March 8

News/Trends

• Dropbox Used to Steal Credentials and Bypass MFA in Novel Phishing Campaign

• Meta Details WhatsApp and Messenger Interoperability to Comply with EU’s DMA Regulations

• Watch Out for Spoofed Zoom, Skype, Google Meet Sites Delivering Malware

• What Are the Top 7 DDoS Mitigation Tactics for Energy Grids?

• CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability

• RATs Spread Via Fake Skype, Zoom, Google Meet Sites

• Ransomware Spikes Against Critical Infrastructure, Says FBI

• Cyber Pros Turn to Cybercrime as Salaries Stagnate

• Human vs. Non-Human Identity in SaaS

• Hackers Exploit ConnectWise ScreenConnect Flaws to Deploy TODDLERSHARK Malware

• VMware Issues Security Patches for ESXi, Workstation, and Fusion Flaws

• Self-Propagating Worm Created to Target Generative AI Systems

Law/Policy

• European Court Clarifies Concept of Personal Data

• Governments Eye Disclosure Requirements for AI Development Labs

• EU Agrees ‘Cyber Solidarity Act’ to Bolster Incident Response and Recovery

• Senator Cassidy Issues White Paper with Proposals to Update Health Data Privacy Framework

• US Coast Guard Expands Cyber Command to Combat New Threats

Technical

• Privacy in Cloud Computing through Immersion-based Coding

• Catch’em all: Classification of Rare, Prominent, and Novel Malware Families

• Do You Trust Your Model? Emerging Malware Threats in the Deep Learning Ecosystem

• Precise Extraction of Deep Learning Models via Side-Channel Attacks on Edge/Endpoint Devices

• Gradient Shaping: Enhancing Backdoor Attack Against Reverse Engineering

Report, blogs, podcasts

• A Taxonomy of Prompt Injection Attacks

• Spam and phishing in 2023

• Report: 78% of MSPs Identify Cybersecurity as Prime IT Challenge

• $12.5 billion lost to cybercrime, amid tidal wave of crypto investment fraud

• Whoops! ACEMAGIC ships mini PCs with free bonus pre-installed malware

• AI Tools Put Companies at Risk of Data Exfiltration

• Surveillance through Push Notifications

• Smashing Security podcast #362: Ransomware fraud, pharmacy chaos, and suicide

• Network tunneling with… QEMU?

• BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare