IT Security News Weekly Summary – Week 36

• IT Security News Daily Summary 2023-09-10

• Powerful Ethnic Militia in Myanmar Repatriates 1,200 Chinese Suspected of Involvement in Cybercrime

• Microsoft and Google’s Approach to Replace Obsolete TLS Protocols

• Rhysida Ransomware gang claims to have hacked three more US hospitals

• New York’s Geofencing Ban: A Game Changer for Advertisers

• Mirai Botnet Variant ‘Pandora’ Hijacks Android TVs

• Johnson & Johnson Reveals: IBM Data Breach Compromised Customer Data

• Elon Musk Claims he Withheld Starlink to Deny Attack on Russian Navy Fleet

• From Vulnerabilities to Vigilance: Addressing Software Supply Chain Attacks

• Akamai prevented the largest DDoS attack on a US financial company

• LastPass Security Breach Linked to Series of Crypto Heists, Say Experts

• The Cybersecurity Crisis: Dating App “Coffee Meets Bagel (CMB)” Hacked, Over 620 Million Accounts Compromised

• Boost Your Business Security: How Cyber Insurance Shields You from Cyber Threats

• Data Privacy Concerns Surround Period Tracking Apps

• Security Affairs newsletter Round 436 by Pierluigi Paganini – International edition

• Week in review: 6 free resources for getting started in cybersecurity, Patch Tuesday forecast

• Cyber Security Management System (CSMS) for the Automotive Industry

• Researchers Uncover Phishing Empire Attacking 56,000+ Microsoft 365 Accounts

• Generative AI: A pragmatic blueprint for data security

• Has MFA Had Its Day?

• IT Security News Daily Summary 2023-09-09

• North Korean Threat Actors Stole $41 Million in Online Casino Heist

• US CISA added critical Apache RocketMQ flaw to its Known Exploited Vulnerabilities catalog

• The complete guide to ransomware

• Mac Users Under Attack: Malvertising Campaign Distributing Atomic Stealer Malware

• Protect Your Keys: Lessons from the Azure Key Breach

• W3LL Store: Unmasking a Covert Phishing Operation Targeting 8,000+ Microsoft 365 Accounts

• Check Point to Acquire Cyber Startup Atmosec to Boost Its SaaS Security Offering

• Ragnar Locker gang leaks data stolen from the Israel’s Mayanei Hayeshua hospital

• North Korean Hackers Steal Crypto to Fund ‘Nuclear Weapon Program’

• The Rise of AI-Powered Narcissism: Exploring the Impact of Digital Clones on Our Psychology

• Privacy Class Action Targets OpenAI and Microsoft

• Mozilla: Your New Car Is a Data Privacy Nightmare

• North Korean Hackers Use 0-Day Exploits to Attack Security Researchers

• Millions Infected by Spyware Hidden in Fake Telegram Apps on Google Play

• Will you give X your biometric data? – Week in security with Tony Anscombe

• Build or Buy your own antivirus product

• Cybercriminals Weaponizing Legitimate Advanced Installer Tool in Crypto-Mining Attacks

• U.K. and U.S. Sanction 11 Russia-based TrickBot Cybercrime Gang Members

• Notepad++ 8.5.7 fixes 4 security issues

• The UK Government Knows How Extreme The Online Safety Bill Is

• Microsoft, Apple versus China, spyware actors

• EFF Urges Appeals Court to Re-hear Case over Trump’s X Account

• Hidden Biases in Cybersecurity Reviews – And How to Use Them

• 3 Ways to Expand the Cyber Talent Pool From Splash Pad to Watering Hole

• TrickBot & Conti Sanctions: Implications for CISOs & Boardrooms

• IT Security News Daily Summary 2023-09-08

• JWT Token Revocation: Centralized Control vs. Distributed Kafka Handling

• Microsoft reveals how hackers stole its email signing key… kind of

• Cyber Security Today, Week in Review for Friday, September 8, 2023

• Dell and CTO Roese dive into AI, edge, security at MTCC event

• North Korea-linked threat actors target cybersecurity experts with a zero-day

• Identity and Access Management Best Practices

• What Is API Security? Definition, Fundamentals, & Tips

• California’s Middle Mile Network Must Bridge the Digital Divide, Not Reinforce It

• Australian Data Breach Costs are Rising — What Can IT Leaders Do?

• 16 top ERM software vendors to consider in 2023

• Risk prediction models: How they work and their benefits

• Critical Security Bug Opens Cisco BroadWorks to Complete Takeover

• New Flaw In Apple Devices Led To Spyware Infection, Researchers Say

• Cisco: Booming identity market driven by leadership awareness

• ‘Evil Telegram’ Spyware Campaign Infects 60K+ Mobile Users

• Zero-day in Cisco ASA and FTD is actively exploited in ransomware attacks

• Axon’s Ethics Board Resigned Over Taser-Armed Drones. Then the Company Bought a Military Drone Maker

• Top US Spies Meet With Privacy Experts Over Surveillance ‘Crown Jewel’

• Apple Patch Zero-Day Flaws Exploited for Pegasus Spyware on iPhones

• U.K. and U.S. Sanction 11 Russia-based Trickbot Cybercrime Gang Members

• China Unleashes AI-Powered Image Generation For Influence Operations

• Polish Senate says use of government spyware is illegal in the country

• 6 stages of the ransomware lifecycle

• Trickbot, Conti Sanctions Affect Top Cybercrime Brass

• Kenya Initiates Public Sector Digital Skills Training, No Mention of Cybersecurity

• Biometrics in law enforcement

• The SEC demands more transparency about Cybersecurity incidents in public companies

• Cyber-criminals Exploit GPUs in Graphic Design Software

• UK Military Data Breach via Outdated Windows 7 System

• Dallas Ransomware Attack: Hackers Steal 800K City Files

• Tesla data breach lawsuit and Johnson and Johnson data breach details

• Google TAG Exposes North Korean Campaign Targeting Researchers

• How to Protect Your Personal Financial Information from Data Brokers

• UK’s Nuclear Submarine Base Faces Unprecedented Threats: Russia Implicated in Shocking Incidents

• Apple And ARM Sign Long-Term Chip Deal

• Cisco BroadWorks Is Affected by a Critical-Severity Vulnerability

• In Other News: LastPass Vault Hacking, Russia Targets Ukraine Energy Facility, NXP Breach

• New Phishing Campaign Launched via Google Looker Studio

• Cisco ASA Zero-Day Exploited in Akira Ransomware Attacks

• Emerging threats: Adapting cyber defense to the changing landscape

• PallyCon DRM License Cipher protects users against software-level DRM vulnerabilities

• Warning: RocketMQ Vulnerability Actively Exploited by Threat Actors

• Automakers can Exploit Your Private Data However They Want

• Russian Man Handed Nine-Year Sentence for Hacking Scheme

• 3 Strategies to Defend Against Resurging Infostealers

• Polish senate says use of government spyware is illegal in the country

• Outsourcing Translation Services in the Digital Age: Leveraging Technology

• Safe delivery

• Cybersecurity Mergers Flatline – Here’s Why That Won’t Last

• Getting to Know: Grant Asplund

• From AI-driven Defense to Dark Web Threat Intelligence

• Nation-state actors exploit Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus, CISA warns

• Cyber Security Today, Friday Sept. 8, 2023 – Are boards and CISOs communicating, the latest ransomware data and more

• Emsisoft Tells Users to Update Products, Reboot Systems Due to Certificate Mishap

• Mastering Anything Through Technology: The Role of Videos & Blogs in Skill Acquisition

• Tech-Driven Fitness: How Modern Technology is Revolutionizing Workouts

• Tech Unveiled: Surprising Innovations You Probably Didn’t Know About (2023)

• Apple races to patch the latest zero-day iPhone exploit

• Citizen Lab Identifies NSO Spyware On Apple Devices

• LLMs and Tool Use

• Keeper Introduces Major Password Manager Update for iOS

• Unpatched Cisco ASA flaw exploited by attackers (CVE-2023-20269)

• Tech Talk: How Digital Tools Enhance Word Exploration and Comprehension

• Surfing the Blogosphere: Unleash the Power of the Internet for Fresh Insights

• Bridewell announces CHECK penetration testing accreditation from NCSC

• Strider Technologies Names Royal Navy and UK Ministry of Defence Veteran, Admiral Sir Tim Fraser, as an Advisor

• Alphabet Tentatively Settles US Google Play Store Antitrust Probe – Report

• Hackers Steal NTLMv2 Hashes using Custom Powershell Scripts

• North Korean Hackers Actively Attacking Security Researchers

• Tripwire Patch Priority Index for August 2023

• US Aeronautical Organization Hacked via Zoho, Fortinet Vulnerabilities

• US, UK Sanction More Members of Trickbot Russian Cybercrime Group

• Grow Revenue, Cross Sell, and Reduce Churn with Sentinel Pulse

• Evil Telegram doppelganger attacks Chinese users

• Tech-Enhanced Exploration: Navigating the Netherlands with Apps and More

• CISA Adds Critical RocketMQ Bug to Must-Patch List

• Regulator to Investigate Fertility App Security Concerns

• North Korean Hackers Exploit Zero-Day Bug to Target Cybersecurity Researchers

• Apple patches two zero-days under attack (CVE-2023-41064, CVE-2023-41061)

• North Korean hackers target security researchers with zero-day exploit

• Dymocks – 836,120 breached accounts

• CISA Adds Critical RocketMQ Bug to Must-Patch List

• Dymocks – 836,120 breached accounts

• Apple Patches Two Zero-Days Exploited in Pegasus Attacks

• Apple Discloses 2 Zero-Day Flaws Exploited to Hack iPhones & Mac

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Silicon UK Pulse: Your Tech News Update: Episode 17

• SSO Implementation Flaw In Cisco Broadworks Let Attackers Forge Credentials

• Zero-days fixed by Apple were used to deliver NSO Group’s Pegasus spyware

• Concerns Over Cyber Attacks Growing Among UK Schools

• How to Achieve Maximum Security in Virtualized Data Centers

• Global Ticketing Giant Hacked: Attackers Accessed Customers’ Payment Data

• Multiple ArubaOS vulnerabilities Let Attackers Execute Arbitrary Code

• Microsoft, recently busted by Beijing, thinks it’s across China’s ever-changing cyber-offensive

• CISA Warning: Nation-State Hackers Exploit Fortinet and Zoho Vulnerabilities

• Internal discussions of a large ransomware-as-a-service Group Exposed

• New infosec products of the week: September 8, 2023

• September 2023 Patch Tuesday forecast: Important Federal government news

• Introduction To Cybersecurity

• Okta: Cyber Attackers Target IT Help Desks to Compromise Super Admin and Disable MFA

• New quantum random number generator could revolutionize encryption

• Unimplemented controls could derail your ESG compliance efforts

• 75% of education sector attacks linked to compromised accounts

• Best practices for implementing a proper backup strategy

• Navigating economic uncertainty with managed security services

• Apple Rushes to Patch Zero-Day Flaws Exploited for Pegasus Spyware on iPhones

• Software Supply Chain Strategies to Parry Dependency Confusion Attacks

• Temu is collecting user data including text messages and bank info, claims Grizzly Research

• Russian infosec boss gets nine years for $100M insider-trading caper using stolen data

• Temu is collecting user data including text messages and bank info, claims Grizzly Research

• A history of ransomware: How did it get this far?

• FreeWorld ransomware attacks MSSQL—get your databases off the internet

• How Microsoft’s highly secure environment was breached

• Cybersecurity Mergers Flatline. Here’s Why That Won’t Last.

• Musk stiffed Twitter vendors and dared them to sue—dozens did just that

• North Korea-backed hackers target security researchers with 0-day

• The Double-Edged Sword of AI – How Artificial Intelligence is Shaping the Future of Privacy and Personal Identity

• US, UK sanction more Russians linked to Trickbot

• Microsoft ID Security Gaps That Let Threat Actor Steal Signing Key

• EFF Award Winner: Alexandra Asanova Elbakyan

• Weekly Vulnerability Recap – September 4, 2023 – Attackers Hit Network Devices and More

• Apple Hit By 2 No-Click Zero-Days in Blastpass Exploit Chain

• North Korean Hackers Target Security Researchers — Again

• Cloud storage security: What’s new in the threat matrix

• IT Security News Daily Summary 2023-09-07

• Rwanda Launches Smart-City Investment Program

• Apple discloses 2 new actively exploited zero-day flaws in iPhones, Macs

• Investing in Cybersecurity’s Future: A Conversation with Richard Seewald of Evolution Equity Partners

• Update NOW! Pegasus Spyware Exploit Found in iPhones Running Latest iOS

• Apple fixes zero-day bugs used to plant Pegasus spyware

• Best Practices To Secure Data Transmission

• Rigged Software and Zero-Days: North Korean APT Caught Hacking Security Researchers

• Apple Patches Actively Exploited iOS, macOS Zero-Days

• Rwanda Launches Smart City Investment Program

• Visa’s report makes a case for outsmarting payment fraud with AI now

• Patch ‘Em or Weep: Study Reveals Most Vulnerable IoT, Connected Assets

• NFL Security Chief: Generative AI Threats a Concern as New Season Kicks Off

• US and UK Mount Aggressive Crackdown on Trickbot and Conti Ransomware Gangs

• Weaponized Windows Installers Target Graphic Designers in Crypto Heist

• FBI Duck Hunt Operation Against Qakbot Resurgence

• Microsoft: How Chinese Hackers Stole Signing Key to Breach Outlook Accounts

• Implementing Zero-Trust in Enterprise Environments

• Wealthy Russian With Kremlin Ties Gets 9 Years in Prison for Hacking and Insider Trading Scheme

• A malvertising campaign is delivering a new version of the macOS Atomic Stealer

• Mozilla Names And Shames Privacy Compromising Cars

• How New SEC Rules Can Benefit Cybersecurity Teams

• The perils of the platforms of paranoia

• Perception Point combats QR code phishing threats using image recognition

• OPSWAT and BlackBerry join forces to strengthen cybersecurity for organizations

• Cloudflare One Data Protection Suite secures developer and AI environments

• Threat Actors Exploits SQL Servers to Deploy FreeWorld Ransomware

• Lawsuit claims Tesla corp data security is far less advanced than its cars

• API Vulnerabilities: 74% of Organizations Report Multiple Breaches

• The International Criminal Court Will Now Prosecute Cyberwar Crimes

• Mac Users Beware: Malvertising Campaign Spreads Atomic Stealer macOS Malware

• Publisher’s Spotlight: Fortra: Best-in-Class Cybersecurity Portfolio

• The cat and mouse game: Staying ahead of evolving cybersecurity threats

• Is Cybersecurity as a Service (CSaaS) the answer: Move faster | Do more

• Mobile threat defense or bust

• US Government To Investigate Hauwei Breakthrough Phone

• Thousands of dollars stolen from Texas ATMs using Raspberry Pi

• The Team8 Foundry Method for Selecting Investable Startups

• How Storm-0558 hackers stole an MSA key from Microsoft

• DGA Behavior Shifts Raise Cybersecurity Concerns

• Traderie, a marketplace for in-game items, alerts users to data breach

• Golfing Community Shaken as Calloway Data Breach Hits One Million Fans

• Hackers gain access to Microsoft Cryptographic Key to spy on US Govt Departments

• Zero-Day Flaw Exposes Atlas VPN User IPs

• Building a Cyber Resilient Business: The Protection Layer

• KnowBe4 Opens New Office to Bolster UK’s Northern Powerhouse

• Druva unveils new security and cyber resilience capabilities for MSPs

• Sprinklr integrates with Google Cloud for unified customer experience management

• The Future of Health and Medicine: The Impact of Generative AI

• Google Faces UK Lawsuit Claim It Contributes To Cost Of Living Crisis

• How Easy is Email Encryption? You’d Be Surprised.

• Webinar Today: Scaling Software Supply Chain Security

• ‘Atomic macOS Stealer’ Malware Delivered via Malvertising Campaign

• CISA Releases Guidance on Adopting DDoS Mitigations

• See Tickets Alerts 300,000 Customers After Another Web Skimmer Attack

• UK and US Sanction 11 Russians Tied to Conti/TrickBot Ransomware

• Peril vs. Promise: Companies, Developers Worry Over Generative AI Risk

• Chinese social media campaigns are successfully impersonating U.S. voters, Microsoft warns

• United Airlines Claims to Have Patched the Technical Glitch That Briefly Held Up Its Flights

• distributed ledger technology (DLT)

• US, UK authorities sanction more alleged Trickbot gang members

• Two flaws in Apache SuperSet allow to remotely hack servers

• Atlas VPN Zero-Day Vulnerability Exposes Linux Users’ IP Addresses

• Electoral Commission’s Cybersecurity Lapses Exposed Amidst Major Hack

• Cyber: Dealing with a Data Breach

• Does Generative AI Comply With Asimov’s 3 Laws of Robotics?

• China Bans iPhones From More Government Offices

• How China Gets Free Intel On Tech Companies’ Vulnerabilities

• Crash Dump Error: How A Chinese Espionage Group Exploited Microsoft’s Mistakes

• Cisco Patches Critical Vulnerability In BroadWorks Platform

• AI Abuse Grows Beyond Phishing To Multistage Cyberattacks

• AUCloud selects SentinelOne for government and business security

• Accenture and Workday help companies reinvent their finance functions

• How Chinese hackers got their hands on Microsoft’s token signing key

• Microsoft offers an explanation for the hack of its cloud

• IBM Notifies Janssen CarePath Customers of Data Breach

• Why consumer drones represent a special cybersecurity risk

• Phishing via Google Looker Studio

• Cisco Patches Critical Vulnerability in BroadWorks Platform

• ActiveFence snaps up Spectrum Labs, last valued at $137M, to help fight the harmful content creep

• Tenable to Acquire Cloud Security Firm Ermetic for $240 Million

• IBM Reports Patient Data Breach at Johnson & Johnson Subsidiary

• More than half of UK organisations know they aren’t well protected against cyber threats

• Payment diversion fraud poses significant threat to businesses

• Pynt introduces API security platform and raises $6 million

• MacOS malware has a new trick up its sleeve

• Tenable to acquire Ermetic for $240 million in cash and $25 million in restricted stock and RSUs

• Minneapolis School District Reveals Full Extent of Data Breach

• AI In Cybersecurity – Risks and Rewards

• Electoral Commission Fails Cyber-Security Test Amidst Major Data Breach

• ProtonMail Code Vulnerabilities Leaked Emails

• Facebook Trains Its AI on Your Data. Opting Out May Be Futile

• The State of the Virtual CISO Report: MSP/MSSP Security Strategies for 2024

• If you like to play along with the illusion of privacy, smart devices are a dumb idea

• BT Halts Sale Of New Copper Lines On Openreach Network

• Chinese Hacker Steals Microsoft Signing Key, Spies on US Government

• IBM Discloses Data Breach Impacting Janssen Healthcare Platform

• Cisco Finds 8 Vulnerabilities in OAS Industrial IoT Data Platform

• Alert: Apache SuperSet Vulnerabilities Expose Servers to Remote Code Execution Attacks

• The Hacker Tool to Get Personal Data from Credit Bureaus

• GAM3S.GG Raises $2M to Grow Web3 Gaming Superapp

• Chinese Hack of Microsoft Consumer Key Stemmed From its Engineer’s Corporate Account

• SafeBase acquires Stacksi to automate responses to security questionnaires

• Microsoft Account Compromise Led To Chinese Hack Of US Officials

• Mirai Botnet Variant ‘Pandora’ Hijacks Android TVs for Cyberattacks

• July 2023 Cyber Attacks Statistics

• UK drops ‘spy clause’ for scanning encrypted messages, admits it’s not ‘feasible’

• Think Tank Urges Labour to Promote “Securonomics” Agenda

• Hackers Use Weaponized LNK Files to Deploy RedEyes Malware

• Vendor Comparison: DIY Home Security Systems

• Vulnerabilities Uncovered: Critical Remote Code Execution Risks in ASUS Routers

• How to Get a Personal Loan as a Server or Waitress

• Hundreds of Scam Pages Uncovered in Major Investment Fraud Campaign

• AI triggers tech anxiety for senior leaders, reveals new research

• Government Abandons Plan To Scan Encrypted Messages

• UK Government Backs Down on Anti-Encryption Stance

• PHPFusion Flaw Allows Attackers to Read Critical System Data

• Do you know what your supply chain is and if it is secure?

• Outlook Breach: Microsoft Reveals How a Crash Dump Led to a Major Security Breach

• 3 Key Takeaways from the recently announced NIST Post-Quantum Cryptography Standards

• PHPFusion Critical Flaw Allows Attackers to Read Critical System Data

• Chinese cyberspies obtained Microsoft signing key from Windows crash dump due to a mistake

• How to use Tor browser (and why you should)

• 3 ways to strike the right balance with generative AI

• LibreOffice: Stability, security, and continued development

• Ransomware spreading gang reveals visa details of working employees in America

• China reportedly bans iPhones from more government offices

• UK Government withdraws proposal for controversial spy clause in its Online Safety Bill

• Shifting left and right, innovating product security

• How cybercriminals use look-alike domains to impersonate brands

• Battling malware in the industrial supply chain

• Leveraging AT&T Cybersecurity Consulting for a robust Zero Trust Center of Excellence

• Baseline standards for BYOD access requirements

• Cybersecurity pros battle discontent amid skills shortage

• How Zero Trust and XDR Work Together

• CybeReady Provides Cybersecurity Awareness Month Kits As CISOs Defend Against AI Driven Attacks

• FreeWorld ransomware attacks MSSQL—get your databases off the Internet

• Smart chastity device exposes sensitive user data

• X wants your biometric data

• Mac users targeted in new malvertising campaign delivering Atomic Stealer

• Coding Tips to Sidestep JavaScript Vulnerabilities

• The Comedy of Errors That Let China-Backed Hackers Steal Microsoft’s Signing Key

• CrowdStrike CEO talks generative AI, cybersecurity and new ‘virtual security analyst’

• Cybersecurity Builds Trust in Critical Infrastructure

• Microsoft: China stole secret key that unlocked US govt email from crash debug dump

• IBM Expands Cloud Security and Compliance Center

• IBM Addresses Data Incident for Janssen CarePath Database

• W3LL Gang Compromises Thousands of Microsoft 365 Accounts

• Zscaler CEO Jay Chaudhry talks 2024 outlook after quarterly earnings beat

• IT Security News Daily Summary 2023-09-06

• Crash Dump Error: How a Chinese Espionage Group Exploited Microsoft’s Mistakes

• How to prevent ransomware in 6 steps

• Facebook Oversight Board Says Posts About Abortion Are Not Death Threats

• Guy who ran Bitcoins4Less tells Feds he had less than zero laundering protections

• Cash-Strapped IronNet Faces Bankruptcy Options

• Understanding Google Analytics 4, Server-Side Tracking, and GDPR Compliance

• Okta: 4 customers compromised in social engineering attacks

• AtlasVPN Linux Zero-Day Disconnects Users, Reveals IP Addresses

• China Bans Government Officials From Using Apple iPhones – Report

• Vulnerability Summary for the Week of August 28, 2023

• MinIO Attack Showcases Fresh Corporate Cloud Attack Vector

• Google addressed an actively exploited zero-day in Android

• Intro To Honeypots

• Russian Cyber-Attacks and the Looming Threat of WW3

• Newport Wafer Fab To Cut Jobs, Blames Government Restrictions

• Unveiling Vulnerabilities via Generative AI

• How to stop Google from selling your browser history for ad targeting

• Best VPN for streaming in 2023: Unblock your favorite streaming services now

• The best travel VPNs of 2023: Expert tested and reviewed

• Russia’s ‘Fancy Bear’ APT Targets Ukrainian Energy Facility

• Ransomware gang claims credit for Sabre data breach

• Results of Major Technical Investigations for Storm-0558 Key Acquisition

• Cut through cybersecurity vendor hype with these 6 tips

• A zero-day in Atlas VPN Linux Client leaks users’ IP address

• EC Names Alphabet, Apple, Meta, Microsoft Among DMA Gatekeepers

• The best VPN deals for September 2023

• Webinar Tomorrow: Unpacking the Secure Supply Chain Consumption Framework (S2C2F)

• Investors Betting Big on Upwind for CNAPP Tech

• Google’s Souped-up Chrome Store Review Process Foiled by Data-Stealer

• Insight Managed Cloud Services streamline cloud management

• Staying ahead of threats: 5 cybercrime trends to watch

• Government Denies U-Turn On Encrypted Messaging Row

• What Businesses Need To Know To Comply With SEC’s New Cyber Disclosure Rules

• Android Zero Day Patched With September 2023 Security Updates

• SaphhireStealer: New Malware in Town, Possess More Capabilities

• Revolutionizing the Future: How AI is Transforming Healthcare, Cybersecurity, and Communications

• Keeping cybersecurity regulations top of mind for generative AI use

• Biden’s IoT Cybersecurity initiative

• New Agent Tesla Variant Uses Excel Exploit to Infect Windows PCs

• Russian APT28 Hacking Group Attacking Critical Power Infrastructure

• One-Click Deploying EMQX MQTT Broker on AWS Using Terraform

• Coffee Meets Bagel outage caused by cybercriminals deleting data and files

• Jim Cramer calls Palo Alto Networks’ CEO the Tom Brady of executives

• Considerations to be made when dealing with Ransomware Payments

• Password-Stealing Chrome Extension Demonstrates New Vulnerabilities

• Dozens of Unpatched Flaws Expose Security Cameras Made by Defunct Company Zavio

• Thousands of Popular Websites Leaking Secrets

• Old vulnerabilities are still a big problem

• Netskope acquires Kadiska for enhanced network and app performance monitoring

• D2iQ DKP 2.6 improves Kubernetes management capabilities

• CyberSaint launches Remediation Suite to optimize resource allocation and decision-making

• Taming Your Android: A Step-Step Guide to Restricting Background App Data

• Publisher’s Spotlight: IANS: Providing Expert Guidance to CISOs and their Teams

• TikTok Opens First European Data Centre Amid China Fears

• Hackers Steal Over $5,700 from ATMs Using Raspberry Pi

• Hackers Use Flipper Zero Device to Attack Nearby iPhones with Notification Pop-ups

• Why companies must use AI to think differently, and not simply to cut costs

• MITRE and CISA Release OT Attack Emulation Tool

• Machine learning operations can revolutionize cybersecurity

• Obsessed with privacy? Keep Tails on a USB drive and secure most any computer

• Alert: Phishing Campaigns Deliver New SideTwist Backdoor and Agent Tesla Variant

• Zero-Day Alert: Latest Android Patch Update Includes Fix for Newly Actively Exploited Flaw

• Simple Guide: Enabling Virtualization on Windows 11

• Six ways to safeguard important digital assets

• China’s Temu App Pose a Security Threat to Online Shoppers

• Securing Your Legacy: Identities, Data, and Processes

• The most surveilled football stadiums around the world

• Cybercriminals target MS SQL servers to deliver ransomware

• TXOne Networks Edge V2 isolates security breaches

• The Best of Both Worlds Made Possible with A Hybrid SOC

• UK Ministry Of Defence Documents Leaked After Supplier Hack

• 25 Major Car Brands Get Failing Marks From Mozilla for Security and Privacy

• How China Demands Tech Firms Reveal Hackable Flaws in Their Products

• REVEALED: Lineup of IT pioneers and practitioners navigating the next realm of digital and AI

• Testing Microservices: Performance Testing Challenges and Strategies

• Cybersecurity in Spain – Challenges and Solutions

• Meatbag mishaps more menacing than malware? CISOs think so

• Freecycle Data Breach: Urgent Password Update Required

• The Role of AI in Cybersecurity

• Addressing the Rising Threat of Web DDoS Tsunami Attacks in 2023

• Overcoming Open Source Vulnerabilities in the Software Supply Chain

• See Tickets says hackers accessed customers’ payment data — again

• Meet the AI, fintech, SaaS and security industry chairs at TC Disrupt 2023

• API security startup Pynt raises $6M

• Android Zero-Day Patched With September 2023 Security Updates

• Russia-Backed APT28 Tried to Attack a Ukrainian Critical Power Facility

• BugProve Discovers Critical Security Vulnerabilities in Zavio IP Cameras

• Fasoo collaborates with Egnyte to simplify data governance

• NTT launches Samurai XDR SaaS to strengthen detection and response capabilities across the network

• Heimdal®’s Semiannual Rundown of the Most Exploited Vulnerabilities of 2023

• Three CISOs Share How to Run an Effective SOC

• Cyber Security Today, Sept. 6, 2023 – Advice on cyber insurance

• AtlasVPN to Patch IP Leak Vulnerability After Public Disclosure

• Chrome 116 Update Patches High-Severity Vulnerabilities

• Hacker Conversations: Alex Ionescu

• High-Severity Vulnerability Discovered in Popular CMS

• Russia-Backed APT28 Tried to Attack Ukrainian Critical Power Facility

• Generative AI’s Biggest Security Flaw Is Not Easy to Fix

• Cryptocurrency Startup Loses Encryption Key for Electronic Wallet

• accessiBe: Transforming the Web With An Ecosystem of Accessibility Solutions

• MITRE and CISA release Caldera for OT attack emulation

• University of Sydney Reports Data Breach

• Okta warns against attacks targeting IT service desk agents

• Elon Musk Blames ADL For Ad Revenue Slump, Threatens Lawsuit

• Caldera: A New Security Tool to Emulate Attacks in Critical Infrastructure

• 9 Alarming Vulnerabilities Uncovered in SEL’s Power Management Products

• Blame Culture: An Organisation’s Ticking Time Bomb

• Cloudera partners with AWS to help organizations accelerate their modernization to the cloud

• W3LL Store: How a Secret Phishing Syndicate Targets 8,000+ Microsoft 365 Accounts

• School’s Back, Cyberattack: Navigating Cyberattacks in the Education Sector

• 5 Common Business Mistakes in Ransomware Prevention Planning

• What is ISO 27002:2022 Control 8.9? A Quick Look at the Essentials

• UK Boards Are Growing Less Concerned About Cyber-Risk

• Experts Uncover Underground Phishing “Empire” W3LL

• Fortifying Cybersecurity for Schools as New Academic Year Begins

• Hackers Using BlueShell Malware to Attack Windows, Linux, and Mac Systems

• Crypto Casino Stake.com Back Online After $40m Heist

• Ukraine’s CERT Thwarts APT28’s Cyberattack on Critical Energy Infrastructure

• ASUS routers are affected by three critical remote code execution flaws

• MITRE Caldera for OT now available as extension to open-source platform

• Why performing security testing on your products and systems is a good idea

• Cyber Threats Emerging from Text Message Spam and Smishing

• Top 5 Cybersecurity Concerns with 5G

• Are kids using ChatGPT for school projects?

• Critical security vulnerabilities in ASUS routers — update immediately

• Compliance budgets under strain as inflation and workload grow

• Cyber talent gap solutions you need to know

• Emerging threat: AI-powered social engineering

• Securing the smart cities of tomorrow: Cybersecurity challenges and solutions

• United Airlines Says the Outage That Held Up Departing Flights Was Not a Cybersecurity Issue

• Nascent Malware Attacking npm, PyPI, and RubyGems Developers

• CIS Benchmarks Communities: Where configurations meet consensus

• From unsuspecting click to data compromise

• Avoidable digital certificate issues fuel data breaches

• Diving Deeper Into Windows Event logs for Security Operation Center (SOC) – Guide

• North Korean hackers have allegedly stolen hundreds of millions in crypto to fund nuclear programs

• Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

• Malicious attackers can flood iPhone users with endless popups using a $170 tool

• Password-stealing Chrome extension smuggled on to Web Store

• Reddit faces content quality concerns after its Great Mod Purge

• 4 Okta customers hit by campaign that gave attackers super admin control

• What OpenAI Really Wants

• TikTok hires Britain’s NCC for auditing data security

• United Airlines says outage that held up departing flights was not a cybersecurity issue

• GraphQL Vulnerabilities and Common Attacks: What You Need to Know

• How Effective Data Governance Impacts The Success Of Digital Transformation

• New Chae$4 Malware Steals Login, Financial Data from Businesses

• Freecycle Confirms Data Breach Affecting Over 7 Million Users

• LockBit Leaks Documents Filched From UK Defense Contractor

• Researchers Discover Critical Vulnerability in PHPFusion CMS

• You patched yet? Years-old Microsoft security holes still hot targets for cyber-crooks

• IT Security News Daily Summary 2023-09-05

• Facebook Continues To Offer Poor Support For Hacked Users

• Publisher’s Spotlight: RegScale: Holistically Manage Your Compliance Program

• Hornetsecurity Releases 365 Total Protection Plan 4 for Microsoft 365

• Global Cloud Security Market to Reach $62.9B by 2028

• Tuya Smart and Amazon Web Services Collaborate to Establish an IoT Security Lab

• Google raises prices for Nest Aware subscriptions, but there is good news

• GhostSec Leaks Source Code of Alleged Iranian Surveillance Tool

• Digital Rights Updates with EFFector 35.11

• CISA Hires ‘Mudge’ to Work on Security-by-Design Principles

• Ransomware attacks on education sector spike in August

• Peiter ‘Mudge’ Zatko Lands Role as CISA Senior Technical Adviser

• Hacking device Flipper Zero can spam nearby iPhones with Bluetooth pop-ups

• Atlas VPN zero-day allows sites to discover users’ IP address

• Reflectiz offers remote solution to battle Magecart attacks

• Reading between the Lines – How the INFORM Consumers Act Impacts Online Retailers

• China To Launch $40 Billion State Chip Fund – Report

• Data Initiatives Force Closer Partnership Between CISOs, CDOs

• Hackers Target High-Privileged Okta Accounts via Help Desk

• One-Click Deploying EMQX MQTT Broker on Azure Using Terraform

• Russia Undertakes Disinformation Campaign Across Africa

• Big Tech has failed to police Russian disinformation, EC study concludes

• Holiday Season Cyber Alert: Reflectiz Declares War on Magecart

• X to Collect Biometric Data For Premium Users to Add Verification Layer

• Hackers stole $41M worth of crypto assets from crypto gambling firm Stake

• Electoral Commission Failed Basic Security Test Before Cyberattack

• Gcore Thwarts 500 Million PPS DDoS Attack on Gaming Company

• How Companies Can Cope With the Risks of Generative AI Tools

• UK Online Safety Bill Will Mandate Dangerous Age Verification for Much of the Web

• Montana’s New Genetic Privacy Law Caps Off Ten Years of Innovative State Privacy Protections

• The Rise of Chaes Malware: A Threat to Financial and Logistics Industries

• Introducing the next phase of 5G

• Future forward cyber

• Holiday Season Cyber Alert: Reflectiz Declares War on Magecart Attacks

• Freecycle data breach impacted 7 Million users

• Publisher’s Spotlight: Security Journey: Secure Coding Training

• Huawei Phone Teardown Reveals China Chip Advances

• Mend.io SAML Vulnerability Exposed

• The Strange Afterlife of Wagner’s Yevgeny Prigozhin

• Thales OneWelcome Identity Platform Recognized as Overall and Market Leader by KuppingerCole

• AI Development May Take a Toll on Tech Giant’s Environment Image

• TikTok hires British Security firm to banish data security concerns

• Creating a Custom Starter With Spring Boot 3

• MITRE and CISA Release Open Source Tool for OT Attack Emulation

• UK Electoral Commission Fails Cybersecurity Test Amid Data Breach

• Airlines Battle Surge in Loyalty Program Fraud

• Top 10 riskiest assets threatening global business

• LiveWire allows users to export their data, use it with AIs

• Hornetsecurity releases 365 Total Protection Plan 4 for Microsoft 365 to protect email communications

• LockBit leaks sensitive data from maximum security fence manufacturer

• Kingston Digital introduces XS1000 External SSD

• How to Identify and Overcome Blockchain Fatigue

• Tech Giants Grapple Russian Propaganda: EU’s Call to Action

• Musk stirs controversy with move by X to collect biometrics

• Apple, Microsoft Push To Keep iMessage, Bing Off EU Gatekeeper List

• Use Angry IP Scanner to audit the network

• New BLISTER Malware Update Fuelling Stealthy Network Infiltration

• The Nuanced Landscape of Insider Threats: A Conversation with Federico Charosky of Quorum Cyber

• Okta Says US Customers Targeted In Sophisticated Attacks

• 9 Vulnerabilities Patched In SEL Power System Management Products

• TikTok Opens Dublin Data Centre To Ease China Spying Fears

• Parcel Delivery Smishing Campaign Targets iPhone Users

• Freecycle gives users the gift of a data breach notice

• Freecycle Data Breach Impacts 7 Million Users

• Okta Says US Customers Targeted in Sophisticated Attacks

• Norfolk Southern Says a Software Defect — Not a Hacker — Forced It to Park Its Trains This Week

• 7 Million Users Possibly Impacted by Freecycle Data Breach

• 9 Vulnerabilities Patched in SEL Power System Management Products

• As LotL Attacks Evolve, So Must Defenses

• 8×8 Omni Shield protects users from fraudulent SMS activity

• LiveWire allows users to export their data and use it with the AIs

• 5 Ways Heimdal® Protects You From DNS Attacks

• Zero-day attacks are on the rise. Can patches keep up?

• Chipmaker NXP confirms data breach involving customers’ information

• Tech-Savvy Solutions: Streamlining Long-Term Disability Claims

• Vietnamese Cybercriminals Exploit Malvertising to Target Facebook Business Accounts

• Your Armor Against Identity Theft: Exploring Diverse Protection Service Options

• EE, Vodafone, O2 Users Suffer Calling Routing Issue

• Researchers Warn of Cyber Weapons Used by Lazarus Group’s Andariel Cluster

• Key Cybersecurity Tools That Can Mitigate the Cost of a Breach

• Way Too Vulnerable: Join this Webinar to Understand and Strengthen Identity Attack Surface

• New Python Variant of Chaes Malware Targets Banking and Logistics Industries

• Zero Trust Security: Pioneering Solutions on a ‘Never Trust, Always Verify’ Principle to Overcome Modern Cyberspace Security Challenges!

• FutureBank and IDVerse Partner to Fight Cybercrime

• 16-31 July 2023 Cyber Attacks Timeline

• World’s Largest Cryptocurrency Casino Stake Hacked for $41 Million

• Northern Ireland top cop quits in wake of data breach and disciplinary controversy

• Hacker Group Disguised as Marketing Company to Attack Enterprise Targets

• Meta disrupted two influence campaigns from China and Russia

• The importance of CISOs is not recognised by senior leadership

• International Cyber Expo Commits to Highlighting Importance of Wellbeing in Cybersecurity

• Ransomware Attack on Fencing Systems Maker Zaun Impacts UK Military Data

• Cybersecurity M&A Roundup: 40 Deals Announced in August 2023

• Developers Warned of Malicious PyPI, NPM, Ruby Packages Targeting Macs

• ThetaRay nabs $57M for AI tools to fight money laundering

• India warns of malware attacks targeting its Android users

• Heimdal Announces Expansion into the Indian Market

• Amazon Loses One Medical CEO After Acquisition

• Analyzing a Facebook Profile Stealer Written in Node.js

• More Schools Hit By Cyber-Attacks Before Term Begins

• Achieving Superior Security with Continuous Compliance

• 2023 Cost of a Data Breach: Key Takeaways

• UK National Cyber Security Centre Gets a New CTO

• Securing Linux Policy

• Freecycle Breach May Have Hit Millions of Users

• Multiple IBM Sterling Secure Proxy Vulnerabilities Allow Remote Code Execution

• Why Is MDR Better Than EDR: Enhancing Cybersecurity in the Modern World

• Need to improve the detection capabilities in your security products?

• A massive DDoS attack took down the site of the German financial agency BaFin

• BitBrowser Hackers Launder 70.6% of Stolen Funds

• Meta Takes Down Thousands of Accounts Involved in Disinformation Ops from China and Russia

• Avoid storing this data on mobile to curb privacy and security concerns

• Why end-to-end encryption matters

• The misconceptions preventing wider adoption of digital signatures

• Connected cars and cybercrime: A primer

• Reaper: Open-source reconnaissance and attack proxy workflow automation

• 6 free resources for getting started in cybersecurity

• A week in security (August 28 – September 3)

• Supply chain related security risks, and how to protect against them

• IT Security News Daily Summary 2023-09-04

• PSNI Data Breach Results In Arrests, Resignations

• Engineers Create Greener Alternative To Lithium-ion Battery

• UK Government Details AI Safety Summit Ambitions

• X will collect biometric data from its premium users

• Defending Against Snake Ransomware: Here’s All You Need to Know

• A college student’s guide to dating app scams

• “Smishing Triad” Targeted USPS and US Citizens for Data Theft

• Better cybersecurity with new material

• PoC Exploit Released for VMware Aria Authentication Bypass Vulnerability

• Microsoft Calls Time On Ancient TLS In Windows, Breaks Own Stuff

• Twitter Accused Of Helping Saudi Arabia Commit Human Rights Abuses

• Attackers Accessed UK Military Data Through A Windows 7 Rig

• Revealed: Home Office Secretly Lobbied For Facial Recognition Spy Company

• Russian Military Hackers Take Aim at Ukrainian Soldiers’ Battle Plans

• Python Package Index Targeted Again By VMConnect

• Publicly available Evil_MinIO exploit used in attacks on MinIO Storage Systems

• New Attack Technique “MalDoc in PDF” Alarms Experts

• FBI Operation: Quakbot Botnet Dismantled, Preventing Severe Ransomware Attacks

• How to make sure the reputation of your products and company is good

• LockBit hackers steal sensitive documents from Britain Military Defense

• New Infamous Chisel Malware Targets Android Users In State-Backed Campaign

• Medical Data Breach: Ayush Jharkhand Hacked

• Attackers accessed UK military data through high-security fencing firm’s Windows 7 rig

• Google’s Quest for AI Dominance: Challenges and Opportunities

• Cybersecurity for Startups: Best Tips and Strategies

• Hackers Exploit MinIO Storage System Vulnerabilities to Compromise Servers

• Step Up Your Defense Against Cloud-loving Cybercriminals

• Cybersecurity Concerns In AI: NCSC Flags Vulnerabilities In Chatbots And Language Models

• Schools Warned Of Cybersecurity Threats At The Start Of New Academic Year

• Tsunami watch

• Microsoft calls time on ancient TLS in Windows, breaking own stuff in the process

• Canada Seeks To Address Facebook, Google Concern Over Online News Law

• ShinyHunters Hacker group Claims to Have Hacked Pizza Hut Australia customer data

• X (Twitter) to Collect Biometric Data from Premium Users to Combat Impersonation

• UK AI usage explodes

• Chastity Device Designer Exposes Customers’ Private Data Due to Server Vulnerabilities

• The Race to Train AI: Who’s Leading the Pack in Social Media?

• Realism Reigns on AI at Black Hat and DEF CON

• Why Cybersecurity for Private Equity Is Urgent Now – And What Funds Can Do to Move the Needle.

• Northern Irish cops release 2 men after Terrorism Act arrests linked to data breach

• Navigating the Crypto Seas: A Guide to Buying Ethereum Safely

• Active Exploitation Of Adobe ColdFusion Vulnerabilities Detected Despite Being Patched

• NCSC Warns of Specific Vulnerabilities in AI Models Like ChatGPT

• Single-Tenant vs. Multi-Tenant Architecture: Breaking Down the Key Differences

• Cyber Security Today, Sept. 4, 2023 – Cybersecurity tips for parents as the new school year starts

• Chinese APT Slid Fake Signal and Telegram Apps onto Official App Stores

• Everything You Wanted to Know About AI Security but Were Afraid to Ask

• First Directory of Virtual CISO Providers Launched by Cynomi

• Sensitive Data about UK Military Sites Potentially Leaked by LockBit

• University of Sydney suffered a security breach caused by a third-party service provider

• JUMPSEC research reveals UK ransomware attacks rose by 87% in the first half of 2023

• Eco-Friendly in the Digital Age: Navigating the Tech-Sustainability Connection

• Binance Product Head Resigns Amid US Investigation

• Microsoft Says Goodbye to Wordpad, Snipping Tool, and Other Utilities

• Schweitzer Labs Windows Software Flaws Allow Remote Code Execution

• ARM Signs Up Major Tech Firm Investors, Prices IPO

• How to get a handle on shadow AI

• Sydney University Suffers Supply Chain Breach

• Vietnamese Cybercriminals Targeting Facebook Business Accounts with Malvertising

• 7 Key MXDR Benefits

• Summary of South Africa’s Protection of Personal Information Act (PoPIA)

• Four Convicted in $18m Investment Fraud Scheme

• Silicon In Focus Podcast: Smart Virtual Spaces

• Suffolk High School Forced Offline After Cyber-Attack

• Cybercrime will cost Germany $224 billion in 2023

• Sea Sides Conference: Interviewing Prashant Kv and Parveen

• Key Group Ransomware: Free Decryptor Released

• Software developers, how secure is your software?

• Facing Third-Party Threats With Non-Employee Risk Management

• How malware sandboxes can help strengthen cybersecurity

• Beware of MalDoc in PDF: A New Polyglot Attack Allowing Attackers to Evade Antivirus

• Germany witnesses $224Bn yearly economy loss with Cyber Attacks

• 5 ways in which FHE can solve blockchain’s privacy problems

• Ransomware attacks go beyond just data

• Spam is up, QR codes emerge as a significant threat vector

• Infosec products of the month: August 2023

• Global roaming fraud losses to surpass $8 billion by 2028

• Apple opens annual applications for free hackable iPhones

• IT Security News Weekly Summary – Week 35

• IT Security News Daily Summary 2023-09-03

• Why CISOs Should Prioritize Cloud Security and Access Management During Digital Transformation Initiatives

• Default Passwords Lead to Hacking Incidents Among LogicMonitor Customers

• PoC exploit code released for CVE-2023-34039 bug in VMware Aria Operations for Networks

• The SEC demands more transparency about Cybersecurity incidents in public companies

• New Privacy Policy: X Plans on Collecting Users’ Biometric Data

• Rare Technique Deployed by Android Malware to Illicitly Harvest Banking Data

• Loan App Executive Asks BJP Legislator to Repay Loan That He Never Borrowed

• Threat of Fake Signal and Telegram Apps: Protecting Your Privacy and Security

• 3 Vital Cybersecurity Threats for Employees

• What is Software Localization: Everything You Need to Know!

• Security Affairs newsletter Round 435 by Pierluigi Paganini – International edition

• Chinese Chipmaker Accelerates Tool Replacement Amidst Sanctions

• How to Remove Your Personal Info From Google by Using Its ‘Results About You’ Tool

• China’s Baidu Introduces ChatGPT Rival Ernie Bot

• Championing cybersecurity regulatory affairs with Nidhi Gani

• How to Use Proton Sentinel to Keep Your Accounts Safe

• FBI Disrupts Qakbot (QBot) Malware Network – Frees Victim PCs

• Week in review: 11 search engines for cybersecurity research, PoC for RCE in Juniper firewall released

• Cyber Security Management System (CSMS) for the Automotive Industry

• LockBit ransomware gang hit the Commission des services electriques de Montréal (CSEM)

• PoC Exploit Released for Critical VMware Aria’s SSH Auth Bypass Vulnerability

• The Intersection of OT and IT: Why Unified Cybersecurity is More Important than Ever.

Generated on 2023-09-10 23:59:02.636785