IT Security News Weekly Summary – Week 47

• IT Security News Daily Summary 2023-11-26

• Facebook Approves Ads Calling For Genocide, Assassination, And More

• DEF CON 31 – Ricky Lawshae’s ‘Fantastic Ethertypes and Where to Find Them’

• Taj Hotels Faces Data Breach, Revealing Data of 1.5 Million Customers

• Private and Secure Web Search Engines: DuckDuckGo, Brave, Kagi, Startpage

• Seventy One Percent of Employers Might Fall Behind in the Race for Generative AI, BTG Report Warns

• How to Stay Protect From Cybercrimes in This Holiday Season?

• Laptops with Windows Hello Fingerprint Authentication Vulnerable

• Security Affairs newsletter Round 447 by Pierluigi Paganini – INTERNATIONAL EDITION

• Week in review: LockBit exploits Citrix Bleed, Apache ActiveMQ bug exploited for cryptojacking

• Big Data and Analytics: The Engine Driving Insights

• Post-Quantum Cryptography: Safeguarding the Digital Future and Bolstering Security in Critical Sectors

• With Americans Traveling More Than Ever Before, It’s Time Businesses Increase Their Mobile Security Efforts

• IT Security News Daily Summary 2023-11-25

• Rhysida ransomware gang claimed China Energy hack

• Telekopye’s tricks of the trade – Week in security with Tony Anscombe

• North Korea-linked APT Lazarus is using a MagicLine4NX zero-day flaw in supply chain attack

• DEF CON 31 – Kemba Walden’s ‘Fireside Chat with the National Cyber Director’

• Blender’s Battle: Triumph Over DDoS Adversity

• Sensitive Kubernetes Secrets Discovered Exposed

• OpenCart Owner Turns Air Blue After Researcher Discloses Serious Vuln

• Novel Mirai-Based DDoS Botnet Exploits 0-Days To Infect Routers And Security Cameras

• Sekoia Reports: Latest in the Financial Sector Cyber Threat Landscape

• GitHub Shared Responsibility Model and Source Code Protection

• UK and South Korea Issue Joint Advisory Over North Korea-Linked Cyber Assaults

• Data Breach Threat: Hackers Target TransUnion and Experian, Demand R1.1 Billion Ransom

• Welltok Data Breach: 85 Million U.S. Patients’ Information Compromised

• Google’s Ad Blocker Crackdown Is Growing

• How to Stop Google From Deleting Your Inactive Account

• Enable 256-bit Bitlocker encryption on Windows 11 to boost security

• Global Businesses on High Alert: Aon Survey Identifies Cyber Threats as Paramount Risk

• The RAT King “NetSupport RAT” is Back in Action Via fake browser updates

• What is a System Audit Report (SAR)? – A Brief Guide

• Cybersecurity Insurance is Missing the Risk

• New ‘HrServ.dll’ Web Shell Detected in APT Attack Targeting Afghan Government

• Warning: 3 Critical Vulnerabilities Expose ownCloud Users to Data Breaches

• Virtual Reality (VR) and Augmented Reality (AR): Immersive Worlds Unveiled

• Different types of penetration testing

• Webinar: Maximizing SOC Efficiency With Open and Agnostic Security Solutions

• Hamas-linked APT uses Rust-based SysJoker backdoor against Israel

• November 2023 Web Server Survey

• IT Security News Daily Summary 2023-11-24

• App used by hundreds of schools leaking children’s data

• Hackers Leak Thousands of Idaho National Lab Employees’ PII Data

• KitchenPal – 98,726 breached accounts

• Understanding JWKS (JSON Web Key Set)

• Telekopye: Chamber of Neanderthals’ secrets

• Microsoft launched its new Microsoft Defender Bounty Program

• Chocolate Swiss Army Knife

• Cyber Security Today, Week in Review for the week ending November 24, 2023

• Citrix Bleed widely exploitated, warn government agencies

• Windows Hello fingerprint authentication can be bypassed on popular laptops

• Microsoft Windows Hello Fingerprint Authentication Bypass – Research

• 40% of Cybersecurity Departments Want More Budget to Upskill Employees

• Remote Video Security Surveillance

• Cybercriminals Using Telekopye Telegram Bot to Craft Phishing Scams on a Grand Scale

• Taj Hotel Data Breach details

• Nvidia Delays Launch Of AI Chip For China – Report

• Alaa Abd El-Fattah: Letter to the United Nations Working Group on Arbitrary Detention

• OpenCart owner turns air blue after researcher discloses serious vuln

• Cybersecurity Insights with Contrast CISO David Lindner | 11/24

• The drawbacks of using video training for your security awareness program

• How to implement ISO 27001 Annex A controls by using AI

• GPS Warfare: Ukraine-Israel Tensions Raise Alarms

• AutoZone Faces Data Breach Headache as MOVEit System Compromised

• Hackers are Targeting Indians Via Novel Courier Scam

• Terra Co-Founder Do Kwon To Be Extradited

• What Is Artificially Inflated Traffic?

• CyberLink Breached by North Korean Threat Actors in Supply Chain Attack

• Idaho National Laboratory Suffers Data Breach, Employee Data Compromised

• Scammers Exploit Crypto Hype with Fake Token Factory, Stealing Millions

• Check Point CloudGuard: A Leader and Fast Mover in GigaOm’s Radar Report for CSPM

• North Korean Software Supply Chain Attack Hits North America, Asia

• Addressing Top Technology Risks on the Digital Frontier

• Cyber Security Today, Nov. 24, 2023 – A warning to tighten security on Kubernetes containers, and more

• OpenAI Made AI Breakthrough Before Ousting Of Sam Altman

• Go on a Psychedelic Journey of the Internet’s Growth and Evolution

• Exposed Kubernetes configuration secrets can fuel supply chain attacks

• LitterDrifter USB Worm

• Effective Methods of Tackling Modern Cybersecurity Threats

• In Other News: National Laboratory Breach, Airplane GPS Attacks, Russia Accuses Allies of Hacking

• Cyber-Attack Disrupts UK Property Deals

• Tell Me Your Secrets Without Telling Me Your Secrets

• AI Receives £500 Million Funding in Finance Minister’s 2023 Autumn Statement

• Hamas-Linked Cyberattacks Using Rust-Powered SysJoker Backdoor Against Israel

• Windows Hello Fingerprint Tech is Hacked

• Mimecast SPF and DKIM Configuration: Step By Step Guide

• Black Friday: Phishing Emails Soar 237%

• Silicon UK Pulse: Your Tech News Update: Episode 28

• ‘Pig butchering’: Authorities Seized $9M in Crypto During Dollar Conversion

• Security Risk Assessment Checklist

• North Korea-linked Konni APT uses Russian-language weaponized documents

• Linux 6.6 is Now Officially an LTS Release

• Weekly Blog Wrap-Up (November 20 – November 23, 2023)

• CISA Launches Project to Assess Effectiveness of Security Controls

• What is IRDAI Compliance? Guidelines for the Insurer

• Kubernetes Secrets of Fortune 500 Companies Exposed in Public Repositories

• Report Phishing and Spam messages on Google in this way

• Demystifying Data Protection Design: A Comprehensive Overview

• NIS2 and its global ramifications

• ZTNA vs VPN: What is the Difference? Will ZTNA Replace VPN?

• 1 in 5 executives question their own data protection programs

• UX Design and Human-Computer Interaction: Crafting User-Friendly Experiences

• Network security tops infrastructure investments

• AI and contextual threat intelligence reshape defense strategies

• Kubernetes vs docker swarm: A brief explanation of all differences

• Understanding Kubernetes secrets in a Kubernetes environment

• Kubernetes security best practices: Secure your secrets

• Understand all the Cyber Essentials requirements for IT infrastructure

• The Best Cyber Security Audit Companies across the UK

• Cloud security and devops have work to do

• Guarding Against the Insider Threat: Do Your Employees Pose the Greatest Risk?

• National Cyber Security Vulnerabilities in The Changing Security Environment

• Web Management Address Autodetection

• IT Security News Daily Summary 2023-11-23

• Canada’s privacy czar investigating data theft of federal employees from relocation companies

• Windows 11 setup: Which user account type should you choose?

• ClearFake campaign spreads macOS AMOS information stealer

• How to apply natural language processing to cybersecurity

• Rise of cloud agnosticism: challenges and myths

• YouTube Denies Slowing Down Mozilla Firefox

• Welltok Data Breach Affects Over 8.5 Million Patients

• BlackCat claims it is behind Fidelity National Financial ransomware shakedown

• Microsoft named a Leader in 2023 Gartner® Magic Quadrant™ for Access Management for the 7th year​​

• Diamond Sleet supply chain compromise distributes a modified CyberLink installer

• Revolutionize your security strategy: Introducing automatic asset discovery

• Telekopye Toolkit Used as Telegram Bot to Scam Marketplace Users

• GM Cruise To Re-Launch Operation In One City – Report

• What Are the Pillars of API Security?

• $9 million seized from “pig butchering” scammers who preyed on lonely hearts

• InfectedSlurs Botnet Resurrects Mirai With Zero-Days

• Amazon Set To Win EU Approval For iRobot Purchase – Report

• Navigating Challenges in Online Banking API Testing

• Chrome pushes forward with plans to limit ad blockers in the future

• Patch Management Guide

• British Library Staff Passports Leaked Online, Hackers Demand £600,000 Ransom

• Rug Pull Schemes: Crypto Investor Losses Near $1M

• Two Insurance companies come under the influence of Ransomware Attacks

• Binance Sees $956m Funds Withdrawn, After CEO Pleads Guilty

• What Is Network Availability?

• TLS/SSL Handshake Errors & How to Fix Them

• Key Components of a Successful DevSecOps Pipeline

• $19 Stanley cup deal is a Black Friday scam

• Welltok data breach impacted 8.5 million patients in the U.S.

• Amazon Cuts Hundreds Of Jobs In Alexa Division

• Half of Cybersecurity Professionals Kept Awake By Workload Worries

• Konni Group Using Russian-Language Malicious Word Docs in Latest Attacks

• OpenSSL Announces Final Release of OpenSSL 3.2.0

• MySQL Security Best Practices Guide – 2024

• Industry piles in on North Korea for sustained rampage on software supply chains

• Websites Must Allow Users to “Reject All” Cookies, UK Regular Warns

• Unlocking a World of Cybersecurity Insights with the CISO’s Secrets Podcast

• Alert: New WailingCrab Malware Loader Spreading via Shipping-Themed Emails

• How Altcoins Influence The World of Crypto

• How to Create a Cybersecurity Incident Response Plan?

• Vulnerability Prioritization: How to Beat Patching Paralysis

• Researchers Warn NetSupport RAT Attacks Are on the Rise

• Mac Systems Under Threat: ClearFake Campaign Deploys Atomic Stealer Malware

• What Is DNS Security and How Does It Work [A Comprehensive Guide]

• White House Joins Threads, Amid X Extremist Content Row

• It’s Time to Log Off

• North Korea-linked APT Diamond Sleet supply chain attack relies on CyberLink software

• Cyber Mindfulness Corner Company Spotlight: Pentest People

• Implementing Effective Compliance Testing: A Comprehensive Guide

• Securing Reality: The Role of Strict Laws and Digital Literacy in the Fight Against Deepfakes

• North Korean Software Supply Chain Threat is Booming, UK and South Korea Warn

• FBI and CISA warn against Scattered Spider triggered cyber attacks

• Exposed Kubernetes Secrets Allow Hackers to Access Sensitive Environments

• Attack on direct debit provider London & Zurich leaves customers with 6-figure backlogs

• Data of 8.5 million patients compromised in the United States

• University of Manchester CISO Speaks Out on Summer Cyber-Attack

• Cisco Patched Products Vulnerable to HTTP/2 Rapid Reset Attack

• Mirai-based Botnet Exploiting Zero-Day Bugs in Routers and NVRs for Massive DDoS Attacks

• 6 Steps to Accelerate Cybersecurity Incident Response

• Actionable Threat Intel (VI) – A day in a Threat Hunter’s life

• Windows Hello Fingerprint Authentication Exploited on Microsoft, Dell, & Lenovo Laptops

• US Seizes $9m From Pig Butchering Scammers

• Consumer cyberthreats: predictions for 2024

• North Korea Blamed For CyberLink Supply Chain Attacks

• Stop social engineering at the IT help desk

• N. Korean Hackers Distribute Trojanized CyberLink Software in Supply Chain Attack

• British Library: Ransomware Attack Led to Data Breach

• Happy Thanksgiving 2023!

• ParaSiteSnatcher: How Malicious Chrome Extensions Target Brazil

• Automotive parts giant AutoZone disclosed data breach after MOVEit hack

• Mirai we go again: Zero-day flaws see routers and cameras co-opted into botnet

• First Linux Kernel 6.7 Release Candidate Announced

• Cybellum’s Product Security Platform achieves Mitre’s CWE-Compatible designation

• 117 Vulnerabilities Discovered in Microsoft 365 Apps

• Million-Dollar Crypto Scam that Leaves Investors Empty-handed

• North Korean Hackers Distribute Trojanized CyberLink Software in Supply Chain Attack

• Cybercriminals turn to ready-made bots for quick attacks

• New horizons in cyber protection with 2024 trends to watch

• Cloud Computing Explained: Benefits and Challenges

• New Relic warns customers it’s experienced a cyber … something

• Consumers plan to be more consistent with their security in 2024

• Online stores may not be as secure as you think

• Defeat Web Shell WSO-NG

• OpenAI in turmoil: Altman’s leadership, trust issues and new opportunities for Google and Anthropic — 4 key takeaways

• Your voice is my password

• North Korea makes finding a gig even harder by attacking candidates and employers

• How to give Windows Hello the finger and login as someone on their stolen laptop

• Cisco Learners: What’s in store for Cyber Monday 2023

• How to give Windows Hello the finger and login as a user on their stolen laptop

• Citrix Bleed Vulnerability: SafeBreach Coverage for US-CERT Alert (AA23-325A)

• IT Security News Daily Summary 2023-11-22

• New InfectedSlurs Mirai-based botnet exploits two zero-days

• 2023-11-22 – AgentTesla infection with FTP data exfil

• US nuke reactor lab hit by ‘gay furry hackers’ demanding cat-human mutants

• 4 data loss examples keeping backup admins up at night

• What Is Cloud Security? Everything You Need to Know

• Hack The Box Launches 5th Annual University CTF Competition

• Kiteworks’ Maytech Acquisition Reaffirms Commitment to UK Market

• Fake Browser Updates Targeting Mac Systems With Infostealer

• Building Security Culture Starts with Building Relationships

• Atomic Stealer Distributes Malware to Macs Through False Browser Downloads

• CISA relaunches working group on cyber insurance, ransomware

• What Is Cloud Configuration Management? Complete Guide

• Qatar Cyber Agency Runs National Cyber Drills

• Web Shells Gain Sophistication for Stealth, Persistence

• Measures Healthcare Providers Can Take to Mitigate Disruptions

• Microsoft Improves Windows Security with a Path to Move Off NTLM

• Researchers Undermine ‘Windows Hello’ on Lenovo, Dell, Surface Pro PCs

• North Korea-backed hackers target CyberLink users in supply-chain attack

• Kinsing Crypto Malware Targets Linux Systems via Apache ActiveMQ Flaw

• 6 Best Unified Threat Management (UTM) Devices & Software for 2023

• Bytes of Delight: Snacking on Snack Minutes Videos

• Foreign Cyberattack Blamed For Kansas Court System Disruption – Report

• Mideast Oil & Gas Facilities Could Face Cyber-Related Energy Disruptions

• APT29 Strikes: WinRAR Exploits in Embassy Cyber Attacks

• LummaC2 Malware Introduces Innovative Anti-Sandbox Technique Utilizing Trigonometry

• Facebook Is Tracking Teens Online As They Prep For College

• Autumn Statement 2023: Tech Implications

• OpenAI saga shows the race for AI supremacy is no longer just between nations

• Equal Pay Day: Women, Cybersecurity, and Money

• Researchers Discover Dangerous Exposure of Sensitive Kubernetes Secrets

• ‘LitterDrifter’ Russian USB Worm Leaks from Ukraine War Zone

• 10 Years On, Microsoft’s Bug Bounty Program Has Paid Out $60 Million

• After Qakbot, DarkGate and Pikabot Emerge as the New Notorious Malware

• Vulnerabilities in Adobe Acrobat, Microsoft Excel could lead to arbitrary code execution

• Sekoia: Latest in the Financial Sector Cyber Threat Landscape

• Scattered Spider Hops Nimbly From Cloud to On-Prem in Complex Attack

• 3 Ways to Stop Unauthorized Code From Running in Your Network

• Establishing and Keeping the Trust: The Cisco Duo Managed Services Story

• Guarding the Gate: How to Thwart Initial Access Brokers’ Intrusions

• Russian Hackers Target Ukraine’s Fighter Jet Supplier

• Flaw in Apache ActiveMQ Exposes Linux Systems to Kinsing Malware

• Autopilot Flaw Known By Tesla, Elon Musk, Judge Finds

• Rootkit Turns Kubernetes From Orchestration to Subversion

• A guide to Purdue model for ICS security

• Employee Policy Violations Cause 26% of Cyber Incidents

• Australia runs cybersecurity health check on all gov websites and infrastructure

• Everything You Need to Know and Do With Load Balancers

• Employees breaking security policies just dangerous as being hacked, Kaspersky global study shows

• Global Smartphone Market Grows After Two Year Slump – Counterpoint

• FBI Alert: Silent Ransom Group Utilizes Callback Phishing for Network Hacks

• Cansina A Web Content Discovery Application

• Mozilla Releases Security Updates for Firefox and Thunderbird

• Fidelity National Financial shuts down network in wake of cybersecurity incident

• SiegedSec hacktivist group hacked Idaho National Laboratory (INL)

• USB Worm Unleashed By Russian State Hackers Spreads Worldwide

• Netflix Bug That Opened Smart TVs To Attacks Is Detailed, 4 Years Later

• Kinsing Malware Exploits Critical Apache ActiveMQ Flaw To Mine Crypto

• Windows Hello Fingerprint Authentication Bypassed On Popular Laptops

• 185,000 Individuals Impacted By MOVEit Hack At AutoZone

• How AI is Encouraging Targeted Phishing Attacks

• New Flaws in Fingerprint Sensors Let Attackers Bypass Windows Hello Login

• Why Ensuring Supply Chain Security in the Space Sector is Critical

• Binance CEO Changpeng Zhao Pleas Guilty, Resigns

• Simplifying Access: The Power of Single Sign-On

• The Persian Gulf’s March to the Cloud Presents Global Opportunities

• Fortinet Insights from the World Economic Forum’s Annual Meeting on Cybersecurity

• Microsoft Offers Up to $20,000 for Vulnerabilities in Defender Products

• Sam Altman is Back as OpenAI CEO Just Days After Being Removed, Along With a New Board

• Windows Hello Fingerprint Authentication Bypassed on Popular Laptops

• 185,000 Individuals Impacted by MOVEit Hack at Car Parts Giant AutoZone

• The AI Paradox: Balancing Generative AI Adoption With Cybersecurity Risks

• What are Hardware Security Keys, and is it Safe to Use Them?

• Google CEO Warns of Potential Security Risks Associated with Sideloading Apps

• HasMySecretLeaked: Building a Trustless and Secure Protocol

• Broadcom completes $69 billion acquisition of VMware in cash and stock

• How LockBit used Citrix Bleed to breach Boeing and other targets

• Check Point enhances AWS security—see it in action at AWS re:Invent!

• Cyber Security Today, Nov. 22, 2023 – Boeing division hacked through NetScaler vulnerability, and more

• Chiselled Ubuntu closes prevailing container security gaps

• Connecting With the Community at BSides Atlanta 2023

• A Maven Story

• Malwarebytes consumer product roundup: The latest

• US cybercops take on ‘pig butchering’ org, return $9M in scammed crypto

• North Korean Hackers Pose as Job Recruiters and Seekers in Malware Campaigns

• Apple to Add Manual Authentication to iMessage

• Over Half of Organisations Are at Risk of Cyberattack Due to Exhausted and Stressed Staff

• Explained: Privacy washing

• Citrix, Gov Agencies Issue Fresh Warnings on CitrixBleed Vulnerability

• Kansas Officials Blame 5-Week Disruption of Court System on ‘Sophisticated Foreign Cyberattack’

• Humans Are Notoriously Bad at Assessing Risk

• CyberArk unveils passwordless authentication options to reduce credential theft

• North Korean Hackers Posed as Job Recruiters and Seekers

• Integration Spotlight: Stellar Cyber Open XDR

• Insights from SentinelOne’s OneCon23

• ENow App Governance Accelerator helps organizations identify risky apps

• Microsoft announces Defender bug bounty program

• AI Solutions Are the New Shadow IT

• LockBit Affiliates are Exploiting Citrix Bleed, Government Agencies Warn

• Sam Altman Reinstated As CEO, New OpenAI Board Appointed

• CISA adds Looney Tunables Linux bug to its Known Exploited Vulnerabilities catalog

• Microsoft’s bug bounty turns 10. Are these kinds of rewards making code more secure?

• Coincover collaborates with Utila to improve crypto asset management

• ClearFake Campaign Expands to Target Mac Systems with Atomic Stealer

• Poloniex Offered $10 Million Reward to Hacker for Return of $120 Million

• UK’s cookie crumble: Data watchdog serves up tougher recipe for consent banners

• Microsoft Launches Defender Bug Bounty Program

• Canada Government Admits Data Breach Impacting Public Employees

• HrServ – Previously unknown web shell used in APT attack

• Measuring the Efficacy of your Insider Risk Program

• What Is a Credential Vault?

• CISA offers cybersecurity services to non-federal orgs in critical infrastructure sector

• Regulator Issues Privacy Ultimatum to UK’s Top Websites

• UK Finance Reports Slight Decrease in FinTech Cyberattacks

• The Cybersecurity Skills Gap: You’re Looking at the Wrong Gap

• Enterprise software provider TmaxSoft leaks 2TB of data

• Europol Launches OSINT Taskforce to Hunt For Russian War Crimes

• DarkGate Gained Popularity for its Covert Nature and Antivirus Evasion

• Citrix provides additional measures to address Citrix Bleed

• India Faces Surge in IM App Attacks With Trojan Campaigns

• Security researchers bypass Windows Hello fingerprint authentication

• Unmasking the latest trends of the Financial Cyber Threat Landscape

• ClearFake Campaign Expands to Deliver Atomic Stealer on Mac Systems

• Breaking News: Sam Altman will return as OpenAI CEO, New board announced in a dramatic turnaround

• ClearFake Campaign Expands to Deliver Atomic Stealer on Macs Systems

• Attack Signals Possible Return of Genesis Market, Abuses Node.js, and EV Code Signing

• Sam Altman will return as OpenAI CEO, New board announced in a dramatic turnaround

• Just beware of these 5 Black Friday or thanksgiving Cyber Scams

• Leveraging Hybrid Cloud Solutions for Enhanced Cybersecurity in Healthcare

• CISOs can marry security and business success

• LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability to Break In

• 5G Technology: Speeding Up the Digital Age

• Always Thankful for Our Customers

• IoT Revolution: Connecting the World Digitally

• Why boards must prioritize cybersecurity expertise

• Fuel for thought: Can a driverless car get arrested?

• Organizations rethink cybersecurity investments to meet NIS Directive requirements

• Open-source AV/EDR bypassing lab for training and learning

• 2023-11-20 – DarkGate infection

• Binance and CEO admit financial crimes, billions coughed up to US govt

• Visibility Isn’t Enough; It’s What You Do with It That Counts

• 4 Key Security Challenges to Address with Confidential Computing

• The 7 Deadly Sins of Security Awareness Training

• InfectedSlurs Botnet Spreads Mirai via Zero-Days

• Nothing Chats pulled from Google Play

• How to stop fake System notifications on macOS

• IT Security News Daily Summary 2023-11-21

• Citrix Bleed Bug Inflicts Mounting Wounds, CISA Warns

• Exploit for Critical Windows Defender Bypass Goes Public

• AutoZone Files MOVEit Data Breach Notice With State of Maine

• DOJ Charges Binance With Vast Money-Laundering Scheme and Sanctions Violations

• Why less is more: 10 steps to secure customer data

• DPRK Hackers Masquerade as Tech Recruiters, Job Seekers

• Join CX for Cisco Live Demos

• Digital Twins Will Revolutionize Modern Logistics. Here’s How

• The Role of the CISO in Digital Transformation

• DOJ Charges Binance With Vast Money Laundering Scheme and Sanctions Violations

• Accelerating Security Risk Management

• Randall Munroe’s XKCD ‘Materials Scientists’

• DEF CON 31 – Jonathan Bar Or’s, Michael Pearse’s, Anurag Bohra’s ‘Getting A Migraine – Uncovering A Unique SIP Bypass On macOS’

• YouTube is slowing video loads on Firefox. Here’s how to fix that

• Inside Job: Cyber Exec Admits to Hospital Hacks

• Meeting the needs of the application generation

• Tor Project removed several relays associated with a suspicious cryptocurrency scheme

• Outdated Wallets Threatening Billions in Crypto Assets

• DevOps Service Providers Facilitating ISO 27001 and GDPR Compliance for Organizations

• The Eyes on the Board Act Is Yet Another Misguided Attempt to Limit Social Media for Teens

• Evil Twin Attack: Definition + How to Prevent It

• Microsoft Azure Confidential VMs Will Roll Out This December

• possession factor

• Introducing the Microsoft Defender Bounty Program

• Password Manager Cheat Sheet: What Is a Password Manager?

• Atomic Stealer distributed to Mac users via fake browser updates

• DEF CON 31 – Tal Skverer’s ‘GhostToken Exploiting Google Cloud Platform To Create Unremovable Trojan Apps’

• Several K-12 Schools and Colleges Suffers Outage Due to Cyberattack

• SOLUTION REVIEW: Enzoic for Active Directory

• Bringing passwords to the pie table for unconventional holiday discussions

• Hands on with Google’s new Titan Security Keys – and why they still have their place

• 6 Best Password Recovery Software for 2023

• Kinsing Cyberattackers Target Apache ActiveMQ Flaw to Mine Crypto

• Major Saudi University to Offer AI, Cybersecurity Studies

• Cisco partners drive innovation through Purpose

• Powering Observability at Scale with Telemetry

• Sumo Logic wrestles with security breach, pins down customer data

• Cyber Safety on Sale! How to Navigate Black Friday & Cyber Monday Securely

• Fuji Electric Tellus Lite V-Simulator

• #StopRansomware: LockBit 3.0 Ransomware Affiliates Exploit CVE 2023-4966 Citrix Bleed Vulnerability

• WAGO PFC200 Series

• Cato Networks Named SASE Leader, Again

• The Dark Web: A Hidden Menace for Businesses

• Coffee Briefing Nov. 21 – Microsoft Ignite updates; Canadians want more AI training; SalvageData expands to Canada; and more

• Konni Campaign Deploys Advanced RAT With UAC Bypass Capabilities

• Latest Buzz in Cybersecurity: Trending Headlines on Google

• British Library Says Staff Data Stolen In Ransomware Attack

• Broadcom Expects To Complete $61bn VMware Deal On Weds

• Konni RAT Exploiting Word Docs to Steal Data from Windows

• New Phishing Attack Hijacks Email Thread to Inject Malicious URL

• 3 skills could make or break your cybersecurity career in the generative AI era

• SEC’s 4-Day Breach Disclosure Rule Hits Opposition In Congress

• LummaC2 4.0 Infostealer Uses Trigonometry To Avoid Sandboxes

• Tor Network Removes Risky Relays Associated With Crypto Scheme

• Canadian Military, Police Impacted By Data Breach

• Why Botnets Persist: How to Stop Direct-Path DDoS Attacks

• Vulnerability Summary for the Week of November 13, 2023

• CISA Offering Free Cybersecurity Services to Non-Federal Critical Infrastructure Entities

• LLM Security Startup Lasso Emerges From Stealth Mode

• DarkGate and PikaBot Activity Surge in the Wake of QakBot Takedown

• Cyberbullying, a growing problem in Europe

• AI Helps Uncover Russian State-Sponsored Disinformation in Hungary

• Maximize Cybersecurity Returns: 5 Key Steps to Enhancing ROI

• MAR-10478915-1.v1 Citrix Bleed

• Lookout Alerts U.S. Employees and Businesses of Significant Phishing Threat This Week

• Hacking Employers and Seeking Employment: Two Job-Related Campaigns Bear Hallmarks of North Korean Threat Actors

• Nadella Calls For ‘Change’ At OpenAI Following Altman Ouster

• Former Infosec COO Pleads Guilty for Hacking Hospitals

• EU cybersecurity exercise: foster cooperation, secure free and fair EU elections

• Detecting Obfuscated Command-lines with a Large Language Model

• ‘Tis the Season for Cybercrime: What to Watch for and How to Protect Yourself

• MailCamp SPF and DKIM configuration: Step By Step Guideline

• MailerLite SPF and DKIM Configuration: Step By Step

• Overcoming Password Fatigue With Single Sign-On Solutions

• DarkGate and PikaBot Phishing Campaign is Using Qakbot Tactics

• FBI Reveals Scattered Spider’s Alliance with Notorious Ransomware Outfit

• Truepill Data Breach: Navigating Healthcare’s Digital Security Crisis

• Privacy Act Compliance Staggered, NASSCOM Seeks Collaboration

• Telstra and Netskope expand partnership to deliver managed SASE globally

• FreeBSD 14.0 released, OpenSSH and OpenSSL updated

• Hackers Abusing WhatsApp Messages to Install Android Malware

• The XBOM vs SBOM debate

• Tor Network Removes Risky Relays Associated With Cryptocurrency Scheme

• Canadian Military, Police Impacted by Data Breach at Moving Companies

• Play Ransomware Goes Commercial – Now Offered as a Service to Cybercriminals

• Black Friday: Significant Security Gaps in E-Commerce Web Apps

• Comparative Study Results on Linux and Windows Ransomware Attacks, Exploring Notable Trends and Surge in Attacks on Linux Systems

• Third-party data breach affecting Canadian government could involve data from 1999

• Rapid7 introduces AI-powered cloud anomaly detection

• Top 5 Best Telegram Client Apps for Android

• New Agent Tesla Malware Variant Using ZPAQ Compression in Email Attacks

• How Cisco Helps Me Balance My Passions and Career Experience

• Sam Altman Ouster Adds Fuel To EU AI Regulation Debate

• Europol Busts Major Online CSAM Racket in Western Balkans

• Email Security Flaw Found in the Wild

• Sumo Logic Completes Investigation Into Recent Security Breach

• Microsoft Paid Out $63 Million Since Launch of First Bug Bounty Program 10 Years Ago

• Insider Q&A: Pentagon AI Chief on Network-Centric Warfare, Generative AI Challenges

• Sumsub Global Database Verification eliminates document-based processes

• Major Exchange OKX Applies For Hong Kong Crypto Licence

• How Can I Manage Certificates From Multiple Public CAs?

• Apache ActiveMQ bug exploited to deliver Kinsing malware

• US DOJ Negotiates With Binance Over $4bn Settlement

• How do cybercriminals steal credit card information?

• Experts warn of a surge in NetSupport RAT attacks against education and government sectors

• The shifting sands of the war against cyber extortion

• How Multi-Stage Phishing Attacks Exploit QRs, CAPTCHAs, and Steganography

• The definitive VirusTotal’s admin guide

• Maintaining a state of readiness to deal with cyber attacks

• KashFlow SPF and DKIM configuration: Step By Step Guideline

• Kreativmedia SPF and DKIM configuration: Step By Step Guideline

• Social engineering attacks lure Indian users to install Android banking trojans

• 8 free AI and GenAI courses from AWS

• Lasso Security emerges from stealth and raises $6 million

• Kinsing Hackers Exploit Apache ActiveMQ Vulnerability to Deploy Linux Rootkits

• Cybersecurity Executive Pleads Guilty to Hacking Hospitals

• Hackers Exploit Asset Management Program to Deploy Malware

• Crimeware and financial cyberthreats in 2024

• US Cybersecurity Lab Suffers Major Data Breach

• Ukraine Sacks Two Senior Cyber Officials

• FCC Implemented New Rules to Stop SIM Swapping Attacks

• SMB Protocol Explained: Understanding its Security Risks and Best Practices

• AI-Enabled Information Manipulation Poses Threat to EU Elections: ENISA Report

• In What ways do CVSS v3 and CVSS v4 differ?

• Musk’s X Sues Media Matters Over Nazism Report

• FCC Implemented new Rules to Stop SIM swapping Attacks

• The Top 5 Reasons to Use an API Management Platform

• Malicious Apps Disguised as Banks and Government Agencies Targeting Indian Android Users

• Why XDR Is A Must In Securing Cloud And Hybrid Environments

• Mustang Panda Hackers Targets Philippines Government Amid South China Sea Tensions

• PolarDNS: Open-source DNS server tailored for security evaluations

• Rhysida Ransomware demands 20 BTC from British Library

• Segmentation proves crucial for fast response to security incidents

• The hidden obstacles to integrating AI into your business

• Organizations’ serious commitment to software risk management pays off

• Blockchain Breakthroughs: Transforming Industries

• Kaspersky’s Advanced Persistent Threats Predictions for 2024

• What Healthcare Cybersecurity Leaders Should Know About the FDA’s Section 524B Guidelines

• Scattered Spider ransomware gang falls under government agency scrutiny

• CyberTalk Series: MSP and MSSP Cybersecurity Compliance Challenges in 2023 and Goals for 2024 with Kimberly Simon

• OMGPOP – 7,071,293 breached accounts

• DEF CON 31 – Panel: ‘Hack the Future – Why Congress & White House Support AI Red Teaming’

• IT Security News Daily Summary 2023-11-20

• Malware Uses Trigonometry to Track Mouse Strokes

• Lasso Security Emerges From Stealth With $6M Seed Funding for Gen AI and Advanced LLM Cybersecurity

• Canadian government impacted by data breaches of two of its contractors

• Protecting Kids on Social Media Act: Amended and Still Problematic

• Amid Military Buildup, China Deploys Mustang Panda in the Philippines

• Facebook Breaks Up Its Ethical AI Watchdog Group

• Cisco Live is the time to jump into the future. Together.

• MOVEit victim count latest: 2.6K+ orgs hit, 77M+ people’s data stolen

• CISA Launches Pilot Program to Address Critical Infrastructure Threats

• Thousands of new honeypots deployed across Israel to catch hackers

• Cisco Transportation at Smart City Expo World Congress (SCEWC) 2023

• Automating your way out of an AppSec staffing shortage

• 2024: The Year Microsoft’s AI-Driven Zero Trust Vision Delivers

• Data stolen on Canadian federal employees in third party hack may go back 24 years

• Rhysida ransomware gang is auctioning data stolen from the British Library

• LummaC2 v4.0 Malware Stealing Data with Trigonometry to Detect Human Users

• Hacker Leaks Vaccination Records of Over 2 Million Turkish Citizens

• Cybersecurity Insurance and Data Analysis Working Group Re-Envisioned to Help Drive Down Cyber Risk

• ‘Not consistently candid’: The cryptic phrase that ended Sam Altman’s tenure at OpenAI

• Enterprise Generative AI Enters Its Citizen Development Era

• Celebrating ten years of the Microsoft Bug Bounty program and more than $60M awarded

• Secretive White House Surveillance Program Gives Cops Access to Trillions of US Phone Records

• Saudi Arabia Arms Public Sector With Google Cloud Services

• Ukraine fires top cybersecurity officials

• Hybrid Work for Government: Resiliency in Emergency Situations

• Former infosec COO pleads guilty to attacking hospitals to drum up business

• Microsoft Announces Launch of Customizable AI-Powered Digital Avatar

• Big Data Empowers IoT: Challenges and Solutions

• Stay safe while shopping online on Black Friday and Cyber Monday

• 15 benefits of outsourcing your cybersecurity operations

• CISA Unveils Healthcare Cybersecurity Guide

• What to do if the phone is hacked or becomes espionage target

• British Library confirms data stolen during ransomware attack

• Details Emerge Of Surprise Board Coup That Ousted CEO Sam Altman At OpenAI

• Rhysida Ransomware Gang Attacked The British Library

• Morgan Stanley Fined $6.5 Million For Exposing Customer Info

• Most OpenAI Staff Threaten To Quit After Microsoft Hires Sam Altman

• DEF CON 31 Packet Hacking Village – Pete Hay’s ‘The Importance Of Arts And Crafts In ThreatOps’

• Infostealer Lumma Evolves With New Anti-Sandbox Method

• Google Workspace Vulnerabilities Risk Security Breaches – Warn Researchers

• Microsoft ‘Stronger’ After OpenAI Chaos, Altman Hire

• 6 FinOps Principles and Best Practices

• The Call to Fuel Partner Success

• Student discount: Get 50% off Malwarebytes

• CISA Releases Cybersecurity Guidance for Healthcare, Public Health Organizations

• FCC’s Got New Rules for SIM-Swap and Port-Out Fraud

• CISA to Provide Cybersecurity Services to Critical Infrastructure Entities

• NetSupport RAT Infections on the Rise – Targeting Government and Business Sectors

• OpenAI Staff Threaten To Resign Over Altman Sacking

• READYgg Onboards 15 Million Web2 Players into Web3 in Partnership with Aptos Labs

• Operationalize cyber risk quantification for smart security

• Optus CEO resigns following service outage debacle

• Sam Altman’s AI ‘mission continues’ at Microsoft, future of OpenAI and ChatGPT uncertain

• Morgan Stanley Fined $6.5 Million for Exposing Customer Information

• XDR Cybersecurity: Technologies and Best Practices

• Apple Adopts Universal Texting Standard

• Product Walkthrough: Silverfort’s Unified Identity Protection Platform

• DarkGate and PikaBot Malware Resurrect QakBot’s Tactics in New Phishing Attacks

• Akamai EdgeWorkers and Uniform: Personalize Web Pages at Scale Without Flicker

• Do We Want an Immersive Web?

• Musk Vows ‘Thermonuclear’ Lawsuit Against Watchdog

• How the Evolving Role of the CISO Impacts Cybersecurity Startups

• LummaC2 Stealer’s New Anti-Sandbox Technique? Trigonometry

• Johnson Controls Patches Critical Vulnerability in Industrial Refrigeration Products

• Microsoft Hires Sam Altman and OpenAI’s New CEO Vows to Investigate His Firing

• Morgan Stanley Ordered to Pay $6.5 Million for Exposing Customer Information

• Maximizing Data Security: Why Simply Factory Resetting Your Android Phone Won’t Suffice Before Selling

• BYD Targets Tesla With Premium ‘Sea Lion’ EV

• Fortify Your Online Business – Security Tips for Starting an e-Commerce Website

• Yamaha Ransomware Attack: Employees Personal Information Exposed

• Hackers accessed sensitive health data of Welltok patients

• Russia-linked APT29 group exploited WinRAR 0day in attacks against embassies

• Konni Campaign Distributed Via Malicious Document

• Adopting CNAPP as a Bridge Between DevOps and Cloud-Native Security

• Google’s Bard AI Chatbot is now Accessible to Teenagers

• Threat Intelligence with Sandbox Analysis: Security Analyst Guide – 2024

• Lasso Security emerges from stealth to wrangle LLM security

• Inside OpenAI’s chaotic weekend: The Sam Altman dismissal to Emmett Shear’s appointment

• Are DarkGate and PikaBot the new QakBot?

• Google Eases Restrictions: Teens Navigate Bard with Guardrails

• Intel Released Urgent Patch For Reptar Vulnerability In Its CPUs

• Google Elaborates On Campaigns Exploiting A Now-Patched Zimbra Zero-Day

• The Human Factor of Cyber Security

• Cisco ISE Takes a Trio of TrustRadius Awards

• New “Agent Tesla” Variant: Unusual “ZPAQ” Archive Format Delivers Malware

• Using Generative AI for Surveillance

• Cybersecurity, Legal, and Financial Experts Share Their Reactions to the SEC’s Latest Cyber Disclosure Regulations | Kovrr Blog

• Yamaha Motor Confirms Data Breach Following Ransomware Attack

• 5 Steps to Assessing Risk Profiles of Third-Party SSE Platforms

• Cyber Security Today, Nov. 20, 2023 – Forbid ransomware payments, says a Canadian hospital

• OpenAI’s Altman Courted Investors For AI Chip, Device

• Fake Online Stores See A 135% Spike As Black Friday And Holiday Shopping Approaches

• Rhysida ransomware gang: We attacked the British Library

• Altman, Brockman Join Microsoft After Shock OpenAI Ouster

• AMIDES – Open-source Detection System to Uncover SIEM Blind Points

• Recognising Scam Patterns and Preventing Data Loss: A Unified Approach

• Sophos Web Appliance vulnerability exploited in the wild (CVE-2023-1671)

• LummaC2 Malware Deploys New Trigonometry-Based Anti-Sandbox Technique

• Why Defenders Should Embrace a Hacker Mindset

• Understanding the UK government’s new cybersecurity regime, GovAssure

• Resecurity partners with University of Jeddah to improve cybersecurity education

• Navigating the Waters of AI: Safeguarding Against Data Security Risks

• Ransomware group wants to partner up with government, files SEC complaint against its victim

• K-12 Schools Improve Protection Against Online Attacks, but Many Are Vulnerable to Ransomware Gangs

• US Announces $70 Million Cybersecurity Boost for Rural, Municipal Utilities

• 250 Organizations Take Part in Electrical Grid Security Exercise

• How are Crypto Phishing Scams Done, and How Do You Avoid Them?

• DarkGate Internals

• Now a Stock Market business hires hackers

• Secretary Fined For Accessing Scores of Patient Records

• Shear Takes Over As OpenAI Interim Chief, Promises Independent Probe

• Change Variance: How Tiny Differences Can Impact Your IT World

• Phishing Trends Examined by the SANS Institute

• The dark side of Black Friday: decoding cyberthreats around the year’s biggest shopping season

• Randstorm Exploit: Bitcoin Wallets Created b/w 2011-2015 Vulnerable to Hacking

• Russia’s APT29 Targets Embassies With Ngrok and WinRAR Exploit

• CVE-2023-46604 (Apache ActiveMQ) Exploited to Infect Systems With Cryptominers and Rootkits

• Critical AI Tool Vulnerabilities Let Attackers Execute Arbitrary Code

• US teenager pleads guilty to his role in credential stuffing attack on a betting site

• DarkCasino joins the list of APT groups exploiting WinRAR zero-day

• NCSC Announces New Standard For Indicators of Compromise

• ‘123456’ Crackable in seconds, 2023’s Most Prevalent Password

• A week in security (November 13 – November 19)

• A Detection and Response Benchmark Designed for the Cloud

• Leveraging Sandbox and Threat Intelligence Feeds to Combat Cyber Threats

• Gang of 5 Employees Stole The Customer Data at Late Night in Office

• OracleIV DDoS Botnet Alert: Secure Your Docker Engine APIs

• Indian Hack-for-Hire Group Targeted U.S., China, and More for Over 10 Years

• 9 Black Friday cybersecurity deals you don’t want to miss

• How effective compensation makes a difference with cyber talent retention

• MFA under fire, attackers undermine trust in security measures

• Smaller businesses embrace GenAI, overlook security measures

• Outsmarting cybercriminals is becoming a hard thing to do

• Only 9% of IT budgets are dedicated to security

• Your password hygiene remains atrocious, says NordPass

• CrowdStrike Extends AI Approach to Cybersecurity to SMBs

• Four Years and a Pandemic Later: Have Agencies Become Cloud Smart?

• Embracing Zero Trust Architecture: A Critical Best Practice for Cybersecurity in Enterprises

• Crypto Scammers Exploit Gaza Crisis, Deceiving Users in Donation Scam

• Insider Risk Digest: Week 45-46

• IT Security News Daily Summary 2023-11-19

• SSE vs. Traditional Security Models – The Variances

• AI/ML Tools Uncovered with 12+ Vulnerabilities Open to Exploitation

• Toyota Acknowledges Security Breach After Medusa Ransomware Threatens to Leak Data

• Android’s Privacy Boost: Google Unveils ‘Private Spaces’ Feature to Safeguard Photos and Data

• Security Affairs newsletter Round 446 by Pierluigi Paganini – INTERNATIONAL EDITION

• Bengaluru Police Bust Rs 854 Crore Cyber Fraud

• Bing Chat Rebrands to ‘Copilot’: What is New?

• How to Protect Your Black Friday and Cyber Monday Shopping

• 8Base ransomware operators use a new variant of the Phobos ransomware

• Week in review: Juniper devices compromised, great corporate security blogs, MITRE D3FEND

• Network Segmentation Guide: Essential Security Best Practices Revealed

• Microsoft’s Purview: A Leap Forward in AI Data Security

• Dark Effects of Bot Attacks that Drive 73% of Internet Traffic

• AI Demystified: Unraveling Artificial Intelligence (AI)

Generated on 2023-11-26 23:59:48.125148