IT Security News Daily Summary 2023-09-02

• VMConnect Supply Chain Attack Persists

• UN Reports: Hundreds of Thousands Coerced into Working in Online Scams

• Why Sharing Boarding Pass Pictures on Social Media Is a Privacy Risk, Warns Expert

• Why Next-Generation Firewalls are Essential for Modern Network Security

• Chinese Smishing Triad Gang Hits US Users in Extensive Cybercrime Attack

• Social engineering attacks target Okta customers to achieve a highly privileged role

• 2 Polish Men Arrested for Radio Hack That Disrupted Trains

• Maker of ‘smart’ chastity cage left users’ emails, passwords, and locations exposed

• Meta Publishes FACET Dataset to Assess AI Fairness

• Generative AI: A Catalyst for Enterprise IT & Security Challenges

• X, AKA Twitter, To Collect Biometric And Employment Data

• VMConnect Campaign Linked To North Korea’s Lazarus Group

• Hacker Gains Admin Control Of Sourcegraph And Gives Free Access

• More Okta Customers Trapped In Scattered Spider’s Web

• Cybercrime To Cost Germany 206 Billion Euros In 2023, Survey Finds

• How Technology Can Identify Problematic Workers ─ 10 Useful Tips and Tools

• Cops drill into chat apps, sink plot to smuggle tons of coke into Europe

• Build or Buy your own antivirus product

• Nmap 7.94 Released: What’s New!

• CISA:Notorious Chisel Android Malware Steals Data and Monitors Traffic

• CISA Report on Notorious Chisel Android Malware that Steals Data and Monitors Traffic

• Okta Warns of Social Engineering Attacks Targeting Super Administrator Privileges

• Promptmap – Tool to Test Prompt Injection Attacks on ChatGPT Instances

• A firsthand perspective on the recent LinkedIn account takeover campaign

• Exploit Code Published for Critical-Severity VMware Security Defect

• Talos wars of customizations of the open-source info stealer SapphireStealer

• Friday Squid Blogging: We’re Genetically Engineering Squid Now

• IT Security News Daily Summary 2023-09-01

• ReasonLabs Summer 2023 Trends Report Reveals Top Consumer Security Threats

• Lacework Expands Partnership With Google Cloud to Deliver Enterprise Flexibility in the Cloud

• AI for Good: Voxel AI Tech Increases Funding to $30M With Strategic Funding Round

• Inaugural Pwn2Own Automotive Contest Dangles $1M for Car Hackers

• More Okta customers trapped in Scattered Spider’s web

• Cyber Security Today, Week in Review for the week ending September 1, 2023

• MSSQL Databases Under Fire From FreeWorld Ransomware

• US Government Denies Blocking Sales of AI Chips to Middle East

• UK’s NCSC Warns Against Cybersecurity Attacks on AI

• Key Group Ransomware Foiled by New Decryptor

• Will the AI Arms Race Lead to the Pollution of the Internet?

• Forever 21 Systems Hacked: 500,000+ Users Affected

• NYC Subway Disables Trip-History Feature Over Tap-and-Go Privacy Concerns

• Popular ‘As-a-Service’ Operations Have Earned Cybercriminals over $64m

• When Will Robots Take Over Your Household Chores?

• OpenAI’s ChatGPT accused of GDPR breaches

• Preparing for the Future: Understanding Identity’s Role in Data Security

• Hackers infiltrate servers of Japanese Government Cybersecurity Agency

• Why is .US Being Used to Phish So Many of Us?

• Smishing Triad: China-Based Fraud Network Exposed

• Dive into the Deep Sea: A View of the Subsea Cable Ecosystem

• Threat Actors Targeting Microsoft SQL Servers to Deploy FreeWorld Ransomware

• Esteemed Cybersecurity PR Agency Turns 28

• OpenAI’s GPTBot Faces Media Backlash in France Over Data Collection Fears

• GhostSec: Hacktivist Breach Iranian Surveillance Software

• Flight Data Issues Trigger UK Air Traffic Control Failure

• Open-Source Malware SapphireStealer Expands

• New Study Reveals Airbnb as a Haven for Cybercrime

• How To Check Office Files for Macros Using Java

• If you like your Flipper Zero, then you’ll love this

• UNRAVELING EternalBlue: inside the WannaCry’s enabler

• The best security keys of 2023: Expert tested and reviewed

• Lidl recalls Paw Patrol snacks after website on packaging displayed porn

• Proposed SEC Cybersecurity Rule Will Put Unnecessary Strain on CISOs

• Researchers released a free decryptor for the Key Group ransomware

• A Conversation with OmniIndex’s James Stanbridge on Diversity, Equity and Inclusion in Tech Recruitment

• Sourcegraph’s Website Breached by Threat Actors

• Massive attack

• Sophisticated Cyber-Espionage Group Earth Estries Exposed

• Allowing cybercriminals to drive your car: 5 Tips for Keeping Your Electric Vehicle Secure

• Free Decryptor Available for ‘Key Group’ Ransomware

• In Other News: Hacking Encrypted Linux Computers, Android Fuzzing, Skype Leaking IPs

• From frustration to clarity: Embracing Progressive Disclosure in security design

• Tesla Faces Federal Probes Over Elon Musk Glass House – Report

• How the FBI took down the notorious Qakbot botnet

• North Korea-linked APT Labyrinth Chollima behind PyPI supply chain attacks

• Cyber Security Today, Sept. 1, 2023 – Celebrate Women in Cyber Security

• US Denies Restricting AI Chip Sales To Middle East

• Hackers Exploit Openfire Vulnerability To Deploy Kinsing Malware

• Spyware Vendor Hacked

• TechRepublic Premium Editorial Calendar: Policies, Checklists, Hiring Kits and Research for Download

• Threat Actors Adopt, Modify Open Source ‘SapphireStealer’ Information Stealer

• Industry Reactions to Qakbot Botnet Disruption: Feedback Friday

• Elon Musk Says X, Formerly Twitter, Will Have Voice and Video Calls, Updates Privacy Policy

• Malicious Generative AI Tools. Buzz, Threat, and Solution

• SapphireStealer: A New Open-Source Information Stealer Malware to Look Out For

• Firefox Browser Enhances Email Security with New Built-in Tools

• X To Collect Biometric Data, Employment, Education History

• Russian State-Backed ‘Infamous Chisel’ Android Malware Targets Ukrainian Military

• International Women in Cyber Security Day: Slow progress

• Adobe ColdFusion Critical Vulnerabilities Exploited Despite Patches

• New SuperBear Trojan Emerges in Targeted Phishing Attack on South Korean Activists

• How Ducktail capitalizes on compromised business, ad accounts

• DAST vs. SAST: Which Security Testing Method Will Keep You Safer?

• New MMRAT Android Malware Runs Sneaky Campaigns

• BadBazaar Malware Attacking Android Users via Weaponized Telegram & Signal Apps

• Over $1 Million Offered at New Pwn2Own Automotive Hacking Contest

• Sourcegraph Discloses Data Breach Following Access Token Leak

• Pathways into Cyber: Transitioning from Healthcare to the Cybersecurity Frontier

• Revisiting 16shop Phishing Kit, Trend-Interpol Partnership

• New Targeted Smishing Campaign Attacking the US Citizens to Steal Payment Data

• How to create a password-protected PDF with LibreOffice

• Classiscam Scam-as-a-Service Raked $64.5 Million During the COVID-19 Pandemic

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Ransomware-as-a-Service (RaaS) – The Rising Threat to Cybersecurity

• Anonymous Sudan launched Cyber Attack on X formerly Twitter

• How to obtain cyber resilience in low security budgets

• Silicon UK Pulse: Your Tech News Update: Episode 16

• Fake Signal and Telegram apps – Week in security with Tony Anscombe

• Understand the fine print of your cyber insurance policies

• Cybercriminals use research contests to create new attack methods

• New infosec products of the week: September 1, 2023

• Battling malware in the industrial supply chain

• Mobile threat defense or bust

• Exploring the traits of effective chief audit executives

• Enterprise security challenges for CNI organizations: Overview of security challenges

• Improving containerization security with Red Hat OpenShift

• IT & OT security: How to Bridge the Gap

• Qakbot botnet infrastructure suffers major takedown

• Prompt injection could be the SQL injection of the future, warns NCSC

Generated on 2023-09-02 23:55:16.969532