"Human vs. Non-Human Identity in SaaS."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 07 March 2024, 1402 UTC.

Content and Source:  https://feedly.com/i/collection/content/user/f401222a-bca6-4c45-9cc1-183f239e8d86/category/7737d3c9-5fe2-4b34-8708-85e57085f895 ("Security News Bundle").

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security News Bundle

24

MOST POPULAR

Human vs. Non-Human Identity in SaaS

34The Hacker News / 2h

In today's rapidly evolving SaaS environment, the focus is on human users. This is one of the most compromised areas in SaaS security management and requires strict governance of user roles and permissions, monitoring of privileged users, their level of activity (dormant, active, hyperactive), their type (internal/ external), whether they are joiners, movers, or leavers, and more. Not

Critical TeamCity Vulnerability Exploitation Started Immediately After Disclosure

Supply Chain Compromise (Enterprise T1195)

•

SecurityWeek / 2h

•

CVE-2024-27198 & 1 other

Critical TeamCity authentication bypass vulnerability CVE-2024-27198 exploited in the wild after details were disclosed. The post appeared first on SecurityWeek .

Snake, a new Info Stealer spreads through Facebook messages

3 TTPs

•

Security Affairs / 54min

•

Python-based Snake malware targets Facebook users

Threat actors are using Facebook messages to spread a Python-based information stealer dubbed Snake, researchers warn. Cybereason researchers warn that threat actors are utilizing Facebook messages to spread the Snake malware, a Python-based information stealer. The researchers noticed that the threat actors are maintaining three different Python Infostealer variants. Two of these variants are re

TODAY

FBI: U.S. lost record $12.5 billion to online crime in 2023

BleepingComputer / 1h

FBI's Internet Crime Complaint Center (IC3) has released its 2023 Internet Crime Report, which recorded a 22% increase in reported losses compared to 2022, amounting to a record of $12.5 billion. [...]

Belgian ale legend Duvel’s brewery borked as ransomware halts production

Duvel halts beer production ransomware

•

The Register – Security / 1h

Company reassures public it has enough beer, expects quick recovery before weekend Belgian beer brewer Duvel says a ransomware attack has brought its facility to a standstill while its IT team works to remediate the damage.…

Cyber Insights 2024: A Dire Year for CISOs?

SecurityWeek / 1h

The role of the CISO continuously evolves in tandem with the growing reliance on cybersecurity as a business enabler. But it is possible that the SEC has pitched a curveball with its increasing assertiveness? The post appeared first on SecurityWeek .

Critical TeamCity flaw now widely exploited to create admin accounts

3 TTPs

•

BleepingComputer / 1h

•

CVE-2024-27198 & 1 other

Hackers have started to exploit the critical-severity authentication bypass vulnerability (CVE-2024-27198) in TeamCity On-Premises, which JetBrains addressed in an update on Monday. [...]

National intelligence agency of Moldova warns of Russia attacks ahead of the presidential election

Russia plans to sabotage Moldova's EU referendum

•

Security Affairs / 1h

The national intelligence agency of Moldova warns of hybrid attacks from Russia ahead of the upcoming elections. The Moldovan national intelligence agency warns of hybrid attacks from Russia ahead of the upcoming elections. 2024 is a crucial year for Moldova; like more than 70 other countries worldwide, it will go to the polls, and the outcome will also determine the request to join the European

Fidelity Investments Notifying 28,000 People of Data Breach

Fidelity Investments Life data breach

•

SecurityWeek / 2h

Fidelity says 28,000 individuals were impacted by data breach at third-party services provider Infosys McCamish System. The post appeared first on SecurityWeek .

China-Linked Cyber Spies Blend Watering Hole, Supply Chain Attacks

9 TTPs

•

Dark Reading / 3h

The nation-state group compromised the website of a Tibetan festival and a software application to target user systems in Asia.

Ex-Google Engineer Arrested for Stealing AI Technology Secrets for China

Former Google engineer indicted for stealing AI

•

73The Hacker News / 3h

The U.S. Department of Justice (DoJ) announced the indictment of a 38-year-old Chinese national and a California resident of allegedly stealing proprietary information from Google while covertly working for two China-based tech companies. Linwei Ding (aka Leon Ding), a former Google engineer who was arrested on March 6, 2024, "transferred sensitive Google trade secrets and other confidential

YESTERDAY

New Python-Based Snake Info Stealer Spreading Through Facebook Messages

2 TTPs

•

91The Hacker News / 5h

Facebook messages are being used by threat actors to a Python-based information stealer dubbed Snake that’s designed to capture credentials and other sensitive data. “The credentials harvested from unsuspecting users are transmitted to different platforms such as Discord, GitHub, and Telegram,” Cybereason researcher Kotaro Ogino said in a technical report. Details about the campaign&

CISA adds Apple iOS and iPadOS memory corruption bugs to its Known Exploited Vulnerabilities Catalog

Security Affairs / 5h

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple iOS and iPadOS memory corruption vulnerabilities to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog : CVE-2024-23225 Apple iOS and iPadOS Memory Corruption Vulnerability CVE-20

Linux Malware targets misconfigured misconfigured Apache Hadoop, Confluence, Docker, and Redis servers

7 TTPs

•

Security Affairs / 5h

•

Linux malware targets Docker

A new Linux malware campaign campaign is targeting misconfigured Apache Hadoop, Confluence, Docker, and Redis instances. Researchers from Cado Security observed a new Linux malware campaign targeting misconfigured Apache Hadoop, Confluence, Docker, and Redis instances. The threat actors behind this campaign employed previously undetected payloads, including four Golang binaries that are used to a

VMware urges emergency action to blunt hypervisor flaws

The Register – Security / 6h

Critical vulns in USB under ESXi and desktop hypervisors found by Chinese researchers at cracking contest Hypervisors are supposed to provide an inviolable isolation layer between virtual machines and hardware. But hypervisor heavyweight VMware by Broadcom yesterday revealed its hypervisors are not quite so inviolable as it might like.…

Here’s something else AI can do: expose bad infosec to give cyber-crims a toehold in your organization

225,000 ChatGPT credentials compromised

•

21The Register – Security / 7h

Singaporean researchers note rising presence of ChatGPT creds in Infostealer malware logs Stolen ChatGPT credentials are a hot commodity on the dark web, according to Singapore-based threat intelligence firm Group-IB, which claims to have found some 225,000 stealer logs containing login details for the service last year.…

Watch Out for Spoofed Zoom, Skype, Google Meet Sites Delivering Malware

7 TTPs

•

68The Hacker News / 7h

•

Fraudulent websites distribute Android RATs

Threat actors have been leveraging fake websites advertising popular video conferencing software such as Google Meet, Skype, and Zoom to deliver a variety of malware targeting both Android and Windows users since December 2023. “The threat actor is distributing Remote Access Trojans (RATs) including SpyNote RAT for Android platforms, and NjRAT and DCRat for Windows

US lawmakers want ByteDance to divest TikTok or face a ban

RESTRICT Act proposed TikTok ban

•

The Register – Security / 7h

The American mind must not be at the mercy of Chinese algorithms A group of US lawmakers introduced legislation on Tuesday that, if passed, would force Chinese internet concern ByteDance to divest TikTok – its most valuable property – or see it banned in the US.…

CISO Sixth Sense: NIST CSF 2.0's Govern Function

Dark Reading / 9h

2024 will redefine CISO leadership while acknowledging the management gap.

Lawsuit claims gift card fraud is the gift that keeps on giving, to Google

The Register – Security / 11h

Play Store commissions are a nice little earner, wherever they come from Google has been accused of profiting from gift card scams.…

Unveiling Earth Kapre aka RedCurl’s Cyberespionage Tactics With Trend Micro MDR, Threat Intelligence

IoC > 1 domain, 7 URLs, and 2 IPs

•

Trend Micro Research, News and Perspecti... / 11h

•

12 TTPs

This blog entry will examine Trend Micro MDR team's investigation that successfully uncovered the intrusion sets employed by Earth Kapre in a recent incident, as well as how the team leveraged threat intelligence to attribute the extracted evidence to the cyberespionage threat group.

Smashing Security podcast #362: Ransomware fraud, pharmacy chaos, and suicide

Graham Cluley / 12h

Is there any truth behind the alleged data breach at Fortnite maker Epic Games? Who launched the ransomware attack that caused a fallout at pharmacies? And what’s the latest on the heart-breaking hack of Finnish therapy clinic Vastaamo? All this and much much more is discussed in the latest edition of the “Smashing Security” podcast … Continue reading ""

Chinese chap charged with stealing Google’s AI datacenter secrets

Former Google engineer indicted for stealing AI

•

The Register – Security / 13h

Moonlighted for PRC companies after side-stepping Big G's security, allegedly A now-former Google employee has been charged with stealing the ad giant’s AI trade secrets while quietly working for two Chinese companies – after easily defeating whatever security controls Big G had in place.…

PetSmart warns of credential stuffing attacks trying to hack accounts

2 TTPs

•

BleepingComputer / 13h

Pet retail giant PetSmart is warning some customers their passwords were reset due to an ongoing credential stuffing attack attempting to breach accounts. [...]

END OF FEED