IT Security News Daily Summary 2020-03-09

• How Microsoft Disabled Legacy Authentication Across the Company

• Google Play Protect Miserably Fails Android Protection Tests

• Former CIA employee Joshua Schulte was convicted of only minor charges

• AMD, boffins clash over chip data-leak claims: Side-channel holes revealed in decade of processors

• NSO Group fires back at Facebook: You lied to the court, claims spyware slinger, and we’ve got the proof

• Public’s Right to Access Court Proceedings Calls For Livestreaming Hearing in Notorious Patent Troll Case

• Intricate Phishing Scam Uses Support Chatbot to ‘Assist’ Victims

• Intricate Phishing Scam Uses Support Chatbot to ‘Assist’ Victims

• A decade’s worth of AMD chips offer data takeaway via a side channel but AMD yawns and says ‘meh, not an issue’

• Australia Sues Facebook Over User Data Breach

• NFFE launches program to offset effects of workforce orders

• A week in security (March 2 – 8)

• Contractors and COVID-19

• Hackers are exploiting critical vulnerability in Microsoft Exchange server

• On front lines, first responders brace for coronavirus — and their own protection

• DEF CON 27, Packet Hacking Village – Joseph Muniz’ ‘Old Tech Vs. New Adversaries Round 1’

• The Overarching Challenge To The American Way Of Life: Predatory John Deere Fighting The Right (And Capability) To Repair

• How a Wikileaks dump alerted foreign hackers to U.S. tactics

• Luke Kingma’s & Lou Patrick-Mackay’s Futurism Cartoons ‘Scrolling’

• Researchers develop new side channel attacks on AMD chips

• Malware Spread as Nude Extortion Pics of Friend’s Girlfriend

• NSO Group fires back at Facebook: You lied to the court claims spyware slinger, and we’ve got the proof

• Ushering in the future of government pay

• Coronavirus caution forces support for the largest number of remote workers in history

• A Bad Deal for Afghanistan

• Ex-CIA Accused of Leaking Secret Hacking Tools to WikiLeaks Gets Mistrial

• Microsoft: 99.9 percent of hacked accounts lacked MFA

• The Debate Around Password Rotation Policies

• JEDI injunction decision hinges on cloud storage definition

• Today at Apple Sessions in Seattle and San Francisco Bay Areas Canceled Due to Coronavirus

• Vulnerability Summary for the Week of March 2, 2020

• Months-long trial of alleged CIA Vault 7 exploit leaker ends with hung jury: Ex-sysadmin guilty of contempt, lying to FBI

• Cyber Resiliency, Cloud & the Evolving Role of the Firewall

• University of Kentucky Defeats Month-Long Cyber-Attack

• It’s not a breach… it’s just that someone else has your data

• Defense Contractor Taken Offline by Ransomware

• Microsoft Exchange Server Flaw Exploited in APT Attacks

• The Internet Avoided a Minor Disaster Last Week

• Folding@Home Wants Your CPU Cycles for Coronavirus Research

• Microsoft Exchange CVE-2020-0688 Under Active Exploit

• Malicious Spreadsheet With Data Connection and Excel 4 Macros, (Mon, Mar 9th)

• City of Durham, NC Shut Down Network After Ryuk Ransomware Attack

• Amid Coronavirus Outbreak, Apple Confirms That It’s Okay to Clean Your iPhone With Disinfectant

• Deals: Tile’s New Limited Time Sale Offers Big Savings on Mate, Slim, and Sticker Bluetooth Trackers

• Spotify Updates Mobile and Tablet Apps With New Home Screen for Quicker Access to Favorites

• Bluetooth security in Windows 10

• Apple Watch Series 6 and watchOS 7 to Feature Watch Face Sharing, Parental Controls and More

• Navigating Information Disclosure Requests With SpectX

• Expanded Mouse Cursor Support Coming to iPadOS 14 Alongside New Smart Keyboards With Trackpads

• Icon for Apple’s Rumored Over-Ear Noise Canceling Headphones Discovered in Leaked iOS 14 Code

• Last Week’s Internet Calamity That Wasn’t

• Dark Web search engine Kilos lets users find hidden marketplaces

• Deals: Get the New 128GB MacBook Air for $849.99 ($250 Off, Lowest Ever Price)

• Revista Factum suffered week-long cyber attacks for denouncing corruption by the president of El Salvador

• Enabling Business Continuity in an Uncertain Global Environment

• The Case for CSP Automation

• Malware Campaign Feeds on Coronavirus Fears

• The Pentagon’s General Counsel on the Law of Military Operations in Cyberspace

• NEW PODCAST: Duo’s Advisory CISOs Star in “Murder Board”

• Behavioral blocking and containment: Transforming optics into protection

• Proposed Bill Seeks to Protect Researchers Disclosing Classified Government Backdoors

• Road to Detection: YARA-L Examples — Part 4 of 3

• A Nuanced Approach to MSSP and MDR Services

• How to Easily Set Up Mutual TLS

• Top Tips for Secure Remote Working

• Facilities That Lost Data Center Status at Increased Risk of Cyberattacks: GAO

• SECURITY ALERT:  TDC Phishing Campaign Spreads like Wildfire through Legitimate Google Ads

• What is Exposed Password Screening?

• Accenture Acquires Context Information Security

• Windows 10 PowerToys Excitement Builds as New Toys Announced

• (ISC)² Membership Grows to Over 150,000

• Real-life cybercrime stories from DART, the Microsoft Detection and Response Team

• Cybersecurity Conferences Postponed and Canceled Over #Coronavirus Fears

• Crescendo: Real Time Event Viewer for macOS

• The rising threat of drones to cybersecurity: What you need to know

• A Round-up of Data Breaches in February 2020

• Passwords belong in time capsules, not IT ecosystems

• Mining Malware Attack on Kentucky University and Healthcare

• WatchGuard Buys Panda Security for Endpoint Security Tech

• Human-Operated Ransomware Is a Growing Threat to Businesses: Microsoft

• UK Defence Committee probe into national security threat of Huawei sure to uncover lots of new and original insights

• Brave to generate random browser fingerprints to preserve user privacy

• AMD Downplays CPU Threat Opening Chips to Data Leak Attacks

• International Women’s Day: awareness of stalkerware, monitoring, and spyware apps on the rise

• Hackers Can Clone Millions Of Toyota, Hyundai, And Kia Keys

• Facebook Sued By Australian Information Watchdog Over Cambridge Analytica-Linked Data Breach

• Spyware Maker NSO Group Fails To Show Up In Court

• Develop a Secure CRUD Application Using Angular and Spring Boot

• NordVPN Patched a Flaw In Their Payments Platform That Exposed Users’ Details

• Virgin Media Exposes Thousands Of Database Records

• HPE Container Platform: Unified container platform built on open source Kubernetes

• How to Write a Great Speaker Submission

• Critical RCE Vulnerability in Cisco Protection let Hackers Execute an Arbitrary code Remotely

• Twitter First: Trump Video Retweet Tagged as ‘Manipulated Media’

• Cyberattackers are delivering malware by using links from whitelisted sites

• Researchers Disclose Two New Attacks Against AMD CPUs

• NetApp Celebrates Women’s History Month

• WatchGuard Announces Intention to Acquire Panda Security

• Australia’s privacy watchdog sues Facebook over Cambridge Analytica scandal

• Government based hacking groups are attacking Microsoft Exchange Servers

• 9 Years of AMD Processors Vulnerable to 2 New Side-Channel Attacks

• One billion Android smartphones racking up security flaws

• Oh, you won an award? Don’t click that vanity scam spam link

• Aussie Watchdog Sues Facebook Over Cambridge Analytica Breach

• Covid-19 Phishing Scams | Expert Comments

• NEW TECH: Exabeam positions SIEM technology to help protect IoT, OT systems

• Facebook Sued by OAIC for Allegedly Violating Over 300K Aussies’ Privacy

• Serverless Architecture = What Cloud Should Be

• Threat Awareness: A Critical First Step in Detecting Adversaries

• Network traffic analysis for IR: Basic protocols in networking

• Beyond IT: Assessing the Human Impact of Healthcare Cybersecurity

• Panda Security Turns 30; Brand Set for Extinction After WatchGuard Buyout

• The top 5 states for cybersecurity jobs

• Could the U.S. Sanction the International Criminal Court?

• Spotify Premium APK: Everything You Need To Know

• Google Just Made It Easier To Use 2FA To Secure Your Accounts – Expert Comments

• Mac is Now More Prone to Cyber Threats, Recent Events Explain Why!

• Coronavirus-themed scams and attacks intensify

• Panda Security Turns 30; Brand Set of Extinction After WatchGuard Buyout

• Virgin Media Accused of Downplaying Security Incident

• Nation-state actors are exploiting CVE-2020-0688 Microsoft Exchange server flaw

• Spyware maker NSO runs scared from Facebook over WhatsApp hacking charges, fails to show up in court

• Cybersecurity Law Casebook

• Powerbeats4 Leaked, Expected to Feature H1 Chip With ‘Hey Siri’ Support and More

• Microsoft: Turn off Memory Integrity if it’s causing problems

• Intel Hardware-Based Cryptography ‘At Risk’ From New Flaw

• SANS: Gender Still Biggest Challenge for Many Women in Cyber

• Nation-state groups hack Microsoft Exchange servers

• Scammers Use Coronavirus Map To Spread Malware

• Now you need a notarized document to get a .gov domain

• Sonos Scraps Upgrade Scheme ‘Bricking’ Requirement

• Government’s Huawei Decision Faces Parliamentary Inquiry

• 99% of compromised Microsoft enterprise accounts lack MFA

• Virgin Media Breach ‘Disclosed Sensitive Data’

• Phishing: Google just made it easier to use 2FA to secure your accounts

• From Nigerian Princes to Bitcoin Trading: Online Scams Have Come a Long Way

• Facebook Shutters London Offices After Coronavirus Infection

• 5.5 million 2019 malware attacks in GCC

• New research reveals Cerberus Malware easily preventable

• Security breach at T-Mobile exposed data of customers and employees

• Expert Advise On Misleading Political Ads

• Australian watchdog sue Facebook

• Enforcement of the GDPR will be strengthened in 2020

• Vexed Researcher Discloses Zoho Zero-Day Vulnerability On Twitter – Patch To Arrive Soon

• Monday review – the hot 29 stories of the week

• Healthcare Providers Lose an Average $2.75 Million per Data Breach

• Coming (Very) Soon: DevSecOps Days Virtual Summit

• Cybersecurity Risk Management … Beyond the “Golden Period”

• Top cybersecurity facts, figures and statistics for 2020

• iPhone users may get 25$ from Apple for slowing down their devices

• Former US Inspector General Indicted for Software Theft and Fraud

• How Visa built its own container security solution

• Check Point chap: Small firms don’t invest in infosec then hope they won’t get hacked. Spoiler alert: They get hacked

• VB2019 paper: Play fuzzing machine – hunting iOS and macOS kernel vulnerabilities automatically and smartly

• DigiTimes: Apple’s Travel Restrictions Could Delay iPhone 12 Launch Until October

• APT Groups Attack Exchange Servers Via Patched Flaw

• The Digital Revolution: Ways to Drive Business Growth in the Private Education Sector

• NordVPN HTTP POST bug exposed customer information, no authentication required

• FCW Insider: March 9

• Apple Watch Blood Oxygen Monitoring Feature Found in iOS 14 Code

• Home Office Inches Closer to Unified Crime Data Lake

• 3 Tips for Enterprise Patch Management

• Sodinokibi Ransomware operators threaten to leak ‘dirty’ financial data of a company

• Australia vs Facebook as Privacy commissioner launches Federal Court action

• Keeping Systems Safe From Third Parties

• AnimeGame – 1,431,378 breached accounts

• A Billion Android smartphones and tablets are vulnerable to hackers

• Maximizing customer engagement when fraud prevention is top of mind

• ARM Processors with Mac Pro Level Performance Possible Today

• Hackers using ultrasonic sounds to hack Google Assistant and Siri

• Europe’s Gaia-X cloud service faces a difficult future

• 5G marketing echoes the hype around 3G and 4G: ICANN CTO

• Australia vs Facebook as Privacy Commissioner launches Federal Court action

• Automate manual security, risk, and compliance processes in software development

• SymTCP: New approach to protecting Army systems without massive amounts of manual intervention

• ISC Stormcast For Monday, March 9th 2020 https://isc.sans.edu/podcastdetail.html?id=6900, (Mon, Mar 9th)

• OPM presses agencies to prep for telework in updated COVID-19 guidance

• Passwords still dominant authentication method, top cause of data breaches

• WatchGuard Technologies to Acquire Panda Security

• To Be or Not to Be: BCSI in the Cloud?

• Service providers can secure and protect DNS traffic with A10 Networks DoH capability

• International Women’s Day: Connecting the dots during career change

• OPM stresses telework in updated COVID-19 guidance

• Aruba’s indoor Wi-Fi 6 APs achieve Wi-Fi CERTIFIED 6 certification from the Wi-Fi Alliance

• Court says AWS ‘likely to succeed’ in JEDI protest

• Multiple nation-state groups are hacking Microsoft Exchange servers

• Excel Maldocs: Hidden Sheets, (Sun, Mar 8th)

• Accenture acquires Context Information Security to strenghten its existing portfolio

• International Women’s Day: Connecting the dots during career change

• Why Honeywell can’t claim ‘the world’s most powerful quantum computer’

• IT Security News Weekly Summary – Week 10

• IT Security News Daily Summary 2020-03-08

• Directory Users and Computers Reporting

• Tim Cook Offers Work From Home to Most Apple Staff Amid Coronavirus Concerns

• The City of Durham shut down its network after Ryuk Ransomware attack

• DEF CON 27, Packet Hacking Village – Matt Nash’s ‘Head In The Clouds’

• Week in review: Kali Linux evolution, ransomware getting more fearsome

• Ryuk Ransomware Behind Durham, North Carolina Cyberattack

• Netgear fixes a critical RCE that could allow to takeover Flagship Nighthawk routers

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comics – ‘WEEK 267’

• The Risk of Microsoft Owning Your Identity

• DEF CON 27, Packet Hacking Village – Mike Raggo’s ‘StegoAugmented Malware’

• How to harden your employees from the massive social engineering threat

• Apple’s Upcoming 5G iPhone Could Be Delayed Due to Coronavirus

• Reading Between the Lines of Afghan Agreements

• Celebrating #IWD2020

• Google Stops Issuing Security Warnings About Microsoft Edge

• 250,000+ Login/Passwords Leaked in The Trident Crypto Fund Data Breach

• New US Bill Aims to Protect Researchers who Disclose Govt Backdoors

• Users can now Use 2 Step Verification on their Chrome and Safari Browser

• Reading between the Lines of Afghan Agreements

• New Coronavirus-themed malspam campaign delivers FormBook Malware

• IWD: biometrics, machine learning, privacy and being a woman in tech – Naked Security Podcast

• 16 Women Paving the Way in AppSec

• Coronavirus Actions Plans and Risks to Consider

• Security Affairs newsletter Round 254

• Facebook sues Namecheap to protect people from domain name fraud

• Apple Agrees To Pay $500 Million in Settlement For Slowing Down The Older iPhones to Buy New Models

• Preparing Clients for HIPAA as an MSP

• Dawn of a new decade: Leaping from GRC to IRM – A building block approach

• NICE to Drive Digital Transformation for Nassau NY Police & DA’s Office

• iPhone 11 Models Seeing Shortages in NYC

Generated on 2020-03-09 23:55:10.532622