IT Security News Daily Summary 2020-12-05

• DEF CON 28 Safe Mode Aerospace Village – Matt Gaffney’s ‘MITM: The Mystery In The Middle’

• XKCD ‘Contiguous 41 States’

• DEF CON 28 Safe Mode Aerospace Village – Allan Tart’s & Fabian Landis’ ‘Low Cost VHF Receiver’

• Human resource consulting giant Randstad hit by Egregor ransomware

• Is IP 91.199.118.137 testing Access to aahwwx.52host.xyz?, (Sat, Dec 5th)

• App Store Best of 2020 Winners Begin Receiving Physical Award

• Italy Says Two Arrested for Defense Data Theft

• Acronis reports India to be third highest in terms of Malware attacks, after US and Japan

• The US Used the Patriot Act to Justify Logging Website Users

• Cyber mercenaries group DeathStalker uses a new backdoor

• Top Stories: Redesigned MacBook Pro in 2021, MagSafe Duo Released, HomePod Mini vs. Competition

• Iranian Hackers Attack Israel Water Facility, Gain Access To HMI Systems

• Ransomware hits helicopter maker Kopter

• DEF CON 28 Safe Mode Aerospace Village – Michael Vanguardia’s ‘Secure Airplane Development Lifecycle’

• IronNet’s top 10 predictions for 2021

• ‘Build’ or ‘Buy’ your own antivirus product

• Can good cybersecurity policies improve our quality of life?

• Cybersecurity Advent Calendar: Let Santa in, keep hackers out!

• MyOffice, the Russian alternative to Office 365 gains momentum in Africa

• Ransomware gangs are now cold-calling victims if they restore from backups without paying

• Zscaler CEO on Operation Warp Speed, fighting vaccine IP cyberthreats

• How to set up MFA for Office 365 on end-user devices

• Iranian hackers access unsecured HMI at Israeli Water Facility

• Apple Launches iPhone 11 Display Module Replacement Program

• Crowdstrike CEO talks fighting cyberthreats on coronavirus vaccine operations

• 7 SecOps roles and responsibilities for the modern enterprise

• Microsoft Cloud Security Exec Talks New Tech, WFH, Gamification

• Cyber News Rundown: Biological Worries Over Malware Attacks

• IT Security News Daily Summary 2020-12-04

• Body as biosensor: Faster COVID detection boosts military readiness

• DOD eyes blockchain for medical use cases

• Making Sense of the Security Sensor Landscape

• A slice of SecOps software options to counter threats

• Kmart Hit by Egregor Ransomware

• Threat Roundup for November 27 to December 4

• Ransomware attack discrupts Metro Vancouver’s payment systems

• Congress axes CMO office in 2021 defense bill

• Unemployment payments weeks late in nearly every state

• Johnson & Johnson CISO: Healthcare orgs are seeing nation-state attacks every single minute of every single day

• High-Severity Chrome Bugs Allow Browser Hacks

• Security operations center use cases, strategies vary

• BECs and EACs: What’s the Difference?

• Recently disclosed CVE-2020-4006 VMware zero-day was reported by NSA

• The 2020 Workshop on Economics and Information Security (WEIS)

• Dutch Antitrust Probe Targets Contactless Payments Like Apple Pay

• How Do You Solve a Problem Like John Durham?

• Cyber czar, CISA subpoenas included in must-pass defense bill

• Gender pay gap persists in the federal workforce

• Novel Online Shopping Malware Hides in Social-Media Buttons

• AI Collaborative Research Institute Launched

• MacRumors Giveaway: Win a Pad X3 Wireless Charger from WhyWood

• Egregor Really Wants You to See Its Ransom Demands

• Online Education Company K12 Affected by Ransomware

• Trickbot Added New Feature to Infect UEFI/BIOS and Survive OS Reinstall

• Verifying Linux Server Security: What Every Admin Needs to Know>

• New law enshrines modernization Centers of Excellence effort

• Most used passwords for 2020: The internet’s favorite curse word, name, food, and team

• VMware Patches Workspace ONE Access Vulnerability Reported by NSA

• As Hospitals Cope With a COVID-19 Surge, Cyber Threats Loom

• Italian Police Arrest Criminals Accused of Robbing ATMs with Purpose-Built Black Boxes

• Intel Doubles Down on Emerging Technologies for Sharing and Using Data Securely

• Apache Releases Security Advisory for Apache Tomcat

• Celebrating 20 Years of Cybersecurity Excellence

• DEF CON 28 Safe Mode Aerospace Village – Opening Remarks

• Presidential Middle Names

• Brazil Govt’s Huge Leak: Health Data of 243M

• Apple Confirms Family Sharing for In-App Purchases and Subscriptions is Now Available

• Apple Picks Up World Surf League Docuseries for Apple TV+

• Most Reliable Hosting Company Sites in November 2020

• Hack-for-Hire Group ‘DeathStalker’ Uses New Backdoor in Recent Attacks

• New IBM encryption tools head off quantum computing threats

• Tech CEO Pleads Guilty to Investment Fraud

• Smart Sex Toy Sales Surge Poses Security Risk

• Why Workers Aren’t Confident in their Companies’ Security (and What to Do About it)

• Apple Researching a Matte Black Finish for MacBooks

• Gift Guide for Apple Fans (2020)

• Fostering research on new web security threats

• Entisys360 Receives NetApp Americas HCI Innovation Award 2020

• Protecting the healthcare industry from cyber threats

• COVID-19 supply chain hit by Cyber Attack

• NSA warns of Russian state-sponsored hackers exploiting VMWare vulnerability

• Protect your business from DDoS attacks: Join this webinar to find out more

• Report: Despite Being Shut Down, Fraudulent Ad System Continues Scamming Facebook Users

• Secure Network Analytics (Stealthwatch) Then, Now and Beyond – Part 2: Behavioral Analytics Has its Day

• Satechi Debuts Magnetic Wireless Charger for iPhone 12 Models

• Taiwan, “Strategic Clarity” and the War Powers: A U.S. Commitment to Taiwan Requires Congressional Buy-In

• Furlough a testing time for UK employees – lack of support leads to less loyalty as many begin returning to work

• Phishing hosted on high Alexa domains: another dangerous trick in Web

• File-sharing and cloud storage sites: How safe are they?

• Stop Streaming In Ultra HD On Phones To Save Planet, Scientists Warn

• Policy Management Updates | Avast

• VMware Rolls a Fix for Formerly Critical Zero-Day Bug

• Iranian Hackers Access Unprotected ICS at Israeli Water Facility

• IRS to Make ID Protection PIN Open to All

• Google Releases Security Updates for Chrome

• My top 5 videos of the year

• Islamic imprisoned hacker Ardit Ferizi ordered to be deported

• Enigma Machine Recovered from the Baltic Sea

• Deals: Shop Discounts on Sonos, PhoneSoap Sanitizers, and Magic Keyboard for 12.9-Inch iPad Pro ($50 Off, New Low Price)

• Brazilian Aerospace And Defence Group Embraer’s Systems Affected By Cyberattack

• Royal Dutch Cycling Union Disclosed Ransomware Attack

• Vancouver Metro Disrupted by Egregor Ransomware

• Many Android Apps Expose Users to Attacks Due to Failure to Patch Google Library

• Man Pleads Guilty to Role in Malware Protection Scam

• Ransomware Set for Evolution in Attack Capabilities in 2021

• Europol predictions correct for fake COVID-19 vaccines

• Hacker Who Stole Information From Nintendo Now Sentenced

• Flash Dies but Warning Signs Persist: A Eulogy for Tech’s Terrible Security Precedent

• The Targeting of the COVID-19 Vaccine Supply Chain

• Tibet and Taiwan Targeted in Spearphishing Campaigns Using MESSAGEMANIFOLD Malware

• Google Illegally Spied On And Retaliated Against Workers, Feds Say

• Kmart, Latest Victim Of Egregor Ransomware

• UK Cyber-Warning For Festive Shoppers

• CBP’s Warrantless Use Of Cell Location Data Is Under Investigation

• ‘A Charlie Brown Christmas’ and ‘Mariah Carey’s Magical Christmas Special’ Now Streaming on Apple TV+

• Experts On Xerox DocuShare Bugs Allow Data Leaks

• The M140i project post – Part 12

• VMware Carbon Black Recognized as “Tech Exit of the Year” at New England Venture Capital Association’s 2020 NEVY Awards

• The best gifts for hackers

• Metro Vancouver Transportation Agency TransLink Hit by Ransomware

• Imprisoned Hacker Ordered to Be Released, Promptly Deported

• Experts On Clop Ransomware Attacking Retail Giant E-Land

• Hackers hiding skimming malware behind social media sharing icons

• Top 4 Best and Safest Types of Biometrics

• Egregor Ransomware Strikes Metro Vancouver’s TransLink

• US Intelligence Director Says China is Top Threat to America

• #WebSummit: Nick Clegg Claims Internet Needs Accountability, Not Rules

• Verizon Leaks Customer Conversations, Personal Data Through Flawed Chat Window on Its Website

• Nintendo Hacker Sentenced to Three Years in Prison

• Hundreds of millions of Android users exposed to hack due to CVE-2020-8913

• Payment Skimmer Hides In Social Media Buttons

• Data Protection Is Integral In Wake Of COVID-19 Vaccine ‘Cold Supply’ Chain Network Hack

• Security Expert Re: Absa Financial Services Employee Sells Customer Data To Third Parties

• Heimdal Security Announces Opening of Its Second Office in the UK

• Google Hacker Found a Way to Hack iPhones Remotely Through WiFi

• The biggest data breach fines, penalties and settlements so far

• Google Fires AI Researcher Timnit Gebru – Report

• DoJ Sues Facebook Over Immigrant Hiring

• ARSAT Migrates to Check Point Software in Record Time

• 40% of the World’s Mobile Devices are Inherently Vulnerable. Is your Corporate Data at Risk?

• Scammers stole millions last Christmas. These six tips could keep you safe online this time around

• ACLU Sues Government Over Secret Purchasing of GPS Data

• NCSC Warns of Multimillion Pound Christmas Fraud Bonanza

• Ransomware Operators Phone Victims to Announce They’ve Been Hacked

• Metro Vancouver TransLink hit by Egregor ransomware attack, travellers disrupted

• Weekly Update 220

• Clearswift Secure Email and ICAP Gateway now Available on AWS Marketplace

• Cyberattack That Shut Down London’s Hackney Council for Weeks Should Have Other Local Authorities, NHS Providers, and Government…

• Warner Bros 2021 Movies to Debut in Theater and on HBO Max at Same Time

• FTC Warns of Recent Surge in Robocall Scammers Pretending to Be Apple

• Vancouver public transport agency hit by ransomware attack

• Kmart suffers ransomware attack

• Israeli insurance company extorted by BlackShadow hackers

• TrickBot has returned with a TrickBoot

• Supreme Court Reviews CFAA | Avast

• Celebrating Holidays With Older Family Members | Avast

• Aerospace Giant Embraer Downed by Suspected Ransomware

• Hackers Targeting Companies Involved in Covid-19 Vaccine Distribution

• The chronicles of Emotet

• Twitter Ends Threaded Conversations Tests After Negative User Feedback

• Ransomware attack cripples Vancouver public transportation agency

• Hackers-For-Hire Group Develops New ‘PowerPepper’ In-Memory Malware

• How Organizations Can Prevent Users from Using Breached Passwords

• Why Hackers Love the Pandemic

• Egregor ransomware attack paralyzed for 3 days payment systems at Metro Vancouver’s transportation agency TransLink

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• The Evolution and Development of Hacking

• It’s dark out there, and if you want to keep the lights on, you need to update your cyber-security skills with SANS

• Intelligence review recommends new electronic surveillance Act for Australia

• How to take SASE from a buzzword to a plan

• ControlFlag: Machine programming research tool detects bugs in code

• December 2020 Patch Tuesday forecast: Always consider the risk

• Google acquires Actifio for Cloud Security

• US dispatches Cyber Attack Thwarting Warriors to Estonia

• Google Discloses a zero-click Wi-Fi Exploit to Hack iPhone Devices

• A Holistic Approach to Kubernetes Security and Compliance

• Holiday shopping season fraud stats revealed

• Who are the worst password offenders of 2020?

• TikTok saga will ultimately reach a ‘peaceful resolution’: Jefferies analyst

• How to enhance onboarding for digital banking services using risk management

• Fashion Forward: how technology is reshaping the fashion industry

• Stories from the SOC – Multi-layered defense detects Windows Trojan

• Detecting Actors Activity with Threat Intel, (Fri, Dec 4th)

• Consumers would like to view internet connectivity as a trusted utility

• Growth of cloud-native apps and containerization to define 2021

• 2020-12-03 – TA551 (Shathak) Word docs with Italian template send Ursnif (Gozi/ISFB) with Pushdo

• Cybersecurity Trends 2021: Staying secure in uncertain times

• iPhone hack allowed device takeover via Wi‑Fi

• Updated Malware: Vietnamese Hacking Group Targeting MacOS Users

• ISC Stormcast For Friday, December 4th 2020 https://isc.sans.edu/podcastdetail.html?id=7278, (Fri, Dec 4th)

• StoneOS 5.5R8: Helping enterprises defend all their network entry points

• Covid-related phishing is a ‘very serious attack on humanity’: Barracuda Networks

• Solving the Recurring Collection and Time Tradecraft Issues in Online Investigations

• Why is Compliance a Continual Challenge for Organizations?

• Operationalize the NIST Cybersecurity Framework Without Pulling All Your Hair Out (Part 2 of 3)

• (ISC)² adds new cybersecurity courses to its Professional Development Institute portfolio

• Veeam Backup for Microsoft Office 365: Purpose-built backup and recovery for Teams

• Two cybersecurity hygiene actions to improve your digital life in 2021

• What is Third-Party Risk Management?

• Authentic8 expands availability of Silo across Google Cloud’s infrastructure

• Thales launches double-sided ID card reader to simplify the ID verification process

• Exoprise CloudReady now available in the Microsoft Azure Marketplace

• Alkira extends cloud connectivity to any network

• Governor Cuomo: Keep Police and ICE Away from Our Contact Tracing Data

• FCW Insider: Dec. 4

• Edward Snowden asks Trump to pardon Wikileaks founder Julian Assange

• Hackers hide software skimmer in social media sharing icons

• Okta expands deployments for Canadian Western Bank, First National of Nebraska, and Nota

• DXC Technology and Microsoft help companies address rapidly evolving business challenges

• IRONSCALES unveils Teams and Slack alert integrations

• Deloitte and AWS Professional Services drive customer cloud migration and app modernization

• Hackers are launching cyberattacks targeting Covid vaccine supply chain

• Zoom CEO Eric Yuan on the challenges of adapting an enterprise product for consumers

• Potential Nation-State Actor Targets COVID-19 Vaccine Supply Chain

• Mimecast appoints Shahriar Rafimayeri as CIO

• Reed Taussig joins RSA as CEO of the Anti-Fraud Business Unit

• (ISC)² reaches 20,000 certified members and associates in Asia-Pacific

• Section 230 is Good, Actually

Generated on 2020-12-05 23:55:09.763696