"Feds warn of AndroxGh0st Botnet...."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 17 January 2024, 1527 UTC.

Content and Source:  https://feedly.com/i/collection/content/user/f401222a-bca6-4c45-9cc1-183f239e8d86/category/7737d3c9-5fe2-4b34-8708-85e57085f895 ("Security News Bundle" via https://feedly.com).

Please click link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security News Bundle

87

MOST POPULAR

Feds Warn of AndroxGh0st Botnet Targeting AWS, Azure, and Office 365 Credentials

3 TTPs

•

87The Hacker News / 3h

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) warned that threat actors deploying the AndroxGh0st malware are creating a botnet for "victim identification and exploitation in target networks." A Python-based malware, AndroxGh0st was first documented by Lacework in December 2022, with the malware

What's worse than paying an extortion bot that auto-pwned your database?

3 TTPs

•

The Register – Security / 18min

Paying one that lied to you and only saved the first 20 rows of each table Publicly exposed PostgreSQL and MySQL databases with weak passwords are being autonomously wiped out by a malicious extortion bot – one that marks who pays up and who is not getting their data back.…

New research reveals disconnect between global university education and recruitment standards

IT Security Guru / 1h

New research conducted in the UK and US reveals that over three-quarters (78%) of cybersecurity and IT professionals believe a traditional university education in cybersecurity is not doing enough to prepare graduates for the modern workforce. Meanwhile, nearly two-thirds (64%) of cyber industry professionals say current recruitment processes inadequately assess candidates’ practical skills. This

TODAY

Wazuh: Building robust cybersecurity architecture with open source tools

BleepingComputer / 13min

Open source solutions allow organizations to customize and adapt their cybersecurity infrastructure to their specific needs. Learn more from @wazuh on building open source cybersecurity infrastructure. [...]

Strength in Numbers: The Case for Whole-of-State Cybersecurity

Dark Reading / 21min

WoS cybersecurity creates a united front for governments to defend against threat actors, harden security postures, and protect constituents who depend on services.

Using Wazuh to build a cybersecurity architecture with open source tools

BleepingComputer / 21min

Open source solutions allow organizations to customize and adapt their cybersecurity infrastructure to their specific needs. Learn more from @wazuh on building open source cybersecurity infrastructure. [...]

PAX PoS Terminal Flaw Could Allow Attackers to Tamper with Transactions

The Hacker News / 31min

The point-of-sale (PoS) terminals from PAX Technology are impacted by a collection of high-severity vulnerabilities that can be weaponized by threat actors to execute arbitrary code. The STM Cyber R&D team, which reverse engineered the Android-based devices manufactured by the Chinese firm owing to their rapid deployment in Poland, said it unearthed half a dozen flaws that allow for

Combating IP Leaks into AI Applications with Free Discovery and Risk Reduction Automation

The Hacker News / 31min

Wing Security announced today that it now offers free discovery and a paid tier for automated control over thousands of AI and AI-powered SaaS applications. This will allow companies to better protect their intellectual property (IP) and data against the growing and evolving risks of AI usage. SaaS applications seem to be multiplying by the day, and so does their integration of AI

Github rotated credentials after the discovery of a vulnerability

Security Affairs / 35min

GitHub rotated some credentials after the discovery of a flaw that allowed access to the environment variables of a production container. After GitHub became aware of a vulnerability through its bug bounty program, the Microsoft-owned company rotated some credentials. The vulnerability, tracked as CVE-2024-0200 (CVSS score 7.2), allowed access to the environment variables of a production containe

New UEFI Vulnerabilities Send Firmware Devs Across An Entire Ecosystem Scrambling

Packet Storm Security / 1h

[no content]

Attacks On Ivanti 0-Days Scale To 1,700 VPNs

Packet Storm Security / 1h

[no content]

SonicWall API Opens 178k Firewalls To Attack

Packet Storm Security / 1h

[no content]

Google Warns Of Chrome Browser Zero Day Being Exploited

Google fixes actively exploited Chrome zero-day

•

Packet Storm Security / 1h

[no content]

GitHub Rotates Credentials In Response To Vulnerability

Packet Storm Security / 1h

[no content]

Salt Security Delivers another Technology Breakthrough with Industry’s only API Posture Governance Engine

Salt Security enhances API security

•

IT Security Guru / 1h

Today, API security company Salt Security has announced multiple advancements in discovery, posture management and AI-based threat protection to the industry leading Salt Security API Protection Platform . Salt leapfrogs traditional posture management by providing the industry’s first API posture governance engine delivering operationalised API governance and threat detection across organisations

Keeper Security Adds Support for Hardware Security Keys as Sole 2FA Method

IT Security Guru / 1h

Zero-trust and zero-knowledge pros, Keeper Security, have introduced support for hardware security keys as a single Two-Factor Authentication (2FA) method. Implementing user authentication with only a hardware security key enhances overall security by providing a robust physical second factor, mitigating remote attacks and reducing dependency on mobile devices. Administrators can enforce the use

AI Data Exposed to ‘LeftoverLocals’ Attack via Vulnerable AMD, Apple, Qualcomm GPUs

CVE-2023-4969

•

SecurityWeek / 1h

Researchers show how a new attack named LeftoverLocals, which impacts GPUs from AMD, Apple and Qualcomm, can be used to obtain AI data. The post appeared first on SecurityWeek .

Achieving “Frictionless Defense” in the Age of Hybrid Networks

SecurityWeek / 1h

A "frictionless defense” is about integrating security measures seamlessly into the digital landscape to safeguard against threats while ensuring a positive user experience. The post appeared first on SecurityWeek .

GitHub Rotates Credentials in Response to Vulnerability

SecurityWeek / 1h

GitHub rotates credentials and releases patches after being alerted of a vulnerability affecting GitHub.com and GitHub Enterprise Server. The post appeared first on SecurityWeek .

FBI, CISA warn of AndroxGh0st botnet for victim identification and exploitation

3 TTPs

•

Security Affairs / 2h

U.S. CISA and the FBI warned of AndroxGh0st malware used to create a botnet for victim identification and exploitation in target networks. US CISA and the Federal Bureau of Investigation (FBI) released a joint Cybersecurity Advisory (CSA) to warn of AndroxGh0st malware. The malware is spreading to create a botnet for victim identification and exploitation in target networks. The US agencies are s

Savvy Launches Identity-First Security Offering to Combat Toxic Combinations Driving SaaS Risk

Dark Reading / 2h

[no content]

Snyk Acquires Helios for Runtime Visibility

Snyk acquires Helios for runtime data

•

Dark Reading / 2h

Developer-security company Snyk will integrate startup Helios' app-discovery service and runtime data collection tools into its AppRisk service.

Windows Server 2022 patch is breaking apps for some users

The Register – Security / 3h

Uninstall the update or edit the Windows registry to restore order The latest Windows Server 2022 patch has broken the Chrome browser, and short of uninstalling the update, a registry hack is the only way to restore service for affected users.…

Citrix warns admins to immediately patch NetScaler for actively exploited zero-days

3 TTPs

•

Security Affairs / 3h

Citrix fixed two actively exploited zero-day vulnerabilities impacting Netscaler ADC and Gateway appliances. Citrix warns customers to install security updates to address two actively exploited zero-day vulnerabilities, tracked as CVE-2023-6548 and CVE-2023-6549, impacting Netscaler ADC and Gateway appliances. “Exploits of these CVEs on unmitigated appliances have been observed. Cloud Software Gr

Webinar: The Art of Privilege Escalation - How Hackers Become Admins

34The Hacker News / 3h

In the digital age, the battleground for security professionals is not only evolving, it's expanding at an alarming rate. The upcoming webinar, "The Art of Privilege Escalation - How Hackers Become Admins," offers an unmissable opportunity for IT security experts to stay ahead in this relentless cyber war. Privilege escalation - the term might sound benign, but in the hands of a skilled hacker,

Here’s How ChatGPT Maker OpenAI Plans to Deter Election Misinformation in 2024

OpenAI addresses election concerns

•

SecurityWeek / 3h

ChatGPT maker OpenAI outlines a plan to prevent its tools from being used to spread election misinformation in 2024. The post appeared first on SecurityWeek .

Oracle Patches 200 Vulnerabilities With January 2024 CPU

SecurityWeek / 3h

Oracle releases 389 new security patches to address 200 vulnerabilities as part of the first Critical Patch Update of 2024. The post appeared first on SecurityWeek .

New iShutdown Method Exposes Hidden Spyware Like Pegasus on Your iPhone

Kaspersky detects iOS spyware

•

33The Hacker News / 4h

Cybersecurity researchers have identified a "lightweight method" called iShutdown for reliably identifying signs of spyware on Apple iOS devices, including notorious threats like NSO Group's Pegasus, QuaDream's Reign, and Intellexa's Predator. Kaspersky, which analyzed a set of iPhones that were compromised with Pegasus, said the infections left traces in a file

Citrix Warns NetScaler ADC Customers of New Zero-Day Exploitation

CVE-2023-6548

•

SecurityWeek / 5h

Citrix is aware of attacks exploiting two new NetScaler ADC and Gateway zero-day vulnerabilities tracked as CVE-2023-6548 and CVE-2023-6549. The post appeared first on SecurityWeek .