IT Security News Weekly Summary – Week 35

• IT Security News Daily Summary 2023-09-03

• Why CISOs Should Prioritize Cloud Security and Access Management During Digital Transformation Initiatives

• Default Passwords Lead to Hacking Incidents Among LogicMonitor Customers

• PoC exploit code released for CVE-2023-34039 bug in VMware Aria Operations for Networks

• The SEC demands more transparency about Cybersecurity incidents in public companies

• New Privacy Policy: X Plans on Collecting Users’ Biometric Data

• Rare Technique Deployed by Android Malware to Illicitly Harvest Banking Data

• Loan App Executive Asks BJP Legislator to Repay Loan That He Never Borrowed

• Threat of Fake Signal and Telegram Apps: Protecting Your Privacy and Security

• 3 Vital Cybersecurity Threats for Employees

• What is Software Localization: Everything You Need to Know!

• Security Affairs newsletter Round 435 by Pierluigi Paganini – International edition

• Chinese Chipmaker Accelerates Tool Replacement Amidst Sanctions

• How to Remove Your Personal Info From Google by Using Its ‘Results About You’ Tool

• China’s Baidu Introduces ChatGPT Rival Ernie Bot

• Championing cybersecurity regulatory affairs with Nidhi Gani

• How to Use Proton Sentinel to Keep Your Accounts Safe

• FBI Disrupts Qakbot (QBot) Malware Network – Frees Victim PCs

• Week in review: 11 search engines for cybersecurity research, PoC for RCE in Juniper firewall released

• Cyber Security Management System (CSMS) for the Automotive Industry

• LockBit ransomware gang hit the Commission des services electriques de Montréal (CSEM)

• PoC Exploit Released for Critical VMware Aria’s SSH Auth Bypass Vulnerability

• The Intersection of OT and IT: Why Unified Cybersecurity is More Important than Ever.

• New Facebook Privacy Setting Lets You Ask For Your Data Not To Be Used For AI Training

• IT Security News Daily Summary 2023-09-02

• VMConnect Supply Chain Attack Persists

• UN Reports: Hundreds of Thousands Coerced into Working in Online Scams

• Why Sharing Boarding Pass Pictures on Social Media Is a Privacy Risk, Warns Expert

• Why Next-Generation Firewalls are Essential for Modern Network Security

• Chinese Smishing Triad Gang Hits US Users in Extensive Cybercrime Attack

• Social engineering attacks target Okta customers to achieve a highly privileged role

• 2 Polish Men Arrested for Radio Hack That Disrupted Trains

• Maker of ‘smart’ chastity cage left users’ emails, passwords, and locations exposed

• Meta Publishes FACET Dataset to Assess AI Fairness

• Generative AI: A Catalyst for Enterprise IT & Security Challenges

• X, AKA Twitter, To Collect Biometric And Employment Data

• VMConnect Campaign Linked To North Korea’s Lazarus Group

• Hacker Gains Admin Control Of Sourcegraph And Gives Free Access

• More Okta Customers Trapped In Scattered Spider’s Web

• Cybercrime To Cost Germany 206 Billion Euros In 2023, Survey Finds

• How Technology Can Identify Problematic Workers ─ 10 Useful Tips and Tools

• Cops drill into chat apps, sink plot to smuggle tons of coke into Europe

• Build or Buy your own antivirus product

• Nmap 7.94 Released: What’s New!

• CISA:Notorious Chisel Android Malware Steals Data and Monitors Traffic

• CISA Report on Notorious Chisel Android Malware that Steals Data and Monitors Traffic

• Okta Warns of Social Engineering Attacks Targeting Super Administrator Privileges

• Promptmap – Tool to Test Prompt Injection Attacks on ChatGPT Instances

• A firsthand perspective on the recent LinkedIn account takeover campaign

• Exploit Code Published for Critical-Severity VMware Security Defect

• Talos wars of customizations of the open-source info stealer SapphireStealer

• Friday Squid Blogging: We’re Genetically Engineering Squid Now

• IT Security News Daily Summary 2023-09-01

• ReasonLabs Summer 2023 Trends Report Reveals Top Consumer Security Threats

• Lacework Expands Partnership With Google Cloud to Deliver Enterprise Flexibility in the Cloud

• AI for Good: Voxel AI Tech Increases Funding to $30M With Strategic Funding Round

• Inaugural Pwn2Own Automotive Contest Dangles $1M for Car Hackers

• More Okta customers trapped in Scattered Spider’s web

• Cyber Security Today, Week in Review for the week ending September 1, 2023

• MSSQL Databases Under Fire From FreeWorld Ransomware

• US Government Denies Blocking Sales of AI Chips to Middle East

• UK’s NCSC Warns Against Cybersecurity Attacks on AI

• Key Group Ransomware Foiled by New Decryptor

• Will the AI Arms Race Lead to the Pollution of the Internet?

• Forever 21 Systems Hacked: 500,000+ Users Affected

• NYC Subway Disables Trip-History Feature Over Tap-and-Go Privacy Concerns

• Popular ‘As-a-Service’ Operations Have Earned Cybercriminals over $64m

• When Will Robots Take Over Your Household Chores?

• OpenAI’s ChatGPT accused of GDPR breaches

• Preparing for the Future: Understanding Identity’s Role in Data Security

• Hackers infiltrate servers of Japanese Government Cybersecurity Agency

• Why is .US Being Used to Phish So Many of Us?

• Smishing Triad: China-Based Fraud Network Exposed

• Dive into the Deep Sea: A View of the Subsea Cable Ecosystem

• Threat Actors Targeting Microsoft SQL Servers to Deploy FreeWorld Ransomware

• Esteemed Cybersecurity PR Agency Turns 28

• OpenAI’s GPTBot Faces Media Backlash in France Over Data Collection Fears

• GhostSec: Hacktivist Breach Iranian Surveillance Software

• Flight Data Issues Trigger UK Air Traffic Control Failure

• Open-Source Malware SapphireStealer Expands

• New Study Reveals Airbnb as a Haven for Cybercrime

• How To Check Office Files for Macros Using Java

• If you like your Flipper Zero, then you’ll love this

• UNRAVELING EternalBlue: inside the WannaCry’s enabler

• The best security keys of 2023: Expert tested and reviewed

• Lidl recalls Paw Patrol snacks after website on packaging displayed porn

• Proposed SEC Cybersecurity Rule Will Put Unnecessary Strain on CISOs

• Researchers released a free decryptor for the Key Group ransomware

• A Conversation with OmniIndex’s James Stanbridge on Diversity, Equity and Inclusion in Tech Recruitment

• Sourcegraph’s Website Breached by Threat Actors

• Massive attack

• Sophisticated Cyber-Espionage Group Earth Estries Exposed

• Allowing cybercriminals to drive your car: 5 Tips for Keeping Your Electric Vehicle Secure

• Free Decryptor Available for ‘Key Group’ Ransomware

• In Other News: Hacking Encrypted Linux Computers, Android Fuzzing, Skype Leaking IPs

• From frustration to clarity: Embracing Progressive Disclosure in security design

• Tesla Faces Federal Probes Over Elon Musk Glass House – Report

• How the FBI took down the notorious Qakbot botnet

• North Korea-linked APT Labyrinth Chollima behind PyPI supply chain attacks

• Cyber Security Today, Sept. 1, 2023 – Celebrate Women in Cyber Security

• US Denies Restricting AI Chip Sales To Middle East

• Hackers Exploit Openfire Vulnerability To Deploy Kinsing Malware

• Spyware Vendor Hacked

• TechRepublic Premium Editorial Calendar: Policies, Checklists, Hiring Kits and Research for Download

• Threat Actors Adopt, Modify Open Source ‘SapphireStealer’ Information Stealer

• Industry Reactions to Qakbot Botnet Disruption: Feedback Friday

• Elon Musk Says X, Formerly Twitter, Will Have Voice and Video Calls, Updates Privacy Policy

• Malicious Generative AI Tools. Buzz, Threat, and Solution

• SapphireStealer: A New Open-Source Information Stealer Malware to Look Out For

• Firefox Browser Enhances Email Security with New Built-in Tools

• X To Collect Biometric Data, Employment, Education History

• Russian State-Backed ‘Infamous Chisel’ Android Malware Targets Ukrainian Military

• International Women in Cyber Security Day: Slow progress

• Adobe ColdFusion Critical Vulnerabilities Exploited Despite Patches

• New SuperBear Trojan Emerges in Targeted Phishing Attack on South Korean Activists

• How Ducktail capitalizes on compromised business, ad accounts

• DAST vs. SAST: Which Security Testing Method Will Keep You Safer?

• New MMRAT Android Malware Runs Sneaky Campaigns

• BadBazaar Malware Attacking Android Users via Weaponized Telegram & Signal Apps

• Over $1 Million Offered at New Pwn2Own Automotive Hacking Contest

• Sourcegraph Discloses Data Breach Following Access Token Leak

• Pathways into Cyber: Transitioning from Healthcare to the Cybersecurity Frontier

• Revisiting 16shop Phishing Kit, Trend-Interpol Partnership

• New Targeted Smishing Campaign Attacking the US Citizens to Steal Payment Data

• How to create a password-protected PDF with LibreOffice

• Classiscam Scam-as-a-Service Raked $64.5 Million During the COVID-19 Pandemic

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows?

• Ransomware-as-a-Service (RaaS) – The Rising Threat to Cybersecurity

• Anonymous Sudan launched Cyber Attack on X formerly Twitter

• How to obtain cyber resilience in low security budgets

• Silicon UK Pulse: Your Tech News Update: Episode 16

• Fake Signal and Telegram apps – Week in security with Tony Anscombe

• Understand the fine print of your cyber insurance policies

• Cybercriminals use research contests to create new attack methods

• New infosec products of the week: September 1, 2023

• Battling malware in the industrial supply chain

• Mobile threat defense or bust

• Exploring the traits of effective chief audit executives

• Enterprise security challenges for CNI organizations: Overview of security challenges

• Improving containerization security with Red Hat OpenShift

• IT & OT security: How to Bridge the Gap

• Qakbot botnet infrastructure suffers major takedown

• Prompt injection could be the SQL injection of the future, warns NCSC

• Fashion retailer Forever 21 data breach impacted +500,000 individuals

• Good news for Key Group ransomware victims: Free decryptor out now

• Types of ransomware and a timeline of attack examples

• Introducing SafeUTM: The Free Version of NGFW

• Cygna Labs Corp. Announces Expansion of its DNS Firewall Service

• National Cybersecurity Alliance Receives 200K Grant From Craig Newmark Philanthropies for HBCU Cybersecurity Program

• Russia-linked hackers target Ukrainian military with Infamous Chisel Android malware

• Publisher’s Spotlight: Arctic Wolf: Security Operations Cloud and Concierge Delivery Model

• IT Security News Monthly Summary – September

• IT Security News Daily Summary 2023-08-31

• UN: Southeast Asia Gangs Are Trafficking Cybercrime Workers

• 3 out of 4 Cyberattacks in the Education Sector Are Associated With a Compromised On‑Premises User or Admin Account

• Insurance Costs Rise, Coverage Shrinks, But Policies Remain Essential

• Apple’s Decision to Kill Its CSAM Photo-Scanning Tool Sparks Fresh Controversy

• Cybercriminals Team Up to Upgrade ‘SapphireStealer’ Malware

• Kremlin-backed Sandworm strikes Android devices with data-stealing Infamous Chisel

• UK Agrees to Support Kuwait’s Cybersecurity Center

• Publisher’s Spotlight: Normalyze: Data Security for Everything You Build and Run in The Cloud

• Cisco Patched Multiple NX-OS And FXOS Vulnerabilities

• Paramount Admits Data Breach – Report

• Hackers Launch MiTM Attack to Bypass VMware Tools SAML Authentication

• Apple iPhone 14 Pro Offered Up to the Hacking Masses

• Paramount, Forever 21 Data Breaches Set Stage for Follow-On Attacks

• Forever 21 data breach affects half a million people

• Deploying AI Code: Safety Goggles Needed

• Assessing Generative AI’s Impact on Cyber Risk

• How companies can get a grip on ‘business email compromise’

• Ransomware Gangs are Evolving: Cryptocurrency Flaws Could be Their Next Target

• FBI Leads Takedown Of Qakbot Malware Infecting 700,000 Computers

• 10 best antivirus software for businesses in 2023

• 5 ways CISOs can prepare for generative AI’s security challenges and opportunities

• Leveraging AT&T Cybersecurity Consulting for a robust Zero Trust Center of Excellence

• Hackers Exploit Adobe ColdFusion Vulnerabilities to Deploy Malware

• Do you need an anti-spy camera finder and bug detector? How they work

• LogicMonitor customers hit by hackers, because of default passwords

• Navigating privacy in a data-driven world with Microsoft Priva

• BYOD Security Gap: Survey Finds 49% of European Firms Unprotected

• Akira Ransomware gang targets Cisco ASA without Multi-Factor Authentication

• Plug these vulnerabilities in VMware, Cisco products

• New Russian Android malware targets Ukraine’s military devices: Report

• LockBit Ransomware targets a province in Quebec Canada

• Publisher’s Spotlight: Cycode: Secure Code to Cloud – Application Security Posture Management (ASPM) at Scale

• Max Schrems’ Noyb Files Privacy Complaint Against Fitbit

• CockroachDB TIL: Volume 13

• 4 Zoom alternatives with better video conferencing privacy policies

• New Research Exposes Airbnb as Breeding Ground For Cybercrime

• PagerDuty strengthens analytics capabilities and expands generative AI offerings

• AgentSmith HIDS – Host Based Intrusion Detection

• Elon Musk’s X To Offer Audio, Video Calling

• Vulnerability in WordPress Migration Plugin Exposes Websites to Attacks

• Energy Department Offering $9M in Cybersecurity Competition for Small Electric Utilities

• Risk & Repeat: Digging into Microsoft security criticisms

• Cyberattackers Swarm OpenFire Cloud Servers With Takeover Barrage

• The Power of Threat Intelligence in Cyber Defense

• Barracuda Thought It Drove 0-Day Hackers From Customer Networks

• Claroty’s 2023 Global Healthcare Cybersecurity Study Exposes Widespread Vulnerabilities and Impact

• Google Cloud Introduces Duet AI To Revolutionize Cybersecurity Operations

• Alert fatigue: A 911 cyber call center that never sleeps

• SapphireStealer Malware: A Gateway to Espionage and Ransomware Operations

• Malwarebytes lays off 100 employees ahead of business split

• Palo Alto Networks Empowers MSPs with Prisma SASE Enhancements

• FBI Dismantles QakBot Botnet In Largest-Ever Cybercrime Operation

• Rackspace has Spent $11 Million on Ransomware Cleanup So Far

• Emerging Phishing Campaigns Aim FTX Users After Kroll Data Breach

• Boosting Business Efficiency: OpenAI Launches ChatGPT for Enterprises

• Multiple Splunk Enterprise Flaws Let Attackers Execute Arbitrary Code

• Applications and SaaS Plugins: Data Exfiltrations

• A Brief History of ICS-Tailored Attacks

• IBM partners with Salesforce to drive productivity and growth with generative AI

• Weaknesses in Cisco ASA SSL VPNs Exploited Through Brute-Force Attacks

• Apple Preparing iPhone 14 Pro Phones for 2024 Security Research Device Program

• Adversaries Ride RocketMQ Bug to DreamBus Bot Resurgence

• North Korean Hackers Deploy New Malicious Python Packages in PyPI Repository

• Microsoft To Unbundle Teams To Satisfy EU Antitrust Concerns

• Splunk Patches High-Severity Flaws in Enterprise, IT Service Intelligence

• Five Eyes Report: New Russian Malware Targeting Ukrainian Military Android Devices

• Facebook Accounts Targeted by Vietnamese Threat Groups

• Chinese Group Spreads Android Spyware via Trojan Signal, Telegram Apps

• 3 out of 4 cyberattacks in the education sector are associated with a compromised on premises user or admin account

• Cisco VPNs with no MFA enabled hit by ransomware groups

• The Best FPS Games on Android In 2023: Popular by Demand

• Cisco BroadWorks Application Software Flaw Let Attackers conduct XSS Attack

• Harnessing Security by Adopting Zero Trust Architecture

• Numbers Don’t Lie: Exposing the Harsh Truths of Cyberattacks in New Report

• Paramount Global disclosed a data breach

• Google DeepMind Trials Watermarks For AI Images

• MalDoc in PDF Attack: Hackers Hiding Malicious Word Files within PDFs

• Lawsuit Accuses University of Minnesota of Not Doing Enough to Prevent Data Breach

• GRU Blamed for Infamous Chisel Malware Targeting Ukraine’s Military Phones

• Own Your Own Government Surveillance Van

• Google Fixes Serious Security Flaws in Chrome and Android

• Axio and Cyentia Institute join forces to boost data-driven cyber risk quantification for enterprises

• Notorious QakBot Malware Dismantled: $8.6M Seized and 700K Computers Freed

• Heimdal’s MXDR Adapt, an Innovative Adaptive Control for Enhanced Threat Detection and Response

• Zero-Day Alert! Critical Flaw in Citrix ADC and Gateway Exploited in the Wild (Updated)

• Paramount Media Hacked: Attackers Obtain Access to User Personal Information

• Earth Estries’ Espionage Campaign Targets Governments and Tech Titans Across Continents

• Trojanized Signal, Telegram apps found on Google Play, Samsung Galaxy Store

• Apple offers security researchers specialized iPhones to tinker with

• Unlocking Digital Resources: A Guide for Modern Healthcare Practitioners

• Dangling DNS Used to Hijack Subdomains of Major Organizations

• 500k Impacted by Data Breach at Fashion Retailer Forever 21

• Russian APT Intensifies Cyber Espionage Activities Amid Ukrainian Counter-Offensive

• How to add a custom problematic site block list in Opera

• Protect Your Email With This Top-Rated Tool — Just $40 for Labor Day

• National Safety Council data leak: Credentials of NASA, Tesla, DoJ, Verizon, and 2K others leaked by workplace safety organization

• Working with a Reliable Partner for Cybersecurity Success

• Multiple Flaws in ArubaOS Switches Let Attackers Execute Remote Code

• Abusing Windows Container Isolation Framework to avoid detection by security products

• Do you know what your supply chain is and if it is secure?

• The bright side of data privacy compliance: 5 value-driven opportunities for retailers

• Phished Data via CERT Poland – 67,943 breached accounts

• Dismantling Qakbot Botnet – FBI’s Largest Cyber Operation Ever

• Court asks DPC to reinvestigate massive Google Data Breach

• Pampling – 383,468 breached accounts

• What does optimal software security analysis look like?

• The power of passive OS fingerprinting for accurate IoT device identification

• ChatGPT on the chopping block as organizations reevaluate AI usage

• The secret habits of top-performing CISOs

• PlayCyberGames – 3,681,753 breached accounts

• How to Fix a Water-Damaged Phone in 7 Steps

• Google Cloud Next keynote places spotlight on firm’s GenAI efforts

• Social Security Numbers leaked in ransomware attack on Ohio History Connection

• 3 reasons why your endpoint security is not enough

• How “EDR Extra Strength” simplifies traditional EDR complexity

• FBI-Led Global Effort Takes Down Massive Qakbot Botnet

• Barracuda gateway attacks: How Chinese snoops keep a grip on victims’ networks

• Cybercriminals Already Using AI in Email Attacks, New Report Confirms

• Crooks Using Stealers and Stolen Cookies to Hack Airbnb Accounts

• Microsoft ain’t happy with Russia-led UN cybercrime treaty

• Chinese Group Spreads Android Spyware Via Trojan Signal, Telegram Apps

• IT Security News Daily Summary 2023-08-30

• biometric authentication

• How to verify encryption in Google Messages

• APT Attacks From ‘Earth Estries’ Hit Gov’t, Tech With Custom Malware

• FBI, Justice Department dismantle Qakbot malware

• Facebook Rejects Censorship Decision From Its Own Oversight Board

• Chinese GREF APT distributes spyware via trojanized Signal and Telegram apps on Google Play and Samsung Galaxy stores

• New York Times Spoofed to Hide Russian Disinformation Campaign

• Publisher’s Spotlight: CrowdSec: Real-time & Crowdsourced Protection

• A Deep Dive into OffSec Cyber Range

• Microsoft angry over Russian-led UN cybercrime treaty

• Beware: Government’s Alert on Smishing Scam Threat

• Qakbot Botnet Disrupted, Infected 700,000 Computers Globally

• How to Go Passwordless with NordPass Passkeys

• Unmasking Trickbot, One of the World’s Top Cybercrime Gangs

• Hackers Can Exploit Windows Container Isolation Framework to Bypass Endpoint Security

• With Beijing’s green light, mobility unicorns Zeekr and WeRide inch closer to US IPOs

• Why Web3 Penetration Testing is Vital for Protecting Decentralized Systems

• Google Chrome Security Update: High-Severity Vulnerability Patched

• Software Engineering in the Age of Climate Change: A Testing Perspective

• Apple Planning Major iPad Pro Upgrade – Report

• 4 Strategies to Safeguard the Finance Industry Against Deepfake Onslaught

• Harnessing the Power of Cyber Ranges: A Deep Dive into OffSec Cyber Range

• Podcast Episode Rerelease: Securing the Vote

• Navigating economic uncertainty with managed security services

• AT&T Cybersecurity wins SC Media Award for Best Threat Intelligence

• Top Challenges Threat Hunting Teams Face in 2023 and How to Overcome Them

• DarkGate Loader Delivered Through Stolen Email Threads to Lure Victims

• CrowdStrike CTO: ‘Rookie mistakes’ are hurting cloud security

• Flaw Exposes WP Migration Plugin to Hacks

• Performance-Enhanced Android MMRat Scurries onto Devices Via Fake App Stores

• Duet AI invades Google Workspace, takes notes, attends meetings, crafts email for $30/month

• Unveiling Network and Security Architectures: SD-WAN, SASE, SSE, and Zero Trust

• Enhancing Higher Education Security: The Role of Security Service Edge

• Foxconn Founder Bids To Become Taiwan’s President

• Email Authentication Protocols: SPF, DKIM, and DMARC – A Detailed Guide

• Chinese APT Group GREF Use BadBazaar in Android Espionage

• MMRat Android Trojan Executes Remote Financial Fraud Through Accessibility Feature

• Threat actors started exploiting Juniper flaws shortly after PoC release

• Barracuda Email Hack leaks government emails in America

• Meta Shuts Down Huge Chinese Disinformation Campaign

• Apple To Unveil iPhone 15 At Wonderlust Event

• iOS 16 Cheat Sheet: Complete Guide for 2023

• Healthcare Organizations Hit by Cyberattacks Last Year Reported Big Impact, Costs

• ‘Earth Estries’ Cyberespionage Group Targets Government, Tech Sectors

• Chinese Hackers Target US, Other Govts With Barracuda Flaw

• Apple Security Boss Faces iPads For Gun Permits Bribery Charge Again

• University Cuts Itself Off From Internet After Mystery Security Snafu

• Recent Juniper Flaws Chained In Attacks Following PoC Exploit Publication

• BGP Flaw Can Be Exploited For Prolonged Internet Outages

• British Officials Say AI Chatbots Could Carry Cyber Risks

• Tenable unveils web application and API scanning capabilities for Nessus Expert

• Exabeam and Google Cloud join forces to modernize security operations

• ComplyCube Field Redaction removes sensitive fields from documents

• 47,000 London Metropolitan Police Personnel Impacted by Data Breach

• Ransomware Vendetta: Rhysida Group Strikes Prospect Medical, Warns of Auctioning Stolen Data

• Duolingo Data Breach: Hackers Posts Scrapped Data on Hacking Forum

• Should Senior IT Professionals Be Accountable for Professional Decisions?

• Ransomware Actor Linked to Attacks Against Citrix NetScaler System

• Google Urges Gmail Users Set Up 2FA for Enhanced Security

• China-Linked BadBazaar Android Spyware Targeting Signal and Telegram Users

• Recent Juniper Flaws Chained in Attacks Following PoC Exploit Publication

• When Apps Go Rogue

• Korea Blockchain Week 2023: Presenting Web3’s Leading Voices

• Hackers Exploiting Juniper RCE Flaw Following PoC Release

• Cost of a data breach 2023: Financial industry impacts

• In Airbnb, Cybercriminals Find a Comfortable Home for Fraud

• Netskope Proactive DEM enables organizations to anticipate potential problems

• Stealthy Android Malware Attacking Mobile Users Via Fake App Stores

• Why are we seeing such a huge demand for AI at the moment?

• BGP Flaw Can Be Exploited for Prolonged Internet Outages

• GitHub Enterprise Server Gets New Security Capabilities

• Malicious npm Packages Aim to Target Developers for Source Code Theft

• How to Prevent ChatGPT From Stealing Your Content & Traffic

• NCSC issues warning over chatbot cyber risks

• VMware fixes critical vulnerability in Aria Operations for Networks (CVE-2023-34039)

• MixMode enhances Generative AI Platform to improve threat detection

• The removal of Qakbot from infected computers is just the first step

• Cyber Security Today, August 30, 2023 – More ransomware and MOVEit attack numbers, and an attack on a Rust repository

• No More Band-Aids: It’s Time for IT and OT Security Convergence

• NCSC Warns Over AI Chatbot Cyber Risks

• FBI-Led Operation Duck Hunt Shuts Down QakBot Malware

• Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New Exploits

• QVANTUM Expands into the US Market, Empowering Precise Workforce Planning with Customized Cost Solutions

• Fianu Labs Emerges From Stealth With $2 Million in Seed Funding

• High-Severity Memory Corruption Vulnerabilities Patched in Firefox, Chrome

• DreamBus Botnet Exploiting RocketMQ Vulnerability to Delivery Cryptocurrency Miner

• How Quantum Computing Will Impact Cybersecurity

• Critical RCE flaw impacts VMware Aria Operations Networks

• Meter collaborates with Cloudflare to launch DNS Security

• Met Police Contractor Hack Places Officer Data At Risk

• OpenAI Promises Enterprise-Grade Security with ChatGPT for Business

• Enhancing Cybersecurity: How XDR Software Empowers CISOs

• DreamBus Malware Exploits Unpatched RocketMQ Servers

• Earth Estries Targets Government, Tech for Cyberespionage

• NCSC Issues Cyber Warning Over AI Chatbots

• IT threat evolution in Q2 2023

• IT threat evolution in Q2 2023. Mobile statistics

• IT threat evolution in Q2 2023. Non-mobile statistics

• Google launches tool to identify AI-generated images

• GhostSec Claim Breaching Iranian Govt Surveillance Software Tool

• Block Unwanted Calls With AI for Just $50 Until Labor Day Sale Ends 11:59 PM PST 9/4

• With Beijing’s greenlight, mobility unicorns Zeekr and WeRide inch closer to US IPOs

• An evolved LockBit variant emerges

• What is Static Network Address Translation?

• Understanding Firewalls – Types, Configuration, and Best Practices for Effective Network Security

• Updated NCSC Report Highlights Key Threats for the UK Legal Sector

• FBI: Operation ‘Duck Hunt’ dismantled the Qakbot botnet

• Threat Actors Abuse Google Groups to Send Fake order Notifications

• Why performing security testing on your products and systems is a good idea

• Critical Vulnerability Alert: VMware Aria Operations Networks at Risk from Remote Attacks

• Hackers Can Exploit Skype Vulnerability to Find User IP Address

• Hackers Abuse Azure AD Abandoned Reply URLs to Escalate Privilege

• The Latest in Cybersecurity Incidents making to Google Headlines

• Decoding the Naming Conventions of Ransomware Malware

• How to protect your personal data when using ChatGPT and generative AI

• FBI Dismantles QakBot Malware, Frees 700,000 Computers, Seizes $8.6 Million

• How Thales and Red Hat Secure Kubernetes Data in a 5G World

• Is the new OWASP API Top 10 helpful to defenders?

• Volatility Workbench: Empowering memory forensics investigations

• Velociraptor: Open-source digital forensics and incident response

• A closer look at the RFI on open-source software security

• Toyota Japan back on the road after probably-not-cyber attack halted production

• Rising cyber incidents challenge healthcare organizations

• Qakbot Botnet Disrupted in Operation ‘Duck Hunt’

• Meta reckons China’s troll farms could learn proper OpSec from Russia’s fake news crews

• Meal delivery service PurFoods announces major data breach

• Cisco VPNs without MFA are under attack by ransomware operator

• “An influx of Elons,” a hospital visit, and magic men: Becky Holmes shares more romance scams: Lock and Code S04E18

• FBI confirms Barracuda patch is not effective for exploited ESG appliances

• 6 Ways AI Can Revolutionize Digital Forensics

• Everest Group Research: C-Suite Must Recognize Critical Difference Between Cybersecurity and Cyber Resilience

• Facebook Announces Takedown Of World’s Largest Spam Campaign

• Delinea Research Reveals a Cyber Insurance Gap

• Unpatched Citrix NetScaler Devices Targeted by Ransomware Group FIN8

• SPHERE Appoints Former Johnson & Johnson CISO Marene Allison to Board of Directors

• TechCrunch Disrupt 2023 Startup Battlefield 200: AI and Security edition

• University cuts itself off from internet after mystery security snafu

• IT Security News Daily Summary 2023-08-29

• PurFoods Mom’s Meals Reports Data Breach Exposing Social Security Numbers of Over 1.2 Million Consumers

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Check Point Shares Analysis of Qakbot Malware Group

• Operation ‘Duck Hunt’: Qakbot Malware Disrupted, $8.6 Million in Cryptocurrency Seized

• Meta Cripples China’s Massive ‘Spamouflage’ Influence Op

• MOVEit Was a SQL Injection Accident Waiting to Happen

• Sprawling Qakbot Malware Takedown Spans 700,000 Infected Machines

• Qakbot – the takedown and the remediation

• UNC4841 threat actors hacked US government email servers exploiting Barracuda ESG flaw

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Apple security boss faces iPads-for-gun-permits bribery charge… again

• Microsoft Teams attack exposes collab platform security gaps

• FBI-led Operation Duck Hunt shoots down Qakbot

• Authorities take down Qakbot infrastructure, issue commands to delete the malware

• When kids fly the nest, secure your digital nest eggs

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• VMware Patches Major Security Flaws in Network Monitoring Product

• ISPs Should Not Police Online Speech—No Matter How Awful It Is.

• The Other Russian War – What Can We Do?

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Quantum threats loom in Gartner’s 2023 Hype Cycle for data security

• DEF CON Generative AI Hacking Challenge Explored Cutting Edge of Security Vulnerabilities

• Cisco VPNs under attack via Akira, LockBit ransomware

• IT audit (information technology audit)

• The Most Devastating Data Breaches of the Decade

• Microsoft: Chinese APT Flax Typhoon uses legit tools for cyber espionage

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• U.S. Hacks QakBot, Quietly Removes Botnet Infections

• Somalia Orders ISPs to Block Telegram and TikTok

• South African Department of Defence Denies Stolen Data Claims

• Qakbot botnet disrupted, malware removed from 700,000+ victim computers

• Bridging AI and Ethics: Comprehensive Solutions in Healthcare Implementation

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Rackspace Faces Massive Cleanup Costs After Ransomware Attack

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Google Applies Generative AI Tools to Cloud Security

• OpenAI Turns to Security to Sell ChatGPT Enterprise

• New ‘MMRat’ Android Trojan Targeting Users in Southeast Asia

• Mom’s Meals issues “Notice of Data Event”: What to know and what to do

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• FBI operation tricked thousands of computers infected by Qakbot into uninstalling the malware

• In an Attack on WebDetective’s Servers, Hackers Deleted Victim Data

• Check Point Software: XDR Leader in Frost Radar™ 2023 Report

• Addressing Cybersecurity’s Talent Shortage & Its Impact on CISOs

• Android Goes All-in on Fuzzing

• Is Cybersecurity as a Service (CSaaS) the answer: Move faster | Do more

• New MMRat Android Trojan Uses Fake App Stores for Bank Fraud

• Role of C# in Building Dynamic and Secure Web Applications

• Abnormal Security: Microsoft Tops List of Most-Impersonated Brands in Phishing Exploits

• Okta for Global 2000 gives CEOs flexibility to centralize or decentralize their business strategy

• Tanium Vulnerability Risk and Compliance for ServiceNow accelerates security investigations

• Descope unveils third-party connectors for no-code app journey personalization

• Mom’s Meals Warns of Major Data Breach Affecting Over 1.2 Million Individuals

• Worldcoin: Ldcoin’s Token Value Falls by More Than 50% as Privacy Concerns Grow

• critical infrastructure

• LockBit 3.0 Ransomware Variants Surge Post Builder Leak

• More UK Cops’ Names And Photos Exposed In Supplier Breach

• Meta Fights Sprawling Chinese Spamouflage Operation

• Cybersecurity Experts Say The West Has Failed To Learn Lessons From Ukraine

• Google Tests Watermark To Identify AI Images

• US Spy Satellite Agency Isn’t So Silent About New Silent Barker Mission

• Criminals hack radio commands to stop Poland Trains

• How to turn on Private DNS Mode on Android (and why you should)

• New Ransomware Campaign Targets Citrix NetScaler Flaw

• Nordic Users Targeted by National Danish Police Phishing Attack

• How to Manage XDR Alerts with Heimdal

• What’s new in Gartner’s Hype Cycle for data security in 2023

• Kroll’s Crypto Breach Highlights SIM-Swapping Risk

• DarkGate Malware Activity Spikes as Developer Rents Out Malware to Affiliates

• Chinese Hacking Group Exploits Barracuda Zero-Day to Target Government, Military, and Telecom

• Mom’s Meals says data breach affects 1.2 million customers

• Hackers infiltrated Japan’s National Center of Incident Readiness and Strategy for Cybersecurity (NISC) for months

• Police Federation: Metropolitan IT System Breach Could Have Serious Consequences

• Chinese APT Was Prepared for Remediation Efforts in Barracuda ESG Zero-Day Attack

• UN Warns Hundreds of Thousands in Southeast Asia Roped Into Online Scams

• Did Microsoft Just Upend the Enterprise Browser Market?

• The Reality of Cyberinsurance in 2023

• Report Reveals Growing Disparity in Cyber Insurance Landscape

• The UK and the US Build a ‘Data Bridge’ to Facilitate Personal Data Movements

• SAP and Google Cloud join forces to provide customers with generative AI capabilities

• Fortinet enhances its SASE solution to help organizations prevent data leaks

• LogRhythm and Cimcor collaborate to enhance cyberattack protection for organizations

• Quid Pro Quo Attacks: Cyber Threat to Watch Out For

• Barracuda email gateways in US, Canadian government departments hit: Report

• Mom’s Meals Breached: Over 1.2 Million Consumers Data Exposed

• Here’s What Your Breach Response Plan Might Be Missing

• Can a private internet co-exist with the internet we know?

• Cyberattacks Targeting Government Agencies on the Rise

• Meta Fights Sprawling Chinese ‘Spamouflage’ Operation

• Black Hat USA 2023 NOC: Network Assurance

• Google debuts Duet AI to tackle new cybersecurity challenges in the cloud

• Personal, Health Information of 1.2 Million Stolen in PurFoods Ransomware Attack

• The Weird, Big-Money World of Cybercrime Writing Contests

• Swissbit introduces D1200 data center SSD

• Ransomware group exploits Citrix NetScaler systems for initial access

• Ciphertex strengthens data security with SecureNAS CX-160KSSD-X

• Meta says it has disrupted a massive disinformation campaign linked to Chinese law enforcement

• Security Team Huddle: Using the Full NIST Cybersecurity Framework for the Win

• Survey Provides Takeaways for Security Pros to Operationalize their Remediation Life Cycle

• Google is bringing generative AI to its security tooling

• More UK cops’ names and photos exposed in supplier breach

• Identity Theft from 1965 Uncovered through Face Recognition

• Easy-to-exploit Skype vulnerability reveals users’ IP address

• Cisco partners with Nutanix to accelerate hybrid multicloud deployments

• Intel Says Upcoming Data Centre Chip More Than Doubles Efficiency

• Judge Looks To Decertify Google Play Class-Action Lawsuit

• Microsoft Power Platform API Threatened Due To Reply URL Flaw

• How To Hide Browsing History – Complete Guide

• Microsoft Warns of Adversary-in-the-Middle Uptick on Phishing Platforms

• Citrix NetScaler Alert: Ransomware Hackers Exploiting Critical Vulnerability

• FIN8-linked actor targets Citrix NetScaler systems

• Start-Up Xpeng Buys Didi Global’s Electric Car Unit

• BYD Reports 200 Percent EV Profit Jump Amidst Tesla Price War

• Four in Five Cyber-Attacks Powered by Just Three Malware Loaders

• Which Is Better For File Security: Cloud Or NAS Backup?

• How to Implement an XDR Software?

• Two Men Arrested Following Poland’s Railway System Signals Hack

• OpenAI Launches ChatGPT For Large Businesses

• EV Start-Up VinFast Becomes Third Most Valuable Automaker

• Silicon UK In Focus Podcast: Your Virtual Strategy

• WHICH IS BETTER FOR FILE SECURITY: CLOUD OR NAS BACKUP?

• Need to improve the detection capabilities in your security products?

• Hong Kong-Licensed Crypto Exchange Accepts Retail Investors

• Microsoft Edge Privilege Escalation Flaw – Update Now!

• Japan’s JPCERT warns of new ‘MalDoc in PDF’ attack technique

• Phishing-as-a-Service Gets Smarter: Microsoft Sounds Alarm on AiTM Attacks

• How Do Microsoft Azure and Amazon AWS Differ From One Another?

• Rackspace spends $10m in ransomware cleanup costs

• 11 search engines for cybersecurity research you can use right now

• Is the cybersecurity community’s obsession with compliance counter-productive?

• What makes a good ASM solution stand out

• ProxyNation: The dark nexus between proxy apps and malware

• IT leaders alarmed by generative AI’s SaaS security implications

• 4 Popular Cybersecurity Myths vs. Facts

• How to Protect Your CI/CD Pipeline

• Book Review: Effective Threat Investigation for SOC Analysts

• 5 Effective Web Design Strategies to Increase Your ROI

• A week in security (August 21 – August 27)

• 2.6 million DuoLingo users have scraped data released

• Google strengthens its Workplace suite protection

• Antivirus Software: The Best Deals, Coupons and Discounts

• Poland Arrests 2 Suspected Hackers for Train Disruption

• OpenAI Debuts ChatGPT Enterprise, Touting Better Privacy for Business

• Apple, Long a Critic of Right to Repair, Comes Out in Support of California Bill

• Health, payment info for 1.2M people feared stolen from Purfoods in IT attack

• IT Security News Daily Summary 2023-08-28

• OpenAI Debuts ChatGPT Enterprise, touting better privacy for business

• BreachLock Intelligence Report Reveals Critical Insights From Thousands of Penetration Tests

• Honeywell to Acquire SCADAfence, Strengthening Its Cybersecurity Software Portfolio

• Motherboard Mishaps Undermine Trust, Security

• Attackers can discover IP address by sending a link over the Skype mobile app

• Cybercriminals Harness Leaked LockBit Builder in Wave of New Attacks

• Imperva Clinches 2023 SC Media Trust Award for Best Database Security Solution: A Back-to-Back Victory

• Navigating the Challenges of Selective Data Extraction and Migration in Company Acquisitions

• 10 Keys To Securing Software Release and Delivery

• 8 Best Identity and Access Management (IAM) Solutions for 2023

• Vulnerability Summary for the Week of August 21, 2023

• Weekly Vulnerability Recap – August 28, 2023 – Windows, Ivanti, Adobe Hit By Flaws

• Cyber Centre again warns Canadian firms not to ignore cybercrime

• Researchers published PoC exploit code for Juniper SRX firewall flaws

• AI-Powered SOC Automation: A New Era in Security Operations

• ISACA

• Financial Firms Breached in MOVEit Cyberattacks Now Face Lawsuits

• Publisher’s Spotlight: ZeroFox: Protecting You Beyond Your Perimeter

• API Breaches Are Rising: To Secure the Future, We Need to Learn from the Past

• Reducing the Productivity Tax in Open Source Software Security – A Deep Dive with Varun Badhwar of Endor Labs

• Met Police Investigates Alleged Data Breach of Officer Information

• What is Software Asset Management? And why you should care

• Shadow APIs and Zombie APIs are Common in Every Organizations’ Growing API Attack Surface

• School District Sues Facebook For Allegedly Harming Children’s Mental Health

• London Police Warned to Stay Vigilant Amid Major Data Breach

• 3 ransomware detection techniques to catch an attack

• Should companies make ransomware payments?

• Enterprise dark web monitoring: Why it’s worth the investment

• Honeywell’s acquisition of cybersecurity provider sets sights on manufacturing sector’s deep IoT vulnerabilities

• Acquisition Chatter Swirls Around SentinelOne, BlackBerry

• 5 Ways to Prepare for Google’s 90-Day TLS Certificate Expiration

• Experts Uncover How Cybercriminals Could Exploit Microsoft Entra ID for Elevated Privilege

• Biden’s IoT Cybersecurity initiative

• San Antonio’s Top Five Cybersecurity Companies To Know

• Malware loader lowdown: The big 3 responsible for 80% of attacks so far this year

• How can Small Businesses Protect Themselves From Cyber Threats?

• Smoke Loader Uses New Whiffy Recon Malware To Triangulate Device Locations

• Understanding the E-Commerce Marketplaces in Europe

• Navigating London’s Free Electric Car Charging Points

• Lockbit 3.0 Builder Leaked: Anyone Can Blend Ransomware

• Hackers Embed Weaponized Word File into a PDF to Evade Detection

• Developers Beware: Malicious Rust Libraries Caught Transmitting OS Info to Telegram Channel

• NightOwl App is Targeting Older Macs to Siphon User Data

• How to make sure the reputation of your products and company is good

• Cyber Attack blame to UK Airspace Chaos

• Authentication Outage Underscores Why ‘Fail Safe’ Is Key

• Global Privacy Agencies Urge Social Media to Protect User Data from Scraping

• Scarab Ransomware Toolkit: Unveiling the Ingenious Weaponry

• Cryptocurrency Giants FTX, BlockFi, and Genesis Hit by Kroll Hack

• Reply URL Flaw Allowed Unauthorized MS Power Platform API Access

• Advanced analytics can help detect insider threats rapidly

• Signs of Malware Attack Targeting Rust Developers Found on Crates.io

• 10 Million Likely Impacted by Data Breach at French Unemployment Agency

• LockBit Code Leak Sparks Wave Of RaaS Attacks

• Malware Attack Targeting Rust Developers Found On Crates.io

• Best Practices To Prevent Organizational Data Theft From Employees

• Legal Liability for Insecure Software Might Work, but It’s Dangerous

• Kroll SIM-Swapping Attack Causes Data Breach at 3 Top Crypto Firms

• Rhysida ransomware group claims the hack of Prospect Medical

• Virtual Closet Assistant: How Technology Can Guide Your Outfit Decisions

• The Investing Club’s top 10 things to watch in the stock market Monday

• Hackers Exploited WinRAR Zero-Day To Target Traders

• Jupiter X Core Plugin Flaws Threatened 172K Websites With Account Hijacking

• Leaseweb Hosting Provider Admits Security Breach Following Downtime

• Two Men Arrested Following Poland Railway Hacking

• 3 Malware Loaders Detected in 80% of Attacks: Security Firm

• Kroll SIM-swap attack: FTX, BlockFi and Genesis clients’ info exposed

• August 2023 Web Server Survey

• Cyberattacks Targeting E-commerce Applications

• UK Air Traffic Control System Collapses, Causing Travel Chaos

• Ohio History Organization Says Personal Information Stolen in Ransomware Attack

• Leaseweb Reports Cloud Disruptions Due to Cyberattack

• Updated Kmsdx botnet targets IoT devices

• Remotely Stopping Polish Trains

• Three Persistent Data Security Challenges Organizations Need To Address Now

• PoC for no-auth RCE on Juniper firewalls released

• Innovative Tools For Online Casino Operators: Boosting Efficiency And User Enjoyment

• Cyber Security Today, August 28, 2023 – SIM card swap led to a Kroll data breach, supplier hack led to a London police data theft, and more

• French Unemployment Agency Announces a Data Breach

• Rise in UK IT degree applicants driven by AI advances

• Ericsson Expects $1bn In IP Revenue After Huawei Deal

• Instacart Reports Revenue Surge Ahead Of IPO

• Hackers Disruptred Poland’s Railway System Signals

• Chinese Chip Equipment Maker Sees Profits Surge

• India ‘Considering’ Tesla Tax Deal To Open Domestic EV Market

• Chinese Tech Firms ‘Shut Down’ Livestream Features Amidst Crackdown

• ECB Official Says Banks Must Be Protected In Digital Euro Launch

• US Treasury Publishes Proposed Crypto Tax Rules

• What is The Network and Information Security 2 Directive (NIS2)?

• How Improved Visibility Helps Achieve Compliance

• 3 Cryptocurrency Firms Suffer Data Breach After Kroll SIM Swapping Attack

• E-learning Across Generations: How Different Age Groups Embrace Online Education?

• Massive MOVEit campaign already impacted at least 1,000 organizations and 60 million individuals

• Software developers, how secure is your software?

• Cisco Nexus 3000 and 9000 Series Switches Flaw Let Attackers Trigger DoS Attack

• Malware Unleashed: Public Sector Hit in Sudden Surge, Reveals New Research

• Better SaaS Security Goes Beyond Procurement

• Data Breach of London Metropolitan Police turns serious

• Best Practices to safeguard Data Across Hybrid Cloud Environments

• KmsdBot Malware Gets an Upgrade: Now Targets IoT Devices with Enhanced Capabilities

• Experts demand clarity as they struggle with cloud security prioritization

• What true diversity in the cybersecurity industry looks like

• Adapting authentication to a cloud-centric landscape

• Uncovering a privacy-preserving approach to machine learning

• Whiffy malware stinks after tracking location via Wi-FI

• Microsoft publishes mitigation instructions for Downfall vulnerability in Windows

• Customizing LLMs for domain-specific tasks

• The Billion Dollar Problem: Securing Business Communication in the Financial Sector

• The Industrial Control Systems and The Internet of Things

• Taiwanese infosec researchers challenge Microsoft’s China espionage finding

• Poland’s authorities investigate a hacking attack on country’s railways

• Leaked LockBit 3.0 ransomware builder used by multiple threat actors

• IT Security News Weekly Summary – Week 34

• IT Security News Daily Summary 2023-08-27

• Rhysida Ransomware Group: Social Security Numbers, Passport Data Compromised in Recent Hospital Attack

• IT Contractor Data Breach Affects 47,000 Met Police Personnel

• Why generative AI is a double-edged sword for the cybersecurity sector

• Security Affairs newsletter Round 434 by Pierluigi Paganini – International edition

• The Cheap Radio Hack That Disrupted Poland’s Railway System

• The weaponization of AI: How businesses can balance regulation and innovation

• Introducing China’s First Blockchain-Based Data Exchange, Revolutionizing Web3 Data Trading

• Here’s How AI Can Revolutionize the Law Practice

• Rapid Ransomware Dwell Time and Persistent RDP Vulnerabilities

• Recovered Stolen Mercedes Offers Glimpse into Hijackers’ Tactics

• AI-Powered Fuzzing: Breaking the Bug Hunting Barrier

• The Next Step: Integrating Yara with RegRipper, pt II

• The Low-Stakes Race to Crack an Encrypted German U-Boat Message

• Cisco fixes 3 high-severity DoS flaws in NX-OS and FXOS software

• Week in review: Security Onion 2.4 released, WinRAR vulnerable to RCE

• Cyber Security Management System (CSMS) for the Automotive Industry

Generated on 2023-09-03 23:58:45.352603