March 29

News/Trends

• Dormakaba Locks Used in Millions of Hotel Rooms Could Be Cracked in Seconds

• New Linux Bug Could Lead to User Password Leaks and Clipboard Hijacking

• NIST Unveils New Consortium to Operate its National Vulnerability Database

• DinodasRAT Linux implant targeting entities worldwide

• Finland Blames Chinese Hacking Group APT31 for Parliament Cyber Attack

• Microsoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions

• Zero-Day Vulnerabilities Surged by Over 50% Annually, Says Google

• CISA Warns: Hackers Actively Attacking Microsoft SharePoint Vulnerability

• Feds Wave Sticks & Carrots at Health Sector to Bolster Cyber

• Browser Security in 2024: Technologies and Trends

• Iran-Linked MuddyWater Deploys Atera for Surveillance in Phishing Attacks

Law/Policy

• CISA Issues Notice for Long-Awaited Critical Infrastructure Reporting Requirements

• HHS OCR Updates Tracking Technologies Guidance

• Japan Runs Inaugural Cyber Defense Drills With Pacific Island Nations

• UK Law Enforcers Arrest 400 in Major Fraud Crackdown

• Biden Nominates First Assistant Defense Secretary for Cyber Policy

• China Eases Restrictions on Cross-Border Data Flows

Technical

• The current state of security — Insights from the German software industry

• Holographic Global Convolutional Networks for Long-Range Prediction Tasks in Malware Detection

• Cloudy with a Chance of Cyberattacks: Dangling Resources Abuse on Cloud Platforms

• Lower data attacks on Advanced Encryption Standard

• REVERSIM: A Game-Based Environment to Study Human Aspects in Hardware Reverse Engineering

Report, blogs, podcasts

• AI and Trust

• Episode 257: Securing Software on Wheels with

• The Cyber Sleuth’s Handbook: Digital Forensics and Incident Response (DFIR) Essentials

• Smashing Security podcast #365: Hacking hotels, Google’s AI goof, and cyberflashing

• Reinforcement Learning is the Path Forward for AI Integration Into Cybersecurity

• AI Platforms Name Cybersecurity Threats and Advice for 2024

• Recent ‘MFA Bombing’ Attacks Targeting Apple Users

• Report: Only 5% of Boards Have Cybersecurity Expertise

• Ransomware hits The Big Issue. Qilin group leaks confidential data

• Ransomware: lessons all companies can learn from the British Library attack

March 22

News/Trends

• U.S. Justice Department Sues Apple Over Monopoly and Messaging Security

• China-Linked Group Breaches Networks via Connectwise, F5 Software Flaws

• Security Leaders Acknowledge API Security Gaps Despite Looming Threat

• Russia Hackers Using TinyTurla-NG to Breach European NGO’s Systems

• AI Transparency: Why Explainable AI Is Essential for Modern Cybersecurity

• GitHub Launches AI-Powered Autofix Tool to Assist Devs in Patching Security Flaws

• AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials

• New ‘Loop DoS’ Attack Impacts Hundreds of Thousands of Systems

• New BunnyLoader Malware Variant Surfaces with Modular Attack Features

• From Deepfakes to Malware: AI’s Expanding Role in Cyber Attacks

• New Phishing Attack Uses Clever Microsoft Office Trick to Deploy NetSupport RAT

• A patched Windows attack surface is still exploitable

Law/Policy

• US Treasury Targets Russian Entities in Cyber Influence Campaign

• US Legislation Targets Data Sharing With Foreign Adversaries

• NCSC Publishes Security Guidance For Cloud-Hosted SCADA

• What’s Material to the SEC, Three Months Into Cyber Disclosure Rules?

• CISA Launches 911 Cybersecurity Hub Empowering Emergency Responders

• Stronger FCC Data Breach Reporting Rules for Telecom Go Live

Technical

• ASOP: A Sovereign and Secure Device Onboarding Protocol for Cloud-based IoT Services

• Counter-Samples: A Stateless Strategy to Neutralize Black Box Adversarial Attacks

• Shifting the Lens: Detecting Malware in npm Ecosystem with Large Language Models

• Semantic Data Representation for Explainable Windows Malware Detection Models

Report, blogs, podcasts

• RaaS Groups Increasing Efforts to Recruit Affiliates

• Fake Data Breaches: Countering the Damage

• Red Teaming in the AI Era

• Public AI as an Alternative to Corporate AI

• Report: Growing AceCryptor Attacks in Europe

• Threat landscape for industrial automation systems. H2 2023

• Smashing Security podcast #364: Bing pop-up wars, and the British Library ransomware scandal

• How Companies Describe Cyber Incidents in SEC Filings

• The Not-so-True People-Search Network from China

• Fraudsters are posing as the FTC to scam consumers

• The Aviation and Aerospace Sectors Face Skyrocketing Cyber Threats

• AI and the Evolution of Social Media

March 15

News/Trends

• GhostRace – New Data Leak Vulnerability Affects Modern CPUs

• Malicious Python Packages Target Crypto Wallet Recovery Passwords

• Cloud Account Attacks Surged 16-Fold in 2023

• RedCurl Cybercrime Group Abuses Windows PCA Tool for Corporate Espionage

• Ande Loader Malware Targets Manufacturing Sector in North America

• Google Paid $10m in Bug Bounties to Security Researchers in 2023

• Embracing the Cloud: Revolutionizing Privileged Access Management with One Identity PAM Essentials

• New Research Exposes Security Risks in ChatGPT Plugins

• Lawmakers Slam UK Government’s “Ostrich Strategy” for Cybersecurity

• DarkGate Malware Exploited Recently Patched Microsoft Flaw in Zero-Day Attack

Law/Policy

• EU Parliament Adopts AI Act

• New DOD Cyber Policy Office Opening Soon, Sources Say

• FCC Adopts Voluntary ‘Cyber Trust Mark’ Labeling Rule for IoT Devices

• ODNI Releases New Open-Source Intelligence Strategy With Limited Details

• Bills Targeting Data Brokers and TikTok Approved in House Committee

• US Federal Budget Proposes $27.5B for Cybersecurity

Technical

• Privacy Preserving Anomaly Detection on Homomorphic Encrypted Data from IoT Sensors

• Skeptic: Automatic, Justified and Privacy-Preserving Password Composition Policy Selection

• Reflection of Federal Data Protection Standards on Cloud Governance

• REPQC: Reverse Engineering and Backdooring Hardware Accelerators for Post-quantum Cryptography

Report, blogs, podcasts

• New Report Suggests Surge in SaaS Assets, Employee Data Sharing

• Scareware scam: Restoro and Reimage fined $26 million by FTC

• How Advances in AI are Impacting Business Cybersecurity

• Improving C++

• Smashing Security podcast #363: Stuck streaming sticks, TikTok conspiracies, and spying cars

• BSAM: Open-Source Methodology for Bluetooth Security Assessment

• US Intelligence Predicts Upcoming Cyber Threats for 2024

• Patch Tuesday, March 2024 Edition

• Using LLMs to Unredact Text

• Incognito Darknet Market Mass-Extorts Buyers, Sellers

March 8

News/Trends

• Dropbox Used to Steal Credentials and Bypass MFA in Novel Phishing Campaign

• Meta Details WhatsApp and Messenger Interoperability to Comply with EU’s DMA Regulations

• Watch Out for Spoofed Zoom, Skype, Google Meet Sites Delivering Malware

• What Are the Top 7 DDoS Mitigation Tactics for Energy Grids?

• CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability

• RATs Spread Via Fake Skype, Zoom, Google Meet Sites

• Ransomware Spikes Against Critical Infrastructure, Says FBI

• Cyber Pros Turn to Cybercrime as Salaries Stagnate

• Human vs. Non-Human Identity in SaaS

• Hackers Exploit ConnectWise ScreenConnect Flaws to Deploy TODDLERSHARK Malware

• VMware Issues Security Patches for ESXi, Workstation, and Fusion Flaws

• Self-Propagating Worm Created to Target Generative AI Systems

Law/Policy

• European Court Clarifies Concept of Personal Data

• Governments Eye Disclosure Requirements for AI Development Labs

• EU Agrees ‘Cyber Solidarity Act’ to Bolster Incident Response and Recovery

• Senator Cassidy Issues White Paper with Proposals to Update Health Data Privacy Framework

• US Coast Guard Expands Cyber Command to Combat New Threats

Technical

• Privacy in Cloud Computing through Immersion-based Coding

• Catch’em all: Classification of Rare, Prominent, and Novel Malware Families

• Do You Trust Your Model? Emerging Malware Threats in the Deep Learning Ecosystem

• Precise Extraction of Deep Learning Models via Side-Channel Attacks on Edge/Endpoint Devices

• Gradient Shaping: Enhancing Backdoor Attack Against Reverse Engineering

Report, blogs, podcasts

• A Taxonomy of Prompt Injection Attacks

• Spam and phishing in 2023

• Report: 78% of MSPs Identify Cybersecurity as Prime IT Challenge

• $12.5 billion lost to cybercrime, amid tidal wave of crypto investment fraud

• Whoops! ACEMAGIC ships mini PCs with free bonus pre-installed malware

• AI Tools Put Companies at Risk of Data Exfiltration

• Surveillance through Push Notifications

• Smashing Security podcast #362: Ransomware fraud, pharmacy chaos, and suicide

• Network tunneling with… QEMU?

• BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare

March 1

News/Trends

• 4 Instructive Postmortems on Data Downtime and Loss

• New Phishing Kit Leverages SMS, Voice Calls to Target Cryptocurrency Users

• New BIFROSE Linux Malware Variant Using Deceptive VMware Domain for Evasion

• How to Prioritize Cybersecurity Spending: A Risk-Based Strategy for the Highest ROI

• The mobile malware threat landscape in 2023

• What We Learned from the 2024 State of Cybersecurity Survey

• New Hugging Face Vulnerability Exposes AI Models to Supply Chain Attacks

• Five Eyes Agencies Expose APT29’s Evolving Cloud Attack Tactics

• FBI Issues Alert on Russian Threats Targeting Ubiquiti Routers

• Banking Trojans Target Latin America and Europe Through Google Cloud Run

• UK Unveils Draft Cybersecurity Governance Code to Boost Business Resilience

• Most Commercial Code Contains High-Risk Open Source Bugs

Law/Policy

• How the FBI and CISA Look to Mature the Government’s Top Ransomware Task Force

• EU AI Act: Key Takeaways from the Compromise Text

• FTC’s Khan Warns Tech Industry That Agency Will Strictly Enforce AI Data Privacy

• Biden Executive Order Seeks to Cut China off From Americans’ Sensitive Data

• UK: Privacy Watchdog Cracks Down on Biometric Employee Tracking

Technical

• A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems

• Living-off-The-Land Reverse-Shell Detection by Informed Data Augmentation

• Attention-GAN for Anomaly Detection: A Cutting-Edge Approach to Cybersecurity Threat Management

• Model Predictive Control with adaptive resilience for Denial-of-Service Attacks mitigation on a Regulated Dam

• Physics-aware targeted attacks against maritime industrial control systems

• The Good and The Bad: Exploring Privacy Issues in Retrieval-Augmented Generation (RAG)

Report, blogs, podcasts

• The Just Security Podcast: A Conversation with Avril Haines the Director of National Intelligence of the United States

• NIST Cybersecurity Framework 2.0

• Healthcare sector warned of ALPHV BlackCat ransomware after surge in targeted attacks

• An educational robot security research

• Using AI to Reduce False Positives in Secrets Scanners

• A Cyber Insurance Backstop

• Calendar Meeting Links Used to Spread Mac Malware

• Framing is Everything

• Smashing Security podcast #361: Wireless charging woe, AI romance apps, and ransomware revisited

• The LockBit ransomware gang rears its ugly head again, after law enforcement takedown

• Apple Announces Post-Quantum Encryption Algorithms for iMessage