IT Security News Daily Summary 2021-01-09

• New AirPods Pro and iPhone SE Rumored to Launch in April 2021

• Cloning Google’s Titan Key to bypass 2FA – Research

• DEF CON 28 Safe Mode Lock Picking Village – Preston Thomas’ ‘Law School For Lockpickers’

• The Joy of Tech® ‘Ready For Another Go-Round?’

• DEF CON 28 Safe Mode Lock Picking Village – John the Greek’s ‘Bobby Pins, More Effective Than Lockpicks’

• Maldoc Strings Analysis, (Sat, Jan 9th)

• Dassault Falcon Jet hit by Ragnar Locker ransomware gang

• What is next gen antivirus? NGAV explained

• Court in the United States has sentenced Russian Andrey Tyurin to 12 years in prison for cybercrime

• Hacking Group Earth Wendigo Exploits Emails via Spear-phishing Attacks

• The SolarWinds Investigation Ramps Up

• Cyber Criminals Leak Hackney Council Files on the Darknet Website

• SolarWinds hackers also used common hacker techniques, CISA revealed

• Top Stories: AirTags and Apple Car Rumors, Belkin’s 3-in-1 MagSafe Charger, Mac App Store Turns 10

• U.S. Army Launches Hack the Army 3.0 Bug Bounty Program with HackerOne

• US FBI Warned Organisations of the Egregor Ransomware Attacks

• A Penetration Tester’s Journey to the Code Analysis Camp

• Palo Alto Networks Cortex XSOAR: Prioritizing and Accelerating Remediation of Systems

• Cinco patrones de comportamiento de usuarios en el trabajo descentralizado

• Twitter has permanently suspended the account of President Donald Trump

• Some ransomware gangs are going after top execs to pressure companies into paying

• Fleeceware Apps Prey on Android Users

• ‘Build’ or ‘Buy’ your own antivirus product

• North Korean APT37 Hackers Use VBA Self Decode Technique to Inject RokRat

• Chrome, Firefox updates fix severe security bugs

• Week in security with Tony Anscombe

• ‘Twas the night before InfoSec

• IoT Cybersecurity Act successfully signed into law

• Russian hackers selling program in darknet that bypasses spam protection

• Intellyx Predictions for 2021: Cyberwar, Crypto Crash, and COVID End

• iPhone 13 Rumored to Feature ‘Thinner’ Notch, Overall Design to Remain Unchanged

• How Machine Learning and Artificial Intelligence Improve Your Cyber Security

• John Garing, former Air Force and DISA exec, dies at 78

• Weekly Update 225

• The ransomware threat to the healthcare sector

• Apple Threatens to Ban Parler From App Store as Twitter Bans Donald Trump

• How to Resolve the U.S.-ICC Conflict

• The Urgency of a Second Trump Impeachment

• California City’s Effort to Punish Journalists For Publishing Documents Widely Available Online is Dangerous and Chilling, EFF Brief Argues

• DISA to take over defense cloud implementation

• Excelerating Analysis – Tips and Tricks to Analyze Data with Microsoft Excel

• Nvidia releases security updates for GPU display driver and vGPU flaws

• GeniusU – 1,301,460 breached accounts

• IT Security News Daily Summary 2021-01-08

• Equifax will pay $640 million for Kount’s AI-driven identity and fraud prevention tools

• Best security key in 2021

• CISA: SolarWinds hackers also used password guessing to breach targets

• Malicious Software Infrastructure Easier to Get and Deploy Than Ever

• Top 10 cybersecurity interview questions and answers

• 2021 IT priorities require security considerations

• Russian Hacker Sentenced to 12 Years for Role in Breaches of JP Morgan, Others

• 20 Useful Tips for New Apple Watch Owners

• Prepare for more sophisticated security threats in 2021

• CrowdStrike CEO says 2020 was the worst year on record for cyberattacks

• 30 AI and ML sessions on demand from NetApp INSIGHT 2020

• Russian hacker jailed in US over $19M fraud, 100M users’ data theft

• How to Use Quarkus and Java to Secure Kafka Streams

• Judiciary systems compromised in SolarWinds breach

• Pentagon releases counterdrone strategy

• Ryuk Rakes in $150M in Ransom Payments

• A Look Ahead at 2021: SolarWinds Fallout and Shifting CISO Budgets

• NVIDIA Ships Patches for High-Severity Security Flaws

• APT Horoscope

• Apple Shares Trailer for ‘Losing Alice,’ Coming to Apple TV+ January 22

• Cybersecurity Ethics: Establishing a Code for Your SOC

• State Department creates bureau to reduce ‘likelihood of cyber conflict’

• How to use Dropbox Vault to secure sensitive files

• Equifax Buys Fraud Prevention Firm Kount in $640 Million Deal

• JPMorgan Chase Hacker Gets 12 Years

• Facebook Says That It Has “No Choice” But To Go Along With Apple Privacy Changes

• Malware Developers Refresh Their Attack Tools

• DEF CON 28 Safe Mode Lock Picking Village – Dylan The Magician’s ‘Doors, Cameras And Mantraps, Oh My!

• The Capital

• DEF CON 28 Safe Mode Lock Picking Village – Zeefeene’s ‘High Security Wafer Locks – An Oxymoron?’

• MacRumors Giveaway: Win a Super Fast SOHO USB-C Dock From CalDigit

• ACLU, EFF, and Tarver Law Offices Urge Supreme Court to Protect Against Forced Disclosure of Phone Passwords to Law Enforcement

• US courts system fears SolarWinds snafu could have let state hackers poke about in sealed case documents

• NVIDIA Fixes High Severity Vulnerabilities

• FBI Alert Warns Private Organizations Of Egregor Ransomware Attacks

• Aurora Cannabis Files Being Sold by Attacker

• Singapore to introduce law governing police use of COVID-19 contact tracing data

• How to use Dropbox Passwords as your password manager

• SolarWinds Hires Chris Krebs and Alex Stamos for Breach Recovery

• Cartoon: Shakin’ It Up at the Office

• WhatsApp Has Shared Your Data With Facebook for Years

• Detecting Post-Compromise Threat Activity in Microsoft Cloud Environments

• CISA Releases New Alert on Post-Compromise Threat Activity in Microsoft Cloud Environments and Tools to Help Detect This Activity

• Welcome Bureau of Cyberspace Security and Emerging Technologies (CSET)

• Bitglass Security Spotlight: Popular Messaging App Exposes Users’ Private Data.

• Nissan source code leaked after it used “admin” as username, password

• White House task force says Russia likely to blame for SolarWinds hack

• SolarWinds Hires Chris Krebs, Alex Stamos in Wake of Hack

• Red Hat to Acquire StackRox

• Ransomware Attack Costs Health Network $1.5m a Day

• Mozilla Firefox Disabling Backspace Key to Prevent Data Loss

• App Store Sales Saw Unprecedented Growth in 2020, Grossing Over $64 Billion

• Sixth-Generation iPad Mini to Feature 8.4-Inch Display With Slimmer Bezels, March Launch Expected

• Belkin’s 3-in-1 MagSafe Charger Now Available for Purchase

• Red Hat to acquire StackRox, enabling users to build, deploy and run apps across the hybrid cloud

• Open Policy Agent: Microservices Authorization Simplified

• The uncomfortable questions facing Capitol Police over the security breach by MAGA mob

• SolarWinds hires Chris Krebs and Alex Stamos as part of security review

• Should you worry about hackers cloning your 2FA hardware security keys?

• How to review App Privacy data on your iPhone, iPad, or Mac

• DoS Vulnerabilities Found in Rockwell’s FactoryTalk Linx and RSLinx Classic Products

• MS-ISAC Releases Cybersecurity Advisory on Zyxel Firewalls and AP Controllers

• New Attack Could Let Hackers Clone Your Google Titan 2FA Security Keys

• Art Coviello to Join Identity Defined Security Alliance Webinar Series Hosted by Focal Point and SecZetta

• Unsecured Git server exposed Nissan North America

• Using the NIST Database and API to Keep Up with Vulnerabilities and Patches – Playing with Code (Part 2 of 3), (Fri, Jan 8th)

• Roku Acquires Rights to Quibi Content for Less Than $100 Million

• CES 2021: Sony Unveils New 4K and 8K LED TVs With HomeKit and AirPlay 2

• Red Hat snaps up Kubernetes security specialist StackRox

• Constella Intelligence Upgrades Hunter for Efficient, Targeted and Intuitive Investigations

• F5 to acquire Cloud based application security provider Volterra

• Google Faces UK Investigation Over Chrome Cookie Change

• How to Secure Your WordPress Site Against Brute Force Attacks

• SSL Offloading: A Solution For a Slow Website

• Cybersecurity: This ‘costly and destructive’ malware is the biggest threat to your network

• It’s time to put security and privacy front and center for virtual care

• A crypto-mining botnet is now stealing Docker and AWS credentials

• Firefox Improves Privacy Protections With Encrypted Client Hello

• SolarWinds Taps Firm Started by Ex-CISA Chief Chris Krebs, Former Facebook CSO Alex Stamos

• Continuous Updates: Everything You Need to Know About the SolarWinds Attack

• Nissan Source Code Compromised Online Due to Exposed Git Server

• Top 5 ‘Need to Know’ Coding Defects for DevSecOps

• MS-ISAC Releases Cybersecurity Advisory on Zyxel Firewall and AP Controllers

• Safety Checking Locally Installed Package URLs

• ‘Oceanhorn: Chronos Dungeon’ Now Available on Apple Arcade

• Apple Pay Likely to Launch in South Africa This Year

• BrandPost: Episode 1: Balancing act

• FBI Warns of Egregor Attacks on Businesses Worldwide

• U.S. Department of State Approves New Cyberspace Security Bureau

• Hackers Can Clone Google Titan 2FA Keys

• Rioters Had Physical Access To Lawmakers’ Computers. How Bad Is That?

• Investigation Launched Into Vulns Found In US Judiciary Case System

• Google Chrome Browser Privacy Plan Investigated In UK

• New Apple Services Could Include ‘Podcasts+,’ ‘Stocks+,’ and ‘Mail+,’ Analysts Predict

• National Security Implications of Deferred Maintenance in Infrastructure

• New Year’s Resolution: Write for the (ISC)² Blog

• Elon Musk Now Richest Man In The World

• How Working From Home Has Changed Cybersecurity Awareness Training

• How IBM is using blockchain to transform the potential of enterprise data

• Ninja Cookie: This browser extension is the ultimate productivity hack

• Nvidia releases security update for high-severity graphics driver vulnerabilities

• FBI Warns Businesses of Egregor Ransomware Attacks

• Aurora Cannabis files sold on the dark web

• Edge, Chrome and Firefox bugs enable remote system hijacking

• Trump’s former cybersecurity chief hired by SolarWinds

• My 2020 Predictions Revisited: What Worked, What Didn’t

• It’s likely you already have low-code developers — get them into your security neighborhood

• This browser extension is the ultimate productivity hack

• Probe Launched Into Impact of SolarWinds Breach on Federal Courts

• Emotet Tops Malware Charts in December After Reboot

• Russia’s SolarWinds Attack and Software Security

• Spotify Starts Testing New CarPlay Interface With Queue System

• Expert Advice On Fraudulent NHS Vaccine Scam

• Sealed U.S. court records possibly accessed by SolarWinds attackers

• PIM vs PAM vs IAM: What’s The Difference?

• Facebook Bans Donald Trump ‘Indefinitely’ After Capitol Killings

• Ping Identity Appoints Acclaimed CIO Paul Martin to Board of Directors

• Personal Information of Aurora Cannabis Employees Up for Sale on Hacking Forum

• Encrypted Messaging App Signal Sees Surge in Popularity Following WhatsApp Privacy Policy Update

• The 15 biggest data breaches of the 21st century

• Hackers Can Use Telegram to Reveal Users’ Exact Locations | Avast

• Law Enforcement is Seduced by Big Cybercrime Cases

• Ryuk Ransomware Attackers Have Made $150m

• British Airways to Pay 3bn Pound as Compensation of the Data Breach

• CEO Refutes Reports of Involvement in SolarWinds Campaign

• Ryuk Ransomware: What Can We Learn From DCH Cyberattack?

• ALERT: North Korean hackers targeting South Korea with RokRat Trojan

• Ezuri memory loader used in Linux and Windows malware

• Experts Reacted On Hackney Council Leaked Documents

• Intel RealSense ID: Facial authentication designed with privacy as a priority

• How good are you at scoring security vulnerabilities, really? Boffins seek infosec pros to take rating skill survey

• Ezuri Crypter Being Used to Evade Antivirus Detection

• January 2021 Patch Tuesday forecast: New focus on security and software development

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• How Does Your AD Password Policy Compare to NIST’s Password Recommendations?

• Why A Risk Register Is Important for Cybersecurity Leaders

• We got used to SMS notifications and phishers are capitalizing on it

• Facebook takes data sharing pledge from WhatsApp Users

• OMG Children to be allowed to spy on their Parents in UK

• WhatsApp updates privacy policy to enable sharing more data with Facebook

• Bugs in Firefox, Chrome, Edge Allow Remote System Hijacking

• Top 5 Cybersecurity Trends for 2021

• Kuo: No Significant Upgrades to iPhone Camera Lenses Through at Least 2022

• How to make sure the switch to multicloud pays off

• What is a software-defined perimeter and how does SDP work?

• New iPad Pro Said to Launch in March, 12.9-Inch Model Could Be Slightly Thicker for Mini-LED Display

• Confidence in FedRAMP driving cloud deployments

• Advancement of 5G and IoT tech to help the market reach $18.94 billion by 2025

• Hack the US Army for good with ‘Hack The Army’ bug bounty program

• ISC Stormcast For Friday, January 8th, 2021 https://isc.sans.edu/podcastdetail.html?id=7320, (Fri, Jan 8th)

• UJET now integrated with Oracle Cloud CX Service, available on Oracle Cloud Marketplace

• IPinfo Privacy Detection API: Detecting methods used to mask a user’s true IP address

• DOJ Says SolarWinds Hackers Accessed 3% of it’s Office 365 Mailboxes

• New side-channel attack can recover encryption keys from Google Titan security keys

• Investigation launched into vulnerabilities found within US Judiciary case file system

• Cryptography Research Centre in Abu Dhabi and Yale University to research post-quantum cryptography

• Wasabi integrates with BackupAssist to offer enterprise-grade cyber-resilience at lower cost

• SingleStore expands cloud data integration with the support for AWS Glue

• OPA and Gatekeeper: OPA or Gatekeeper?

• Russian Hacker Gets 12 Years in Massive Data Theft Scheme

• Post-Riot, the Capitol Hill IT Staff Faces a Security Mess

• Apple Negotiating with Hyundai for Apple Car Production [Updated]

• Nisos raises $6M to expand its marketing and operations, extend international footprint

• Dremio secures $135M to invest in educating a growing community of data lake practitioners

• Owl Cyber Defense acquires Trident ACS product line to enhance advanced network security capabilities

• archTIS acquires Nucleus Cyber to expand global footprint

• EFF’s Response to Social Media Companies’ Decisions to Block President Trump’s Accounts

• EEOC cancels official time for union reps in discrimination complaints

• Apple Allegedly Negotiating with Hyundai for Apple Car Production

• Anaplan expands executive team with the appointment of Bill Schuh as Chief Revenue Officer

• Malwarebytes promotes Thomas R. Fox to President

• Michel Ruefenacht joins YesWeHack as Chief Marketing Officer

• Ericom Software appoints Dr. Chase Cunningham as Chief Strategy Officer

• EFF’s Response to Social Media Companies’ Decision to Block President Trump’s Accounts

• Kubernetes Auditing

• Warner: White House ‘again’ holding back on naming Russia

• Red Hat Buys Container Security Firm StackRox

• Sealed U.S. Court Records Exposed in SolarWinds Breach

• Cobalt Strike & Metasploit Tools Were Attacker Favorites in 2020

• FBI alert warns private organizations of Egregor ransomware attacks

• Some AirPods Max Owners Complain of Condensation in Ear Cups

• Compiling the Criminal Charges Following the Capitol Riot

• Panaseer appoints Jonathan Gill as CEO

• Ashutosh Kulkarni joins Elastic as chief product officer

Generated on 2021-01-09 23:55:10.475188