IT Security News Weekly Summary – Week 33

• IT Security News Daily Summary 2023-08-20

• Cyber Security & Cloud Expo Europe 2023 – Less Than Two Months To Go

• Implement Machine Learning to Secure Your IoT Network

• Hybrid Mesh Firewall Management

• N. Korean Kimsuky APT targets S. Korea-US military exercises

• AI in OT: Opportunities and risks you need to know

• Microsoft Discovers BlackCat’s Sphynx Ransomware Exploiting Impacket & RemCom

• Datafication: What is it and Why is it Important ?

• Top Five Cybersecurity Challenges in the AI Era

• Satellite Security Breached: Hackers Pocket $50K for Exploiting US Air Force Defenses

• Google’s New Feature Ensures Your Pixel Phone Hasn’t Been Hacked. Here’s How It Works

• Suspected N. Korean Hackers Target S. Korea-US Drills

• Security For Everyone – 2023 Update

• Four Juniper Junos OS flaws can be chained to remotely hack devices

• Week in review: VPNs vulnerable to TunnelCrack attacks, Cybertech Africa 2023

• Data Fabric: The Intricate Shield Against Evolving Cyber Threats

• Cyber Security Management System (CSMS) for the Automotive Industry

• Cybersecurity: CASB vs SASE

• Security Affairs newsletter Round 433 by Pierluigi Paganini – International edition

• Interpol arrests 14 who allegedly scammed $40m from victims in ‘cyber surge’

• Stories from the SOC – Unveiling the stealthy tactics of Aukill malware

• Image steganography: Concealing secrets within pixels

• IT Security News Daily Summary 2023-08-19

• Former Tesla employees stole data of over 75,000 staff, company says

• Over 3,000 Android Malware spotted using unsupported/unknown compression methods to avoid detection

• Responsibilities of an HR to Strengthen Their Company’s Cyber Defenses

• Here’s How to Prevent AI From Cracking Your Password

• Guarding Your Finances: The Art of Phishing Attacks and Social Engineering

• Cellebrite asks cops to keep its phone hacking tech ‘hush hush’

• Navigating the PAM Landscape: Overcoming Deployment Barriers for Modern Security

• Security News This Week: US Energy Firm Targeted With Malicious QR Codes in Mass Phishing Attack

• WoofLocker Toolkit Hides Malicious Codes in Images to Run Tech Support Scams

• Evacuation of 30,000 hackers – Week in security with Tony Anscombe

• Explanation of what NLP is and its significance in data science

• 10 Best Linux Distributions In 2023

• New Juniper Junos OS Flaws Expose Devices to Remote Attacks – Patch Now

• Build or Buy your own antivirus product

• Thousands of Android Malware Apps Using Stealthy APK Compression to Evade Detection

• ChatGPT Joins Data Clean Rooms for Enhanced Analysis

• Boost Cybersecurity: HR’s Key Role in Guarding Your Business

• Cyber Criminals Exploiting Google Drive, OneDrive to Hide Malicious Traffic

• WinRAR flaw enables remote code execution of arbitrary code

• Exchange Server security updates updated

• Patch now! Citrix Sharefile joins the list of actively exploited file sharing software

• Attackers demand ransoms for stolen LinkedIn accounts

• FYI: There’s another BlackCat ransomware variant on the prowl

• IT Security News Daily Summary 2023-08-18

• ExpressVPN Review (2023): Features, Pricing and Alternatives

• Facebook Slammed For “Dangerous” News Ban During Wildfire Emergency

• CISA Committee Tackles Remote Monitoring and Management Protections

• ProjectDiscovery Announces $25M Series A Financing and Launch of Cloud Platform

• CyCognito Finds Large Volume of Personal Identifiable Information in Vulnerable Cloud and Web Applications

• Top 5 Disaster Recovery as a Service Providers for 2023

• About 2000 Citrix NetScalers Were Compromised in Massive Attack Campaigns

• Cyber Security Today, Week in Review for the week ending Friday, August 18, 2023

• Four Practical Ways To Make Your Software More Secure

• Combatting the OpenSSH Vulnerability

• Phishing Attack Targets Hundreds of Zimbra Customers in Four Continents

• DEF CON 31: US DoD urges hackers to go and hack ‘AI’

• Expand Your Definition of ‘Endpoint,’ Get a Better Handle On Cloud Threats

• Tel Aviv Stock Exchange CISO: Making Better Use Of Your SIEM

• #OpFukushima: Anonymous group protests against the plan to dump Fukushima RADIOACTIVE wastewater into Pacific

• Best VPN for streaming in 2023: Unblock your favorite streaming services now

• African Cybercrime Operations Shut Down in Law Enforcement Operation

• Electronic Discovery Reference Model (EDRM)

• Massive phishing campaign targets users of the Zimbra Collaboration email server

• Harnessing the Power of Cyber Ranges

• How to conduct a cloud security assessment

• QR Code Campaign Targets Major Energy Firm

• Media Briefing: As UN Cybercrime Treaty Negotiations Enter Final Phase, Time is Running Short to Bolster Human Rights Protections

• Class action against Government of Canada advances following 2020 CRA privacy breach

• Africa Cyber Surge II law enforcement operation has led to the arrest of 14 suspects

• GitLab vulnerability leads to Proxyjacking malware Campaign

• The Current Security State of Private 5G Networks

• Cuba Ransomware Armed with New Weapons to Attack U.S Infrastructure

• Cybersecurity Study Reveals Web App Vulnerability Crisis

• The Vanishing Data Loss Prevention (DLP) Category

• Ransomware Attack Disrupts Real Estate Property Listing Services in US

• Rising Concerns as Discord.io Data Breach Compromises 760,000 Users

• In Other News: US Hacking China, Unfixed PowerShell Gallery Flaws, Free Train Tickets

• Interpol-Led Africa Cyber Surge II Nets 14 Cybercrime Suspects

• With the market oversold, we’re going to hold our noses and do some buying

• Decoding Cybercriminals’ Motives for Crafting Fake Data Leaks

• Monti Ransomware Strikes Government Systems Again

• Cuba ransomware gang looking for unpatched Veeam installations: Report

• Better securing the frontlines: Leveraging Ansible Automation Platform and AIDE for DoD file integrity

• Add Writing Malware To The List Of Things AI Is Not Very Good At

• Companies Respond To Downfall Intel CPU Vulnerability

• Jenkins Patches High Severity Vulnerabilities In Multiple Plugins

• Our Health Care System May Soon Receive A Much Needed Cybersecurity Boost

• BlackCat Sphynx: The Ransomware Operation Evolves Once Again

• Phishing campaign tries to evade defences with QR codes

• It’s Time to Approach The Cybersecurity Skills Gap Differently

• Infostealer Malware Exposes Over 100K Accounts From Hacking Forums

• The Number of MSPs Offering Virtual CISO Services Will Grow Fivefold By Next Year: Cynomi Study

• Why Whac-A-Mole is not a strategy for defending against ransomware attacks

• Stealthy ‘LabRat’ Campaign Abuses TryCloudflare to Hide Infrastructure

• Jenkins Patches High-Severity Vulnerabilities in Multiple Plugins

• Unveiling the Hidden Risks of Routing Protocols

• What Is Next-Generation Antivirus (NGAV) and How Does It Work?

• How We Grew Revenue by Strengthening Cybersecurity

• New Wave of Attack Campaign Targeting Zimbra Email Users for Credential Theft

• The Vulnerability of Zero Trust: Lessons from the Storm 0558 Hack

• 14 Suspected Cybercriminals Arrested Across Africa in Coordinated Crackdown

• Companies Respond to ‘Downfall’ Intel CPU Vulnerability

• Fastly Launches Certainly CA

• Cyber Security Today, August 18, 2023 – CISA urges action on a Citrix ShareFile vulnerability, and more

• Artificial Airplane Mode – New iOS 16 Hack Blocks All Apps Except Attackers Online

• Seeing the Forest for the Trees: Data Preservation Starts With a Keen Eye

• ISC2 Announces Major Milestone as Community Grows to Half a Million Strong

• The Rising Risks and Opportunities in API Security

• Federally Insured Credit Unions Required to Report Cyber Incidents Within 3 Days

• Israel, US to Invest $4 Million in Critical Infrastructure Security Projects

• New BlackCat Ransomware Variant Adopts Advanced Impacket and RemCom Tools

• Edge Data Platforms, Real-Time Services, and Modern Data Trends

• Short Staffed in Cybersecurity? It’s Time for MXDR!

• Ongoing Phishing Campaign Targets Zimbra Collaborations Email Servers Worldwide

• X Backtracks After Auschwitz Complaint About Anti-Semetic Account

• What you need to know about protecting your data across the hybrid cloud

• Singapore cautions against security risks ahead of presidential election

• Publisher’s Spotlight: THREATX – A Cloud-Native Solution for Runtime API & App Protection

• Southampton FC Renews Partnership with Acronis

• DEF CON 31: Robot vacuums may be doing more than they claim

• UK’s AI Safety Summit Scheduled For Early November

• 4 ways simulation training alleviates team burnout

• Advancing Battery Testing: How Test Chambers Ensure Reliable Performance

• Centralized cloud security is now a must-have

• Proxyjacking and Cryptomining Campaign Targets GitLab

• Chinese Hackers Use DLL Hijacking to Target Asian Gamblers

• Bronze Starlight targets the Southeast Asian gambling sector

• Creating a SQL Azure Database Backup and Restore

• Alex Tray: A Multifaceted Talent in System Engineering, Freelance Writing, and Cybersecurity Expertise

• Zimbra users in Europe, Latin America face phishing threat

• The Quest for Connection: Overcoming Obstacles in Online Dating

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Silicon UK Pulse: Your Tech News Update: Episode 14

• Google Chrome’s New Feature Alerts Users About Auto-Removal of Malicious Extensions

• Slack outage not caused by Cyber Attack

• Vulnerability Comparison: Android vs. iOS in the Face of Cyber Attacks

• Fantastic Advice To Protect Data Privacy

• New infosec products of the week: August 18, 2023

• Reinventing OT security for dynamic landscapes

• 30% of phishing threats involve newly registered domains

• A closer look at the new TSA oil and gas pipeline regulations

• Confusion Surrounds SEC’s New Cybersecurity Material Rule

• Federal agencies gear up for zero trust executive order deadline

• Add ‘writing malware’ to the list of things generative AI is not very good at doing

• APT29 is targeting Ministries of Foreign Affairs of NATO-aligned countries

• Citrix NetScalers backdoored in widespread exploitation campaign

• Catching up with WoofLocker, the most elaborate traffic redirection scheme to tech support scams

• Digital Rights Updates with EFFector 35.10

• ProjectDiscovery Lands $25M Investment for Cloud Security Tech

• SEC Rule Sparks Reimagining of Cybersecurity Operations

• Adaptive Shield Unveils Identity Threat Detection and Response (ITDR): A New Era in SaaS Security

• JWT Token Authentication in Angular 14 and .NET Core 6 Web API

• Securing your cloud networks: Strategies for a resilient infrastructure

• Edge computing’s role in healthcare

• A massive campaign delivered a proxy server application to 400,000 Windows systems

• iMenu360 – 3,425,860 breached accounts

• Portland’s TA3M: Expanding the Scope of Their Work in PDX

• Sophos: ‘Royal’ Is Trying to Make Itself the King of Ransomware

• Don’t just patch your Citrix gear, check for intrusion: Two bugs exploited in wild

• IT Security News Daily Summary 2023-08-17

• Big Medical Privacy Case Against Facebook Advances In Court

• What Is Cloud Security Posture Management (CSPM)?

• CNAP Platforms: The All-in-One Solution for Cloud Security

• Normalyze: How Focusing On Data Can Improve Cloud Security

• TXOne: How to Improve Your Operational Technology Security Posture

• Foretrace Announces Launch of “Tim,” Generative AI Analyst for Assessing and Responding to Data Leaks

• ISC2 Announces Milestone As Community Grows to Half a Million

• Israel-US Binational Industrial R&D Foundation to Invest $3.85M in Critical Infrastructure Cybersecurity Projects

• Karma Catches Up to Global Phishing Service 16Shop

• CISA, vendors warn Citrix ShareFile flaw under attack

• White House Orders Federal Agencies to Bolster Cyber Safeguards

• Cybersecurity ‘still number one on the agenda in boardrooms,’ Cramer says as Palo Alto reports

• 5 Types of Cyber Crime Groups

• APIs in Motion: Keep Your APIs Up-To-Date

• Experts devise an exploit for Apple iOS 16 that relies on fake Airplane Mode

• Alarming lack of cybersecurity practices on world’s most popular websites

• Google Brings AI Magic to Fuzz Testing With Eye-Opening Results

• Researchers Trick an iPhone Into Faking Airplane Mode

• NoFilter Attack: Sneaky Privilege Escalation Method Bypasses Windows Security

• AI Growth Prompts Job Takeover Fears, Corndel Finds

• Control Access To Private Data Using Azure Storage Shared Access Signatures

• 31% of Organizations Using Generative AI Ask It To Write Code

• LinkedIn Suffers ‘Significant’ Wave of Account Hacks

• An Overview of Dubai’s First and Second Cybersecurity Strategy

• Cynomi Study Reveals Number of MSPs Providing Virtual CISO Services Will Grow Fivefold By Next Year

• WhatsApp Adds Support For HD Photos

• Cyber Criminals Attacking Web Services to Breach Organisations

• LinkedIn under attack, malicious hackers seize accounts

• Malicious QR Codes Used in Phishing Attack Targeting US Energy Company

• Rapid7 Says ROI for Ransomware Remains High; Zero-Day Usage Expands

• S3 Ep148: Remembering crypto heroes

• Critical Flaws in PowerShell Gallery Enable Malicious Exploits

• CISA Launches Joint Initiative to Secure RMM Software

• ‘Play’ Ransomware Group Targeting MSPs Worldwide in New Campaign

• China-Linked Bronze Starlight Group Targeting Gambling Sector with Cobalt Strike Beacons

• Enterprise Secrets Management Explained: Best Practices, Challenges, and Tool Selection

• ProjectDiscovery raises $25M to launch a cloud version of its threat-scanning platform

• List of countries that issued TikTok ban due to data security concerns and benefits

• Quarter Of IT Professionals Consider Quitting, Ivanti Finds

• Exploitation Of Citrix ShareFile Vulnerability Spikes As CISA Issues Warning

• Malicious QR Codes Used In Phishing Attack Targeting US Energy Company

• Man Arrested In Northern Ireland Police Data Leak

• Grooming Cases Reach Unprecedented Heights Amidst Regulatory Delays

• New York City Bans TikTok On Government Devices

• Google paves way for FIDO2 security keys that can resist quantum computer attacks

• Phishing Spree Targets Zimbra Collaboration Account Holders

• New LABRAT Campaign Exploits GitLab Flaw for Cryptojacking and Proxyjacking Activities

• New Apple iOS 16 Exploit Enables Stealthy Cellular Access Under Fake Airplane Mode

• 7 Ways to Access Safe Mode in Windows 10 (2023 Update)

• International Cyber Expo Launches ‘Grab the Mic: Women in Cyber’ Event

• Zen 1 Vulnerability AMD Patchwork Proved Weak, Second Pass Issued

• The great Flipper Zero shortage of 2023 has finally come to end

• The link between home, family and company security

• Top 20 cloud native application protection platforms of 2023

• How to Retrieve and Generate Google 2FA Backup Codes

• Thousands of Systems Turned Into Proxy Exit Nodes via Malware

• How Innovation Accelerators Are at Work on the Dark Side

• Cyber Alert: Global Campaign Targets LinkedIn Accounts

• Multiple Severe Flaws Uncovered in CyberPower and Dataprobe Products

• Ransomware Surges With 1500 Confirmed Victims This Year

• Key Notes for Comprehensive Rank Tracking

• The Enterprise Browser: A Security-Hardened Productivity Platform for the Future of Remote Work

• Cyber Defenders Lead the AI Arms Race for Now

• CISA says hackers are exploiting a new file transfer bug in Citrix ShareFile

• BT joins line-up for Wales Tech Week

• How poor cybersecurity policies disrupt business continuity

• Man arrested in Northern Ireland police data leak as more incidents come to light

• Cato Networks Named a “Leader” in Zero Trust Edge (ZTE) Report by Leading Research Firm

• Citrix ShareFile vulnerability actively exploited (CVE-2023-24489)

• Gozi strikes again, targeting banks, cryptocurrency and more

• Cybersecurity M&A Roundup for August 1-15, 2023

• CISA Releases Cyber Defense Plan to Reduce RMM Software Risks

• Why You Need Continuous Network Monitoring?

• Detecting “Violations of Social Norms” in Text with AI

• Lessons From the 2023 National Risk Register Report

• Raccoon Stealer 2.3.0 Malware – A Stealthier Comeback

• Two Brands Suspend Twitter/X Advertising After Pro-Nazi Ad Placement

• HHS Launches ‘Digiheals’ Project to Better Protect US Hospitals From Ransomware

• Phishers use QR codes to target companies in various industries

• Hackers Selling SMS Bomber Attack Tools on Underground Forums

• Cisco Unified Communications Manager Flaw Let Attacker Launch SQL Injection Attacks

• Russian Hackers Use Zulip Chat App for Covert C&C in Diplomatic Phishing Attacks

• PayPal To Pause UK Crypto Sales Until 2024

• Banks defending their right to security are missing the point about consumer trust

• Exploitation of Citrix ShareFile Vulnerability Spikes as CISA Issues Warning

• CISA Urges Patching of Actively Exploited Citrix Bug

• Cyber Mindfulness Corner Company Spotlight: Netskope

• 5-Step Guide on Securing Serverless Architectures in the Cloud with RASP

• Quick Glossary: Cybersecurity Countermeasures

• AnonFiles Shuts Down After Massive User Abuse

• WordPress Security Checklist

• Google Fixes 26 Bugs Amid Fake Update Warning

• Stay Informed: A Guide to ‘Juice Jacking’ Risks Before Your Next Airport Journey

• Do you know what your supply chain is and if it is secure?

• Cleaning Products manufacturer Clorox Company took some systems offline after a cyberattack

• HPE Aruba Networking Product Vulnerabilities Allow File Overwrite

• Back-to-school cybersecurity tips for parents and children

• Why you need to protect your smartphone with mobile security software

• Proton Sentinel: next level account security protection for (almost) everyone

• CISA Adds Citrix ShareFile Flaw to KEV Catalog Due to In-the-Wild Attacks

• Kubernetes clusters face widespread attacks across numerous organizations

• The road ahead for ecommerce fraud prevention

• Japan’s digital minister surrenders salary to say sorry for data leaks

• Findlargedir: Find all “blackhole” directories with a huge amount of filesystem entries

• Heavy workloads driving IT professionals to resign

• What Is a Data Breach + How Do You Prevent It?

• Vietnam admits it has just ten percent of the infosec pros it needs

• Canadian marketing company hit by data breach, says Ontario liquor board

• Beware malware posing as beta versions of legitimate apps, warns FBI

• Malvertisers up their game against researchers

• Discord.io confirms theft of 760,000 members’ data

• CISA adds flaw in Citrix ShareFile to its Known Exploited Vulnerabilities catalog

• Discord.io pulls the cord after crooks steal 760K users’ info

• PowerShell Gallery Prone to Typosquatting, Other Supply Chain Attacks

• Researchers Harvest, Analyze 100K Cybercrime Forum Credentials

• IT Security News Daily Summary 2023-08-16

• Beyond Identity Launches Passkey Adoption Tool, The Passkey Journey

• Insurance Data Breach Victims File Class-Action Suit Against Law Firm

• 67% of Federal Government Agencies Are Confident in Meeting Zero Trust Executive Order Deadline

• Dig Security State of Cloud Data Security 2023 Report Finds Exposed Sensitive Data in More Than 30% of Cloud Assets

• Protecting Your Business from Email Compromise: Essential Security Measures

• The best travel VPNs of August 2023: Expert tested and reviewed

• Adopt embedded penetration testing to keep IoT devices secure

• How to use dynamic reverse engineering for embedded devices

• Continuous Security Testing Is The Key To Strengthening Your Cybersecurity

• FBI warns about scams that lure you in as a mobile beta-tester

• Study Finds 16 Percent Of All Crime Originated On Facebook-Owned Platforms Last Year

• Metrics to Enhance your Cybersecurity Skills Development Program

• “Auth” Demystified: Authentication vs Authorization

• Mirai Common Attack Methods Remain Consistent, Effective

• A massive phishing campaign using QR codes targets the energy sector

• Double Extortion Ransomware: The New Normal

• AI-Powered Fuzzing: Breaking the Bug Hunting Barrier

• Scammers Exploit Kids with Fake Fortnite and Roblox Offers

• Gartner: Generative AI Will Bring “Transformational Benefit” in the Next 2-5 Years

• Beware of New Hacking Attack Targeting LinkedIn Accounts Worldwide

• Securely Managing, Distributing, and Scaling Secrets Across Multiple Kubernetes Clusters

• New ‘ASTORS’ Bid 1Kosmos Now Available in NayaOne Marketplace

• Election Security: Lawmakers Will Introduce New Machines Against Defcon Hackers

• The Gulf’s Dizzying Tech Ambitions Present Risk & Opportunity

• Foxconn Begins iPhone 15 Production In India

• The best VPN services for iPhone and iPad in August 2023

• Clorox Operations Disrupted By Cyber-Attack

• Clorox Cleans Up IT Security Breach That Soaked Its Biz Ops

• Researchers Find Sensitive Personal Data In Over 30% Of Cloud Assets

• Ivanti Patches Critical Vuln In Avalanche Enterprise MDM Solution

• Bank Of Ireland ATM Glitch Hands Out Free Money

• Google Releases Security Key Implementation Resilient To Quantum Attacks

• Discord.io Acknowledges Data Breach: Hacker Exposes Information of 760K Users

• LinkedIn account hacks increased in the past couple of weeks

• Google Releases Security Key Implementation Resilient to Quantum Attacks

• Mass-Exploitation Campaign Targets Citrix NetScalers With Backdoors

• UK Launches £1 Billion FinTech Fund

• Blueprint for Seamless Software Deployment: Insights by a Tech Expert

• Scammers Exploit Hacked Websites For Phishing

• This $70 device can spoof an Apple device and trick you into sharing your password

• Beyond Identity unveils The Passkey Journey to aid enterprise passkey deployment decisions

• UK Watchdogs Target Cookie Pop-ups, Amid Website Design Clampdown

• How To Install Istio Using Helm Chart

• JWT Token Authentication Using the .NET Core 6 Web API

• Five Tips to Securing Your Organization Through Your People.

• From Samsung to the Pentagon – Recent Stories Remind Us About the Importance of Sensitive Data Guardrails

• From Passwords to Passkeys – A Passing of the Torch

• New Indian Data Protection Framework: Data Usage and Ground Rules

• IBM MOVEit Hack Exposes Data of 4 Million US Citizens

• Preserving Consumer Trust Through Data Privacy

• Monti Ransomware’s Linux Variant Attacks the Financial & Healthcare Industries

• Cost of a data breach 2023: Healthcare industry impacts

• Top 12 risk management skills and why you need them

• Zero Trust Edge — Forrester Names Palo Alto Networks a Leader

• LinkedIn users targeted in account hijacking campaign

• Stellar Cyber and OCI partner to offer expanded cybersecurity capabilities

• Cleaning Products Giant Clorox Takes Systems Offline Following Cyberattack

• Ivanti Patches Critical Vulnerability in Avalanche Enterprise MDM Solution

• Boards Don’t Want Security Promises — They Want Action

• Vietnam’s VinFast Car Maker Overtakes GM, Ford After IPO

• Iran and the Rise of Cyber-Enabled Influence Operations

• Applying Data Ontology Concepts to Protect Data

• Bitdefender enhances security for iOS devices with Scam Alert

• SentinelOne Singularity App for Netskope secures remote work from endpoint to cloud

• LinkedIn hack: You need to check your LinkedIn account

• Mandiant Releases Scanner to Identify Compromised NetScaler ADC, Gateway

• QR Code Phishing Campaign Targets Top US Energy Company

• English Police Forces Admit to Data Handling Blunder Affecting Over 1,000 People

• Elon Musk’s X (Twitter) Delays Content Links To Rivals, Critics

• Cyber Security Today, August 16, 2023 – Discord.io database of 760,000 up for sale, LinkedIn under attack and more MOVEit victims

• Chrome 116 Patches 26 Vulnerabilities

• GitHub Paid Out $1.5 Million in Bug Bounties in 2022

• Google Introduces First Quantum Resilient FIDO2 Security Key

• Guide: How Google Workspace-based Organizations can leverage Chrome to improve Security

• Experts Uncover Weaknesses in PowerShell Gallery Enabling Supply Chain Attacks

• What’s the State of Credential theft in 2023?

• (Re)check your patched NetScaler ADC and Gateway appliances for signs of compromise

• What’s New in Selenium 4.11.0?

• Getting Started with Cross-Browser Testing on Real Devices

• Research Insight: IT Professionals Reconsidering Career Trajectories Amid Increased Work Pressures

• New study by AMD finds nearly half of organisations are not ready for AI

• Critical Security Flaws Affect Ivanti Avalanche, Threatening 30,000 Organizations

• Cybersecurity Breach Hits Clorox, Several Systems Taken Offline

• Intel Purchase Of Tower Semiconductor Terminated, China Blamed

• A Third of UK University Students Targeted By Fraud

• Ivanti Avalanche vulnerable to attack by unauthenticated, remote attackers (CVE-2023-32560)

• Gigabud RAT Attacking Android Users to Steal Banking Credentials

• Data Classification Policy

• Get Norton 360 Standard on 2 Devices Plus Identity Theft Protection for $24.99

• A Third of UK Uni Students Targeted By Fraud

• Major LinkedIn Account Takeover Campaign Underway

• Q2 Privacy Update: AI Takes Center Stage, plus Six New US State Laws

• The CISO Report – The Culture Club

• Digital Safety Advice is Not Getting Through to Women

• Two unauthenticated stack buffer overflows found in Ivanti Avalanche EMM

• China accuses U.S. intelligence agencies as source behind Wuhan cybersecurity attack

• Why performing security testing on your products and systems is a good idea

• Approximately 2000 Citrix NetScaler servers were backdoored in a massive campaign

• How the Microsoft Incident Response team helps customers remediate threats

• How social media scams are draining bank accounts of victims

• Exploring the Essence of Confidential Computing

• How CISOs break down complex security challenges

• Why the “voluntary AI commitments” extracted by the White House are nowhere near enough

• Get the AT&T Cybersecurity Insights Report: Focus on US SLED

• Mac systems turned into proxy exit nodes by AdLoad

• Thales Luna HSMs Secure Digital Transactions of a Prominent Bangladeshi Bank

• Nearly 2,000 Citrix NetScaler Instances Hacked via Critical Vulnerability

• Cybertech Africa 2023 marks the first gathering for innovation and networking in the region

• Passwordless is more than a buzzword among cybersecurity pros

• SEC cybersecurity rules shape the future of incident management

• Hackers Rig Casino Card-Shuffling Machines for ‘Full Control’ Cheating

• Hackers could now steal passwords over Zoom by listening to keystrokes using AI

• DARPA Taps Hackers to Fortify Critical Software Against Cyber Threats

• 5 Strategies for Strengthening MQTT Infrastructure Security

• Ford says it’s safe to drive its cars with a WiFi vulnerability

• PCMag ranks Malwarebytes #1 cybersecurity vendor

• Credentials for cybercrime forums found on roughly 120K computers infected with info stealers

• Kaspersky Password Manager Adds 2FA One-Time Password Storage and New Browser Support

• 3 Major Email Security Standards Falling Down on the Job

• edX and Drake State Technical and Community College Launch Free Training Program

• Toward Quantum Resilient Security Keys

• Clorox cleans up IT security breach that soaked its biz ops

• LockBit Ransomware Gang in Decline, May Be Compromised, Report

• Patch Now: OpenNMS Bug Steals Data, Triggers Denial of Service

• OX Security Receives Strategic Investment From IBM Ventures

• IT Security News Daily Summary 2023-08-15

• What Is Edge Security? Overcoming Edge Computing Risks

• The Industry Discussion About Standards For Bluetooth-Enabled Physical Trackers is Finally Getting Started

• Top 4 information security strategy essentials CIOs need

• 4 Metrics to Enhance your Cybersecurity Skills Development Program

• Discord.io Temporarily Shuts Down Amid Breach Investigation

• A Short Guide to Essential Cybersecurity Learning Metrics

• AI Steals Passwords by Listening to Keystrokes With Scary Accuracy

• Cybercriminals Abusing Cloudflare R2 for Hosting Phishing Pages, Experts Warn

• Monti Ransomware gang launched a new Linux encryptor

• Microsoft Defender for Cloud Gets More Multicloud

• DEF CON Generative AI Hacking Challenge Explored Cutting Edge of Security Vulnerabilities

• Bolstering Africa’s Cybersecurity

• Multiple Flaws Found in ScrutisWeb Software Exposes ATMs to Remote Hacking

• The evolution of the workplace

• 2,000 Citrix NetScaler Instances Backdoored via Recent Vulnerability

• MongoDB Queryable Encryption enables organizations to meet data-privacy requirements

• Why is API security the next big thing in Cybersecurity?

• Mind the (Interpretation) gap: Another reason why threat modeling is important

• Authentication vs. Authorization: What’s the Difference?

• Discord.io Halts All Operations After Massive Data Breach

• Microsoft Cloud Security Woes Inspire DHS Security Review

• Scaling a Cybersecurity Team through Continuous Learning with OffSec

• YouTube To Remove False Cancer Treatment Claims

• ISO 31000 vs. COSO: Comparing risk management standards

• Global IoT Trust Survey Reveals Security Concerns

• Tesla internet connected cars to be banned in China for Data Security concerns

• New SectopRAT Steals Browser Passwords, 2FA Codes

• Web-based adware’s crafty games and how to sidestep them

• The best VPN trials: Try for free

• New QwixxRAT Trojan Spreads Through Messaging Apps

• QWIXXRAT: A Fresh Windows RAT Emerges in the Threat Landscape

• Avada Theme and Plugin Witnesses Critical Vulnerabilities

• How the fledgling INC ransomware gang struck one victim

• US lawmaker says FBI notified him of email breach linked to Microsoft cloud hack

• Empowering the Cybersecurity Workforce: OffSec and Climb Channel Solutions Join Forces

• Tech Giants Threaten UK Exit Over Privacy Bill Concerns

• New Cyber Threat: North Korean Hackers Exploit npm for Malicious Intent

• Five Reasons Why Network Security Is Paramount

• Tesla Launches Cheaper Model X, Model S EVs

• Monti Ransomware Returns with New Linux Variant and Enhanced Evasion Tactics

• An Apple Malware Flagging Tool Is Trivially Easy To Bypass

• DoubleDrive Attack Turns Microsoft OneDrive Into Ransomware

• Real Estate Markets Scramble Following Attack On MLS

• 1.5 Million Hit By Ransomware Attack At Canadian Dental Service

• More Hardcoded Credentials Than Ever, And Sloppy Coding Is To Blame

• DarkInvader Launches Channel Partner Recruitment Drive

• Carlsberg Group Selects Cato Networks for Massive Global SASE Deployment

• Phishing scams targeting small business on social media are a ‘gold mine’ for criminals

• Threat hunting 101: How to outthink attackers

• Verify You Are Human (So We Can Steal Your Credentials)

• How & Why Cybercriminals Fabricate Data Leaks

• Approximately 2000 Citrix NetScalers backdoored in mass-exploitation campaign

• New Gigabud Android RAT Bypasses 2FA, Targets Financial Orgs

• CISO Conversations: CISOs in Cloud-based Services Discuss the Process of Leadership

• New survey shows Gen Z and Millennials AI jobs fear – as 61% say it will take much of their role

• Norfolk, Suffolk Police Confirm Data Breach

• ATM Fleet Monitoring Software Flaws Let Attackers Hack ATMs Remotely

• RVAsec 2023: Improving Ourselves, Our Security, and Our Community

• Malware Unleashed: Public Sector Hit in Sudden Surge, Reveals New Report

• BT lands major network and cyber security deal with NATS

• Accelerating Start-Up Success: Unlocking the Potential of Minimum Viable Product Development Services

• Types Of Service Desks & Their Benefits

• Hackers Using Beta-Testing Apps to Target Victims: FBI Alert

• UK Police Data Breach Exposes Victim Information

• How to backup Microsoft 365 using third-party backup tools

• Ensure data security at the edge

• AI a Top Risk and the Preferred Solution to Financial Crime

• Foxconn Touts ‘Billions’ Of Dollars Investment In India

• You’re not seeing double – yet another UK copshop is confessing to a data leak

• Binance Seeks Protection From US Financial Regulator

• SecureWorks Laying Off 15% of Employees

• 1.5 Million Impacted by Ransomware Attack at Canadian Dental Service

• How X Is Suing Its Way Out of Accountability

• 2023 Business Email Compromise Statistics

• The Use of Natural Language Processing for Identifying and Mitigating Threats

• Gigabud RAT Android Banking Malware Targets Institutions Across Countries

• Tech CEO admits role in tricking Qualcomm into $150M takeover

• Silicon UK In Focus Podcast: AI and MedTech

• Amazon Hardware Boss To Step Down

• PSNI: Leaked Data Will be Used to Target Police Officers

• Over 100,000 Users of Hacking Forums Infected With Malware

• Over 120,000 Computers Compromised by Info Stealers Linked to Users of Cybercrime Forums

• FBI: Mobile Beta-Testing Apps Are Major Security Risk

• Hacking ATMs by exploiting flaws in ScrutisWeb ATM fleet software

• Discord.io data breach: 760K users affected

• Silicon UK In Focus Podcast: Securing the Virtual

• North Korean Hackers Suspected in New Wave of Malicious npm Packages

• Over 12,000 Computers Compromised by Info Stealers Linked to Users of Cybercrime Forums

• Catching the Catphish: Join the Expert Webinar on Combating Credential Phishing

• Manipulated Caiman – 39,901,389 breached accounts

• Need to improve the detection capabilities in your security products?

• QwixxRAT, a new Windows RAT appears in the threat landscape

• Florida Man, associates, indicted for conspiracy to steal data, software

• Maintaining the Optimal Blend for Digital Success

• Tesla reassures Chinese users on data security amid spying concerns

• Hackers Use Weaponized PDFs and Chat Apps for C2 to Evade Detection

• Balancing telecom security, law enforcement, and customer trust

• Ransomware: To pay or not to pay

• Ransomware spreading gangs start Customer Service

• What Is Global Privacy Control (GPC), and how can it help you protect your data?

• How threats to mid-sized businesses impact us all

• Jobzone – 29,708 breached accounts

• Photos: Cybertech Africa 2023

• 6 free artificial intelligence TED Talks you can watch right now

• Report: “Apple Watch X” will redesign the popular wearable for the first time

• An Apple malware-flagging tool is “trivially” easy to bypass

• Sam Bankman-Fried is going to jail

• Chinese spies who read State Dept. email also hacked GOP congressman

• Australian Signals Directorate caught up in KPMG consulting scandal

• How to Build a Simple Application Powered by ChatGPT

• Chinese media teases imminent exposé of seismic US spying scheme

• A week in security (August 7 – August 13)

• A new type of “freedom,” or, tracking children with AirTags, with Heather Kelly: Lock and Code S04E17

• “Grab hold and give it a wiggle” – ATM card skimming is still a thing

• Sextortion suspects on trial after teen victim dies from a self-inflicted gunshot wound

• Discord.io Admits Data Breach: Info of 760K Users Sold Online

• What Is a Service Mesh and Why Is It Needed for Kubernetes?

• At Black Hat, Splunk, AWS, IBM Security and Others Launch Open Source Cybersecurity Framework

• JWT Token Authentication Using the .Net Core 6 Web API

• Beware cool-looking beta crypto-apps. They may be money-stealing fakes

• Ford SYNC 3 infotainment vulnerable to drive-by Wi-Fi hijacking

• IT Security News Daily Summary 2023-08-14

• Phishing Operators Make Ready Use of Abandoned Websites for Bait

• Women in CyberSecurity (WiCyS) Hosting Fifth Annual Virtual Career Fair

• OffSec’s Capture the Flag Tournament (CTF)

• Ford SYNC 3 infotainment systems vulnerable to drive-by Wi-Fi hijacking

• 5 Tips for Securing Data When Using a Personal Mac for Work

• Colorado Health Agency Says 4 Million Impacted by MOVEit Hack

• 5 digital forensics tools experts use in 2023

• Diligere, Equity-Invest Are New Firms of U.K. Con Man

• Weekly Vulnerability Recap – August 14, 2023 – Old or New, Vulnerabilities Need Management

• Vulnerability Summary for the Week of August 7, 2023

• What’s New in the NIST Cybersecurity Framework 2.0

• How FraudGPT presages the future of weaponized AI

• Hacktivists attack Japanese government over Fukushima wastewater release

• Cumbrian Police accidentally publish all officers’ details online

• Fake Chrome Browser Update Installs NetSupport Manager RAT

• Russian-African Security Gathering Exposes Kremlin’s Reduced Influence

• Intel Patched Newly Reported Downfall Attack Affecting Its CPUs

• Multiple Codesys PLC Vulnerabilities Could Risk Numerous Power Plants

• New Statc Stealer Emerges As Potent Windows Malware

• The 6 Pillars of Effective Cloud Security

• How to send password-protected emails in Gmail

• Massive EvilProxy Phishing Attack Campaign Bypasses 2FA, Targets Top-Level Executives

• Ongoing Xurum attacks target Magento 2 e-stores

• Talking Heimdal XDR with Nabil Nistar, Head of Product Marketing

• macOS Ventura Background Task Flaws Can Be Exploited for Malware

• Check Point Wins Gold Stevie International Business Award

• SecureWorks layoffs affect 15% staff

• PayPal Names New CEO Amid Crypto Push

• Facebook Criticized For Misinformation Policy On Threads

• Health Data of 4M Stolen in Cl0p MOVEit Breach of Colorado Department

• Researcher says they were behind iPhone popups at Def Con

• Colorado HCPF Department notifies 4 million individuals after IBM MOVEit breach

• Jordan’s King Should Reject the Country’s Draft Cybercrime Law

• Building Cybersecurity into the supply chain is essential as threats mount

• How to Automatically Detect Multiple Cybersecurity Threats from an Input Text String in Java

• Interpol Shuts Down Phishing Service ’16shops’

• Following Pushback, Zoom Says It Won’t Use Customer Data to Train AI Models

• QwixxRAT: New Remote Access Trojan Emerges via Telegram and Discord

• Hacktivists Attack Japanese Government Over Fukushima Wastewater Release

• Federal Board Investigating Microsoft Email Hacks By Chinese Group

• Illinois Just Made It Possible To Sue People For Doxxing Attacks

• Iagona ScrutisWeb Vulnerabilities Could Expose ATMs To Remote Hacking

• Verimatrix Introduces New Website Security Integration

• Scotiatrust US customers sideswiped by MOVEit hack

• LastPass improves passwordless logins with FIDO2 authenticator support for desktops

• Apple Watch X To Track Blood Pressure – Report

• Defend Against Phishing with Multi-Factor Authentication

• Security Concerns Surrounding Microsoft OneDrive for Businesses

• MasterClass: Online Learning Platform Accused of Violating Customer Privacy by Sharing Info to Meta

• How to make sure the reputation of your products and company is good

• Amazon offers $20m to bolster cybersecurity of K-12 schools

• Investing in Ethereum Blockchain-based JasmyCoin: Guide

• How to find out if an AirTag is tracking you

• US Cyber Safety Board to Review Cloud Attacks

• Email – The System Running Since 71’

• Alberta Dental Services Security Breach Exposes 1.47M Records

• Here’s Why You Need to Read Privacy Policy Before Giving Consent

• Stellar Cyber and Oracle Cloud Partner for Enhanced Cybersecurity

• Crimeware server used by NetWalker ransomware seized and shut down

• Several Flaws Found in CyberPower and Dataprobe Products

• IDC launches Future of X Scorecards for optimizing tech’s impact on business

• Ensuring Trust in Military Network Automation: Addressing Layer 8 Issues for Improved Operations and Security

• Embedding Privacy-First Behaviors for Future Generations

• A Comprehensive Guide to Securing ESXi Hosts: Safeguarding Virtual Infrastructure

• How to prevent and prepare for a cyber catastrophe

• How to create a ransomware incident response plan

• Top 3 ransomware attack vectors and how to avoid them

• Security Researchers Publish Gigabud Banking Malware Analysis

• Millions of Americans’ health data stolen after MOVEit hackers targeted IBM

• How To Build A Company-Wide Data-Driven Culture

• FTX’s Sam Bankman-Fried Sent To Jail Over Witness Tampering

• 5 Ways CISA Can Help Cyber-Poor Small Businesses & Local Governments

• Action1 platform update bridges the gap between vulnerability discovery and remediation

• Almost all VPNs are vulnerable to traffic-leaking TunnelCrack attacks

• RSA Conference 2023: DevSecOps and the Future of Security

• US Shuts Down Bulletproof Hosting Service LolekHosted, Charges Its Polish Operator

• Power Management Product Flaws Can Expose Data Centers to Damaging Attacks, Spying

• A Huge Scam Targeting Kids With Roblox and Fortnite ‘Offers’ Has Been Hiding in Plain Sight

• Ongoing Xurum Attacks on E-commerce Sites Exploiting Critical Magento 2 Vulnerability

• Fake Tripadvisor Emails to Distribute Knight Ransomware

• Data center flaws spurred disruptions, espionage and malware attacks

• Amazon To Penalise Staff Excessively Working From Home

• Charming Kitten Targets Iranian Dissidents with Advanced Cyber Attacks

• Identity Threat Detection and Response: Rips in Your Identity Fabric

• Major vulnerabilities discovered in data center solutions

• Macs are getting compromised to act as proxy exit nodes

• Cumbrian cops accidentally publish all of its officers’ details online

• South African Power Supplier Hit by DroxiDat Malware

• Enterprise spending on cybersecurity has changed, and vendors must adapt

• Cyber Security Today, August 14, 2023 — A huge insurance company hack, presentations at the Black Hat conference, and more

• Ford Cars WiFi Vulnerability Let Attackers Execute Remote Code

• Iagona ScrutisWeb Vulnerabilities Could Expose ATMs to Remote Hacking

• Ford Says Wi-Fi Vulnerability Not a Safety Risk to Vehicles

• New Financial Malware ‘JanelaRAT’ Targets Latin American Users

• Zuckerberg Says Elon Musk ‘Not Serious’ About Cage Fight

• The Five Stages of Vulnerability Management

• Security Immutability: The Importance of Change

• Phishing with hacked sites

• Media Disposal Policy

• Microsoft: Critical CODESYS Flaws Could Shut Down Power Plants

• Experts found multiple flaws in AudioCodes desk phones and Zoom’s Zero Touch Provisioning (ZTP)

• Quest Software Update

• San Francisco Grants Self-Driving Taxi Permits For Waymo, Cruise

• Authorities Take Down Lolek Bulletproof Hosting Provider

• The Benefits of Digitalization in the Citizenship by Investment Industry

• Paying The Way: A Comprehensive Guide To Merchant Accounts And Payment Processing

• Monti Ransomware Unleashes a New Encryptor for Linux

• Xiaomi Mi Phones Flags Telegram as Malicious App

• What Is Privileged Access Management (PAM)?

• Software developers, how secure is your software?

• Nine flaws in CyberPower and Dataprobe solutions expose data centers to hacking

• 3 Mobile or Client-Side Security Myths Debunked

• How to Choose a Managed Detection and Response (MDR) Solution

• How to make your instant messages ‘unhackable’

• Beware of Fake Chrome Browser Updates that Install Malware

• Movies2Watch: Stream Safely and Legally – Explore the Best Alternatives

• Types of Cyber Attacks Every Online User Should Be Aware Of

• Hactivitsts attack Japanese government over Fukushima wastewater release

• India Passes New Digital Personal Data Protection Bill (DPDPB), Putting Users’ Privacy First

• How manufacturers can navigate cybersecurity regulations amid NIST 2.0

• Deception technology and breach anticipation strategies

• APTs use of lesser-known TTPs are no less of a headache

• Now electric charging stations are vulnerable to hackers after public USB charging points

• Navigating generative AI risks and regulatory challenges

• Product showcase: Free email security test by ImmuniWeb Community Edition

• Building a secure future without traditional passwords

• US government to investigate China’s Microsoft email breach

• Don’t Expect Quick Fixes in ‘Red-Teaming’ of AI Models. Security Was an Afterthought

• Bugs in transportation app Moovit gave hackers free rides

• Integrating Yara with RegRipper

• IT Security News Weekly Summary – Week 32

• IT Security News Daily Summary 2023-08-13

• Multiple flaws in CODESYS V3 SDK could lead to RCE or DoS

• How businesses and governments can work together to stop cyberattacks before they start

• Edge computing’s role in healthcare

• EvilProxy Phishing Campaign Targets Microsoft 365 Executives Worldwide

• Operation Jackal: INTERPOL Shuts Down African Cybercrime Gang

• Here’s How You Can Remove Private Info From Google Search Results

• Innovative ‘Brain-Like’ Chip Could Transform AI Landscape with Eco-Friendly Promise

• Security Affairs newsletter Round 432 by Pierluigi Paganini – International edition

• Week in review: 8 free cybersecurity docus, vulnerable Intel Core processors, Black Hat USA 2023

• Cyber Security Management System (CSMS) for the Automotive Industry

• The DHS’s CSRB to review cloud security practices following the hack of Microsoft Exchange govt email accounts

• Code Mirage: How cyber criminals harness AI-hallucinated code for malicious machinations

Generated on 2023-08-20 23:58:47.503378