IT Security News Daily Summary 2020-10-19

• GSA announces 2021 Presidential Innovation Fellows

• OPM keeps hiring on track with USA Staffing upgrades

• Security gaps could undermine confidence in election results

• Rural health cooperatives are challenged by connectivity and social distancing – but are innovating

• What DoH Can Really Do

• Get Hands-On with Tech Tuesday Workshops

• Notpetya, Olympics hacking, Novichok probe meddling… America throws the book at six alleged Kremlin hackers

• It’s time for a better approach to cybersecurity

• DOJ Charges 6 Sandworm APT Members in NotPetya Cyberattacks

• Rapper Scams $1.2M in COVID-19 Relief, Gloats with ‘EDD’ Video

• Android, macOS Versions of GravityRAT Spyware Spotted in Ongoing Campaign

• Vulnerability Summary for the Week of October 12, 2020

• Five Eyes Alliance, Japan And India Demand Tech Firms For Backdoor In End-to-End Encryption

• State-sponsored hackers and ransomware gangs are diversifying tactics to inflict more harm

• Why ransomware has become such a huge problem for businesses

• U.S. Charges Russian Intelligence Officers for NotPetya, Industroyer Attacks

• Scammers Seize on US Election, But It’s Not Votes They Want

• Adapt to Change: Network Policy Change Management | The 5 Critical Success Factors to Agile NSPM

• The Joy of Tech® ‘MagSafe Meets New MagSafe!’

• DEF CON 28 Safe Mode AppSec Village – David Sopas’ & Paulo Silva’s ‘API InSecurity TOP 10’

• Don’t Miss These Top-Rated SANS Summit Replays

• Some Apple Watch SE Owners Experiencing Issues With Overheating

• Hands-On With Apple’s MagSafe Charger for iPhone 12

• A week in security (September 12 – September 18)

• Egregor Ransomware Claims Data Stolen from Crytek and Ubisoft

• Discord Patches Remote Code Execution Chain Vulnerability

• GravityRAT Returns, Targeting Android Devices

• US charges Russian hackers behind NotPetya, KillDisk, OlympicDestroyer attacks

• Overlay Malware Targets Windows Users with a DLL Hijack Twist

• GravityRAT Comes Back to Earth with Android, macOS Spyware

• How to ensure a scalable SASE architecture

• Cyber-attack on Mississippi Schools Costs $300k

• Emotet Returns: Here’s a Quick Look into new ‘Windows Update’ attachment

• Trickbot, Phishing, Ransomware & Elections

• US Indicts Sandworm, Russia’s Most Destructive Cyberwar Unit

• Apple Releases watchOS 7.0.3 for Apple Watch Series 3 to Fix Unexpected Restart Issue

• Election Observation: Rules and Laws

• Municipal Liability in Police Misconduct Lawsuits

• PSPs vs. OPA Gatekeeper: Breaking down your Kubernetes Pod security options

• FlexPod speaks hybrid cloud

• Ryuk Ransomware Gang Uses Zerologon Bug for Lightning-Fast Attack

• Waze Vulnerability Lets Attackers Track and Identify Users

• Instagram’s Handling of Children’s Data Under Investigation

• IBM discovers a new banking malware attached to Video Conferencing apps like Zoom

• Chart: The Pandemic Reprioritizes Security Projects

• 7 Tips for Choosing Security Metrics That Matter

• PCI DSS Compliance comes under the spotlight in Verizon’s Payment Security Report 2020

• Get effective DevSecOps with version control

• Cloudflare Unfurls Secure Network as a Service Platform

• Apple Plans to Enable 5G in Dual SIM Mode With Software Update Later This Year

• Review: Beats Flex Offer a Great Entry Point to Apple’s Wireless Earphone Ecosystem for Just $50

• Google identifies McAfee Malware spread on Biden supporters via China

• Microsoft Exchange, Outlook Under Siege By APTs

• Expert Tips to Keep WordPress Safe

• A Swift Reminder About Cybersecurity

• 6 top risk factors to triage vulnerabilities effectively

• Alexander Vinnik, the popular cyber criminal goes on trial in Paris

• The FBI Builds Enduring Partnerships in Cyber

• iPhone 12 Pro in Graphite and MagSafe Accessories Shown Off in More Unboxing Videos and Photos

• UK test and trace data can be handed to police, reveals memorandum

• How NSA Hacks Your Webcam?

• Game Titles Watch Dogs: Legion, Albion Both Targeted by Hackers

• Microsoft now the most impersonated brand in phishing attacks

• CISA Warns of Remote Code Execution Bugs in Visual Studio, Windows Codecs Library

• A New Risk Vector: The Enterprise of Things

• Lack of Security in IoT Devices Explained. What Can We Do About It?

• The forum of the popular Albion Online game was hacked

• Hackers Smell Blood As Schools Grapple With Virtual Instruction

• Microsoft Is The Most Imitated Brand For Phishing

• Fancy Bear Imposters Are On A Hacking Extortion Spree

• New Malware Uses Remote Overlay Attacks To Hijack Your Bank Account

• Japan Preparing to Regulate Big Tech in Collaboration with U.S. and Europe

• First, Patch Tuesday. Now, Oh Hell, Monday: Microsoft emits bonus fixes for Visual Studio, Windows 10 security bugs

• Tackling Bias In AI | Avast

• Sierra Wireless debuts a multi-network 5G hotspot for public safety agencies

• Unit21 raises $13 million to turn AI into a fraud-fighting machine

• DDoS Attacks Triple in Size as Ransom Demands Re-Emerge

• Albion Online gamers told to change passwords following forum hack

• XM Cyber Achieves SOC 2 Type II Certification for Second Consecutive Year

• SANS Challenge Coins: The Ultimate Recognition to Elite Cybersecurity Professionals

• ‘Apple Music TV’ Launches in U.S. With 24/7 Live Stream of Music Videos, Live Shows, World Premieres, and More

• Deals: Amazon Discounting Both Models of 2020 MacBook Air, Starting at $849.99 for 256GB

• Apple TV+ Gaining New ‘Peanuts’ Specials Alongside Classic Holiday Episodes

• Magento, Visual Studio Code users: You need to patch!

• Vulnerability In Comcast Voice Remote Controller Could Allow Eavesdropping

• Google Discloses Biggest-Ever DDoS Attack

• Crisis and an Incontestable Need for Security — A Business Viewpoint

• New Gitjacker tool lets you find .git folders exposed online

• Toshiba targets $20bn quantum key, data encryption business with Verizon, BT partnerships

• French Court Tries Russian for Multi-Million-Euro Cyberfraud

• Google Says No Significant Election Influence Campaigns Targeting Its Users

• DDoS Attacks Triple in Size as Ransom Demands Remerge

• Rapper Who Bragged About Defrauding US CARES Act Program Could Face Up to 22 Years in Prison

• #WeAreDuo Employee Spotlight with Jordan Wray

• From the ground up: Building your ideal game studio infrastructure (VB Live)

• Microsoft is the Most-Imitated Brand for Phishing Emails

• UK Data Privacy Watchdog Slashes BA Fine as Virus Bites

• Google Targeted in Record-Breaking 2.5 Tbps DDoS Attack in 2017

• Naked Security Live – Ping of Death: are you at risk?

• Spain dismantle a terrorist organisation recruiting and indoctrinating women

• Still Looking For RASP Resources? SANS Has A RASP Report

• Infosec Teams Must Act And Think Differently To Combat Adversaries

• Privacy Expert Warn That Businesses Could Face Fines In The Millions Due To No Deal Brexit

• Tom Martin Ball, Lead Auditor At Alcumus ISOQAR, Speaks Out About The Future Of Cybersecurity

• Critical infrastructure and industrial orgs can test Azure Defender for IoT for free

• RMM Software: All You Need to Know About Remote Monitoring Management Software

• Your organization doesn’t have time and resources to do research, POCs, evaluations?

• 11 top cloud security threats

• How attackers exploit QR codes and how to mitigate the risk

• New Vizom Malware Discovered Targets Brazilian Bank Customers with Remote Overlay Attacks

• Albion Online game maker discloses data breach

• This new malware uses remote overlay attacks to hijack your bank account

• Government Spooks Urge Firms to Patch SharePoint Bug

• UK to Close Loophole That Allows Phone Users to Take Photos or Play Games While Driving

• Expert Reacted On Research: SOCs Employing AI And ML Tools To Detect Advanced Threats

• British Airways fined £20 million for data breach

• Study reveals the psychological tricks used in political emails

• Twitter updates policy following Biden article block

• Will there be no end to govt attempts to break encryption? Hand over your data or the kiddies get it, threaten Five Eyes spies

• Cloud Threat Hunting: Attack & Investigation Series- Privilege Escalation via Lambda

• Microsoft is Most Imitated Brand for Phishing Attempts in Q3 2020

• Microsoft: Most-Imitated Brand for Phishing Emails

• US CEO Charged with $2bn Tax Evasion Scheme

• BBB Warns of Health Insurance Open Enrollment Scams

• What does a hacker look like?

• New Emotet campaign uses a new ‘Windows Update’ attachment

• GravityRAT: The spy returns

• iPhone 12 Models in Dual SIM Mode May Not Run at 5G Speeds, At Least Initially

• Experts Reacted On News: British Airways Fined £20m For Data Breach

• Google Makes More Concessions On Fitbit Deal

• Twitter Changes Policy On Blocking ‘Hacked Materials’

• European Telecoms Trade Group Warns Against Banning Chinese Vendors

• Zoom Introduces Paid Events, In-Meeting Apps

• Microsoft Issues Two Emergency Windows Patches

• Google Reveals it Was Hit by 2.5Tbps DDoS

• VOIP Service Provider Exposes 350M Customer Records

• Discord desktop app vulnerability chain triggered remote code execution attacks

• Hackers claim to have compromised 50,000 home cameras and posted footage online

• Fooling self-driving cars by displaying virtual objects

• Want to certify your security software with an internationally recognized testing organization?

• The encryption war is on again, and this time government has a new strategy

• Pandemic Pushes Security Analysts to the Brink

• Essential Cybersecurity Considerations for Governmental Organizations

• Cyber Attack on Iranian Country Ports

• Google blocks biggest DDoS Attack recorded ever

• IoT Sex Toy Security Flaw | Avast

• Kuo: iPhone 12 Pro Demand Higher Than Expected

• Global adoption of data and privacy programs still maturing

• Review: Netsparker Enterprise web application scanner

• Silent Eight leverages AI to detect and solve financial fraud

• Cyber must be part of all-hazards national resilience: Home Affairs chief

• Microsoft adds option to disable JScript in Internet Explorer

• QAnon/8Chan Sites Briefly Knocked Offline

• Most cybersecurity pros believe automation will make their jobs easier

• Most US states show signs of a vulnerable election-related infrastructure

• Australian government takes another swing at revamping visa processing system

• Kleenheat customer names and addresses exposed in system breach

• 3 Zones that Require Network Security for Industrial Remote Access

• IoT Devices: Privacy and Security in Abusive Relationships

• ISC Stormcast For Monday, October 19th 2020 https://isc.sans.edu/podcastdetail.html?id=7214, (Mon, Oct 19th)

• Is the skills gap preventing you from executing your enterprise strategy?

• Cloud environment complexity has surpassed human ability to manage

• Zerto Data Protection: Continuous data protection to all app tiers displacing traditional backup

• Honeywell launches Honeywell Secure Media Exchange to protect against malicious USB attacks

• Save 40% on CISSP or CCSP training until November 30

• Phunware unveils MaaS Customer Data Platform to help create persistent, unified customer databases

• Protiviti launches privacy offering in response to the evolving privacy landscape exacerbated by COVID-19

• Taiwanese Carriers Believe iPhone 12 Sales Will Be Highest Since iPhone 6

• Mimecast selects Smartsheet to drive strategic enterprise initiatives across its org

• AEM introduces NSA, a hybrid Qualification+ tester, changes testing landscape

• Business groups nationwide complain about diversity training crackdown

• FCW Insider: Oct. 19

• ASUS equips its ASUS PE200U and PE200S edge computers with Innodisk’s next-gen flash storage

• SentinelOne secures patent for unique approach to uncovering exploits in their initial payload stage

• How to Repurpose Your Old Gadgets

• How to Train your Raspberry Pi for Facial Recognition

• Under-Display Touch ID Will Eventually Come To The iPhone

• Chinese hackers impersonated McAfee to attack election campaign staffers

• Microsoft fixes elevation of privileges security vulnerability in Windows Setup

• A Cut Cable Knocked Out Virginia’s Voter Registration Site

• Sarah Butterfass joins NETGEAR board of directors

• Derek Abdine hired as CTO at Censys

• IT Security News Weekly Summary – Week 42

• IT Security News Daily Summary 2020-10-18

• Group warns of gaps in election infrastructure

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comics – ‘WEEK 299’

• DEF CON 28 Safe Mode AppSec Village – Fredrick “Flee” Lee’s ‘What Bruce Lee Can Teach Us About AppSec’

• FIN11 gang started deploying ransomware to monetize its operations

• File Selection Gaffe, (Sun, Oct 18th)

• Teach yourself Public Key Cryptography in 5 seconds – Cypherpunk 1

• Iran Suffers Largescale Cyberattacks, Two Government Organizations Affected

• How B2B Brands Can Protect Critical Business Information Through Cybersecurity

• Passwords – Safety and Other Things to Remember

• Big Company Data Breaches and How to Avoid Them

• Twitter Breaches, MFAs, and the Need for Identity Proofing

• Microsoft released out-of-band Windows fixes for 2 RCE issues

• “Fake it till you make it” – Top 4 Phishing Tricks for September-October 2020

• Google Workspace vs. Microsoft 365

• Multilateralism in the National Interest

• State CIOs Lead Digital Transformation During the Pandemic

• Iran-linked Silent Librarian APT targets universities again

• QQAAZZ crime gang charged for laundering money stolen by malware gangs

• Security Affairs newsletter Round 286

• Week in review: Criminals leveraging Office 365, endpoint attack anatomy, medical devices cybersec

• The challenges of countering human trafficking in the digital era

• Instantaneous EMV card issuance translates into a higher activation yield for payment card issuers

• What is search engine clickbait and how do hackers trick Google’s crawlers?

• iPhone 12 Cases Buyer’s Guide

• iPhone 12 and iPhone 12 Pro Cases Buyer’s Guide

• The Highly Distributed Workforce You Didn’t See Coming – Five Things Your IT Team Needs to Focus on Now

• Remote Access is Possible – and More Secure – Without VPNs

• Research Reveals Most Cybersecurity Professionals Embrace Automation

• iPhone 12 and iPhone 12 Pro Case Buyer’s Guide

Generated on 2020-10-19 23:55:10.871897