IT Security News Daily Summary 2020-11-13

• A Complete Guide to the Stages of Penetration Testing

• Biden’s GSA transition team brings deep agency ties

• Apple Issues Security Updates

• Hacker stole $2 million worth of Dai cryptocurrency from Akropolis

• Alexander Vindman Joins the Lawfare Team

• Image stock site 123RF hacked; 8.3M user database leaked

• Ransomware Groups Are Using Hacked Facebook Pages To Pressure Their Victims Into Paying

• CISA Director Expects to Be Fired Following Secure Election

• Inrupt’s Solid Announcement

• Deals: Apple’s Smart Keyboard Folio for 12.9-Inch iPad Pro Discounted to New Low of $119.97 [Updated]

• Universal Apps for Apple Silicon Macs: Pixelmator Pro, DaVinci Resolve, Darkroom, Ulysses, BBEdit, and More

• iPhone 12 and 12 Pro Users Complain of Missing SMS Text Messages and Message Notifications

• Ex-missile systems worker jailed for breaching Official Secrets Act after last-second guilty plea

• What To Look For In Your Next SIEM Provider

• 4 steps to DevSecOps in your software supply chain

• GNAP: OAuth the next generation

• Amazon Sues Instagram, TikTok Influencers Over Knockoff Scam

• Microsoft Issues Security Warning on SMS Multi-Factor Authentication

• Antivirus Software Flagging Dell Drivers as Malware

• Risk & Repeat: 2020 election security in review

• Threat Roundup for November 6 to November 13

• MacRumors Giveaway: Win a Luna Display Adapter and Turn Your iPad or Extra Mac Into a Second Screen

• First Impressions From New iPhone 12 mini and iPhone 12 Pro Max Owners

• Deals: Apple’s Smart Keyboard Folio for 12.9-Inch iPad Pro Discounted to New Low of $119.97

• API Security — 3rd-Party Key Manager Support In WSO2 API Manager 3.2.0

• How To Check the Encryption Certificate of an AS2 EDIINT Data

• Strengthen Enterprise Security Through Network Isolation Approach

• Unified Endpoint Management for the New Normal

• Reaching Strategic Outcomes With a Managed Detection and Response Service Provider: Part 2

• A new data-driven model shows that wearing masks saves lives – and the earlier you start, the better

• 2020 Reader Survey: Share Your Feedback to Help Us Improve

• Nation-State Attackers Actively Target COVID-19 Vaccine-Makers

• Botnet Attackers Turn to Vulnerable IoT Devices

• Adults and children should learn cybersecurity and safety practices

• STEM and cybersecurity training are critical for the future

• 6 training trends to watch that “will define the workplace in 2021”

• Under Analytics

• Feature Release 20.6

• Disconnect Your TCL Smart TV From the Internet—NOW

• Apple Seeds First Betas of iOS 14.3 and iPadOS 14.3 to Public Beta Testers

• Decrypting OpenSSH sessions for fun and profit

• Texas Drivers Impacted by Breach of Vertafore

• DarkSide Ransomware Group Makes New Storage System

• North Face Suffers Credential Stuffing Attack

• Attackers Target Gaming as the Latest ‘Always On’ Industry Impacted by Ransomware

• Vertafore data ereach exposes license details of 27.7M Texas drivers

• An AI tool can distinguish between a conspiracy theory and a true conspiracy – it comes down to how easily the story falls apart

• Aegis Secure Key 3NXC a Finalist in 2020 ‘ASTORS’ Awards Program

• Brazilian IT market on the road to recovery in 2021

• Ticketmaster Scores Hefty Fine Over 2018 Data Breach

• How to temporarily mitigate SAD DNS for Linux servers and desktops

• 4 phishing scams to watch out for during the holidays

• How to use the Mitre ATT&CK framework for cloud security

• New Center Supports Rail Cybersecurity

• Ticketmaster Fined £1.25m Over Data Breach

• ICE Operation Arrests 113 Child Predators

• Self-Service Security for Developers Is the DevSecOps Brass Ring

• Three APT groups have targeted at least seven COVID-19 vaccine makers

• Hasan Minhaj Joins the Cast of ‘The Morning Show’ for Season 2

• Apple Shares Teaser for ‘Servant’ Season 2, Premiering January 15

• Announcing our open source security key test suite

• EncroChat hack evidence wasn’t obtained illegally, High Court of England and Wales rules – trial judges will decide whether to admit it

• How to Use Activity Monitor to Troubleshoot Problems on a Mac

• Swedish Regulator To Challenge Court Order On Huawei Ban

• Hacker steals $2 million from cryptocurrency service Akropolis

• Credential-Stuffing Attack Hits The North Face

• Patch Tuesday, November 2020 Edition

• Report: Only 51% Of Facebook Employees Believe The Company Has A Positive Impact On The World

• Insurance Software Company Leaks 28 Million Texas Driver Records by Mistakes

• Apple Releases Security Updates for Multiple Products

• How Nonprofits Can Protect Themselves From Card-Testing Fraud

• Hitchcock’s “Decentering Whiteness”

• Fish Tanks: Defense in Depth for COVID19?

• How Data-Centric Security Enables Cross-Regulatory Compliance

• Apple Joins Industry Group Working Towards 6G

• Assessing International Law on Self-Determination and Extraterritorial Use of Force in Rojava

• CFIUS’s Excepted Foreign States Provision: U.S. Economic Security Policy Gets Longer Arms

• How Did a Trump Loyalist Come to be Named NSA General Counsel—And What Should Biden Do About It?

• Ticketmaster to pay penalty of £1.25m for chat bot Cyber Attack

• Google Address Two More Chrome Zero-Day Vulnerabilities

• PLATYPUS Attack: Novel Power Side-channel Attack Threatening Intel Devices

• Why does reproducibility matter in healthcare AI?

• Openreach Engineer Stabbed Five Times Amid 5G Violence

• Barracuda Acquires Zero Trust Solution Provider Fyde

• The Best Gifts For Hackers

• Ticketmaster Fined £1.25m Over Payment Data Breach

• Microsoft: North Korean, Russian Hackers Target COVID-19 Researchers

• Manufacturing Becomes Major Target For Ransomware Attacks

• People Could Be Asked To Prove They’ve Had Covid Vaccine To Get Into Sports Events And Concerts

• Ransomware-as-a-Service gang DarkSide creates server for data leaks

• Ticketmaster cops £1.25m ICO fine for 2018 Magecart breach, blames someone else and vows to appeal

• ICO Hits Ticketmaster With £1.2m Data Breach Fine

• The best gifts for hackers

• Microsoft says three APTs have targeted seven COVID-19 vaccine makers

• Microsoft: Russian, North Korean Hackers Target Vaccine Work

• A female wannabe martyr for the so-called Islamic State arrested in Spain

• The Sameness of Every Day: How to Change Up Audit Fatigue

• A Hacker’s Holiday: How Retailers Can Avoid Black Friday Cyber Threats

• RangeForce Becomes Crest Approved Training Provider

• As Screen Time Skyrockets, So Does Threat of Fake Apps

• What Expert Says On Chrome Adding Anti-hijacking Feature

• Experts Reacted On The North Face Credential Stuffing Attack

• Microsoft Advises To Stop Using Phone-Based 2FA – Security Expert Reaction

• Is Uber Safe? All Your Questions Answered

• This Week in Security News: Ransomware Gang is Raking in Tens of Millions of Dollars and Microsoft Patch Tuesday Update Fixes 17 Critical Bugs

• Hackers-for-hire APT group found targeting businesses globally

• Manufacturing Sector Targeted by Five ICS-Focused Threat Groups: Report

• FBI Investigating Hack Involving Black Students at Gonzaga

• Cyber News Rundown: Flood of Phony IRS Emails

• Deals: Woot Discounts Large Collection of Open Box iPads and MacBooks Today Only

• iPhone 12 Upgrade Program Now Available in Scotland, Wales, and Northern Ireland

• Cloud-based Multi-factor Authentication: The Starting Point For Security, Compliance And User Experience

• 10 Best Vulnerability Scanning Tools For Penetration Testing – 2020

• The M140i project post – Part 11

• DHS rejects Trump’s fraud claims: ‘Election was most secure in US history’

• Manufacturing is becoming a major target for ransomware attacks

• Report: CISA Chief Expects White House to Fire Him

• DHS Says Voting Systems Not Compromised, Amid Departures at CISA

• Data Breach Hits 30 Million Texan Drivers

• Shutterstock Adds Single Sign-On Integration to its Platform

• Tick-Tock: Black Friday 2020 Could Turn into a Cybercriminal Medley as Retailers Adjust to Social-Distancing During COVID-19

• Finland Drafting New Legislation Following Cyber-Attack on Psychotherapy Center

• Government in Australia issues Clop Ransomware warning to Healthcare Organizations

• The iOS Covid App Ecosystem Has Become a Privacy Minefield

• 5 key benefits of using an IP scanner

• Successful Ransomware Attacks on Education Sector Grew 388% in Q3 2020

• New Zealand Election Fraud

• New ‘Vanish Mode’ in Messenger and Instagram Enables Disappearing Chats

• Virtual Engagement Activities at #ISC2Congress

• 5 open source intrusion detection systems for SMBs

• The North Face resets passwords after credential-stuffing attack

• Credential Stuffers Scaled The North Face to Access Accounts

• The Scammer Who Wanted to Save His Country

• Kuo: Mini-LED iPad and AirPods 3 Coming First Half of 2021

• Major retailers in the EU and US at risk to web attacks

• Inaccurate Predictions about Cybersecurity is Dangerous

• Quick Hits

• FCW Insider: Nov. 13

• Amazon files lawsuit against Instagram, TikTok influencers over ‘dupe’ sales scam

• Chainalysis launches program to manage cryptocurrency seized by law enforcement

• CISA’s Krebs Set to be Fired in Blow for Security Community

• 18 arrested and €4 million seized in large money-laundering bust in France

• Vertafore data breach exposed data of 27.7 million Texas drivers

• Menu Bar Controller App for Sonos Speakers Updated for macOS 11

• Experts Insight On Steelcase Suffers Ransomware Attack, Forces 2-week Shut Down Of Global Operations And Production

• Animal Jam Kids’ Virtual World Hit By Data Breach, Impacting 46m Accounts: Expert Commentary

• Stock photo service 123RD suffered major data breach

• Possible ransomware attack warnings from the Australian government

• Stressed employees behind data breaches survey finds

• Fraudulent Transactions a Bigger Worry for Online Retailers During #COVID19

• macOS Big Sur: Quick Start Video Plus 50 Tips and Tricks

• Group-IB opens HQ in Amsterdam as a central hub for research into the European threat landscape

• U.S. Election Misinformation Continues to Spread | Avast

• Avast Business Remote Control Announcement | Avast

• Live Webinar: Reducing Complexity by Increasing Consolidation for SMEs

• Why Linux Should Factor Into Your Security Strategy

• Security flaws in Schneider Electric PLCs allow full take over

• Old Worm But New Obfuscation Technique, (Fri, Nov 13th)

• SAD DNS — New Flaws Re-Enable DNS Cache Poisoning Attacks

• 2020’s biggest innovators? Hackers and cyber-criminals, again, says Darktrace

• Info of 27.7 million Texas drivers exposed in Vertafore data breach

• Making history: The pandemic, disaster recovery and data protection

• Apple plans new data privacy guidelines to app developers

• US Cybersecurity Officials to be fired after elections

• How IoT insecurity impacts global organizations

• Enterprises embrace Kubernetes, but lack security tools to mitigate risk

• Swiss Spies Benefitted From Secret CIA Encryption Firm: Probe

• ML tool identifies domains created to promote fake news

• Malware activity spikes 128%, Office document phishing skyrockets

• Hungry for data, ModPipe backdoor hits POS software used in hospitality sector

• Google patches two new zero‑day flaws in Chrome

• DEF CON 28 Safe Mode Ham Radio Village – Typer Gardner’s ‘Single Board Computers In Amateur Radio’

• How to Choose an MDR Provider

• De SLA a XLA: de servicios a experiencias

• Keep Your Site Safe with the OWASP Top 10 List

• [CTO Interview] The Enterprise Movement to PKI as-a-Service

• ISC Stormcast For Friday, November 13th 2020 https://isc.sans.edu/podcastdetail.html?id=7252, (Fri, Nov 13th)

• Infosys delivers cloud-powered, cognitive-first managed services for IT operations

• Home Chef – 8,815,692 breached accounts

• Fantastical Updated for macOS Big Sur With New Design, Widgets, Native Support for Apple Silicon, and More

• Elastic enables customers to cost-effectively store and search data for deeper insights with no constraints

• Secure Code Warrior Missions: Interactive coding simulations of real-world applications

• AWS Glue DataBrew: Enabling customers to clean and normalize data without writing code

• Election security fears doused with reality: Top officials say Nov 3 ‘was the most secure in American history.’ The end

• “Nope, Go Phish” – How Organizations Can Finally Put a Stop to The Oldest Hacking Trick

• An Investigative Analysis of the Silent Librarian IoCs

• Apple Updates iWork, iMovie, and GarageBand With Refreshed Icons and Designs for macOS Big Sur

• Uptycs enhances detection and investigation for on-premises and cloud workloads

• SonicWall adds high-performance, low-TCO firewalls to its Capture Cloud Platform

• Resilience provides insurance coverage and patented cybersecurity tools for the mid-market

• 10 Common Digital Threats to Businesses

• Australian government warns of possible ransomware attacks on health sector

• Code in iOS 14.3 Adds Support for Third-Party Bluetooth Trackers With Find My Integration

• First iPhone 12 Mini and iPhone 12 Pro Max Orders Arriving to Customers in New Zealand and Australia

• Apple Updates iWork and GarageBand With Refreshed Icons and Designs for macOS Big Sur

• SentinelOne raises $267 million to accelerate growth driven by demand for its Singularity XDR Platform

• Syniverse and NodeWeaver partnership delivers wireless services and enables the intelligent edge

• 2020-11-10 – Pcap and malware for an ICS diary (traffic analysis quiz)

• 2020-11-12 – Dridex activity

• OPM veterans on the Biden-Harris transition team

• DHS panel says 2020 vote was ‘most secure in American history’

• Manufacturing Sees Rising Ransomware Threat

• What’s New in iOS 14.3: ProRAW Support for iPhone 12 Pro, PS5 Controller Support and More

• iOS 14.3 Icon Hints at AirPods Studio Design

• Intel SGX users need CPU microcode patch to block PLATYPUS secrets-leaking attack

• Telework capabilities set stage for truly mobile DOD workforce

• Cyberattackers Serve Up Custom Backdoor for Oracle Restaurant Software

• Credential Stuffing Fills E-commerce Pipeline in 2020

• ‘Pay2Key’ Could Become Next Big Ransomware Threat

• The GOP Keeps Proving There’s No Election Fraud

• Apple Seeds First Betas of iOS 14.3 and iPadOS 14.3 to Developers [Update: Pulled]

• Apple Card, Apple Pay, Maps and Messages Experiencing Outages [Updated]

• Apple Pulls iOS 14.3, watchOS 7.2, and tvOS 14.3 Updates Amid Slew of Server Issues

• IT Security News Daily Summary 2020-11-12

• Watch out: Fake celebrity endorsements advertising Bitcoin scam

• SASE consolidated integrated platform

• How COVID is driving smart city plans, budgets

• BlackBerry discovers new hacker-for-hire mercenary group

• Animal Jam Hacked, 46M Records Roam the Dark Web

• Swedish court suspended the ban on Huawei equipment

• Mac Apps Not Opening Due to Apple Server Issues: How to Fix For Now

• Apple Seeds First Beta of tvOS 14.3 Update to Developers

• Apple Seeds First Beta of watchOS 7.2 to Developers

• Apple Updates Final Cut Pro X and Logic Pro X for Apple Silicon Macs Ahead of M1 Launch

• Apple Seeds First Betas of iOS 14.3 and iPadOS 14.3 to Developers

• How China’s Control of Information is a Cyber Weakness

• Tell Trump’s Patent Office Director: Don’t Make Permanent Rule Changes Now

• Hat trick for Google as it patches two more zero-days in Chrome

• How to Configure and Use Control Center in macOS Big Sur

• Understanding User Accounts in macOS

• How to Prepare Your Mac to Upgrade to macOS Big Sur: the Ultimate Guide

• A Biden-Harris ‘reset’ for feds

• Smart concrete could pave the way for high-tech, cost-effective roads

• Hackers for hire target victims with cyber espionage campaign

• New ‘CostaRicto’ Hack-for-Hire Group Targets Global Businesses

• Apple Silicon M1 Mac Mini vs. Intel Mac Mini Buyer’s Guide

• Rosetta Mac App Translation Process Can Take 20 Seconds on First Launch

• Plague Inc. Gets New Game Mode That Lets You Save the World From a Pandemic

• New 2020 Duo Trusted Access Report Examines Securing Remote Work

• How and when to change your Google password

• Ethical Hacker’s Comic Dream Gets Backing

• Happy Birthday, Marine Corps!

• Employee Spotlight: From Building Code to Building Teams

• Popular iOS Camera App Darkroom Expands to Macs With Universal App Support

• One Step Beyond: Using Threat Hunting to Anticipate the Unknown

• Innovating for IT Specialists

• Google makes app to lock devices if users default on payment

• Data Security: Building for Today’s Hybrid Cloud World

• A Quick Guide to Effective SIEM Use Cases

• How Federal Agencies Can Reduce Cyber Risk Posed by Contractors

• DNS cache poisoning poised for a comeback: Sad DNS

• Digging into the Dark Web: How Security Researchers Learn to Think Like the Bad Guys

• Finland Fast-Tracks ID Code Law Change After Hacking Case

• Most Americans Reuse Passwords for Work Devices

• Cyber-Mercenaries Sell Espionage Campaigns

• Hackers Use Bugs To Attack iOS and Android Devices; Google Doesn’t Disclose Details

• Here’s why a Greece Hacker Easily Hacked Croatian University?

• DARPA and Academia Jumpstart 5G IoT Security Efforts

• Mcafee Announces Mvision Marketplace And Mvision Api To Enable Organizations To Quickly And Easily Adapt To Security Gaps

• The Hard Truth About Federal 2021 Bid Deadlines for Cloud-Based Software Vendors

• Apple Releases macOS Big Sur With Fresh Design, Control Center, Safari Privacy Report, Messages Updates, Maps Overhaul and More

• Apple Execs Talk M1 Chip, Touchscreen Macs and More in New Interview

• Researchers simulate privacy leaks in functional genomics studies

• Introducing “How to Fix the Internet,” a New Podcast from EFF

• Podcast Episode: Why Does My Internet Suck?

• Podcast Episode: The Secret Court Approving Secret Surveillance

• ModPipe Backdoor Targets Oracle Point of Sale System

• Comodo Releases Open Source EDR Solution

• Decompiled Source Code of Cobalt Strike Released on GitHub

• DEF CON 28 Safe Mode Ham Radio Village – Eric Escobar’s ‘Talking To Satellites’

• 46M accounts were impacted in the data breach of children’s online playground Animal Jam

• Apple Says HomePod Mini Won’t Leave Marks on Waxed or Oiled Wood Surfaces

• System Management Mode deep dive: How SMM isolation hardens the platform

• Kids’ gaming website Animal Jam breached after miscreants spot private AWS key on pwned Slack channel

• Apple Launches New Macs, and Big Sur Arrives – Intego Mac Podcast Episode 161

• Public Sector Leaders Admit Personal Toll From Pandemic

• Animal Jam data breach – Hacker leaks database with millions of accounts

• API Security Weekly: Issue #109

• Surviving college distance learning during the pandemic: a cybersecurity guide

• Check Point Software Technologies recognized as Leader in the 2020 Gartner Network Firewall Magic Quadrant

• Bugs in Critical Infrastructure Gear Allow Sophisticated Cyberattacks

• S3 Ep6: How not to get scammed [Podcast]

• Recommendations Accepted in Advancement for EU Data Protection Transfers

• Google Releases Security Updates for Chrome

• 3 Must-dos to Secure Your Applications

• Palo Alto Networks a Nine-Time Gartner Magic Quadrant Leader

• New Pay2Key Ransomware linked to Iran

• Microsoft November Patch Tuesday Comes With Much-Awaited Zero-Day Fix

• Introducing NetApp SnapCenter 4.4

• IBM Warns Global Business Services Staff Of Redundancies

• Querying Windows Event Logs for Faster Investigation and Response

• Menlo Security raises $100 million to beat back malware with algorithms

• Trump Administration Says Still Searching for TikTok Resolution

• The Term “Threat Intelligence” is Poisoned. It Does Not Mean What You Think it Means.

• #EdgeLive: The Emerging Role of SASE in Organizational Security

• KnowBe4’s Security Awareness Essentials Course Certified by the NCSC

• 5 Steps Every Company Should Take to Avoid Data Theft Risk

• Security in the Cloud: IAM and Data Access Control

• Managing Your Security Product in the Cloud, Like a Spartan

• Secure Code Warrior Takes Secure Coding Prowess to New Heights With Missions

• Sonatype and Fugue Partner to Shift Cloud Security Left and Ensure Continuous Policy Compliance

• Costaricto APT: Cyber mercenaries use previously undocumented malware

• Google Patches Two More Chrome Zero Days

• Nvidia Warns Gamers Of GeForce NOW Flaw

• DNS Cache Poisoning Is Back From The Dead

• Now-Patched Ubuntu Desktop Vulnerability Allows Privilege Escalation

• macOS Big Sur Features: Everything New in Today’s Release

• djay Pro AI for Mac Released With Support for M1 Chip

• First Apple Silicon Macs With M1 Chip Begin Shipping to Customers Ahead of November 17 Launch

• Advanced Bot Protection Handling More Traffic Than Ever

• Cyberattacks increase by 260% in the first nine months of 2020

• UK Conservative Party used 10 million people’s names to derive their country of origin, ethnicity and religion according to ICO report

• Google Photos To End Unlimited Cloud Storage

• Comodo open-sources its EDR solution

• 2 More Google Chrome Zero-Days Under Active Exploitation

• New survey details IT challenges, shadow IT risks, 2021 outlook, and more

• How to combat the latest and most aggressive botnets and malware

• Encryption Vulnerabilities Allow Hackers to Take Control of Schneider Electric PLCs

• Data breach response: How to plan and recover

• Microsoft says it’s time for you to stop using SMS and voice calls for multi-factor authentication

• An Engineer Gets 9 Years for Stealing $10M From Microsoft

• CRAT wants to plunder your endpoints

• Menlo Security Raises $100M for Security Service

• Sectigo Helps DevSecOps Teams Speed Application Deployment Securely with Five More PKI DevOps Integrations

• Security Intelligence Handbook Chapter 2: Examining Operational and Strategic Security Intelligence

• Watch: HomePod Mini Reviews, Sound Quality Tests, and Unboxing Videos

• HomePod Mini Reviews: ‘Remarkably Big Sound’ Despite Compact Design

• Serif Updates Affinity Apps for ‘Superfast Performance’ With M1 Chip

• Mercenary APT group CostaRicto hits organizations worldwide

• From Triton to Stuxnet: Preparing for OT Incident Response

• Menlo Security Raises $100 Million at $800 Million Valuation

• Like the Energizer Bunny, Trickbot Goes On and On

• WOW64!Hooks: WOW64 Subsystem Internals and Hooking Techniques

• CRAT Aims To Plunder Your Endpoints

• JumpCloud’s Zero Day macOS Big Sur Support Gives Admins Options & Advantages

• Menlo Security Raises $100 Million in Latest Financing

• Experts Reacted Microsoft’s New Patch Tuesday Format: “A Bad Move” And “Disappointing”

• (ISC)2 Study Reveals The Cybersecurity Workforce Has Grown To 3.5 Million Professionals Globally

• Want To Avoid Ransomware Attacks? Start By Fighting Your Shadow IT

• Microsoft advises users to stop using SMS- and voice-based MFA

• Swiss spies knew about Crypto AG compromise – and kept it from govt overseers for nearly 30 years

• 2020 (ISC)2 Cybersecurity Workforce Study: Skills Gap Narrows in an Unusual Year

• Focus On Cyber Defence Rather Than Cyber Attack – Former NCSC Head

• KuCoin CEO says 84% of stolen cryptocurrency has been recovered

• Webinar Today: Strengthening Industrial Cybersecurity With Internal Segmentation

• Google Patches Two More Chrome Zero-Days Exploited in Attacks

• Huawei Wins Stay Against Exclusion From Sweden 5G

• ICO Demands Urgent Data Protection Changes from UK Parties

• #EdgeLive: Phishing Attacks Now Targeting Enterprise Specifics

• Uncovered: APT ‘Hackers For Hire’ Target Financial, Entertainment Firms

• New modular ModPipe POS Malware targets restaurants and hospitality sectors

• “Privacy Nutrition Labels” in Apple’s App Store

• Microsoft Releases Office for Mac Beta With Apple Silicon Compatibility

• Philips Hue Adds Support for HomeKit Adaptive Lighting to Ambiance Lights

• CEO Perspective On Muhstik IoT Botnet Infecting Cloud Servers & Mining Crypto

• Research Shows Why You Should Keep Your Netflix Password To Yourself

• People who have WOWED us over 25 years

• The rise of stalkerware

• Google Critics Urge EU Antitrust Action

• Implement Cloud Security Best Practices With This Guide

• Microsoft Urges Firms to Hang Up on Phone-Based MFA

• Update Your Chrome Browser Now! Google Says These High-Severity Bugs Have Exploits in the Wild

• 355 protected reptiles saved in Spain in hit against wildlife traffickers

• COVID-19 chiefs of police working group: fighting the pandemic and criminals together

• Managing Scans using Bash and the Acunetix API

• Advancing Security Leadership with $100M in Additional Funding

• Preventing Exposed Azure Blob Storage, (Thu, Nov 12th)

• Take Care – The Gin Is Circa 1984

• Zoom/FTC Settlement – Expert Source

• How A Delayed Presidential Transition Threatens US Cybersecurity

• Passage of California privacy act could spur similar new regulations in other states

• Assessing Security Operation Centers Using a Balanced Scorecard

• FCW Insider: Nov. 12

• New ModPipe malware targets hospitality, hotel point of sale systems

• Palo Alto Networks to Acquire Attack Surface Management Firm Expanse in $800 Million Deal

• Hackers Steal 46 Million Records from Kids’ Game Developer

• MISSIONS — The Next Level of Interactive Developer Security Training

• New ModPipe Point of Sale (POS) Malware Targeting Restaurants, Hotels

• Here’s When You Can Download macOS Big Sur in Time Zones Around the World

• Apple TV App Now Available to Download on PlayStation 4 and PlayStation 5

• Things 3.13.2 Update Brings Support for macOS Big Sur, Including New Widgets and Rich Notifications

• Ransomware Gang Hacks Facebook Account To Run Extortion Ads – Expert Comments

• Ransomware attacks targeting Israel are thought to be linked to Iranian threat actors

• Microsoft calls for users to stop using phone-based multi-factor authentication

• Former NCSC cyber-chief, Ciaran Martin, says ‘Don’t weaponise the net’

• Researchers discover POS backdoor targeting the hospitality industry

• #EdgeLive: Defending Against the Growing Threat of DDoS Attacks

• Ransomware gang takes out Facebook ads to apply pressure on victim

• Spam and phishing in Q3 2020

• 6 Ways to Reduce Your Cloud Attack Surface

• Google addresses two new Chrome zero-day flaws

• Perception Point X-Ray

• (IN)SECURE Magazine issue 67 released

• One Key Cyber Security Fact

• DOD to focus on Cybersecurity of Connected Weapons

• Ransomware attack on Timberline Billing Service

• Microsoft urges users to stop using phone-based multi-factor authentication

• The security consequences of massive change in how we work

• Cybersecurity workforce gap decreases, job satisfaction rates increase

• Samsung finally admitted to Google’s Enterprise Android Recommended club

• In Zero we trust

• Avionics Safety and Secured Connectivity: A Look at DO-326A/ED-202A, DO-355 and DO-356

• SAP Patches Several Critical Vulnerabilities With November 2020 Security Updates

• ISC Stormcast For Thursday, November 12th 2020 https://isc.sans.edu/podcastdetail.html?id=7250, (Thu, Nov 12th)

• Q&A session: Examples of what it takes to achieve DevSecOps maturity

• Fraudsters increasingly creative with names and addresses for phishing sites

• Holiday gifts getting smarter, but creepier when it comes to privacy and security

• Why you should keep your Netflix password to yourself

• Microsoft Patch Tuesday fixes 17 critical flaws, Windows zero‑day

• Two New Chrome 0-Days Under Active Attacks – Update Your Browser

• Lumu Agent for Windows: Measuring remote worker compromise levels in real time

• Critical Vulnerabilities Discovered in World’s Largest Android TVs Manufacturer

• Exposed Blob Storage in Azure, (Thu, Nov 12th)

• Imperva SD-SOC: How Using AI and Time Series Traffic Improves DDoS Mitigation

• HPE GreenLake for VDI cloud services provides solutions optimized for each type of remote worker

• Kount Event-Based Bot Detection protects the end-to-end customer journey from fraud

• Datadog’s new capabilities for monitoring DNS provide visibility into the health of business-critical apps

• Keyavi Data launches four apps that enable customers to transform any type of data file into intelligent data

• Animal Jam – 7,104,998 breached accounts

• Apple Silicon M1 Chip in MacBook Air Outperforms High-End 16-Inch MacBook Pro

• Ontic and DarkOwl provide Fortune 500 clients with the ability to surface actionable insights from dark net data

• ThreatQuotient and Infoblox enable orgs to accelerate response to emerging threat vectors

• What’s New In OAuth 2.1?

• Google patches two more Chrome zero-days

• Changes to Microsoft Security Bulletins

• Security Hiring Plans Remain Constant Despite Pandemic

• Want to Avoid an Extreme Cyberloss? Focus on the Basics

• NSF-Funded Research Aims to Help Disrupt Cybercrime Supply Chains

• Nexus Repository Helps Developers Overcome New Docker Hub Rate Limits

• Contrast Security’s Approach to SCA Enables Vulnerability Prioritization and Faster Remediation

• New to Identity Governance? Here’s What to Look for in a Modern Identity Governance Solution

• The alleged decompiled source code of Cobalt Strike toolkit leaked online

• Barack Obama Interview Airing November 17 on Apple TV+ Show ‘The Oprah Conversation’

• DataVisor appoints Steve Knopf and Jamshed Patel to its executive leadership team

• AnimalJam – 7,104,998 breached accounts

Generated on 2020-11-13 23:55:12.465680