IT Security News Weekly Summary – Week 31

• IT Security News Daily Summary 2023-08-06

• Hospitals Paralyzed by Cyberattack, Emergency Services Diverted

• NIS2: 1. Perform a gap analysis

• Amazon Executive Lacks Data for Return-to-Office Mandate

• Worldcoin’s Iris-Scanning Technology: A Game-Changer or a Privacy Concern

• VMCONNECT: Malicious PyPI Package Mimicking Common Python Tools

• System Architecture: Move Authentication to the API Gateway

• Cyber Security Today, August 4, 2023 – The shadow hanging over IT networks

• Employee banking information stolen from Tennis Canada in cyber incident: Report

• Hinton vs. Murdoch: A tale of two AIs

• Cyber Security Today, Week in Review for Friday, August 4, 2023

• Tricky Malware Uses Versioning to Outsmart Google Play Store Scanners

• Microsoft fixed a flaw in Power Platform after being criticized

• Hackers Have Scored Unlimited Airline Miles, Targeting One Platform

• Don’t Shut Off ChatGPT, Implement a Managed Allowance Instead

• Facebook Preparing To Release Chatbots That Can Gather Your Data

• US Senators Propose Privacy Reform to Tame Artificial Intelligence

• Contemplating Import Restrictions for PCs and Laptops to Secure Digital Infrastructure

• One Defense Against Data Breaches: Don’t Have the Data to Begin With

• Heard At RSAC 2023 – Protecting the Protectors

• Colorado Department of Higher Education (CDHE) discloses data breach after ransomware attack

• Hacktivists Embrace Cybercrime Tactics for Funding

• How Board Rooms are adapting to remote work and hybrid models

• Salesforce Zero-Day Flaw Exploited In Facebook Phishing Attacks

• How to Automatically Delete Passcode Texts on Android and iOS

• From UV Light to Pure Air: Demystifying PCO Cell Technology – 2023 Guide

• Week in review: AWS SSM agents as RATs, Patch Tuesday forecast

• BlueCharlie changes attack infrastructure in response to reports on its activity

• Security Affairs newsletter Round 431 by Pierluigi Paganini – International edition

• Cyber Security Management System (CSMS) for the Automotive Industry

• AI knows what you type by simply listening

• FBI warns users of NFT theft by malicious developers

• IT Security News Daily Summary 2023-08-05

• Reptile Rootkit employed in attacks against Linux systems in South Korea

• With CISOs’ Evolved Roles, They Must Also Evolve Their Ways

• Artificial Intelligence Contributes to Escalating Ransomware Threats

• Microsoft’s Security Practices Under Fire: Is the Azure Platform Safe

• Hackers Deliver Updated STRRAT Malware Using Weaponized PDF Files

• Unlocking the ChatGPT Plus and Code Interpreter Add-On’s Capabilities

• Safeguard Your Home Against Rising Cyber Threats, Here’s All You Need To Know

• Worldcoin Suspended in Kenya as Thousands Queue For Free Money

• Spyware maker LetMeSpy shuts down after hacker deletes server data

• New PaperCut flaw in print management software exposes servers to RCE attacks

• Burger King’s Data Breach Exposes Sensitive Credentials

• Security News This Week: The Cloud Company at the Center of a Global Hacking Spree

• Microsoft Bids Farewell to Cortana App on Windows 11

• Hackers Deliver Magniber Ransomware Disguised as Windows Security Update

• Check cybersecurity pre-invest – Week in security with Tony Anscombe

• Reptile Rootkit: Advanced Linux Malware Targeting South Korean Systems

• MDR: Empowering Organizations with Enhanced Security

• Microsoft Addresses Critical Power Platform Flaw After Delays and Criticism

• Build or Buy your own antivirus product

• Artificial Intelligence Governance Professional Certification – AIGP

• Researchers Uncover New High-Severity Vulnerability in PaperCut Software

• EFF to 9th Circuit: App Stores Shouldn’t Be Liable for Processing Payments for User Content

• Microsoft Teams used in phishing campaign to bypass multi-factor authentication

• The end looms for Meta’s behavioural advertising in Europe

• CSPM vs CWPP vs CIEM vs CNAPP: What’s the Difference?

• NY Couple Pleads Guilty to $4.5B Bitcoin Theft in Bitfinex Hack

• Protecting data in the era of generative AI: Nightfall AI launches innovative security platform

• UK’s NCSC Publishes New Shadow IT Guidance

• A cyberattack impacted operations of multiple hospitals in several US states

• Two US Navy sailors charged with giving Chinese spies secret military info

• How to Find & Choose IT Outsourcing Services

• IT Security News Daily Summary 2023-08-04

• Google’s new settings let you remove your private info from search results. Here’s how

• Friday Squid Blogging: 2023 Squid Oil Global Market Report

• A.I. is a trend that will stick with us for quite some time, says CloudFlare CEO Matthew Prince

• Salesforce Zero-Day Exploited to Phish Facebook Credentials

• Endor Labs Raises $70M to Reform Application Security and Eliminate Developer Productivity Tax

• Cloud Security Market Worth $62.9B by 2028

• Microsoft mitigates Power Platform Custom Code information disclosure vulnerability

• Alarm raised over Mozilla VPN: Wonky authorization check lets users cause havoc

• Infrastructure as Code: Exploring Terraform’s Dominance

• Hawaii’s Gemini North Observatory Suspended After Cyberattack

• Burger King Serves Up Sensitive Data, No Mayo

• The Senate’s AI Future Is Haunted by the Ghost of Privacy Past

• Pixel Binary Transparency: verifiable security for Pixel devices

• 2023-08-03 – Google ad –> TurboTax site –> DanaBot

• Europe’s AI Regulation Against AI Era

• 8 vulnerability management tools to consider in 2023

• Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016

• Globally Used Points.com Loyalty System Hacked for Good

• Another major university is supporting generative AI use but with serious guardrails

• 9 common risk management failures and how to avoid them

• “Crocodile of Wall Street” and her husband plead guilty to giant-sized cryptocrimes

• The Impending Privacy Threat of Self-Driving Cars

• This leading cybersecurity stock’s selloff may be another buying opportunity

• Security Alert: Google AMP Used in Evasive Phishing Attacks

• Top 15 Data Security Posture Management (DSPM) platforms for 2023

• What your peers want to know before buying a DLP tool

• Hackers Deliver Magniber Ransomware Disguised as Windows Security Update Package

• A Cyberattack Has Disrupted Hospitals and Health Care in Five States

• Stealthy npm Malware Exposes Developer Data

• Israel cybersecurity agency says no breach after senior official self-infects home PC with malware

• CISA Announces 2024-2026 Strategic Plan

• VMConnect: Python PyPI Threat Imitates Popular Modules

• US House Panel Launches Probe Into China’s US Gov Email Hack

• New Malware can Allow Control of macOS Without Users Noticing

• How to protect mobile phone from malware attacks

• Sophisticated Phishing Exploits Zero-Day Salesforce Vulnerability

• What Is a One-Time Password (OTP)?

• In Other News: Cybersecurity Funding Rebounds, Cloud Threats, BeyondTrust Vulnerability

• Meet Window Snyder, the trailblazer who helped secure the internet and billions of devices

• Meet Cloud Girls 2023 Trailblazer Trisha Paine

• 8 Best Identity and Access Management (IAM) Solutions for 2023

• The Top 10 Countries Being Bombarded By Data Breaches

• Five Eyes Agencies Call Attention To Most Frequently Exploited Vulns

• Wannabe Rapper Guilty Of $4.5bn Bitcoin Laundering

• Threat Actors Abuse Cloudflare Tunnel For Persistence

• Hacktivism Is Back Because It Never Went Away

• Digital skills gap is challenging the cyber security of UK businesses

• Top 12 vulnerabilities routinely exploited in 2022

• Datadog Security Inbox brings various security insights together into one actionable list

• Why Cybersecurity Provision is Critical for Businesses, Large and Small

• Hidden Camera Invasion Alert: Holiday Rentals Discovered with a Disturbing Surge

• FBI Alerts: Hackers Exploit AI for Advanced Attacks

• Why cybersecurity vendors are selling tech stack consolidation with Zero Trust Edge

• Microsoft Criticized Over Handling of Critical Power Platform Vulnerability

• Threat Actors Abuse Cloudflare Tunnel for Persistent Access, Data Theft

• Teach a Man to Phish and He’s Set for Life

• How to Talk So Your CISO Will Listen

• Health data of 1.7 million Oregon residents accessed by MOVEit hackers

• How To Deal With the Vagueness in New Cyber Regulations

• Malicious packages in the NPM designed for highly-targeted attacks

• Lawsuit By Tesla Owners Allege False Range Claims

• Google, Microsoft Take Refuge in Rust Language’s Better Security

• NYC Couple Pleads Guilty to Money Laundering in $3.6 Billion Bitfinex Hack

• Kinetic MDR protects business data from cyber threats

• Cobalt Iron Compass Migrator automates data migration from legacy backup environments

• New York Couple Plead Guilty to Bitcoin Laundering

• Points.com Vulnerabilities Allowed Customer Data Theft, Rewards Program Hacking

• Kenya Halts Worldcoin Data Collection, Citing Privacy

• Researchers Jailbreak Tesla Vehicles, Gain Control Over Paid Features

• Webinar – Making PAM Great Again: Solving the Top 5 Identity Team PAM Challenges

• Deepfence ThreatStryker offers runtime protection and inline threat neutralization

• 5 Easy Steps to Make Customer Reviews Your Most Potent Marketing Arsenal

• Turnkey cars: A one-stop solution for modern drivers

• Ensuring Accountability: The Importance of Audit Assurance Services

• CISA Advisory of Top 42 Frequently Exploited Flaws of 2022

• Attackers use dynamic code loading to bypass Google Play store’s malware detections

• Apple Shares Fall, Amid Weak iPhone Sales

• Cloud Security in Hybrid and Multi-Cloud

• Microsoft Warns of Growing Cyber-Threats to Sporting Events

• Malicious npm Packages Found Exfiltrating Sensitive Data from Developers

• August 2023 Patch Tuesday forecast: Software security improvements

• Datadog Intelligent Test Runner helps organizations allocate their cloud expenses

• Google makes removal of personal user info from Search easier

• Schools: Prime Targets for Hackers Amid Poor Cybersecurity and Ransom Payments

• Ransomware attacks cost manufacturing sector $46 billion in downtime since 2018, report claims

• Exploitation of Ivanti EPMM Flaw Picking Up as New Vulnerability Is Disclosed

• Economic uncertainty leaves over 1 mil UK SMEs at brink of collapse

• Microsoft Teams Users Targeted by Russian Threat Group

• Patch Against Exploit Kits. Understanding How Threat Actors Target Your Defenses

• Five Eyes Agencies Call Attention to Most Frequently Exploited Vulnerabilities

• Credentials Account For Over Half of Cloud Compromises

• Crowdsourced AI += NICS Lab

• What is Business Email Compromise (BEC) Attacks? – Prevention Guide

• Legacy Flaws Dominate Top 12 Vulnerabilities List

• Essential Tips for Small Businesses: Choosing the Right Workers’ Comp Insurance

• HEAT Attacks Vs Apts – What Is the Difference?

• UK Government: Cyber-Attacks Could Kill or Maim Thousands

• 8 Best CrowdStrike Competitors & Alternatives in 2023 [Features, Pricing & Reviews]

• Locking Out Cybercriminals: Here’s How to Prevent Ransomware Attacks

• How a Residential Proxy Service Can Benefit Your Business

• Harnessing the Power of Cloud Computing: A Comprehensive Guide for Business Owners

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Silicon UK In Focus Podcast: Telemedicine

• Major Cybersecurity Agencies Collaborate to Unveil 2022’s Most Exploited Vulnerabilities

• CISA, FBI, and NSA published the list of 12 most exploited vulnerabilities of 2022

• Silicon UK Pulse: Your Tech News Update: Episode 13

• Hacker Group of 1980s is Back with Secure Coding Framework for Developers

• Citrix servers hacked because of a vulnerability

• Key Concepts in Cloud Security for Beginners

• Mysterious Team Bangladesh Hackers Launched 750 DDoS Attacks and Hacked 78 Website

• The direct impact of cyberattacks on patient safety and care delivery

• New infosec products of the week: August 4, 2023

• Multi-modal data protection with AI’s help

• How to improve employee phishing awareness

• VPNs remain a risky gamble for remote access

• Break IT/OT Silos by Expanding SOC Responsibilities

• Red Hat Insights Compliance: Introducing new customization options for policies

• IaaS networking services revenue to hit $19.4 billion in 2023

• Couple admit they laundered $4B in stolen Bitcoins after Bitfinex super-heist

• Global ransomware attacks at an all-time high, shows latest 2023 State of Ransomware report

• Hey, are you REALLY ready to go on vacation? (No, you aren’t)

• How to protect your child’s identity

• FAQ: How does Malwarebytes ransomware rollback work?

• Film companies lose battle to unmask Reddit users

• CISA Calls Urgent Attention to UEFI Attack Surfaces

• Cyber Signals: Sporting events and venues draw cyberthreats at increasing rates

• Celebrating Ten Years of Encrypting the Web with Let’s Encrypt

• IT Security News Daily Summary 2023-08-03

• New AI Threats Emerge as FraudGPT Creator Unleashes DarkBERT and DarkBART

• Russia’s Cozy Bear is back and hitting Microsoft Teams to phish top targets

• SOC 2 (System and Organization Controls 2)

• Risk & Repeat: Microsoft takes heat over Storm-0588 attacks

• MoveIt Transfer attacks dominate July ransomware disclosures

• Qualys Announces First-Party Software Risk Management Solution

• Tromzo secures $8M to lead the charge in AI-powered application security posture management

• SolarWinds Next-Generation Build System Aligns with NIST SSDF

• Cybersecurity: How Can Companies Benefit From FBI and Homeland Security Collaboration?

• Could C2PA Cryptography be the Key to Fighting AI-Driven Misinformation?

• Center for Cyber Safety and Education Awards $174K in Cybersecurity Scholarships

• Vulcan Cyber Attack Path Graph Targets Cloud-Scale Risk Prioritization and Mitigation

• Mission Secure, Idaho National Laboratory Announce Partnership to Protect Critical Infrastructure

• Decommissioned medical infusion pumps sold on secondary market could reveal Wi-Fi configuration settings

• Tromzo secures $8M to lead the charge in AI-powered cloud security solutions

• Risk appetite vs. risk tolerance: How are they different?

• Free Airline Miles, Hotel Points, and User Data Put at Risk by Flaws in Points Platform

• Old-school hacktivism is back because it never went away

• Bringing threat intelligence and adversary insights to the forefront: X-Force Research Hub

• Datadog launches AI helper Bits and new model monitoring solution

• S3 Ep146: Tell us about that breach! (If you want to.)

• China To Limit Time Kids Use Smartphones

• Operation Narsil INTERPOL Busts Decade-Old Child Abuse Network

• TPG Acquires Forcepoint Government & CI (G2CI) Business for $2.45B

• Insider Threat Protection And Modern DLP

• Arc Browser Review (2023): Pricing, Features, Alternatives and More

• Companies Should Implement ROI-Driven Cybersecurity Budgets, Expert Says

• Hacktivist Group ‘Mysterious Team Bangladesh’ Goes on DDoS Rampage

• Microsoft Bug Bounty Program Year in Review: $13.8M in Rewards

• Cisco announces general availability of XDR platform

• World Cup Glory Looms, and So Do Cyber Threats, Microsoft Warns

• Cult of the Dead Cow Hacktivists Give Life to ‘Privacy-First’ App Framework

• Openreach Saves £10m, Extends FTTP Rollout Via ‘Subtended Headends’

• Data breaches grow nearly three times, with US accounts most compromised

• 670 ICS Vulnerabilities Disclosed by CISA in First Half of 2023: Analysis

• Jericho Security Raises $3 Million for Awareness Training Powered by Generative AI

• How to Prevent Cross-Site Scripting (XSS) Attacks

• Exclusive: CISA Sounds the Alarm on UEFI Security

• As Artificial Intelligence Accelerates, Cybercrime Innovates

• Malicious Apps Use Sneaky Versioning Technique to Bypass Google Play Store Scanners

• Data Leak from Far-Right Forum Poast Reveals Daycare Owner with Nazi Avatar

• What Is Global Privacy Control (GPC), and how can it help you protect your data?

• Protecting energy infrastructure from cyberattacks

• Researchers Leverage ChatGPT to Expose Notorious macOS Malware

• Hacktivist Collective “Mysterious Team Bangladesh” Revealed

• Security Concerns Escalate as Unsafe VPNs Pose Major Threat to Businesses

• Hackers using Flipper Zero to Cyber Attack Power Grids

• Ebooks are cheap, but you might pay in other ways

• Jericho Security uses AI to fight AI in new frontier of cybersecurity

• Cisco Talos Discusses Flaws in SOHO Routers Post-VPNFilter

• Russia’s ‘Midnight Blizzard’ Hackers Launch Flurry of Microsoft Teams Attacks

• Report: Possible Chinese Malware in US Systems a ‘Ticking Time Bomb’

• ‘Room-Temperature Superconductor Claim Triggers Investigation

• CISA Guide to Network and System Administrators to Harden Cisco Firewalls

• Microsoft Teams Targeted in Midnight Blizzard Phishing Attacks

• Hundreds of Citrix NetScaler ADC and Gateway Servers Hacked in Major Cyber Attack

• New Version of Rilide Data Theft Malware Adapts to Chrome Extension Manifest V3

• RFP Template for Browser Security

• Top 3 CISO concerns for 2023

• Qualys unveils first-party software risk management solution

• Contrast Security helps organizations identify susceptible data flows to their LLMs

• Empowering the User: An Interview with Guy Guzner on SAVVY’s User-Centric Security Solution

• HackerOne Lays off 12% of Its Employees as a One-Time Event

• DevSecOps: Enhancing Security With Vulnerability Scanning of Images and Source Code in CI/CD

• Decommissioned Medical Infusion Pumps Expose Wi-Fi Configuration Data

• These Are the Top Five Cloud Security Risks, Qualys Says

• Dozens of RCE Vulnerabilities Impact Milesight Industrial Router

• Germany Admits Investigating Worldcoin’s Eye-Scanning Orb

• AI Experts Unearth Infinite ways to Bypass Bard and ChatGPT’s Safety Measures

• Virtual Data Rooms: The Key to Successful IPO Preparation and Investor Relations

• Microsoft Identifies Russia-Based Hackers For Teams Phishing Attacks

• All CISOs should know this about cloud network security

• Facebook Caves And Will Now Seek User Consent Before Collecting Data

• Piles of Unpatched IoT, OT Devices Attract ICS Cyberattacks

• Dasera Mesa Verde protects sensitive information across diverse data environments

• CISO Global enhances Argo platform to improve real-time security decision making

• Unprecedented Data Breach: Millions Impacted by Personal Information Theft via Website Error

• Was the digital transformation worth it, security-wise?

• LogRhythm vs Splunk (2023): SIEM tool comparison

• How to Create an Effective GRC Program: 3 Phases

• Researchers jailbreak a Tesla to get free in-car feature upgrades

• Endor Labs, which helps companies secure their open source packages, raises $70M

• The Technology Behind Fair Gambling: Ensuring Transparency and Integrity

• Penetration Testing: A Comprehensive Guide

• A Penetration Testing Buyer’s Guide for IT Security Teams

• Russia-backed hackers used Microsoft Teams to breach government agencies

• Orange and Palo Alto Networks Deliver Cloud-Native Managed SASE

• Cult Of The Dead Cow Is Trying To Release A New Encryption Protocol

• Microsoft Says Russian Govt Hackers Behind Teams Phishing Attacks

• Salesforce Email Service Zero-Day Exploited In Phishing Campaign

• MS Comes Under Criticism For Grossly Irresponsible Security

• These Are The Top Five Cloud Security Risks, Qualys Says

• Endor Labs raises $70 million to expand into other areas of code and pipeline security

• Russian APT phished government employees via Microsoft Teams

• Onyxia’s CPM platform enables CISOs to optimize their security programs

• Lineaje BOMbots remediate security issues using generative AI

• Beware of Fake FlipperZero Sites That Promise Free Device Offer

• Cyber-Attacks Targeting Government Agencies Increase 40%

• Midnight Blizzard conducts targeted social engineering over Microsoft Teams

• Menlo Leverages Advanced Technology to Combat Surging Browser Threats

• OWASP Top 10 for LLM (Large Language Model) applications is out!

• X Sued By AFP, Twitter Sues Hate Watchdog

• Social Media Marketing with Residential Proxies: Things You Must Know

• Torq Socrates delivers automated contextual alert triaging, incident investigation, and response

• Russian Midnight Blizzard Hackers Hit MS Teams in Precision Attack

• The Role of Continuous Testing in Delivering Quality Digital Experiences

• How Malicious Android Apps Slip Into Disguise

• Humans Unable to Reliably Detect Deepfake Speech

• Fake Android App Enables Hackers to Steal Signal and WhatsApp User Data

• Hackers Abuse AWS SSM Agent to Perform Various Malicious Activities

• Cybersecurity M&A Roundup: 42 Deals Announced in July 2023

• Deloitte and Palo Alto Networks help clients increase operational efficiency with new SSDL offering

• Ivanti discloses another vulnerability in MobileIron Core (CVE-2023-35082)

• “Mysterious Team Bangladesh” Targeting India with DDoS Attacks and Data Breaches

• Microsoft Flags Growing Cybersecurity Concerns for Major Sporting Events

• Cloud Key Management Solution for Azure, Azure Stack and M365

• Ransomware on manufacturing industry caused $46bn in losses

• Managed Security Service Providers (MSSPs) on the Rise. A Vendor’s View on Current Landscape & Future Trends

• June 2023 Cyber Attacks Statistics

• US Starts Probe Of Alleged China Hack Of Federal Emails

• Salesforce Email Service Zero-Day Exploited in Phishing Campaign

• Google Awards Over $60,000 for V8 Vulnerabilities Patched With Chrome 115 Update

• Uncover Your Cybersecurity Blind Spots

• What’s happening in the world of crimeware: Emotet, DarkGate and LokiBot

• Silicon Insights: The State of MarTech: Part 2 Podcast

• Silicon Insights: The State of MarTech: Part 1 Podcast

• Cocaine Smugglers that Posed as PC Sellers Jailed

• Rapid7 found a bypass for the recently patched actively exploited Ivanti EPMM bug

• Brit healthcare body rapped for WhatsApp chat sharing patient data

• Is secure-by-default an achievable reality?

• Hundreds of Citrix Endpoints Compromised With Webshells

• Cool, Aesthetic, Good & Unique Twitter Username – Stand Out in Style

• Ivanti Patches Yet Another Critical Flaw

• Russian APT29 conducts phishing attacks through Microsoft Teams

• Software Supply Chain Startup Endor Labs Scores Massive $70M Series A Round

• Manufacturing Sector Reeling From Financial Costs of Ransomware

• 7 fake cryptocurrency investment apps discovered in Google Play, Apple App Store

• How to Login to GoDaddy Account – 3 Popular Methods

• Prepare for plenty more pain from Ivanti’s MDM flaws, warn cyber agencies

• Do you know what your supply chain is and if it is secure?

• Hackers targeting air-gapped devices in Eastern Europe with new malware

• Ongoing Attacks: Over 600+ Citrix Servers Compromised to Install Web Shells

• Endor Labs raises $70M to ease application security, streamline developer productivity

• Microsoft Exposes Russian Hackers’ Sneaky Phishing Tactics via Microsoft Teams Chats

• 7 Container Security Best Practices For Better Apps

• Google’s AI Red Team: Advancing cybersecurity on the AI frontier

• Cisco Introduces Automated Ransomware Recovery Solution for Enhanced Cybersecurity

• White House Announced the National Cybersecurity Strategy Implementation Plan

• Researchers Discover Bypass for Recently Patched Critical Ivanti EPMM Vulnerability

• SCARF cipher sets new standards in protecting sensitive data

• How local governments can combat cybercrime

• Assess multi-cloud security with the open-source CNAPPgoat project

• Ransomware business model-What is it and how to break it?

• Organizations want stronger AI regulation amid growing concerns

• CISOs Leading Cyber Risk Engagement with C-Suite & Board

• Performance and security clash yet again in “Collide+Power” attack

• MagicDuel – 138,443 breached accounts

• Ivanti patches second zero-day vulnerability being used in attacks

• Minecraft fans beware: Players and servers at risk from BleedingPipe vulnerability

• CISOs Need Backing to Take Charge of Security

• What is Advanced Persistent Cyber Threat Hunting, and why is it important?

• Russian APT ‘BlueCharlie’ Swaps Infrastructure to Evade Detection

• Events Ripper Updates

• Facebook Apparently Will Ask for Consent Before Showing Behavioral Ads to Some Users

• Microsoft Catches Russian Government Hackers Phishing with Teams Chat App

• Menlo Security Establishes Browser Security With AI-Powered Phishing and Ransomware Protection

• Building a Resilient Cyber Team

• IT Security News Daily Summary 2023-08-02

• Still No Death Star In Sight

• Tanium Selected by DHS CISA to Join the Joint Cyber Defense Collaborative

• Guardio Uncovers Zero-Day Vulnerability in Salesforce’s Email Services

• BeyondTrust’s Identity Security Insights Provides Unprecedented Visibility into Identity Threats

• HackerOne lays off 12% workforce as ‘one-time event’

• Hackers already installed web shells on 581 Citrix servers in CVE-2023-3519 attacks

• A Clear Road To Net Zero – Tackling Data Centre Sustainability Myths

• Global Optical Sensor Market to Reach $45.56B by 2030, Rising Demand in Consumer Electronics and IoT Applications

• SynSaber and ICS Advisory Project Identify Vulnerability Trends Within The Critical Infrastructure Sector

• Solvo Unveils SecurityGenie: A Revolutionary ChatGPT-Like Solution for Cloud Security Teams

• Instagram Flags AI-Generated Content

• VALIC Retirement Services Company Experiences PBI Data Breach Exposing Approximately 798,000 Social Security Numbers

• The best security cameras of 2023: Expert reviewed

• Zero-day in Salesforce email services exploited in targeted Facebook phishing campaign

• Tesla Investigated Over Steering Problems

• Torq launches Torq Socrates, an AI agent for Tier-1 SecOps threat resolution

• Iranian Company Plays Host to Reams of Ransomware, APT Groups

• Shield and Visibility Solutions Target Phishing From Inside the Browser

• Hot Topic Apparel Brand Faces Credential-Stuffing Attack

• Iran’s APT34 Hits UAE With Supply Chain Attack

• Mondee security lapse exposed flight itineraries and unencrypted credit card numbers

• Tech Consolidation – How and When?

• Impact of Freenom halting registrations on cybercrime

• NodeStealer 2.0 Poses as ‘Microsoft’ to Hack Facebook and Browser Data

• How To Approach Dependency Management in Java [Video]

• UN Cybercrime Convention Negotiations Enter Final Phase With Troubling Surveillance Powers Still on the Table

• Amazon Clinic Rolls Out Across US, As Healthcare Push Continues

• Cyber-Insurance Underwriting Is Still Stuck in the Dark Ages

• The State Of Cybersecurity – Outlook And Challenges For 2023 And Beyond

• Emerging Cybersecurity Threat: How Google AMP Phishing Attacks Are Bypassing Email Security Measures

• AI-Powered CryptoRom Scam Targets Mobile Users

• Burger King forgets to put a password on their systems, again

• Safeguarding Against Pharming Cyber Attacks: Tips for Enhanced Security

• BT Appoints Allison Kirkby As Carrier’s First Female CEO

• jQuery vs. Angular: Common Differences You Must Know

• Threat Actors Use AWS SSM Agent as a Remote Access Trojan

• Keeper empowers cybersecurity advocates with new Influencer Programme

• Care Bears and Open Campus Launch Educational Games on Climate Change

• Users of Facebook for Business are the Target of a New Phishing Attack

• Researchers Uncovered a New Flaw in ChatGPT to Turn Them Evil

• Cloud Firm Under Scrutiny For Suspected Support of APT Operations

• It’s A Hot 0-Day Summer For Apple, Google, And Microsoft Security Fixes

• Nearly All Modern CPUs Leak Data To New Collide+Power Side Channel Attack

• Wi-Fi Vuln In Canon Inkjet Printers May Expose User Information

• Firefox 116 Patches High Severity Vulnerabilities

• New hVNC macOS Malware Advertised On Hacker Forum

• Traceable AI combats API abuse with digital fraud prevention capabilities

• Salesforce and Meta suffer phishing campaign that evades typical detection methods

• Sonar’s new deep-analysis capability discovers and fixes code security issues

• Eyes on IDOR Vulnerabilities! US and Australia Release Joint Advisory

• White House Panel Recommends Restricting the FBI’s Access to spy Data

• Designers Still Have an Opportunity to Get AI Right

• Royal Mail Begins UK’s First Drone Delivery Postal Service

• Beware! Hacker-Sold macOS HVNC Tool Allows Complete Takeover

• Cyble Raises $24 Million for AI-Powered Threat Intelligence Platform

• New hVNC macOS Malware Advertised on Hacker Forum

• Russian Cyber Adversary BlueCharlie Alters Infrastructure in Response to Disclosures

• The generative A.I. battle between companies and hackers is starting

• Here’s How Microsoft Fought Against Ireland’s HSE Attackers

• Bad Hygiene: New Study Uncovers Common Security Failures of Cloud-First Organizations

• SSH Remains Most Targeted Service in Cado’s Cloud Threat Report

• Review of Recent NPM-Based Vulnerabilities

• Tesla Jailbreak Unlocks Theft of In-Car Paid Features

• Blocking Access to AI Apps is a Short-term Solution to Mitigate Safety Risk

• The BleedingPipe RCE Exploit Presents Minecraft With a New Security Challenge

• Utilities Face Security Challenges as They Embrace Data in New Ways

• Phishers Exploit Salesforce’s Email Services Zero-Day in Targeted Facebook Campaign

• Industrial Control Systems Vulnerabilities Soar: Over One-Third Unpatched in 2023

• US, Norway say hackers have been exploiting Ivanti zero-day since April

• PrivacyHawk Privacy Score enables users to understand their privacy and data risk

• Cyble raises $24 million to enhance its AI-driven security solutions

• Attackers can turn AWS SSM agents into remote access trojans

• Armis partners with Security Risk Advisors to protect cyber physical systems

• Melton Littlepage joins 1Password as CMO

• Best Health and Nutrition Apps to Kickstart Your Wellness Journey 2023

• Rolls Royce targeted in a sophisticated Cyber Attack with potential Data Breach

• Juice Jacking Cyber Attack: The Hidden Threat at Public Charging Stations

• Staff at NHS Lanarkshire Exposed Patient`s Data on Unauthorized WhatsApp Group

• Microsoft Defender for Office 365 gets highest rating in SE Labs Enterprise Email Security Services test for Q1 2023

• ARM Targets $60 Billion Valuation For IPO

• Unified XDR and SIEM Alleviate Security Alert Fatigue

• Analyzing Android and iOS Cybersecurity Vulnerabilities

• The Future of Cloud Computing: Unleashing the Power of the Cloud

• Google AMP Abused in Phishing Attacks Aimed at Enterprise Users

• Firefox 116 Patches High-Severity Vulnerabilities

• Researchers Uncover AWS SSM Agent Misuse as a Covert Remote Access Trojan

• Top Industries Significantly Impacted by Illicit Telegram Networks

• The Ups and Downs of 0-days: A Year in Review of 0-days Exploited In-the-Wild in 2022

• New Collide+Power Exploit Let Attacker Steal Sensitive Data From All Modern CPUs

• ClearSale Brand Protection combats phishing, fake accounts, and counterfeit products

• 7 Benefits of Implementing ZTNA

• Biometric as a Service (BaaS) – An Opinion Piece

• CISA Published a Warning About Ivanti EPMM Zero-day Vulnerabilities

• Synopsys Launches Software Risk Manager to Simplify Enterprise-Scale AppSec

• Cloud Service Provider Cloudzy Accused of Aiding Ransomware and APTs

• 4-Optimization Techniques for Enhancing Algorithmic Trading Performance

• Meta Begins News Closure In Canada Over Publisher Payment Law

• AI-Enhanced Phishing Driving Ransomware Surge

• Hot Topic Announces Potential Data Breach Due to Stolen Account Credentials

• Understanding India’s Personal Data Protection Bill (PDPB)

• An Introduction to Cyber Threat Intelligence: Key Concepts and Principles

• Is Your MSP Taking Its Own Security Seriously?

• Russian Cybersecurity Exec Wanted By Russia and US

• OT/IoT Malware Surges Tenfold in First Half of the Year

• New SEC Regulations: US Businesses Must Report Cyberattacks within 4 Days

• CISA in New Warning Over Ivanti Vulnerabilities

• Iranian Company Cloudzy Accused of Aiding Cybercriminals and Nation-State Hackers

• Why performing security testing on your products and systems is a good idea

• Fake Chat App On Android Steals Signal and WhatsApp Data

• MSMQ QueueJumper (RCE Vulnerability): An In-Depth Technical Analysis

• Australian Senate committee recommends bans on Chinese social media apps

• Australian Senate committee recommends further bans on Chinese social media apps

• Ivanti Zero-Day Exploited by APT Since at Least April in Norwegian Government Attack

• CISA adds second Ivanti EPMM flaw to its Known Exploited Vulnerabilities catalog

• 67% of data breaches start with a single click

• From tech expertise to leadership: Unpacking the role of a CISO

• Delivering privacy in a world of pervasive digital surveillance: Tor Project’s Executive Director speaks out

• Norwegian Entities Targeted in Ongoing Attacks Exploiting Ivanti EPMM Vulnerability

• 1 in 100 emails is malicious

• Open-source penetration testing tool BloodHound CE released

• New NodeStealer Variant Targeting Facebook Business Accounts and Crypto Wallets

• Socket moves beyond JavaScript and Python and gets into Go

• 2023-08-01 – Bandook infection

• Public companies must now disclose breaches within 4 days

• SpyNote Spyware Returns with SMS Phishing Against Banking Customers

• Devo and Cybermindz Partner to Address the Mental Health of Front-Line Cybersecurity Workers in the US

• White House Cyber Workforce Strategy: No Quick Fix for Skills Shortage

• This California agency wants to know what happens to all that connected car data

• IT Security News Daily Summary 2023-08-01

• Forgepoint Capital Places $15M Series A Bet on Converge Insurance

• Nile Raises $175M Series C Funding to Redefine Enterprise Networks

• Forescout’s Risk and Exposure Management Solution Delivers Streamlined, Quantitative Approach to Cyber Asset Risk Management

• MEF and CyberRatings.org Partner on SASE Certification Program

• NodeStealer 2.0 takes over Facebook Business accounts and targets crypto wallets

• Canon Inkjet Printers at Risk for Third-Party Compromise via Wi-Fi

• Infosec experts divided on SEC four-day reporting rule

• Best Cybersecurity and IT Outsourcing Options

• Space Pirates Train Cyber Sabers on Russian, Serbian Organizations

• Itseez3D launches Avatar SDK Deep Fake Detector to bolster user identity protection

• Combating Cybercrime in the Age of Remote Work

• Canon Inkjet Printers Retain WiFi Data Unless Wiped – Warns Canon

• Understanding Package.json II: Scripts

• Facebook Oversight Board Urges Company To Close Loophole In Bullying And Harassment Policy

• Forgepoint Capital Places $20M Series A Bet on Converge Insurance

• Balbix introduced a new capability that automates CIS Benchmark requirements

• Firefox fixes a flurry of flaws in the first of two releases this month

• Chinese APT Group Hits Air-Gapped Systems in Europe with Malware

• Iran-Run ISP ‘Cloudzy’ Caught Supporting Nation-State APTs, Cybercrime Hacking Groups

• Nearly All Modern CPUs Leak Data to New Collide+Power Side-Channel Attack

• ‘DarkBERT’ GPT-Based Malware Trains Up on the Entire Dark Web

• Apple Users Open to Remote Control via Tricky macOS Malware

• Forescout Risk and Exposure Management offers quantitative approach to risk prioritization

• Tessian Abuse Mailbox Response helps security teams manage email based threats

• Canon Advises Users to Reset Wi-Fi Settings When Discarding Inkjet Printers

• Bad news: Another data-leaking CPU flaw. Good news: It’s utterly impractical

• CISA: ‘Submarine’ Backdoor Torpedoes Barracuda Email Security

• Lessons Not Learned From Software Supply Chain Attacks

• Cybersecurity Audit for Homes

• Burp Suite 2023.8 Released – What’s New!

• Synopsys Software Risk Manager simplifies application security testing

• Mobb automates vulnerability remediations with AI-powered technology

• Stay Safe When Charging Phone in Public: Scammers Steal Money Using USB Ports via “Juice Jacking”

• Following the JumpCloud Incident, Additional Malware was Discovered in the Npm Packages

• Novel Worm-Like Malware P2Pinfect Targets Redis Deployments

• New NodeStealer Targeting Facebook Business Accounts and Crypto Wallets

• Chinese APTs Establish Major Beachheads Inside US Infrastructure

• Cloud Company Assisted 17 Different Hacking Groups

• Ransomware Attacks On Industrial Organizations Doubled In Past Year

• US Military Battling Cyber Threats From Within And Without

• UK Spy Agencies Want To Relax Laws On AI Data Use

• Canon Inkjet Printers Expose Wi-Fi Threat

• Cyber Mindfulness Corner Company Spotlight: DXC Technology

• Cisco adds automated ransomware recovery to its XDR solution

• Monte Carlo Data Product Dashboard improves reliability for critical data products

• Schneider Electric MSS protects networks, systems and data across OT environments

• Abyss Locker Ransomware Targets VMware ESXi Servers on Linux

• FBI Alerts: Cybercriminals Exploiting Open-Source AI Programs with Ease

• Data Breach from Accreditation Org Exposes Sensitive Data of Educational Institutions

• eCitizen Cyberattack: Kenyan Government Portal’s Services Disrupted

• Cloud Tech Debt Puts Millions of Apps at Risk, Says New Report

• Researchers claim US-registered cloud host facilitated state-backed cyberattacks

• TARK#MULE Cyber Attack Campaign Tricking Koreans with U.S. Military-Themed Documents

• 4 Generative AI Security Benefits

• Weaponized Excel, OneNote, or PDF Attachments Deliver New WikiLoader Malware

• How to enable the free Google One VPN on your Pixel device

• Mattress maker Tempur Sealy says it isolated tech system to contain cyber burglary

• SpecterOps Updates BloodHound Active Directory Mapping Tool

• Silk Security Emerges from Stealth With $12.5 Million Seed Funding

• Nile Raises $175 Million for Secure NaaS Solutions

• Socket Scores $20M as Investors Bet on Software Supply Chain Security Startups

• Computer Fraud and Abuse Act (CFAA)

• New Infostealer Uncovered in Phishing Scam Targeting Facebook Business Accounts

• How to Meet Phishing-Resistant MFA Requirements

• US govt is hunting a Chinese malware that can interfere with its military operations

• Your First Line of Defense Against Ransomware: SASE

• TechRepublic Premium Editorial Calendar: IT Policies, Checklists, Hiring Kits and Research for Download

• Why the California Delete Act Matters

• There’s no reason to panic over WormGPT

• Everlast, Famous Boxing Equipment Brand, Targeted In Daring Cyberattack Linked to World’s Largest Online Bank Heist

• Battery Safety in Vaping: What Every Vaper Needs to Know

• Artificial intelligence threats in identity management

• Tempur Sealy, World’s Largest Mattress Seller, Hit By Cyberattack, Forcing IT Systems Shutdown

• Menlo Security introduces two features to protect users against web browser threats

• Actionable Threat Intel (V) – Autogenerated Livehunt rules for IoC tracking

• Hacker Conversations: Youssef Sammouda, Bug Bounty Hunter

• Investing in a Robust Cybersecurity Workforce

• Iranian Hackers Posed as Israelis in Targeted LinkedIn Phishing Attack

• Women two-thirds more likely to fear losing CNI security jobs than men

• 8 Best CrowdStrike Competitors [2023]

• Fake Android App Used to Exfiltrate Signal and WhatsApp User Data

• The Intersection of CDP and AI: How Artificial Intelligence Is Revolutionizing Customer Data Platforms

• Socket lands $20M investment to help companies secure open source software

• US government outlines National Cyber Workforce and Education Strategy

• Dynatrace acquires Rookout to improve productivity for developers

• Android n-day bugs pose zero-day threat

• Cyborg Security integrates REST API into HUNTER Platform

• New Android Malware Via WhatsApp steals Call logs, Locations, & Contacts

• Ransomware Attacks Frequently Target Organizations with 51-200 Employees

• Java: A Time-Tested Programming Language Still Going Strong

• How AI May Be Used to Create Custom Disinformation Ahead of 2024

• A New Attack Impacts ChatGPT—and No One Knows How to Stop It

• European Bank Customers Targeted in SpyNote Android Trojan Campaign

• WikiLoader malware-as-a-service targets Italian organizations

• Vulnerability Summary for the Week of July 24, 2023

• VirusTotal Malware Trends Report: Emerging Formats and Delivery Techniques

• Bedding Giant Tempur Sealy Takes Systems Offline Following Cyberattack

• Ransomware Attacks on Industrial Organizations Doubled in Past Year: Report

• CMA Publishes Microsoft Arguments In Activision Case

• US States Fight Court Order Blocking Social Media Misinformation Efforts

• Musk, Yaccarino To Jointly Oversee X Trust and Safety

• Judge Gives Go-Ahead To SEC’s Terraform Labs Crypto Lawsuit

• Researchers Expose Space Pirates’ Cyber Campaign Across Russia and Serbia

• What is Data Security Posture Management (DSPM)?

• 16-30 June 2023 Cyber Attacks Timeline

• NHS Staff Reprimanded For WhatsApp Data Sharing

• China’s APT31 Suspected in Attacks on Air-Gapped Systems in Eastern Europe

• Social Media Security Awareness: What you Should Know

• What is the General Data Protection Regulation (GDPR)?

• 200 Canon Printer Models May Expose Wi-Fi Connection Data

• Possible Chinese Malware in US Systems a ‘Ticking Time Bomb’: Report

• Capita Boss to Step Down Following Cyber Incident

• Sanctioned Jingjia Plans China AI GPU Production Ramp

• Intel Launches China Innovation Hub Amidst Sanctions

• New WikiLoader Malware Goes to Extreme Lengths to Hide

• Stremio vulnerability exposes millions to attack

• Need to improve the detection capabilities in your security products?

• Twitter Threatens To Sue Hate Speech Research Firm

• US military battling cyber threats from within and without

• How to Meet Phishing-Resistant MFA

• Be aware of exposure of sensitive data on Wi-Fi settings for Canon inkjet printers

• Cybersecurity survey: 36% of Europeans don’t even have an IoT device

• How Generative AI Will Transform Cybersecurity

• Report says no evidence that cyber insurance coverage makes victim pay more

• China bans export of drones some countries have already banned anyway

• Strategies for ensuring compliance and security in outdated healthcare IT systems

• Keeping the cloud secure with a mindset shift

• Cybercriminals Renting WikiLoader to Target Italian Organizations with Banking Trojan

• The gap in users’ identity security knowledge gives cybercriminals an opening

• Infosec products of the month: July 2023

• EU’s financial institutions face cyber resilience crisis

• Supply chain attacks demand a 3rd party risk re-think

• What Implementing Biometrics for Authentication Looks Like

• Pioneering Application Security: AI Meets Human Intelligence – Insights from an Interview with ImmuniWeb’s Dr. Ilia Kolochenko

• Facebook Fined For Misleading Australian Users About Data Collection

• A week in security (July 24 – July 30)

• Supply chain attacks disrupt emergency services communications

• Meta subsidiaries must pay $14m over misleading data collection disclosure

• The Most In-Demand Freelance Skills for 2023

• Unzipping the truth: The hidden dangers of .zip domains

• US Gov Rolls Out National Cyber Workforce, Education Strategy

• A fan-made Mario game says ‘Lets-a-cryptomine’

• Are my apps spying on me? A paranoid’s guide to digital life

• IBM study reveals how AI, automation protect enterprises against data breaches

• IT Security News Monthly Summary – August

• IT Security News Daily Summary 2023-07-31

• Experts discovered a previously undocumented initial access vector used by P2PInfect worm

• Understanding Data Protection: Best Practices for Keeping Your Information Safe

• MIT CSAIL unveils PhotoGuard, an AI defense against unauthorized image manipulation

• Reducing Generative AI Hallucinations and Trusting Your Data: Interview With Cognite CPO Moe Tanabian

• China’s Volt Typhoon APT Burrows Deeper into US Critical Infrastructure

• Protecting Intellectual Property When It Needs to Be Shared

• The White House Acknowledges the Pressure on Section 702, But Much More Reform is Needed

• Police Arrest Suspect in Crypto Millionaire’s Murder

• White House: Losing Section 702 spy powers would be among ‘worst intelligence failures of our time’

• Air-Gapped ICS Systems Targeted by Sophisticated Malware

• SEC demands four-day disclosure limit for cybersecurity breaches

• July 2023 Web Server Survey

• CISA details backdoor malware used in Barracuda ESG attacks

• Essential Types of Metrics to Boost Support for Your Cybersecurity Learning Program – Part 2

• Hikvision, Nvidia named in contract for ‘Uyghur detection’

• Reddit Taps Fredrick ‘Flee’ Lee for CISO Job

• Apple Lists APIs That Developers Can Only Use for Good Reason

• SpyNote Android Spyware Strikes Financial Institutions

• Abyss Locker Ransomware Looks to Drown VMware’s ESXi Servers

• Call of Duty Self-Spreading Worm Takes Aim at Player Lobbies

• Fleek Network Releases New Whitepaper for Decentralized Edge Platform

• APT31 Implants Target Industrial Organizations

• Israeli Oil Refinery Giant BAZAN Hit by Fresh Wave of Cyber Attacks

• 5 Essential Tips For Data Security On The Cloud

• Worldcoin Crypto Project Already Under Radar in Europe

• Kenya’s eCitizen Service Faces Downtime: Analyzing the Cyber-Attack

• Critical Cybercrime Hub’s Hacked Data Emerges for Sale on Underground Markets

• The Power of Automation in DevOps: Streamlining Software Development and Delivery

• Lenovo’s latest heavy on flash, security for enterprise storage

• Biden Announces National Cyber Workforce and Education Strategy

• RAM dump: Understanding its ­­­importance and the process

• Singapore government sees rise in security incidents amid increased data sharing

• UK Military Embraces Security by Design

• Ivanti fixes second zero-day exploited by attackers (CVE-2023-35081)

• Oracle unveils Cloud Native SCCA Landing Zone framework for the U.S. Department of Defense

• Dell introduces new offerings to accelerate secure generative AI initiatives

• How to make sure the reputation of your products and company is good

• U.S. Senator Blasts Microsoft for Chinese Hack Seeks Federal Action

• Ongoing STARK#MULE Attack Campaign Discovered

• Call of Duty worm malware used to hack players exploits years-old bug

• Was Pro-Russian Group Behind Kenya Cyber-Attack?

• Instead Of Warrants, The NSA Would Like To Keep Buying Your Data

• Unpatched Apache Tomcat Servers Spread Mirai Botnet Malware

• Second Ivanti EPMM Zero-Day Vulnerability Exploited In Targeted Attacks

• What Is an Exploit? Definition, Types, and Prevention Measures

• BAZAN Group, Israel’s Largest Oil Refinery, Had Its Website Hit by a DDoS Attack

• How to Migrate from a compromised Hosted Microsoft Exchange Service to Microsoft 365?

• New Android Malware Uses Optical Character Recognition to Steal Login Credentials

• Key Developer Concepts and Tools in Software Supply Chain Security

• How to Structure a Platform Team – An Illustrative Model

• Israeli Oil Refinery Taken Offline by Pro-Iranian Attackers

• Spend to save: The CFO’s guide to cybersecurity investment

• Best Practices for Enterprise Private 5G Security

• New P2PInfect Worm Targets Redis Servers with Undocumented Breach Methods

• Threat intelligence startup Cyble lands $24M investment

• Efficiency Unleashed: The Benefits of Intranet Software Solutions

• Experts link AVRecon bot to the malware proxy service SocksEscort

• Pentagon Looks Into ‘Critical Compromise’ of Air Force and FBI Contacts

• Summer Documentary Watch Party: 8 Sizzling Cybersecurity Tales

• Webinar: Riding the vCISO Wave: How to Provide vCISO Services

• Patchwork Hackers Target Chinese Research Organizations Using EyeShell Backdoor

• Multiple Chinese Hacker Outfits are Targeting Organisations Worldwide

• FakeTrade Android Malware Attack Steals Crypto Wallet Data

• Data Encryption Policy

• Locky Ransomware 101: Everything You Need to Know

• What Is an Exploit? Definition, Types and Prevention Measures

• Hikvision and Nvidia named in contract for Uyghur detection

• Peloton Treadmill Vulnerabilities Risk Users Data

• SEC Mandates Cyber Attack Disclosure Within Four Days: A Major Shift in Cybersecurity Transparency

• Security professionals unaware of NCSC Cyber Essentials framework – Lookout

• Why Inadequate Investment in Cybersecurity is a False Economy

• The Power of AI In Today’s Rapidly Evolving Financial Crime Landscape

• How to enable two-factor authentication on your Opera account

• Strengthening security in a multi-SaaS cloud environment

• Automatically Finding Prompt Injection Attacks

• Apple Strengthens App Store API Regulations To Curb User Fingerprinting

• New SEC Rules Require U.S. Companies To Reveal Cyber Attacks Within 4 Days

• Apple iOS, Google Android Patch Zero-Days in July Security Updates

• Salt Security Appoints Ori Bach as Executive Vice President of Product

• New persistent backdoor used in attacks on Barracuda ESG appliances

• Web browsing is the primary entry vector for ransomware infections

• Ministry of Defence Investigates Emails Sent To Russian Ally

• Tech Investors Flee China As Political Tensions Worsen

• Musk Says X Users Reach ‘New High’

• US Lawmakers Call For Stricter AI Chip Export Controls

• EU Launches Probe Into Spanish Ride-Hailing Restrictions

• CISA Analyzes Malware Used in Barracuda ESG Attacks

• Second Ivanti EPMM Zero-Day Vulnerability Exploited in Targeted Attacks

• Global Lawyers Unveil Cyber Best Practices for Execs

• Fruity Trojan Uses Deceptive Software Installers to Spread Remcos RAT

• AVRecon Botnet Leveraging Compromised Routers to Fuel Illegal Proxy Service

• DNS Security in Healthcare: The Gem in Your Cybersecurity Arsenal

• Think Tank: Insurers Not Fuelling Ransomware Market

• Three flaws in Ninja Forms plugin for WordPress impact 900K sites

• Ivanti Warns Of Another EPMM Zero-Day Flaw Under Attack

• Server Inventory Checklist

• How the best CISOs leverage people and technology to become superstars

• What would sustainable security even look like?

• CISA: New Submarine Backdoor Used in Barracuda Campaign

• Multiple Flaws Found in Ninja Forms Plugin Leave 800,000 Sites Vulnerable

• NIS-2: EU Directive Takes a Massive Step towards Increased Security

• Experts warn attackers started exploiting Citrix ShareFile RCE flaw CVE-2023-24489

• Software developers, how secure is your software?

• Cyber-Attacks Disrupt Kenyan Government Systems

• Silicon UK In Focus Podcast: The State of MedTech

• Healthcare Innovation: A Safe and Secure Approach

• Captcha security to end for Google and Apple users

• Curbing Mobile Malware with Zero Trust: Enhancing Mobile Security

• AI reduces data breach lifecycles and costs

• The race against time in ransomware attacks

• Open-source security challenges and complexities

• Relying on CVSS alone is risky for vulnerability management

• Data privacy vault: Securing sensitive data while navigating regulatory demands

• US senator victim-blames Microsoft for Chinese hack

• Instead of obtaining a warrant, the NSA would like to keep buying your data

• Officials bust illegal lab containing 20 infectious agents, hundreds of lab mice

• Devs aren’t allowed to let Apple’s Vision Pro dev kits out of their sight

• Most of the 100 million people who signed up for Threads stopped using it

• Thailand warns of escalating cybercrime

• IT Security News Weekly Summary – Week 30

• IT Security News Daily Summary 2023-07-30

• Unleashing FreedomGPT on Windows

• How CISOs can engage the C-suite and Board to manage and address cyber risk

• In 2022, more than 40% of zero-day exploits used in the wild were variations of previous issues

• Google’s Earthquake Alert System Failed to Notify Residents of Turkish Earthquake

• Here’s How to Safeguard Your Credit Card Info

• Tech Meets Healthcare: GoodRx’s Rewarding ‘Medicine Cabinet’ Promotes Medication Adherence

• Police Van Equipped with AI Can Detect if Drivers are Using Mobile Phones

• New flaw in Ivanti Endpoint Manager Mobile actively exploited in the wild

• Security Affairs newsletter Round 430 by Pierluigi Paganini – International edition

• Hackers Infect Call of Duty Players with Self-Spreading Malware

• Week in review: Ivanti zero-day exploited, MikroTik vulnerability could compromise 900,000 routers

• Cyber Security Management System (CSMS) for the Automotive Industry

• Building a Network Security Strategy: Complete Checklist To Protect Your Network

Generated on 2023-08-06 23:59:24.620938