IT Security News Daily Summary 2020-04-09

• Twitter Removes Privacy Option, and Shows Why We Need Strong Privacy Laws

• Google, Microsoft talk up security after Zoom firestorm

• Why Hybrid Cloud Environments Require More Than Just First-Generation IDaaS Solutions

• Video: Deepfakes – A Technical Peek Behind the Curtain

• Musings on Modern Data Security

• APTs infiltrated Linux servers undetected for nearly 10 years

• OPM loosens purse strings on recruitment, retention and relocation

• Unique P2P Architecture Gives DDG Botnet ‘Unstoppable’ Status

• More free, discounted tech for governments responding to COVID-19

• Pelosi continues to resist calls for remote voting

• How to secure a Kubernetes cluster by preventing unwanted modules from loading

• Cloudflare Axes Google reCAPTCHA Due to Privacy, Price

• Enable remote work while keeping cloud deployments secure

• Coronavirus: Samsung, Facebook, Donate Devices To NHS

• Apple’s COVID-19 App Gains Features for Accessing State Guidelines and Self Care Tips

• Ever needed a Zoom password? Probably not. But why not?

• Imperva is a Leader in the Forrester Wave: Web Application Firewalls, Q1

• Promising Results for Post-Quantum Certificates in TLS 1.3

• Traffic jams are contagious. Understanding how they spread can help make them less common

• Deloitte highlights top 9 challenges for enterprises during COVID-19 crisis

• The Sandboxie Windows sandbox isolation tool is now open-source!

• 6 Tips to Keep Your Video Conferencing Meetings Secure

• SafeBreach Hacker’s Playbook Updated for US-CERT Alert (AA20-099A) COVID-19 Exploited by Malicious Cyber Actors

• NSO Group Disclose Facebook’s Secret Attempt To Buy Their Pegasus Spyware

• Data Privacy Firm Privitar Raises $80 Million in Series C Funding Round

• US Senate, German government tell staff not to use Zoom

• Over 3.6M users installed iOS fleeceware from Apple’s App Store

• Emails Impersonating Trump, White House Seek to Exploit Pandemic Fears

• Coronavirus: What business pros need to know

• Chinese Nation-State Hackers Targeting Linux Servers

• Visual Studio Code extension flags NPM vulnerabilities

• Copycat Site Serves Up Raccoon Stealer

• No STEM, No Problem: How to Close the Security Workforce Gap

• 16 real-world phishing examples — and how to recognize them

• Zoom, Microsoft & NTT Data Leaders Share Work-from-Home Security Tips

• Report: Facebook Is Failing Miserably At Removing Coronavirus-Related Spam

• COVID-19 Lures Only a Fraction of Daily Phishing Emails

• COVID-19 and Amygdala Hijacking in Cyber Security Scams

• E-commerce and home-based workers see increase of targeted fraud

• FAA asks employees to round up N95 masks, other PPE

• Maropost Database Exposes 95 Million Records

• Greater Than The Sum Of Its Parts: CSP is Just One Piece To A Comprehensive Set of Standards-Based Security

• White House COVID-19 Phishing Emails

• Here is why your healthcare provider cannot accept Venmo payments

• Yet another study finds that Android security is total crap

• BrandPost: Making Moves: How to Successfully Transition to DevSecOps

• Why Does Covid-19 Make Some People So Sick? Ask Their DNA

• Leveling Up Encryption for U.S. Federal Agencies

• Flaw hunter bags $75,000 off Apple after duping Safari into spying through iPhone, Mac cameras without permission

• CISA fast-tracks TIC telework guidance

• APTs and COVID-19: How advanced persistent threats use the coronavirus as a lure

• Microsoft shares new threat intelligence, security guidance during global crisis

• Getting Above the Noise: How to Succeed in Sales When the Corner of the Desk Disappears

• A billion-dollar US firm caught exposing highly sensitive database online

• Schneier on Hacking Society

• Zero Trust security: Go slowly in order to go big, says expert

• Firefox 75 overhauls the browser’s address bar

• Want to stay under the radar for a decade or more? This Chinese hacking crew did it… by aiming for Linux servers

• Building a data culture in public safety agencies

• “Misguided” #COVID19 Facebook Post Lands American in Handcuffs

• Hackers Invited to Share Bug Bounties with #COVID19 Charity

• Social Engineering Attacks: A Look at Social Engineering Examples in Action

• Coronavirus: Amazon’s Jeff Bezos Quizzed Over Sacked Worker

• Leak shows Windows 10 2004 could come as ‘May 2020 Update’

• Google and Mozilla address serious flaws in Firefox and Chrome browsers

• Assess and adapt for resiliency

• iOS 14 Might Allow Users to Partially Interact With Apps Without Installing Them

• DEF CON 27 – Bruce Schneier’s ‘Information Security In The Public Interest’

• Microsoft Buys Corp.com to Protect Its Customers

• Coronavirus: US Senators Advised To Avoid Using Zoom – Report

• How Microsoft Teams will use AI to filter out typing, barking, and other noise from video calls

• Book Review: “Design for How People Think”

• Malicious coronavirus-themed apps target Android devices

• Visa urges merchants to migrate e-commerce sites to Magento 2.x

• Hackers struggle morally and economically over Coronavirus

• Phishing emails impersonate the White House and VP Mike Pence

• Travelex Reportedly Paid $2.3 Million Ransom to Restore Operations

• Bitcoin Prices Are Off The Charts!

• Who has banned Zoom? Google, NASA, and more

• Hackers Use SSL Certificates to Launch Malware Attack

• Juniper Networks Releases Security Updates

• Zscaler acquiring Cloudneeti

• The Results Are In: Defender Confidence Is On The Rise

• Time to Get a Handle on America’s Conduct of Proxy Warfare

• Bad actor steals $250,000 from Bisq users after faulty security patch

• In a crisis, America turns to….COBOL programmers and fax machines

• How AI in Healthcare and Retail Plays a Role in Combating the COVID-19 Pandemic

• LG Begins Rolling Out 2020 NanoCell TVs With AirPlay 2 and HomeKit, Pricing Starts at $599

• Officials Say State-Backed Hackers Taking Advantage Of Outbreak

• Bugcrowd Snags $30 Million In Fresh Funding Round

• Bugcrowd Raises $30 Million in Series D Funding Round

• Malicious Spam Is Adapting to the Pandemic, Bitdefender Telemetry Shows

• Interest In Zoom Zero-Day Hacks Is Sky-High As Meetings Move Online

• Low-Orbit Internet Banking Fraud Claim Alleged To Be Space Junk

• Fleeceware on your iPhone? Don’t get caught out while penned up at home

• The Rise and Spread of a 5G Coronavirus Conspiracy Theory

• Consumer reviewer Which? finds CAN bus ports on Ford and VW, starts yelling ‘Security! We have a problem…’

• Cloud Transformation Is The Biggest Opportunity To Fix Security

• Why SASE adoption requires a paradigm shift

• WhatsApp Limits Message Forwarding to Prevent Spread of Misinformation

• Medical Devices on the IoT Put Lives at Risk

• Bugcrowd vulnerability bounty platform snags $30 million in fresh funding round

• Deals: Woot Offers Refurbished iPhone 11 and iPhone 11 Pro Models From $600 Today Only

• Despite Infighting and Volatility, Iran Maintains Aggressive Cyber Operations Structure

• Zoom Taps Ex-Facebook CISO Amid Security Snafus, Lawsuit

• Four Best Practices for Configuring Network Security against Zero Days (Part 3)

• Security Tips for Zoom Social Hours | Avast

• Report Details COVID-19 Phishing Attacks Based on Emails From White House

• Avast Launches Security-Focused Browser for Android

• Industries with critical infrastructure are at greater risk during the pandemic

• Mobile security—the 60 percent problem

• Coronavirus-themed phishing emails and websites spoof the White House

• Majority of Successful Phishing Tests Prompt Users to Change Their Password

• Stanford University and Apple Partner on New COVID-19 App for First Responders

• BrandPost: Zero Trust Part 2: Implementation Considerations

• Malware spotlight: Sodinokibi

• Zoom Working on Security Improvements Amid More Bans

• Phishers prefer Tesla, top 3 malware strains in Coronavirus phishing campaigns

• Information security auditor certifications

• Bug bounty platform Bugcrowd raises $30 million

• Lock Down Personal Smart Devices to Improve Enterprise IoT Security

• If You Can’t Patch Your Email Server, You Should Not Be Running It

• Fleeceware apps discovered on the iOS App Store

• Cisco ‘Critical Update’ Phishing Attack Steals Webex Credentials

• Remote Teams in Transition

• ‘Unbreakable’ Smart Lock Draws FTC Ire for Deceptive Security Claims

• Be careful when pulling images by short name

• Potent ‘dark_nexus’ IoT Botnet Emerges

• 5 Ways CCSP Can Help You Improve Cloud Security

• Coronavirus: UK, US Warn Hackers Are Exploiting Pandemic

• German foreign ministry limits the use of Zoom over security concerns

• Could COVID-19 Upend International Asylum Norms?

• Google Told By French Regulator To Pay For Re-using News Or Content

• New Cyberthreats: Have You Been Exposed at Home?

• Expert Reaction On Researchers Find Fraud Increasing

• Data Privacy In An Isolationist World

• Don’t become another money mule, FBI warns

• Majority of Successful Phishing Tests Prompt Users to Change Their Password says Report

• Pandemic – Evolution Of New Age Working

• Microsoft Buys Corp.com

• Expert Advise On Vulnerable VPNs Could Be Being Exploiting By Cybercriminals

• Bisq Bitcoin exchange slams on the brakes after exploit of critical security flaw, crypto theft

• Stabilising failover detection on the Unifi Security Gateway

• [Webinar] Upskilling Your Engineers in Cybersecurity while they WFH

• Telehealth: What’s at stake from a security standpoint?

• US, Britain Warn That Hackers Increasingly Use Coronavirus Bait

• Google’s new free software security book: ‘Wi-Fi password reset crippled one of our systems’

• New EBook: The Shifting Perimeter

• Microsoft: #COVID19 Threats Less Than 2% of Total Daily Volume

• Surge in Online Shopping Drives Major Increase in Coronavirus-Themed Fraud Attempts

• March 2020’s Most Wanted Malware: Dridex Banking Trojan Ranks On Top Malware List For First Time

• Less than 2% of all daily malspam are Coronavirus-themed attacks, Microsoft reports

• S2 Ep34: Can you trust hackers on how not to get hacked? – Naked Security Podcast

• 52k Iranian ID cards with selfies sold on dark web & hacking forum

• Facebook’s new Tuned chat app lets couples keep their mush private

• Keep your mobile phone free of Coronavirus, both inside & outside

• Review: Ericom Shield extends zero trust to websites with browser isolation

• 7 Ways Hackers and Scammers Are Exploiting Coronavirus Panic

• Building Your Cyber Talent Pool Early In 2020

• How to Ensure Data-Centric Cybersecurity?

• How The Cybersecurity Industry Can Stop Shooting Itself In The Foot And Solve The Skills Gap

• Phishers and iPhone Thieves Rolling Out Multimillion-Dollar Operations

• Coronavirus: Europol arrests man behind €6M face masks and hand sanitisers scam

• Microsoft Buys Corp.com So Bad Guys Can’t

• Beware malware-laden emails offering COVID-19 information, US Secret Service warns

• All That Cloud Data Is Causing Firms to Focus on the Wrong Security Issues

• How to Evaluate Competing MDR Service Providers

• RigUp Exposes More than 70,000 Files

• Google removes Android VPN with ‘critical vulnerability’ from Play Store

• Procurement solution used by government bodies found to contain zero-day bug

• Serious Vulnerabilities Patched in Chrome, Firefox

• Video conferencing for teams and consumers: What is the right choice for you?

• Maropost database left 95 million customer records unsecure

• 3D printed ‘fake fingerprints’ bypass scanners

• Apple Pay’s Express Transit Feature Now Supported in 275 Chinese Cities

• The Russian Foreign Ministry has warned of the threat of cyber pandemic to humanity

• Zoom Signs-Up Ex-Facebook CSO as Google Bans Platform

• FBI 2019 Internet Crime Report: Business email compromise fraud is the costliest attack vector for enterprises

• FCW Insider: April 9

• Quick Hits

• Apple CEO to Take COVID-19 Questions at Virtual Company-Wide Meeting Later This Month

• Singapore dangles $70M package to help fintech, FSI firms drive digital efforts

• Half of UK Adults Exposed to #COVID19 Fake News

• Cloudflare dumps reCAPTCHA as Google intends to charge for its use

• Australian Signals Directorate (ASD) is hacking crooks behind Coronavirus-themed attacks

• US, UK Warn of Widespread Scanning for Unpatched VPNs, Citrix Vulnerability

• Low-orbit internet banking fraud claim alleged to be a load of space junk

• The MITRE ATT&CK Framework: Persistence

• Cybersecurity officials say state-backed hackers taking advantage of pandemic

• Why Cybersecurity Should Be Your Company’s Next Social Good Investment

• Taiwan takes down top piracy site

• Perception Point Receives Top Overall Ranking in SE Labs Independent Testing

• COVID-19 – When the Virus Spread to New Channels

• DoJ Calls for Mandatory Data Breach Reporting to Law Enforcement

• Cloudflare dumps Google’s reCAPTCHA, moves to hCaptcha as free ride ends (and something about privacy)

• Real-life Examples of Blockchain-Based Digital Transformation

• Know thy enemy: The evolving behaviors of today’s cybercriminals

• What do CISOs want from cybersecurity vendors right now?

• Box bolsters its Cloud Security with automated Malware Detection Shield

• Zoom removes meeting IDs from app title bar to improve privacy

• Avast launches Android version Secure Browser

• Third-party risk is broken, businesses unprepared for supply chain disruptions

• Major investment fraud gang busted in Bulgaria and Serbia

• Windows Server 2019 OS hardening

• APT attacks targeting Linux, Windows and Android remained undetected for nearly a decade

• ISC Stormcast For Thursday, April 9th 2020 https://isc.sans.edu/podcastdetail.html?id=6946, (Thu, Apr 9th)

• The foundation of a Zero Trust architecture

• Pandemic driving global e-commerce growth, but fraud is on the increase too

• New Version of Privacy and Anonymous Operating System Tails 4.5 Released with Fix for Security Issues

• Auditing Cloud Administrator Behavior as a Matter of Data Breach Preparedness

• China-Linked Hackers Systematically Targeted Linux Servers for Years

• What Security Leaders Should Consider When Building a Business Case for Integrity Monitoring

• Requiescat in Pacem: John Prine, 1946 – 2020

• Workiva launches W for ESEF to help European companies simplify compliance

• Node enables companies to build AI into their applications, products, and business processes

• DataStax Enterprise 6.8: Advanced cloud-native data and bare-metal performance

• TransArmor Personal Data Protection from Fiserv tokenizes and encrypts personal data

• Sixgill’s cyber threat intelligence solution integrates with Palo Alto Networks Cortex XSOAR

• Virsec partners with CyVolve to provide security solutions for major healthcare organizations

• Mavenir deploys RCS solution as part of Rakuten Mobile’s communication app, Rakuten Link

• Ombudsman seeks more funding to cope with international production orders Bill

• GlobalSign joins DocuSign’s Agreement Cloud partner ecosystem to deliver trusted digital identities

• It was the best of times, it was the worst of times

• GlobalPlatform to help device makers and certification bodies adopt the SESIP methodology

• CSMS – Cyber Security Management System: New Regulations coming from ISO 21434 and WP.29

• Vodafone and VMware complete roll-out of network virtual infrastructure across Europe

• Introducing Slingshot C2 Matrix Edition

• Examining Potential Election Vulnerabilities: Are They Avoidable?

• Dynatrace to attain FedRAMP Authorization at a moderate impact level

• Disney+ Reaches 50 Million Subscribers in Just Five Months

• Why the Latest Marriott Breach Should Make Us “Stop and Think” About Security Behaviors

• EnterpriseDB extends technical support offerings to include PostgreSQL on AWS and Microsoft Azure

• White House pulls oversight officials in DOD, intel agencies

• IBM and Turbonomic deliver consistent management of cloud-native applications

• Foxconn and Other Chinese Factories Implement Strict Measures to Prevent Another Outbreak

• Accenture acquires Revolutionary Security to deliver advanced cyber defense management

• Keeping Vigilant for BEC Amid COVID-19 Chaos

• Unicode Consortium Delays Emoji 14 Update for Six Months, Emoji 13 Characters Not Affected

• F5 Networks appoints Sri Shivananda to its Board of Directors

• API Security Weekly: Issue #78

• CISA looks to help secure federal telework

• Six iPad and iPhone Apps and Games to Keep You Entertained at Home

• New IoT botnet launches stealthy DDoS attacks, spreads malware

• BrandPost: Zero Trust Part 1: Demystifying the Concept

• Defending the government enterprise

• Apple Releases macOS Catalina 10.15.4 Supplemental Update With FaceTime Bug Fix

• Autonomous vehicles deliver COVID-19 tests to lab

• After Adopting COVID-19 Lures, Sophisticated Groups Target Remote Workers

• Zoom’s fall: Google bans Zoom from staffers’ gear

• AI streamlines acoustic ID of beluga whales

• IT Security News Daily Summary 2020-04-08

• Researchers Fool Biometric Scanners with 3D-Printed Fingerprints

• Idaptive is Rising to a New Challenge

• GAO: Agencies are missing EIS targets

• PowerPoint ‘Weakness’ Opens Door to Malicious Mouse-Over Attack

• Windows 10 will list unused files and apps you can remove

• No, I Won’t Link to Your Spammy Article

• Cyber News Rundown: Zoom Targeted by Hackers

• The Global Hack – Hackathon to Discover Solutions in the COVID-19 Crisis | Avast

• Researchers open-source state-of-the-art object tracking AI

• Apple Releases watchOS 6.2.1 With FaceTime Bug Fix

• ‘Unkillable’ Android Malware App Continues to Infect Devices Worldwide

• Fake 3D Printed Fingerprints Fool Biometric Scanners

• The Global Hack – Hackathon to Discover Solutions in the COVID-19 Crisis | Avast

• Zoom Sued For Security Lapses, Hires Ex-Facebook Security Boss Stamos

• Data Protection Day 2020: De-Risking in The Era of Transparency

• FBI Warns of Cloud-Based BEC Attacks

• Microsoft issues targeted notification to hospitals vulnerable to Ransomware attacks

• Microsoft Releases COVID-19 Security Guidance

• Trump shakes up official watchdog ranks

• Fighting jet-lag, traveler’s diarrhea with implantable pharmacies

• Accenture Acquires Critical Infrastructure Protection Firm Revolutionary Security

• Principles of a Cloud Migration – From Step One to Done

• Windows 10 is testing WSL Linux integration in File Explorer

• Cybersecurity experts warn of scams targeting coronavirus stimulus checks

• VA delays Cerner health record deployment

• Now More Than Ever, the Cybersecurity Community Needs to Be Vigilant

• And Now, for Something Awesome… SANS Launches New Series of Worldwide Capture-the-Flag Cyber Challenges

• Lengthening Patent Terms by 10 Years is Exactly the Wrong Response to COVID-19

• Vulnerabilities in B&R Automation Software Facilitate Attacks on ICS Networks

• DoD: Mission Execution from Home

• Microsoft: Under 2% of all daily malspam uses COVID-19 lures

• Teen iPhone Ownership Hits an All-Time High in Long-Running Survey

• Over half of the calls people receive now are spam

• Dark_Nexus Botnet Compromises Thousands of ASUS, D-Link Routers

• Limited Shifts in the Cyber Threat Landscape Driven by COVID-19

• Best antivirus software and apps in 2020: Keep your PCs, smartphones, and tablets safe

• This fake Discord software could infect your PC

• Active Directory nesting groups strategy and implementation

• BEC, Domain Jacking Help Criminals Disrupt Cash Transfers

• Microsoft Buys Corp.com Domain

• Attacking the Organism: Telecom Service Providers

• Over 200 VPN Servers in China Hacked, DarkHotel Group Possibly Behind Attacks

• WPA vs WPA2: Which WiFi Security Should You Use?

• New “Dark_nexus” Botnet Used for DDoS

• How to enable the new Eyes Open feature for Google Pixel 4

• Zoom removes meeting IDs from client title bar to boost security

• Fake Coronavirus vaccine, patients’ blood & saliva sold on dark web

• TAU Threat Analysis: NetWire Variant Leveraging AutoIt Scripts and Windows Shortcut Links

• 8 Steps to Keep Remote Development Teams Secure

• Microsoft: No surge in malicious attacks, only more COVID-19 lures

• Certified Information Security Manager (CISM)

• Three Cheers for Paper Hearings

• Online credit card skimming increased by 26 percent in March

• New botnet attack “puts other IoT botnets to shame”

• 10 tips for working remotely

• Accenture Acquires Revolutionary Security

• What is a Data Breach and How to Prevent One

• Apple Releases Safari Technology Preview 104 With Bug Fixes and Performance Improvements

• Apple Sending Replacement AirPods With Unreleased Firmware, Rendering Them Unusable

• Online credit card skimming increases by 26% in March

• ThreatList: Skype-Themed Apps Hide a Raft of Malware

• Tesla Cuts Staff Wages, Furloughs Workforce

• Detect large-scale cryptocurrency mining attack against Kubernetes clusters

• 9 Reasons to hire an InfoSec candidate without experience: Focus on skillset vs. experience

• The Zero Trust Authorization Core

• Slack in the security spotlight – lessons for collaboration servers

• Firefox now tells Mozilla what your default browser is every day

• Cybersecurity In a Post-COVID-19 World

• Shmoocon 2020 – Wendy Knox Everette ‘s ‘Vendors And Risk And Tigers And Bears, Oh My’

• Common focal points of DoS attacks

• Coronavirus: EU Seeks Unified Approach For Covid-19 Tracking App

• The future of cybersecurity for connected cars

• Threats Can Be Anywhere: Modernize Your Data Center Security‎

• Mozilla Releases Security Updates for Firefox, Firefox ESR

• Introducing New SANS 3MinMax Series with Certified Instructor Kevin Ripa

• Hackers are scanning for vulnerable VPNs in order to launch attacks against remote workers

• phoenixNAP Integrates Alert Logic MDR into its Secure Cloud Solution

• Azure ATP now detects SMBGhost

• Apple Working Out Plans to Safely Bring on Over 1,000 Interns for Online and In-Person Roles

• Italy Email service provider data breach leaks info of its 600000 users

• Box adds automated malware detection to Box Shield

• SANS@MIC Schedule

• NASA warns of a significant increase in cyber attacks during Coronavirus outbreak

• Introducing our new book “Building Secure and Reliable Systems”

• Google Releases Security Updates

• Clever Cryptography Could Protect Privacy in Covid-19 Contact-Tracing Apps

• How to Upskill Your DevOps

• Cybersecurity prevention can save your company $682K

• Accenture Buys Revolutionary Security in Third Acquisition of 2020

• Coronavirus and the Growing Mobile Workforce: Prioritizing Endpoint Security

• Box unveils new automated malware detection tool for cloud platform

• What Happens If the Trump Administration Designates Drug Cartels as Terrorist Organizations?

• Chinese Retailers Slashing iPhone 11 Prices to Entice Reluctant Customers

• Zoom creates council of CISOs to solve security, privacy issues

• Cybercriminals, state-sponsored groups ramping up attacks exploiting COVID-19 pandemic

• HP Support Assistant App Riddled with Security Issues and Vulnerabilities, Researcher Finds

• Bisq Bitcoin exchange halts trade due to critical vulnerability

• Deals: Apple’s 10.2-Inch iPad Discounted by $50 at Amazon This Week (Starting at $279 for 32GB)

• Top tips for videoconferencing security

• Box bolsters cloud security with automated malware detection

• Box Shield adds malware detection

• I Want it Now!

• Analysis: Suspicious “Very Hidden” Formula on Excel 4.0 Macro Sheet

• HBO GO and HBO NOW Will No Longer Be Available on 2nd and 3rd Gen Apple TVs Starting April 30

• The seL4 microkernel: Optimized for security and endorsed by the Linux foundation

• NCSA Small Business Webinar Series

• Microsoft: Cyber-Criminals Are Targeting Businesses Through Vulnerable Employees

• Why Threat Hunting with XDR Matters

• Microsoft releases April 2020 Office updates with crash fixes

• COVID-19: Cybersecurity Community Resources

• Cisco Research Shows High Success Rate in Bypassing Fingerprint Authentication

• Social Distancing and Isolation—A Good Idea for You and Your Browser

• The True Cost of Data Leaks

• NSO CEO claims Facebook wanted NSO surveillance tool to spy on users

• Delayed Chrome Security Update

• Deals: Nomad’s ‘OptInside’ Sale Takes 30% Off Sitewide

• The DarkHotel (APT-C-06) Attacked Chinese Institutions Abroad via Exploiting SangFor VPN Vulnerability

• Tech debt of remote working

• Expert Advise On Protecting User Privacy In Tracking Apps With Confidential Computing

• What Happens if the Trump Administration Designates Drug Cartels as Terrorist Organizations?

• CloudGuard IaaS Performance: up to 377% improvement with R80.40

• Intent to Infekt: ‘Operation Pinball’ Tactics Reminiscent of ‘Operation Secondary Infektion’

• Data on 600,000 Email.it users for sale on dark web after email provider refuses to pay bounty

• Feline Secure?

• A Cheap 3D Printer Can Trick Smartphone Fingerprint Locks

• Web server security: Infrastructure components

• Hackers’ New Target During Pandemic: Video Conference Calls

• Zoom concedes custom encryption is substandard as Citizen Lab pokes holes in it

• Cyber Work Podcast: Cybersecurity reporting and closing the skills gap with Dark Reading’s Kelly Sheridan

• Coronavirus home work: Zoom sued over security lapses as stock slides

• Talos researchers fabricate a fake that frequently fooled fingerprint locks

• WhatsApp Axes COVID-19 Mass Message Forwarding

• Zero-Day Exploitation Increasingly Demonstrates Access to Money, Rather than Skill — Intelligence for Vulnerability Management, Part One

• Is Costco sending you freebies and stimulus checks? No, it’s just another petty scam.

• DarkHotel hackers use VPN zero-day to breach Chinese government agencies

• Winnetka schools get ‘Zoombombed’ with pornography, racist rants during online meetings with students; police investigating

• ‘Fake Fingerprints’ Bypass Scanners with 3D Printing

• COVID-19 Exploited by Malicious Cyber Actors

• German Military Cyber Operations are in a Legal Gray Zone

• Privacy Expert On UK Govt Considering Plans To Use The Contact-tracing App To Boost Social Distancing

• Celebrities and politicians are rapidly spreading coronavirus misinformation

• Researchers beat fingerprint authentication with 3D printing scheme

• How DNS Security Helps Secure Your Remote Workforce

• COVID-19 CISO Checklist for Securing a Remote Workforce

• Expert Reaction On Interpol Warning That Ransomware Attacks On Hospitals Are Increasing

• NYC Schools Ban Zoom – Cybersecurity/Privacy Experts Comment

• This is why the vicious xHelper malware resists factory wipes and reboots

• Australian government says it is hacking criminals who are exploiting the pandemic

• Businesses Need To Stay On The Front Foot: Expert Advise

• Expert Advise On Cyber Criminals Are Bundling Malware Inside Zoom Installers

• Wearing It With Pride: How showing off your (ISC)2 credentials can make a difference

• Coronavirus: WhatsApp To Limit Forwarding To Slow Spread Of Fake News

• Flaw hunter bags $75, 000 off Apple after duping Safari into spying through iPhone, Mac cameras without permission

• NASA Sees Increase in Cyberattacks During Coronavirus Outbreak

• Zoom faces investor lawsuit over privacy and security flaws

• Coronavirus: Twitter Boss Jack Dorsey Pledges $1 Billion For Covid-19 Fight

• New Imperva Framework: Accelerating the development of large scale solutions with “Stepping”

• Dark Nexus, a new IoT botnet that targets a broad range of devices

• Reduce the Risk in Your Digital Ecosystem

• COVID-19: New Daily Intel Download and Webinar Next Week

• Mozilla: Firefox 75 gets this new address bar, but we’re pausing features over coronavirus

• Expanding MSSP service portfolios with threat intelligence

• Facebook Launches ‘Tuned’ Messaging App for Couples

• RSA-250 Factored

• A Round-up of Data Breaches in March 2020

• Why is Trump’s Inspector General Purge Not a National Scandal?

• British Airways and Marriott UK data protection fines deferred again as coronavirus shutdown hits business

• Update Firefox again – more RCEs and an Android “takeover” bug too

• Microsoft prevents Domain of Danger from falling into miscreants’ paws by forking out cash for corp.com

• Fake Malwarebytes Site Used by Malvertising Attack to Spread Raccoon

• ‘Forza Street’ Simulation Racing Game Coming to iOS on May 5

• Internet Overseers Seek Crackdown on Coronavirus Website Scams

• Small business owners applying for COVID-19 relief may have had PII exposed, agency says

• Microsoft project proposed to aid Linux IoT code integrity

• Russian telco hijacks internet traffic for Google, AWS, Cloudflare, and others

• April 2020 Web Server Survey

• Android Enterprise Adds Flexibility But Still Calls for UEM Solutions

• As if the world couldn’t get any weirder, this AI toilet scans your anus to identify you

• Untangle Extends Security Alliance With Webroot

• Quarter of DevOps Suffer Open Source Component Breaches

• Apple TV 3 Owners Report Issues Viewing YouTube Content

• HTC Mania – 1,488,089 breached accounts

• WhatsApp new policy limits forwarding of viral messages

• Cyber Security Considerations Regarding Telework or Remote Work Options in COVID 19

• Security, Privacy Issues Found in Government COVID-19 Mobile Apps

• Information Security Tips when Working from Home (COVID 19)

• March 2020 Cyber Attacks Statistics

• An Uneasy Relationship: “Cyber Physical Systems” Need Better Security

• Episode 7: Security in a time of crisis

• Microsoft Threat Protection: What security and IT admins need to know

• The Cybersecurity Maturity Model Certification explained: What defense contractors need to know

• NASA sees increasing malicious activity due to pandemic

• Malware Concealed Under SSL Certificates

• Google addresses issue with Face Unlock

• Avast Secure Browser for Android released, includes a built-in VPN

• Protect Your Kids From Cyber Threats At Home During COVID-19

• Over 350,000 Exchange Servers Exposed to Serious RCE Bug

• Actively exploited MS Exchange flaw present on 80% of exposed servers

• Spam and phishing in 2019

• Team coverage: COVID-19 and the federal workforce

• Dark Nexus: A New Emerging IoT Botnet Malware Spotted in the Wild

• EU Privacy Tsar Calls for Europe-Wide #COVID19 Tracking App

• New, rapidly evolving IoT botnet Dark Nexus targets wide variety of devices

• How Coronavirus Panic Created a Perfect Opportunity for Cyberattacks in Crucial Sectors?

• FCW Insider: April 8

• [Panel Discussion] Reference Architecture for a Multi-Cloud Environment

• Tails, the security-focused OS, adds support for Secure Boot

• seL4 creates open source foundation to enable more secure computing systems

• Akamai CSO: Online and Remote Work is the Future of Business

• Dark_nexus botnet outstrips other malware with new, potent features

• Singapore’s law minister says that to counter fake news, more information must be given

• Maze ransomware gang discloses data from drug testing firm HMR

• Please, just stop downloading apps from unofficial stores: Android users hit with ‘unkillable malware’

• Should a WFH SOC Be a New Reality?

• Cybersecurity during the pandemic: Try these security solutions for free!

• Encrypted Browser for Mobile Online Protection | Avast

• Organizations seeing 20/20 on need to protect customer information

• 5 Security  Mistakes Your Remote Team is Making Right Now

• Accenture purchases Revolutionary Security

• We’re offering extra resources in response to COVID-19

• Prevention can reduce Cyber Attack loss to $1.4 Million per attack

• Hackers Are Bundling Cryptominer With a Seemingly Legit Zoom Installer on Unofficial Websites

• Radio frequency: An invisible espionage threat to enterprises

• Cybersecurity 101 – 3 Tips to Protect Your Business

• Microsoft to add DANE and DNSSEC support to Exchange Online servers

• Happy developers more likely to build secure apps

• First Deputy Chairman of the Bank of Russia: Blockchain is not a panacea, and cryptocurrency is not money

• China and Taiwan aren’t great friends. Zoom sends chats through China. So Taiwan’s banned Zoom

• Encryption is finally being used primarily to protect personal data rather than just for compliance

• AT&T Cybersecurity announces ‘Partners of the Year Awards’ Winners

• Stories from the SOC- RIG Exploit Kit

• Exploits, vulnerabilities and threat adaptation

• Tufin unveils new tool that delivers real-time visibility into firewall rule changes for orgs of all sizes

• Unkillable Android XHelper Malware Reinstall Itself Again After Factory Reset

• ISC Stormcast For Wednesday, April 8th 2020 https://isc.sans.edu/podcastdetail.html?id=6944, (Wed, Apr 8th)

• The Cyber Threat Intelligence Analyst – Speaking Your Languge

• Finally Some Good News: NERC Proposes Deferment of 3 CIP standards

• On-demand webinar: Securing your remote workforce

• U.S. government memo: Zoom is taking security concerns seriously

• German malspam pushes ZLoader malware, (Wed, Apr 8th)

• Brightcove Continuum: Supporting business communication functions across the enterprise

• 2020-04-07 – Pcap and malware for an ISC diary (ZLoader)

• WhatsApp Restricts Forward Messages To Curb Misinformation Amidst COVID-19

• 12 years on, audit finds WA government entities still don’t get infosec

• Cypress launches IoT-AdvantEdge to make IoT product development faster, secure, and reliable

• New solution delivered by Asavie helps solve business challenges for the digital enterprise

• 5 Tips for Successful Remote Workforce IT Management

• Blackline Safety and STANLEY Security to provide 24/7 monitoring in UK and Europe

• Numerous HP Support Assistant Vulnerabilities Discovered, Though Not All Have Been Fixed!

• Rubean, CCV, Intertrust and Riscure launch jointly developed contactless Android payment app

Generated on 2020-04-09 23:55:11.563344