Security News Bundle

"Facebook ads for Windows desktop themes push info-stealing malware."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents. Accessed on 15 July 2024, 1437 UTC.

Content and Source: Feedly.com subscription-- https://feedly.com/i/collection/content/user/f401222a-bca6-4c45-9cc1-183f239e8d86/category/7737d3c9-5fe2-4b34-8708-85e57085f895

Please scroll down to read your selections. Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

14 TTPs

•

Cybercriminals use Facebook business pages and advertisements to promote fake Windows themes that infect unsuspecting users with the SYS01 password-stealing malware. [...]

HardBit ransomware version 4.0 supports new obfuscation techniques

21 TTPs

•

Security Affairs / 2h

Cybersecurity researchers detailed a new version of the HardBit ransomware that supports new obfuscation techniques to avoid detection. The new version (version 4.0) of the HardBit ransomware comes with the Binary Obfuscation Enhancement with passphrase protection. The ransomware requires the passphrase to be entered at runtime to be executed. Furthermore, additional obfuscation complicates the a

AT&T Breach Linked to American Hacker, Telecom Giant Paid $370k Ransom: Reports

SecurityWeek / 33min

The massive AT&T breach has been linked to an American hacker living in Turkey and reports say the telecom giant paid a $370,000 ransom. The post appeared first on SecurityWeek .

TODAY

One of the best soundbars I've tested is not made by Sonos or Bose (and is $200 off right now)

ZDNet | Security / 14min

The LG S95TR soundbar delivers fantastic audio quality and is packed with unique features that you'll actually use. It's $200 off during Prime Day.

My 5 favorite Best Buy Black Friday in July deals (some are better than Prime Day deals)

ZDNet | Security / 22min

Best Buy's Black Friday in July is the store's answer to Amazon Prime Day, and these tech deals are worth your time.

June Windows Server updates break Microsoft 365 Defender features

38BleepingComputer / 23min

Microsoft has confirmed that Windows Server updates from last month's Patch Tuesday break some Microsoft 365 Defender features that use the network data reporting service. [...]

How Manufacturers Can Secure Themselves Against Cyber Threats

Dark Reading / 24min

Good risk management is necessary to protect customers, ensure operational continuity, safeguard intellectual property, and maintain fiscal responsibility.

7 Tips for Navigating Cybersecurity Risks in M&As

Dark Reading / 32min

Careful planning and proactive measures can ensure smooth and secure transitions, paving the way for a successful merger or acquisition.

Data of Millions of mSpy Customers Leaked Online

mSpy data breach exposes customers

•

SecurityWeek / 33min

Over 310 GB of data from mSpy, including 2.4 million email addresses and other user data, was leaked online. The post appeared first on SecurityWeek .

IoT Security Firm Exein Raises $16.3 Million

SecurityWeek / 33min

IoT cybersecurity company Exein has raised €15 million (~$16.3 million) in a Series B funding round led by 33N. The post appeared first on SecurityWeek .

Sick of Windows or MacOS? You should check out this free, easy-to-use alternative

ZDNet | Security / 45min

GeckoLinux makes openSUSE just as user-friendly as Linux Mint and Ubuntu. Here's what to know before you try it.

Infoseccers claim Squarespace migration linked to DNS hijackings at Web3 firms

7 TTPs

•

The Register – Security / 52min

•

DeFi apps targeted in DNS attack

Company keeps quiet amid high-profile compromises Security researchers are claiming a spate of DNS hijackings at web3 businesses is linked to Squarespace's acquisition of Google Domains last year.…

Microsoft Says Windows Not Impacted by regreSSHion as Second OpenSSH Bug Is Found

2 TTPs

•

SecurityWeek / 3h

A second remote code execution vulnerability, tracked as CVE-2024-6409, was found in OpenSSH during an analysis of the regreSSHion flaw. The post appeared first on SecurityWeek .

Ukrainian Sentenced to Prison in US for Role in Zeus, IcedID Malware Operations

SecurityWeek / 3h

Vyacheslav Igorevich Penchukov was sentenced to nine years in prison for his role in the Zeus and IcedID malware operations. The post appeared first on SecurityWeek .

Global tech innovation initiative unlocks Singapore as key growth market for international startups

IT Security Guru / 3h

Plexal, the innovation company solving society’s challenges through collaboration, the Cyber Security Agency of Singapore (CSA) and National University of Singapore (NUS) have partnered for a new international initiative – CyberBoost. Extending across two streams initially, CyberBoost: Build will support innovators to build their first MVP. Meanwhile, CyberBoost: Catalyse , which is powered by Pl

10,000 Victims a Day: Infostealer Garden of Low-Hanging Fruit

27The Hacker News / 3h

Imagine you could gain access to any Fortune 100 company for $10 or less, or even for free. Terrifying thought, isn’t it? Or exciting, depending on which side of the cybersecurity barricade you are on. Well, that’s basically the state of things today. Welcome to the infostealer garden of low-hanging fruit. Over the last few years, the problem has grown bigger and bigger, and only now are we

CRYSTALRAY Hackers Infect Over 1,500 Victims Using Network Mapping Tool

10 TTPs

•

32The Hacker News / 3h

A threat actor that was previously observed using an open-source network mapping tool has greatly expanded their operations to infect over 1,500 victims. Sysdig, which is tracking the cluster under the name CRYSTALRAY, said the activities have witnessed a 10x surge, adding it includes "mass scanning, exploiting multiple vulnerabilities, and placing backdoors using multiple [open-source software]

Time for businesses to move past generative AI hype and find real value

ZDNet | Security / 4h

Organizations must focus on digital resilience to embrace the transformational potential of emerging technology.

YESTERDAY

Rabbit r1's AI assistant has secretly been storing user chats that can't be deleted

Rabbit R1 updates address security flaws

•

ZDNet | Security / 5h

A new software update will fix an issue that could let someone see r1 chat logs, photos, and more.

Singapore Banks to Phase Out OTPs for Online Logins Within 3 Months

9 TTPs

•

54The Hacker News / 6h

•

Singapore banks phase out OTPs

Retail banking institutions in Singapore have three months to phase out the use of one-time passwords (OTPs) for authentication purposes when signing into online accounts to mitigate the risk of phishing attacks. The decision was announced by the Monetary Authority of Singapore (MAS) and The Association of Banks in Singapore (ABS) on July 9, 2024. "Customers who have activated their digital

4 ways to use AI to shop on Amazon Prime Day

ZDNet | Security / 6h

AI tools can help you generate text, images, and code, but they can also work as a great shopping assistant this Prime Day. Here's how.

New HardBit Ransomware 4.0 Uses Passphrase Protection to Evade Detection

18 TTPs

•

61The Hacker News / 9h

Cybersecurity researchers have shed light on a new version of a ransomware strain called HardBit that comes packaged with new obfuscation techniques to deter analysis efforts. "Unlike previous versions, HardBit Ransomware group enhanced the version 4.0 with passphrase protection," Cybereason researchers Kotaro Ogino and Koshi Oyama said in an analysis. "The passphrase needs to be provided during

Dark Gate malware campaign uses Samba file shares

18 TTPs

•

Security Affairs / 9h

•

DarkGate malware campaign using Excel

A Dark Gate malware campaign from March-April 2024 demonstrates how attackers exploit legitimate tools and services to distribute malware. Palo Alto Networks Unit 42 researchers shared details about a DarkGate malware campaign from March-April 2024. Threat actors used Microsoft Excel files to download a malicious software package from public-facing SMB file shares. The researchers pointed out tha

Google reportedly in talks to buy infosec outfit Wiz for $23 billion

Google nears $23B cybersecurity deal

•

The Register – Security / 9h

The security industry has never had a clear leader – could it be the Chocolate Factory? Ask any techie to name who leads the market for OSes, databases, networks or ERP and the answers are clear: Microsoft, Oracle, Cisco, and SAP.…

I spy another mSpy breach: Millions more stalkerware buyers exposed

5 TTPs

•

The Register – Security / 12h

Also: Velops routers love plaintext; everything is a dark pattern; Internet Explorer rises from the grave, and more Infosec in brief Commercial spyware maker mSpy has been breached – again – and millions of purchasers can be identified from the spilled records.…

UK cyber-boss slams China's bug-hoarding laws

The Register – Security / 14h

Plus: Japanese scientists ID ancient supernova; AWS dismisses China trouble rumor; and more ASIA IN BRIEF The interim CEO of the UK's National Cyber Security Centre (NCSC) has criticized China's approach to bug reporting.…

Hawaii Cybersecurity Journal