IT Security News Daily Summary 2020-11-19

• How To Prepare Your Mac for macOS Big Sur – Intego Mac Podcast Episode 162

• Lawmakers probe telework’s impact on federal jobs, hiring

• German COVID-19 Contact-Tracing Vulnerability Allowed RCE

• Brave Rewards: How to disable the feature

• White House questions election security; experts do not

• Report: Facebook Did Not Enforce Its Own Rules To Stop Call To Arms Ahead Of Kenosha Shootings

• Go SMS Pro Messaging App Exposed Users’ Private Media Files

• Nation-state actors from Russia, China, Iran, and North Korea target Canada

• The Death of Ayman Al-Zawahri and the Future of Al-Qaida

• Mac and iOS Keychain Tutorial: How Apple’s iCloud Keychain Works

• How to Prepare Your Mac to Upgrade to macOS Big Sur: the Ultimate Guide

• The Netflix streaming model can obviate your employee’s computer security

• Cloud operations are the latest target for ransomware groups

• Cyber threat to Canada from its adversary nations

• Online purchase scams spike since the start of COVID-19, reports BBB

• Ransomware attack on Managed.com disrupts websites across the world

• UK To Create National Cyber Force, Amid £16.5bn Defence Rise

• Facebook Messenger bug could have allowed hackers to spy on users

• Neo-Noir Psychological Thriller ‘Losing Alice’ Launching on Apple TV+ on January 22

• Apple Releases Revised Version of macOS 11.0.1 Big Sur

• Apple and Verizon Debut ‘5G Fleet Swap’ Enterprise iPhone Trade-In Program

• US Senate approves deepfake bill to defend against manipulated media

• REvil Ransomware Hits Managed[.]com

• Liquid Crypto-Exchange Accessed by Unauthorized Party

• New Strain of Skimming Malware Attacking E-Commerce Sites

• Panda Security does it again: 100% detection in AV-C’s Real-World Test

• Brosix – Keep Your Employees Connected With This Secure Messaging App

• Mozilla Has Released Firefox 83 With FreeType Zero-day Fix and HTTPS-Only

• Google Released Chrome 87 With Performance Updates; Disables FTP

• What is the dark web? How to access it and what you’ll find

• 7 dumb ways to be a ransomware victim, and how to avoid them

• EU’s DORA regulation explained: New risk management requirements for financial firms

• China’s exclusion from US 5G market likely to continue with Biden administration

• Red Hat and NetApp integrate Kubernetes app-data management for OpenShift and Project Astra customers

• Medical imaging lifecycle management

• Why is similarity so relevant when investigating attacks

• Elon Musk To Overtake Zuckerberg As Third Richest Person

• Apple Pays $113 Million To Settle iPhone Slowdown Probe

• Amazon Sacks Staff At Drone Division – Report

• Russia Readies Law So Moscow Can Block Social Networking Giants

• Fortnite To Return To iPhones Via Cloud Gaming Service

• Vulnerability in Bumble dating app risked data of 100 million users

• How to Optimize Your App Settings for Privacy

• Android messaging app with 100M users found exposing messages

• Microsoft hopes Windows PCs protection with Pluton security chip

• List of 2020’s most used passwords is here and it’s appalling

• Firefox 83.0 Released – Improved Page Load Performance, HTTPS-Only Mode & 0-Day Fix – Update Now!!

• Surprising Differences Between TLS and SSL Protocol

• Chrome 87 Released with Improved Performance and Security Updates

• Multiple Critical Flaws in Cisco Security Manager Let Attackers to Execute Remote Code

• Businesses Need Automated Web Application Security Scanners to Detect Web Vulnerabilities

• Cloud Workload Security: Part 2 – Security Features of AWS

• API Security Weekly: Issue #110

• Locking Down Smart Home Security | Avast

• Privacy In The Age Of Pandemic | Avast

• Turn Off iPhone Location Tracking | Avast

• Application Security Book Review | Avast

• IBM Works With Cisco to Exorcise Ghosts From Webex Meetings

• Ransomware Response: Time is More Than Just Money

• Cybersecurity Framework: How To Create A Resilience Strategy

• Data Destruction: Importance and Best Practices

• Stay Calm: Your Supply Chain Cybersecurity Is Solid

• Defining Cloud Workload Protection

• VMware Carbon Black Announces Splunk Integration to Streamline and Modernize SOC Workflows

• Risk Score 101: What to look for in a Risk Score

• Anti-adversarial machine learning defenses start to take root

• Achieving K8 Security @ The Speed & Scale of DevOps

• Who’s Calling? How to Avoid Being Hooked by Vishing – the New Old-School Phone Scam

• IBM acquires Instana for its AI-powered app performance monitoring

• How The Trevor Project uses AI to help LGBTQ+ youth and train its counselors

• ControlUp raises $27 million to apply AI to remote machine monitoring

• What enterprise CISOs need to know about AI and cybersecurity

• Forter raises $125 million at a $1.3 billion valuation to combat ecommerce fraud with AI

• Army to evaluate facial recognition in day care centers

• DOD fails third audit, but sees progress with cost-savings

• Making software more than an ‘IT thing’

• CMMC countdown is on but are there enough assessors to do the job?

• New Grelos skimmer variant reveals overlap in Magecart group activities, malware infrastructure

• Windows 10 Expert’s Guide: Everything you need to know about BitLocker

• LidarPhone attack converts smart vacuums into microphones

• The UK’s new offensive cyber unit takes on organised crime and hostile states

• Best VPNs in 2020

• Bumble bugs could have exposed personal data of all users

• WebNavigator Browser Released by Well-Known Search Hijackers

• Adventures in MQTT Part II: Identifying MQTT Brokers in the Wild

• Phishers Using Redirector Sites with Custom Subdomains for Evasion

• Egregor Ransomware Attack Hijacks Printers to Spit Out Ransom Notes

• IoT Cybersecurity Improvement Act Passed, Heads to President’s Desk

• Food-Supply Giant Americold Admits Cyberattack

• Code42 Incydr Series: Protect IP with Code42 Incydr

• Tis’ the Season for Online Holiday Shopping; and Phishing

• GO SMS Pro Android App Exposes Private Photos, Videos and Messages

• Consumers share their top frustrations about online retail purchasing

• Linux servers: How to encrypt files with gocryptfs

• How to use Mozilla’s VPN service across mobile and desktop platforms

• Thunderbird: How to use the built-in GPG feature

• How to use the built-in GPG feature for Thunderbird

• Google Announces Major Google Chrome Extensions Privacy Update

• Google Launches Strong Encryption for Android Messages

• Cybersecurity Workforce Study Needs to be Taken with a Pinch of Salt

• E-Commerce Fraud Prevention Firm Forter Raises $125M at $1.3B Valuation

• 5G Security Risk vs. Reward

• Chinese Hackers Target Japanese Organizations in Large-Scale Campaign

• Application, database and data security quiz

• Sophos: Ransomware ‘heavyweights’ demand sky-high payments

• President Trump fires CISA director Christopher Krebs

• Sophos 2021 Threat Report: Navigating cybersecurity in an uncertain world

• S3 Ep7: When ransomware crooks get a big fat zero! [Podcast]

• Trump Fires Security Chief Christopher Krebs

• HMRC Records 73% Growth in Email Phishing Attacks During #COVID19

• Raytheon Employee Jailed for Exporting Missile Data to China

• #DxPsummit: CISOs Discuss Ransomware Strategies for Recovery and Resistance

• Hard Rock Stadium Ups Cybersecurity

• Oregon County Hit by Ransomware Attack

• Facebook Grilled By Lawmakers Over Moderation, Censorship Concerns

• Zoom Releases Security Features to Fend off Zoom Bombers and Disruptive Participants

• Capcom Ransomware Attack Compromised Personal Information of 350,000 Individuals

• DarkSide Ransomware Operators Plan to Open Distributed Storage System for Stolen Files

• Hundreds of Thousands of SMBGhost and BlueKeep Infected Systems Are Still Up and Running

• Experts meet to identify victims of child sexual abuse

• Three victims of child abuse put to safety in France

• New report finds that criminals leverage AI for malicious use – and it’s not just deep fakes

• ESET has revealed a new series of Lazarus attacks

• Factories have become a major target for malware attacks

• New €4.2 Million fund to empower internet innovators to develop blockchain-based solutions

• White House Declares Guidelines to U.S Federal Agencies for AI Applications

• Unpatched Browsers Abound, Study Shows

• 2021 Cybersecurity Spending: How to Maximize Value

• New Proposed DNS Security Features Released

• COVID-19: Latest Security News & Commentary

• The Yellow Brick Road to Risk Management

• 6 Tips for a More Cyber-Secure Holiday Season

• Telegram Still Hasn’t Removed an AI Bot That’s Abusing Women

• Ghostery’s Making a Privacy Browser—and Ad-Free Search Engine

• A Facebook Messenger Flaw Could Have Let Hackers Listen In

• Cisco Releases Security Updates for Multiple Products

• Drupal Releases Security Updates

• Google Releases Security Updates for Chrome

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• VMware Releases Security Updates for VMware SD-WAN Orchestrator

• Inside the Cit0Day Breach Collection

• Apple Lets Some of its Big Sur macOS Apps Bypass Firewall and VPNs

• Use This Ultimate Template to Plan and Monitor Your Cybersecurity Budgets

• Researchers Warn of Critical Flaw Affecting Industrial Automation Systems

• Evolution of Emotet: From Banking Trojan to Malware Distributor

• WARNING: Unpatched Bug in GO SMS Pro App Exposes Millions of Media Messages

• Ransomware Groups Break Promises, Leak Data Anyway

• Back from vacation: Analyzing Emotet’s activity in 2020

• ISE 3.0 Dynamic Visibility: Step into zero trust for the workplace

• IT and OT Cybersecurity: United We Stand, Divided We Fall

• DEF CON 28 Safe Mode Voting Village Village – Nimit Sawhney’s ‘Analysis Of Data From Mobile Voting Pilots’

• Digital Defense, Inc. Receives 2020 HIRE Vets Platinum Medallion Award for Second Consecutive Year

• What is a Data Classification Policy and Why it’s Important to Keep it Up to Date

• XKCD ‘Blair Witch’

• DEF CON 28 Safe Mode Voting Village Village – Cordero Delgadillo’s ‘A Lawyer’s Reflections On Elections’

• Criminal Activities in Times of a Global Pandemic

• Cisco fixed flaws in WebEx that allow ghost participants in meetings

• REvil ransomware demands 500K ransom to Managed.com hosting provider

• New Grelos skimmer variant reveals murkiness in tracking Magecart operations

• We infiltrated an IRC botnet. Here’s what we found

• Drupal addressed CVE-2020-13671 Remote Code Execution flaw

• Advanced Threat predictions for 2021

• Michael Ellis as NSA General Counsel

• The US Military Buys Commercial Location Data

• ISC Stormcast For Thursday, November 19th 2020 https://isc.sans.edu/podcastdetail.html?id=7260, (Thu, Nov 19th)

• PowerShell Dropper Delivering Formbook, (Thu, Nov 19th)

• How security and compliance automation can help achieve a more secure hybrid cloud

• A guide to security technologies in Red Hat Enterprise Linux

• Mass Migration of Users to Parler Prompts Concerns Over Security and Disinformation

• Perception Point X-Ray

• Introducing the Industry’s First 5G-Native Security

• Congratulations to Our 2020 Global Partners of the Year!

• The Worst Passwords Of 2020 Are Here And They Are Horrifying

• LAPD Bans Facial Recognition, Citing Privacy Concerns

• Cisco Webex Bugs Allow Attackers To Join Meetings As Ghost Users

• Liquid Crypto Exchange Compromised By Hackers

• Massive, China-State-Funded Hack Hits Companies Around The World, Report Says

• Wireless CarPlay Expands to More New Vehicles Amid Rumors of Portless iPhone Next Year

• Joanna Stern and John Gruber Discuss Apple M1 Transition and ‘Craptastic’ 720p FaceTime Cameras

• Google Bringing Stadia Cloud Gaming Service to iOS Through Web App

• Apple Releases iOS 14.2.1 With Fix for Text Message Bug and iPhone 12 Mini Lock Screen Issues

• Apple Confirms Commitment to App Tracking Transparency in Letter Condemning Facebook’s Data Collection

• Where’s the U.S. Strategy for Counternarcotics in Afghanistan?

• Understanding Trump’s Invocation of the Defense Production Act for Meat

• What Expert Says On New Canadian Privacy Law

• Firefox Update Offers Always-on HTTPS – Response From Industry Expert.

• A New Data Reveals Phishing Related To Amazon Is Up 106% Vs. Last Year – Expert Reaction

• Experts On Report: HMRC Reports 75% Surge In Email Attacks During Covid-19 Outbreak

• Expert Advice In Reference Of Chaes Malware Strikes MercadoLivre

• Phishing attacks set to spike ahead of Black Friday

• The US Senate has passed a bill to secure internet devices

• Major global hack found to be state-funded by China

• Cisco Webex flaw leaves meetings open to snooping

• People who have WOWED us over 25 years

• A perspective on security threats and trends, from inception to impact

• The effectiveness of vulnerability disclosure and exploit development

• Group-IB launches Fraud Hunting Platform, a digital identity protection and fraud prevention solution

• Google forces devs to reveal Chrome extensions’ data use, privacy practices

• Cisco Webex vulnerabilities may enable attackers to covertly join meetings

• Complete Our Survey and Redeem an Extended 60-Day Trial of Thor Foresight Enterprise [EXTENDED]

• IAM-Driven Biometrics: The Security Issues with Biometric Identity and Access Management (IAM)

• Cit0day (unverified) – 226,883,414 breached accounts

• Google Chromebooks & Duo — Powering Remote Workforce Security

• macOS Leaks Application Usage, Forces Apple to Make Hard Decisions

• Find Out How Ad Trackers Follow You On the Web With EFF’s “Cover Your Tracks” Tool

• Introducing Cover Your Tracks!

• Presidential transition is rocky as the Trump administration resists President-elect Joe Biden

• Gartner names Microsoft a Leader in the 2020 Magic Quadrant for Cloud Access Security Brokers

• Cyberattacks targeting health care must stop

• Modernize secure access for your on-premises resources with Zero Trust

• Chris Krebs, director of Cybersecurity and Infrastructure Security Agency, fired by President

• IoT forecast: Running antivirus on your smart device?

• Running code in the context of iOS Kernel: Part I + LPE POC on iOS 13.7

• Heads up: A new strain of card-skimming Grelos malware is on the loose

• China-linked hacking gang ‘APT10’ named as probable actor behind extended attacks on Japanese companies

• Compsci guru wants ‘right to be forgotten’ for old email, urges Google and friends to expire, reveal crypto-keys

• Cyberup campaign: 80% of infosec pros fear they might fall foul of UK’s outdated Computer Misuse Act

• AWS includes open-source Suricata for stateful inspection with Network Firewall service

• #ISC2Congress: Recruiter: COVID Had a Minimal Impact on the Cybersecurity Job Market

• Until Further Notice: #ISC2Congress Keynote Prescribes Adaptive Recovery and Resilience in Cybersecurity to Deal With Ongoing Pandemic

• #ISC2CONGRESS: Post-Incident Reviews As Prevention

• The Center wants to send you to college. Interested?

• #ISC2CONGRESS ‘We Got This:’ Adaptability Is Nothing New to Cybersecurity

• Penetration testing

• There is a long history of cybersecurity issues in the automotive history

• Looking for adding new detection technologies in your security products?

• IT Security News Daily Summary 2020-11-18

• Want to add antivirus to your existing portfolio?

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• Addressing the Impact of the Global Cybersecurity Skills Gap

• Ransomware Operators Partner With Hackers to Attack High profile Organizations

• New Zealand Simplifies Privacy with a Data-Breach Determination Tool

• Police Cameras are Providing Facial Recognition Tracking to Criminals in Moscow

• Future of Offensive Attack Simulation: Strategies, Tools & Techniques

• Hackers Steal 46 Million Animal Jam Account Records, Dating Back 10 Years

• Hang up the Phone: MFA’s Insecure Reliance on SMS

• When Security Controls Lead to Security Issues, (Wed, Nov 18th)

• Deals: Woot Discounts AirPods Pro to $189.99 ($59 Off)

• Apple’s MagSafe Duo Charger Unable to Charge iPhones at Full 15-Watt Power

• How do I select a security assessment solution for my business?

• No, the creator of cURL didn’t morph into Elon Musk and give away Bitcoins. But his hijacked Twitter page tried to

• Manufacturing sector Operational Technology is vulnerable to Cyber Attacks

• Microsoft confirms cyber attacks on COVID-19 Vaccine manufactures across the worldwide

• Most Important Endpoint Security & Threat Intelligence Tools List for Hackers and Security Professionals

• Chaes malware strikes customers of Latin America’s largest e-commerce platform

• Multi-cloud environments leaving businesses at risk

• CISOs say a distributed workforce has critically increased security concerns

• How to Securely Dispose of Your Old Mac

• How to switch search engines on macOS and iOS (and why you should)

• Sophisticated Chinese APT Group Targets Southeast Asian Governments

• 3 Ways to Prepare Your Enterprise’s Data Security for a Future of Advanced Attacks

• CEOs Will Be Personally Liable for Cyber-Physical Security Incidents by 2024

• ISC Stormcast For Wednesday, November 18th 2020 https://isc.sans.edu/podcastdetail.html?id=7258, (Wed, Nov 18th)

• Ransomware still the most common cyber threat to SMBs

• Network traffic and consumption trends in 2020

• Firefox support for Flash ends on January 26

• Evasive Maneuvers in Data Stealing Gateways

• D-Link unveils four Wi-Fi 6 access points across its network management solutions

• Sysdig launches zero trust network security for Kubernetes to cut miscrosegmentation time

• Trump fires top DHS cyber official who debunked election misinformation

• Trump fires CISA Director Chris Krebs

• Firing Christopher Krebs Crosses a Line—Even for Trump

• Qualys CloudView app to power Armor Anywhere cloud security posture management capabilities

• Farsight DNSDB and Cortex XSOAR help gain context for all connected DNS-related digital artifacts

• Magnite supports Unified ID 2.0 to create a common transaction fabric for digital advertising

• Trump fires cybersecurity boss Chris Krebs for doing his job: Securing the election and telling the truth about it

• Enhancing Cloud Security Posture for AWS Network Firewall

• Trump fires CISA boss Chris Krebs

• Canada Proposes Major Fines on Firms That Violate Privacy Laws

• Trump Fires Head of DHS Election Security Agency

• Restoring Apple Silicon M1 Macs Leading to macOS Installation Errors

• Developers Now Able to Create Subscription Codes to Lure New and Returning Subscribers

• Google Releasing New Version of Chrome Optimized for Apple Silicon Macs

• PingCAP raises $270M to develop core technologies and advance global expansion of its offerings

• Netskope expands the Netskope NewEdge network with a new data center in Seoul, South Korea

• President Trump fires cybersecurity chief Chris Krebs

• Ransomware attack forces web hosting provider Managed.com to take servers offline

• CyberCX continues aggressive expansion with Queensland operations launch

• Nearly Two Dozen AWS APIs Are Vulnerable to Abuse

• Forget Imposters. Among Us Is a Playground for Hackers

• Apple Releases Second Betas of iOS 14.3 and iPadOS 14.3 to Developers and Public Beta Testers

• ​Artmotion​ invests in Citadelo​ to help enterprises secure their technology infrastructure

• Israeli spyware maker NSO channels Hollywood spy thrillers in appeal for legal immunity in WhatsApp battle

Generated on 2020-11-19 23:55:09.556474