IT Security News Daily Summary 2020-12-17

• Streamlining AI workflows with the NetApp Data Science Toolkit

• Three Upcoming Security Regulations Automotive Companies Need to Know

• How using tactical literacy makes it harder for cybercriminals to fool end users

• Facebook Again Slams Apple Over Privacy Concerns

• 5 million WordPress sites potentially impacted by a Contact Form 7 flaw

• A Decade After the Arab Spring, Platforms Have Turned Their Backs on Critical Voices in the Middle East and North Africa

• A “quick wins” approach to securing Azure Active Directory and Office 365 and improving your security posture

• Collaborative innovation on display in Microsoft’s insider risk management strategy

• Ethical power supplier People’s Energy hacked, 250,000 customers’ personal info accessed

• CISA: SolarWinds’ Orion may not be only entry point for hackers

• How to quickly encrypt text for Apple Mail

• Microsoft, FireEye create kill switch for SolarWinds backdoor

• Syntax Ends 2020 with New Cybersecurity and Business Analytics Solutions, Expanded Leadership Team and Notable Amazon Web Services Designation

• More on the SolarWinds Breach

• Tim Cook and Craig Federighi Ordered to Testify in Apple vs. Epic Battle

• VideoBytes: Brute force attacks increase due to more open RDP ports

• Malware infected browser extensions stealing Chrome, Edge user data

• GSA preps launch of OASIS replacement

• Navy’s aquatic drone plan faces operational hurdles

• Russia’s Federal Cyber Attack on U.S.? What Are the Feds Doing?

• RubyGems Packages Laced with Bitcoin-Stealing Malware

• Air-Gap Attack Turns Memory Modules into Wi-Fi Radios

• Police Vouch for Hacker Who Guessed Trump’s Twitter Password

• Healthcare.gov Data Thief Jailed

• Disinformation Spreaders Predicted by AI

• CISA: SolarWinds Not the Only Initial Attack Vector in Massive Breach

• XDR 101: What’s the Big Deal About Extended Detection & Response?

• Top 10 Open Source Vulnerabilities In 2020

• Cybersecurity Evolves Beyond Antivirus With Morphisec Guard 5.0

• What Geopolitical Intelligence Means

• OffSec 2020 Recap

• AirPods Max Battery Drains Only Slightly Faster Outside of Case

• Apple Seeds First Beta of macOS Big Sur 11.2 to Public Beta Testers

• Technical Difficulties of Contact Tracing

• A breakthrough year for passwordless technology

• Mitigating Cloud Supply-chain Risk: Office 365 and Azure Exploited in Massive U.S Government Hack

• Google, Qualcomm team up to make long-term Android updates easier on Snapdragon

• FBI says DoppelPaymer Ransomware Gang is Harassing Victims Who Refuse to Pay

• Malicious RubyGem Package Steals Cryptocurrency

• Three Million People Installed 28 Different Malicious Web Extensions

• IRS Impersonated In Yet Another Tax-Related Scam

• 2020-12-15 – Qakbot (Qbot) infection with Cobalt Strike (Beacon)

• The worst bugs in the top programming languages

• Supply Chain Attack: CISA Warns of New Initial Attack Vectors Posing ‘Grave Risk’

• Indian Police Bust Illegal Call Center

• Rising to the Challenge: Perspectives from Security Leaders on 2020 and Beyond

• Advanced Persistent Threat Compromise of Government Agencies, Critical Infrastructure, and Private Sector Organizations

• Shadowserver Partnership Interview | Avast

• Samuel L. Jackson Starring in Apple TV+ Series ‘The Last Days of Ptolemy Grey’

• Apple Seeds First Betas of iOS 14.4 and iPadOS 14.4 to Public Beta Testers

• Parallels 16 for M1 Macs Now Available Through Technical Preview Program

• Understanding Apple’s New App Privacy Information

• Understanding Apple’s App Privacy Information – Intego Mac Podcast Episode 166

• Non-traditional small IT contractors: ‘A well-established niche that is here to stay’

• 3M Users Targeted by Malicious Facebook, Insta Browser Add-Ons

• Cryptologists Crack Zodiac Killer’s 340 Cipher

• 51% of WFH Parents Say Children Have Accessed Work Accounts

• DEF CON 28 Safe Mode Hack The Seas Village – Gary Kessler’s ‘Hacker Challenge Single Point Prediction’

• 3 Million Chrome Users Infected via Extensions—Here We Go Again

• DoppelPaymer ransomware gang now cold-calling victims, FBI warns

• Review: Belkin’s Car Vent Mount PRO Offers Easy MagSafe Mounting

• Google Wins EU Approval For Fitbit Deal

• Ad-blocker AdGuard deploys world’s first DNS-over-QUIC resolver

• Code42 Incydr Series: Bringing Shadow IT into the light with Code42 Incydr

• FBI, CISA, ODNI Describe Response to SolarWinds Attack

• The Why of AI and ML

• 4 Security Strategies to Keep Your Data Safe During the Holidays

• Federal Incentives for Cybersecurity Maturity

• How Suspected Russian Hackers Outed Their Massive Cyberattack

• People’s Energy Data Breach Affects All 270,000 Customers

• Irish Data Regulator Defends Order To Halt Facebook Data Flow

• Evil Mobile Emulator Farms Used To Steal Millions From Banks

• Apple Prototyped Hundreds of AirPods Max Designs, Says Smart Case is Designed for Storage Efficiency

• Deals: Holiday Sales Hit Apple’s iMac, MacBook Pro, and Mac mini (Up to $400 Off)

• Vulnerabilities in the Next Generation of 5G Could Allow Attackers to Steal Credentials and Falsify Subscriber Authentication

• Becoming resilient by understanding cybersecurity risks: Part 2

• Brexit erupts new data privacy fears among Facebook and Google users

• Google Staff Seek Removal Of VP Involved In Timnit Gebru ‘Firing’

• How to protect your organization following the SolarWinds compromise

• Increase In Attack: SocGholish

• Cobalt Finishes 2020 with Record Growth, Poised to Continue Disruption of Multibillion Dollar Pentesting Market

• Kaspersky Security Bulletin 2020. Statistics

• Eve Update Brings its HomeKit App to the Mac

• How Biden Can Take the High Road on Misinformation

• Face Verification And Multi-user SMS 2FA Options Added To SingPass – Expert Reaction

• Developing A Unified Crypto Strategy to Get Ahead Of Tomorrow’s Security Threats

• 3 Powerful Ways To Keep Your Remote Workers Cybersafe And Secure

• Taking An Automated Approach To Defending The Public Sector

• EU’s Digital Services Act And Digital Markets Act – Experts’ Perspectives

• 50% of U.S. tech execs say state-sponsored cyber warfare their biggest threat: CNBC survey

• One In Four UK Homes Can Access Gigabyte Broadband, Ofcom Says

• Phone scammers were able to get 270% more personal information in 2020 than in 2019

• Trend Micro Patches Serious Flaws in Product Used by Companies, Governments

• Little-Known SolarWinds Gets Scrutiny Over Hack, Stock Sales

• FBI Warns of DoppelPaymer Ransomware Targeting Critical Infrastructure

• 5 tools to help improve IoT visibility, device security

• S3 Ep11: DIY phishes, sandwich scams and vaccine hacking [Podcast]

• Two-Thirds of Orgs Expect Increase in #COVID19 Phishing Attacks Next Year

• 19 arrests for smuggling irregular migrants from Morocco to the Spanish Canary Islands

• VPNs, MFA & the Realities of Remote Work

• Talos Tools of the Trade

• Apple Adjusts Trade-In Prices for Apple Watch, iPad, and Mac

• Apple TV+ Shares Trailer for Original Film ‘Palmer’ Starring Justin Timberlake, Debuts January 29

• Third-Party Browser Extensions For Instagram, Facebook Infected With Malware

• Should You Use End-to-End Encryption for Your Email?

• 2020-12-14 – Quick post: Hancitor infection with Cobalt Strike and Ficker Stealer

• This ‘off the shelf’ Tor backdoor malware is now a firm favorite with ransomware operators

• Hybrid Networks Are a Business Reality – and Most Security Can’t Keep Up

• Experts spotted browser malicious extensions for Instagram, Facebook and others

• SolarWinds’ codebase hacked to inject backdoor

• DoppelPaymer ransomware gang is harassing victims who don’t pay

• Egregor and Ryuk ransomware leverages SystemBC backdoor

• Why Are More Industries Switching From SMS 2FA to Push?

• Smart toy security: How to keep your kids safe this Christmas

• A Recipe for Avoiding Software Failures

• Facebook Slams Apple Advertising Changes

• SolarWinds Sunburst Attack: What do you need to know and how can you remain protected

• Agency challenges in wake of SolarWinds hack

• Two Malware-Laced Gems Found in RubyGems Repository

• When zombie malware leads to big-money ransomware attacks

• Ransomware and Cyber-Extortion Payments Double in 2020

• FireEye Hack Turns into a Global Supply Chain Attack

• Which Third-Party Pods Do You Need in Your K8s Cluster?

• Facebook Temporarily Disables Some Messenger and Instagram Features in Europe to Comply With EU Data Rules

• Why Cyber Security Should Be at the Top of Your Christmas List

• Phobos Ransomware: Everything You Need to Know and More

• Whistleblowers have come to us alleging spy agency wrongdoing, says UK auditor IPCO

• CISO playbook: 3 steps to breaking in a new boss

• Google Sued By 10 US States For Alleged Facebook Collusion

• Adrozek Adware Dangers | Avast

• IBM launches experimental homomorphic data encryption environment for the enterprise

• EU Unveils Revamp of Cybersecurity Rules Days After Hack

• Killswitch Found for Malware Used in SolarWinds Hack

• Experts Urge Users to Ignore Facebook Christmas Bonus Scam

• Dutch Hacker Who Allegedly Broke into Trump’s Twitter Account Walks Free

• Malicious Browser Extensions | Avast

• Microsoft Edge Browser Now Available With Native Support for M1 Macs

• Business are tracking customers and not telling them

• How cyber-attackers are coming after you in 2021

• GLBA explained: What the Graham-Leach-Bailey Act means for privacy and IT security

• Fully Homomorphic Encryption: Unlocking the Value of Sensitive Data While Preserving Privacy

• FCW Insider: Dec. 17

• Quick Hits

• Malicious Chrome and Edge Extensions Affect Millions of Users

• Software Supply-Chain Attack Hits Vietnam Government Certification Authority

• How to Use Password Length to Set Best Password Expiration Policy

• Launched OSSISNa, the Observatory for the Protection of the National Strategic Industrial System

• WhatsApp Testing Voice and Video Call Features for Mac Desktop Client

• United States Federal Government’s Shift to Identity-Centric Security

• Was Google hacked?

• Facebook Criticizes Apple Privacy Policy in Newspaper Ads

• Analysis of 5G Network Security Reveals Attack Possibilities

• BEC Hits Double Digits as COVID-19 Scams Abound

• Spain dismantles top Russian-speaking organised crime network that had infiltrated public institutions

• How secure are smart contracts?

• Digging the recently leaked Chinese Communist Party database

• Facebook Runs Second Full-Page Ad Criticizing Apple, Says Opt-In Tracking Will Make the Internet Worse

• Twitter Kills Quote Tweet Prompt, Returns Retweet Action to Original Behavior

• UK Home Office chucks US firm Leidos £30m for help snooping on comms data

• How to Ensure Mobile App Security: Key Risks & Top Practises

• Passwords begone: GitHub will ban them next year for authenticating Git operations

• Want to add antivirus to your existing portfolio?

• Phobos launches Orbital, a tool for finding attack pathways and entry points into your network

• Visual Notes : SolarWinds Supply Chain compromise using SUNBURST backdoor (detected by FireEye)

• Enterprises Increase Security Spending but not Efficacy

• Identity Verification: Protecting Customer Data Across Borders

• Dutch officials say Donald Trump really did protect his Twitter account with MAGA2020! password

• Stress levels are rising, but that doesn’t have to mean more security incidents

• Apple launches Privacy Labels for increased Mobile Security

• China steals data from Google Servers

• Cybersecurity Advent calendar: Stay close to one another… Safely!

• Upcoming HomePod 14.4 Software Update to Add New HomePod Mini U1 Features

• Migration delays prevent AD-centric zero trust security framework adoption

• How employees view and manage company security

• API Security Weekly: Issue #114

• Vulnerabilities in Standalone 5G Networks Expose Users to Attacks

• 5 Key Security Challenges Facing Critical National Infrastructure (CNI)

• A new approach to scanning social media helps combat misinformation

• Cost savings and security are key drivers of MSP adoption

• Data Visibility and Management When Selecting or Working with an MSSP

• Facebook Shuts Down Fake Accounts Associated With Russia and French Military

• ISC Stormcast For Thursday, December 17th 2020 https://isc.sans.edu/podcastdetail.html?id=7296, (Thu, Dec 17th)

• CodeZero ZERO BrandCard: Enabling a secure and contactless digital identity exchange

• Proposed OPM rule would elevate the role of performance in layoff decisions

• Three million users installed 28 malicious Chrome or Edge extensions

• CloudKnox extends support for serverless functions on AWS, Azure, and Google Cloud

• WekaIO and Rancher Labs team up to help enterprises run containers and Kubernetes in production

• NETSCOUT extends its Smart Perimeter Protection to AWS

• Okera launches adaptive security plane with nScale elasticity

• Russian Hackers Breached US govt, FireEye in a Supply Chain Attack

• The Growing Importance of Endpoint Security

• Russia’s Hacking Frenzy Is a Reckoning

• DNS Logs in Public Clouds, (Wed, Dec 16th)

• Open Group and University of York join €4.5M EU TYPHON project to address hybrid big data challenges

• Twitter chooses AWS to provide global cloud infrastructure

• Semtech integrates LoRaWAN protocol on the Network Server with AWS IoT Core

• Asigra announces Cloud Backup with Deep MFA integration with Microsoft Office 365

• Russia’s Hacking Frenzy Is a Reckoning

• Focus of OT and IoT Cybersecurity in Australia’s Critical Infrastructure

• Solarwinds Vulnerabilty: Address the Basics First

• Welcome to the new JumpCloud brand!

• FireEye, GoDaddy, and Microsoft created a kill switch for SolarWinds backdoor

• Apple Responds to Facebook’s Anti-Tracking Criticism, Says Users Deserve Control and Transparency

• NS1 appoints David Coffey as chief product officer

• LogicGate secures $8.75M in growth capital to fuel international expansion and new product offerings

• Cloudhouse acquires UpGuard Core to provide instant visibility of an entire IT infrastructure

• Tufin SecureCloud now supports the Google Cloud Platform

• Top 9 Web Security Tools to Secure Your App/System

• Update on Widespread Supply-Chain Compromise

• SolarWinds’ shares drop 22 per cent. But what’s this? $286m in stock sales just before hack announced?

• Apple Maps Look Around Feature Expands to Denver, Detroit, Miami and More

• EfficientIP expands leadership team with two new senior appointments

• CUBE appoints Pedro Pereiro and Steve Pool to the executive leadership team

• Jim Pflaging joins Cloudentity board of directors

• The FireEye Breach and the SolarWinds Supply Chain Compromise Campaign

• Secure telework capabilities top DISA’s 2021 plans

• Rethinking computing for next-level problems

• Congress moves to bring back domestic electronics manufacturing

• Navy to drive out duplicative IT systems

• 2021 defense bill takes on new pilot for consumption-based solutions

• After Solar Winds, it’s time for a National Software Security Act

• GAO calls out agencies for IT supply chain risks

• DOD announces first CMMC pilot contract nominees

• Most businesses are tracking customers yet don’t tell them

• FBI says DoppelPaymer ransomware gang is harassing victims who refuse to pay

• How Apple’s new App Store privacy requirements may affect users and app developers

• Report: Facebook Is Developing Technology To Read Your Thoughts

• New IRS Form Fraud Campaign Targets G Suite Users

• Attackers Leverage IMAP to Infiltrate Email Accounts

• FireEye Identifies Killswitch for SolarWinds Malware as Victims Scramble to Respond

• Apple in Talks to Pick Up Two Animated Films Produced by John Lasseter

• Apple Seeds First Beta of macOS Big Sur 11.2 to Developers

• Doxxing: Tips To Protect Yourself Online & How to Minimize Harm

• SolarWinds hack has shaved 23% from software company’s stock this week

• IT Security News Daily Summary 2020-12-16

• Navigating continuous change with AI

• 6 remote workforce cybersecurity strategies for 2021

• SolarWinds struggles with response to supply chain attack

• US-CERT Reports 17,447 Vulnerabilities Recorded in 2020

• HPE discloses critical zero-day in Systems Insight Manager

• Did Al-Shabaab Attempt a 9/11-Style Aircraft Attack Targeting the United States?

• SUNBURST Malware and SolarWinds Supply Chain Compromise

• The Cyber Pandemic is Here – Protect Your Organization

• Microsoft will build Inventec’s private 5G networks for smart manufacturing

• AT&T Survey Surfaces Lots of 5G Security Confusion

• Likely lead generation scam targets potential Malwarebytes MSP partners

• Global Cybercrime Costs Reached $1 Trillion In 2020 – Yet Organizations Are Unprepared

• German Government Backs Bill Requiring 5G Security Pledge

• Sextortionists Deploy New Spyware

• Senior Managers Twice as Likely to Share Work Devices With Outsiders

• Corporate Credentials for Sale on the Dark Web: How to Protect Employees and Data

• DEF CON 28 Safe Mode Hack The Seas Village – Gary Kessler’s ‘Build A Raspberry AIS’

• PyMICROPSIA Windows malware steals browsing data, record audio

• Anatomy of a Linux Ransomware Attack>

• Lawmakers seek details on damage done by the SolarWinds hack

• Ryuk, Egregor Ransomware Attacks Leverage SystemBC Backdoor

• Cyberattack on Independence Systems Causes Bill-Paying Delay

• Trump Twitter Account Hacked, No Charges: Dutch Prosecutors

• Data Protection Firm BigID Raises $70 Million at $1 Billion Valuation

• SolarWinds breach highlights dangers of supply chain attacks

• Malicious Domain in SolarWinds Hack Turned into ‘Killswitch’

• Why the Weakest Links Matter

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• Apple Seeds First Beta of tvOS 14.4 to Developers

• Apple Seeds First Beta of watchOS 7.3 to Developers

• Apple Seeds First Betas of iOS 14.4 and iPadOS 14.4 to Developers

• iOS 14 Now Installed on 81% of iPhones From the Last Four Years

• One Identity Research Highlights Barriers to Adoption of Zero Trust Framework

• Log right in, the water’s fine, whispers Microsoft as it adds autofill to Authenticator app

• Defending against the threats within

• Microsoft to Block Infected SolarWinds Binaries Today

• New Android and IOS Spyware Targeting Asia-Residing Users

• BrandPost: Bringing Security and Networking Together for Unified, Edge-to-Edge Protection

• Big Tech Firms Face EU Fines Of 10 Percent Of Turnover

• Check Point CloudGuard is a launch partner for AWS Outposts to Enhance AWS Hybrid-Cloud Security

• The SolarWinds Perfect Storm: Default Password, Access Sales and More

• New Evidence Suggests SolarWinds’ Codebase Was Hacked to Inject Backdoor

• Security Stories review of the year, with Fareedah Shaheed and Ben Munroe

• Russian Hack of U.S. Federal Agencies Shine Spotlight on SIEM Failures in Cybersecurity

• BigID Announces $70 Million in New Investment, Raising the Company’s Valuation to $1B

• The top 5 known vulnerabilities that are a threat to your security posture

• Vaccine Passports: A Stamp of Inequity

• Anatomy of an Attack: Evasive Zoom phishing campaign using multiple phishing techniques at once

• Ransomware payments can make OFAC issue sanctions on companies

• 3 Ways in Which AI Strengthens Cybersecurity Defense

• Leadership matters: Driving inclusion at NetApp

• Facebook Sued By Australia For Onavo Protect Data Gathering

• Robots for kids: STEM kits and more tech gifts for hackers of all ages

• Survey says: Almost half of Americans claim they own cryptocurrency

• Singapore law firm offers ‘integrated’ cybersecurity, legal assistance

• Partial Gmail outage resolved: Users reported a variety of problems Tuesday

• Sextortionist Campaign Targets iOS, Android Users with New Spyware

• Social engineering: How psychology and employees can be part of the solution

• iOS Spyware Emerges in Longstanding Extortion Campaign

• Cybersecurity employee training: How to build a solid plan

• Cloudhouse Acquires UpGuard Core to Help Customers Resolve Compliance Issues

• Lithuania Suffers “Most Complex” Cyber-attack in Years

• Refinitiv Acquires GIACT

• Leaky Databases Expose over 45 Million Medical Images and Patient Data

• SSO and MFA Are Only Half Your Identity Governance Strategy

• Why Secure Email Gateways Rewrite Links (and Why They Shouldn’t)

• Patching Still Poses Problems for Industrial Controllers, Networking Devices

• Lookout Discovers New Spyware Used to Blackmail iOS and Android Users

• EU Digital Services and Digital Markets Acts aim at setting new rules for tech giants

• How to Apply Elite Intelligence to Microsoft Azure Sentinel

• Zooming in on Zoom

• Deals: End-of-the-Year Sales Hit Apple’s iPad Pro and iPad Air With Up to $150 Off

• Apple TV App Coming to ‘Chromecast With Google TV’ Early Next Year and More Android TV Devices in Future

• Google Stadia Cloud Gaming Platform Now Available on iPhone and iPad Through Safari

• Major U.S. Publishers Join Coalition for App Fairness

• Facebook Says Apple’s Upcoming Anti-Tracking Prompt is ‘More About Profit Than Privacy’ and Backs Epic Games vs. Apple

• Debunking a New Chinese Talking Point Against U.S. Policy in the South China Sea

• Irish Twitter fine Is Seasonal Reminder That Hackers Don’t Take A Break

• What Is a Crypto Virus and How Does It Work?

• Terranova Security Gone Phishing Tournament reveals continued weak spot in cybersecurity

• Customer Guidance on Recent Nation-State Cyber Attacks

• Amazon Urges Rethink On JEDI Contract Award

• The SolarWinds and US government breach is not a marketing opportunity

• SolarWinds Removes Customer List From Site as It Releases Second Hotfix

• Cybercriminals Steal Millions by Spoofing Thousands of Mobile Devices

• Revisited After a Decade: The Optimist’s Cybercrime Predictions for 2011

• Australia Watchdog Sues Facebook Over ‘Misleading’ VPN App

• Society at Increasingly High Risk of Cyber-Attacks

• Twitter Fined €450,000 Under GDPR Over ‘Protected’ Settings Bug

• Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise
  Multiple Global Victims With SUNBURST Backdoor

• New 5G Network Flaws Let Attackers Track Users’ Locations and Steal Data

• Ransomware Attackers Using SystemBC Malware With RAT and Tor Proxy

• JumpCloud Introduces Conditional Access Policies to its Directory Platform Making it Easier for Businesses to Adopt a Zero Trust Security Model

• Review: Boss Audio’s New Head Units Deliver Wireless CarPlay for Just $400

• Apple Says Employee Giving Program Has Raised Nearly $600 Million Since 2011

• Experts Reacted On China suspected of Spying on Americans via Caribbean Phone Networks

• Security Expert Re: US-CERT Notes Record Number Of Vulnerabilities For 4th Year In A Row

• SolarWinds Orion Breach — BitSight Analysis Part 1

• Perfect strangers: How CIOs and CISOs can get along

• Windows 10X – Microsoft’s newest OS on track for Spring 2020 release

• E-Commerce Skimming is the New POS Malware

• Join 1/2 Day Workshop : How To Perform Penetration Testing On Industrial Control Systems And Operational Technology Safely

• Apple now shows you all the ways iOS apps track you

• FICO launches cryptocurrency trade risk solution for banks

• What is Geocoding? — How to Find Coordinates of An Address

• Sextortion campaign uses Goontact spyware to target Android and iOS users

• Zodiac Killer Cipher Solved

• Facebook Takes Out Full-Page Newspaper Ads to Attack Apple’s iOS Privacy Changes

• Organisations May Fail to Prepare Employees for Cybersecurity Threats

• SolarWinds hackers’ capabilities include bypassing MFA

• What Does Risk-Based Cybersecurity Reporting Look Like?

• Workforce Study: Reviewing Cybersecurity’s Pandemic Response

• Can you trust the Google Play Store?

• Facebook To Move UK Users To US Data Agreements

• Detecting Fraud – Every Step of the Way

• Hack May Have Exposed Deep US Secrets; Damage Yet Unknown

• Ginp Banking Trojan Exploits Covid-19 Fears

• Moving to a SaaS Model – A Customer Service Perspective

• How to Assign Primary Users to Individual HomePods in the Same Household

• Comment: China Suspected Of Spying On Americans Via Caribbean Phone Networks

• Goontact spyware targets Android and iOS users

• Gmail suffers two outages in one day

• UK proposes new powers for comms regulator to legally unleash avenging hordes on security-breached telcos

• RAM-Generated Wi-Fi Signals Allow Data Exfiltration From Air-Gapped Systems

• NCSC Names Academic Centers of Excellence in Cybersecurity Education

• Microsoft Set to Block SolarWinds Orion Binaries

• Third-Gen AirPods With AirPods Pro Design to Cost $200 and Launch in First Half of 2021

• Expert Reacted On Apple Launches Privacy Labels On Apps

• Lookout Exposes New Spyware Used By Sextortionists To Blackmail iOS And Android Users

• SolarWinds Breached To Infect Multiple US Companies/Gov Networks – Expert Comment

• Face verification and multi-user SMS added to SingPass’s 2FA

• Do you know the Impact of COVID-19 on the Security Threat Landscape?

• Privacy, data protection regulations clamp down on biometrics use

• 14 tips to prevent business email compromise

• California Asks Court To Force Amazon To Comply With Coronavirus Probe

• Identifying E-Card Scams | Avast

• Global Policies Announcement | Avast

• Breach Trends and Insights-Report December 2020

• FCW Insider: Dec. 16

• New Account Fraud Surges 28% in the UK as Global Rates Drop

• NCSC Names Academic Centres of Excellence in Cybersecurity Education

• SolarWinds’ dominance became a liability in sprawling spy campaign

• Apple Patches Tens of Code Execution Vulnerabilities in macOS

• EU, Britain to Toughen Rules, Fines for Tech Giants

• Total Published CVEs Hits Record High for Fourth Year

• Police detained hackers who stole more than 20 million rubles

• Microsoft partnered with security firms to sinkhole the C2 used in SolarWinds hack

• AirPods Max Now Available for Same-Day Pickup at Apple Stores in Some European Countries Including France, Italy, Spain, and UK

• Your ship comms app is ‘secured’ with a Flash interface, doesn’t sanitise SQL inputs and leaks user data, you say?

• Singapore adds face verification, multi-user SMS to SingPass 2FA

• XDR Has Promise – and a Fair Share of Risks

• Looking for adding new detection technologies in your security products?

• Chinese chipmaker SMIC falls 5% as co-CEO plans to resign and it faces removal from MSCI indexes

• How to leak data via Wi-Fi when there’s no Wi-Fi chip: Boffin turns memory bus into covert data transmitter

• SolarWinds Issues Second Hotfix for Orion Platform Supply Chain Attack

• Security automation: Time for a new playbook

• New Goontact spyware discovered targeting Android and iOS users

• 45 million medical images left exposed online

• Accelerated cloud migration may leave business data insecure

• Massive mobile banking cyber fraud discovered by IBM

• Twitter faces £410,000 penalty from Ireland

• SolarWinds said no other products were compromised in recent hack

• From a Single Pane of Glass, to Functional Dashboards to Manage Cyber Risk

• Researchers develop tool that automates device programming in the IoT

• 35% of organizations believe the NIS Directive expectations are unclear

• CipherCloud Chronicles 8: CipherCloud DRM (Handing The Right Keys To The Right Person)

• Medical scans of millions of patients exposed online

• Trend Micro Cloud One – File Storage Security: Designed to mitigate threats across the cloud

• ISC Stormcast For Wednesday, December 16th 2020 https://isc.sans.edu/podcastdetail.html?id=7294, (Wed, Dec 16th)

• 42Crunch unveils new IDE OpenAPI editing plugins for Eclipse, IntelliJ, PyCharm

• DigiCert now enables manufacturers to embed certificates on chips prior to manufacturing

• Facebook dragged to court by ACCC over deceptive VPN conduct allegations

• Microsoft to quarantine SolarWinds apps linked to recent hack starting tomorrow

• Facebook Closes Disinformation Accounts Linked to French Military

• Tufin Adds Support for Google Cloud

• Mindtree launches Microsoft go-to-market business unit, accelerates cloud business

• ISACA Blockchain Framework and Guidance: Helping enterprises adopt the emerging tech

• WatchGuard’s Firebox M series appliances provide simplified, extensive and flexible security

• How to prepare for quantum computing cybersecurity threats

• PyMICROPSIA Windows malware includes checks for Linux and macOS

• Bastille awarded a Phase 5 OTA from DHS

• Arrow Electronics Security Starter Kit helps IoT device companies build and deliver secure connected devices

• ADVA unveils set of edge and access network synchronization devices for next-gen apps

• The EU’s Digital Markets Act: There Is A Lot To Like, but Room for Improvement

• ContainerDrip, Another Example of Why HTTP Basic Authentication Is Flawed

• Telework gets Air Force IT seal of approval

• New bill would shed light on “midnight regulations”

• Gmail down again? Users are reporting a variety of problems

• We’re not saying this is how SolarWinds was backdoored, but its FTP password ‘leaked on GitHub in plaintext’

• Twitter Fined in Irish GDPR Action

• Concerns Run High as More Details of SolarWinds Hack Emerge

• Hands-On With the AirPods Max

• Entrust nShield HSMs delivers enhanced security to the Mirantis Kubernetes Engine

Generated on 2020-12-17 23:55:12.824643