September 29

News/Trends

• Dual ransomware attack victims now get hit within 48 hours

• Russian Company Offers $20M For Non-NATO Mobile Exploits

• Cybercriminals Using New ASMCrypt Malware Loader Flying Under the Radar

• NSA is Creating a Hub for AI Security, Nakasone Says 

• Microsoft’s AI-Powered Bing Chat Ads May Lead Users to Malware-Distributing Sites

• Government Shutdown Poised to Stress Nation’s Cybersecurity Supply Chain

• Threat Report: High Tech Industry targeted the most with 46% of attack traffic tagged by NLX

• CISA Publishes Hardware Bill of Materials Framework

• China APT Cracks Cisco Firmware in Attacks Against the US and Japan

• New ZenRAT Malware Targeting Windows Users via Fake Password Manager Software

• New Report Uncovers 3 Distinct Clusters of China-Nexus Attacks on Southeast Asian Government

Law/Policy

• Chinese Hackers Stole Emails From US State Department in Microsoft Breach, Senate Staffer Says

• DHS to Host Latin American Cyber Summit as Region Faces an Onslaught of Digital Attacks

• Tech Industry Leaders and White House Clash Over Plan for Improved Cloud Security

• Ukraine Cyber Defenders Prepare for Winter

Technical

• HuntGPT: Integrating Machine Learning-Based Anomaly Detection and Explainable AI with Large Language Models (LLMs)

• Quantum forgery attacks on COPA,AES-COPA and marble authenticated encryption algorithms

• Logic Locking based Trojans: A Friend Turns Foe

• Aggregate Encryption Individual Decryption of Key for FPGA Bitstream IP Cores in Cloud

Report, blogs, podcasts

• Cybersecurity Gaps Plague US State Department, GAO Report Warn

• ZeroFont trick makes users think that message has been scanned for threats

• ‘Snatch’ Ransom Group Exposes Visitor IP Addresses

• A cryptor, a stealer and a banking trojan

• Smashing Security podcast #341: Another T-Mobile breach, ThemeBleed, and farewell Naked Security

• Half of Cyberattacks Go Unreported

• Emerging cybersecurity threats in healthcare | Special Report

• Critical Vulnerability in libwebp Library

• “The good and the bad that comes with the growth of AI” – watch this series of webinars with Abnormal, OpenAI, and others

• Hands-on Threat Simulations: Empower Cybersecurity Teams to Confidently Combat Threats

• iOS 17 update secretly changed your privacy settings; here’s how to set them back

September 22

News/Trends

• Hackers Let Loose on Voting Gear Ahead of US Election Season

• Mysterious ‘Sandman’ Threat Actor Targets Telecom Providers Across Three Continents

• Nansen Warns Of Potential Phishing Attacks Following Vendor Security Incident Exposing Customer Data

• Understanding Malicious Package Attacks and Defense Strategies for Robust Cybersecurity

• Finnish Authorities Dismantle Notorious PIILOPUOTI Dark Web Drug Marketplace

• Schools Are the Most Targeted Industry by Ransomware Gangs

• Chinese Cyber Power Bigger Than the Rest of the World Combined

• Cyber Experts Urge House Committee to Avoid Federal Shutdown

• K–12 IT Administrators Encounter Additional Security Controls for Users Under 18

Law/Policy

• DHS Council Seeks to Simplify Cyber Incident Reporting Rules

• Solarium Commission Wants Action on Stalled Cybersecurity Recommendations

• Australia to Build ‘Six Cyber Shields’ to Defend Nation

• Pentagon’s 2023 Cyber Strategy Focuses on Helping Allies

Technical

• Generic SCARE: reverse engineering without knowing the algorithm nor the machine

• Responsible AI for Enabling the Internet of Energy

• Recent Trends in Cross-Border Data Access by Law Enforcement Agencies

• “We’ve Disabled MFA for You”: An Evaluation of the Security and Usability of Multi-Factor Authentication Recovery Deployments

Report, blogs, podcasts

• Rising OT/ICS Cybersecurity Incidents Reveal Alarming Trend

• Snatch ransomware – what you need to know

• Overview of IoT threats in 2023

• Smashing Security podcast #340: Heated seats, car privacy, and Graham’s porn video

• On the Cybersecurity Jobs Shortage

• The Consequences of Non-Compliance in Cybersecurity: Risks and Penalties

• The Expel Quarterly Threat Report distills the threats and trends the Expel SOC saw in Q2

• Detecting AI-Generated Text

• Who’s Behind the 8Base Ransomware Website?

September 15

News/Trends

• Identity of NSA hacker behind cyberattack on China’s leading aviation university identified

• Why Identity Management Is the Key to Stopping APT Cyberattacks

• The Interdependence between Automated Threat Intelligence Collection and Humans

• Senators Release Bipartisan Framework for AI Legislation

• Cybercriminals Combine Phishing and EV Certificates to Deliver Ransomware Payloads

• Cloud to Blame for Almost all Security Vulnerabilities

• California Privacy Protection Agency publishes new draft regulations addressing AI, risk assessments, cyber audits

• IOCTA spotlight report on malware-based cyber-attacks published

• California Enacts First-of-its-Kind Bill Targeting Data Brokers

• New HijackLoader Modular Malware Loader Making Waves in the Cybercrime World

Law/Policy

• UK ICO and NCSC Set to Share Anonymized Threat Intelligence

• White House, Federal Cyber Leaders Pledge Renewed Support for Open-Source Security

• US Cyber Command Wrapped Second ‘Hunt Forward’ Mission to Lithuania

• CISA Director Says Critical Infrastructure Cyber Incident Reporting Rules Almost Ready

Technical

• On Autonomous Agents in a Cyber Defence Environment

• REVERSIM: A Game-Based Approach to Accessing Large Populations for Studying Human Aspects in Hardware Reverse Engineering

• A Review of Machine Learning-based Security in Cloud Computing

• Use of Cryptography in Malware Obfuscation

Report, blogs, podcasts

• On Technologies for Automatic Facial Recognition

• FBI Hacker Dropped Stolen Airbus Data on 9/11

• Guarding Against Fileless Malware: Types and Prevention

• Smashing Security podcast #339: Bitcoin boo-boo, deepfakes for good, and time to say goodbye to usernames?

• Report: Compromised Credential Use Jumps 300% in Cloud Intrusions

• MGM Resorts shuts down IT systems and slot machines go quiet following “cybersecurity incident”

• Free Download Manager backdoored – a possible supply chain attack on Linux machines

• Cars Have Terrible Data Privacy

• Traceable AI report exposes true scale of API-related data breaches, top challenges

September 8

News/Trends

• U.K. and U.S. Sanction 11 Russia-based Trickbot Cybercrime Gang Members

• North Korean Hackers Exploit Zero-Day Bug to Target Cybersecurity Researchers

• Ukraine’s CERT Thwarts APT28’s Cyberattack on Critical Energy Infrastructure

• China Unleashes AI-Powered Image Generation For Influence Operations

• Security for Multicloud and Hybrid Cloud Environments

• UK Boards Are Growing Less Concerned About Cyber-Risk

• New Python Variant of Chaes Malware Targets Banking and Logistics Industries

• Meta Takes Down Thousands of Accounts Involved in Disinformation Ops from China and Russia

• Peiter ‘Mudge’ Zatko Lands Role as CISA Senior Technical Adviser

Law/Policy

• CISA Seeks Vendor Commitments to Boost Cybersecurity in K-12 Schools

• UK National Cyber Security Centre Gets a New CTO

• CPPA Releases Draft Rules on Cybersecurity Audits and Risk Assessments

• Regulators are on the move to set much needed IoT security rules of the road

Technical

• Password-Stealing without Hacking: Wi-Fi Enabled Practical Keystroke Eavesdropping

• Building Resilience in Cybersecurity — An Artificial Lab Approach

• Roulette: A Semantic Privacy-Preserving Device-Edge Collaborative Inference Framework for Deep Learning Classification Tasks

• MALITE: Lightweight Malware Detection and Classification for Constrained Device

Report, blogs, podcasts

• Critical Security Bug Opens Cisco BroadWorks to Complete Takeover

• ‘Evil Telegram’ Spyware Campaign Infects 60K+ Mobile Users

• LLMs and Tool Use

• The State of the Virtual CISO Report: MSP/MSSP Security Strategies for 2024

• Avoidable Digital Certificate Issues Fuel Data Breaches

• Smashing Security podcast #338: Catfishing services, bad sports, and another cockup

• 2023 Cost of a Data Breach: Key Takeaways

• Cybercriminals Use Research Contests to Create New Attack Methods

• Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

September 1

News/Trends

• Education Sector Heavily Targeted as the School Year Begins

• Sophisticated Cyber-Espionage Group Earth Estries Exposed

• New SuperBear Trojan Emerges in Targeted Phishing Attack on South Korean Activists

• Voxel AI increases funding to $30M, aims to transform industrial workplace safety

• U.S. Hacks QakBot, Quietly Removes Botnet Infections

• Gangs Forcing Hundreds of Thousands of People Into Cybercrime in South-East Asia, Says UN

• Adobe ColdFusion Critical Vulnerabilities Exploited Despite Patches

• Cybercriminals Used Just Three Malware Loaders to Launch 80% of Attacks, Deets Inside

• University of Michigan severs ties to internet after cyberattack

• KmsdBot Malware Gets an Upgrade: Now Targets IoT Devices with Enhanced Capabilities

Law/Policy

• CISA, NSA, and NIST Urge Critical Infrastructure and Others to Prepare for Quantum Computing Cyber Threats

• UK Agrees to Support Kuwait’s Cybersecurity Center

• CISA Touts ‘Tremendous Growth’ in Vulnerability Disclosure Platform

• What is The Network and Information Security 2 Directive (NIS2)?

Technical

• Exposing and Addressing Security Vulnerabilities in Browser Text Input Fields

• Using language-specific input methods and pronunciation rules to improve the guesses of passwords

• Assessing Cyclostationary Malware Detection via Feature Selection and Classification

• Cyber Threat Intelligence Model: An Evaluation of Taxonomies, Sharing Standards, and Ontologies within Cyber Threat Intelligence

Report, blogs, podcasts

• The Power of Passive OS Fingerprinting for Accurate IoT Device Identification

• Exposing the Harsh Truths of Cyberattacks in New Report

• Smashing Security podcast #337: The DEA’s crypto calamity, and scammers’ blue tick bonanza

• IT threat evolution in Q2 2023

• When Apps Go Rogue

• EP19: How to Sell Cybersecurity to the C-Suite

• Japan’s cybersecurity agency admits it was hacked for months

• Report Reveals Growing Disparity in Cyber Insurance Landscape

• How to achieve API security — as AI-boosted attacks intensify