IT Security News Daily Summary 2020-11-26

• IoT Unravelled Part 5: Practical Use Case Videos

• Sopra Steria records heavy financial loss after Ryuk ransomware attack

• Hackers Love Expired Domains

• Mobileiron Vulnerability Used By State-backed Hackers To Break Into Networks – Experts Insight

• To Succeed, Enterprise Cybersecurity Needs IoT Scale

• Want to certify your security software with an internationally recognized testing organization?

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• #DTX Cybersecurity Mini Summit: How CISOs Can Transform an Organization’s Cyber-Capabilities

• Ransomware hits US Fertility the largest US fertility network

• Black Friday 2020: Thanksgiving Day Deals on AirPods, M1 Macs, Apple Watch Series 6, iPads

• Foxconn Moves Some Apple Production To Vietnam

• Bzzzzzzt! How safe is that keenly priced digital doorbell?

• #DTX Cybersecurity Mini Summit: How CISOs Can Transform an Organizations’ Cyber-Capabilities

• Cybersecurity Company Sophos Hit By Data Breach Attack, Company Informs Customers

• Trump Administration Grants ByteDance TikTok Sale Extension

• Sophos breach: Customer data exposed due to permission access flaw

• GDPR Has Had Successes, Requires Public Knowledge of Data Spread

• Speaking at Conferences, 2020 edition

• Danish news agency Ritzau hit by ransomware, but did not pay the ransom

• Apple’s Gift Card Offer Begins in Australia and New Zealand, Doesn’t Apply to Latest Products Like M1 Macs

• Apple News+ Offering Extended Three-Month Free Trial Through Monday

• Entersekt releases findings from State of Online Shopping Report UK

• Penetration testing

• Ransomware damage to businesses is estimated to be $1 billion

• Using similarity to expand context and map out threat campaigns

• Tech Giants Face Fines Or Even Break-up, Warns EU Digital Head

• How Ubiq Security uses APIs to simplify data protection

• Defining Codes of Conduct to Enable Post Brexit GDPR Compliance

• Home Depot Hiring Security Chief Six Years After Major Security Incident

• Happy Thanksgiving From Morphisec

• Carding Action 2020: Group-IB supports Europol-backed operation saving €40 million

• UK Environmental Committee Says Apple Contributing to ‘Throwaway Culture’ of ‘Short-Lived Products’

• Cloud IAM and Cloud PAM Challenges Explained

• Major Nigerian Phishing and BEC Actors, SSGToolz and CeeCeeBossTMT, Arrested by Nigerian Police and Interpol

• Caution! These Black Friday “deals” may be bad for your security

• How to Color Calibrate Your Mac’s Display

• Black Friday; Securely Dispose of Your Old Mac; The HomePod mini – Intego Mac Podcast Episode 163

• Two arrests in Spain for terrorist financing

• EU Plans New Rules Giving Europeans More Control of Data

• DDoS Attacks Against Online Retailers Increase Four-Fold During Pandemic

• Massive BEC Phishing Ring Uncovered, 3 Nigerian Nationals Arrested

• Two-Factor Authentication Bypass Flaw Affects 70 Million+ Domains

• Expert Reaction On Onfido’s Survey Shows UK Consumers Demanding Better Digital Identity Verification

• SECURITY ALERT: Zoom Video Phishing Emails Targeting Corporate HVTs (UPDATED)

• Why is it called a firewall?

• Amazon Web Services Restored After Outage

• Suspected BEC scammers arrested in Nigeria following year-long Interpol investigation

• Changing Employee Security Behavior Takes More Than Simple Awareness

• Federated Learning: A Therapeutic for what Ails Digital Health

• Acronis and World Economic Forum Partner to Combat Global Cybercrime

• Sophos notifies data leak after a misconfiguration

• Complete Our Survey and Redeem an Extended 60-Day Trial of Thor Foresight Enterprise [EXTENDED]

• Coronavirus Pandemic Impacts Full Fibre Broadband Rollout

• New Egregor Ransomware Steps into Maze Group’s Shoes

• ByteDance Granted Seven-Day Extension of TikTok Sale

• Cybersecurity predictions for 2021: automation set to drive spear phishing campaigns

• How secure are your AI and machine learning projects?

• Weakest Link In Security | Avast

• A zero-day in Windows 7 and Windows Server 2008 has yet to be fixed

• Apple Asks Foxconn to Move Some MacBook and iPad Production From China to Vietnam

• Researchers discover Windows zero-day vulnerability

• Safer Online Shopping | Avast

• UK Spies Urge Firms to Patch MobileIron Bug ASAP

• Happy Thanksgiving

• CVE-2020-24407: Magento RFI

• Should Driverless Cars Navigate by Stars?

• Rumored 2021 High-End iPad Pro May Feature 5G With mmWave Support

• Hackers could get anyones email on Xbox Live due to bug

• Fake Among Us app used to distribute malware

• Privacy campaigner flags concerns about Microsoft’s creepy Productivity Score

• Sophos notifies customers of data exposure after database misconfiguration

• Sopra Steria: Ryuk Attack May Cost Us $60m

• Electricity bill of over €1.5 million leads police to 5 illegal marijuana plantations in Spain

• Officers foil fraudsters from stealing €40 million in payment card scam

• SSH-backdoor Botnet With ‘Research’ Infection Technique

• There is a long history of cybersecurity issues in the automotive history

• IoT Unravelled Part 4: Making it All Work for Humans

• Disable Amazon Sidewalk for Now

• Interpol Arrests 3 Nigerian BEC Scammers For Targeting Over 500,000 Entities

• Become a White Hat Hacker — Get 10 Top-Rated Courses at 97% OFF

• How to mitigate risks in an interconnected intelligent enterprise

• Ransomware attacks on 3 US healthcare providers

• Insider Threat- Raytheon employee sells missile data to China

• Willyama’s role in helping Indigenous Australians secure a career in cybersecurity

• WA Auditor reveals ‘concerning’ security practices within state Registry System

• Worldwide cloud security market to reach $20.9 billion by 2027

• Automation to shape cybersecurity activities in 2021

• ZTE stays on FCC national security threat list

• Facebook fined in South Korea for sharing user data without consent

• Emerging Public Cloud Security Challenges in 2020 and Beyond

• Enterprises addressing data security and e-waste issues generated by remote work

• How consumers feel about retail data breaches

• GoDaddy employees tricked in attack against cryptocurrency firms

• The ransomware plague cost the world over $1 billion

• Amazon MWAA: Enabling data engineers to easily execute data processing workflows in the cloud

• AdaCore launches new edition of GNAT Pro to support Wind River Helix Virtualization Platform

• Xbox bug could have allowed hackers to link gamer tags with players’ emails

• 7 Reasons to be Thankful for Your Cybersecurity Team

• Black Friday 2020: AirPods Pro Reach Lowest Price Ever of $169

• Apple Black Friday 2020: Best Apple Watch Deals Including Series 3 From $119

• Cyber Risk Aware and Blue Cube Security tackle the increasing cyber threat to businesses

• How to Improve Your Workplace’s Cybersecurity

• Belden discloses data breach as a result of a cyber attack

• 6 Straight Years of Delivering Outstanding Support

• Act Fast: AirPods Pro Reach Lowest Price Ever of $169 for Black Friday 2020

• Omar Hussain joins Secure AI Labs Board of Directors

• The best gifts for hackers

• Understanding the Australian Inquiry into ADF War Crimes in Afghanistan

• Asia-Pacific Trade Deal RCEP Is Signed; Xi Signals Potential Interest in CPTPP

• Trump’s Tweets Attacking the Election Echo Russian Trolls

• Why the Nagorno-Karabakh Cease-Fire Won’t End the Conflict

• IT Security News Daily Summary 2020-11-25

• Do you have a security tools gap?

• This Bluetooth Attack Can Steal a Tesla Model X in Minutes

• DEF CON 28 Safe Mode Voting Village – EvilMog’s ‘From Printers To Silver Tickets Or Something’

• CYBER Rules: DOD’s DFARS and CMMC Explained

• Remote workforce, web portal, and DevSecOps: Three focus areas for cybersecurity

• Expert Insight On The Bluetooth Attack To Steal A Tesla Model X In Minutes

• Expert Commentary: Spotify Launches ‘Rolling Reset’ On Customer Accounts, Passwords Linked To Data Leak

• Title: Top 5 Business Benefits Of Cybersecurity Compliance

• The Importance Of Disaster Recovery Planning In 2020 And Beyond

• Robots for kids: STEM kits and more tech gifts for hackers of all ages

• Security researcher accidentally discovers Windows 7 and Windows Server 2008 zero-day

• Mastercard expands digital ID trial with Deakin and Australia Post

• Report: Facebook Is Using Privacy As An Excuse To Come After Apps That Give Users More Control

• What is a Look-alike Domain?

• Operation Falcon: Group-IB helps INTERPOL identify Nigerian BEC ring members

• Apple M1 MacBook Pro vs. Intel MacBook Pro (13-Inch) Buyer’s Guide

• Expert Advise In Relation To CISA Warns Of Holiday Online Shopping Scams

• Home Depot Reaches $17.5 Million Settlement Over 2014 Breach

• Spoofed FBI Domains Pose Risk Of Cybercrime And Disinformation

• Comment: Baidu Caught Collecting Sensitive Details From Android Users

• identity management (ID management)

• Nigerians Arrested Over International BEC Scam

• Phishing Most Frequently Reported Cybercrime in US

• Expert Advise On Black Friday And Cyber Monday

• Belden Suffers Breach

• Fake ‘Minecraft Mods’ Attack More Than One Million Android Devices

• MobileIron Remote Code Execution Vulnerability

• Phishing Email Campaign Impersonates Government Pandemic Relief Agencies

• Top 5 business sectors targeted by ransomware

• Look Beyond the ‘Big 5’ in Cyberattacks

• Do You Know Who’s Lurking in Your Cloud Environment?

• Google Finally Pulls Chinese Apps Stealing Personal Data

• Go inside the new Azure Defender for IoT including CyberX

• Learning The [Defence] Ropes 101 – Splunk Setup & Config

• Stories from the SOC – Multi-layered defense detects Windows Trojan

• Verizon Launches 2020 Cyber Espionage Report

• Bristol City Council Data Breach Revealed Names Of Disabled Children

• House Dems look to funding bill to block Schedule F

• Three members of TMT cybercrime group arrested in Nigeria

• China lashes out at India app block, UK 5G ban

• Major BEC Phishing Ring Cracked Open with 3 Arrests

• 5 business sectors ransomware targets

• Medical Officer Speaks Out Against Cyber-Bullying

• Election Cyber Threats in the Asia-Pacific Region

• Reliable Leaker Suggests Redesigned MacBooks in 2021 Will Include Both Apple Silicon and Intel Models

• Apple’s Global Security Chief Indicted in Scheme to Trade iPads for Gun Permits, but Apple Says It’s Found No Wrongdoing

• Is 2FA by SMS a bad idea?

• Feedzai’s Financial Crime Report shows increase in fraud rate by 60% during the pandemic

• Visa Wants to Buy Plaid, and With It, Transaction Data for Millions of People

• Patch Management For Businesses | Avast

• Critical MobileIron RCE Flaw Under Active Attack

• Danish News Agency Rejects Ransom Demand After Hacker Attack

• 8 benefits of a security operations center

• #DTX Cybersecurity Mini Summit: Awareness Key to Securing a Remote Workforce

• FBI Warns of Spoofed Domains Imitating their Website

• As Screen Time Skyrockets, So Does Threat of Fake Apps

• Ransomware Groups Break Promises, Leak Data Anyway

• Top 7 Use Cases for Digital Risk Protection

• What’s the point of habitual cookie consent? Analytics?

• The Cequence Security Blog – Top 5 Posts of 2020

• AppSec Decoded: The consequences of insecure IoT devices

• Automate Security Response With Cortex XSOAR and Recorded Future

• Xbox Boss Discusses Apple Arcade, App Store Fees, and Game Pass Streaming in Safari

• Want to add antivirus to your existing portfolio?

• Baltimore County Public Schools hit by Ransomware Attack

• France Warns Big Tech To Pay Digital Tax In December

• Laser-Based Hacking from Afar Goes Beyond Amazon Alexa

• How to Update Your Remote Access Policy – And Why You Should Now

• Banks looking to confidential computing for solutions to money laundering, theft, and fraud

• S3 Ep8: A conversation with Katie Moussouris [Podcast]

• Phishing Campaign Uses Malicious Office 365 App

• Home Depot Agrees To $17.5 Million Settlement Over 2014 Data Breach

• Hackers Accidentally Expose Spotify User Data They Stole

• Bug Allowed Hackers To Get Anyone’s Email Address On Xbox Live

• Laser-Based Hacking Goes Beyond Amazon Alexa

• Twitter To Relaunch Verification Scheme In 2021

• Eliminating Violence Against Women | Avast

• Ransomware: This new variant could be the next big malware threat to your business

• Light-Based Attacks Expand in the Digital Home

• S3 Ep8: A conversation with Katie Moussouris

• Home Depot Settles with US States Over 2014 Data Breach

• #DTX Cybersecurity Mini Summit: How to Apply Individualized Zero-Trust Architecture

• Why Security Awareness Training Should Be Backed by Security by Design

• Prevention Is Better Than the Cure When Securing Cloud-Native Deployments

• How to Detect Look-alike Domain Registrations

• Retail giant Home Depot agrees to a $17.5 million settlement over 2014 data breach

• ‘Tis the Season for Cybercriminals: Retail’s Top Cyber Threats

• Apple’s Annual Holiday Ad Revolves Around ‘The Magic of Mini’

• Android users targeted by WAPDropper malware

• IoT cybersecurity bill passed by Senate

• Banking Cybersecurity Provider DefenseStorm Raises $19 Million

• LOQBOX Appoints Tim Porter as New Chief Risk Officer

• Fake Minecraft Modpacks On Google Play Deliver Millions of Abusive Ads and Disrupt Normal Phone Usage

• Pinterest soon to join the Online Classes Plethora

• Suspicious network resurrections

• Ryuk Ransomware – Untangling a Convoluted Malware Narrative

• Spotify resets some user logins after hacker database found floating online

• The Career-Changing Magic of Tidying Up

• GitHub Patched A Vulnerability Months After Google’s Report

• Researcher Hacked Tesla Model X Demonstrating Keyless Entry System Vulnerability

• Elon Musk Overtakes Bill Gates As World’s Second Richest

• India Bans Another 43 Mobile Apps In China Confrontation

• This software flaw is being used to break into networks now, so update fast

• Amazon: We’re hiring software engineers who know programming language Rust

• Cloud Security Company Lightspin Emerges From Stealth Mode

• 2FA Bypass Vulnerability Patched in cPanel & WebHost Manager

• Belden Discloses Data Breach Affecting Employee, Business Information

• Peatix Braces Users for Follow-On Attacks After Breach

• Top Security Tips for Online Shopping

• ForgeRock Tops KuppingerCole Leadership Compass for CIAM

• Watch out, WAPDropper malware could subscribe you to premium services

• Cyber Public Health

• Twitter Says Account Verification to Return in Early 2021

• What is swatting? Unleashing armed police against your enemies

• How to use Windows Defender Attack Surface Reduction rules

• YouTube suspends OANN for allegedly peddling fake COVID-19 cures

• Ticketmaster: We’re not liable for credit card badness because the hack straddled GDPR day

• Why Better Password Hygiene Should Be Part of Your New Year’s Resolutions

• Secure Access Service Edge Provider Cato Networks Raises $130 Million

• Fines Less of a Concern than Reputational Damage for Public Sector Security

• Some Apple M1 Mac Owners Reporting Bluetooth Connectivity Issues

• Experts Warning And Advice On Black Friday Threats

• Baidu caught collecting sensitive data from Android users

• Ritzau news agency suffers cyberattack

• cPanel 2FA bypass vulnerability can be exploited through brute force

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• Check Point Software Revolutionize Its Cyber Security Certification Program

• Home Depot agrees to $17.5 million settlement over 2014 data breach

• FBI in Threat Warning After Surge in Spoofed Domains

• Group-IB Hi-Tech Crime Trends 2020/2021 report

• Apple Reportedly Solves Widespread iCloud Music Library Sync Issues

• Stantinko Proxy Trojan Masquerades as Apache Servers

• E-Commerce Biz and CEO Charged with Investor Fraud

• UK NCSC’s alert urges orgs to fix MobileIron CVE-2020-15505 RCE

• Live Patching Windows API Calls Using PowerShell, (Wed, Nov 25th)

• Is Airbnb Safe?

• New malware fraudulently subscribes victims to premium phone services

• Spotify Hack – Over 300k Accounts Hacked in Credential Stuffing Attack

• IoT Unravelled Part 3: Security

• Telsa Flaw Let Attackers to Steal Vehicles in Minutes

• 2-Factor Authentication Bypass Flaw Reported in cPanel and WHM Software

• DevSecOps: 4 Reasons You Need One

• Virtual tabletop exercise coordinated by Europol: Disrupting terrorism and violent extremism online

• Baidu’s Android Apps Caught Collecting and Leaking Sensitive User Data

• Is your organization prepared for PCI DSS 4.0?

• Ransomware news headlines trending on Google

• CrowdStrike reports more ransomware attacks on Australian Organizations

• Database leak exposed mass credential stuffing against Spotify users

• Fireside Chat: Future of Offensive Attack Simulation – Strategies, Tools & Techniques

• Using drones to improve 5G network security

• Challenges organizations face in combating third-party cyber risk

• Russian expert warned about the dangers of password theft during video conferencing

• Maintaining Retailer Cybersecurity During Peak Holiday Shopping Season

• It’s Become Open Season on VPNs. Is Your Organization Protected?

• Around 18,000 fraudulent sites are created daily

• SMBs eagerly adopting IaaS, 60% prefer resellers over providers

• Google binned two apps by China’s Baidu, which says researchers got it wrong by linking it to personal info leaks

• Apple HomePod mini Review: Siri in a Compact Speaker

• Up to 350,000 Spotify accounts hacked in credential stuffing attacks

• Is Cybersecurity Smart Enough to Protect Automated Buildings?

• ISC Stormcast For Wednesday, November 25th 2020 https://isc.sans.edu/podcastdetail.html?id=7268, (Wed, Nov 25th)

• Kuo: Redesigned MacBooks With Apple Silicon to Launch in Second Half of 2021

• The training data solution for machine learning teams

• Linux: How to recover deleted files with testdisk

• Apple Security Chief Allegedly Tried to Bribe Police With iPads

• Home Depot Agrees to $17.5 Million Settlement With States Over 2014 Data Breach

• The Future of Cloud-Native Security is Here!

• DigiCert and Atea deliver a fully managed service for multiple types of digital certificate-based use cases

• TeamViewer 15.12 for macOS: Improved performance and less energy consumption

• NETGEAR launches new WiFi 6 Access Point for home offices and small businesses

• Rockwell Automation improves security of visualization apps with new industrial PCs and software

• How one security researcher is working to secure vulnerable IoT devices

• Spotify resets up to 350,000 passwords linked to third-party data leak

• Google binned two apps by China’s Baidu after researchers spotted personal data leakage

• India blocks another 43 Chinese mobile apps, including AliExpress and TaoBao Live

• Who Was The Pirate? Curious Case of Blackbeard’s Murder

• Democratic Source Code for a New U.S.-EU Tech Alliance

• Accenture acquires End-to-End Analytics to accelerate analytics, data, and AI business growth

• Splunk expands its observability capabilities with the acquisition of Flowmill

• Entersekt partners with Cellulant to guard against digital banking and payment fraud

• 2020-11-24 – TA551 (Shathak) Word docs with English template push IcedID

• CMMC countdown is on but are there enough assessors to do the job?

• Graylog: How to add clients to the system log manager

• 2FA bypass in cPanel potentially exposes tens of millions of websites to hack

• Exclusive Networks to add global scale and services capability to the Nuaware proposition and portfolio

• Let’s Stand Up for Home Hacking and Repair

Generated on 2020-11-26 23:55:09.541985