How AI could take over elections – and undermine democracy

• Enzo Biochem Hit by Ransomware, 2.5 Million Patients’ Data Compromised

• How to Protect Operational Technology (OT) from Cyber Threats

• Netflix password sharing crackdown can be hacked with a new VPN

• Navigating the complex world of Cybersecurity compliance

• Encrypting files and emails: A beginner’s guide to securing sensitive information

• MOVEit file transfer vulnerability exploited by hackers

• Develop valuable cyber security skills over a lifetime for only $70

• 1Password enables passkeys — a new option from passwords

• Zyxel vulnerability under ‘widespread exploitation’

• US and Korean Agencies Issue Warning on North Korean Cyber-Attacks

• Japan Privacy Watchdog Warns ChatGPT Maker OpenAI On User Data

• Python Byte Code Used To Avoid Detection And Load Malware

• Clickless iOS Exploits Infect Kaspersky iPhones With Never-Before-Seen Malware

• BlackCat Updates Tradecraft With Stealth And Speed

• China Is Digging A Big Frickin’ Hole 33,000 Feet Into The Earth

• Safeguarding Your Work: What Not to Share with ChatGPT

• Undiscovered Attacks Against Middle Eastern Targets Conducted Since 2020

• Senate passes debt ceiling bill, approves new work requirements for benefits

• Researchers claim Windows “backdoor” affects hundreds of Gigabyte motherboards

• Malicious PyPI Packages Use Compiled Python Code to Bypass Detection

• Our Right To Challenge Junk Patents Is Under Threat

• Capita Cyberattack Sees 90 Organizations Report Possible Data Breaches

• Ghost Sites: Attackers are now Exposing Data From Deactivated Salesforce Sites

• Here’s How Script Kiddies are Targeting Internet Users Worldwide

• Military vehicle electrification continues to roll forward, but may face bumps in the road

• Login.gov is still ‘vital’ despite setbacks, GSA official says

• Kali Linux Penetration Testing Tutorial: Step-By-Step Process

• Digi International updates SkyCloud features for industrial monitoring and control solutions

• 9 Million Patients’ Data Exposed by Ransomware Attack on US Dental Giant

• Privacy vs. Security: Discovering the Difference

• Meta Workers Told To Return To Office Three Days A Week – Report

• Detecting Insider Threats: Leverage User Behavior Analytics

• Information of 2.5M People Stolen in Ransomware Attack at Massachusetts Health Insurer

• Open-Source LLMs

• How CISOs Can Manage the Intersection of Security, Privacy, And Trust

• Want Sustainable Security? Find Middle Ground Between Tech & Education

• Idaho Hospitals Working to Resume Full Operations After Cyberattack

• High-Severity Vulnerabilities Patched in Splunk Enterprise

• US, South Korea Detail North Korea’s Social Engineering Techniques

• MOVEit Transfer software zero-day actively exploited in the wild

• Extending Zero Trust OT Security to Meet Air Gap Requirements

• OffSec expands Global Partner Program to empower and support partner organizations

• Google triples reward for Chrome full chain exploits

• ON2IT adds CISA Zero Trust Maturity Model to AUXO cloud platform

• Ransomware Attack on Harvard Pilgrim Health Care Exposes 2.5M Patients Data

• New Botnet Malware ‘Horabot’ Targets Spanish-Speaking Users in Latin America

• Moscow Alleges NSA Mass Spying On Russian iPhones

• In search of the Triangulation: triangle_check utility

• Watch CNBC’s full interview with SentinelOne CEO Tomer Weingarten

• SentinelOne CEO Tomer Weingarten on Q1 earnings: We need to perform better

• Senate passes debt deal, agency spending freeze bill headed to Biden’s desk

• Galvanick raises $10 million for its industrial cybersecurity platform

• The Importance of Managing Your Data Security Posture

• Russia’s FSB blames the US intelligence for Operation Triangulation

• Twitter Loses Second Head Of Trust And Safety

• Check Point’s Interactive Cyber Center Teaches Thousands of Young People to Be Safe Online

• Apple Denies Helping US Government Hack Russian iPhones

• Enzo Biochem Ransomware Attack Exposes Information of 2.5M Individuals

• MOVEit Transfer zero-day attacks: The latest info

• Free Threat Hunting Platform Security Onion Released Updates – What’s New!

• Poor Communication During a Data Breach Can Cost You — Here’s How to Avoid It

• Elevate Your Cloud Defense: 6 Top Strategies for Safeguarding Cloud-Native Apps

• Camaro Dragon Strikes with New TinyNote Backdoor for Intelligence Gathering

• Cybersecurity in Online Trading: Protecting Your Investments

• Jetpack Plugin Patched A Critical Vulnerability Triggering WordPress Force-Installs

• Zero-Day in MOVEit File Transfer Software Exploited to Steal Data From Organizations

• Insurers Predict $33bn Bill for Catastrophic “Cyber Event”

• Checklist: Network and systems security

• Chinese Phishing Gang “PostalFurious” Expands Campaign

• Qakbot: The trojan that just won’t go away

• Kaspersky Says it is Being Targeted By Zero-Click Exploits

• Malicious extensions: Avast detects new threats on the Chrome Web Store

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Silicon UK Pulse: Your Tech News Update: Episode 5

• The rise and fall of ransomware: Insights from Avast’s Q1/2023 Threat Report

• North Korea’s Kimsuky Group Mimics Key Figures in Targeted Cyber Attacks

• This malicious PyPI package mixed source and compiled code to dodge detection

• Amazon agrees to pay $31 after FTC Privacy and Security charges

• The Evolving Landscape of Cybersecurity: Trends and Challenges

• How defense contractors can move from cybersecurity to cyber resilience

• New infosec products of the week: June 2, 2023

• Toyota Server Misconfiguration Leaks Owners Data for Over Seven Years

• You might have been phished by the gang that stole North Korea’s lousy rocket tech

• Google Temporarily Offering $180,000 for Full Chain Chrome Exploit

• Despite cutbacks, IT salaries expected to rise

• Cybercriminals use legitimate websites to obfuscate malicious payloads

• Introducing the book: Cybersecurity First Principles

• When internet security is a requirement, look to dedicated fiber

• CISOs: How to improve cybersecurity in an ever-changing threat landscape

• MOVEit Transfer Under Attack: Zero-Day Vulnerability Actively Being Exploited

• Millions of Gigabyte PC motherboards backdoored? What’s the actual score?

• Operation Triangulation: previously undetected malware targets iOS devices

• Amazon’s Ring cameras were used to spy on customers

• US hospital forced to divert ambulances after cyberattack

• Deployed publicly accessible MOVEit Transfer? Oh no. Mass exploitation underway

• Events Ripper Update

• Windows Users Beware: Crooks Relying on SeroXen RAT to Target Gamers

• Utilizing the Economic Calendar: A Key to Enhancing Safety in Cryptocurrency Trading

• California-based workforce platform Prosperix leaks drivers licenses and medical records

• The Foreign Intelligence Surveillance Court Has Made a Mockery of the Constitutional Right to Privacy

• Early funding allows states to explore broadband options

• Digital driver’s license available for Google Wallet

• Kremlin claims Apple helped NSA spy on diplomats via iPhone backdoor

• IT Security News Daily Summary 2023-06-01

• Cyversity and United Airlines to Provide Cybersecurity Training Scholarships to Cyversity Members

• DNB Strengthens its Network Security Posture and Productivity With Ericsson Security Manager Solution

• How To Reduce Cost Overruns For AI Implementation Projects

• New bill proposes ‘made in China’ tags for mobile apps

• Federal vision to streamline cyber incident reporting expected this summer

• Tel Aviv Stock Exchange Selects CardinalOps to Reduce Risk of Breaches Due to Undetected Attacks

• Kaspersky Says New Zero-Day Malware Hit iPhones—Including Its Own

• Here’s what earnings from industry rivals mean for two Club names

• Why DMARC Is Failing: 3 Issues With DMARC

• Amazon Pays $30.8M to Settle Ring Spying & Alexa Privacy Lawsuits

• Generative AI: What Every CISO Needs to Know

• Damage assessment tool streamlines data collection for disaster prep, response, recovery

• Pharma Companies Fight Back Against Counterfeit Drug Sellers On Facebook

• What Is DMARC Email Security Technology?

• The Dark Side of DevSecOps and Why We Need Governance Engineering

• DMARC Setup & Configuration: Step-By-Step Guide

• Apps with over 420 Million downloads from Google Play unveil the discovery of SpinOk spyware

• The Perfect Blend: Qdoba’s SASE Transformation

• Zero-day vulnerability in MoveIt Transfer under attack

• How Do I Reduce Security Tool Sprawl in My Environment?

• Jetpack WordPress Plug-in API Bug Triggers Mass Updates

• 1Kosmos BlockID available in AWS Marketplace

• Resecurity presents Digital Identity Product to protect digital identities

• Most people are aware of their data trails, but few know how to deal with it: Okta study

• VentureBeat Q&A: CrowdStrike’s Michael Sentonas on importance of unifying endpoint and identity security

• What state unemployment modernization pilots get right

• 10 Top Governance, Risk and Compliance (GRC) Tools for 2023

• Amazon To Discontinue Celebrity Voices For Alexa – Report

• Google Drive Deficiency Allows Attackers to Exfiltrate Workspace Data Without a Trace

• Sustained ‘Red Deer’ Phishing Attacks Impersonate Israel Post, Drop RATs

• New Relic launches Amazon Security Lake integration

• Cobalt Iron Compass NAS Protector simplifies management of NAS data

• WithSecure’s USB armory enables post-quantum cryptography in space

• Secureworks strengthens industrial cybersecurity with two new offerings

• Automation risks creating a two-tier workforce of haves and have-nots

• NICE Framework (National Initiative for Cybersecurity Education Cybersecurity Workforce Framework)

• 6 ways Amazon Security Lake could boost security analytics

• S3 Ep137: 16th century crypto skullduggery

• Novel PyPI Malware Uses Compiled Python Bytecode to Evade Detection

• Where SBOMs Stand Today

• Evasive QBot Malware Leverages Short-lived Residential IPs for Dynamic Attacks

• Cracking the Code — How Machine Learning Supercharges Threat Detection

• The downside of frenemies

• BSA taps former chief acquisition officer as new procurement lead

• FTC charges Ring over ‘disregard’ for customer data security

• Ask Fitis, the Bear: Real Crooks Sign Their Malware

• Horabot Campaign Targets Spanish-Speaking Users in the Americas

• Announcing the Chrome Browser Full Chain Exploit Bonus

• Embracing Advanced Frameworks for Effective Vulnerability Management

• The role of cybersecurity in financial institutions -protecting against evolving threats

• The intersection of telehealth, AI, and Cybersecurity

• Mark Zuckerberg Announces Meta Quest 3 VR Headset

• How can Congress regulate AI? Erect guardrails, ensure accountability and address monopolistic power

• Satellite data could boost border security, disaster response

• How to determine exactly what personal information Microsoft Edge knows about you

• Void Rabisu’s RomCom Backdoor Reveals Shifting Threat Actor Goals

• Biometric Bypass: BrutePrint Makes Short Work of Fingerprint Security

• Unmasking XE Group: Experts Reveal Identity of Suspected Cybercrime Kingpin

• New Zero-Click Hack Targets iOS Users with Stealthy Root-Privilege Malware

• Uptycs integrates with Amazon Security Lake to provide telemetry across workloads

• CYTRACOM improves efficiency for MSPs with ControlOne platform updates

• Critical zero-day vulnerability in MOVEit Transfer exploited by attackers!

• Nozomi and Cynalytica team to deliver security solutions to OT & IoT environments

• Palo Alto Networks CEO Nikesh Arora: We don’t see the demand for cybersecurity slowing down

• Risk: Everything Everywhere All at Once

• Ransomware Attacks Pose Significant Threats to the Security of Medical Devices

• Most CEOs Increasingly Prioritise Cybersecurity Over Economic Performance

• Ransomware attack on Biotech company exposes info of over 2.5 million patients

• Amazon fined $31 million over privacy breaches, including snooping on kids

• Decade-old critical vulnerability in Jetpack patched on millions of WordPress websites

• 6 ways Amazon Security Lake could boost data security

• Potential Backdoor in Gigabyte PCs Exposes Supply Chain Risks

• Watch Out For These ChatGPT and AI Scams

• Lazarus Hackers Exploit Windows IIS Web Servers for Initial Access

• VPN Split Tunneling: A Better VPN Option?

• Meta Warns It May Pull News Content In California

• Twitter Value Collapses After Fidelity Writedown

• Toyota Discloses New Data Breach Involving Vehicle, Customer Information

• Russia Blames US Intelligence for iOS Zero-Click Attacks

• Russia Says U.S. Accessed Thousands Of Apple Phones In Spy Plot

• Amazon To Pay $30.8M For Alexa And Ring Privacy Violations

• New Vulnerability Gives MacOS Users A Migraine

• War Crimes Evidence Erased By Social Media Firms

• Researchers Tell Owners To Assume Compromise Of Unpatched Zyxel Firewalls

• Stellar Cyber integrates with Amazon Security Lake to boost data processing and threat detection

• Safe Security unveils Cyber Risk Cloud of Clouds platform

• Code42 names Wayne Jackson to its Board of Directors

• Increasingly Sophisticated Cyberattacks Target Healthcare

• Five ways enterprises can stop synthetic identity fraud with AI

• SolarWinds Transforms Brand to Signify Ongoing Evolution, Portfolio Expansion, and Customer Empowerment

• Expanding Our Global Partner Program

• Cisco Acquiring Armorblox for Predictive and Generative AI Technology

• Top macOS Malware Threats Proliferate: Here Are 6 to Watch

• New Threat Intelligence Report Provides Actionable Intelligence Against Cyberattacks

• Threat Actors Exploit Qbot Malware: Evolving Tactics for Stealthy Attacks

• Meet Charlotte, CrowdStrike’s New Generative AI Assistant

• Dark Reading Launches Inaugural CISO Advisory Board

• Top MacOS Malware Threats Proliferate: Here Are 6 to Watch

• How Wazuh Improves IT Hygiene for Cyber Security Resilience

• Malicious PyPI Packages Using Compiled Python Code to Bypass Detection

• Operation Triangulation: iOS devices targeted with previously unknown malware

• Resecurity appoints Shawn Loveland as COO

• Syxsense partners with VLCM to provide customers with endpoint security and management solutions

• Threat actors can exfiltrate data from Google Drive without leaving a trace

• 10 Effective Strategies To Safeguard Your IoT Network From Threats

• An Overview of Cloud Cryptography

• Moxa Patches MXsecurity Vulnerabilities That Could Be Exploited in OT Attacks

• The Role of Automation in Streamlining DevOps Processes

• Mitiga warns free Google Drive license lacks logging visibility

• BlackCat claims the hack of the Casepoint legal technology platform used by US agencies

• On the Catastrophic Risk of AI

• Amazon To Pay $30m Over Alexa, Ring Privacy Violations

• Dark Pink APT Group Compromised 13 Organizations in 9 Countries

• Ransomware Renaissance 2023: The Definitive Guide to Stay Safer

• Adobe Inviting Researchers to Private Bug Bounty Program

• Organizations Warned of Salesforce ‘Ghost Sites’ Exposing Sensitive Information

• Amazon Settles Ring Customer Spying Complaint

• Improved BlackCat Ransomware Strikes with Lightning Speed and Stealthy Tactics

• Zyxel firewalls under attack by Mirai-like botnet

• UK SMEs To Increase IT Investments In 2023

• PCI DSS 4.0 Requirements – Network Security Controls and Secure Configuration

• Critical Vulnerabilities Found in Faronics Education Software

• HMRC in New Tax Credits Scam Warning

• TechRepublic Premium editorial calendar: IT policies, checklists, toolkits and research for download

• Amazon to Pay $31m After FTC’s Security and Privacy Allegations

• Zyxel Customers Urged to Patch Exploited Bug

• Widespread exploitation by botnet operators of Zyxel firewall flaw

• Champions League: How to stay safe while streaming matches

• N. Korean ScarCruft Hackers Exploit LNK Files to Spread RokRAT

• Do you know what your supply chain is and if it is secure?

• Hackers Exploit Barracuda Zero-Day Flaw Since 2022 to Install Malware

• Amazon Ring, Alexa accused of every nightmare IoT security fail you can imagine

• Navigating cybersecurity in the age of remote work

• Why organizations should adopt a cloud cybersecurity framework

• Ukraine war blurs lines between cyber-crims and state-sponsored attackers

• Cyber Attack on exams and its impact on ambulances

• Critical vulnerability in Gigabyte Motherboards discovered

• Urgent WordPress Update Fixes Critical Flaw in Jetpack Plugin on Million of Sites

• Active Mirai Botnet Variant Exploiting Zyxel Devices for DDoS Attacks

• Infosec products of the month: May 2023

• Phishing campaigns thrive as evasive tactics outsmart conventional detection

• Fighting ransomware: Perspectives from cybersecurity professionals

• Disaster recovery challenges enterprise CISOs face

• Sharing your business’s data with ChatGPT: How risky is it?

• API security: key to interoperability or key to an organization?

• XDR meets IAM: Comprehensive identity threat detection and response with Microsoft

• Dark Pink cyber-spies add info stealers to their arsenal, notch up more victims

• [updated] Barracuda Networks patches zero-day vulnerability in Email Security Gateway

• CISA issues warning to US businesses: Beware of China’s state-sponsored cyber actor

• Microsoft gives Apple a migraine

• Financial services company OneMain fined $4.25 million for security lapses

• Feds, you’ll need a warrant for that cellphone border search

• FTC fines Amazon $25M for violating children’s privacy with Alexa

• AI has created areas so grey, you could write a song about it

• How OffSec’s Web Application Security Course Helps Technical Team Members Become Better Developers, Attackers, and Defenders

• A closer look at ID verification across state benefits applications

• IT Security News Monthly Summary – June

• IT Security News Daily Summary 2023-05-31

• Crypto Discord Communities Targeted by Malicious Bookmarks & JavaScript

• Never Use Credentials in a CI/CD Pipeline Again

• US deploys tech diplomacy to cultivate leadership in emerging fields

• DHS faces slow disaster response burdened by legacy systems, officials warn

• 8 best practices for securing your Mac from hackers in 2023

• Yet Another Toyota Cloud Data Breach Jeopardizes Thousands of Customers

• Experts warn of backdoor-like behavior within Gigabyte systems

• Decoding eBPF Observability: How eBPF Transforms Observability as We Know It

• Machine Learning Applications in the Cybersecurity Space

• Serious Security: That KeePass “master password crack”, and what we can learn from it

• British Healthcare System Accused Of Sharing Intimate Patient Details With Facebook Without Consent

• Can Cloud Services Encourage Better Login Security? Netflix’s Accidental Model

• The Right to Repair Is Law in Minnesota. California Should Be Next

• Debt ceiling politics could derail plans for modernizing unemployment benefits delivery

• MacOS ‘Migraine’ Bug: Big Headache for Device System Integrity

• Ways to Help Cybersecurity’s Essential Workers Avoid Burnout

• Shadow Data Concerns, Public Cloud Breaches Remain Sky-High: Here’s How Organizations Can Protect Themselves

• AI and China are ‘defining challenges of our time,’ CISA director says

• NASA team’s plan to decode UFO sightings hinges on better data

• Amazon Staff Walkout Over Environment, Return To Office Policies

• Draft AI Code Drafted Within Weeks – EU Official

• Phishing defense, one simulated email at a time

• Barracuda Email Security Gateways bitten by data thieves

• Barracuda zero-day bug exploited months prior to discovery

• Top 5 Application Security Tools & Software for 2023

• Organizations Warned Of Backdoor In Hundreds Of Gigabyte Motherboards

• Criminals spent 10 days in US dental insurer’s systems extracting data of 9 million

• How agencies can automate data extraction at scale

• Bitdefender GravityZone Security for Mobile provides protection against mobile attack vectors

• Rezilion Smart Fix improves software supply chain security

• Bitdefender Introduces GravityZone Security for Android, iOS, and Chromebook

• 10 ways to speed up your internet connection today

• The best VPN trials of 2023: Top VPNs to test for free

• 6 Best Bot Protection Solutions and Software for 2023

• Checkmarx Announces GenAI-powered AppSec Platform, Empowering Developers and AppSec Teams to Find and Fix Vulnerabilities Faster

• Investment May Be Down, but Cybersecurity Remains a Hot Sector

• Apple’s iOS 16.5 Fixes 3 Security Bugs Already Used in Attacks

• Cybercriminals Targeting Apache NiFi Instances for Cryptocurrency Mining

• Warning! WordPress Plugin ”Gravity Forms” Vulnerable to PHP Object Injection

• Adding Chrome Browser Cloud Management remediation actions in Splunk using Alert Actions

• Vulnerability Summary for the Week of May 22, 2023

• Buy-Now-Pay-Later (BNPL) is Revolutionising the E-Commerce Landscape

• New Mexico trying to build and train new workforce for broadband expansion

• New “Migraine” Flaw Enables Attackers to Bypass MacOS Security

• New eID Scheme Gives EU Citizens Easy Access to Public Services Online

• Software Liability And Hard Truths Of Manufacturer Responsibility

• Critical Barracuda 0-Day Was Used To Backdoor Networks For 8 Months

• Cyberwar Manufacturers Plot To Stay On Right Side Of US

• XFS Bug In Linux Kernel 6.3.3 Coincides With SGI Code Comebank

• Solar Panels at Risk of Cyber Attacks, warn Experts

• SeroXen RAT for sale

• Phishing-resistant MFA 101: What you need to know

• Twitter Sued By Janitors, As Musk Meets Chinese Officials

• Were you caught up in the latest data breach? Here’s how to find out

• SpinOk Trojan Compromises 421 Million Android Devices

• Virginia ABC officials say they’ve ‘automated’ liquor lotteries to prevent future errors

• Organizations Warned of Backdoor Feature in Hundreds of Gigabyte Motherboards

• Chrome 114 Released With 18 Security Fixes

• IDSA: Only 49% of Firms Invest in Identity Protection Before Incidents

• Mirai Variant Opens Tenda, Zyxel Gear to RCE, DDoS

• A Roadmap for Becoming a Penetration Tester in 2023

• Here’s How Quantum Computing can Help Safeguard the Future of AI Systems

• Critical Firmware Vulnerability in Gigabyte Systems Exposes ~7 Million Devices

• Chinese Hacking of US Critical Infrastructure

• Salt Security Attains AWS Security Competency Status

• 3 ways to spot a malware-infected app on your smartphone

• Threatening botnets can be created with little code experience, Akamai finds

• Threat actors are exploiting Barracuda Email Security Gateway bug since October 2022

• PingSafe helps organizations securely deploy containers with KSPM module

• ConnectSecure enhances its cybersecurity platform with deep attack surface scanning and EPSS

• Someone is roping Apache NiFi servers into a cryptomining botnet

• Permit.io launches FoAz to give frontend developers the keys to security

• NYC’s Metropolitan Opera Faces Lawsuit for 2022 Data Breach

• The pros and cons of the debt deal for states and localities

• Focus Security Efforts on Choke Points, Not Visibility

• Beware of Ghost Sites: Silent Threat Lurking in Your Salesforce Communities

• Critical Firmware Backdoor in Gigabyte Systems Exposes ~7 Million Devices

• AI: the cause of the metaverse’s demise?

• AI Leaders Warn Of ‘Extinction’ Risk To Humans

• Shut Down Phishing Attacks – Types, Methods, Detect, Prevention Checklist

• Critical Jetpack WordPress Flaw Exposes Millions of Website

• XFS bug in Linux kernel 6.3.3 coincides with SGI code comeback

• Millions of Gigabyte Motherboards Were Sold With a Firmware Backdoor

• Swiss real estate agency Neho fails to put a password on its systems

• When the popular safeguarding tool is anything but

• PyPI Enforces the Usage of Two-factor Authentication for All Software PUBLISHES

• This Campaign Delivers Three Malware Via Pirated Software Videos On YouTube

• Many Gigabyte PC models affected by major supply chain issue

• Salesforce ‘Ghost Sites’ Expose Sensitive Corporate Data

• Netskope integrates with AWS to simplify security data management

• Zyxel patches vulnerability in NAS devices (CVE-2023-27988)

• PingOne Protect prevents account takeover

• Hitachi Data Reliability Engineering improves the consistency of business-critical data

• 1Password tightens the thumbscrews for users of the old version of the password manager

• Spyware Found in Google Play Apps With Over 420 Million Downloads

• Breaking Enterprise Silos and Improving Protection

• 6 Steps to Effective Threat Hunting: Safeguard Critical Assets and Fight Cybercrime

• Microsoft Details Critical Apple macOS Vulnerability Allowing SIP Protection Bypass

• China Urges Japan To Drop Chip Export Restrictions

• Danni Brooke to Spotlight the Role of Women in Cyber at Infosecurity Europe 2023

• Nvidia Briefly Hits $1 Trillion Valuation

• Mirantis Lens Control Center simplifies secure Kubernetes deployments

• How APTs target SMBs

• MacOS Vulnerability Enables Hackers to Bypass SIP Root Restrictions

• Hackers Can Bypass Fingerprint Locks On Phones With BrutePrint Attack

• Investigating BlackSuit Ransomware’s Similarities to Royal

• Barracuda Zero-Day Exploited to Deliver Malware for Months Before Discovery

• Millions of WordPress Sites Patched Against Critical Jetpack Vulnerability

• Dark Pink APT Group Leverages TelePowerBot and KamiKakaBot in Sophisticated Attacks

• Cybersecurity Standards in the Banking Industry

• The Issue of Insider Threats: What you Need to Know

• Learn how to protect your company from cyberattacks for just $46

• Pentagon Cyber Policy Cites Learnings from Ukraine War

• Affiliate Marketing Meets Tech: Conferences Every Tech Geek Should Have On Their Radar

• How To Fulfil Your Dream Of Becoming A Digital Nomad In Australia

• Thinking straight in the SoC: How AI erases cognitive bias

• WordPress Rushes Out Jetpack Patch to Millions

• Centripetal Extends Innovative CleanINTERNET® Technology to the Cloud

• Dark Pink APT Group Expands Tooling and Targets

• RomCom RAT Using Deceptive Web of Rogue Software Sites for Covert Attacks

• Microsoft found a new bug that allows bypassing SIP root restrictions in macOS

• Kali Linux 2023.2 released: New tools, a pre-built Hyper-V image, a new audio stack, and more!

• Why performing security testing on your products and systems is a good idea

• UberEats to use 2000 AI powered robots for delivery by 2026

• The Transformative Power of Artificial Intelligence in Healthcare

• Alert: Hackers Exploit Barracuda Email Security Gateway 0-Day Flaw for 7 Months

• The strategic importance of digital trust for modern businesses

• Attackers leave organizations with no recovery option

• Organizations are placing OT cybersecurity responsibility on CISOs

• Managing mental health in cybersecurity

• RaidForums – 478,604 breached accounts

• A.I. poses human extinction risk on par with nuclear war, Sam Altman and other tech leaders warn

• Kali Linux 2023.2 Released – What’s New!

• Spotlight on 2023 Dan Kaminsky Fellow: Dr. Gus Andrews

• BackBox Launches Cisco CIS Benchmark Automation Templates

• Discord Admins Hacked by Malicious Bookmarks

• Barracuda Networks patches zero-day vulnerability in Email Security Gateway

• Polish Credentials – 1,204,870 breached accounts

• 1. This crypto-coin is called Jimbo. 2. $8m was stolen from its devs in flash loan attack

• Reduce Healthcare Insider Threats with Identity and Access Management

• 90+ orgs tell Slack to stop slacking when it comes to full encryption

• How Generative AI Will Remake Cybersecurity

• Ransomware Takes No Prisoners

• Web3 Needs A Truly Decentralized Infrastructure That IPFS Alone Cannot Deliver

• BlackCat (ALPHV) Ransomware Levels Up for Stealth, Speed and Exfiltration

• Human-Assisted CAPTCHA-Cracking Services Supercharge Shopper Bots

• IT Security News Daily Summary 2023-05-30

• Clean energy advancements hinge on steady funding, Energy official says

• Unmonitored networks put US nuclear arsenal at risk, GAO finds

• Windows 11: Enforcing password resets for local group users

• 421M Spyware Apps Downloaded Through Google Play

• Go Phish: How Attackers Utilize HTML Files to Evade Security

• SimpleTire Database Leak: Over 2.8 Million Records Exposed

• State looks to better assess vendor security

• IoT network streamlines state DOT traffic monitoring

• Agencies launch initiative to better identify minority-owned contractors

• Google offers certificate in cybersecurity, no dorm room required

• The Rush to SaaS Modernization Can Result in Reputational Damage

• Tenet and LayerZero Forge Cross-Chain LSD Adoption

• Debt limit deal would save feds’ paychecks, but freeze agency spending

• Federal Judge Makes History in Holding That Border Searches of Cell Phones Require a Warrant

• Pegasus-pusher NSO gets new owner keen on the commercial spyware biz

• The Perfect Blend: Qdoba’s SASE Information

• Vendors: Threat actor taxonomies are confusing but essential

• PyPI enforces 2FA authentication to prevent maintainers’ account takeover

• The Challenges with Passkeys: Addressing Limitations

• Authorization: Get It Done Right, Get It Done Early

• Budget and tech challenges loom over IRS’s direct file pilot

• GOP-led states plan new voter data systems to replace one they rejected

• Serious Security: Verification is vital – examining an OAUTH login bug

• Undetected Attacks Against Middle East Targets Conducted Since 2020

• Attackers hacked Barracuda ESG appliances via zero-day since October 2022

• EU’s Proposed Cyber Resilience Act Raises Concerns for Open Source and Cybersecurity

• Elon Musk Withdraws Twitter from EU’s Disinformation Code of Practice

• 9M Dental Patients Affected by LockBit Attack on MCNA

• New macOS vulnerability, Migraine, could bypass System Integrity Protection

• Telesign Trust Index a call to action for any enterprise that’s discounting cybersecurity

• Human Error Fuels Industrial APT Attacks, Kaspersky Reports

• Nigerian Cybercrime Ring’s Phishing Tactics Exposed

• CERN Spots Strange Higgs Boson Decay Breaking The Rules

• ABB Confirms Data Stolen In Black Basta Ransomware Attack

• Artificial Intelligence Could Lead To Extinction, Experts Warn

• Hacker Wins $105k For Reporting Flaws In Sonos One Speakers

• Introduction to the purpose of AWS Transit Gateway

• Warning: Lazarus Targets Windows IIS Web Servers For Initial Access

• Things ChatGPT cannot but Google Bard can do

• DogeRAT Malware Impersonates BFSI, Entertainment, E-commerce Apps

• Facebook Under Pressure For Allowing Racist Content To Spread In Australia

• ‘Hot Pixel’ Attack Exploits Novel GPUs and SoCs to Siphon Browsing History

• Raidforums Database Leak: Data of 460,000 Users Dumped Online

• How Web3 Is Driving Social and Financial Empowerment

• Now Social Engineering Attackers Have AI. Do You?

• PCI DSS 4.0: How to Delight the Auditors

• How Large is Your Target? Advice for the Smallest Businesses

• A database containing 478,000 RaidForums members leaked online

• RaidForums Members Data Leaked on New Hacking Forum

• Promoting Trust in Facial Recognition: Principles for Biometric Vendors

• Void Rabisu’s Use of RomCom Backdoor Shows a Growing Shift in Threat Actors’ Goals

• China Approves Microsoft-Activision Deal ‘Unconditionally’

• Incident Response Guide

• Many Vulnerabilities Found in PrinterLogic Enterprise Software

• Personal Information of 9 Million Individuals Stolen in MCNA Ransomware Attack

• PyPI Enforcing 2FA for All Project Maintainers to Boost Security

• Pentagon Leaks Emphasize the Need for a Trusted Workforce

• Why Attackers Target the Gaming Industry

• TenSec 2019

• Exploiting Wi-Fi Stack on Tesla Model S

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• Tencent Security Keen Lab: Experimental Security Assessment of Mercedes-Benz Cars

• Nvidia Set To Surpass $1tn As AI Surge Continues

• Google CTF 2023 – Rewards over $32,000 For Winners

• Implementing Risk-Based Vulnerability Discovery and Remediation

• CAPTCHA-Breaking Services with Human Solvers Helping Cybercriminals Defeat Security

• Hackers Win $105,000 for Reporting Critical Security Flaws in Sonos One Speakers

• Is Your Organization Prepared Against Insider Threats?

• Enhancing Collaboration and Efficiency in DataOps With Git

• Demystifying SPF Record Limitations

• Frontegg launches entitlements engine to streamline access authorization

• Tricks of the trade: How a cybercrime ring operated a multi‑level fraud scheme

• Operation Red Deer

• Facebook Shares Private Information With NHS Trusts

• Laravel vs. Django: A Head-to-Head Comparison

• Bitcoin Trades At Steep Discount On Binance Australia

• Check Point offers new OffSec course via the MIND Learning and Training Portal

• Ransomware Gangs Adopting Business-like Practices to Boost Profits

• Beware of the new phishing technique “file archiver in the browser” that exploits zip domains

• To Save the News, We Must Ban Surveillance Advertising

• Play-to-Earn Games: A Beginner’s Guide

• Samsung ‘Pushes For Tax Payouts’ In Vietnam

• Get 9 cybersecurity courses for just $46

• April 2023 Cyber Attacks Timeline

• Crypto Bosses Look To China Ahead Of Hong Kong Rules

• The Right Help Desk for You: Is It That Complicated?

• Dark Web Data Leak Exposes RaidForums Members

• BrutePrint Attack allows to unlock smartphones with brute-forcing fingerprint

• A Comprehensive Guide to Online Gaming Withdrawals in Michigan

• Pension Funds Warn Members Over Capita Breach

• Disaster recovery in the cloud

• Retailer Database Error Leaks Over One Million Customer Records

• Nine Million MCNA Dental Customers Hit by Breach

• Amazon Offers Term Time-Only Working Amidst Strikes

• The Gravitational Pull of Data

• Sneaky DogeRAT Trojan Poses as Popular Apps, Targets Indian Android Users

• What Are the Key Trends in Cybersecurity Right Now?

• The root causes of API incidents and data breaches

• Need to improve the detection capabilities in your security products?

• Podcast Episode: Who Inserted the Creepy?

• Nvidia Builds AI Supercomputer In Israel Amidst Surging Demand

• Cybersecurity news headlines trending on Google

• New Phishing Attack Abuses .Zip Domain to Emulate Fake WinRAR Within the Browser

• Organizations spend 100 hours battling post-delivery email threats

• Generative AI: The new attack vector for trust and safety

• Penetration tester develops AWS-based automated cracking rig

• DOD submits classified cyber strategy to Congress

• A week in security (May 22-28)

• 2023-05-29 – Pcap and malware for ISC Diary (ModiLoader/Remcos RAT)

• IT Security News Daily Summary 2023-05-29

• Lockbit ransomware attack on MCNA Dental impacts 8.9M individuals

• GitLab Released Emergency Fix For Critical Vulnerability – Update Now!

• Android Phone Hacked by ‘Daam’ Virus, Government Warns

• Chinese-Sponsored Hacking Group Targeting Critical U.S. Infrastructure, Microsoft Claims

• The Media & Entertainment Industries’ Major Public Cloud Security Issues

• Invicta Malware Delivered Through Fake GoDaddy Refund Invoices

• The Top 10 endpoint security challenges and how to overcome them

• The Future of Data Security: Staying Ahead of AI Threats

• XSS Flaw Riddled Beautiful Cookie Consent Banner WP Plugin

• New BrutePrint Attack Lets Attackers Unlock Smartphones with Fingerprint Brute-Force

• How to make sure the reputation of your products and company is good

• US Augusta City targeted by BlackByte Ransomware Group

• New Phishing Kit: File Archivers in the Browser

• Nvidia Builds AI Supercomputer In Israeli Amidst Surging Demand

• Comparing Cloud Hosting vs. Self Hosting

• New Go-written GobRAT RAT targets Linux Routers in Japan

• Is Cybersecurity An Unsolvable Problem?

• OneMain Pays $4.5M After Ignored Security Flaws Caused Data Breaches

• AI Opinion: I Do Not Think Ethical Surveillance Can Exist

• Senator Wyden Seems Surprised By US Govt Spyware Stance

• Arm Rolls Out Next-Gen Smartphone Chip Tech

• Data Breach at MCNA Dental Insurer Impacts 9 Million Users

• Kyocera AVX: Electronic Manufacturer Company the Current Target of LockBit

• Free VPN Experiences Massive Data Breach, Putting Users at Risk

• Jimbos Protocol Hack: $7.5 Million Lost in Latest DeFi Attack

• Researchers analyzed the PREDATOR spyware and its loader Alien

• New Mirai Variant Campaigns are Targeting IoT Devices

• Top Cyberattacks Revealed in New Threat Intelligence Report

• 3 Challenges in Building a Continuous Threat Exposure Management (CTEM) Program and How to Beat Them

• AceCryptor: Cybercriminals’ Powerful Weapon, Detected in 240K+ Attacks

• Foxconn Raises Pay At Key China iPhone Plant

• China ‘To Put Humans On Moon’ By 2030

• Gaming Popularity Reaching Transcendental Status

• New Bandit Malware Attacks Browsers to Steal Personal & Financial Logins

• Why is Montana banning TikTok?

• Lawyer Submits Brief With False ChatGPT-Generated References

• The Royal & BlackCat Ransomware: What you Need to Know

• A Brief Introduction to the World of IP Addresses

• New GobRAT Remote Access Trojan Targeting Linux Routers in Japan

• Twitter Quits EU Code Of Practice On Disinformation

• Tech-Driven House Hunting: How Technology is Revolutionizing the Rental Search Process

• Online Marketing Essentials: Budgeting and Strategy for Growing Businesses

• 5 Ways Technology is Simplifying the Certificate of Conduct Application Process

• Main Features of World of Warcraft Wrath of the Lich King

• Singapore Wealth Fund Cuts Pay Amidst FTX Fallout

• Protecting your business: Advice to SMB CEOs from a former CIO

• Software developers, how secure is your software?

• Don’t Click That ZIP File! Phishers Weaponizing .ZIP Domains to Trick Victims

• Attackers use encrypted RPMSG messages in Microsoft 365 targeted phishing attacks

• New York county still dealing with ransomware eight months after attack

• Critical Google Cloud’s SQL Service Flaw Exposes Sensitive Data

• PyPI Implements Mandatory Two-Factor Authentication for Project Owners

• CISO-approved strategies for software supply chain security

• What is SaaS Security? – Types, Challenges, Threats & Protection Guide

• Now ransomware hackers targeting backups for ransom pay assurance

• Cybersecurity Research Topics for Beginners: Exploring the Fundamentals

• Digital nomads drive changes in identity verification

• Company size doesn’t matter when it comes to cyberattacks

• Top public cloud security concerns for the media and entertainment industry

• 3 principles biometric vendors should embrace to promote trust in facial recognition technology

• Leadership Is Still Washing Their Hands of Cyber Risk

• Machine Identity Management: The Key to Managing Compliance Risk in a Multi-Cloud, Multi-Cluster World

• Protecting Accounting Firms from Cyberattacks

• IT Security News Weekly Summary – Week 21

• IT Security News Daily Summary 2023-05-28

• Best Practices For Website Design In 2023

• Industrial automation giant ABB disclosed data breach after ransomware attack

• What you need to know about the mindset and motivation of ethical hackers

• padre – Padding Oracle Attack Exploiter Tool

• OpenAI, the Maker of ChatGPT, Does not intend to Leave the European Market

• Three Ways AI-Powered Patch Management is Influencing Cybersecurity’s Future

• A Vulnerability in OAuth Exposed Social Media Logins to Account Takeover

• What is AceCryptor Malware? A Quick Insight

• Unleashing the Power of AI with Caution: Understanding Cybersecurity Risks

• New Bandit Stealer targets web browsers and cryptocurrency wallets

• Week in review: Zyxel firewalls vulnerability, phishing campaign targets ChatGPT users

• Cyber Security Management System (CSMS) for the Automotive Industry

• Commercial PREDATOR Spyware – Delivered Through Zero-Click Exploit

• CISA adds recently patched Barracuda zero-day to its Known Exploited Vulnerabilities catalog

Generated on 2023-06-04 23:59:10.510662