IT Security News Daily Summary 2020-04-02

• IRS outlines expanded flexible work schedule

• Google Squashes High-Severity Flaws in Chrome Browser

• How Humans “LEAD” the Way to More Effective Use of Threat Intelligence

• How to protect yourself from coronavirus phishing threats

• Bad Bots Build Presence Across the Web

• Critical Vulnerability In LINE Could Allow Admin Access To Official Account

• Microsoft to hospitals: 11 tips on how to combat ransomware

• Nearly Half of Employees Don’t Know What to Do When Ransomware Hits

• Idaho Chiropractor Caught Peddling False Coronavirus Cures On Facebook

• New Coronavirus-Themed Malware Locks You Out of Windows

• Implementing MuleSoft AnyPoint Platform Identity Management Using AWS Cognito Authorization Code

• Work from home: Securing RDP and remote access

• Coronavirus: What business pros need to know

• Zoom’s Security and Privacy Woes Violated GDPR, Expert Says

• Companies Are Failing to Deploy Key Solution for Email Security

• What desktop sharing tools are great for

• Coronavirus: Amazon Promises Protection For Workers After Walkouts

• Prioritizing High-Risk Assets: A 4-Step Approach to Mitigating Insider Threats

• Twitter Reveals That Firefox Cached Private Data For Up to 7 Days

• 5 Ways For Small Businesses to Protect Themselves From Cyberattacks in 2020

• Digital Sanity Summit Cyberbullying Survival Guide | Avast

• Researcher Finds New Class of Windows Vulnerabilities

• Twitter discloses Firefox bug that cached private files sent or received via DMs

• Cybercriminals Exploit Coronavirus With Wave Of New Scams

• Expert On FCA allowing The Use Of Selfies

• AirTags Referenced in New Apple Support Video

• DevOps Chats: Free Remote Endpoint Protection From Qualys

• WordPress Plugin Bug Can Be Exploited to Create Rogue Admins

• Coronavirus Cybercrime Scaling Up

• Security Awareness On GoDaddy Employee Phishing Scheme Jeopardized Escrow.com, Among Others

• Comment: Zoom Client Leaks Windows Login Credentials To Attackers

• BrandPost: State of Software Security: Top 5 Takeaways for Security Professionals

• Class Action Lawsuit Filed Against Marriott Over New Data Breach

• Zoom Is Just The Tip Of The Iceberg For Hackers – Expert Warn

• ‘Secure’ Backup Company Leaks 135 Million Records Online After Misconfiguration – Experts Insight

• Without automation, security gets harder during a business disruption

• Fiber-optic internet cables could monitor earthquakes

• Considering the differences in LAN vs. WAN security

• Experts Reaction On Morrisons Not Liable For 2014 Data Breach, Says Supreme Court

• Roundup: Coronavirus COVID-19 pandemic delivers array of cybersecurity challenges

• Zoom Updates Mac App Installer to Remove Controversial ‘Preflight’ Installation Method

• Full Operational Shutdown—another cybercrime case from the Microsoft Detection and Response Team

• Deals: B&H Photo Discounts 2019 iMac, MacBook Pro, and iPad Air by Up to $200

• Zoom zero-day vulnerabilities patched a day after disclosure

• Dark Web child abuse gang busted; 15TB of files seized

• COVID-19 Phishing Update: Infected Coworker Email Targets Enterprise O365 Credentials

• 5G’s transformational power for local communities

• New MakeFrame Skimmer Claims 19 Victims

• iPhones and iPads Could Someday Automatically Adjust Screen Orientation Using Face ID

• zBang – Privileged Account Threat Detection Tool

• Shmoocon 2020 – Mark Loveless’ ‘Real World Zero Trust Implementation’

• Wi-Fi 6E and 5G will share 6GHz spectrum to supercharge wireless data

• A Hacker’s Perspective on Securing VPNs As You Go Remote

• Daniel Stori’s ‘Beware Of Dog’

• Search for revealing strings in Intezer Analyze

• US Secret Service warns that coronavirus email scams are on the rise

• Winja (VirusTotal Uploader)- The Malware Detector!

• LimeRAT Leveraging Read-Only Excel Files to Disguise Exploit Code

• Zoom Addressing Recent Concerns

• How Federal Employees Can Protect their Agencies During the Pandemic

• Key Ring App Data Leak Exposes 44 Million Images

• Demystifying the Loncom Packer

• Covid-19 / CoronaVirus Domains: a looming threat?

• Using Zoom? Here’s how to keep your business and employees safe

• IRS Warns of Surge in Economic Stimulus Payment Scams

• Marriott Was Hacked — Again

• Attack matrix for Kubernetes

• Zoom Removes Data-Mining LinkedIn Feature

• NetApp IT Podcast: Embracing Automation to Build a Next-Generation Platform for DevOps and More

• Federal Executive Emergency Authorities to Address COVID-19

• Targeted cyberattacks surpass mass attacks for 2019

• Survey: 37% of workers unaware of ransomware, putting businesses at risk

• We’re expanding our VPN network to help during COVID-19 lockdowns

• London Hit by Quarantine Text Scam

• Zoom for macOS Has a Couple of Dangerous Zero-Day Vulnerabilities

• Coronavirus: NSO Offers Covid-19 Tracking Software

• Tackling Remote Security Challenges: Q&A With Chief Security Officer Chris Hickman

• Zero Trust framework to enable remote work

• FBI Releases Guidance on Defending Against VTC Hijacking and Zoom-bombing

• Coronavirus Disinformation and the Need for States to Shore Up International Law

• Robert Herjavec on the importance of cybersecurity as the world works from home

• The Tech Sector After COVID-19

• Shmoocon 2020 – Kurt Opsahl’s And Bill Budington’s ‘Crossing The Border With Your Electronic Devices’

• Don’t get locked out of your own website – update this WordPress plugin now!

• Name That Toon: The Devil You Know?

• Most consumers worry about online privacy but many are unsure how to protect it

• Here is why your healthcare provider cannot accept Venmo payments

• 90 suspects identified in major online child sexual abuse operation

• Beazley: Ransomware attacks on clients ‘skyrocketed’ in 2019

• Terabytes of OnlyFans data being sold on hacking forum

• S2 Ep33: Ransomware on sale, dark web disaster, dead drops and pillow forts – Naked Security Podcast

• Firefox, IE Vulnerabilities Exploited in Attacks on China, Japan

• Browser Makers Delay Removal of TLS 1.0 and 1.1 Support

• In COVID-19 Scam Scramble, Cybercrooks Recycle Phishing Kits

• Ransomware attack on websites of COVID 19 treatment and Italy Social Security

• FBI Warns of Attacks on Remote Work, Distance Learning Platforms

• Biometric IoT sensors shape the future of user interfaces

• Deals: AirPods With Charging Case on Sale for Low Price of $129.98 ($29 Off)

• Apple Partners With Laurene Powell Jobs, Leonardo DiCaprio, and Others to Launch America’s Food Fund

• Automated Moderation Must be Temporary, Transparent and Easily Appealable

• AZORult brings friends to the party

• Managing Team Burn Out

• Office 365 Phishing Uses CSS Tricks to Bypass Email Gateways

• FakeNet Genie: Improving Dynamic Malware Analysis with Cheat Codes for FakeNet-NG

• Customizing Kali Linux

• COVID-19: Latest Security News & Commentary

• COVID-19 – The Excel Puzzle.

• Intel Unveils 10th-Gen Processors Suitable for Next 16-Inch MacBook Pro With Wi-Fi 6 and Turbo Boost Speeds Above 5GHz

• Putin seeking to create new world order with ‘rogue states’ amid coronavirus crisis, report claims

• This weird new gadget stops Amazon’s Alexa spying on you

• Remaining Nimble During Times of Rapid Change

• Zoom’s daily active users jumped from 10 million to over 200 million in 3 months

• Facebook Messenger Launches Standalone Video and Text Chat App for macOS and Windows

• SECURITY ALERT: Zoom Under Scrutiny in Wake of UNC Patch Injection Issue Disclosure

• ‘War Dialing’ Tool Exposes Zoom’s Password Problems

• GTC Thursdays: Building Out an AI Center of Excellence

• Instructor Spotlight: Benjamin Wright, LEG523 Author

• Department of Justice goes after scammers exploiting Coronavirus pandemic

• New COVID19 wiper overwrites MBR making computers unusable

• Unpacking TikTok, Mobile Apps and National Security Risks

• Dr. Anthony Fauci Forced To Beef Up Security As Death Threats Increase

• Infosecurity Europe Cancelled (Finally)

• Best Practices to Manage Third-Party Cyber-Risk Today

• Announcing New QuickStart Services for Strata

• New Magecart Skimmer Infects 19 Victim Websites

• Cloud-First but Not Cloud-Only: Why Organizations Need to Simplify Cybersecurity

• 44M Digital Wallet Items Exposed in Key Ring Cloud Misconfig

• AlgoSec A30.10 Delivers Enhanced Cloud, SDN and Network Security Management for Cisco ACI, Tetration & FirePower, Microsoft Azure, F5 AFM and Juniper Junos Space

• Zoom promises to improve its security and privacy as usage (and concern) soars

• Rethinking VPN: Tailscale startup packages Wireguard with network security

• Mozilla will fund open source COVID-19-related technology projects

• Cloud Migration Strategies

• COVID-19 Malware Wipes Your PC And Rewrites Your MBR

• Microsoft Warns Hospitals About VPN Attacks During Coronavirus

• Crooks use tainted Zoom apps to target users at home due to Coronavirus outbreak

• The Big, Bad Bot Problem

• Trends in the Automated Attack Landscape & the Impact on Businesses

• Are your MS SQL servers part of a cryptomining botnet? Check now!

• Deals: Save on a Wide Variety of Apple’s Silicone, Leather, and Smart Battery Cases for iPhone 11, XS, and XR

• Emerging MakeFrame Skimmer from Magecart Sets Sights on SMBs

• Hack the Box (HTB) machines walkthrough series — JSON

• Holy water: ongoing targeted water-holing attack in Asia

• The state of threats to electric entities: 4 key findings from the 2020 Dragos report

• Infosecurity Europe 2020 Postponed Due to #COVID19

• What is Cryptography?

• Cloudflare debuts 1.1.1.1 for Families, comes under fire for blocking LGBTQIA+ sites

• Spotify Now Supports Siri on Apple Watch

• US Officials Agree New Restrictions On Tech Exports To China – Report

• Coronavirus: UK Government Defends Use Of Zoom

• Helping IT send and provision business PCs at home to work securely during COVID-19

• Manage work devices at home during Covid-19 using Configuration Manager

• Bug bounty platforms buy researcher silence, violate labor laws, critics say

• Data Security and U.S.-China Tech Entanglement

• The U.S. Needs to Get in the Standards Game—With Like-Minded Democracies

• Watchdog Finds New Problems With FBI Wiretap Applications

• Helping businesses rapidly set up to work securely from personal PCs and mobiles

• Vulnerability Researchers Focus on Zoom App’s Security

• Phone carriers must authenticate calls to fight robocalls, says FCC

• Coronavirus: Hackers are now launching dozens of email scams each day

• Cyber criminals are trying to exploit Zoom’s popularity to promote their phishing scams

• Weaponizing domain names: how bulk registration aids global spam campaigns

• LG Says AirPlay 2 and HomeKit Coming to Select 2018 TV Models Later This Year

• Coronavirus Malware Makes Devices Unusable by Overwriting MBR

• Zoom Security Storm: Company Apologises, Hackers Squabble

• Hypervisor Introspection blocks EternalDarkness/SMBGhost Privilege Escalation Exploit (CVE-2020-0796)

• How Relevance Scoring Can Make Your Threat Intelligence More Actionable

• Intruders are hijacking Zoom calls with gross videos — here’s how to avoid ‘zoombombing’

• CNBC Feature: The latest Marriott data breach impacts up to 5.2 million people—here’s what to do if you were affected

• Zoom Phishers Register 2000 Domains in a Month

• Zoom: We’re freezing all new features to sort out security and privacy

• AgeBlock app launched to ensure age restrictions for online content

• Weakness in Zoom for macOS allows local attackers to hijack camera and microphone

• Remote Work is Not New, but it is the New Normal

• Cybersecurity Lawyer Who Flagged The WHO Hack Warns Of ‘Massive’ Remote Work Risks

• What is WireGuard? Secure, simple VPN still in development

• Vulnerable VPN appliances at healthcare organizations open doors for ransomware gangs

• Zoom Vulnerabilities Expose Users to Spying, Other Attacks

• Coronavirus update: In the cyber world, the graph has yet to flatten

• Magecart Hackers Inject iFrame Skimmers in 19 Sites to Steal Payment Data

• Loncom packer: from backdoors to Cobalt Strike

• Zoom-bombing: FBI warns of rise in teleconference hijacking amid stay-at-home order

• COVID-19 forces browser makers to continue supporting TLS 1.0

• FCW Insider: April 2

• Ransomware Attackers Exploit #COVID19 to Target Hospital VPNs

• Fantastical 3.0.9 Adds Cursor Support for iPad and More

• Quick Hits

• Nigerian Threat Actors Specializing in BEC Attacks Continue to Evolve

• Jamf researcher discovers Zoom vulnerabilities

• New Zoom Hack Lets Hackers Compromise Windows and Its Login Password

• COVID-19 malware wipes PC and rewrites MBR

• The internet is now rife with places where you can organize Zoom-bombing raids

• Morrisons Wins Insider Breach Ruling but Liability Concerns Persist

• VelvetSweatshop Excel encryption spreads LimeRAT malware

• Holy Water watering hole attacks with malware

• Microsoft issues targeted notification to hospitals vulnerable to Ransomware attacks

• DevOps Chats: Open Source Security, With WhiteSource

• The Average “Cyber Breach” Costs Business £5,220 Says this Gov’t Report: Is It Badly Wrong?

• VB2019 paper: Cyber espionage in the Middle East: unravelling OSX.WindTail

• Pekraut – German RAT starts gnawing

• Protecting Healthcare Data and Infrastructure

• Hackers use fake Zoom domains to spread malware

• COVID-19 Response: Following Best Telehealth Security Practices

• Bitdefender reveals Mandrake spyware targeting Aussie Android users

• How can you strengthen an enterprise third-party risk management program?

• About them Zoom vulns…

• Corona Virus hits a major Merger and Acquisition deal of HP and Xerox

• Amazon Detective launched to detect Cloud Security Anomalies

• 2020 iPad Pro May Not Have a U1 Ultra Wideband Chip After All

• Best practices and challenges in adopting continuous software testing

• Total number of IoT connections to reach 83 billion by 2024

• ISC Stormcast For Thursday, April 2nd 2020 https://isc.sans.edu/podcastdetail.html?id=6936, (Thu, Apr 2nd)

• Do you have the GRIT to be a cybersecurity consultant?

• Vollgar Campaign Targets MS-SQL Servers With Backdoors, Crypto-Miners

• Windows Running MS-SQL Servers Under Attack!! Hackers Installing 10 Secret Backdoors on Servers

• Large number of mobile apps may be vulnerable to hacking

• There’s now COVID-19 malware that will wipe your PC and rewrite your MBR

• Critical Zoom Vulnerability Allows Hackers to Steal your Windows Password & Escalate Privileges with macOS

• Guide: Making the financial case for outsourcing endpoint protection

• Los 7 hábitos de la gestión de vulnerabilidad altamente efectiva

• We’re All Remote Here: Videoconferencing Securely

• Attivo Networks unveils ADSecure solution for Google Cloud’s Managed Service for Microsoft AD

• Splunk’s new APM solution unlocks real-time observability for cloud infrastructure

• Lenovo expands portfolio of IT infrastructure solutions for enhanced data management

• The Zero Trust Learning Curve: Deploying Zero Trust One Step at a Time

• InfiniteIO Hybrid Cloud Tiering: Providing native file access for traditional and cloud-native applications

• DataStax releases open-source Kubernetes Operator for Apache Cassandra

• Tile Claims Apple’s Anticompetitive Behavior Has ‘Gotten Worse, Not Better’

• ‘Human-layer’ cybersecurity and AI thwart data breaches (VB Live)

• HPE’s open source program simplifies end-to-end automation and accelerates technology evolution

• Datadobi DobiMigrate 5.8: Enhancing integrity reporting of migrations via end-to-end chain of custody

• “Human-layer” cybersecurity and AI thwart data breaches (VB Live)

• Adobe Digital Economy Index: Measuring digital economy in real-time

• Apple’s Orders for iPhone 12 Components Complicated by Unclear Consumer Demand

• TPOT’s Cowrie to ISC Logs, (Thu, Apr 2nd)

• MS-ISAC Releases Advisory on DrayTek Devices

• Anagog raises $10M to accelerate growth and enhance future technology offerings

• “World’s most secure online backup” provider exposes 135M records

• Oversight Dems want answers from GSA on OPM facilities move

• BEST PRACTICES: Why pursuing sound ‘data governance’ can be a cybersecurity multiplier

• SmartBear acquires TM4J to offer enterprise teams BDD support and powerful integrations

• Understanding COVID, ARDS, and Mechanical Ventilation

• Microsoft finds itself in odd position of sparing elderly, insecure protocols: Grants stay of execution to TLS 1.0, 1.1

• Attackers Leverage Excel File Encryption to Deliver Malware

• Testing, Testing, Testing for a More Secure (Internet) World

• Victory! Federal Circuit Enables Public to Hear Arguments In Important Patent Case

• How to Mitigate the Windows Font Parsing Zero-Day Bug via GPO

• CloudGenix-Palo Alto buy combines SD-WAN with cloud security

• Pandemic delays GSA’s e-commerce plans

• Apple’s 2020 MacBook Air vs. 2020 iPad Pro

• IT Security News Daily Summary 2020-04-01

• North Korea-linked Geumseong121 APT group is sending spear-phishing emails to target people interested in North Korean refugees

• Patrick Wardle drops new zero-day doom for Zoom

• Attackers can use Zoom to steal users’ Windows credentials with no warning

• You might want uninstall Houseparty, expert calls it a privacy ‘trojan horse’

• Apple Adding Some 2013 and 2014 MacBook Air and MacBook Pro Models to Vintage Products List at End of April

• YouTube to Launch New ‘Shorts’ Feature to Rival TikTok

• Wiper Malware Called “Coronavirus” Spreads Among Windows Victims

• For the past five years, every FBI secret spy court request to snoop on Americans has sucked, says watchdog

• Microsoft warns hospitals about VPN cyberattacks during coronavirus

• A Passwordless Future Is Here Now

• The EARN IT Act Violates the Constitution

• Zoom client for Windows could allow hackers to steal users’Windows password

• Apple Providing Subsidies to Authorized Service Providers That Offer Repairs on Pickup and Drop-Off Basis

• Microsoft is working on mitigating an entire Windows bug class

• COVID-19 – Update on New Cyber Campaigns

• Cyber Security Roundup for April 2020

• How to protect elections amid the coronavirus pandemic

• Apple Lets Amazon Prime Video App Offer In-App Purchases on iPhone, iPad and Apple TV

• Facebook Wants To Automatically Share Your Location With Friends

• Moving Off-Prem in the Domainless Enterprise

• Managing Escalation Under Layered Cyber Deterrence

• Introduce Kids to Cybersecurity With This Free Activity Book

• Why All Employees Are Responsible for Company Cybersecurity

• Coronavirus: Government Thanks Broadband Providers, As 563 Died In One Day

• ‘Zoom-bombing’ highlights videoconference security vulnerabilities

• GDPR: An impact around the world

• Coronavirus ‘Financial Relief’ Phishing Attacks Spike

• Keeping Your Security Strategy on Track Amidst Tactical Distractions

• COVID-19 pandemic impact pushing smart home voice control devices to predicted 30% growth

• DOD issues permission slips for workers in national capital region

• Cloudflare family-friendly DNS service flubs first filtering foray: Vital LGBTQ, sex-ed sites blocked ‘by mistake’

• Cyberscum have been targeting MS-SQL boxen – and some careless sysadmins got reinfected after cleaning it out

• GitLab Addressed Multiple Important Vulnerabilities With The Latest Releases

• NOAA expands use of unmanned systems

• GSA bot builders add workforce capacity

• The Joy of Tech® ‘FaceTime Background Humiliation’

• Shmoocon 2020 – Mark Griffin’s ‘Knowing The UnFuzzed And Finding Bugs With Coverage Analysis’

• How to Deliver Exceptional Omnichannel Customer Experience

• Voatz disputes claims it was ‘kicked off’ HackerOne

• Cloudflare Launches a DNS-Based Parental Control Service

• Tech Career Ladder podcast: Start your climb to EPIC leader

• Apple and Goldman Sachs Let Apple Card Holders Defer April Payments

• Hackers mining Monero on Microsoft SQL databases for last 2 years

• Amazon’s Detective will help you investigate your cloud computing security mysteries

• Critical WordPress Plugin Bug Can Lock Admins Out of Websites

• Marriott Data Breach

• Clicking Malicious Links in Zoom Client on Windows Can Leak Network Login Credentials

• North Korean Hackers Resume Campaign After December Takedown

• Company Launches Lockdown-Friendly Hacking Competition

• Active Directory Attacks Hit the Mainstream

• What is the Principle of Least Privilege (POLP)? – Definition and Best Practices

• How to Stay Secure While Working Remotely

• Trojanized Zoom Apps Target Work-From-Home Android Users

• Corona-cation? Here’s How to Work From Home Securely

• Apple Seeds First Beta of watchOS 6.2.5 to Developers

• Affordacare Patient Data Allegedly Published Online

• Hacker Group Backdoors Thousands of Microsoft SQL Servers Daily

• Apple’s Pandemic Recovery Donation to China More Than Doubles to $7 Million

• Holy Water watering hole attack targets visitors of certain websites with malware

• Microsoft Alerts Healthcare to Human-Operated Ransomware

• Cloud Security Intelligence Boost for SIEM

• COVID-19 Impact: Cyber Criminals Target Zoom Domains

• Decision Making Before and During Times of Crisis:  A Parallel Between Cybersecurity Incidents and the Current COVID-19 Pandemic

• Microsoft works with healthcare organizations to protect from popular ransomware during COVID-19 crisis: Here’s what to do

• The rising threat of drones to cybersecurity: What you need to know

• Kerberos Tickets on Linux Red Teams

• Apple Shares Trailer for Short Film ‘Here We Are: Notes for Living on Planet Earth’

• Microsoft is Alerting Hospitals Vulnerable to Ransomware Attacks

• Coronavirus: Microsoft directly warns hospitals, ‘Fix your vulnerable VPN appliances’

• iCloud Keychain Gaining Password Warnings, Support for Generating Two-Factor Authentication Codes in iOS 14

• With Kubernetes Operators comes great responsibility

• Nominations Open for the European Cybersecurity Blogger Awards 2020

• COVID-19 could hamper national security, new data shows

• The foundation of a Zero Trust architecture

• Could Work-From-Home Staff be Violating Privacy Laws During Conference Calls?

• Two Zoom Zero-Day Flaws Uncovered

• TSB Suffers Another Online Banking Outage

• Coronavirus: Google Cancels Annual April Fools’ Pranks

• E-Commerce Site Tupperware Suffered Credit Card Skimmer Attack

• Ransomware Payments on the Rise

• Vollgar botnet has managed to infect around 3k MSSQL DB servers daily

• Patch Released for Linux Kernel Vulnerability Disclosed at Hacking Contest

• Cyber Work podcast: Cryptography careers and IoT vulnerabilities with Ted Shorter

• The Zoom Privacy Backlash Is Only Getting Started

• Expanding Free Security Offers into Customers’ Endpoints

• Unpatched Zoom App Bug Lets Hackers Steal Your Windows Password

• Secure Historical Cloud Data with Cloud Data Discovery

• Marriott hacked again, 5.2 million guests affected

• Deals: B&H Photo’s New Apple Shopping Event Includes Solid Discounts on iPad mini, AirPods, and More

• Google Releases Security Updates for Chrome

• Lost or Stolen Device? Here’s What to do Next

• FBI Re-issues Warning About Kwampirs Malware

• On The Uptick In Healthcare Data Breaches

• BrandPost: Addressing the Cybersecurity Workforce Shortage by Training Veterans

• Moscow Rolls Out Coronavirus Patient Tracking App

• Millions Of Guests Impacted In Marriott Data Breach, Again

• How to protect hospitals against the ransomware Netwalker

• Zoom’s End-To-End Encryption Isn’t Actually End-To-End

• Zoom Lets Attackers Steal Windows Credentials via UNC Links

• The SOC Emergency Room Faces Malware Pandemic

• Zoom Under Increased Scrutiny As Popularity Soars

• Foxconn Suggests There is Still Opportunity for 5G iPhones to Launch on Time

• iPhone, iPad, and Mac users report video calling issues during pandemic

• Securing Your Remote Workforce

• Deals: Save on Both 2018 and 2020 iPad Pro Models This Week With Discounts of Up to $184 Off

• Major Cloud, CDN Providers Join Secure Routing Initiative

• LimeRAT malware is being spread through VelvetSweatshop Excel encryption technique

• Zeus Sphinx Malware Reappears amid Coronavirus Phishing Scams

• iOS 13.4 and macOS 10.15.4 Prevent FaceTime Calls From Working With Some Older iPhones and iPads Amid Pandemic

• Top Email Protections Fail in Latest COVID-19 Phishing Campaign

• How Our Partnership With ServiceNow Makes Vulnerabilities Manageable

• Cybersecurity’s Top Needed Skill: Cloud Security

• QR code generator scam steals thousands in Bitcoin

• Attack campaign hits thousands of MS-SQL servers for two years

• 1-15 March 2020 Cyber Attacks Timeline

• AWS Security Service ‘Amazon Detective’ Now Generally Available

• A crypto-mining botnet has been hijacking MSSQL servers for almost two years

• Bill Gates’s YouTube ‘Bitcoin giveaway’ is a big fat scam

• The Cyberspace Solarium Commission: From Competing to Complementary Strategies

• Your colleague was infected with Coronavirus, this is the latest phishing lure

• Digital Sanity Summit Tips for Parents | Avast

• WARNING: Hackers Install Secret Backdoor on Thousands of Microsoft SQL Servers

• Millions of routers running OpenWRT vulnerable to attack

• TEHTRIS XDR Platform, A Holistic Cybersecurity Solution

• Thought Leaders Discuss the “Human Element” at RSA Conference 2020

• China-linked APT41 group exploits Citrix, Cisco, Zoho flaws

• Hackers target zero-day flaws in enterprise Draytek network devices

• At the Supreme Court, Morrisons pops data breach liability win into its trolley – but it’s not a get-out-of-compo free card for businesses

• Panther Labs Launches Open-Source Cloud-Native SIEM

• SecurityWeek Launches Virtual Cybersecurity Event Series

• Critical Flaw in SEO Plugin Exposed Many WordPress Sites to Attacks

• New Phishing Campaign: “Remote-working” VPN Installation

• Coronavirus con artists continue to spread infections of their own

• Coronavirus Pandemic Leads to New and Evolving Cyber Threats

• Cybersecurity warning: These scammers are looking for a way into your email accounts

• Coronavirus: Xerox Ends Hostile Takeover Bid For HP

• Small DDoS Attacks Are Increasing; VPNs Could Fall Victim Next During Epidemic

• Spotify Kids Launches in Canada, France, and the US

• Windows 10 alert: Zoom client can leak your network login credentials

• Dark Web Hosting Provider Hacked

• Marriott International Hit By Second Data Breach

• Lack of Understanding of US Legislation Putting UK Business Data at Risk

• Webinar — Autonomous Breach Protection: The New Security Paradigm Shift

• How Foreign Policy Factors for American Muslims in 2020

• Pandemic impact report: Security leaders weigh in

• Microsoft’s Edge browser to get breached credential alerts

• Experts published PoC exploits for CVE-2020-0796 privilege escalation flaw on Windows

• A technical risk assessment of COVID-19

• VelvetSweatshop Technique Used by Attack Campaign to Deliver LimeRAT

• Industry Leaders And Cybersecurity Experts Insight On Marriott International Data Breach

• Marriott hacked AGAIN – Millions of guests’ data accessed by hackers

• Chinese #COVID19 Conspiracy Theories Date Back to January

• Database Encryption

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• Marriott International discloses its second security incident affecting 5.2 million guests

• Announcing the Release of Malware Prevention for Linux

• New Raccoon Stealer uses Google Cloud Services to evade detection

• Apple’s latest macOS Catalina update mysteriously borks SSH for some unlucky fans. What could be the cause?

• Breaking the Ice: A Deep Dive Into the IcedID Banking Trojan’s New Major Version Release

• Quarantine and Chill: Here’s the information the Netflix stores about you

• 5.2 Million Guests Affected by Second Marriot Breach

• 5 reasons security staff leave (and what to do about it)

• Hackers Attack Health Providers and Demand Ransom

• Marriott International 2020 data breach: 5.2 million customers affected

• How to prepare Microsoft Office and Windows for ransomware and email attacks

• 135 Million Records Leaked by Backup Company

• Zoom Accused of Misleading Users With ‘End-to-End Encryption’ Claims

• Building my Work From Home setup

• LimeRAT malware delivered using 8-year-old VelvetSweatshop trick

• Zoom hit by lawsuit, shares fall

• 42M Users’ Data leaked by Unofficial Telegram App

• Cyber-Attacks Up 37% Over Past Month as #COVID19 Bites

• SMBGhost Vulnerability Allows Privilege Escalation on Windows Systems

• IASME Named Sole Cyber Essentials Certification Body

• ‘Secure’ Backup Company Leaks 135 Million Records Online

• Hackers Deliver LimeRAT Malware Using Password Protected Excel Spreadsheet’s

• Amazon Detective: Analyze and visualize security data to get to the root cause of security issues

• Is Multiplayer Gaming Safe During the Quarantine?

• Marriott International Cites Insurance to Downplay Data Breach

• Hackers use Bill Gates themed video to sell off Ponzi Crypto Scheme

• Collaboration Tools: Essential but Risky in Remote Work

• Critical RCE Bug in WordPress Plugin Let Hackers Gain Admin Access on 200,000 Websites

• Today Marks the 44th Anniversary of Apple’s Founding

• Limiting the Impact of the Cybercrime Pandemic

• [Panel Discussion]Third Party Risk Management: Checklists, Frameworks & Tools

• How to Get Startup Funding as a New Company

• What is Network Lateral Movement? What you Must Know?

• Hackers switched from direct theft of money to gaining control over the infrastructure of companies

• What is Zoombombing and how to defend against it

• WordPress 5.4 “Adderley” Released

• Identity fraud: Protecting your customers from the new kids in town

• This COVID-19 Website By Google Tells You All You Need To Know About Coronavirus!

• Zoom’s end-to-end encryption isn’t actually end-to-end at all. Good thing the PM isn’t using it for Cabinet calls. Oh, for f…

• Cyber Attack on Marriot Hotel leaks data related to 5.2 million guests

• Artificial Intelligence-based App uses the human voice to test for Corona Virus

• Phish of GoDaddy Employee Jeopardized Escrow.com, Among Others

• Who’s responsible for protecting personal information?

• Chinese COVID-19 disinformation campaigns commenced as early as January: Stanford

• ISC Stormcast For Wednesday, April 1st 2020 https://isc.sans.edu/podcastdetail.html?id=6934, (Wed, Apr 1st)

• The future of cybersecurity for connected cars

• 10 tips for working remotely

• Windows Server 2019 OS hardening

• Are ransom payers fueling ransomware?

• Researchers develop a way to quickly purge old network data

• Zoom Client Leaks Windows Login Credentials to Attackers

• CISO’s guide to choosing an automated security questionnaire platform

• Singapore government scraps physical 2FA tokens for government services

• Qakbot malspam sent from an infected Windows host, (Wed, Apr 1st)

• Zoho on collecting customer data and avoiding the cookies trap

• Raccoon Stealer’s Abuse of Google Cloud Services and Multiple Delivery Techniques

• China won’t sit and watch Huawei get ‘slaughtered,’ exec says as US reportedly preps new sanctions

• How Safe are Video Messaging Apps?

• Onapsis nCase Partner Program: Empowering orgs to protect their business-critical apps

• Apple Updates iMovie and iWork Apps for iOS With Trackpad and Mouse Support

• ImageWare Systems solidifies disruptive patent around user experience for multimodal biometrics

• The Inspector General’s Disturbing FISA Memo

• WordPress 5.4 arrives with new blocks, 14% faster editor, and privacy improvements

• This Chrome extension can help protect you from the worst online threats

Generated on 2020-04-02 23:55:11.574587