IT Security News Daily Summary 2020-12-19

• Facebook bug exposed email addresses of Instagram users

• Trump Downplays Russia in First Comments on Cyberattack

• DEF CON 28 Safe Mode Hack The Seas Village – Nina Kollars’ ‘40,000 Leagues UUV Death Match’

• CISA Updates Alert and Releases Supplemental Guidance on Emergency Directive for SolarWinds Orion Compromise

• DEF CON 28 Safe Mode Hack The Seas Village – Stephen Gerling’s ‘Yacht Pwned’

• XKCD ‘2020 Election Map’

• Secure Communication using TLS in Elasticsearch, (Sat, Dec 19th)

• Trump contradicts Pompeo, plays down alleged Russian role in cyberattack

• Home Working Presents A New Type Of Challenge For The IT Team

• Fake Cyberpunk 2077 Android App Delivering Ransomware

• Deals: Get the AirPods for $109.99 ($50 Off) and AirPods Pro for $189.99 ($60 Off) in Latest Sales

• Experts On Android And iOS Users Blackmailed by ‘Goontact’ Spyware

• CoderWare Ransomware Masks Itself As Cyberpunk 2077 Mobile Game App

• Apple: Here’s how to secure an iPhone or Apple ID ‘when personal safety is at risk’

• Russia’s SolarWinds Hack Is a Historic Mess

• NATO Checking Systems After US Cyberattack

• What is “Sunburst”? A look into the Most Serious Cyberattack in American History

• Russia’s SolarWinds Hack Is the Big One

• Banking Industry Faces Surge in Cyber Security Challenges

• Top Stories: Hands-On With AirPods Max, Apple Fitness+ Debuts, iPhone 13 and Apple TV Rumors

• Is Venmo Safe? All of Your Questions Answered

• Using Machine Learning for Static Analysis

• Facebook Is Forcing UK Users To Abide By Worse Privacy Rules

• NSA warns of cloud attacks on authentication mechanisms

• How to Understand the Russia Hack Fallout

• UK Finance Body: Beware of Parcel Delivery Scam, Especially During Christmas Season

• Active Cypher: “great deal of orchestration of our intelligence in AI into existing systems”

• FBI and Interpol shut down some servers of Joker’s Stash carding marketplace

• Apple and Other Browser Makers Ban Kazakhstan HTTPS Certificate Used to Surveil Citizens

• Firefox to ship ‘network partitioning’ as a new anti-tracking defense

• ‘Build’ or ‘Buy’ your own antivirus product

• Week in security with Tony Anscombe

• The European Commission added VKontakte and Telegram to the list of pirate sites

• What’s Next for the Western Sahara Conflict?

• Cloudflare CEO discusses the company’s ‘zero-trust’ approach to cybersecurity

• Cloud-security firm Cloudflare CEO reacts to suspected Russian breach of U.S. government networks

• Scope of massive, months-long cyberattack is unknown and still no word from Trump

• The many ways you can be scammed on Facebook, part II

• Threat Roundup for December 11 to December 18

• Friday Squid Blogging: Christmas Squid Memories

• Cortex XDR Named a Strategic Leader in AV-Comparatives EPR Evaluation

• Comparison: AirPods Max vs Sony XM4, Sennheiser Momentum and Bose NC 700

• Lessons learned building supervised machine learning into DDoS Protection

• Cloudflare CEO says ‘zero-trust architecture’ is an answer to U.S. government breach

• BITSIGHT ANALYSIS OF SOLARWINDS ORION — PART 2: DECLINING PREVALENCE

• ONTAP System Manager 9.8 offers a new experience

• A Brief OSINT Analysis of Charming Kitten IoCs

• What Does the SolarWinds Orion Attack Say about the State of Cybersecurity?

• Apple Closing Los Angeles Stores as Virus Cases Rise in Southern California

• Expert Reacted On Manchester To Explore Biometrics For Transport, Education And Health Services

• The Brain Of Security

• U.S. continues investigating the depth of suspected Russian hack

• Scope of suspected Russian hack grows as more organizations reveal breaches

• Analyzing Solorigate, the compromised DLL file that started a sophisticated cyberattack, and how Microsoft Defender helps protect customers

• IT Security News Daily Summary 2020-12-18

• Securely managing the IT workload: In-house or outsource?

• T-Mobile: Massive BYOD growth raises huge enterprise security risks

• Apple, Google, Microsoft, and Mozilla ban Kazakhstan’s MitM HTTPS certificate

• VERT Alert: SolarWinds Supply Chain Attack

• Cloud is King: 9 Software Security Trends to Watch in 2021

• COVID-19 has not slowed global zero trust implementations

• DEF CON 28 Safe Mode Hack The Seas Village – Gary Kessler’s Build An AIS Receiver With A Raspberry Pi’

• Contrast Labs: Apache Struts CVE-2020-17530

• Hackers target COVID-19 vaccine supply chain and sell the vaccine in Darkweb

• Experts Insight On People’s Energy Data Breach

• Switzerland Charges Credit Suisse In Money Laundering Case – Comments From Specialist Financial Crime Lawyer

• Facebook’s Laughable Campaign Against Apple Is Really Against Users and Small Businesses

• Lawmakers press Trump to sign NDAA in the wake of massive hack

• Microsoft Confirms Its Network Was Breached With Tainted SolarWinds Updates

• FBI Warns of DoppelPaymer Attacks on Critical Infrastructure

• Instagram Supports Uploading ProRAW Photos Taken With iPhone 12 Pro

• Victory! Federal Appeals Court Confirms FOIA Requests Requiring a Database Query are Allowed Under the Law

• Research: Stealing data from air-gapped PC by turning RAM into Wi-Fi Card

• Authentication Bypass Vulnerability Patched in Bouncy Castle Library

• MacRumors Giveaway: Win an Apple-Themed Pillow From Throwboy

• Apple’s A14 Outperforms New Snapdragon 888 Chip Coming in Future Android Phones

• The Strategic Implications of SolarWinds

• Why the Flynn Pardon Matters

• The nation has to act as one team, there is too much secrecy and privacy around these hacks: Intel expert

• WordPress Plugin Installed 5 Million Times Has Critical Upload Vulnerability

• Iranian Nation-state actors linked to Pay2Key Ransomware

• NSA warns of Federated Login Abuse in Advisory

• BrandPost: 5 reasons the security of your endpoints could be at risk

• BrandPost: Securely managing the IT workload: In-house or outsource?

• BrandPost: Securely empowering today’s anytime-anywhere workforce

• Chinese drone developer DJI added to Commerce Department ‘Entity List’

• Sunburst’s C2 Secrets Reveal Second-Stage SolarWinds Victims

• Beware of cybercriminals: Keep your guard up during the last-minute shopping frenzy

• SolarWinds-related cyberattacks pose grave risk to government and private sector, says CISA

• Good and bad news for cybersecurity in 2021

• Predicting 2021 in cybersecurity: DDoS attacks, 5G speed, AI security, and more

• US Blacklists Chinese Companies Including Chip Giant SMIC

• Industrial Control Systems Ripe Targets for Ransomware

• SolarWinds Likely Hacked at Least One Year Before Breach Discovery

• VMware Flaw a Vector in SolarWinds Breach?

• JIBC Launches Cybercrime Analysis Certification

• New ISAC for K–12 Schools Names National Director

• Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise
  Multiple Global Victims With SUNBURST Backdoor

• How X.509 Certificates Were Involved in SolarWinds Attack | Keyfactor

• Why 2020 will be a bumper Christmas for cybercriminals – and what retailers can do about it

• What Does Risk-Based Cybersecurity Reporting Look Like?

• SolarWinds Orion Breach — BitSight Analysis Part 1

• The Services You Need To Hire To Build A Quality E-Commerce Website

• Improving Workplace Security in 7 Easy Steps

• Building an App: 6 Things to Consider

• Weighing the Pros and Cons of Static Application Security Testing

• Goontact Spyware Targets Smartphone Users Via Fake Messaging Apps

• Linux containers can minimize cross-domain security headaches

• GAO tracks diversity in the intelligence community

• FBI & Interpol disrupt Joker’s Stash, the internet’s largest carding marketplace

• Practice vs Process Maturity: Strengthening Your Cyber Compliance & Risk Program

• NSA Warns Of Federated Login Abuse For Local-To-Cloud Attacks

• Five Russian Hacks That Transformed US Cybersecurity

• Add Microsoft To The List Of SolarWinds Victims

• GitHub Plans To Eradicate Password Usage Next Year

• Review: Activity Awards Bring Your Apple Watch Fitness Achievements to Life

• Apple Shares Manual on How to Lock Down Devices When Personal Safety is at Risk

• iPhone 12 Demand Helps Boost Qualcomm’s 5G Modem Revenue, But Apple Working on Own ‘High-End’ Modem

• Steve Wozniak Schematics for Prototype Apple II Computer Sell for $630k at Auction, Apple-1 goes for $737k

• Palo Alto Networks CEO: All companies must ensure they weren’t hit in suspected Russian cyberattack

• Why Microsoft is Morgan Stanley’s top software pick for 2021

• Google Hit With Third Antitrust Lawsuit

• How to lock down your Microsoft Account and keep it safe from outside attackers

• Best VPN services for 2021: Safe and fast don’t come for free

• Cyberpunk 2077 Headaches Grow: New Spyware Found in Fake Android Download

• Microsoft Caught Up in SolarWinds Spy Effort, Joining Federal Agencies

• Cybersecurity can use some help from AI and ML

• AI, ML can bolster cybersecurity, and vice versa, professor says

• 5 Key Takeaways From the SolarWinds Breach

• NSA on Authentication Hacks (Related to SolarWinds Breach)

• Deals: Get the M1 13-Inch MacBook Pro for $1,199.99 on Amazon ($99 Off)

• Barclays: iPad With OLED Display Unlikely to Launch Until 2022 at Earliest

• Cyber Events that Rocked 2020

• Channel updates: One Identity extends channel momentum as demand for identity-centric security accelerates

• Bracing for the shopping surge: retailers ramp up security measures for 2020 holiday season

• Former NSA executive on suspected Russian cyberattack on U.S. agencies

• Here’s what it will take to determine what suspected Russians hacked from U.S. agencies

• Why the SolarWinds cyberattack isn’t over

• CipherCloud Chronicles 8: CipherCloud DRM (Handing The Right Keys To The Right Person)

• Mitigating Cloud Supply-chain Risk: Office 365 and Azure Exploited in Massive U.S. Government Hack

• Ransomware payments doubled in 2020

• BrandPost: Protecting Online Holiday Shopping this Season

• ‘The Croods: A New Age’ same family, even bigger data demands

• Russian hackers targeted 40 agencies including US Nuclear Agency

• Insider Threats: What Are They, Really?

• 5G standalone networks may have more vulnerabilities than you think

• Mad About Malware: Hot Spots and Trends in 2020

• Alibaba Facial Recognition Tech Picks Out Uyghur Minorities

• 2021 Cybersecurity Predictions: The Intergalactic Battle Begins

• 5 Key Takeaways from the SolarWinds Breach

• Bugcrowd Report Shows Marked Increase in Crowdsourced Security

• SCAP Security Guide: helping you to achieve security policy compliance

• iPhone 13 Lineup May Support Game-Changing Wi-Fi 6E, Larger iPhone SE Unlikely in Early 2021

• Suspected Russian cyber attack looks like a ‘dream’ attack for hackers, says Palo Alto CEO

• Full interview with Palo Alto Networks CEO Nikesh Arora on massive cyber attack

• Unsecured Azure blob exposed 500,000+ highly confidential docs from UK firm’s CRM customers

• UK Energy Startup ‘People’s Energy’ Discloses Data Breach

• Spotify Hit by Yet Another Data Leak

• Remedying Shell Shock Part 2: The Power of PowerShell

• The SolarWinds Breach Is a Failure of U.S. Cyber Strategy

• How to Not Fall for a Charity Scam This Holiday Season

• Microsoft: 2020 was the year we almost said goodbye to passwords

• NSA warns of federated login abuse for local-to-cloud attacks

• Ransomware Gangs Use ‘SystemBC’ Tor Backdoor in Attacks

• How to address the skills gap of security and IT personnel

• Will the US Move to a Federal Privacy Law in 2021?

• Ransomware attackers are making threatening phone calls to their victims, warns FBI

• SonarSource now provides high-precision SAST tooling for developers, enabling them to own Code Security

• Absolute Zero

• Microsoft Finds Malicious Code In Its Systems After SolarWinds Compromise

• Ethical Hacking – Where And How Does It Fail?

• How Polypoly wants to reinvent the data economy

• Continuous Updates: Everything You Need to Know About the SolarWinds Attack

• Microsoft, Energy Department and Others Named as Victims of SolarWinds Attack

• Cyber News Rundown: Trickbot Spreads Via Subway Emails

• All-source intelligence: reshaping an old tool for future challenges

• Sunburst: connecting the dots in the DNS requests

• Apple Stops Offering Standalone Update Packages in macOS Big Sur

• Massive Fraud Operation Facilitated By Evil Mobile Emulator Steals Millions From Banks

• Fake Cyberpunk 2077 game installs malware

• US nuclear agency hit by cyberattack

• This Year in Ransomware Payouts (2020 Edition)

• Suspected Russian hack is much worse than first feared: Here’s what you need to know

• How Social Media Is Contributing to The Popularity of Bitcoin

• Investors Are Choosing Bitcoin Over Gold as The Better Hedge Against Inflation

• Top 5 online maps to track cyberattacks worldwide

• How To Choose A Laptop For Ethical Hacking

• People’s Energy Data Breach Impacts 270,000 Customers

• Senate passes NDAA but veto threat looms

• NSC invokes 2016 directive to respond to SolarWinds hack

• Telework gets Air Force IT seal of approval

• UK Energy Firm Suffers Data Breach Impacting Entire Customer Database

• Decade-Long Data Silo to Address Google-Fitbit Privacy Concerns

• €6 million in illegal profit of fraudulent organic pistachio sales

• TikTok Promotion Offers Users Four Free Months of Apple Music

• Microsoft identified over 40 SolarWinds hack victims

• COVID-19 vaccines for sale on the dark web

• Serious File Upload Vulnerability In Contact Form 7 Threatened Millions Of Websites

• Security Recruiter Directory

• What is typosquatting? A simple but effective attack technique

• FTC Questions Big Tech About User Data | Avast

• 10 Must-have Cyber Security Resources as You Plan for 2021

• Microsoft found malicious SolarWinds software in its systems

• FCW Insider: Dec. 18

• Bouncy Castle Bug Puts Bcrypt Passwords at Risk

• Massive Cyberattack On US Government Exposes Shortcomings, Russia Named Top Suspect

• Acunetix update introduces support for macOS Big Sur, support for ShadowRoot, improved CSRF token handling, and new vulnerability checks

• Microsoft confirms breach in SolarWinds hack, but denies its clients were affected

• Apple Clarifies Behavior of AirPods Max Low Power Mode When Not in Use

• Microsoft was also a victim of the SolarWinds supply chain hack

• ‘Long-standing vulns’ in 5G protocols open the door for attacks on smartphone users

• 5 essential steps needed to set up a secure e-commerce website

• Google Extends Support Period for Android Devices

• Microsoft and 40+ Customers Hit in Russian Espionage Attack

• The future of cyberconflicts

• A slightly optimistic tale of how patching went for CVE-2019-19781, (Fri, Dec 18th)

• Europol and the European Commission inaugurate new decryption platform to tackle the challenge of encrypted material for law enforcement investigations

• Putin: the US State Department and the US intelligence agencies come up with fake about Russian hackers

• Manufacturers Take the Initiative in Home IoT Security

• Fake mobile version of Cyberpunk 2077 spreads ransomware

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• How to avoid seven types of tweets and posts that can get you jailed or fired?

• Cybercrime Expected to Rise At an Unprecedented Rate in 2021

• The SolarWinds Supply Chain Hack: What You Need to Know

• 5 reasons IT should consider client virtualization

• Service NSW not effectively handling private information: NSW Auditor-General

• Operation SignSight: Supply‑chain attack against a certification authority in Southeast Asia

• Imagining a professional life without passwords

• 2020 broke cybersecurity records, here’s what’s to come in the new year

• Britons be aware of the new Cyber Scam before Christmas

• Mobile Security Threat to US Mobile Phones from China

• Microsoft says it identified 40+ victims of the SolarWinds hack

• Millions of Users Downloaded 28 Malicious Chrome and Edge Extensions

• Microsoft Says Its Systems Were Also Breached in Massive SolarWinds Hack

• If You Don’t Hire Robots to Attack Your Networks, You’re Not Doing Security Right

• Could Universities’ Use of Surveillance Software Be Putting Students at Risk?

• Cloud ITSM market size to grow to $12.2 billion by 2025

• Expedited shifts to hybrid infrastructure and remote work challenges

• SAP’s Conlon discusses ways for safe and effective Covid vaccine distribution

• ASPI warns Canberra about security risk with current data centre procurement approach

• Sberbank predicts an outflow of up to ₽4 trillion from banks to the digital ruble

• NSA Releases Cybersecurity Advisory on Detecting Abuse of Authentication Mechanisms

• 
”Amazon” invoice that asks to call 1-866-335-0659 “to cancel” an order that you never made is (obviously) a #scam, (Thu, Dec 17th)

• ISC Stormcast For Friday, December 18th 2020 https://isc.sans.edu/podcastdetail.html?id=7298, (Fri, Dec 18th)

• Sectigo helps OEMs and enterprises secure their connected devices and products

• Offensive Security announces bounty program for user generated content

• Anomali automates and speeds essential tasks performed by threat intelligence

• SolarWinds Sunburst Attack: What Do You Need to Know and How Can You Remain Protected

• Microsoft confirms it was also breached in recent SolarWinds supply chain hack

• Palo Alto Networks Rapid Response: Navigating the SolarStorm Attack

• Innodisk InnoAGE provides full recovery to IoT edge devices

• Inseego launches four 5G fixed wireless solutions for home cord-cutters and business premises

• HITRUST MyCSF streamlines regulatory compliance reporting

• Proact Hybrid updates offer customers flexibility in moving data between different platforms

• IBM Security allows companies to experiment with fully homomorphic encryption

• Russian hack against the U.S. government ‘will take years to overcome,’ former national intelligence official says

• Additional Analysis into the SUNBURST Backdoor

• Group rates states’ IT modernization work

• US nuke agency hacked by suspected Russian SolarWinds spies, Microsoft also installed backdoor

• “Is it you in the video?” – don’t fall for this Messenger scam

• CloudPassage adds Google Cloud Platform support for Halo Cloud Secure

• Entrust Certificate Manager now available in the ServiceNow Store

• nOps brings API integration with AWS Well-Architected Tool to support AWS Well-Architected Reviews

• “Amazon” invoice that asks to call 1-866-335-0659 “to cancel” an order that you never made is (obviously) a #scam, (Thu, Dec 17th)

• Tim Cook and Craig Federighi to Testify in Apple vs. Epic Battle

• iFixit Starts Tearing Down AirPods Max

• Datadog Compliance Monitoring integrates with the AWS Well-Architected Tool

• Cyberbit partners with Optiv to bring simulation-based SOC Team training to clients in North America

• The U.S. government is under the ‘hack of a decade’ after massive cyberattack grows

• This hack is bad for national security, and bad for leadership: Sue Gordon

• Microsoft was also breached in recent SolarWinds supply chain hack, report

• 5M WordPress Sites Running ‘Contact Form 7’ Plugin Open to Attack

• Nuclear Weapons Agency Hacked in Widening Cyberattack – Report

• How to Increase Your Security Posture with Fewer Resources

• ‘SocGholish’ Attack Framework Powers Surge in Drive-By Attacks

• Malicious Browser Extensions for Social Media Infect Millions of Systems

Generated on 2020-12-19 23:55:08.860782