IT Security News Daily Summary 2023-09-12

• Risk & Repeat: Big questions remain on Storm-0558 attacks

• China’s Winnti APT Compromises National Grid in Asia for 6 Months

• Appeals Court Upholds Public.Resource.Org’s Right to Post Public Laws and Regulations Online

• Grab those updates: Microsoft flings out fixes for already-exploited bugs

• Spring Authentication With MetaMask

• Federal Judge Upholds State Department Rule Requiring Visa Applicants to Disclose Social Media Information

• Adobe fixed actively exploited zero-day in Acrobat and Reader

• Microsoft, Adobe fix zero-days exploited by attackers (CVE-2023-26369, CVE-2023-36761, CVE-2023-36802)

• The Role of Threat Modeling in Software Development: A Cybersecurity Perspective

• Why GraphQL API Security Is Unique

• Five ways CISOs are using AI to protect their employees’ digital devices and identities

• Check Point: Hackers Are Dropping USB Drives at Watering Holes

• Critical Google Chrome Zero-Day Bug Exploited in the Wild

• Zero Day Summer: Microsoft Warns of Fresh New Software Exploits

• Israeli Hospital Hit By Ransomware Attack, 1TB Data Stolen

• Sentra enhances data classification engine with LLMs to tackle data complexity and AI security

• Kingston launches IronKey D500S, a hardware-encrypted USB flash drive

• IBM Adds Data Security Broker to Encrypt Data in Multiclouds

• Chrome’s Invasive New Tracking Sparks Need for a New Browser

• OpenSSL 1.1.1 reaches end of life for all but the well-heeled

• Intel Capital Bets on Zenity for Low-Code/No-Code Security

• ChatGPT Jailbreaking Forums Proliferate in Dark Web Communities

• GCX launches GNSX in partnership with Palo Alto Networks

• Netskope joins MXDR by Deloitte to expand strategic alliance

• GroupSense Tracelight Fuse empowers MSPs and MSSPs to automate remediation actions

• Unpacking the New National Cybersecurity Strategy: Key Takeaways for Developers and Security Experts

• Check Point: Hackers Dropping Physical USB Drives at Watering Holes

• Adobe Says Critical PDF Reader Zero-Day Being Exploited

• Millions of Facebook Business Accounts Bitten by Python Malware

• EFF Award Winner: Signal Foundation

• AP Stylebook Data Breach: Associated Press Warns That The Breach Led to Phishing Attacks

• Resilient networks: Building blocks of modern Cybersecurity architecture

• AT&T Cybersecurity serves as critical first responder during attack on municipality

• TikTok Sister Site Douyin Expands China Food Delivery

• Las Vegas Slot Machines Shut Down By MGM Resorts Hack

• Windows 10 and 11 in S Mode: What Is It and Should You Use It?

• A new Repojacking attack exposed over 4,000 GitHub repositories to hack

• Charming Kitten Snares Unpatched Exchange Servers

• Looks Like MGM Resorts Just Got Hacked

• Google Patches Chrome 0-Day Reported By Apple, Spyware Hunters

• Thousands Of Code Packages Vulnerable To Repojacking Attacks

• Huge DDoS Attack Against US Financial Institution Thwarted

• New Sponsor Malware Attacking Government & Healthcare Organizations

• Generative AI Adoption Surges in Software Development Despite Security Risks, Sonatype Research Finds

• CTERA Vault safeguards against risks related to data tampering

• Swissbit introduces iShield Archive memory card that protects sensitive information

• Wing and Drata join forces to ensure a way to keep SaaS compliant

• Publisher’s Spotlight: F5: Multi-Cloud Security and Application Delivery

• China’s Move Towards Automated Data Security Compliance

• Windows Systems Targeted in Multi-Stage Malware Attack

• Zenity strives to keep no-code/low-code apps secure

• Don’t Leave Cybersecurity to Chance

• Overconfident Organisations Prone to Cyber Breaches, Study Finds

• Salt Security Appoints New Senior Vice President, Corporate and Business Development

• What Is Managed Extended Detection and Response (MXDR)?

• Behind the Wheel, Under Surveillance: The Privacy Risks of Modern Cars

• Here’s How Hackers Sell and Trade Your Data in the Metaverse

• Unveiling the DarkGate Malware Phishing Attack on Microsoft Teams

• Vishing Scams: Here’s How to Spot & Defend Against Them

• WEBINAR: 5 Reasons Why Zero Trust Network Access (ZTNA) Triumphs Over VPN

• UK Researchers Develop Train AI To Aid Air-Traffic Controllers

• Google’s Chrome gets caught with its WebP down, offers hasty patch-up

• Dreamforce 2023: Salesforce Expands Einstein AI and Data Cloud Platform

• Thousands of Code Packages Vulnerable to Repojacking Attacks

• Cyber-criminals “Jailbreak” AI Chatbots For Malicious Ends

• Zenity strives to keep no code/low code apps secure

• Ransomware gang says it has hit International Joint Commission

• Security Breaches Are On The Rise, Here’s How Verified Identities Can Help

• New 2023 SANS DevSecOps Survey Explores DevSecOps Challenges And Trends

• Why Data Theft Is Now The #1 Cybersecurity Threat Keeping IT Pros Awake At Night

• Trua integrates with Apple Wallet to eliminate the need for physical documents

• Netcraft acquires FraudWatch to deliver online brand protection at scale

• Gigamon Precryption technology reveals concealed threat activity in the cloud

• Research: Majority Of UK, Ireland Businesses Already Using AI

• Iranian Cyberspies Deployed New Backdoor to 34 Organizations

• Vector Embeddings – Antidote to Psychotic LLMs and a Cure for Alert Fatigue?

• The Double-Edged Sword of Cyber Espionage

• Exploring Virtual Mobile Numbers: Benefits and Uses (2023)

• Dangers of Deep Sea Phishing – A Dive Into a Real-World Attack

• Dangers of Deep Sea Phishing

• New Alibaba Group Chief Targets AI, Users As Core Priorities

• Top 10 SaaS Security Checklist in 2023

• Check Point Research reports a large-scale phishing attack targeting over 40 Colombian based companies

• 6 simple cybersecurity rules to live by

• ICS Patch Tuesday: Critical CodeMeter Vulnerability Impacts Several Siemens Products

• ‘Anonymous Sudan’ Sets Its Sights on Telegram in DDoS Attack

• HiddenLayer raises $50M for its AI-defending cybersecurity tools

• BEC Attack Roundup: Thread Hijack Edition

• HPE Aruba Networking enhancements improve network security for SMBs

• Endace collaborates with Elastic to accelerate cyber threat response

• Patch Management Policy: A Practical Guide

• Industry Experts React to DARPA’s AI Cyber Challenge

• DFIR Company Binalyze Raises $19 Million in Series A Funding

• Court Convicts Portuguese Hacker in Football Leaks Trial and Gives Him a 4-Year Suspended Sentence

• Cleafy Raises €10 Million for Online Banking Fraud Prevention Platform

• Finding Your Way in Cloud Security

• China-Linked ‘Redfly’ Group Targeted Power Grid

• MGM Resorts Hit By Cyber-Attack, Systems Down

• Critical GitHub Vulnerability Exposes 4,000+ Repositories to Repojacking Attack

• MGM Resorts hit by a cyber attack

• Cars Have Terrible Data Privacy

• Requests via Facebook Messenger lead to hijacked business accounts

• Entrust names Jordan Avnaim as CISO

• Silicon UK In Focus Podcast: The Value of the Virtual

• Apple Extends Qualcomm Deal As Modem Efforts Continue

• Sophisticated Phishing Campaign Deploying Agent Tesla, OriginBotnet, and RedLine Clipper

• Chinese Redfly Group Compromised a Nation’s Critical Grid in 6-Month ShadowPad Campaign

• 7 Steps to Kickstart Your SaaS Security Program

• AuthMind raises seed funding for its identity SecOps platform

• Almost One in Three Parents Have Never Spoken to Their Children About Cybersecurity

• MemDive AI Engine Prevents Malicious Payloads from Evading Security Measures

• Fighting Individual Ransomware Strains Fruitless, UK Agencies Suggest

• Over Half of UK Population Supportive of UK Government and Allies Breaking International Cybersecurity Law

• Ragnar Locker Claims Israel Hospital Cyberattack

• Apple To Introduce iPhone 15 Amidst Market Share Gains

• Hacker Group Infrastructure That Uses Weaponized MS Word Docs Uncovered

• Netcraft Acquires FraudWatch to Cement Leadership in Cybercrime Detection & Takedown; Delivers Online Brand Protection at Scale Supported by 24/7 Security Operations Center

• Redfly Group Compromises National Power Grid

• China-Linked Hackers Breached a Power Grid—Again

• Chrome zero-day exploited in the wild, patch now! (CVE-2023-4863)

• Anonymous Sudan launched a DDoS attack against Telegram

• Google Patches Chrome Zero-Day Reported by Apple, Spyware Hunters

• US Government Ordered to Urgently Patch Apple Zero-Day Bugs

• Life in the Clouds: Navigating Security Challenges in Cloud Environments

• IT Staff Systems and Data Access Policy

• Want a New Job? Explore Opportunities at the 10 Top US Startup Ecosystems

• Europol: Financial Crime Makes “Billions” and Impacts “Millions”

• The Role of Random Number Generators (RNGs) in Online Casino Games

• Free Download Manager backdoored – a possible supply chain attack on Linux machines

• Need to improve the detection capabilities in your security products?

• Beware of Fake Browser Updates that Install Malware on Systems

• Thales 2023 Data Threat Report: The Increased Telco Cybersecurity Challenges in the 5G Era

• Beware: MetaStealer Malware Targets Apple macOS in Recent Attacks

• Iranian Charming Kitten APT targets various entities in Brazil, Israel, and the U.A.E. using a new backdoor

• Cyber Attack on MGM Hotel Group

• Google Rushes to Patch Critical Chrome Vulnerability Exploited in the Wild – Update Now

• Companies need to rethink how they implement identity security

• Strategies for harmonizing DevSecOps and AI

• 17 free AWS cybersecurity courses you can take right now

• MGM Resorts is facing ‘ongoing’ cyber incident that sent reservation and booking systems offline

• Azure vs. AWS Developer Tools Guide

• CIS SecureSuite membership: Leverage best practices to improve cybersecurity

• Bruschetta-Board: Multi-protocol Swiss Army knife for hardware hackers

• CISOs need to be forceful to gain leverage in the boardroom

• MGM Resorts is facing ‘ongoing’ cyberattack that sent reservation and booking systems offline

• How to Watch Apple’s iPhone 15 Launch, and What to Expect

• These Prisoners Are Training AI

• Yes, There’s a New Covid Variant. No, You Shouldn’t Panic

• FDA approves and authorizes updated COVID boosters for everyone 6 months and up

• Millions of cheap Android TV boxes come pre-infected with botnet malware

• Not too big: Machine learning tames huge data sets

• Understanding HTTPS Spoofing: A Deceptive Online Threat

• How to Predict Customer Churn Using SQL Pattern Detection

• A week in security (September 4 – September 10)

• The main causes of ransomware reinfection

• Wyze home cameras temporarily show other people’s security feeds

• Re-air: What teenagers face growing up online: Lock and Code S04E19

• Weekly Vulnerability Recap – Sept. 11, 2023 – Android Update Fixes 33 Vulnerabilities

• GOOGLE FIXED THE FOURTH CHROME ZERO-DAY OF 2023

• DISA STIG for Red Hat OpenShift is now available

• Save the Children feared hit by ransomware, 7TB stolen

• Google and Acalvio Partner to Deliver Active Defense to Protect Customers From Advanced Threats

• World Security Report Finds Physical Security Incidents Cost Companies USD $1T in 2022

• MGM Resorts shuts down website, computer systems after ‘cybersecurity incident’

• IT Security News Daily Summary 2023-09-11

• Cloudflare Announces Unified Data Protection Suite to Address Risks of Modern Coding and Increased AI Use

• MGM Resorts Confirms ‘Cybersecurity Issue’, Shuts Down Systems

• Iran’s Charming Kitten Pounces on Israeli Exchange Servers

• Find the right cybersecurity learning platform for your team

• MGM Resorts shuts down computer systems after ‘cybersecurity incident’

• ‘Steal-It’ Campaign Uses OnlyFans Models As Lures

• Being Flexible Can Improve Your Security Posture

• Arkansas Lawmakers Could Wreck A 50-Year-Old FOIA Law This Week

• US Marks 22 Years Since 9/11 Terrorist Attacks

• CISA adds recently discovered Apple zero-days to Known Exploited Vulnerabilities Catalog

• Arkansas Shouldn’t Use a Hastily-Called Special Session To Make FOIA Less Functional

• Vulnerability Summary for the Week of September 4, 2023

• Security by Design and Default – How to Address the Cybersecurity Challenge

• Cisco VPN flaw faces attempted Akira ransomware attacks

• EFF Award Winner: Library Freedom Project

• Huge DDoS attack against US financial institution thwarted

• OneTrust Data Governance Review (2023): Features & Pricing

• Iranian APT Hits US Aviation Org via ManageEngine, Fortinet Bugs

• MGM Resorts blames ‘cybersecurity issue’ for ongoing outage

• Microsoft Teams Used To Spread Burgeoning DarkGate Malware

• Active North Korean Campaign Targets Security Researchers

• Bookstore Chain Dymocks Discloses Data Breach Possibly Impacting 800k

• Apple Patches Two Pegasus Spyware Zero Days

• Apple users warned to update their devices after University of Toronto researchers expose spyware

• Do you really need to tell FedEx your Social Security number? How to avoid package-delivery scams

• Making Life Easier for Developers: How Fastly’s Edge Cloud Platform Simplifies App Security for Developers

• Why You Should Nominate Wellbeing Advocates for the 2023 Unsung Heroes Awards

• Cisco: Leadership Awareness Fuels the Booming Identity Market

• Cuba Ransomware Group Unleashes Undetectable Malware

• Tenable to acquire Ermetic for $265 million

• Top blockchain Cybersecurity threats to watch out for

• Hive0117 Group Attacking Employees of Energy, Finance, & Software Industries

• CodeSecure: ‘ASTORS’ Homeland Security Nominee CodeSentry

• How to develop a cloud backup ransomware protection strategy

• Lazarus Group Targets macOS in Supply Chain Assault

• FBI and White House likely coerced social media platforms into removing posts, appeals court rules

• How to make sure the reputation of your products and company is good

• Intel Pushes Nvidia Chip Competition Amidst AI Frenzy

• The Top Cybersecurity Risks in Agile Software Development

• Pentagon Urges Collaboration in Cyber Defense

• Facebook Drops News Projects In EU, UK

• Notepad++ v8.5.7 Released: Fix for 4 Security Vulnerabilities

• Attackers Abuse Google Looker Studio to Evade DMARC, Email Security

• Navigating Rwanda’s New Data Protection Law

• Charming Kitten’s New Backdoor ‘Sponsor’ Targets Brazil, Israel, and U.A.E.

• Vietnamese Hackers Deploy Python-Based Stealer via Facebook Messenger

• Online Hackers Target Microsoft Teams to Propagate DarkGate Malware

• Landmark Google US Antitrust Case Heads For Court

• Why keep Cybercom and the NSA’s dual-hat arrangement?

• After Microsoft and X, Hackers Launch DDoS Attack on Telegram

• Board Members Struggling to Understand Cyber Risks

• Facebook Privacy Settlement May Be The Largest Class Action Suit In US History

• Overcoming the Rising Threat of Session Hijacking

• API Expanding Attack Surfaces: 74% Reporting Multiple Breaches – Approov Comments

• Janssen Pharmaceutical’s CarePath Application Data Breach Exposes Personal Information

• Board And CISO Disconnect on Cybersecurity Preparedness ‘Rings Alarm Bells’– Expert Comments

• August 2023’s Most Wanted Malware: New ChromeLoader Campaign Spreads Malicious Browser Extensions while QBot is Shut Down by FBI

• Charming Kiten’s New Backdoor ‘Sponsor’ Targets Brazil, Israel, and U.A.E.

• Fortinet partners with Wiz to help enterprises protect their cloud environments

• Crypto Bot Trading: What It Is and Successful Strategies

• Square says daylong outage caused by DNS error

• UK and US sanctioned 11 members of the Russia-based TrickBot gang

• Malice in the mail

• Blockchain’s Role in Reinventing ATM Security: A Game-Changer in Banking

• Chinese Battery Maker Gotion To Build $2bn Illinois Plant

• A Comprehensive Approach To Enhancing IoT Security With Artificial Intelligence

• Associated Press Stylebook Users Targeted in Phishing Attack Following Data Breach

• Bookstore Chain Dymocks Discloses Data Breach Possibly Impacting 800k Customers

• 0xPass raises $1.8M from Balaji Srinivasan and others to build secure login systems for web3

• Cyber Security Today, Sept. 11, 2023 – Warnings from Cisco, a huge DDoS attack and more MOVEit and ransomware victims

• Hackers Using Microsoft Teams to Deliver DarkGate Malware Via HR-themed Messages

• How to Prevent API Breaches: A Guide to Robust Security

• SecuX Shield BIO enhances crypto security

• Microsoft Teams users targeted in phishing attack delivering DarkGate malware

• Ransomware targets over 5000 government email addresses

• Killware vs. Ransomware: Key Differences

• Avoid Using Atlas VPN Until A Fix Arrives For The Zero-Day

• Apple Patched Two iOS Zero-Day Flaws Exploited In BLASTPASS

• Spies, Hackers, Informants: How China Snoops on the West

• FBI Blames North Korean Hackers for $41 Million Stake.com Heist

• Ransomware Attack Wipes Out Four Months of Sri Lankan Government Data

• AI Chatbots Are Invading Your Local Government—and Making Everyone Nervous

• Google Chrome Rolls Out Support for ‘Privacy Sandbox’ to Bid Farewell to Tracking Cookies

• Navigating PAM Implementation Risks: A Comprehensive Guide for CISOs

• Rise In Digital Scams And How To Avoid Them?

• Ant Group Launches Finance-Focused AI Large Language Model

• Vulnerabilities Allow Hackers to Hijack, Disrupt Socomec UPS Devices

• Apple Shares Slide After China Ban Reportedly Broadened

• New HijackLoader malware is rapidly growing in popularity in the cybercrime community

• What Is Token-Based Authentication?

• 10 Mistakes in Cybersecurity and How to Avoid Them

• OT Security: Risks, Challenges and Securing your Environment

• What Is Container Security? Complete Guide

• From Caribbean shores to your devices: analyzing Cuba ransomware

• Protect Your Data With the MonoDefense Security Suite for $149.99

• IT Systems Encrypted After UK School Hit By Ransomware

• From ERMAC to Hook: Investigating the technical differences between two Android malware variants

• AP Stylebook Breach May Have Hit Hundreds of Journalists

• Evil Telegram Mods Removed From Google Play

• Cybercriminals Using PowerShell to Steal NTLMv2 Hashes from Compromised Windows

• Some of TOP universities wouldn’t pass cybersecurity exam: left websites vulnerable

• Viva Air – 932,232 breached accounts

• Software developers, how secure is your software?

• EFF Welcomes Erica Astrella and Yoshi Kohno to Its Board of Directors

• What is digital domestic abuse?

• Hackers Exploit Zero-Day Flaw in Software Used by Resorts and Hotels

• New HijackLoader Modular Malware Loader Making Waves in the Cybercrime World

• Evil Telegram campaign: Trojanized Telegram apps found on Google Play

• The blueprint for a highly effective EASM solution

• CISOs and board members work more closely than ever before

• Elevating API security to reinforce cyber defense

• Email forwarding flaws enable attackers to impersonate high-profile domains

• Empowering consumer privacy with network security

• Understanding the dangers of social engineering

• Google warns infoseccers: Beware of North Korean spies sliding into your DMs

• Chrome’s “Enhanced Ad Privacy”: What you need to know

Generated on 2023-09-12 23:55:22.754516