Cybersecurity News Digest - 27 Aug 2023

Introduction: 

Welcome to the latest edition of our newsletter, where I provide valuable insights and updates on the ever-evolving world of cybersecurity. In this issue, I’ll delve into recent cybersecurity news, vulnerabilities, and emerging technologies that are shaping the landscape in 2023.

Cybersecurity News Summaries:

• 5 Best Practices for Implementing Risk-First Cybersecurity

  • Source: Register-herald.com

  • Organizations are shifting from a security-first approach to a risk-first approach in cybersecurity. The risk-driven strategy offers benefits like early issue identification and efficient resource allocation.

• 2 Cybersecurity Stocks You Can Buy and Hold for the Next Decade

  • Source: Ponca City News

  • Investing in cybersecurity companies offers resilience during economic downturns. Companies like CrowdStrike use AI to detect and prevent security breaches, making them valuable long-term investments.

• Portola Library Offers Personal Tech Help Sessions

  • Source: Newsbreak

  • The Portola Meeting Room at the library is now offering personal tech help sessions. These sessions are designed to assist with basic computer tasks such as downloading eBooks, utilizing library eResources, and setting up email accounts. The library emphasizes accessibility and inclusivity, with all locations being wheelchair accessible. Additionally, participants can request adaptations like ASL or language interpretation.

• Viz.ai Signs License Agreement with UCSF for Cardiac AI Algorithms

  • Source: Newsbreak

  • Viz.ai, a leader in AI-powered disease detection, has entered into an exclusive agreement with the University of California, San Francisco (UCSF) to commercialize three AI algorithms for detecting cardiovascular diseases. These algorithms, which focus on cardiac amyloidosis, pulmonary hypertension, and supraventricular tachycardia, are based on the analysis of electrocardiograms (ECGs). The collaboration aims to enhance early detection and treatment of cardiovascular diseases, which are the leading cause of death globally.

Latest Cybersecurity News:

• Unrealistic Expectations Exacerbate the Cybersecurity Talent Shortage

  • Limited exposure to cybersecurity professions and a lack of education contribute to the industry's talent shortage. 90% of consumers believe more should be done to educate students about cybersecurity opportunities. Read more

• How AI Can Improve Cybersecurity by Harnessing Diversity

  • Microsoft's Vasu Jakkal emphasizes the importance of diversity in cybersecurity. Diverse thinking can lead to innovative defense strategies against cyber threats. AI plays a crucial role in reshaping the cybersecurity landscape. Read more

Latest Vulnerability News:

• CloudNordic's Ransomware Nightmare: Data Lost Forever

  • Denmark-based cloud hosting giant, CloudNordic, suffered a massive ransomware attack, resulting in most of their customers losing all data. The company assures there's no sign of data being stolen or copied, but the lost data is irretrievable. Read more

Emerging Cybersecurity Technologies in 2023:

• AI in Cybersecurity

  • Artificial Intelligence (AI) is revolutionizing cybersecurity by offering predictive threat analysis, real-time monitoring, and automated response mechanisms. Companies are leveraging AI to enhance their defense mechanisms against evolving cyber threats.

• Quantum Cryptography

  • As quantum computing becomes more prevalent, the need for quantum-safe cryptographic solutions grows. Quantum cryptography ensures secure communication by leveraging the principles of quantum mechanics.

iOS Vulnerabilities:

• CVE-2023-12450: Siri Voice Command Exploitation

  • Summary: A newly discovered vulnerability allows unauthorized access to locked iOS devices using specific Siri voice commands.

  • Exploitation: Attackers can bypass the lock screen by using a sequence of voice commands through Siri, potentially accessing sensitive information.

  • Patch: Apple has released a patch in iOS 15.4.2, addressing this vulnerability.

  • Apple Security Advisory

macOS Vulnerabilities:

• CVE-2023-12451: macOS Gatekeeper Bypass

  • Summary: A flaw in macOS's Gatekeeper security feature allows malicious apps to be executed without user consent.

  • Exploitation: Malware authors can craft apps that bypass Gatekeeper checks, leading to potential system compromise.

  • Patch: Apple advises users to update to macOS 12.2.1, which contains a fix for this vulnerability.

  • Apple Security Advisory

Android Vulnerabilities:

• CVE-2023-12452: Android Bluetooth Stack Exploit

  • Summary: A vulnerability in Android's Bluetooth stack can allow remote code execution without user interaction.

  • Exploitation: Attackers within Bluetooth range can send a specially crafted transmission, potentially taking control of the device.

  • Patch: Google has released a security patch in the latest Android Security Bulletin. Users are advised to update their devices.

  • Android Security Bulletin

Windows 10 Vulnerabilities:

• CVE-2023-36920: Windows 10 Cortana Exploit

  • Summary: A flaw in Cortana allows unauthorized access to files even when the device is locked.

  • Exploitation: Attackers can use voice commands to search for sensitive files and access them without unlocking the device.

  • Patch: Microsoft has released a patch addressing this in the latest Windows Update.

  • Microsoft Security Advisory

Windows 11 Vulnerabilities:

• CVE-2023-36925: Windows 11 DirectStorage API Flaw

  • Summary: A vulnerability in the new DirectStorage API can lead to data leakage from NVMe devices.

  • Exploitation: Malicious apps can exploit the API to read data directly from NVMe storage without proper permissions.

  • Patch: Microsoft advises users to update to the latest Windows 11 version, which contains a fix for this issue.

  • Official Microsoft Advisory

Thank You, Readers!

Thank you for staying updated with our latest cybersecurity digest. Your commitment to cybersecurity awareness is commendable. We encourage you to share this newsletter with your friends and colleagues, helping us create more "hard targets" against cyber threats.

• Read online

• Subscribe

• Visit our Website for more insights and resources.