Cybersecurity Digest #95: 13/05/2024 – 27/05/2024

28/05/2024

Zoom announced a Post-Quantum End-to-End encryption for meetings.
A spyware app has been found running on computers at several hotels around the US, which is leaking screenshots of guest information to the internet.
30+ Tesla cars were hacked using third-party software. That could be used to gain unauthorized access to TeslaLogger.
Google has released a new emergency security update to address the eighth zero-day vulnerability in Chrome browser.
Hackers use DNS tunneling to track when their targets open phishing emails and click on malicious links.
A threat group has upgraded the classic gift card scam by targeting the systems that register the cards, allowing them to “print” money at will.
Microsoft recently unveiled a new AI-powered feature “Recall”. This new Windows AI technology records all PC activities.
Critical VMware Vulnerabilities let attackers execute code and trigger DOS.
May 2024 Patch Tuesday forecast: A reminder of recent threats and impact.
A banking Trojan impacting Google Android devices, dubbed “Antidot” by the Cyble research team, has emerged, disguising itself as a Google Play update.

Robert Lemos from Darkreading explains how to pick a right database tech for cybersecurity defense.
Kevin Mandia, CEO of Mandiant at Google Cloud calls for content “watermarks” because the industry is full of AI-generated fake audio and video traffic.
Rich Kanadjian, Global Business Manager at Kingston Technology discusses how secure is the password protection on your files and drives.
Airbnb’s Allyn Stott and Jeffrey Schwartz from Darkreading are rethinking the way we work with detection and response metrics.
Nate Nelson discusses the weirdest trend in Cybersecurity: returning to USB’s.
The Hacker News’ guide to finding the right endpoint detection and response (EDR) solution for your business’ unique needs.

Seventy percent of chief information security officers (CISOs) have said their businesses are at risk of a cyber-attack in the next year.
According to Arctic Wolf Networks’ Cybersecurity trends report, 48% of organizations identified the evidence of a breach within their environment in the last 12 months.
KPMG finds that Cybersecurity leaders expect their SOC budgets to grow this year.
Mitek’s 2024 Identity Intelligence Index reveals sophisticated and diverse fraud threats, leaving banks on high alert.
IBM in partnership with AWS explores what matters now for Cybersecurity leaders to protect their organizations’ generative AI solutions.

Santander bank warns of a data breach exposing customer information.
Cencora and three more pharmaceutical companies’ data breach exposed US patient info from 11 drug companies.
LockBit ransomware gang says they stole data in London Drugs ransomware attack.
Western Sydney University has notified students and academic staff about its Microsoft 365 and Sharepoint environment data breach.
More than two million customers were affected by WebTPA data breach.
Dell confirms that their database was hacked — 49 million customers were affected.
Firstmac Limited, the largest non-bank lender in Australia is warning customers about a massive data breach.