IT Security News Daily Summary 2020-12-14

• DHS tests tech to spot rogue wireless devices

• What is a neural network? A computer scientist explains

• Government file sharing: What IT managers should know

• DHS testing portable kit to uncover rogue wireless devices

• CISA: Unplug systems using compromised net monitoring tool

• 5 essential programming languages for cybersecurity pros

• 18,000 Organizations Possibly Compromised in Massive Supply-Chain Cyberattack

• No One Knows How Deep Russia’s Hacking Rampage Goes

• Vulnerability Summary for the Week of December 7, 2020

• Tracing the SolarWinds exploit upstream

• SolarWinds confirmes 18,000 customers may have been impacted

• Apple Updates Final Cut Pro, iMovie, Clips, and Compressor Apps With Streamlined YouTube/Facebook Sharing Function

• Apple Fitness+ Appears to Be Incompatible With AirPlay

• Apple Fitness+ Works on iPhone and iPad Without an Apple Watch

• How to Start Workouts In Apple Fitness+

• Expert Reacted On US Treasury And Commerce Departments Targeted In Cyber-attack

• One Million US Dental Patients Impacted by Data Breach

• Intel’s AI Developer Habana Labs Suffered Pay2Key Ransomware Attack

• WinZip Trial Popup Vulnerability That Allowed For Malware Attacks – Update Now!

• The new Wondershare PDFelement with added features

• Spotify Changes Passwords After Another Data Breach

• Kaspersky: Gamers face high and ongoing risk of identity theft and bullying

• Apple’s App Stores Open New Privacy Window for Customers

• Pornhub Removes All Unverified Content

• EDR. NDR? XDR! … is it more than just marketing?

• Should There Be Limits on Persuasive Technologies?

• How Regulation Is Impacting 5G Security in Europe

• Apple Fitness+ on iPad Not Yet Available

• Life Time Health & Fitness Club Offering Apple Fitness+ as Part of Membership

• Mozilla Urges Users to Support Apple’s Planned Anti-Tracking Changes: ‘A Huge Win for Consumers’

• Three Month Free Fitness+ Trial Not Working for Some Users

• SolarWinds advanced cyberattack: What happened and what to do now

• Ransomware masterminds claim to have nabbed 53GB of data from Intel’s Habana Labs

• Google Outage Affects Offices, Homes Worldwide

• DHS Among Those Hit in Sophisticated Cyberattack by Foreign Adversaries – Report

• Ex-Cisco Employee Convicted for Deleting 16K Webex Accounts

• Apple Patches Code Execution Flaws iOS and iPadOS

• SolarWinds Says 18,000 Customers May Have Used Compromised Product

• Combat Online Predators Act Clears US House

• US Jails Journalists’ Cyber-Stalker

• DEF CON 28 Safe Mode Aerospace Village – Javad Dadgar’s, Reza Dorosti’s, Mohammad Reza Zamiri’s ‘Attacking Flight Management Systems’

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comics – ‘WEEK 307’

• DEF CON 28 Safe Mode Aerospace Village – David Robinson’s ‘General Aviation GA Electronic Flight Bags’

• SUNBURST: Russia Fingered in ‘Perfect 10’ Supply Chain Attack

• Upcoming Speaking Engagements

• How to Set Up Cardio Fitness Levels in watchOS 7.2 and iOS 14.3

• How to Sign Up for Apple Fitness+

• Experts Reaction On 4 Major Browsers Are Getting Hit In Widespread Malware Attacks

• Backdoored SolarWinds software, linked to US govt hacks, in wide use throughout the British public sector

• Tech Resume Library: 22 downloadable templates for IT pros

• MoleRats using Facebook, Dropbox, Google Docs to spread malware

• Apple introduces privacy information for apps across all of its stores

• Microsoft Office 365 Credentials Under Attack By Fax ‘Alert’ Emails

• 2021 Security Budgets: Top Priorities, New Realities

• Apple’s App ‘Privacy Labels’ Are Here—and They’re a Big Step Forward

• Apple Releases iOS 14.3 and iPadOS 14.3 With AirPods Max Support, ProRAW for iPhone 12 Pro, Apple Fitness+ and More

• Apple Releases macOS Big Sur 11.1 With AirPods Max Support and Mac App Store Privacy Labels

• Apple Launches Fitness+, Three-Month Free Trial Now Available for New Apple Watch Owners

• iOS 14.3 Introduces App Privacy Labels in App Store

• watchOS 7.2 and iOS 14.3 Add Cardio Fitness Notifications

• Central Bank Digital Currencies: The Threat From Money Launderers and How to Stop Them

• Quick Thoughts on the Russia Hack

• Legislative Findings Will Be Important to Federal Privacy Legislation

• Massachusetts Legislators Should Stand With Their Communities and Restore Face Recognition Prohibitions to Police Reform Bill

• Apple adds privacy labels showing what information apps collect about users

• SolarWinds’ ‘breached by nation state spies’ software is in wide use throughout the British public sector

• Why Does China Ban VPN? How to Set Up FortiClient VPN for an Uninterrupted Connection

• Cyber Security Certifications For Beginners

• Why Do Hackers Target Online Retailers?

• Tips On How To Record Your Streaming Radio Station

• 7 Important Tips That Will Help Keep Your Digital Data Safe From Hackers

• OPM succession shuffle sparks Schedule F concerns

• SEC filings: SolarWinds says 18,000 customers were impacted by recent hack

• US government agencies compromised by foreign nation-state

• SolarWinds backdoor used in nation-state cyber attacks

• Remote Work is Here to Stay, and Other Cybersecurity Predictions for 2021

• How to build a serial port fuzzer with Defensics SDK

• Deals: Apple Pencil 2 on Sale for $99 at Amazon ($30 Off, Lowest Price)

• Security Expert Re: Critical Glassdoor Vulnerability Impacts Both Job Seekers And Employers

• U.S. agencies targeted in months-long cyber attacks

• A week in security (December 7 – December 13)

• How to Protect and Keep Your Digital Wallets Safe

• WebTrails Browser Extension | Avast

• New Windows Trojan Steals Browser Credentials, Outlook Files

• U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise

• Security Advisory Regarding SolarWinds Supply Chain Compromise

• Visionaries, Builders, and Operators

• Siemens USA CISO: 3 essentials to look for in a cloud provider

• Russia Cozy Bear targets US Federal Agencies similar to Ukraine 2017 Cyber Attack

• Hack at Treasury and Commerce spurs emergency order from CISA

• Norwegian Cruise Company Hurtigruten Hit by Cyberattack

• Sophos, ReversingLabs Release 20 Million Sample Dataset for Malware Research

• Outpost24 Announces Completion of €19m Funding Round

• Google’s Data Security: How Google Protects your Data from Cyber Threats?

• Details for 1.9M members of Chinese Communist Party Members leaked

• Suspected Russian Hackers Spied On U.S. Treasury Emails

• Microsoft, FireEye Confirm SolarWinds Supply Chain Attck

• PgMiner Botnet Attacks Weakly Secured PostgreSQL Databases

• Zodiac Killer Cipher Is Cracked After Eluding Sleuths For 51 Years

• Here’s When You Can Download iOS 14.3 and Start Using Apple Fitness+

• Apple Highlights Popular Apps Optimized for M1 Macs

• Subway Customers Receive ‘Malware’ Emails – Expert Advice

• US Treasury Cyber Attack

• Payment Terminal Vulnerabilities | Password Authentication letting consumers down

• Why is encryption essential for modern day communications?

• 6 Ways to Keep Employer Data Safe When Working Remotely

• 26 Cyberspace Solarium Commission recommendations likely to become law with NDAA passage

• Google services, apps hit by global outage

• Google, YouTube, Gmail service suffered major outage worldwide

• CISA orders agencies to stop using SolarWinds’ Orion

• Proportion of Exploited Vulnerabilities Continues to Drop

• Data Leak Exposes Details of Two Million Chinese Communist Party Members

• Startups Should Do Things That Don’t Scale, but Security Isn’t One of Them

• TalaTek Achieves CMMC AB Registered Practitioner Organization Designation

• Shazam Gains New Look, Notifications for Missed Shazams, and Trending Charts [Update: Shazam Web App Now Available]

• iPhone 13 Pro Models Expected to Adopt LTPO Technology for 120Hz Display

• Apple Fitness+ Launches Today: Worthy Alternative to Peloton for Apple Watch Users

• Four Ways for President Biden to Fix Cyber on January 21

• Spotify Pushes Pw. Reset After Leak – Gurucul, Point3 And YouAttest Perspectives

• Hackers breached U.S. government agencies via compromised SolarWinds Orion software

• Watch out for this $1,200 stimulus check scam

• 26 Cyberspace Solarium Commission recommendation likely to become law with NDAA passage

• Anatomy of a Linux Ransomware Attack>

• Cybersecurity experts hail new IoT law

• SoReL-20M: A Huge Dataset of 20 Million Malware Samples Released Online

• Winding down 2020

• Google Services Including Gmail and YouTube Suffer Global Outage [Update: Fixed]

• Shazam Gains New Look, Notifications for Missed Shazams, and Trending Charts

• SolarWinds Supply Chain Cyberattack – Experts Insight

• Password Reset Vulnerability In WordPress SMTP Plugin Under Attack – Update Now!

• WordPress Easy WP SMTP zero-day Vulnerability Exposes Hundreds of Thousands of Sites to Hack

• Global Espionage Campaign Used Software Supply Chain Hack To Compromise Targets, Including US Gov

• Former Cisco Employee Sentenced to Prison for Webex Hack

• PLEASE_READ_ME Ransomware Campaign Targeting MySQL Servers

• Authentication Failure

• Google Services Suffer Worldwide Outage [Update: Fixed]

• Russian hackers potentially spied on U.S. Treasury emails

• New ‘Drive-By Attack’ Targets Edge, Chrome and Firefox Users

• Subway UK’s marketing system hacked

• Office 365’s SharePoint infected with critical bug

• Treasury and Commerce Departments targeted in cyberattack

• National intelligence expert on Treasury, Commerce hacks: ‘This is big’

• The multicloud challenge: Building the future everywhere

• Government To Require Social Media ‘Impartiality’

• EU To Impose Major Fines In Tech Regulation Overhaul

• FCW Insider: Dec. 14

• Quick Hits

• Google Cloud Hires Goldman Sachs Man as First CISO

• FBI and CISA Warn of Increased Malicious Attacks against K-12 Schools

• Consumption of Public Cloud is Way Ahead of Ability to Secure It

• Adaptive protection against invisible threats

• Report: Apple TV+ Show Based on Gawker Media Got Scrapped After Tim Cook Intervened

• Google Tests Dark Mode for Its Desktop Web Search Page

• Cisco re-patches wormable Jabber RCE flaw

• Anatomy of an Attack: Evasive Zoom phishing campaign using multiple phishing techniques at once

• Building stronger multicloud security: 3 key elements

• Why 2021 will be a big year for deception technology

• Check Point CloudGuard is a launch partner for AWS Outposts to Enhance AWS Hybrid-Cloud Security

• Former Cisco Engineer Gets Two Years for $2.4M WebEx Attack

• Subway UK Customers Targeted By Trickbot Hackers

• Germany Opens Competition Probe Into Facebook And Oculus

• US Telecoms Networks Ordered To Remove Huawei Kit

• California Asks To Join US DOJ Google Lawsuit

• Silicon UK In Focus Podcast: Alan Gibson, VP, EMEA, Alteryx

• EU watchdog warns of using AI in predictive policing, medical diagnoses, and targeted advertising

• Podcast Episode 13 – The Future of Infosec: Teaching a College Cybersecurity Course with Tyler Reguly

• Russian Hackers Steal Data for Months in Global Supply Chain Attacks

• US Agencies and FireEye were hacked with a supply chain attack on SolarWinds Software

• Indian Workers Ransack Wistron iPhone Production Plant Over Unpaid Wages

• SolarWinds admits product updates were subverted by nation state while FireEye warns exploit is rampant

• Ad blocking made Google throw its toys out of the pram – and now even more control is being taken from us

• Robotic Process Automation vendor UiPath discloses data breach

• Zooming in on Zoom

• Trying to register your antivirus in Windows Security Center?

• Assessing the New Normal for Cybersecurity

• Customer Guidance on Recent Nation-State Cyber Attacks

• Security vendor SolarWinds says product updates were subverted by nation-state, FireEye says exploit is rampant

• Depix Tool Retrieves Passwords From Pixelized Images

• Three signs your SOC is ready for XDR

• How to make DevSecOps stick with developers

• Cyber Attack on US Treasury and Commerce Departments

• How Google protects its customer data from Cyber Threats

• Adrozek Malware Silently Hijacks Microsoft Edge, Google Chrome, Yandex, and Firefox Browsers

• Microsoft, FireEye confirm SolarWinds supply chain attack

• In 2020, cybercriminals started laundering four times more money

• Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise
  Multiple Global Victims With SUNBURST Backdoor

• US Agencies and FireEye Were Hacked Using SolarWinds Software Backdoor

• Third-party online assets a growing security risk for retailers

• What’s at stake in the Computer Fraud and Abuse Act (CFAA)

• FireEye confirms SolarWinds supply chain attack

• Cloud Security: Messy Blobs and Leaky Buckets

• 8 Key Insights from the 2020 (ISC)2 Cybersecurity Workforce Study

• Remote and cloud-based systems to be ruthlessly targeted next year

• How COVID-19 has impacted the security threat landscape

• Security vendor SolarWinds says product updates were subverted by nation-state, Fireye says exploit is rampant

• Active Exploitation of SolarWinds Software

• SolarWinds Breach Used to Infiltrate Customer Networks (Solarigate), (Mon, Dec 14th)

• Blaize AI Studio: An open and code-free software platform for faster ROI of AI edge deployments

• Security vendor SolarWinds says product updates were subverted by nation-state

• US Government Confirms Cyberattack

• Special minisode: “20 years of cyberthreats that shaped infosec” [Podcast]

• Datadog and Snyk unveil GitHub integration to automate software development workflow

• IBM Security and AWS help customers reduce security complexity as they move further into the cloud

• Versa Secure SD-WAN integrates with AWS Transit Gateway Connect to deliver automated connections

• Critical CSRF Vulnerability Found In Glassdoor Platform

• Cisco Fixes Vulnerabilities In The Jabber Mobile And Desktop Clients

• Top US Federal Agencies Hacked by Russian Hackers – Report

• US Investigating Computer Hacks of Government Agencies

• AirPods Max Begin Shipping to Customers Ahead of December 15 Launch

• IDEMIA and Kudelski IoT provide identity and access management to drive secure IoT applications

• GUEST ESSAY: Here’s how Secure Access Service Edge — ‘SASE’ — can help, post Covid-19

• Xerox announces Xavier Heiss as chief financial officer

• IT Security News Weekly Summary – Week 50

• IT Security News Daily Summary 2020-12-13

• Pay2Key hackers stole data from Intel’s Habana Labs

• Steam vulnerabilities allowed remote take over of users’ computers

• Third parties: The Risk Management Blind Spot

• The Comforting…

• DEF CON 28 Safe Mode Aerospace Village – Jay Angus’ ‘Checklist For Aviation Vulnerability Disclosure’

• Hacked Subway UK marketing system used in TrickBot phishing campaign

• Outsourcing Disinformation

• 2020: The Year the COVID-19 Crisis Brought a Cyber Pandemic

• Security Affairs Newsletter is back!

• THE BENEFITS OF HCISPP EXTEND BEYOND CERTIFICATION

• #ISC2CONGRESS: RECRUITER: COVID HAD A MINIMAL IMPACT ON THE CYBERSECURITY JOB MARKET

• 2020 (ISC)2 CYBERSECURITY WORKFORCE STUDY: SKILLS GAP NARROWS IN AN UNUSUAL YEAR

• Bitglass, The FedRAMP-Authorized Platform for Total Cloud Security

• Cloud Security that Performs

• Hands-On Video Compares Unreleased Samsung Galaxy S21+ With iPhone 12 Pro

• The Biden Administration Will Have Its Hands Full With Russia

• Ditch Your Data-Hungry Apps for These Privacy-Focused Swaps

• Security Affairs newsletter Round 293

• Facebook Takedown Infrastructure of Hacker Groups Targeting Various Government Entities

• Wireshark 3.4.1 Released, (Sun, Dec 13th)

• KringleCon 2020, (Sun, Dec 13th)

• PgMiner botnet exploits disputed CVE to hack unsecured PostgreSQL DBs

• PgMiner botnet attacks weakly secured PostgreSQL databases

• Week in review: FireEye breach, vulnerable TCP/IP stacks, Kali Linux and the future of pentesting

• Penetration testing

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Here’s a Quick Guide to Safeguarding Credentials

• Apple CFO Luca Maestri and Jony Ive Reportedly Candidates for Ferrari CEO Position

• Securing a K3s Cluster

Generated on 2020-12-14 23:55:10.913670