IT Security News Daily Summary 2020-11-09

• Zoom lied to users about end-to-end encryption for years, FTC says

• Free online cybersecurity classes, with certificates

• Keeping classified geospatial analysis on track during the pandemic

• 3 keys to managing cyber risk in state, county and city agencies

• Bug hunter wins ‘Researcher of the Month’ award for DOD account takeover bug

• Apple Gets FCC Approval for MagSafe Duo Wireless Charger

• Vulnerability Descriptions in the New Version of the Security Update Guide

• Zoom strong-armed by US watchdog to beef up security after boasting of end-to-end encryption that didn’t exist

• Account Takeover Risks During Pandemic: Solutions for Small Businesses

• Why Are Leading Market Research Firms So Excited About XDR?

• Security-driven networking: The foundation of digital transformation

• GSA’s mismanagement of PIV cards puts facility, data security at risk, watchdog says

• Cyberattack on UVM Health Network Impedes Chemotherapy Appointments

• Trump Site Alleging AZ Election Fraud Exposes Voter Data

• Data Privacy Gets Solid Upgrade With Early Adopters

• Photographer Austin Mann Shares iPhone 12 Pro Max Camera Review

• U.S. Dept of Justice seizes $1 billion in Bitcoin

• Zoom settles FTC charges for misleading users about security features

• Ultimate Member Plugin for WordPress Allows Site Takeover

• WOW64!Hooks: WOW64 Subsystem Internals and Hooking Techniques

• 01 Communique Signs a Co-operation agreement with PwC to Implement Quantum-Safe IronCAP Cryptography Technolog

• xHunt hackers hit Microsoft Exchange with two news backdoors

• Review: iBoy is a Must-Have Desk Toy for iPod Fans

• Luxottica Data Breach

• SMS Text Message Phishing Campaign Targeting UK Residents

• Compal, the Second-Largest Laptop Manufacturer in the World, Hit by Cyber Attack

• X-Cart Infected with Ransomware

• New RansomEXX Ransomware Variant Emerges That Targets Linux Systems

• BrandPost: Developing Cybersecurity Career Pathways for Veterans

• Tianfu Cup 2020: Hackers pwn Windows, iPhone, Chrome for big bucks

• Data Security by the Numbers: How a Smarter Approach Saves Time and Money

• Esper out at DOD

• FTC Says Zoom Misled Users on Its Security for Meetings

• 7 key cybersecurity metrics for the board and how to present them

• CISA: No election hacking, but plenty of misinformation

• Paralegal Admits Role in Outing Iowa Witnesses

• Insecure APIs a Growing Risk for Organizations

• Vulnerability Summary for the Week of November 2, 2020

• Three DevSecOps challenges and how to mitigate them

• The Joy of Tech® ‘Congrats America’

• How to Watch the Mac-Focused Apple Event on November 10, 2020

• Nigeria’s #ENDSARS Campaign is About More Than One Police Unit

• Better Informing a President’s Decision on Nuclear Use

• Lock and Code S1Ep19: Forecasting IoT cybersecurity with John Donovan and Adam Kujawa

• UK in Cyber-War Against Anti-vaccine Propaganda

• Threat Actors Stole Source Code from SonarQube Instances of US Government Agencies, Says FBI

• Securing VPN and RDP access to sensitive resources [Free e-book and webinar]

• ShiftLeft Engineering — Integrating your Go services with JIRA

• Great British Prank: Company Name Contains XSS Hack

• RansomEXX trojan variant is being deployed against Linux systems, warns Kaspersky

• BigBasket data breach – 20 million customer data sold on dark web

• Rights Activists Slam EU Plan for Access to Encrypted Chats

• Try this cybersecurity quiz, test your cyberdefense smarts

• Mashable Customer Data Leaked Online

• Trickbot is Down But Not Out

• iPhone 12 Pro Max Reviews: ‘The Best Smartphone Camera’ You Can Get, But 6.7-Inch Display Isn’t for Everyone

• Apple Executives Discuss iPhone 12 and Apple’s Approach to Camera Design

• Experts Reacted On WhatsApp To Introduce Disappearing Messages

• Managing Decreasing Public Tolerance For Cyberattacks

• Your organization doesn’t have time and resources to do research, POCs, evaluations?

• Ransomware news trending on Google

• Confidently manage medical imaging on FlexPod

• This new malware wants to add your Linux servers and IoT devices to its botnet

• Older Android phones will start failing on some secure websites in 2021

• Millions of Hotel Guests Worldwide Caught Up in Mass Data Leak

• Microsoft Exchange Attack Exposes New xHunt Backdoors

• Open University Targeted With Over a Million Malicious Email Attacks So Far This Year

• 7 Online Shopping Tips for the Holidays

• Preventing and Mitigating DDoS Attacks: It’s Elementary

• The Origin Is No More

• Compal, the Taiwanese giant laptop manufacturer hit by ransomware

• iPhone 12 Mini Reviews: The Best Small Smartphone but Battery Life ‘Leaves Much to Be Desired’

• Deals: Purchase Parallels Desktop for Mac and Get One Year of Fantastical Premium for Free

• Somebody’s Russian to meddle with UK coronavirus vaccine efforts, but GCHQ won’t take it lying down

• VMware Carbon Black Named a Finalist in the 2020 CRN Tech Innovator Awards

• Computer Manufacturing Company Compal Discloses Security Incident

• Let’s Encrypt Warns Some Android Users of Compatibility Issues

• Campari staggers to its feet following $15 million Ragnar Locker ransomware attack

• Worried About SaaS Misconfigurations? Check These 5 Settings Everybody Misses

• Watch: iPhone 12 Mini, iPhone 12 Pro Max, MagSafe Duo Charger, and Leather Sleeve Unboxing Videos and Reviews

• Deals: AirPods Pro Available for New Low Price of $194 at Amazon

• 16-30 September 2020 Cyber Attacks Timeline

• ‘Build’ or ‘Buy’ your own antivirus product

• COVID-19 made IT modernization a priority

• Compal, the second-largest laptop manufacturer in the world, hit by ransomware

• Lessons from Teaching Cybersecurity: Week 6

• RDP and the remote desktop

• A Zero Trust Approach to Protecting Cloud Identities Begins with Least Privilege

• Source codes stolen from US government agencies by hackers

• Millions of hotel guests have data exposed after Hotel Booking firm experiences breach

• Western Digital unveils new NVMe SSDs for scaling data-centric architectures

• Duo Security and Datto: More Than Just Another MSP Integration

• Beverage Giant Campari Went Offline Following Ransomware Attack

• Apple Patched Three iOS Zero-Day Bugs Following Google’s Discovery

• Capcom Latest Multinational To Be Hit By Disruptive Cyber-Attack

• Veteran Game Maker Codemasters Set For US Acquisition

• Google Will Not Move To Dismiss US Antitrust Case

• European Commission Warns Of Rising Pandemic Scam Risk

• Apple Faces 5G iPhone 12 Supply Shortages As Holidays Loom

• Bug Bounty Hunters Earn $1.2 Million at Chinese Hacking Competition

• Emotet and TrickBot Top the Malware Charts Yet Again

• Paul Collyer to Join HTB as New Chief Risk Officer

• Online Grocery Store BigBasket faces Data Breach of 2 Crore Users

• CybersecAsia Awards 2020 recognizes ManageEngine for its leadership in cybersecurity

• YouTube App Adds HDR Support for iPhone 12

• From pranks to APTs: How remote access Trojans became a major security threat

• Using open source for identity projects: 8 considerations

• Naked Security Live – Shop safe online (you know why!)

• Price Dropped on Hacked Educational RDP Details

• Hacker Spotlight: Interview with ‘Cyberboy’, Bug Bounty Hunter who Won $3000

• SecZetta and LevelUP Announce New Partnership in Third-Party Identity and Risk Management

• Ransomware hits Brazil’s Superior Court & other Federal agencies – Security Experts Perspectives

• Expert On Italian Beverage Vendor Campari Knocked Offline After Ransomware Attack

• UK banking customers targeted by HMRC smishing tax scam

• Our New Bug Bounty Program | Avast

• Housing Group Struck by Sodinokibi Data Thieves

• Here’s how to outsmart criminals abusing the online shopping experience this holiday season

• E-commerce platform X-Cart hit by a ransomware attack

• Apple Suspends Business With iPhone Supplier Pegatron for Labor Violations

• What Expert Says On Report Tha Almost A Quarter Of Firms Still Not Using Automated AML Checks

• Open University Bombarded By Over 1 Million Email Attacks In 2020 – Experts Reaction

• Check Point Presents the First Autonomous Threat Prevention System

• New Check Point R81 is Industry’s First Cyber Security Platform with Autonomous Threat Prevention

• Routers, NAS Devices, TVs Hacked at Pwn2Own Tokyo 2020

• Hotel Booking Firm Leaks Data on Millions of Guests

• 5 Reasons Why Web Security Is Important to Avoid Ransomware

• Ghimob: a Tétrade threat actor moves to infect mobile devices

• Pre-Ordered HomePod Mini Delivery Times Slip into Early December

• What’s stopping job seekers from considering a career in cybersecurity?

• Chinese hacking competition cracks Chrome, ESXi, Windows 10, iOS 14, Galaxy 20, Qemu, and more

• US Government Seizes $1bn In Silk Road Bitcoins

• Over 20 Million BigBasket Customers Data Exposed in DarkWeb

• Using Cloud Costs to Find Your Crown Jewels

• Tianfu Cup 2020 – 5 minutes to hack Windows 10, Ubuntu iOS, VMWare EXSi, and others

• FBI warns of attacks on unsecured SonarQube used by US govt agencies and businesses

• How Attackers Brush Up Their Malicious Scripts, (Mon, Nov 9th)

• Want to certify your security software with an internationally recognized testing organization?

• Windows 10, iOS, Chrome, Firefox and Others Hacked at Tianfu Cup Competition

• 3 Takeaways from Sandworm Hacker Group’s Indictment

• Here Are the Free Ransomware Decryption Tools You Need to Use [2020 Updated]

• Sanctioned Chinese hacking competition cracks Chrome, ESXi, Windows 10, iOS 14, Galaxy 20, Qemu and more

• Ransomware hits e-commerce platform X-Cart

• Kemp acquires Flowmon for NDR and predictive network performance monitoring

• HackNotice Risk Explorer reveals cyberthreats with easy-to-understand visuals

• Every employee has a cybersecurity blind spot

• End-to-end encrypted communication mitigates enterprise security risk and ensures compliance

• The power of machine learning and analytics in the Telecom Industry

• Three smart ways banks can secure instant issuance

• Saudi Arabia to depend on Huawei for National AI Development Programme

• GCHQ launched Cyber Attack on Russia Anti-Vaccine campaign

• Hackers Attacking WebLogic Servers via CVE-2020–14882 Flaw to install Cobalt Strike Malware

• CISA Strategy for 5G Security and Resilience

• Creando presupuestos para ciberseguridad efectivos

• Body Found in Canada Identified as Neo-Nazi Spam King

• Developing a quantum network that exchanges information across long distances by using photons

• Exploring the progress organizations are making in their investments towards digital resiliency

• Australia’s critical infrastructure definition to span communications, data storage, space

• ISC Stormcast For Monday, November 9th 2020 https://isc.sans.edu/podcastdetail.html?id=7244, (Mon, Nov 9th)

• Checkmarx brings software security solutions to AWS Marketplace, earns AWS DevOps Competency status

• Avaya redesigns its Avaya Vantage desktop device to improve the home-office experience

• AWS concerned with government powers in Australia’s new critical infrastructure Act

• Sekhar Kancherlapalli joins Riverbed as CIO

• FCC grants Ossia additional equipment authorization for its next-gen Cota wireless power platform

• Attack Surface Analysis of 3 Social Media Giants

• Arctic Wolf appoints Bob Skelley as Senior Vice President of Global Channels

• IT Security News Weekly Summary – Week 45

• IT Security News Daily Summary 2020-11-08

• Hackers work 24 hours a day – when will you schedule your security training?

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comics – ‘WEEK 302’

• DEF CON 28 Safe Mode ICS Village – Tim Yardley’s ‘Building A Physical Testbed For Blackstart Restoration’

• Quick Tip: Extracting all VBA Code from a Maldoc, (Sun, Nov 8th)

• DEF CON 28 Safe Mode ICS Village – Ac0rn’s & Atlas 0f d00m’s ‘Vivisecting PowerPC’

• Policy Approaches to Climate Migration: Lessons From Latin America and the Caribbean

• Can good cybersecurity policies improve our quality of life?

• Windows 10, iOS, Chrome, and many others fall at China’s top hacking contest

• Hackers Use RMS and Teamviewer To Attack Industrial Enterprises

• Top 10 Best Linux Distro Operating Systems For Ethical Hacking & Penetration Testing – 2020

• Pwn2Own Tokyo Day 3: Team Flashback crowned Master of Pwn

• DoJ seizes $1 billion in Bitcoin linked to Silk Road marketplace

• New 15 Best Kickass Proxy and 5 Best Kickass Alternatives for 2020

• Security Affairs newsletter Round 288

• Apple Patches-Up Three Actively Exploited And Identified Zero-Day Vulnerabilities In its iPhone, iPod and iPad Devices

• It’s [Almost] Over; Much Damage Has Been Done; But I [We] Have A Call To Unexpected Action

• Luxottica data breach exposes info of LensCrafters and EyeMed patients

• Yahoo Mail discontinues automatic email forwarding for free users

• How to Use Apple, Google, and Microsoft’s Parental Controls

• Luxottica data breach exposes info of LensCrafters and EyeMed

• Creative Office 365 phishing inverts images to avoid detection bots

• Week in review: Windows zero-day exploited, Patch Tuesday forecast, selecting a compliance solution

• Spy-Site And Experian – Data Abuse

• THE HR MANAGER’S GUIDE TO MITIGATING CYBER ATTACKS IN HEALTHCARE

• Cryptojacking Targeting WebLogic TCP/7001, (Sat, Nov 7th)

Generated on 2020-11-09 23:55:08.648806