IT Security News Weekly Summary – Week 32

• IT Security News Daily Summary 2023-08-13

• Multiple flaws in CODESYS V3 SDK could lead to RCE or DoS

• How businesses and governments can work together to stop cyberattacks before they start

• Edge computing’s role in healthcare

• EvilProxy Phishing Campaign Targets Microsoft 365 Executives Worldwide

• Operation Jackal: INTERPOL Shuts Down African Cybercrime Gang

• Here’s How You Can Remove Private Info From Google Search Results

• Innovative ‘Brain-Like’ Chip Could Transform AI Landscape with Eco-Friendly Promise

• Security Affairs newsletter Round 432 by Pierluigi Paganini – International edition

• Week in review: 8 free cybersecurity docus, vulnerable Intel Core processors, Black Hat USA 2023

• Cyber Security Management System (CSMS) for the Automotive Industry

• The DHS’s CSRB to review cloud security practices following the hack of Microsoft Exchange govt email accounts

• Code Mirage: How cyber criminals harness AI-hallucinated code for malicious machinations

• Multiple Flaws in CyberPower and Dataprobe Products Put Data Centers at Risk

• IT Security News Daily Summary 2023-08-12

• An Apple Malware-Flagging Tool Is ‘Trivially’ Easy to Bypass

• Power Management Vulnerabilities Could Shut Down Data Centers: Researchers

• Python URL parsing function flaw can enable command execution

• Police dismantled bulletproof hosting service provider Lolek Hosted

• Dissecting the UN Cybercrime Convention’s Threat to Coders’ Rights at DEFCON

• Emerging Technology Facilitating Increased Vehicle Thefts and Accidents by Criminals

• The impact of blockchain technology on the future of shipping and logistics

• How to Implement Deception Technology

• Decoupling Storage and Compute: Have We Gone Too Far?

• 10 Benefits of Cloud Computing for SMBs

• DBS Bank Reveals Big ‘Data Challenges’ With AI Use

• Defending Against Stealer Log Cyber Threats

• Encryptionless Ransomware Attacks and Defense Strategies: An Interview with Zscaler’s Deepen Desai

• Building Cyber Resilience in an Age of Growing Threats

• How the FBI goes after DDoS cyberattackers

• Safeguarding Personal Data in the Wake of Hacks and Leaks

• CISA Advises Firms to Adopt Passwordless Security in LAPSUS$ Report

• Encryptionless Ransomware Attacks and Defense Strategies: An Interview with Zscaler’s Deepen Desai

• Hackers Compromised ChatGPT Model with Indirect Prompt Injection

• Black Hat USA 2023: Complete AI Briefings Roundup

• The best VPN deals for August 2023

• The Next Step: Expanding RegRipper

• A New Attack Reveals Everything You Type With 95 Percent Accuracy

• Zoom ZTP & AudioCodes Phones Flaws Uncovered, Exposing Users to Eavesdropping

• Notorious Global Phishing Platform Neutralized in Cross-Border Operation

• Google Chrome to shield encryption keys from promised quantum computers

• UK govt contractor MPD FM leaks employee passport data

• Don’t Jump to Conclusions on Zero Trust Adoption

• Build or Buy your own antivirus product

• Lolek Bulletproof Hosting Servers Seized, 5 Key Operators Arrested

• Power Generator in South Africa hit with DroxiDat and Cobalt Strike

• New Python URL Parsing Flaw Enables Command Injection Attacks

• Persistent volume support with peer-pods: Solution overview

• What may be lurking behind that QR code

• Chrome Supports Key Pinning on Android to Improve Security

• Ransomware in 2023: Emerging Threats, New Targets, and How Organizations Can Protect Themselves

• Google’s “browse privately” is nothing more than a word play, lawyers say

• YouTube makes sweeping changes to tackle spam on Shorts videos

• Old exploit kits still kicking around in 2023

• Several hospitals still counting the cost of widespread ransomware attack

• Zoom clarifies user consent requirement when training its AI

• 2023 Ransomware Trends

• Hackers Leak PII Data and Photos of Brazilian Plastic Surgery Patients

• China closes record number of personal data breaches, moots facial recognition law

• FTX crypto-clown Sam Bankman-Fried couldn’t even do house arrest. Now he’s in jail

• IT Security News Daily Summary 2023-08-11

• SandboxAQ unveils Sandwich, an open-source meta-library of cryptographic algorithms

• Black Hat USA 2023 Panel: Used Correctly, Generative AI is a Boon for Cybersecurity

• Security Pressures Mount Around AI’s Promises & Peril

• ‘Bulletproof’ hosting site that allegedly enabled 400 ransomware attacks seized, founder indicted

• DARPA Taps RTX to Attune AI Decisions to Human Values

• MoustachedBouncer Hackers Caught Spying on Embassies

• Microsoft: Codesys PLC bugs could be exploited to ‘shut down power plants’

• Fortinet Announces Free Security Awareness Curriculum for K-12 Students Tied to White House’s Cyber Initiatives

• Microsoft says Codesys bugs in ‘millions’ of PLCs could ‘shut down power plants’

• Get a one-year subscription to Norton 360 Standard and LifeLock Identity Advisor for $25

• Threat Intelligence Efforts, Investment Lagging, Says Opswat

• As Phishing Gets Even Sneakier, Browser Security Needs to Step Up

• Cyber Security Today, Week in Review for the week ending Friday, August 11, 2023

• Dependency Confusion Attacks: New Research Into Which Businesses are At Risk

• The Evolution of API: From Commerce to Cloud

• Federal Judge Upholds Arizonans’ Right to Record the Police

• Maker of Chrome extension with 300,000+ users tells of constant pressure to sell out

• XWorm, Remcos RAT Evade EDRs to Infect Critical Infrastructure

• Alberta dental plan administrator paid ransomware gang after attack

• Phishing 3.0: Crooks Leverage AWS in Deceptive Email Campaigns

• Gurucul Brings Generative AI Capabilities (Sme) to Next-Gen SIEM

• Best Encryption Software and Tools for 2023

• Downfall Vulnerability Affects Millions of Intel CPUs With Strong Data Leak Impact

• What is SASE? Secure Access Service Service Edge Explained

• GitHub’s Hardcore Plan to Roll Out Two-Factor Authentication (2FA)

• Image steganography: Concealing secrets within pixels

• Check Point Partners with the White House on National Cyber Workforce and Education Strategy

• Multiple Flaws Found in the Avada WordPress Theme and Plugin

• New Study Claims Facebook Does Not Cause Psychological Harm

• US cyber board to investigate Microsoft hack of government emails

• Revolutionizing Everyday Life: The Transformative Potential of AI and Blockchain

• Ditch SMS-based MFA, urges board investigating Lapsus$ gang’s successful attacks

• How to enable DNS over HTTPS in Opera

• iOS 17 cheat sheet: Release date, supported devices and more

• Evaluate the risks and benefits of AI in cybersecurity

• DroxiDat-Cobalt Strike Duo Targets Power Generator Network

• The MOVEit mass hacks hold a valuable lesson for the software industry

• Digital Disaster: Electoral Commission Data Breach Leaves 40 Million UK Voters Exposed

• Google Cloud launched Chronicle Cybershield

• Lapsus$ Hacker Group Exposed in Latest CSRB Report

• Researchers Uncover Years-Long Cyber Espionage on Foreign Embassies in Belarus

• Novel Downfall Bug is Targeting Intel CPUs to Steal Encryption Keys, and Data

• DHS to Review Microsoft’s Security in Chinese Email Hack

• The U.S. Government Wants To Control Online Speech to “Protect Kids”

• Chip Shortage In Germany To Last Years, Warns Audi Head

• In Other News: macOS Security Reports, Keyboard Spying, VPN Vulnerabilities

• Researchers Uncover Decade-Long Cyber Espionage on Foreign Embassies in Belarus

• Crash Test: REST API vs. SOAP Security

• North Korean Hackers Breach Russia’s Top Missile Maker’s Data

• This bank’s new app security feature irks customers

• What CISA and NSA Guidance Means for Critical Infrastructure Security

• Cyber Mindfulness Corner Company Spotlight: Mimecast

• Multiple high severity vulnerabilities in CODESYS V3 SDK could lead to RCE or DoS

• 75% of businesses are implementing or considering bans on ChatGPT

• Understanding Risk-Based Authentication (RBA)

• Mobb Wins Black Hat Startup Spotlight Competition

• How Teenagers Hacked Some Of The World’s Biggest Targets

• Gootloader SEO Watering Hole Malware Targets Law Firms

• AI Evil Twins May Already Be Manipulating Human Nature

• Microsoft Discloses 16 Vulnerabilities In CodeSys Products

• How to Backup Amazon EC2 Instance

• 66% of Organisations in UK Set to Ban ChatGPT and Generative AI Apps on Work Devices

• 1 in 5 CIOs Believe Cyber Security Ops Are Not An Immediate Priority

• Major Story – Data Breach Exposes Sensitive Police Data In Northern Ireland

• Black Hat USA 2023 – Announcements Summary

• Northern Ireland’s Top Police Officer Apologizes for ‘Industrial Scale’ Data Breach

• Microsoft Discloses Codesys Flaws Allowing Shutdown of Industrial Operations, Spying

• Enhancing TLS Security: Google Adds Quantum-Resistant Encryption in Chrome 116

• BigID Access Intelligence Remediation defends users against unauthorized exposure

• Black Hat USA 2023 video walkthrough

• Are You Being Tracked by an AirTag? Here’s How to Check

• Electoral Commission had internet-facing server with unpatched vuln

• Cyber Security Today, August 11, 2023 – Employee mistake leads to Northern Ireland police data breach, why employee awareness training is vital, and more.

• MoustachedBouncer Attacking Foreign Embassies Using NightClub and Disco Hacking Tools

• The Inability to Simultaneously Verify Sentience, Location, and Identity

• Microsoft Role To Be Investigated After US Government Breach

• Email Hacking Reigns as Top Cybersecurity Threat, Indusface Study

• India Passes Data Protection Legislation in Parliament. Critics Fear Privacy Violation

• New SystemBC Malware Variant Targets Southern African Power Company

• Researchers Shed Light on APT31’s Advanced Backdoors and Data Exfiltration Tactics

• CommScope SYSTIMAX Constellation allows enterprises to build and augment IP networks

• UK, EU, Mull Tighter China Controls After New US Restriction

• #BHUSA: Security Risks to Boom in the Era of Widespread Generative AI Adoption

• Magento shopping cart attack targets critical vulnerability revealed in early 2022

• New SystemBC Malware Variant Targets South African Power Company

• A totaled Tesla was sold for parts in the U.S. but came back online in Ukraine — here’s how

• MoustachedBouncer: Foreign Embassies in Belarus Likely Targeted via ISPs

• UK Government Slammed For Encryption Mistruths

• Researchers Suggest Ways to Tackle Thermal Attacks

• CISA: New Whirlpool Backdoor Used in Barracuda ESG Campaign

• A totaled Tesla was sold for parts in the US but came back online in Ukraine — here’s how

• Gafgyt botnet is targeting EoL Zyxel routers

• 2023 Threat Report – Dramatic Surge in Social Engineering and Web Attacks

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Researchers Uncover Series of Ransomware Attacks that Follow Same Pattern

• Charming Kitten APT is targeting Iranian dissidents in Germany

• Connecticut school loses millions in Spoofing Cyber Attack

• Ensuring HIPAA Compliance on Mobile Devices: A Vital Guide

• 16 New CODESYS SDK Flaws Expose OT Environments to Remote Attacks

• How to handle API sprawl and the security threat it poses

• US Cyber Command boss says China’s spooky cyber skills still behind

• 15 New CODESYS SDK Flaws Expose OT Environments to Remote Attacks

• How digital content security stays resilient amid evolving threats

• Photos: Black Hat USA 2023

• New infosec products of the week: August 11, 2023

• US Cyber Command boss says China’s spooky cyber-skills trail America’s

• CISA Adds Microsoft .NET Vulnerability to KEV Catalog Due to Active Exploitation

• Threat intelligence’s key role in mitigating malware threats

• Cybersecurity as a global, multi-sector activity with Mihoko Matsubara

• How executives’ personal devices threaten business security

• How to accelerate and access DDoS protection services using GRE

• Microsoft Expands Cloud Security Posture Management to Google Cloud

• 2023-08-03 – .msix file –> IcedID (Bokbot) –> BackConnect and Keyhole VNC

• What’s in New York’s ‘First Ever’ Cyber Strategy?

• Proposed Cybercrime Treaty’s International Cooperation Provisions Could Let Tyrants Run Amok

• Reshaping the API Security Landscape: Graylog Acquires Resurface

• #BHUSA: White House, DARPA and CISA Ask for Help in Securing Open Source Software

• Statc Stealer, a new sophisticated info-stealing malware

• A totaled Tesla came was sold for parts in the US but came back online in Ukraine — here’s how

• The EVM Compatibility Chronicles Part II

• August Patch Tuesday stops actively exploited attack chain and more

• Ransomware review: August 2023

• NSA: Codebreaker Challenge Helps Drive Cybersecurity Education

• Rightbiz – 65,376 breached accounts

• Palo Alto: SugarCRM zero-day reveals growing cloud threats

• #BHUSA: US National Security Agency Announces Codebreaker Challenge Theme

• CISA: ‘Whirlpool’ Backdoor Sends Barracuda ESG Security Down the Drain

• Rhysida Ransomware Trains Its Sights on Healthcare Operations

• A totaled Tesla came was sold for parts in the US but came back online in the Ukraine — here’s how

• Dell Credentials Bug Opens VMWare Environments to Takeover

• IT Security News Daily Summary 2023-08-10

• Cyber Insurance Experts Make a Case for Coverage, Protection

• Ransomware Attack Timeline

• Black Hat 2023 Keynote: Navigating Generative AI in Today’s Cybersecurity Landscape

• CSPM vs CWPP vs CIEM vs CNAPP: What’s the Difference?

• 6 Best Threat Intelligence Feeds to Use in 2023

• There’s a good chance your VPN is vulnerable to privacy-menacing TunnelCrack attack

• Check Point to Acquire SASE Security Firm Perimeter 81 for $490 Million

• Kemba Walden: We need to secure open source software

• Trend Micro discloses ‘silent threat’ flaws in Azure ML

• The Future of Cloud-Native Data Security: A Look at Laminar’s New Capabilities

• AMD and Intel CPU security bugs bring Linux patches

• EvilProxy Cyberattack Flood Targets Execs via Microsoft 365

• Teens Hacked Boston Subway’s CharlieCard to Get Infinite Free Rides—and This Time Nobody Got Sued

• SecurityGen Study Highlights Hidden Threat to 5G Mobile Networks From GTP-Based Cyberattacks

• The Hard Realities of Setting AI Risk Policy

• CISA discovered a new backdoor, named Whirlpool, used in Barracuda ESG attacks

• Detectify IP Addresses view enables organizations to uncover unauthorized assets

• Lumen Data Protect defends critical business data from corruption

• OpenAI’s GPTBot: A New Era of Web Crawling

• Dissident Republicans Claim To Have PSNI Breach Data, Admits Chief Constable

• Request-Level Authentication and Authorization With Istio and Keycloak

• 5 Best Encryption Key Management Software for 2023

• Osano Secures $25M Series B to Advance Data Privacy Platform

• Rootly Raises $12M to Help Enterprise IT Teams Resolve Incidents 80 Percent Faster

• What Is Patch Management as a Service (PMaaS) & What Can It Do For You?

• Congress Amended KOSA, But It’s Still A Censorship Bill

• Black Hat: Tenable to add AI query module to its Exposure Management platform; DARPA AI Cyber Challenge announced

• Cybersecurity: It’s Time to Trust the Machines

• Zoom Refutes Claims of AI Training on Calls Without Consent

• Understanding Security Vulnerabilities: A First Step in Preventing Attacks

• Calix expands security options in SmartBiz to protect small businesses from cyberthreats

• Fortra releases new integrations for its Offensive Security

• Lookout SAIL improves efficiency for cybersecurity professionals

• Making Chrome more secure by bringing Key Pinning to Android

• Solution to hardware flaw in Intel CPUs may cause large performance hit

• Mac systems turned into proxy exit nodes by AdLoad

• Top 15 Data Security Posture Management (DSPM) platforms for 2023

• Co-Founder Of Yandex Condemns Ukraine Invasion

• EvilProxy Phishing Kit Hits 100+ Firms, Bypasses MFA via Reverse Proxy

• Vulnerability management, its impact and threat modeling methodologies

• Avoiding False Positive: The Silent SAST Killer

• New York Introduces First-Ever Statewide Cybersecurity Strategy

• Lookout incorporates generative AI to support security professionals and boost security

• LockBit Attack: Ransomware Gang Threatens to Leak Cancer Patients’ Medical Data

• Revolutionizing IT: Ultraviolet’s Innovative Approach to Developer Efficiency

• Legions of DEF CON hackers will attack generative AI models

• Researchers put LLMs to the test in phishing email experiment

• APT31 Linked to Recent Industrial Attacks in Eastern Europe

• 37% of Third-party Applications have High-risk Permissions

• Adobe Patches 30 Acrobat, Reader Vulnerabilities

• Hundreds of executives are falling for Microsoft 365 phishing attacks: Report

• Zoom using user data to train its AI models

• US Scientists Repeat Fusion Ignition Breakthrough

• #BHUSA: Only 22% of Firms Have Mature Threat Intelligence Programs

• New Attack Alert: Freeze[.]rs Injector Weaponized for XWorm Malware Attacks

• Critical Start introduces Managed Cyber Risk Reduction to address risks, vulnerabilities, and threats

• Authorities Taken Down Bulletproof Hosting Provider Lolek

• Google just made its Chrome browser more secure by cutting ‘patch gap’ in half

• Generative AI takes center stage at Black Hat USA 2023

• What Is Cloud Security Posture Management (CSPM)?

• Identity management platform Veza secures $15M from Capital One and ServiceNow

• Exabeam and Cribl partnership helps enterprises accelerate SIEM deployments

• Appdome and Bugcrowd join forces to create a more secure mobile app economy

• The 9 Best XDR Software Solutions and Tools in 2023 [Features, Pricing & Reviews]

• Top Exploit Databases to Use in Bolstering Cybersecurity Posture

• Ransomware Prevention Checklist: Safeguarding Your Digital Assets

• How the SEC’s Proposed Security Rules Could Impact Businesses

• Controlling Cybersecurity Risks

• What Will Cybersecurity Jobs Look Like in 2028?

• Fines for Facebook Privacy Breaches in Norway Crack Down on Meta

• The Pentagon’s 2023 cyber strategy: What you need to know

• Symmetry Systems Raises $17.7M for Data Security Posture Management Platform

• Managing and Securing Distributed Cloud Environments

• Potent Trojans Targeting MacOS Users

• New Statc Stealer Malware Emerges: Your Sensitive Data at Risk

• UK cybersecurity giant NCC Group is making more layoffs

• Black Hat USA Keynote: In AI Do Not Trust

• DARPA Sponsors Competition For AI Innovation And Cybersecurity

• CISA Warns Orgs Of Exploited Vuln Affecting .NET, Visual Studio

• Nearly Every AMD CPU Since 2017 Vulnerable To Inception Attacks

• How An Unpatched Microsoft Exchange 0-Day Likely Caused One Of The UK’s Biggest Hacks Ever

• Zoom Declines Training AI on Calls Without Approval

• Coalition looks to bridge gap between CISOs, cyber insurance

• S3 Ep147: What if you type in your password during a meeting?

• #BHUSA: DARPA Challenges AI Pros to Safeguard US Infrastructure

• Navigating Cybersecurity’s Seas: Environmental Regulations, OT & the Maritime Industry’s New Challenges

• Investigating the Intricacies of BEC Invoice Redirect Attacks

• Lookout incorporates generative AI assistant to support security professionals and boost security

• Check Point to acquire Perimeter 81 for $490 million

• Illumio for Azure Firewall allows users to protect different parts of their cloud environment

• MITRE partners with Robust Intelligence to tackle AI supply chain risks in open-source models

• Bionic integrates with ServiceNow, launches Bionic Events

• AI Eavesdrops on Keystrokes with 95% Accuracy

• Microsoft Authenticator will soon provide codes via WhatsApp

• Elon Musk To Auction Twitter Signs, Backs Verbal Cage Fight With Zuck

• #BHUSA: ESET Unmasks Cyber-Espionage Group Targeting Embassies in Belarus

• Check Point buys Perimeter 81 for $490M to enhance its security tools for hybrid and remote workers

• Deloitte Safeguards Software Development Lifecycle

• KnowBe4 helps protect endangered species to celebrate 13th anniversary

• Rhysida Ransomware: The Rise of a New Threat for Healthcare Organizations

• Feds Seize Bulletproof Hosting Service ”Lolek Hosted”

• DAY 2! Dark Reading News Desk: Live at Black Hat USA 2023

• DTX Europe 2023

• How randomized data can improve our security

• New Infostealer Malware Steal Logs & Corporate Access Data

• Rhysida ransomware – what you need to know

• European Startup Pistachio Raises €3.25 Million for Cybersecurity Training Platform

• Osano, a data privacy management platform, nabs $25M

• Adaptive Shield’s ITDR capabilities help users detect identity-related security threats

• ConcealSherpaAI identifies potentially harmful webpages

• Microsoft 365 accounts of execs, managers hijacked through EvilProxy

• SentinelOne enhances vulnerability management through Singularity Ranger Insights

• Encryption Flaws in Popular Chinese Language App Put Users’ Typed Data at Risk

• Emerging Attacker Exploit: Microsoft Cross-Tenant Synchronization

• Cryptographic Flaw in Libbitcoin Explorer Cryptocurrency Wallet

• Unleashing Your Potential Through Destiny 2 Accounts For Sale: A New Perspective

• Fact vs. Fiction: Unmasking Exaggerated AI Failures and Successes

• White House launches AI Cyber Challenge to make software more secure

• LastPass removes the master password from customers’ login with FIDO2 authenticators

• UK Appoints Tech Expert, Diplomat To Head AI Safety Summit

• Researchers Tricked Hackers into Reveal Their Secrets Using Honeypot

• Cybercriminals Increasingly Using EvilProxy Phishing Kit to Target Executives

• Microsoft Patch Tuesday For August ’23 Addresses 84 Flaws

• Breaking the Mold: New Directions in Commercial Video Production

• Get your staff’s consent before you monitor them, tech inquiry warns

• Fresh Blow to PSNI Security as Second Data Breach Disclosed

• Leaked Yandex Code Breaks Open the Creepy Black Box of Online Advertising

• Belarus hackers target foreign diplomats with help of local ISPs, researchers say

• Focus on DroxiDat/SystemBC

• CISA Warns Organizations of Exploited Vulnerability Affecting .NET, Visual Studio

• Regulator: “Harmful” Web Design Could Break Data Protection Laws

• ‘MoustachedBouncer’ APT Spies on Embassies, Likely via ISPs

• CISA adds actively exploited flaw in .NET, Visual Studio to its Known Exploited Vulnerabilities catalog

• Investigating the Intricacies of Invoice Redirect Attacks

• The Aftermath: Dallas Ransomware Attack- 26K Residents Affected

• President Biden Executive Order Targets Tech Investments In China

• Tripwire Enterprise: Five ‘Other’ Things You Should Know

• EvilProxy Campaign Fires Out 120,000 Phishing Emails

• Quick Glossary: Cybersecurity Attack Response and Mitigation

• NIST Expands Cybersecurity Framework with New Pillar

• US Govt launches Artificial Intelligence Cyber Challenge

• Understanding Changes in the OWASP API Security Top 10 List

• Brand Extension: Definition, How It Works, Example, and Criticism – 2023 Guide

• Common TTPs of attacks against industrial organizations

• Do you know what your supply chain is and if it is secure?

• Interpol Busts Phishing-as-a-Service Platform ’16Shop,’ Leading to 3 Arrests

• Data of all serving police officers Police Service of Northern Ireland (PSNI) mistakenly published online

• Chinese hackers stole US government emails

• TargetCompany Ransomware Deploy Fully Undetectable Malware on SQL Server

• Norway first to put daily penalty on Meta over data security concerns

• Will AI kill cybersecurity jobs?

• Mind the (Interpretation) gap: Another reason why threat modeling is important

• RAM dump: Understanding its ­­­importance and the process

• What to know about FedRAMP Rev. 5 Baselines

• Learning from past healthcare breaches to fortify future cybersecurity strategies

• 37% of third-party applications have high-risk permissions

• Private network adoption grows as enterprises seek greater control and security

• Australian broadcaster cuts presence on platform formerly called Twitter

• DARPA Launches 2-Year Contest to Build AI Tools to Fix Vulnerabilities

• Voter data stolen in UK Electoral Commission systems breach

• Cloudflare Tunnel increasingly abused by cybercriminals

• Facial recognition tech lands innocent woman with bogus carjacking charge

• Nearly every AMD CPU since 2017 vulnerable to Inception data-leak attacks

• Hackers Rig Casino Card-Shuffling Machines for ‘Full Control’ Cheating

• Panasonic Warns That IoT Malware Attack Cycles Are Accelerating

• New Microsoft Security innovations expand multicloud visibility and enhance multiplatform protection

• Symmetry Systems Closes $17.7M To Scale its AI-Powered Data Security Platform

• Sweet Security Lands $12M in Seed Funding to Shift Cloud Security Right

• LastPass Announces Availability of FIDO2 Authenticators for Passwordless Login

• DARPA Launches Two-Year Contest to Build AI Tools to Fix Vulnerabilities

• IT Security News Daily Summary 2023-08-09

• crisis management plan (CMP)

• #BHUSA: New Zero-Day Vulnerabilities Could Instantly Drain Crypto Wallets

• Windows Defender-Pretender Attack Dismantles Flagship Microsoft EDR

• Black Hat Opens With Call to Steer AI from Predictions to Policy

• Blockchain Signing Bug Cracks Open Crypto Investors’ Wallets Worldwide

• Checkmarx CISO Study Finds 96% of CISOs Say Their Business Prospects Consider Their Organizations’ AppSec Maturity When Making Deal Decisions

• It’s Time for Cybersecurity to Talk About Climate Change

• New LLM Tool Seeks and Remediates Vulnerabilities

• Disposed-of Gadgets Can Lead to Wi-Fi Network Hacks, Kaspersky Says

• Researchers Detail Vuln That Allowed for Windows Defender Update Process Hijack

• A Clever Honeypot Tricked Hackers Into Revealing Their Secrets

• INTERPOL Dismantles Infamous ’16shop’ Phishing-as-a-Service Platform

• DBS Bank uncovers big data challenges with AI use – and solutions, too

• Researchers watched 100 hours of hackers hacking honeypot computers

• Balada Injector still at large – new domains discovered

• ‘Downfall’ Bug in Billions of Intel CPUs Reveals Major Design Flaw

• Intel Responds to ‘Downfall’ Attack with Firmware Updates, Urges Mitigation

• Microsoft Patch Tuesday: 74 CVEs plus 2 “Exploit Detected” advisories

• Safety of Officers & Civilians of PSNI Compromised in Major Data Breach

• Virtual Meetings Security with Token Authentication

• This Acoustic Attack Analyzes Keystrokes To Steal Data Via Deep Learning

• John Lewis Signs Google Deal To Utilise AI Tech

• Amazon Loses Two Key Drone Delivery Executives – Report

• Onapsis researchers detail new SAP security threats

• EvilProxy used in massive cloud account takeover scheme

• Cracking the Code: 7 Secrets Every Web Developer Should Know

• Rapid7 prepares to toss 18% of workforce to cut costs

• Western Digital, Synology NAS Vulnerabilities Exposed Millions of Users’ Files

• White House Offers Prize Money for Hacker-Thwarting AI

• Patch Tuesday Targets 74 Flaws, Including Microsoft Teams, Office

• Top 3 Insights I Learned at Recent Cybersecurity Events

• Irish Police Data Breach Rattles Northern Ireland’s Security Landscape

• Types of Nmap scans and best practices

• Gurucul launches Sme AI to improve threat detection and response capabilities

• NetRise unveils SBOM and vulnerability prioritization solutions to enhance XIoT firmware security

• Rust-Based Injector Deploys XWorm and Remcos RAT in Multi-Stage Attack

• Rhysida Ransomware Has Added New Techniques, Tactics, And Tools to Its Arsenal

• 16 Zero-Day Vulnerabilities Discovered in CODESYS Affect Millions of Industrial Devices

• Will data backups save you from ransomware? Think again

• White House launches AI Cyber Challenge to test how top AI models protect software

• C-Suite Cybersecurity Sign-off Hinges on Customer Trust, Digital Opps

• DARPA launches two-year competition to build AI-powered cyber defenses

• Dark Web Grows Stronger. And So Does the Value of Monitoring

• What Is Global Privacy Control (GPC), and how can it help you protect your data?

• Fortifying Defences: Cybersecurity in the Dawn of AI

• 0Patch promises to support Windows Server 2012 and 2012 R2 with 3 years of security updates

• Breach Connected to MOVEit Flaw Affects Missouri Medicaid Recipients

• Rhysida Ransomware Analysis Reveals Vice Society Connection

• Facebook Faces Daily Fine Over Privacy Violations

• Sweet Security Debuts Runtime Management for Cloud

• OWASP Lead Flags Gaping Hole in Software Supply Chain Security

• Collide+Power, Downfall, and Inception: New Side-Channel Attacks Affecting Modern CPUs

• Dynatrace Security Analytics detects and blocks common application attacks

• Rising Threat of ‘Hackers for Hire’ – How End-to-End Encryption Software Safeguards Businesses

• Officials Point To Russia After Electoral Commission Hack

• RedHotel Chinese APT Hackers Attack Government Entities & Intelligence Organizations

• X-Force releases detection & response framework for managed file transfer software

• Zoom is entangled in an AI privacy mess

• Worldcoin explained: Everything you need to know

• RedHotel Checks in As Dominant China-Backed Cyberspy Group

• Interpol Shuts Down African Cybercrime Group, Seizes $2 Million

• Symmetry raises $18M to bolster organizations’ data security programs

• White House To Strengthen K-12 Cybersecurity

• Researchers Find Active Campaigns Exploiting Two Kubernetes Misconfigurations

• eSentire releases MDR Agent to reduce costs and risk of business disruption for SMBs

• Whistic introduces third-party risk management platform powered by AI

• Vicarius vuln_GPT enables security teams to find and fix software vulnerabilities

• India to replace all its defense related Microsoft systems with Maya OS due to Ransomware

• High-Severity Access Control Vulnerability Found in Spring WebFlux

• Colorado Department of Higher Education Attacked by Ransomware

• AI Risk Database Tackles AI Supply Chain Risks

• China-Linked Hackers Strike Worldwide: 17 Nations Hit in 3-Year Cyber Campaign

• Q2 2023, Community Updates: Introducing New Learning Assets, a Unique Solution for Workforce Development, and Capture the Flag (CTF)

• Worldwide Tailor-Made Massive Phishing Campaign

• Experts Alert Travelers Against Sharing Photos of Boarding Passes Online

• Apple, Amazon In Talks To Invest In ARM – Report

• Microsoft Paid Out $13 Million via Bug Bounty Programs for Fourth Consecutive Year

• Sweet Security Emerges From Stealth With $12 Million Seed Funding and a Cloud Runtime Solution

• Kyndryl and Microsoft join forces to help customers explore the use of generative AI

• Cymulate delivers threat-informed defense for cloud infrastructure

• Appdome collaborates with NetSPI to improve security defenses for all mobile apps

• UK Electoral Commission Data Breach Exposes Information of 40 Million Voters

• Elon Musk’s X Steps Up: Pledges Legal Funds for Workers Dealing with Unfair Bosses

• Two-Thirds of UK Websites are at Risk from Malicious Bots

• Sweet Security Lands $12 Million in Seed Funding to Shift Cloud Security Right with Runtime Security Suite

• July 2023’s Most Wanted Malware: Remote Access Trojan (RAT) Remcos Climbs to Third Place while Mobile Malware Anubis Returns to Top Spot

• Why Shellshock Remains a Cybersecurity Threat After 9 Years

• History’s Greatest Insider Threats

• PSNI data breach left officers vulnerable

• Tenable launches LLM-powered ExposureAI product

• Cyber-attack hits the UK’s electoral registers

• Downfall Attack Enables Extraction of Passwords and Encryption Key From Intel Microprocessor

• Northern Ireland police may have endangered its own officers by posting details online in error

• TUNE IN Dark Reading News Desk: Live at Black Hat USA 2023

• Closing Coverage Gaps Where Customer Resources Meet Cloud Environments

• Cybersecurity giant Rapid7 announces sweeping layoffs as losses mount

• Hardening SSH connections to managed hosts with Red Hat Ansible Automation Platform

• The State of Edge Security Report

• Beware of New Malware Attack Disguised As Google Bard Ads On Facebook

• Got vulns? vuln_GPT debuts as AI-powered approach to find and remediate software vulnerabilities

• Automated Security Control Assessment: When Self-Awareness Matters

• Intel Addresses 80 Firmware, Software Vulnerabilities

• Cloud Security Firm Kivera Raises $3.5 Million in Seed Funding

• How to Remove Your Info From Google With the ‘Results About You’ Tool

• Missing The Point In The Current Age Of Cyber

• Major Data Breach In The UK: Electoral Commission Systems Compromised Affecting Over 40 Million Voters

• DigiCert expands certificate management platform to extend the value of internal CAs

• Ghost Platform simplifies application security in the cloud

• Computer Integrated Services partners with Island to strengthen data protection across enterprises

• Cyber Security Today, August 9, 2023 – The latest ransomware news, and more

• Continuous Security Validation with Penetration Testing as a Service (PTaaS)

• Parsing the UK voter register cyberattack

• Synopsys Bolsters Application Security Testing Solutions Through Collaborations with NowSecure and Secure Code Warrior

• Boost identity protection with Axiad Cloud and Microsoft Entra ID

• Microsoft Purview data security mitigations for BazaCall and other human-operated data exfiltration attacks

• Germany To Subsidise TSMC Factory In Dresden

• Using Machine Learning to Detect Keystrokes

• Northern Ireland Police Officers Vulnerable After Data Leak

• U.K. Electoral Commission Breach Exposes Voter Data of 40 Million Britons

• Downfall attacks can gather passwords, encryption keys from Intel processors

• BigID introduces Data Risk Assessment for hybrid environments

• Sonet.io blocks sensitive data from being pasted into ChatGPT

• Google unveils stronger cellular security for Android 14

• Is the Metaverse Dead? Head-to-Head

• ‘Monumental’ Data Breach Exposes Northern Ireland Police Officers

• SAP Patches Critical Vulnerability in PowerDesigner Product

• Enhancing Cybersecurity with Remote Browser Isolation (RBI)

• Downfall Vulnerability Exposes Intel CPUs to Data and Encryption Keys Stealing

• Malicious Campaigns Exploit Weak Kubernetes Clusters for Crypto Mining

• Bectran Advanced Fraud Prevention Suite protects users against fraudulent activity

• Sophos X-Ops showcases MDR and threat intelligence at Black Hat and DEF CON

• Recent ransomware attacks share curiously similar tactics

• An Overview of the New Rhysida Ransomware Targeting the Healthcare Sector

• Patch Tuesday: Microsoft Fixes 2 Office Zero-Days, Critical Team Flaw

• 40 Vulnerabilities Patched in Android With August 2023 Security Updates

• New ‘Inception’ Side-Channel Attack Targets AMD Processors

• Notorious Phishing-as-a-Service Platform Shuttered

• New Report Finds Shift in Cyber Crime | Avast

• Summer Spending Pressure Fuels Loan Fee Fraud Fears

• Tenzir’s security data pipeline platform optimizes SIEM, cloud, and data costs

• Barracuda Networks and Cork offer cyber warranty services for customers of MSPs

• Cybersecurity: Creating a Foundation to build on

• Microsoft Patches 80+ Flaws Including Two Zero-Days

• New Android 14 Security Feature: IT Admins Can Now Disable 2G Networks

• Downfall Intel CPU side-channel attack exposes sensitive data

• Why performing security testing on your products and systems is a good idea

• LockBit threatens to leak medical data of cancer patients stolen from Varian Medical Systems

• Threat Actors English-Speaking Countries with Customized Yashma Ransomware

• Downfall: New Intel CPU Attack Exposing Sensitive Information

• US holds first ever cybersecurity summit on ransomware attacks on K12 Schools

• Bolstering Cloud Security Through Serverless Architecture

• Microsoft Releases Patches for 74 New Vulnerabilities in August Update

• Data exfiltration is now the go-to cyber extortion strategy

• Using creative recruitment strategies to tackle the cybersecurity skills shortage

• Why cybersecurity is a blue-collar job

• Edge computing’s role in healthcare

• Mobile Device Management: Securing the modern workplace

• Rapid7 Announces Layoffs, Office Closings Under Restructuring Plan

• SandboxAQ launches open-source meta-library of cryptographic algorithms

• The ransomware rollercoaster continues as criminals advance their business models

• INTERPOL shutters ’16shop’ phishing-as-a-service outfit

• Microsoft Patch Tuesday, August 2023 Edition

• Attacker Breakout Time Shrinks Again, Underscoring Need for Automation

• Analyzing Network Chaos Leads to Better DDoS Detection

• Novel ‘Inception’ Attack Exposes Sensitive Data in CPUs

• GrammaTech Nominated to Compete in 2023 ‘ASTORS’ Awards Program

• The FBI Is Investigating a Ransomware Attack that Disrupted Hospital Operations in 4 States

• Digital assets continue to be prime target for malvertisers

• Server breach could be fatal blow for LetMeSpy

• Rubrik acquires Laminar for cloud security, data visibility

• Microsoft Patch Tuesday for August 2023 fixed 2 actively exploited flaws

• Microsoft, Intel lead this month’s security fix emissions

• Top SEO Agencies in the UK: Expert Insights

• US Hospitals Under Increasing Threat of Ransomware

• New Deep Learning Model Decodes Keyboard Sounds with 95% Accuracy

• Microsoft Fixes 74 CVEs in August Update

• Brillio Partners With Google Cloud to Build Generative AI Solutions for the Financial Services and Healthcare Industries

• zkPass Secures $2.5M in Seed Funding to Safeguard User Privacy and Data

• Russian Rocket Bureau Faces Cyber-Espionage Breach, North Korea Responsible

• IT Security News Daily Summary 2023-08-08

• Microsoft’s red team has monitored AI since 2018. Here are five big insights

• 75% of Organizations Worldwide Set to Ban ChatGPT and Generative AI Apps on Work Devices

• BlackBerry intelligence report reveals a 40 per cent increase in cyberattacks

• Microsoft Azure AI Adds GPT-4 and New Virtual Machines

• Multiplying Force with Automation — Reducing the Soul Crushing Work

• VERT Threat Alert: August 2023 Patch Tuesday Analysis

• Patch Tuesday: Microsoft (Finally) Patches Exploited Office Zero-Days

• Google unveils ‘Downfall’ attacks, vulnerability in Intel chips

• Serious Security: Why learning to touch-type could protect you from audio snooping

• India Data Protection Bill Approved, Despite Privacy Concerns

• August 2023 Patch Tuesday: Microsoft fixes critical bugs in Teams, MSMQ

• UK Electoral Commission Admits Major Data Breach Spanning Over a Year

• Vandals messing up your metaverse? Apple’s new patent lets you delete virtual graffiti

• Custom Yashma Ransomware Crashes Into the Scene

• Raft of TETRA Zero-Day Vulnerabilities Endanger Industrial Communications

• Cyber-extortionists pillage Colorado education dept

• Google’s Messages app will now use RCS by default and encrypt group chats

• California’s DELETE Act Protects Us From Data Brokers

• White House Holds First-Ever Summit on the Ransomware Crisis Plaguing the Nation’s Public Schools

• Patch Tuesday: Adobe Patches 30 Acrobat, Reader Vulns

• Citrix Zero-Day: 7K Instances Remain Exposed, 460 Compromised

• Govt Proposes Rs 250 Cr Fine for Consumer Data Leaks

• This Ransomware Targets Several English-Speaking Nations

• Identity-based attacks increasing, warns CrowdStrike

• 5 steps to ensure HIPAA compliance on mobile devices

• Meet the Brains Behind the Malware-Friendly AI Chat Service ‘WormGPT’

• Code42 and Tines launch Incydr Flows to streamline workflows

• ThreatX extends API protection with sensitive data detection and visualizations

• Australia’s Banking Industry Mulls Better Cross-Collaboration to Defeat Scam Epidemic

• New ‘Downfall’ Flaw Exposes Valuable Data in Generations of Intel Chips

• UK Electoral Commission discloses a data breach

• An update on Chrome Security updates – shipping security fixes to you faster

• Android 14 introduces first-of-its-kind cellular connectivity security features

• Downfall and Zenbleed: Googlers helping secure the ecosystem

• Congratulations to the MSRC 2023 Most Valuable Security Researchers!

• Horizon3 AI Raises $40 Million to Expand Automated Pentesting Platform

• The Problem With Cybersecurity (and AI Security) Regulation

• Rubrik acquires Laminar to expand in data security across public clouds

• Announcing the Tor University Challenge

• The impact of blockchain technology on the future of shipping and logistics

• Code Mirage: How cyber criminals harness AI-hallucinated code for malicious machinations

• Cryptomining and Malware Flourish on Misconfigured Kubernetes Clusters

• The 3 Cs of Renting vs Buying Ebooks | Avast

• Tampa General Hospital Sued Over Data Breach

• 91% of IT leaders better protected with PAM but want more affordable solutions

• The industry’s most insightful minds come together at Digital Transformation EXPO Europe (DTX)

• SecurityScorecard unveils Managed Cyber Risk Services to solve the third-party cyber risk puzzle

• XDR Alliance unveils open-source API specifications to improve cybersecurity for customers

• Silobreaker unveils risk scoring capabilities to help threat intel teams define and evaluate risks

• Isolated Systems at Risk: How Threat Actors Can Still Infect Your Systems With Malware

• White House to bolster cybersecurity training for K-12 schools, with help from the FCC, Amazon Web Services and more

• CrowdStrike observes massive spike in identity-based attacks

• UK voter data exposed for over a year in attack on Electoral Commission

• Many organizations want to limit employee access to AI, survey shows

• Cyber Attack on UK Electoral Database leaks 8 yrs voters information

• Protection is No Longer Straightforward – Why More Cybersecurity Solutions Must Incorporate Context

• #BHUSA: Ransomware Threat Activity Cluster Uncovered

• QakBot Malware Operators Expand C2 Network with 15 New Servers

• Google Fails To End $5 Billion Consumer Privacy Lawsuit

• AI Could Identify Passwords By Sound Of Keys Being Pressed, Study Suggests

• Stalkerware Slinger LetMeSpy Shuts Down For Good After Database Robbery

• Millions Of UK Voters’ Data Accessible In Cyber Attack, Says Electoral Commission

• Rest In Peace Bram Moolenaar, Author Of Vim And Hero Of Many Developers

• North Korean Hackers Infiltrate Russian Missile Engineering Firm

• Stay Safe Online: How to Protect Yourself from Pass-the-Cookie Attacks

• Multi-State Cyberattack Disrupts Health Care Services in Multiple States

• How to Create a Data Center Disaster Recovery Plan

• The Forrester Consulting TEI of Guardium Data Protection study: 5 data security lessons

• Dropzone AI launches autonomous AI agent to investigate security alerts, raises $3.5M in seed funding

• UK Voters’ Data Exposed in Electoral Commission Cyber-Attack

• Vietnamese-Origin Ransomware Operation Mimics WannaCry Traits

• Abnormal Security CheckGPT detects AI-generated email attacks

• With 95% Accuracy, New Acoustic Attack can Steal from Keystrokes

• U.S. Hunts Chinese Malware Halting Military Operations

• Colorado Higher Education Hit By Ransomware: What Students And Educators Need To Know

• North Korean hackers breached Russian missile development firm

• Vectra AI Platform provides real-time attack signal intelligence

• Patch Tuesday August 2023 – Microsoft Releases 12 Security Patches for Chromium-based Edge Browser

• EFF at Las Vegas Hacker Summer Camp

• It’s Summer Security Week at EFF

• 43 Malicious Android Apps With Over 2.5 Million Installs Display Secret Ads

• Do’s and Don’ts When Building an Internal Developer Platform

• Cybersecurity startup ConductorOne grows series A funding to $27M to boost least privilege access

• 10 Key Controls to Show Your Organization Is Worthy of Cyber Insurance

• Rubrik acquires Laminar for up to $250M to expand in data security across public clouds

• Clop Ransomware Adopts Torrents for Data Leaks in Effort to Evade Detection

• ICS Patch Tuesday: Siemens Fixes 7 Vulnerabilities in Ruggedcom Products

• Identity-Based Attacks Soared in Past Year: Report

• Celebrating Infinity Day. To August 8th… and Beyond!

• Threat Actors Using an Armed OpenBullet Pentesting Tool to Manipulate Script Kids

• Unmasking hypnotized AI: The hidden risks of large language models

• #BHUSA: Identity Compromise the Cause of Most Breaches

• SandboxAQ Open Sources Cryptography Management Tool for Post-Quantum Era

• Dark Reading News Desk: Live at Black Hat USA 2023

• Hackers Abusing Cloudflare Tunnels for Covert Communications

• Evolution of Enterprise IT and AI: DTX + UCX Europe 2023 prepares teams for new realm

• Solvo SecurityGenie helps organizations improve their cloud security posture

• Open Raven automates attack prevention and remediation with DDR capabilities

• NetSPI launches ML/AI Pentesting solution to help organizations build more secure models

• Electoral Commission hack exposed data of 40 million UK voters

• White House Announces New Actions to Strengthen K-12 Schools’ Cybersecurity

• Bug Bounty Program: Microsoft Rewarded $13.8M for 345 Security Researches

• Black Hat Preview: The Business of Cyber Takes Center Stage

• UK Think Tank Proposes Greater Ransomware Reporting From Cyberinsurance to Government

• What Doctors Wish You Knew About HIPAA and Data Security

• Horizon3 secures $40M to expand its pen testing platform

• What are the safest cars from break ins and system hacks

• You Can’t Rush Post-Quantum-Computing Cryptography Standards

• Mastering DevOps: Best Practices for Agile Software Delivery

• ComplyCube ID Liveness Layer combats screen replay attacks

• Q2 2023 Cyber Attacks Statistics

• China – which surveils everyone everywhere – floats facial recognition rules

• PayPal Launches USD-Pegged Crypto Stablecoin

• Encryption Policy

• Russia To Launch First Moon Mission Since 1976

• Microsoft Shares Guidance and Resources for AI Red Teams

• Understanding Active Directory Attack Paths to Improve Security

• CraftRise – 2,532,527 breached accounts

• Is the Metaverse Dead?

• North Korean Hackers Compromise Russian Missile Maker

• LOLBAS in the Wild: 11 Living-Off-The-Land Binaries That Could Be Used for Malicious Purposes

• New Yashma Ransomware Variant Targets Multiple English-Speaking Countries

• How to Conduct a Phishing Attack in a 5 Easy Steps

• Huawei Looks To AI-Driven HarmonyOS For Smartphone ‘Comeback’

• Amazon Meets With FTC Ahead Of Expected Antitrust Case

• Two-Thirds of UK Sites Vulnerable to Bad Bots

• Zuckerberg ‘Not Holding Breath’ Over Musk Cage Fight

• Virgin Galactic To Transport First Mother, Daughter Into Space

• North Korea ‘Hacked Russian Missile Firm’

• Over 200 Million Brits Have Data Compromised in Four Years

• Protecting Sensitive Data from Insider Threats in PCI DSS 4.0

• Need to improve the detection capabilities in your security products?

• LOLBAS in the Wild: 11 Living-Off-The-Land Binaries Used for Malicious Purposes

• New PaperCut NG/MF Flaw Let Attackers Execute Code on Unpatched Windows Servers

• North Korean hackers had access to Russian missile maker for months, say researchers

• Getting the best possible outcome in ransomware negotiation

• For TSA’s updated Pipeline Security Directive, consistency and collaboration are key

• Exploitation of Artificial Intelligence AI technology to facilitate password theft

• What may be lurking behind that QR code

• Seasoned cyber pros are more complacent in their skills than junior staff

• Dark web activity targeting the financial sector

• 43 Android apps in Google Play with 2.5M installs loaded ads when a phone screen was off

• How to get started with ongoing configuration assessments

• Managing human cyber risks matters now more than ever

• Microsoft AI Red Team building future of safer AI

• Adopting guidance from the US National Cybersecurity Strategy to secure the Internet of Things

• Ransomware Victims Surge as Threat Actors Pivot to Zero-Day Exploits

• Vulnerability Summary for the Week of July 31, 2023

• Apple Users See Big Mac Attack, Says Accenture

• Leverage the AWS Sustainability Pillar to Minimize Environmental Impact

• SEC’s controversial cybersecurity disclosure warning: What enterprises need to do now

• Ransomware Attack Timeline

• A week in security (July 31 – August 6)

• New Security Advisor amps up security in minutes

• 2022’s most routinely exploited vulnerabilities—history repeats

• FCC comes down hard on robocallers with record $300m fine

• TikTok facing fines for violating children’s privacy

• Zoom trains its AI model with some user data, without giving them an opt-out option

• Your Computer Should Say What You Tell It To Say

• IT Security News Daily Summary 2023-08-07

• Akamai Research: Rampant Abuse of Zero-Day and One-Day Vulnerabilities Leads to 143% Increase in Victims of Ransomware

• SecurityScorecard Launches Managed Cyber Risk Services to Mitigate Zero-Day and Critical Supply Chain Vulnerabilities

• Stalkerware slinger LetMeSpy shuts down for good after database robbery

• LetMeSpy Android Spyware Service Shuts Down After Data Breach

• Cyberinsurance Firm Resilience Raises $100 Million to Expand Its Cyber Risk Platform

• orphan account

• Smart devices: Putting a premium on peace of mind

• Facebook Accused Of Ignoring Warnings About Dangerous Content

• cryptosystem

• Research Eyes Misconfiguration Issues At Google, Amazon and Microsoft Cloud

• Integrate Security Testing Into Your Development Cycle With Foundry and Diligence Fuzzing

• The Mystery of Chernobyl’s Post-Invasion Radiation Spikes

• Colorado warns hackers stole 16 years of public school data in ransomware attack

• Researcher Exposes Cryptocurrency Scam Network of 300 Domains

• The 3 Cs of renting vs buying textbooks: Cost, convenience, and cybersecurity

• Databases beware: Abusing Microsoft SQL Server with SQLRecon

• Microsoft’s AI Red Team Has Already Made the Case for Itself

• Generative AI Has an Increasing Effect on the Workforce and Productivity

• ChatGPT Security Concerns: Credentials on the Dark Web and More

• North Korea compromised Russian missile engineering firm NPO Mashinostroyeniya

• New SkidMap Malware Attacking Wide Range of Linux Distributions

• North Korean Hackers Targeted Russian Missile Developer

• New Malware Campaign Targets Inexperienced Cyber Criminals with OpenBullet Configs

• Microsoft Addresses Azure AD Flaw Following Criticism from Tenable’s CEO

• US Primary Care Services Shuttered After Cyber-Attack

• Mallox Ransomware Group Revamps Malware Variants, Evasion Tactics

• SANS Teaches Cybersecurity Leadership in Saudi Arabia

• Colorado warns hackers stole 16 years of public school data

• Data Protection and Digital Information Bill – what are the changes?

• Here’s why investors should not be selling one big tech stock and maybe buying another

• AI Model Listens to Typing, Potentially Compromising Sensitive Data

• What is the dark web? Everything you need to know before you access it

• Invisible Ad Fraud Targets Korean Android Users

• Colorado Dept. of Higher Education Hit With Massive Data Breach

• Cybersecurity Companies Offer Technology Stack Incorporating Zero Trust Edge

• A Software Vulnerability in AMD’s Chip Compromises Tesla’s Paid Features

• Worldcoin’s Verification Process Under Scrutiny After CertiK’s Discovery

• Autonomous-Car Technology May Possess a Threat to Privacy

• How to make sure the reputation of your products and company is good

• CLOP Ransomware avoids takedowns by using torrents

• Google to discuss LLM benefits for threat intelligence programs

• FBI Warns Against Criminals Posing as NFT Developers

• A new sophisticated SkidMap variant targets unsecured Redis servers

• ThreatConnect empowers security teams to operationalize intelligence requirements

• How to Tell if a Company Is Selling Your Email Address

• New PaperCut Vulnerability Allows Remote Code Execution

• Vulnerability Found In Rewards Programs

• Post Tenable’s CEO Blast Of Microsoft, Bug Gets Fixed

• Navy Soldiers Charged With Giving Chinese Spies Secret Military Info

• Advancing API Security: An Interview with Richard Bird of Traceable AI

• Get Protected the Right Way with Avast Free Antivirus

• Don’t Miss Check Point’s Black Hat Demos & Sessions

• North Korean Hackers Targets Russian Missile Engineering Firm

• How Technology Revolutionizes the Way You Earn Money Teaching English Online

• The evolution of security analyst experience

• SEC controversial cybersecurity disclosure warning: What enterprises need to do now

• Name That Edge Toon: How Now?

• Selling Software to the US Government? Know Security Attestation First

• techUK and Axiologik join forces to present the UK Tech Plan at major political party conferences

• Keystroke sounds can betray passwords

• How an 8-Character Password Could be Cracked in Just a Few Minutes

• CISA Unveils Cybersecurity Strategic Plan for Next 3 Years

• Cyber Threats Loom Over Major Sporting Events, Microsoft Study Reveals

• Behind the Scenes of a Tailor-Made Massive Phishing Campaign

• Elite North Korean Hackers Breach Russian Missile Developer

• Russian-Linked Hackers Exploit Microsoft Teams in Advanced Cyber Espionage

• Tripwire Patch Priority Index for July 2023

• How an 8-character password could be cracked in just a few minutes

• Collide+Power Attack: New Side-Channel Attack Risks All CPUs

• 3 Typеs of DAST Tools for Enhancing Application Sеcurity

• Intel Exec Talks Up China As Sanctions Threat Looms

• Amazon Shares Surge On Profit Spike

• US Judge Narrows Google Antitrust Cases

• Amazon Fined Over US Warehouse Conditions

• Revolut To Halt US Crypto Services Amidst Regulatory Crackdown

• IBM SDK, Java Technology Flaw Lets Remote Attacker Execute Arbitrary

• Microsoft Signing Key Stolen by Chinese

• PaperCut fixes bug that can lead to RCE, patch quickly! (CVE-2023-39143)

• Hunters partners with Kudelski Security to help companies strengthen their cyber resilience

• Colorado Department of Higher Education Discloses Ransomware Attack, Data Breach

• Criminals Have Created Their Own ChatGPT Clones

• New SkidMap Redis Malware Variant Targeting Vulnerable Redis Servers

• New ‘Deep Learning Attack’ Deciphers Laptop Keystrokes with 95% Accuracy

• Enhancing Security Operations Using Wazuh: Open Source XDR and SIEM

• FBI warns of crooks posing as NFT developers in fraudulent schema

• TargetCompany Ransomware Abuses FUD Obfuscator Packers

• Latest Batloader Campaigns Use Pyarmor Pro for Evasion

• Research Jailbreak Tesla’s Software-Locked Features Worth up to $15,000

• Russian Hacktivists Overwhelm Spanish Sites With DDoS

• Colorado Education Department Suffers Ransomware Breach

• Web 3.0: The Future of the Internet and its Cybersecurity Features and Challenges

• Clop Gang Offers Data Downloads Via Torrents

• Software developers, how secure is your software?

• FBI Alert: Crypto Scammers are Masquerading as NFT Developers

• The number of ransomware attacks targeting Finland increased fourfold since it started the process to join NATO

• The Dark Web Is Expanding (As Is the Value of Monitoring It)

• Android automated SOS feature is causing serious problems

• Honeypots in Cybersecurity: A Deceptive Defense

• 8 free cybersecurity documentaries you can watch right now

• Microsoft hits back at Tenable criticism of its infosec practices

• Ransomware attack targets 3 hospitals in the United States

• Zoom CISO Michael Adams discusses cybersecurity threats, solutions, and the future

• Navigating the gray zone of ransomware payment practices

• Budget constraints threaten cybersecurity in government bodies

• Unraveling the importance of software supply chain security

• Five Eyes nations detail dirty dozen most exploited vulnerabilities

• Bram Moolenaar, Creator of Vim Text Editor for Linux Passes Away

• AI Flagged as “Chronic Risk” in UK Government’s Risk Register 2023 Report

• IT Security News Weekly Summary – Week 31

• IT Security News Daily Summary 2023-08-06

• Hospitals Paralyzed by Cyberattack, Emergency Services Diverted

• NIS2: 1. Perform a gap analysis

• Amazon Executive Lacks Data for Return-to-Office Mandate

• Worldcoin’s Iris-Scanning Technology: A Game-Changer or a Privacy Concern

• VMCONNECT: Malicious PyPI Package Mimicking Common Python Tools

• System Architecture: Move Authentication to the API Gateway

• Cyber Security Today, August 4, 2023 – The shadow hanging over IT networks

• Employee banking information stolen from Tennis Canada in cyber incident: Report

• Hinton vs. Murdoch: A tale of two AIs

• Cyber Security Today, Week in Review for Friday, August 4, 2023

• Tricky Malware Uses Versioning to Outsmart Google Play Store Scanners

• Microsoft fixed a flaw in Power Platform after being criticized

• Hackers Have Scored Unlimited Airline Miles, Targeting One Platform

• Don’t Shut Off ChatGPT, Implement a Managed Allowance Instead

• Facebook Preparing To Release Chatbots That Can Gather Your Data

• US Senators Propose Privacy Reform to Tame Artificial Intelligence

• Contemplating Import Restrictions for PCs and Laptops to Secure Digital Infrastructure

• One Defense Against Data Breaches: Don’t Have the Data to Begin With

• Heard At RSAC 2023 – Protecting the Protectors

• Colorado Department of Higher Education (CDHE) discloses data breach after ransomware attack

• Hacktivists Embrace Cybercrime Tactics for Funding

• How Board Rooms are adapting to remote work and hybrid models

• Salesforce Zero-Day Flaw Exploited In Facebook Phishing Attacks

• How to Automatically Delete Passcode Texts on Android and iOS

• From UV Light to Pure Air: Demystifying PCO Cell Technology – 2023 Guide

• Week in review: AWS SSM agents as RATs, Patch Tuesday forecast

• BlueCharlie changes attack infrastructure in response to reports on its activity

• Security Affairs newsletter Round 431 by Pierluigi Paganini – International edition

• Cyber Security Management System (CSMS) for the Automotive Industry

• AI knows what you type by simply listening

• FBI warns users of NFT theft by malicious developers

Generated on 2023-08-13 23:58:37.005806