IT Security News Daily Summary 2020-02-20

• Google Bans 600 Android Apps for Obnoxious Ads

• Attorney General: Facebook Could Potentially Be Held Liable For User Posts

• New Azure Firewall certification and features in Q1 CY2020

• TSA shines a light on insider threats

• New Ponemon Survey — Why Most People Think Their PKI Cannot Scale

• Azure Firewall Manager now supports virtual networks

• Popular Mobile Document-Management Apps Put Data at Risk

• What are the most important pillars of a zero-trust framework?

• Evasion Techniques: Geoblocking by IP

• Google removes 600 Android apps in Play Store adware crackdown

• State-industry cooperation is key to protecting democracy

• Voatz, MIT researchers spar over blockchain e-voting app

• Upcoming 13-Inch MacBook Pro Models to Use Intel’s 10th-Generation Ice Lake Chips

• TIC 3.0 and zero-trust networking

• Mobile Carriers’ Free-Speech Rights Compromised By New Privacy Law? Read It And Weep

• Mercury 7 [Friendship 7 with John Glenn Aboard] Launch Anniversary

• Microsoft Announces General Availability of Threat Protection, Insider Risk Management

• Microsoft Unveils Their New Windows 10 System Icons

• RSA Conference loses one more abbreviated tech giant after AT&T disconnects over Wuhan coronavirus fears

• Internet of Things Candle

• ISS World “malware attack” leaves employees offline

• Ransomware Damage Hit $11.5B in 2019

• TIC 3.0 and zero trust networking

• UK, US and its allies blame Russia’s GRU for 2019 cyber-attacks on Georgia

• Veritas Extends Reach of AI Compliance Tool

• Cisco Patches Critical Flaw in Smart Licensing Solution

• Over 400 ICS Vulnerabilities Disclosed in 2019: Report

• AT&T bows out of RSA Conference 2020

• DEF CON 27, Artificial Intelligence Village – Hyrum Anderson’s ‘Competitions In Infosec Machine Learning’

• WhatsApp Phishing URLs Skyrocket With Over 13,000% Surge

• FTC Refunds Victims of Office Depot Tech Support Scam

• XKCD ‘Picking Bad Stocks’

• Researchers recovered 9 billion email & password combos in 2019

• It’s Time to Break the ‘Rule of Steve’

• WP-VCD Botnet Now Injecting Anti-Adblocker Scripts

• Adobe Patches Two Critical Arbitrary Code Execution Vulnerabilities:

• Russia’s GRU Blamed For Huge Cyberattack On Georgia

• Foxconn ‘Cautiously Resuming’ Chinese Factory Production

• Password Spraying Attack Allowed Hackers to Get Inside Citrix Systems’ Network

• 5G: Huawei unveils new infrastructure products aimed at Europe

• Apple Seeds Second Public Betas of iOS and iPadOS 13.4 With New Mail Toolbar, iCloud Folder Sharing and More

• Threat spotlight: RobbinHood ransomware takes the driver’s seat

• Phishing Threat Actor Blocking Techniques: Geoblocking by IP

• SIEM Still Creates Complexity and Administration Challenges

• Advanced Encryption Standard (AES)

• We know what you did last summer: MGM’s hotel spinoff lost 10.7m guest records and now they’re on hacker forums

• State & Local Governments: The Cyberinsurgency Spreads

• SecZetta and One Identity Partnership Strengthens Non-Employee Identity Governance Processes

• Cloud Access Security Brokers Give Peek into Better Application Security

• SoPo Nonprofit Told, Unknown Number of Clients Affected by Data Breach

• New Microsoft Security innovations and partnerships

• Whodat? Enumerating Who “owns” a Workstation for IR, (Thu, Feb 20th)

• Betting and Gambling Websites under Cyberattack from Chinese Hackers

• Alert! The Days of WhatsApp Are Gone? Stronger Competitor In The Market!

• RSAC 2020: Three Reasons Why the “Human Element” is a Timeless Theme

• Personal Info of 10.6M MGM Resort Guests Leaked Online

• HP Joins Industry-Standards Initiative for Printer Security

• RegRipper Update

• Critical Cisco Bug Opens Software Licencing Manager to Remote Attack

• Coronavirus kills MWC, IBM withdraws from RSA: What about Kaspersky’s Security Analyst Summit?

• Croatia’s largest petrol station chain impacted by cyber-attack

• How to use Restricted Shell to limit user access to a Linux system

• 5 free security apps to keep your Mac safe

• Zero Networks Launches Industry’s First Autonomous Network Access Orchestrator, Announces $4.65 Million in Funding

• Security platform tracks rogue wireless devices via real-time map

• Federal employee unions still quiet on endorsements

• Microsoft Threat Protection Now Generally Available

• Take Greenland Seriously and Literally as a Vital National Security Issue

• ObliqueRAT: New RAT hits victims’ endpoints via malicious documents

• Cybergang Favors G Suite and Physical Checks For BEC Attacks

• Dispatch from Munich: Seeking a Savior in a Time of Westlessness

• Award Winning RiskLens Unveils the RiskLens FAIR Enterprise Model™

• MGM Resorts data breach exposes details of 10.6 million guests

• Adobe released out-of-band updates for After Effects and Media Encoder apps

• Cisco Releases Security Updates

• ProcessUnity Vendor Risk Management expanded to include new best practices configuration

• Google Tells Microsoft Edge Users To Get Chrome for Better Security

• Google Adsense users facing extortion Cyber Threats with fake web traffic

• What Is Taint Analysis and Why Should I Care?

• How Shadow IT could put your organization at risk

• Disruptive ads enforcement and our new approach

• Microsoft Defender ATP for Linux Now In Public Preview

• DigiTimes Continues to Suggest New Version of AirPods Pro Are Forthcoming

• Apply Now For The Hottest Cybersecurity Startup Accelerator Programme

• How some presidential campaigns use DMARC to protect their domains from being spoofed

• Types of user accounts in Windows 10 (local, domain, Microsoft)

• Hackers Get Free MGM Resorts Guest Database with 10M+ Records

• Uncover the Value of your Data for Improving Patient and Business Outcomes at HIMSS 2020

• US, UK Blame Russia For Mass Defacement Of Georgian Websites

• MGM Hack Exposes Personal Data Of 10.6 Million Guests

• AV-TEST Places Cisco Umbrella First in Security Efficacy

• 7 of the World’s Top 10 Open Source Packages Come with This Warning

• ISS World Hack Leaves Thousands Of Employees Offline

• Adobe Releases Patch For Critical Code Execution Vulnerability

• US, UK Blame Russia for 2019 Cyber Attacks in Georgia

• US, UK formally blame Russia for mass-defacement of Georgian websites

• GRU won’t believe it: UK and US call out Russia for cyber-attacks on Georgia last year

• ‘OurMine’ group hijacks Twitter accounts for Olympics and FC Barcelona

• VirusTotal MultiSandbox += QiAnXin RedDrip

• UK Police force denies creating ‘child hacker’ poster

• Ring Makes Two-Factor Authentication Mandatory For All Customers

• Vast number of vulnerabilities found in source code

• Swiss Cybersecurity Body Urges Businesses to Stop Paying Ransomware Demands, Exposes Lax Security Practices

• How to use Windows Recovery Environment

• North Korean malware could still pose major threat

• Almost 6,000 unpatched Citrix NetScaler servers remain vulnerable to critical security flaw

• Bad Guys are sneaking malware into Brit Awards nominee Billie Eilish’s music

• Hacking McDonald’s for Free Food

• Cyber security skills gap could get worse, according to 62% of CISOs

• 5 Strategies to Secure Cloud Operations Against Today’s Cyber Threats

• Israeli soldiers tricked into installing malware by Hamas

• Bug in WordPress plugin can let hackers wipe up to 200,000 sites

• Ransomware attack forces 2-day shutdown of natural gas pipeline

• Iranian hackers breach VPN servers to plant backdoors in corporate networks worldwide

• Fidelis Adds Risk Simulation and MITRE ATT&CK Mapping to Elevate Platform

• How Clever and Secure is Your Home?

• What’s it Like Being a Woman in Cybersecurity?

• Phishing techniques: Asking for sensitive information via email

• 10 Tough Questions CEOs Are Asking CISOs

• Samsung Sent Mysterious Alert To Users Overnight

• MGM Resorts Admits Data Breach Of 10.6 Million Guests

• Web Browser-Based Attacks: How to Protect Users

• Hack the Box (HTB) machines walkthrough series — Heist

• UK Google Accounts To Be Placed Under US Jurisdiction

• Keen to check for ‘abnormal’ user behaviours? Microsoft talks insider risk, AWS imports and compliance at infosec shindig RSA

• Microsoft Insider Risk Management and Communication Compliance in Microsoft 365 now generally available

• Firms Improve Threat Detection but Face Increasingly Disruptive Attacks

• Cometdocs Threatens Legal Action Over Disclosure of Security Issues

• Developers Hack McDonald’s Reward System to Get Free Hamburgers

• Free import of AWS CloudTrail logs through June 2020 and other exciting Azure Sentinel updates

• Cisco fixes a static default credential issue in Smart Software Manager tool

• Plaintext Podcast Episode 1: Former CISO Thom Langford, CEO of (TL)2 Security

• Expert Reaction On Chinese Hackers Have Breached Online Betting And Gambling Sites

• Cloud misconfigurations cost companies nearly $5 trillion

• How Duo’s Device Trust Enables Organizations to Enforce Endpoint Compliance

• What the Explosive Growth in ICS-Infrastructure Targeting Means for Security Leaders

• All Things Mobile Security @RSA 2020

• Microsoft Threat Protection and Insider Risk Management hit general availability

• Azure Sentinel uncovers the real threats hidden in billions of low fidelity signals

• Popular YouTube gaming channel hacked to run crypto scam

• Nearly half of hospital Windows systems still vulnerable to RDP bugs

• Is the internet becoming less open?

• SentinelOne and SafeBreach Partner to Drive Continuous Validation of Endpoint Security

• Microsoft Threat Protection stops attack sprawl and auto-heals enterprise assets with built in intelligence and automation

• UNDER ATT&CK: How MITRE’s methodology to find threats and embed counter-measures might work in your organization

• Cybersecurity: Hacking victims are uncovering cyberattacks faster – and GDPR is the reason why

• Critical Adobe Flaws Fixed in Out-of-Band Update

• ZeroFOX Raises $74 Million to Expand Social Media Threat Protection Business

• FCW Insider: Feb. 20

• Spotify May Be Allowed to Stream Directly on HomePod and Set as Default Music App in iOS 14

• The US Blames Russia’s GRU for Sweeping Cyberattacks in Georgia

• Coming to a Conference Room Near You: Deepfakes

• Quick Hits

• Scam Alert: You’ve Been Selected for ‘Like of the Year 2020’ Cash Prizes

• Tesla Pays $10K for Microsoft SQL Server Reporting Services Bug

• ZeroFox raises $74 million to detect and remediate cyberthreats

• Expert Opinion: Amazon Ring Two-factor Authentication

• New Actors Attack Industrial Control Systems, Old Ones Mature

• To Rank or Not to Rank Should Never Be a Question

• US Gas Company Attacked with Ransomware

• M-Trends 2020: Insights From the Front Lines

• CrowdStrike Co-Founder and CTO Steps Down to Launch Nonprofit Policy Accelerator

• Fat Fingers, Insider Threats Continue to Far Outweigh Cybersecurity Incidents

• MGM Resorts hacked: 10.6 million guests have their personal data exposed on hacking forum

• Cisco critical bug: Static password in Smart Software Manager – patch now, says Cisco

• Bloomberg: Apple May Let iOS Users Set Third-Party Web Browser and Mail Apps as Defaults Over Stock Apps

• ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

• Bluetooth-Related Flaws Threaten Dozens of Medical Devices

• Scammers Use Fake Website to Masquerade as Burning Man Organizers

• Samsung weirdness: Galaxy users freak out over global ‘1’ message from Find My Mobile

• Vulnerabilities in the Core: Key Lessons from a Major Open Source Census

• MGM Grand Breach Leaked Details of 10.6 Million Guests Last Summer

• Ring Rolls Out Mandatory 2FA, New Privacy Controls

• Emotet text message malware spreads

• Login details exposed in password reuse attacks

• Recent ransomware attacks define the malware’s new age

• The CCPA is an opportunity to get your data security house in order

• Deal: Cloud And Networking Certification Training ~ Get 97% OFF

• Chinese Hackers Target Asian Betting Firms

• Attacking the Organism: Financial Services

• Do You Have Gaps in Your Cybersecurity Tech Stack?

• Firefox 73.0.1 fixes crashes, blank web pages and DRM niggles

• February 2020 Web Server Survey

• Experts Insight On Ransomware Attack Forces U.S. Gas Pipeline To Shut Down

• MGM hotel guests face data leak

• Linux and malware: Should you worry?

• 2020 SANS CTI Survey Says Intelligence Is Critical to Security

• Adobe releases out-of-band patch for critical code execution vulnerabilities

• Expert On Amazon Ring Makes 2FA Mandatory

• Cybersecurity Research During the Coronavirus Outbreak and After

• RSA 2020 – what are they talking about?

• Expert Advise On New Digital Blackmail…Pay Up, Or We’ll Make Google Ban Your Ads

• Personal Details Of 10.6M MGM Hotel Guests Posted On A Hacking Forum – Cybersecurity Experts React

• Private data vulnerable as 2,000 UK Government devices stolen

• HHS report 30+ data breaches affecting one million people in 2020

• Ring makes 2FA mandatory to keep hackers out of your doorbell account

• Samsung will be Putin dreaded Kremlin-approved shovelware on its phones, claims Russia

• Over 2000 UK Government Devices Go Missing in a Year

• Four metres underground: illegal cigarette factory uncovered in a bunker in Spain

• Adobe Patches Critical Bugs Affecting Media Encoder and After Effects

• Ransomware Wreaks Havoc Across Europe

• Credit Card Skimmer Found on Nine Sites, Researchers Ignored

• Video: Andrew McKim on Ensuring Security for Tomorrow’s Mobile Endpoints

• RSAC 2020: The roaring 20s. A new decade brings new cybersecurity opportunities and challenges

• What is flowing through your enterprise network?

• Russian banks and energy companies have undergone a new wave of cyberattacks

• Personal details of 10.6M MGM Resorts guests leaked online

• TikTok Explained to a Millennial

• Vulnerability In WordPress Plugin ThemeGrill Demo Importer Allowed Wiping of a Victim Website

• Lesser-Known Social Engineering Tricks

• Are CISOs ready for zero trust architectures?

• Survey Confirms CISOs Stressed Out

• Most credential abuse attacks against the financial sector targeted APIs

• Hackers are actively exploiting a Zero-Day in WordPress ThemeREX Plugin to create Admin Accounts

• Cloud misconfigurations surge, organizations need continuous controls

• Number of records exposed in healthcare breaches doubled from 2018 to 2019

• Ransomware data recovery on Amazon Cloud

• Trump ‘Offered Pardon’ to Assange If He Denied Russia Leak, Court Hears

• What is a Gen 6 Cyber Attack

• Factbook: Healthcare IT practices and cyber preparedness

• Data privacy: What consumers want businesses to know

• Why Is Cyber Resilience Essential and Who’s Responsible for It?

• Top Email Security Threats of 2020 – How To Stop Them

• HP committed to drive more stringent industry standards for printer security

• InfoSec needs a reputation overhaul

• Linux Foundation Releases List of Most commonly used open-source Software & Security Problems

• BluBracket unveils security solution that makes code safe

• EU Proposes Rules for Artificial Intelligence to Limit Risks

• Western Digital iNAND MC EU521: Enhancing the 5G smartphone user experience

• Fortinet launches FortiGate 1800F to accelerate security performance in the data center

• ISC Stormcast For Thursday, February 20th 2020 https://isc.sans.edu/podcastdetail.html?id=6876, (Thu, Feb 20th)

• Watchdog ponders tougher independent oversight for Australia’s encryption laws

• nShield Issuance HSM: Higher security for Entrust Datacard’s card issuance solutions

• Zyxel launches family of WiFi 6 solutions for service providers based upon IEEE 802.11ax standard

• Vulnerable Out of Band Consoles Put Industrial Assets at Risk

• Hackers Target Online Gambling Sites

• Exclusive: Details of 10.6 million MGM hotel guests posted on a hacking forum

• JetPatch 4.0: Adding intelligent workflow automation and Predictive Patching

• Snowflake combines its cloud-native data platform with Google Cloud’s AI, ML and analytics capabilities

• Unsigned Firmware Puts Windows, Linux Peripherals at Risk

• SolarWinds AppOptics makes application troubleshooting simpler, faster, and more accurate

• Trump names Ambassador Richard Grenell acting director of national intelligence

• Trustonic to contribute to the development of secure connected car technologies

• BrandPost: Understanding the Impact of the Cybersecurity Skills Shortage on Business

• Cisco, Fortinet, Palo Alto Networks and SonicWall get NetSecOPEN certified performance results

• Summit 7 prepares Defense and Aerospace Contractors for compliance with the new CMMC regulations

• MGM Resorts – 3,081,321 breached accounts

• EFF to Ninth Circuit: Border Searches of Electronic Devices Require a Warrant

• Navy 2021 budget shows IT, cyber adjustments

• CoSoSys secures strategic investment to accelerate product development and market expansion

• Exclusive: Details of 10.6 million of MGM hotel guests posted on a hacking forum

• Trend Micro delivers strongest quarter in the company’s history

• BrandPost: Securing your Cloud Workloads in Runtime: Why Pre-Runtime Scans Aren’t Enough

• Arctic Wolf appoints Dan Larson as Senior Vice-President of Marketing

• ThreatConnect hires four new senior management team members

• Researchers Fool Smart Car Camera with a 2-Inch Piece of Electrical Tape

• Oi, Cisco! Who left the ‘high privilege’ login for Smart Software Manager just sitting out in the open?

• TSA to roll out strategic plan for insider threats next month

• Microsoft Rolls Out New Windows 10 Optional Update Experience

• Testing Samsung’s New $1,380 Galaxy Z Flip Foldable Smartphone

• Cutting communications overhead for distributed learning apps

• Threat Spotlight: Nuke Ransomware

• Users Have Risky Security Habits, but Security Pros Aren’t Much Better

• New company BluBracket takes on software supply chain code security

• IT Security News Daily Summary 2020-02-19

• US Questions Tech Firm Liability Exemption For User Posts

• User Have Risky Security Habits, but Security Pros Aren’t Much Better

• Microsoft Adds Enterprise Windows 10 Tamper Protection Controls

• U.S. Pipeline Disrupted by Ransomware Attack

• 2020-02-19 – Trickbot gtag wecan23 infection

• Building the bots that keep Wikipedia fresh

• California’s Broadband Fund Ignores Fiber and Favors Slow DSL

• AI-driven cybersecurity teams are all about human augmentation

• The BlackBerry Cylance 2020 Threat Report

• Army plans AR headset rollout

• The power of analytics and visualization for city governments

• AFP vows to damage tech giant reputations if found obstructing law enforcement

• The Unintended SecOps Consequences of Digital Transformation

• DRBControl cyber-espionage group targets gambling, betting companies

• Everything New in iOS and iPadOS 13.4 Beta 2: New TV App Settings, Updated Mail Toolbar and More

• Assange lawyer: Trump offered WikiLeaker a pardon in exchange for denying Russia hacked Democrats’ email

• Apple’s Upcoming ‘CarKey’ Feature Will Let You Send Digital Keys Using Messages App

• BlueKeep Flaw Plagues Outdated Connected Medical Devices

• The Three T’s of Shift Left Security

• Learn the Latest in Cybersecurity For Healthcare Industry at HIMSS 2020

• When the air gap is the space between the ears: A natural gas plant let ransomware spread from office IT to ops

• Swiss Govt Says Ransomware Victims Ignored Warnings, Had Poor Security

• Why ransomware attacks on municipalities spiked in 2019

• US Natural Gas-Compression facility cripples after ransomware attack

• Apple Tweaks Mail Toolbar Once Again in iOS 13.4 Beta 2, Replacing Flag Button With Compose Button

• Former GSA official among Trump’s pardons

• DEF CON 27, Crypto And Privacy Village – Cat Murdock’s ‘Black Mirror: You Are Your Own Privacy Nightmare’

• New paper: LokiBot: dissecting the C&C panel deployments

• Windows 10 KB4532693 Update Bug Reportedly Deletes User Files

• Ransomware Attack Causes US Natural Gas Company to Shut Down for Two Days

• Dharma Ransomware Attacks Italian Users

• Zero-Factor Authentication: Owning Our Data

• DRBControl Threat Actor Potentially Behind Attack on Gambling Websites

• Air Force touts Digital U tech reskilling effort

• Video Depicts Alleged ‘iPhone 9’ But Design Doesn’t Match Up With Rumors

• 2020 Tax Season Attacks Already Targeting Small Businesses

• European Commission Unveils Strategy For Digital Future

• The Missing LNK — Correlating User Search LNK files

• DEF CON 27, Crypto And Privacy Village – Ben Brecht’s ‘MITM Mixed Mode Butterfly Key Privacy Attack’

• 44% of Security Threats Start in the Cloud

• Apple Seeds Second Betas of iOS and iPadOS 13.4 to Developers

• XKCD ‘Phylogenetic Tree’

• US Warns Of Gas Pipeline Shutdown After Ransomware Attack

• WordPress botnet deploys anti-adblocker script to make sure its spammy ads are profitable

• Qualcomm Introduces Snapdragon X60, Smaller 5G Modem Suitable for 2021 iPhones

• The 2020 Presidential Candidates Stay (Mostly) Quiet on Law Enforcement Independence

• VMware Releases Security Updates for vRealize Operations for Horizon Adapter

• Cyber-Flashing on UK Trains Doubles

• Google launches Android 11 Developer Preview 1

• Rudy Giuliani’s Twitter mishaps invite typosquatters and scammers

• Get a grip on data in Box and beyond – for compliance sake

• Air Force Gives Students a Second Crack at Cybersecurity Certification

• Security holes in 2G and 3G networks will pose a risk for next several years

• 4 Cybersecurity Trends that Will Make an Impact in 2020

• New DivvyCloud Report Finds Breaches Caused by Cloud Misconfigurations Cost Enterprises Nearly $5 Trillion

• Cloudflare CEO talks supplying 2020 candidates, enterprises with cloud security

• SentinelOne Achieves Unicorn Status After $200 Million Funding Round

• Unifying security policy across all mobile form-factors with Wandera and Microsoft

• What Should We Do About Section 230?

• IC3.gov 2019 Internet Crime Report: Its All About that BEC

• Don’t use natwest.co.uk for online banking, Natwest bank tells baffled customer

• DHS’s CISA Warns of New Critical Infrastructure Ransomware Attack

• Augmented reality headset stands out in Army 2021 budget request

• Zero-Day in WordPress Plugin Exploited to Create Admin Accounts

• Esper: ‘No pressure’ from White House over JEDI

• Hackers Were Inside Citrix for Five Months

• Over 20,000 WordPress Sites Run Trojanized Premium Themes

• What do a Lenovo touch pad, an HP camera and Dell Wi-Fi have in common? They’ll swallow any old firmware, legit or saddled with malware

• SentinelOne raises $200 million for its AI security platform at a $1 billion valuation

• DRBControl Espionage Operation Hits Gambling, Betting Companies

• Israeli soldiers tricked into installing malware by Hamas agents posing as women

• SMS Attack Spreads Emotet, Steals Bank Credentials

• Uncovering New Magecart Implant Attacking eCommerce

• Ransomware attack hits American energy plant

• Mozilla launches a VPN app for Android and Windows

• Free trojanized WordPress themes lead to widespread compromise of web servers

• Second staff exchange between EU cybersecurity organisations

• Hamas Ensnares Israeli Soldiers with Pretty ‘Ladies’

• How to reset Windows 10

• NetApp Partner Hub: Your Gateway to Success

• JEDI delay impacts classified cloud provisioning

• Mobile World Congress (MWC) 2020 canceled – here’s what to do instead

• WordPress Websites Hacked via Vulnerabilities in Two Themes Plugins

• The State Of Vulnerabilities In 2019

• How to use Windows Backup and Restore Utility

• Cyber Attack result is Coronavirus outbreak

• Google Brings Titan Security Keys to More Countries

• Microsoft Office App Released for iPhone, Combines Word, Excel, and PowerPoint

• FireEye Verodin Operationalizes the World’s Leading Threat Intelligence with Security Validation in Release of Threat Actor Assurance Module by Lynn Harrington

• Cybercriminals get creative with tax scams ahead of April 15

• New Evidence of Secret International Agreements

• Our Robophobia

• Insider data breach survey finds directors most likely to break company policy

• Huawei Loses Legal Challenge Against US Federal Purchase Ban

• Judas DNS – Nameserver DNS Poisoning Attack Tool

• 2020 Webroot Threat Report: Phishing Attempts Grew By 640% Last Year

• Coronavirus domain names are the latest hacker trick

• Expert Insight On Microsoft To Deploy ElectionGuard Voting Software

• 6 Ways to Supercharge Your Risk Reduction With Recorded Future in 2020

• Facebook Dating Rollout Delayed In Europe Over Privacy Questions

• Chinese Hackers Have Breached Online Betting And Gambling Sites

• Why Rudy Giuliani’s Twitter Typos Are A Security Fail

• Hackers Spreading AZORult Malware As a Fake ProtonVPN Installer To Attack the Windows Computers

• In the Face of a Global Health Crisis, Life (and Business) Goes On

• BitSight Partners with OneTrust Vendorpedia to Offer Advanced Third-Party Risk Monitoring

• Don’t Let Iowa Bring Our Elections Back to the Stone Age

• Expert Analysis Of Serious Vulnerability Discovered In Profinet Industrial Communication Protocol

• Ring Doorbell Makes Two Factor Verification Mandatory

• 61% Of CISOs Surveyed Fearing A Decline In Cyber Security Skills – Cybersecurity Expert Reaction

• Experts Reaction On Report: Millions Of Windows And Linux Systems Vulnerable To Cyber-attack

• Australian MPs Call On UK To Block US Assange Extradition

• The Human Element at RSA Conference

• Facebook Ordered To Unlock NSO Staffer Account

• FC Barcelona Twitter Account Hacked, Again, By the Same Group

• Cybertheft in Malta: How a bank lost €13 million

• Photoshop Turns 30, Updated With Dark Mode Support on Mac and Object Selection Tool on iPad

• Ring Makes 2-Factor Authentication Mandatory Following Recent Hacks

• Network traffic analysis for IR: Analyzing IoT attacks

• 5 Ways artificial intelligence Is Being Used to Keep Sensitive Information Secure

• Hackers clone ProtonVPN website to drop password stealer malware

• NIST CSF: Implementing NIST CSF

• Amazon Ring Enables 2FA After Privacy Scares

• Using SafeBreach to stay on top of Cloud Native Security

• Customer-Facing Enterprise Services Bearing the Majority of DDoS Attacks

• Using Breach and Attack Simulation to Effectively Prioritize Vulnerabilities

• Huawei security chief, after court setback, says the Chinese tech giant needs to do more explaining

• Cynet Offers Free Threat Assessment for Mid-Sized and Large Organizations

• SafeBreach Adds Risk-Based Vulnerability Management and Cloud-Native Simulations

• The importance of creating raving fans to build a successful MSP business | Avast

• SafeBreach Debuts Cloud-Native Simulations and Adds Prioritization to Risk-Based Vulnerability Management

• US gas pipeline shut down due to ransomware

• With a New Decade Comes a New Chapter

• Why I am Excited for RSA’s Next Frontier

• How to manage security and privacy in the new Microsoft Edge browser

• Huawei USA security chief: ‘We need to have a transparency initiative’

• Operations at U.S. Natural Gas Facilities Disrupted by Ransomware Attack

• Plenty More Phish in the Sea….

• How to present data to an audience

• ForgePoint Capital Announces $450 Million Cybersecurity Investment Fund

• Hackers exploit zero-day in WordPress plugin to create rogue admin accounts

• Windows Devices in Hospitals Vulnerable to Potential Exploits

• 10 More Apple Stores Reopen Across China, Other Stores Outside of Beijing Remain Closed

• Italian Windows Users Hit by Dharma Ransomware Spam

• US Govt Warns Critical Industries After Ransomware Hits Gas Pipeline Facility

• CISA Disclosed Ransomware Attack at Natural Gas Compression Facility

• Facebook asks to be regulated kinda like a newspaper, kinda like telco

• WHO Warns Of Coronavirus Phishing Attacks – Expert Comments

• Latest Tax Scams Target Apps and Tax-Prep Websites

• Private photos leaked by PhotoSquared’s unsecured cloud storage

• WordPress plugin hole could have allowed attackers to wipe websites

• Medical Devices Intro Major Bluekeep Risk to Hospitals

• Expert On Report: Almost Half Of Connected Medical Devices Are Vulnerable To Hackers Exploiting BlueKeep

• Google Adsense Hit by Bitcoin Ransomware

• Gambling Companies Hit by DRBControl

• Report claims Coronavirus malware increasing

• APIs are becoming a major target for credential stuffing attacks

• Emotet SMiShing Uses Fake Bank Domains in Targeted Attacks, Payloads Hint at TrickBot Connection

• What DNS encryption means for enterprise threat hunters

• Two Day Ransomware Attack on Gas Compressor

• Italy Attacked by Dharma Ransomware Spam

• OpenSSH eases admin hassles with FIDO U2F token support

• How to set up your network to prevent data loss

• FCW Insider: Feb. 19

• Akamai: Cybercriminals are attacking APIs at financial services firms

• US Gas Pipeline Shut After Ransomware Attack

• 5 Surprising Findings from StackRox’s Latest Kubernetes Security Report

• AdSense Extortionists Threaten to Trigger Google Fraud Alarms

• Firefox VPN for Android Now Available for Download

• World Health Organization Warns About Coronavirus Phishing Attacks

• Intentional Malicious Insider Breaches Increased Between 2019 and 2020

• What does a Lenovo touch pad, an HP camera and Dell Wi-Fi have in common? They’ll swallow any old firmware, legit or saddled with malware

• Top 5 Best Dark Web Browser for Anonymous Web Browsing With Ultimate Privacy – 2020

• Former Amazon Exec Says He Shuts Down Alexa for “Private Moments”

• Now Is the Time to Focus on API Security

• The top four Office 365 security pain points

• Imperva Launches the Cyber Threat Index

• FBI on Passwords: Don’t Use Hints, Go for Passphrases

• Companies Don’t Trust Themselves With Zero Trust

• Jon Callas: Encryption is a technology that rearranges power

• A third of all vulnerabilities in 2019 had a CVSS v2 score of 7.0 and above

• Plastic surgery videos leaked due to misconfigured Amazon Web Services Cloud

• US CISA warns of Ransomware attacks impacting pipeline operations

• Ransomware attack on US Gas supply

• Law enforcement leaning on Austrac as legislation ‘lags’ behind technology

• 8.4 million: Number of DDoS attacks researchers saw last year alone

• Researchers observed a 125% increase in malware targeting Windows 7

• Test CISSP knowledge with interactive flash cards

• Is your network already compromised? LUMU illuminates network blind spots

• Mental Health for Hackers: Contents Under Pressure

• Building comprehensive cybersecurity policies

• Red Teaming for Blue Teamers: A Practical Approach Using Open Source Tools

• ISC Stormcast For Wednesday, February 19th 2020 https://isc.sans.edu/podcastdetail.html?id=6874, (Wed, Feb 19th)

• SentinelOne Singularity: AI-Powered XDR platform transforms enterprise security

• Veeam Availability Suite 10 features 150+ new features and enhancements

• IronKey D300 features advanced security, achieves NATO Restricted Level Certification

• Security Experts Say Hackers Can Hack Russian Banks In 5 Days

• Top 3 Trends at Shmoocon 2020

• Ring Updates Device Security and Privacy—But Ignores Larger Concerns

• Chinese hackers have breached online betting and gambling sites

• Currency Cleaning On Demand (Not To Be Confused With Money Laundering)

• YouTube Gaming’s Most-Watched Videos Are Dominated by Scams and Cheats

• FLRA ruling changes union withholding rules

• The Trouble with Free and Open Source Software

• The Billion Pound Manchester City Hack

• Dharma Ransomware Attacks Italy in New Spam Campaign

• Microsoft has a subdomain hijacking problem

Generated on 2020-02-20 23:55:15.896686