Security Pop Quiz! q336.mp3

News

Packet Storm Security

* Social Media Users Lack Control Over Data Used By AI, US FTC Says
* Hackers Demand $6 Million From Seattle Airport Operators
* Recent WhatsUp Gold Vulnerabilities Possibly Exploited In Ransomware Attacks
* 14 Dead As Hezbollah Walkie Talkies Explode In Second, Deadlier Attack
* Tor Insists Its Network Is Safe After Conviction Of CSAM Dark Web Admin

Security Affairs

* UNC1860 provides Iran-linked APTs with access to Middle Eastern networks
* US DoJ charged two men with stealing and laundering $230 Million worth of cryptocurrency
* The Vanilla Tempest cybercrime gang used INC ransomware for the first time in attacks on the healthca
* U.S. CISA adds new Ivanti Cloud Services Appliance Vulnerability to its Known Exploited Vulnerabiliti
* Ivanti warns of a new actively exploited Cloud Services Appliance (CSA) flaw

Looking Glass Cyber

securingtomorrow.mcafee.com

Quick Heal

* Staying safe while gaming: how to ensure your children don't become victims of financial fraud
* Blockchain & Fraud Prevention: Strategies to overcome the cryptocurrency scam
* Alert! Income tax refund SMS - Newest way of conducting bank fraud by cyber criminals
* Sextortion Scam: Blackmail scam emails that demand Bitcoin
* Immediate steps to follow if you are a victim of banking fraud

Threat Post

* Student Loan Breach Exposes 2.5M Records
* Watering Hole Attacks Push ScanBox Keylogger
* Tentacles of '0ktapus' Threat Group Victimize 130 Firms
* Ransomware Attacks are on the Rise
* Cybercriminals Are Selling Access to Chinese Surveillance Cameras

Naked Security

ESET

* Influencing the influencers | Unlocked 403 cybersecurity podcast (ep. 6)
* Understanding cyber-incident disclosure
* CosmicBeetle joins the ranks of RansomHub affiliates - Week in security with Tony Anscombe
* ESET Research Podcast: EvilVideo
* AI security bubble already springing leaks

CIS

• CIS Hardened Images: Reconciling Cloud Security and Services Mon, 16 Sep 2024 13:54:00 -0400
  Don't want cloud security to limit performance or availability? Learn how we've been testing CIS Hardened Images with cloud services to support your needs!

Malware Patrol

* InfoSec Articles (08/27/24 - 09/10/24)
* The Evolution of C2 Communication: Custom TCP Protocols

SecList

• -=TWELVE=- is back
  Analysis of Twelve's activities using the Unified Kill Chain method: from initial access to deployment of LockBit- and Chaos-based ransomware and wipers.

MySonicWall

Critical Infrastructure

* 80% of critical infrastructure entities affected by email breaches
* Jeremy Rodrigues | Most Influential People in Security
* Cyberattacks on critical infrastructure increased by 30% in one year

* Protecting ships from cyber terrorism
* Biden administration issues executive order to secure U.S. ports
* Cadisha Miceli | Women in Security 2023

* Supply chain cybersecurity and modern-day cargo theft
* 99% of Global 2000 organizations are linked to a supply chain breach
* Data breaches increased throughout 2023

Case Studies

* The 2 am call: Preparing for a government cyberattack
* Häfele recovers from ransomware attack with new SASE platform
* Ride-hailing company, inDrive, uses new platform to prevent fraud

* From the stone age to cutting edge: A case study on key management
* Challenges with mobile apps as a safety solution in K-12 schools
* Michigan school district deploys AI gun detection, intelligent situational awareness platform

Tools

* CVE-2024-26581 Checker
* Mandos Encrypted File System Unattended Reboot Utility 1.8.17
* Proxmark3 4.18994 Custom Firmware
* Stegano 0.11.4
* Packet Fence 14.0.0

* OSINT tutorial to Find Information from a Phone Number - PhoneInfoga Tool
* 5G - A Business Owner's Dream, A Hacker's Fantasy

Exploits

* htmly 2.9.9 Cross Site Scripting
* WordPress LMS 4.2.7 SQL Injection
* Nexus Repository Manager 3 Path Traversal
* Check Point Security Gateways Information Disclosure
* Telerik Report Server 2024 Q1 Authentication Bypass
* Prison Management System 1.0 Code Injection
* PreSchool Enrollment System 1.0 SQL Injection
* SchoolPlus 1.0 Cross Site Request Forgery
* Online Security Guard Hiring System 1.0 Insecure Settings
* Online Food Management System 1.0 SQL Injection

Last 20 Website Defacements - Zone-h

Press Play to hear the answer!

Advisories

• Ubuntu Security Notice USN-7025-1 Thu, 19 Sep 2024 20:00:57 GMT
  Ubuntu Security Notice 7025-1 - It was discovered that LibreOffice would incorrectly handle digital signature verification after repairing a corrupted document. A remote attacker could possibly use this issue to forge valid signatures.
• Red Hat Security Advisory 2024-6850-03 Thu, 19 Sep 2024 13:40:24 GMT
  Red Hat Security Advisory 2024-6850-03 - An update for firefox is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.
• Red Hat Security Advisory 2024-6843-03 Thu, 19 Sep 2024 13:40:17 GMT
  Red Hat Security Advisory 2024-6843-03 - An update for pcp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Issues addressed include a heap corruption vulnerability.
• Red Hat Security Advisory 2024-6842-03 Thu, 19 Sep 2024 13:40:08 GMT
  Red Hat Security Advisory 2024-6842-03 - An update for pcp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.4 Telecommunications Update Service. Issues addressed include a heap corruption vulnerability.
• Red Hat Security Advisory 2024-6840-03 Thu, 19 Sep 2024 13:40:00 GMT
  Red Hat Security Advisory 2024-6840-03 - An update for pcp is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Issues addressed include a heap corruption vulnerability.
• Red Hat Security Advisory 2024-6839-03 Thu, 19 Sep 2024 13:39:52 GMT
  Red Hat Security Advisory 2024-6839-03 - An update for firefox is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.
• Red Hat Security Advisory 2024-6838-03 Thu, 19 Sep 2024 13:39:45 GMT
  Red Hat Security Advisory 2024-6838-03 - An update for firefox is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.
• Red Hat Security Advisory 2024-6837-03 Thu, 19 Sep 2024 13:39:37 GMT
  Red Hat Security Advisory 2024-6837-03 - An update for pcp is now available for Red Hat Enterprise Linux 8. Issues addressed include a heap corruption vulnerability.
• Red Hat Security Advisory 2024-6816-03 Thu, 19 Sep 2024 13:39:29 GMT
  Red Hat Security Advisory 2024-6816-03 - An update for thunderbird is now available for Red Hat Enterprise Linux 8.6 Telecommunications Update Service.
• Red Hat Security Advisory 2024-6786-03 Thu, 19 Sep 2024 13:39:21 GMT
  Red Hat Security Advisory 2024-6786-03 - An update for firefox is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.
• Red Hat Security Advisory 2024-6785-03 Thu, 19 Sep 2024 13:39:13 GMT
  Red Hat Security Advisory 2024-6785-03 - An update for the ruby:3.3 module is now available for Red Hat Enterprise Linux 9. Issues addressed include a denial of service vulnerability.
• Red Hat Security Advisory 2024-6784-03 Thu, 19 Sep 2024 13:39:05 GMT
  Red Hat Security Advisory 2024-6784-03 - An update for the ruby:3.3 module is now available for Red Hat Enterprise Linux 8. Issues addressed include a denial of service vulnerability.
• Red Hat Security Advisory 2024-6783-03 Thu, 19 Sep 2024 13:38:57 GMT
  Red Hat Security Advisory 2024-6783-03 - An update for openssl is now available for Red Hat Enterprise Linux 9. Issues addressed include a denial of service vulnerability.
• Red Hat Security Advisory 2024-6782-03 Thu, 19 Sep 2024 13:38:49 GMT
  Red Hat Security Advisory 2024-6782-03 - An update for firefox is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.
• Red Hat Security Advisory 2024-6779-03 Thu, 19 Sep 2024 13:38:42 GMT
  Red Hat Security Advisory 2024-6779-03 - Red Hat Advanced Cluster Management for Kubernetes 2.10.6 General Availability release images, which fix bugs and update container images.
• Red Hat Security Advisory 2024-6765-03 Thu, 19 Sep 2024 13:38:33 GMT
  Red Hat Security Advisory 2024-6765-03 - An update is now available for Red Hat Ansible Automation Platform 2.4.
• Red Hat Security Advisory 2024-6757-03 Thu, 19 Sep 2024 13:38:25 GMT
  Red Hat Security Advisory 2024-6757-03 - An update for libnbd is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.
• Red Hat Security Advisory 2024-6755-03 Thu, 19 Sep 2024 13:38:19 GMT
  Red Hat Security Advisory 2024-6755-03 - Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.16.2 on Red Hat Enterprise Linux 9 from Red Hat Container Registry.
• Red Hat Security Advisory 2024-6754-03 Thu, 19 Sep 2024 13:38:11 GMT
  Red Hat Security Advisory 2024-6754-03 - An update for expat is now available for Red Hat Enterprise Linux 9. Issues addressed include an integer overflow vulnerability.
• Red Hat Security Advisory 2024-6753-03 Thu, 19 Sep 2024 13:37:20 GMT
  Red Hat Security Advisory 2024-6753-03 - An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Issues addressed include double free and out of bounds read vulnerabilities.
• Red Hat Security Advisory 2024-6745-03 Thu, 19 Sep 2024 13:37:12 GMT
  Red Hat Security Advisory 2024-6745-03 - An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Issues addressed include a null pointer vulnerability.
• Red Hat Security Advisory 2024-6744-03 Thu, 19 Sep 2024 13:37:05 GMT
  Red Hat Security Advisory 2024-6744-03 - An update for kernel is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Issues addressed include a null pointer vulnerability.
• Red Hat Security Advisory 2024-6738-03 Thu, 19 Sep 2024 13:36:56 GMT
  Red Hat Security Advisory 2024-6738-03 - Multicluster Engine for Kubernetes 2.5.7 General Availability release images, which fix bugs and update container images.
• Red Hat Security Advisory 2024-6734-03 Thu, 19 Sep 2024 13:36:44 GMT
  Red Hat Security Advisory 2024-6734-03 - The components for Red Hat OpenShift for Windows Containers 7.2.2 are now available.This product release includes bug fixes and security updates for the following packages: windows-machine-config-operator and windows-machine-config-operator-bundle.
• Red Hat Security Advisory 2024-6691-03 Thu, 19 Sep 2024 13:36:37 GMT
  Red Hat Security Advisory 2024-6691-03 - Red Hat OpenShift Container Platform release 4.13.50 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include code execution and traversal vulnerabilities.