"Cybersecurity in race to unmask new wave of AI-borne deep fakes."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 11 May 2024, 1402 UTC.

Content and Source:  https://feedly.com/i/collection/content/user/f401222a-bca6-4c45-9cc1-183f239e8d86/category/7737d3c9-5fe2-4b34-8708-85e57085f895/Security Bundle.

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security News Bundle

203

MOST POPULAR

Cybersecurity in a Race to Unmask a New Wave of AI-Borne Deepfakes

55Dark Reading / 1d

Kevin Mandia, CEO of Mandiant at Google Cloud, calls for content "watermarks" as the industry braces for a barrage of mind-bending AI-generated fake audio and video traffic.

World Warned To Prepare For Today's Severe Geomagnetic Storm, First In 20 Years

Northern lights visible across US

•

300+Packet Storm Security / 22h

[no content]

Widely used modems in industrial IoT devices open to SMS attack

Exploitation for Client Execution (Enterprise T1203)

•

BleepingComputer / 49min

Security flaws in Telit Cinterion cellular modems, widely used in sectors including industrial, healthcare, and telecommunications, could allow remote attackers to execute arbitrary code via SMS. [...]

TODAY

Europol confirms web portal breach, says no operational data stolen

Europol breached by IntelBroker

•

BleepingComputer / 1h

​Europol, the European Union's law enforcement agency, confirmed that its Europol Platform for Experts (EPE) portal was breached and is now investigating the incident after a threat actor claimed they stole For Official Use Only (FOUO) documents containing classified data. [...]

A cyberattack hit the US healthcare giant Ascension

Ascension Hospitals face cyberattacks disruptions

•

Security Affairs / 3h

A cyberattack hit the US Healthcare giant Ascension and is causing disruption of the systems at hospitals in the country. Ascension is one of the largest private healthcare systems in the United States, ranking second in the United States by the number of hospitals as of 2019. The organization was hit by a ransomware attack that severely impacted operations at hospitals in the country. Impacted s

YESTERDAY

FIN7 Hacker Group Leverages Malicious Google Ads to Deliver NetSupport RAT

10 TTPs

•

36The Hacker News / 6h

•

FIN7 exploits Google Ads

The financially motivated threat actor known as FIN7 has been observed leveraging malicious Google ads spoofing legitimate brands as a means to deliver MSIX installers that culminate in the deployment of NetSupport RAT. "The threat actors used malicious websites to impersonate well-known brands, including AnyDesk, WinSCP, BlackRock, Asana, Concur, The Wall

Millions of IoT Devices at Risk from Flaws in Integrated Cellular Modem

Exploitation for Client Execution (Enterprise T1203)

•

Dark Reading / 15h

Researchers discovered seven vulnerabilities — including an unauthenticated RCE issue — in widely deployed Telit Cinterion modems.

The Week in Ransomware - May 10th 2024 - Chipping away at LockBit

LockBit ransomware admin sanctioned

•

25BleepingComputer / 15h

After many months of taunting law enforcement and offering a million-dollar reward to anyone who could reveal his identity, the FBI and NCA have done just that, revealing the name of LockBitSupp, the operator of the LockBit ransomware operation. [...]

Iran most likely to launch destructive cyber-attack against US – ex-Air Force intel analyst

The Register – Security / 16h

But China's the most technologically advanced Interview China remains the biggest cyber threat to the US government, America's critical infrastructure, and its private-sector networks, the nation's intelligence community has assessed.…

Forget AI: Physical threats are biggest risk facing the 2024 election

CyberScoop / 17h

SAN FRANCISCO — 2024 could turn out to be the year in which artificial intelligence upends the U.S. election, but at America’s largest cybersecurity conference, federal officials charged with protecting the vote said they are most concerned with a far more analog threat: physical violence directed at election administrators. While many election officials are concerned about issues of disinformati

Dell API abused to steal 49 million customer records in data breach

Dell data breach exposes addresses

•

70BleepingComputer / 18h

The threat actor behind the recent Dell data breach revealed they scraped information of 49 million customer records using an partner portal API they accessed as a fake company. [...]

Ascension redirects ambulances after suspected ransomware attack

Ascension Hospitals face cyberattacks disruptions

•

23BleepingComputer / 19h

Ascension, a major U.S. healthcare network, is diverting ambulances from several hospitals due to a suspected ransomware attack that has been causing clinical operation disruptions and system outages since Wednesday. [...]

House panel leaders call on Microsoft president to testify over security shortcomings

House committee summons Microsoft President

•

CyberScoop / 19h

Leaders of the House Homeland Security Committee want Microsoft President Brad Smith to testify before their panel in the aftermath of accumulating cybersecurity incidents that have drawn ample negative attention to the tech giant. In particular, the committee is zeroing in on a Cyber Safety Review Board report that faulted Microsoft for “a cascade of security failures” that abetted Chinese gover

CISO as a CTO: When and Why It Makes Sense

Dark Reading / 19h

Enterprises are increasingly recognizing that a CISO's skills and experience building risk-based cyber programs translate well to other C-suite positions.

Is CISA's Secure by Design Pledge Toothless?

Tech companies pledge secure design

•

Dark Reading / 19h

CISA's agreement is voluntary and, frankly, basic. Signatories say that's a good thing.

Cybercriminals hit jackpot as 500k+ Ohio Lottery lovers lose out on their personal data

Ohio Lottery hit by ransomware affecting 500

•

The Register – Security / 19h

Not a lotto luck for these powerball hunters More than half a million gamblers with a penchant for powerballs will be receiving some fairly unwelcome news very soon, if not already, as cybercriminals have made off with their personal data.…

Reality Defender Wins RSAC Innovation Sandbox Competition

Dark Reading / 19h

In a field thick with cybersecurity startups showing off how they use AI and LLMs, Reality Defender stood out for its tool for detecting and labeling deepfakes and other artificial content.

Ascension Healthcare Suffers Major Cyberattack

Ascension Hospitals face cyberattacks disruptions

•

Dark Reading / 21h

The attack cut off access to electronic healthcare records (EHRs) and ordering systems, plunging the organization and its health services into chaos.

Update your Chrome browser ASAP. Google has confirmed a zero-day exploited in the wild

CVE-2024-4671

•

51ZDNet | Security / 21h

A new Chrome JavaScript security hole is nasty, so don't waste any time patching your systems.

Ohio Lottery ransomware attack impacts over 538,000 individuals

Ohio Lottery hit by ransomware affecting 500

•

32BleepingComputer / 22h

​The Ohio Lottery is sending data breach notification letters to over 538,000 individuals affected by a cyberattack that hit the organization's systems on Christmas Eve. [...]

500,000 Impacted By Ohio Lottery Ransomware Attack

Ohio Lottery hit by ransomware affecting 500

•

Packet Storm Security / 22h

[no content]

MoD Contractor Hacked By China Failed To Report Breach For Months

China hacks UK MoD payroll

•

70Packet Storm Security / 22h

[no content]

Ex-White House Election Threat Hunter Weighs In On What To Expect In November

Packet Storm Security / 22h

[no content]

FBI Working Towards Nabbing Scattered Spider Hackers, Official Says

Scattered Spider hackers target companies

•

45Packet Storm Security / 22h

[no content]

Leaked FBI Email Stresses Need For Warrantless Surveillance Of Americans

FBI official encourages warrantless surveillance

•

90Packet Storm Security / 22h

[no content]

Exploited Chrome Zero Day Patched By Google

Packet Storm Security / 22h

[no content]

Cybersecurity Incident Impacts Operations At Ascension Hospitals

Ascension Hospitals face cyberattacks disruptions

•

Packet Storm Security / 22h

[no content]

GhostStripe Attack Haunts Self-Driving Cars

Packet Storm Security / 22h

[no content]

Dark Reading 'Drops' Its First Podcast

Dark Reading / 22h

Our brand-new podcast, Dark Reading Confidential, has officially launched. You don't want to miss our first episode with the CISO and chief legal officer from Reddit and a cybersecurity attorney, who share their thoughts and advice for CISOs on the new SEC breach disclosure rules.

North Korean Hackers Deploy New Golang Malware 'Durian' Against Crypto Firms

3 TTPs

•

79The Hacker News / 22h

The North Korean threat actor tracked as Kimsuky has been observed deploying a previously undocumented Golang-based malware dubbed Durian as part of highly-targeted cyber attacks aimed at two South Korean cryptocurrency firms. "Durian boasts comprehensive backdoor functionality, enabling the execution of delivered commands, additional file downloads, and exfiltration of files,"

Dark Reading Confidential: The CISO and the SEC

Dark Reading / 22h

Episode 1 of Dark Reading Confidential brings Frederick “Flee” Lee, CISO of Reddit, Beth Burgin Waller, a practicing cyber attorney who represents many CISOs, and Ben Lee, Chief Legal Officer of Reddit, to the table.

Microsoft's Brad Smith summoned by Homeland Security committee over 'cascade' of infosec failures

House committee summons Microsoft President

•

The Register – Security / 22h

Major intrusions by both China and Russia leave a lot to be answered for The US government wants to make Microsoft's vice chair and president, Brad Smith, the latest tech figurehead to field questions from a House committee on its recent cybersecurity failings.…

Healthcare Giant Ascension Hacked, Hospitals Diverting Emergency Service

Ascension Hospitals face cyberattacks disruptions

•

21SecurityWeek / 23h

One of the largest healthcare systems in the United States is scrambling to contain a hack that's causing disruption and “downtime procedures” at hospitals around the country. The post appeared first on SecurityWeek .

GhostStripe attack haunts self-driving cars by making them ignore road signs

The Register – Security / 23h

Cameras tested are specced for Baidu's Apollo Six boffins mostly hailing from Singapore-based universities say they can prove it's possible to interfere with autonomous vehicles by exploiting the machines' reliance on camera-based computer vision and cause them to not recognize road signs.…

You've Been Breached: What Now?

Dark Reading / 23h

Breaches are inevitable. Here are four steps to recovery and future-proofing your business.

Boeing refused to pay $200 million LockBit ransomware demand

Boeing confirms $200M ransomware extortion

•

Graham Cluley / 1d

Boeing has confirmed that it received a demand for a massive $200 million after a ransomware attack by the notorious LockBit hacking group in October 2023. The company confirmed its link to the indictment of Dmitry Yuryevich Khoroshev, who was identified this week by the US Department of Justice as the true identity of LockBitSupp, the kingpin of the LockBit gang. Read more in my article on the Ho

CensysGPT: AI-Powered Threat Hunting for Cybersecurity Pros (Webinar)

48The Hacker News / 1d

Artificial intelligence (AI) is transforming cybersecurity, and those leading the charge are using it to outsmart increasingly advanced cyber threats. Join us for an exciting webinar, "The Future of Threat Hunting is Powered by Generative AI," where you'll explore how AI tools are shaping the future of cybersecurity defenses. During the session, Censys Security Researcher Aidan Holland will

'Four horsemen of cyber' look back on 2008 DoD IT breach that led to US Cyber Command

The Register – Security / 1d

'This was a no sh*tter' RSAC A malware-laced USB stick, inserted into a military laptop at a base in Afghanistan in 2008, led to what has been called the worst military breach in US history, and to the creation of the US Cyber Command.…

In Other News: European Parliament Breach, DocGo Hack, VMware Advisories Moved

Data from Local System (Enterprise T1005)

•

SecurityWeek / 1d

•

CVE-2024-27793

Noteworthy stories that might have slipped under the radar: European Parliament application breached, DocGo hacked, VMware advisories moved to Broadcom portal. The post appeared first on SecurityWeek .

Exploited Chrome Zero-Day Patched by Google

SecurityWeek / 1d

A Chrome 124 update patches the second Chrome zero-day that has been found to be exploited in malicious attacks in 2024. The post appeared first on SecurityWeek .

Google fixes fifth actively exploited Chrome zero-day this year

20Security Affairs / 1d

Since the start of the year, Google released an update to fix the fifth actively exploited zero-day vulnerability in the Chrome browser. Google this week released security updates to address a zero-day flaw, tracked as CVE-2024-467, in Chrome browser. The vulnerability is the fifth zero-day flaw in the Google browser that is exploited in the wild since the start of the year. The vulnerability is

Russia-linked APT28 targets government Polish institutions

IoC > 2 domains

•

Security Affairs / 1d

•

9 TTPs

CERT Polska warns of a large-scale malware campaign against Polish government institutions conducted by Russia-linked APT28. CERT Polska and CSIRT MON teams issued a warning about a large-scale malware campaign targeting Polish government institutions, allegedly orchestrated by the Russia-linked APT28 group. The attribution of the attacks to the Russian APT is based on similarities with TTPs empl

Chrome Zero-Day Alert — Update Your Browser to Patch New Vulnerability

100+The Hacker News / 1d

Google on Thursday released security updates to address a zero-day flaw in Chrome that it said has been actively exploited in the wild. Tracked as CVE-2024-4671, the high-severity vulnerability has been described as a case of use-after-free in the Visuals component. It was reported by an anonymous researcher on May 7, 2024. Use-after-free bugs, which arise when a program

What's the Right EDR for You?

23The Hacker News / 1d

A guide to finding the right endpoint detection and response (EDR) solution for your business’ unique needs. Cybersecurity has become an ongoing battle between hackers and small- and mid-sized businesses. Though perimeter security measures like antivirus and firewalls have traditionally served as the frontlines of defense, the battleground has shifted to endpoints. This is why endpoint

Malicious Android Apps Pose as Google, Instagram, WhatsApp to Steal Credentials

81The Hacker News / 1d

Malicious Android apps masquerading as Google, Instagram, Snapchat, WhatsApp, and X (formerly Twitter) have been observed to steal users' credentials from compromised devices. "This malware uses famous Android app icons to mislead users and trick victims into installing the malicious app on their devices," the SonicWall Capture Labs threat research team said in a recent report. The

500,000 Impacted by Ohio Lottery Ransomware Attack

Ohio Lottery hit by ransomware affecting 500

•

SecurityWeek / 1d

The Ohio Lottery cyberattack conducted by the DragonForce ransomware group has impacted more than 500,000 individuals. The post appeared first on SecurityWeek .

RSA Conference 2024 – Announcements Summary (Day 4)

SecurityWeek / 1d

Hundreds of companies are showcasing their products and services this week at the 2024 edition of the RSA Conference in San Francisco. The post appeared first on SecurityWeek .