IT Security News Daily Summary 2021-01-27

• Law enforcement takes over Emotet, one of the biggest botnets

• Building a Security-First Culture

• Pwn2Own: A Tale of a Bug Found and Lost Again

• FirstNet expands product, services portfolio

• US and Bulgarian authorities disrupt NetWalker ransomware operation

• NetWalker Ransomware Suspect Charged: Tor Site Seized

• TeamTNT Cloaks Malware With Open-Source Tool

• NetWalker Ransomware’s Sites Seized by Law Enforcement

• Critical Vulnerability Patched in ‘sudo’ Utility for Unix-Like OSes

• ICS Purdue Model in Industrial Internet of Things (IIoT) & Cloud

• Celebrate Data Privacy Day with Advice from Top Data Privacy Experts

• Emotet Botnet dismantled in a joint international operation

• Apple Reports Record-Setting 1Q 2021 Results: $28.8B Profit on $111.4B Revenue

• Apple Now Has 1.65 Billion Active Devices Worldwide

• Transferring Whatsapp data from iPhone to Android with MobileTrans

• Remote Attackers Can Now Reach Protected Network Devices via NAT Slipstreaming

• Ten-Year Old Sudo Vulnerability Gives Root Privileges on Host

• North Korean hackers attempt to hack security researchers investigating zero-day vulnerabilities

• Fleeing WhatsApp for Privacy? Don’t Turn to Telegram

• Data Privacy Day in 2021

• XKCD ‘Trash Compactor Party’

• BSidesSF 2020 – Allan Friedman’s ‘How Software Transparency Can Help Save The World’

• Apple Shifting More iPhone and iPad Production to India and Vietnam

• What To Do if You Must Use SMS

• It’s Not 230 You Hate, It’s Oligopolies

• Knock, knock. Who’s there? NAT. Nat who? A NAT URL-borne killer

• McAfee ATR Launches Education-Inspired Capture the Flag Contest!

• Authorities plan to mass-uninstall Emotet from infected hosts on March 25, 2021

• ADT Security Camera Flaw Open Homes, Stores to Eavesdropping

• Sudo Bug Gives Root Access to Mass Numbers of Linux Systems

• Emotet malware taken down by global law enforcement effort

• Senator Grills Facebook On “Failed Commitment” To Stop Recommending Dangerous Content

• Microsoft Security Business Exceeds $10B in Revenue

• Some attack vectors Spamhaus is observing in early 2021

• Pwn2Own 2021, more than $1,500,000 in cash and prizes for contestants

• Apple Now Selling Standalone Ear Cushions for AirPods Max

• Pow! Emotet’s down. Is it out?

• Stack Overflow 2019 hack was guided by advice from none other than… Stack Overflow

• Emotet Botnet Dismantled Following International Police Operation

• Nefilim Actors Use Active Directory Account for a Month Before Deploying Ransomware

• 10 Year Old Heap Buffer-Overflow Vulnerability Discovered in Sudo

• Emotet Takedown Disrupts Vast Criminal Infrastructure; NetWalker Site Offline

• ADT Security Camera Flaw Opened Homes, Stores to Eavesdropping

• CISA Issues Advisory for High-Severity Vulnerabilities in Fuji Electric HMI Products

• 2021 cybersecurity predictions: Oh, where cybersecurity may go

• #RSAC365: Will Recent Treasury Guidance Reduce Ransomware Payments in the US?

• #RSAC365: #COVID19 Fundamentally Altered Global Attack Surface

• 4 Clues to Spot a Bot Network

• iCloud for Windows Gaining Support for iCloud Passwords Chrome Extension

• Apple Releases Safari Technology Preview 119 With Bug Fixes and Performance Improvements

• The state of apps by Microsoft identity: Azure AD app gallery apps that made the most impact in 2020

• North Korea APT Might Have Used a Mobile 0day Too?

• Building towards the richest and most interconnected malware ecosystem

• World’s Most ‘Resilient Malware’ Botnet Emotet Taken Down

• Emotet Botnet Takedown | Avast

• Grindr Faces $11.7m Data Privacy Fine

• UK Insurers Defend Covering Ransomware Payments

• Many Cybersecurity Job Candidates Are Subpar, While On-the-Job Training Falls Short

• Cops Disrupt Emotet, the Internet’s ‘Most Dangerous Malware’

• MAR-10319053-1.v1 – Supernova

• AirPods Max Available in Space Gray on Amazon [Updated: Verizon Too]

• 1-15 January 2021 Cyber Attacks Timeline

• Microsoft surpasses $10 billion in security business revenue, more than 40 percent year-over-year growth

• Protecting multi-cloud environments with Azure Security Center

• Announcing the general availability of Azure Defender for IoT

• Command ‘n’ control botnet of notorious Emotet Windows ransomware shut down in multinational police raid

• Amazon Appeals US Labor Ruling Over Union Vote

• Lifesaving Tech For Seniors | Avast

• Reinforcing Smart Home Security | Avast

• Why Ubuntu 21.04 is an important release, even without GNOME 40

• Apple Patches Three iOS Zero-Day Vulnerabilities

• Creating a LaMetric App with Cloudflare Workers and KV

• Is There A Better Alternative to Active Directory®?

• Connect, Share, and Learn at Imperva Amplify 2021

• Deals: Discounts Hit 16-Inch MacBook Pro ($300 Off), 27-Inch iMac ($200 Off), and More

• Google to Stop Collecting Advertising Identifiers in iOS Apps in Response to iOS 14’s Upcoming Tracking Prompt

• AirPods Overwhelmingly Dominate Global Wireless Headset Market

• A 12-Step Rehabilitation Program for American Election Administration

• Why the Senate Shouldn’t Hold a Late Impeachment Trial

• Lawfare Live: Lessons from the 2020 Election With Nate Persily and Charles Stewart

• Water Wars Special: How IUU Fishing Increases the Risk of Conflict

• More than 13,000 malware threats were detected every hour in 2020

• TikTok bug could have exposed millions of users’ data

• Google FLoC puts ad trackers on a cookie-free diet

• Nemty Ransomware hackers using dead staff credentials

• Why you need to monitor ONTAP FPolicy performance

• Cyclist Swept Into River Calls 999 From Apple Watch

• Top Cybersecurity Threats to Watch in 2021

• New Google cloud service aims to bring zero trust security to the web

• In the Hacker’s Crosshairs: Active Directory

• Global Public-Private Partnerships Key to Fighting Cybercrime

• Security’s Inevitable Shift to the Edge

• Apple Releases Security Updates

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• New Docker Container Escape Bug Affects Microsoft Azure Functions

• Maritime port cybersecurity

• Today Marks the 11th Anniversary of Steve Jobs Unveiling the iPad

• Spigen AirTags Accessory Listed Online for ‘Late October’ Release

• Is BlueStacks Safe? Addressing Cybersecurity Concerns of Android Emulation Software

• Today’s ‘sophisticated cyber attack’ victim is the Woodland Trust: Pre-Xmas breach under investigation

• Google To Restore ‘News Showcase’ Service To Australia – Report

• How We Hacked Azure Functions and Escaped Docker

• How is Enterprise Security Like Writing a Novel?

• Emotet Botnet Disrupted in Global Law Enforcement Operation

• International Action Targets Emotet Crimeware

• Two Dutch Public Health Workers Arrested for Selling Coronavirus Patient Information

• Crawl, Walk, and Run with SASE Adoption

• ADT Installer Hacks Home Cams for Sexual Thrills

• Adaptiva Posts Record Growth as Company Rises To Solve Enterprise Challenges

• Dutch Insider Attack on COVID-19 Data

• Online fraud at an all-time high amidst the global pandemic

• We Answer Your Questions About The SolarWinds Hack

• Four cold calling marketing firms fined almost £500k by ICO

• Database of 176 million Pakistani mobile phone users sold online

• Armo comes out of stealth to secure cloud-native computing

• National Crime Agency warns novice and veteran traders alike of rise in clone company scams

• How ghost accounts could leave your organization vulnerable to ransomware

• Hundreds of Industrial Organizations Received Sunburst Malware in SolarWinds Attack

• Cypriot National Admits in U.S. Court to Extorting Website Owners

• Apple critical patches fix in-the-wild iPhone exploits – update now!

• Growing Digital Adoption Providing Extra Opportunities for Cyber-Criminals

• NHS Urged Public to Remain Vigilant Regarding Fake Covid-19 Vaccinations

• Warning Issued Over Hackable ADT’s LifeShield Home Security Cameras

• 3 Security ‘Disconnects’ That Need To Be Addressed

• Apple addresses three iOS zero-day flaws exploited in the wild

• Emotet Botnet Disrupted By International Police Operation

• Apple Patches Three Actively Exploited Zero Days

• 23 Million Gamer Records Exposed In VIPGames Leak

• Insurers Defend Covering Ransomware Payments

• Experts Reaction On Hackers Can Access Your Phone Number From Facebook

• Retail giant falls Victim to REvil Ransomware Attack

• Emotet Malware Over the Years: The History of an Active Cyber-Threat [Updated]

• Biden Administration Seeks $9 Billion for Emergency Cybersecurity Improvements

• Emotet: ‘World’s most dangerous malware’ botnet disrupted by international police operation

• Apple Patches Three Actively Exploited Zero-Days, Part of iOS Emergency Update

• New Attack Could Let Remote Hackers Target Devices On Internal Networks

• New Exploit Development Course: EXP-301

• Expert Opinion On Fraud Epidemic In UK ‘Is Now National Security Threat’

• iOS 14.4 Released to Fix Three Security Bugs

• International law enforcement effort pulls off Emotet botnet takedown

• Best Office Chairs Under $100 – 2021 Buying Guide

• Best Laptops for Engineering Students 2021

• 7 Best SoundBars in India Under 10000 Rupees 2021

• Top 10 Best Laptop Accessories 2021

• Watch Out For This Wormable Malware Spreading Via WhatsApp

• Taiwanese Minister: Chip Makers To Address Car Silicon Shortage

• More Security Vendors Admit to SolarWinds Attacks

• Fake ICO consultant sentenced for embezzling cryptocurrency now worth $20 million

• Manufacturing Giant Suffers Major Cyber-Disruption

• World’s most dangerous malware EMOTET disrupted through global action

• Top Cyber Attacks of 2020

• Apple Execs Discussed Not ‘Leaving Money on the Table’ When Deciding Apple TV Subscription Fees

• Apple fixes three actively exploited iOS zero-days

• Vulnerability found in top messaging apps let hackers eavesdrop

• Tips to harden Active Directory against SolarWinds-type attacks

• Are your Endpoints Affected by the SolarWinds Sunburst Attack?

• Quick Hits

• FCW Insider: Jan. 27

• UK association defends ransomware payments in cyber insurance policies

• Chromebooks will now let you sign into websites with your fingerprint

• UK Spies Called on to Help in Fraud Fight

• Dutch Police Confiscated 2 Men for Stealing And Selling COVID-19 Patients Data

• Using the Manager Attribute in Active Directory (AD) for Password Resets

• TriOp – tool for gathering (not just) security-related data from Shodan.io (tool drop), (Wed, Jan 27th)

• The Hacked and Yet to Be Hacked: SolarWinds Breach Shows Detection is Key to Reducing Risk and Damage

• The Basics of Defense in Depth Cybersecurity

• YouTube Extends Donald Trump Suspension

• Pwn2Own 2021: Hackers Offered $200,000 for Zoom, Microsoft Teams Exploits

• DDoS Attacks Surge in 2020 Due to #COVID19

• Heap-based buffer overflow in Linux Sudo allows local users to gain root privileges

• Research Suggests Apple Doubled Its Market Share in India Last Year

• Sudo vulnerability allows attackers to gain root privileges on Linux systems (CVE-2021-3156)

• 66,000 Gamers Exposed due to Cloud Misconfiguration

• Experts Reaction On Palfinger Suffers Cyber Attack

• Expert Commentary: Phishing Attack Impersonates UK NHS To Obtain Sensitive Consumer Data

• Experts On North Korea Hacking Campaign Response

• Looking for adding new detection technologies in your security products?

• Why Enterprises Must Take Ransomware Attacks Seriously

• Apple Warns Against iPhone Camera Repairs With Non-Genuine Parts

• Cybersecurity marketing: Always think of the customer

• Streamlining cloud compliance through automation

• Wormable Android malware spreads via WhatsApp messages

• Apple Warns of 3 iOS Zero-Day Security Vulnerabilities Exploited in the Wild

• The complexity of moving legacy apps remains a huge cloud migration challenge

• Privacy is not a one-time, check the box activity

• Here’s how AI can help fight cybersecurity threats given the rise of remote working

• Merger and Acquisition news currently trending on Google

• Google offers secure BeyondCorp Enterprise Cloud model

• Predictive policing is just racist 21st century cyberphrenology

• 10-years-old Sudo bug lets Linux users gain root-level access

• In the Wake of the SolarWinds Hack, Here’s How Businesses Should Respond

• Sitdown with a SOC Star: 13 Questions With Adva Harosh of First Quality

• What Does Data Privacy Mean to Consumers and Corporations?

• Ghidra 101: Decoding Stack Strings

• Most with in-house security teams are considering outsourcing security efforts

• Isolation-based security technologies are gaining prominence

• Predictive policing is just racist 21st century cyber-phrenology

• TetherView Digital Bunker: A one-way-in and one-way-out private cloud solution for enterprises

• eBook: 20 tips for secure cloud migration

• How To Test If The App You Created Is Secure And Safe From Hacking

• Xanthe Cryptomining Botnet Attack Targeting Docker Installations

• Preparing for a High-Paying Career in Cyber Security

• 7 Reasons to Choose an Outsourced Security Services Provider

• What Password Managers Are Safe to Use in 2021

• Virtual Private Network: What is it and Why is it So Important To Protect Your Privacy?

• OAIC orders Home Affairs to compensate asylum seekers over data breach

• Norway to Fine Dating App Grindr $11.7M Over Privacy Breach

• ISC Stormcast For Wednesday, January 27th, 2021 https://isc.sans.edu/podcastdetail.html?id=7346, (Wed, Jan 27th)

• Quantum unveils H2000 Series, a line of hybrid storage arrays

• Syniverse RCS P2P hub advances messaging capabilities for mobile messaging users

• ONF SD-RAN 1.0: A cloud-native platform for software-defined RAN consistent with O-RAN

• Singapore must return data control to users to regain public trust

• ASIC reports server breached via Accellion vulnerability

• CloudLinux expands its Extended Lifecycle Support services for Linux distributions

• Aradatum launches self-powered macro cell tower to support 5G, edge and telecom

• D-Link COVR-X1870 Series Whole Home Mesh Wi-Fi 6 Systems provide faster speeds and greater capacity

• DOD moves to centralize security clearance disputes

• Pay-or-Get-Breached Ransomware Schemes Take Off

• Ransomware Disrupts Operations at Packaging Giant WestRock

• North Korea Targets—and Dupes—a Slew of Cybersecurity Pros

• Phishing Campaign Leverages WOFF Obfuscation and Telegram Channels for Communication

• Ivanti acquires Cherwell to expand the reach of its Neurons platform

• Deloitte bolsters cyber threat hunting capabilities with acquisition of Root9B

• TSP participants withdrew $2.9 billion last year under CARES Act

• North Korean Attackers Target Security Researchers via Social Media: Google

• Pay-Or-Get-Breached Ransomware Schemes Take Off

• There is No Cloud Security Market Segment with Richard Stiennon

• US cyber intelligence officer given 11 years for kidnapping her kid, trying to hawk top secrets to Russia in Mexico

• whaling attack (whaling phishing)

• Air Force chief looks to combat extremism in military ranks.

• Nvidia Squashes High-Severity Jetson DoS Flaw

• US cyber intelligence officer given 11 years for trying to sell top-secret info to Russia

• Google releases alarming report about North Korean hackers posing as security analysts

• Attackers Target Security Researchers via Social Media: Google

• FTC Reports Scammers Impersonating FTC

• Fidelis, Mimecast, Palo Alto Networks, Qualys also impacted by SolarWinds hack

• Apple Inviting Developers to Online Events on Building Widgets, Creating App Clips and Bringing iPad Apps to Mac

• Update your iPhone — Apple just disclosed hackers may have ‘actively exploited’ a vulnerability in its iOS

• North Korea hackers use social media to target security researchers

• TikTok fixes security flaw that exposed private user data

• Apple’s long-time hardware lead steps down to work on mysterious “new project”

• IT Security News Daily Summary 2021-01-26

• 128 vs. 256-bit SSL Encryption: What Are the Differences?

• CISA looks to future-proof first responder communications

• How agencies are modernizing IT infrastructure with attribute-based access control

• Cloud driving public safety improvements

• Apple fixes another three iOS zero-days exploited in the wild

• F5 Networks fiscal Q1 revenue, profit beat expectations, revenue outlook higher as well

• DanaBot Malware Roars Back into Relevancy

• SolarWinds breach news center

• Bias is Anti-Balance: Consuming Media is Like Riding a Bicycle

• TetherView Unveils Digital Bunker Service for Virtual Desktops

• Testing the HomePod Mini’s New U1 Handoff Functionality

• Decade-old bug in Linux world’s sudo can be abused by any logged-in user to gain root privileges

• Building Culture Without the Office: Five Best Practices for Creating a Positive and Engaging Culture in the COVID Era and Beyond

• Detecting and Preventing Kernel Attacks

• Biden taps campaign veteran for federal CISO job

• FedRAMP adds services to marketplace

• Firefox Cracks Down on Supercookies to Improve User Privacy

• Report: 500 Million Facebook Users May Have Had Their Phone Numbers Compromised

• Mimecast: Recent Certificate Compromise Tied to SolarWinds Attacks

• Privacy Teams Helped Navigate the Pivot to Work-from-Home

• It’s a new year. What do we do now?

• Streamlining Cloud Smart Adoption With Prisma Cloud

• How Your Security Operations Team Can Maintain Zero Trust

• Palo Alto Networks Joins the Responsible Business Alliance

• iOS 14.4 Patches Vulnerabilities That May Have Been Actively Exploited

• Apple emits emergency iOS security updates while warning holes may have been exploited in wild by hackers

• TikTok vulnerability allowed hackers to access users’ phone numbers

• Four security vendors disclose SolarWinds-related incidents

• 23M Gamer Records Exposed in VIPGames Leak

• Apple Ships Emergency Fixes for Under-Attack iOS Zero-Day

• Mimecast certificate compromised by SolarWinds hackers

• IoT device authentication methods that increase security

• Hacker Admits Targeting Major US Websites

• Syntax Releases First IT Trends Report

• Cartoon Caption Winner: Before I Go …

• BEC Scammers Find New Ways to Navigate Microsoft 365

• TetherView Unveils DigitalBunker Service for Virtual Desktops

• TA551 (Shathak) Word docs push Qakbot (Qbot), (Tue, Jan 26th)

• Tweetbot 6 Launches With Design Updates and Subscription Pricing

• Plex Launches Plex Arcade With Retro Games to Play

• North Korean Threat Actors Target Security Researchers

• Targeted Phishing Attacks Strike High Ranking Company Executives

• Over 66,000 VIPGames Members’ Information Exposed Through Misconfigured Cloud Server

• UK Residents Targeted in COVID-19 Phishing Scam Pretending to be NHS

• Seeking more civility on Facebook

• Google’s new zero trust product is completely cloud native

• How to quickly block spam SMS in Android

• More Cybersecurity Firms Confirm Being Hit by SolarWinds Hack

• Twitter Asks Users to Police Misinformation

• Fighting the Rapid Rise of Cyber Warfare in a Changing World

• Sharp Increase in Emotet, Ransomware Droppers

• Healthcare Ransomware Attacks Continue Climbing

• Threat Report Portugal: Q4 2020

• Apple Releases tvOS 14.4 for Fourth and Fifth-Generation Apple TV Models

• Apple Releases watchOS 7.3 With Unity Watch Face, Expanded ECG Availability and More

• Apple Releases iOS 14.4 and iPadOS 14.4 With New Camera Warnings and Bug Fixes

• Apple Releases 14.4 Software for HomePod With New U1 Features for Mini

• iPhone 13 Models Again Rumored to Support Faster Wi-Fi 6E

• Nine Questions for the Capitol Insurrection Commission

• Is the SolarWinds Cyberattack an Act of War? It Is, If the United States Says It Is.

• TikTok Vulnerabilities Could Expose Users’ Private Data

• Your Guide to Endpoint Security

• Nefilim Ransomware Gang Hits Jackpot with Ghost Account

• Criminal, Domestic Violence Case Info Exposed in Cook County Leak

• Ghost hack – criminals use deceased employee’s account to wreak havoc

• Which AppSec Testing Type Should You Deploy First?

• Discovery capabilities: A core differentiator for Black Duck SCA

• Apple TV+ Espionage Thriller ‘Tehran’ Renewed for Second Season

• Silicon Valley legend Jim Clark on why he wants to eliminate passwords

• BrandPost: Choosing the Right XDR Solution for Your Organization

• Google Updates Plan To End Cookies In Chrome Browser

• Sonicwall Hacked with Highly Sophisticated Hackers By Exploiting Zero-Day Vulnerabilities

• How to Keep Mobile Phones Secure

• Google Cloud boosts security with general availability of zero-trust BeyondCorp Enterprise

• Firefox 85 removes Flash and adds protection against supercookies

• Privacy budgets soared in 2020, doubling to an average of $2.4 million

• Akamai: Extortion attempts increase in DDoS attacks

• Zero trust 2.0: Google unveils BeyondCorp Enterprise

• Cyber Criminals trying to hack Russian popular Telegram channels using ads from GeekBrains

• TetherView Launches Digital Bunker™, a Comprehensive One-Way-In and One-Way-Out Private Cloud for Enterprise Customers

• Apple CEO Tim Cook to Speak at EU Data Protection Conference This Thursday

• Second-Generation AirPods Pro Widely Rumored to Launch in First Half of 2021

• Have You Ever Installed a Malicious Chrome Extension?

• Ransomware Attack on WestRock

• Discover NetApp video: the grand unification theory of cloud

• Facebook News Launches In UK After Deals Signed

• Why you should never use free a VPN

• Using Digital Certificates for IoT Root of Trust

• South African government releases its own browser just to re-enable Flash support

• Governors hear about the dangers of a lackluster cybersecurity response, need for FBI coordination

• Veritas Technologies adds Flex Scale to NetBackup9 for scale-out functionality

• Bad actors launched an unprecedented wave of DDoS attacks in 2020

• NAT Slipstreaming 2.0 Exposes Devices on Internal Networks to Remote Attacks

• Learn SAML: The Language You Don’t Know You’re Already Speaking

• Take the Unhackable MFA Challenge

• TikTok privacy issue could have allowed stealing users’ private details

• Security Intelligence Handbook Chapter 7: Understand Your Adversaries

• Default Email Security Might Not be Secure Enough

• Apple Researching High-End Titanium MacBook Casings With Unique Textured Finish

• Apple Releasing iOS 14.4 and watchOS 7.3 Later Today

• Deals: Anker Gold Box Sale Has Up to 36% Off Wall Chargers, Lightning Cables, Portable Batteries, and More

• Apple CEO Tim Cook to Speak at EU Data Protection Conference This Thusday

• Expert Reaction On Research That 250% Jump In Phishing Sites

• Watch out as new Android malware spreads through WhatsApp

• Veritas, Fortinet launch new security tools, automation features

• Cybercriminals use deceased staff accounts to spread Nemty ransomware

• North Korea Targets Security Researchers in Elaborate 0-Day Campaign

• Several DDoS Attack Records Broken in 2020

• Google Says Chrome Cookie Replacement Plan Making Progress

• Dr Gary McGraw Appointed to IriusRisk Threat Modeling Technical Advisory Board

• DDoS Campaign Exposed by the Security Firm Radware

• Startup Offers Free Version of its ‘Passwordless’ Technology

• Mainframe Security Automation Is Not a Luxury

• Huntress Launches Managed Antivirus Service to Streamline Endpoint Security for MSPs and IT Administrators

• Gemini 2 for Mac Gains Real-Time Duplicate Files Monitor With Alerts

• Apple Celebrates Black History Month With Limited-Edition Watch, Featured Apps and Books, and More

• Rushing to Judgment: Examining Government Mandated Content Moderation

• Increase in Ransomware Attacks on Healthcare Industry

• Common Cybersecurity Vulnerabilities and Exposures to Pay Attention to in 2021

• SpaceX Launches 143 Satellites In One Launch

• Setting up a quick and easy status page with Cloudflare Workers!

• IT leaders see outsourcing cybersecurity as one solution to increased attacks

• Cybercriminals Impersonate UK’s National Health Service to Spread COVID-19 Vaccination Phishing Emails

• Successful hit against drug trafficking in the EU

• CounterCraft Brings World-Class Active Defense Technology to U.S. Department of Defense

• Google: North Korean Hackers Have Targeted Security Researchers Via Social Media

• The History Of The Connected Battlespace, Part One

• Dutch COVID-19 Patient Data Sold On The Criminal Underground

• Former LulzSec Hacker Releases SonicWall VPN Zero-Day

• New Malware spread through Whatsapp

• Business executives targeted with Office 365-themed phishing emails

• The massive SolarWinds hack and the future of cyber espionage

• Google says North Korean state hackers are targeting security researchers on social media

• I was targeted by North Korean 0-day hackers using a Visual Studio project, vuln hunter tells El Reg

• Evolution vs. Extinction

• An Augmented Reality Future?

• TrickBot’s Survival Instinct Prevails — What’s Different About the TrickBoot Version?

• CISO Conversations: Intel, Cisco Security Chiefs Discuss the Making of a Great CISO

• Australian Corporate Regulator Discloses Breach Involving Accellion Software

• Ready to take the red pill? Catch up with Keren Elazari at Sophos Evolve

• Mastercard Introduces Quantum-Resistant Specs to Enhance Contactless Security

• World’s Largest Crane Maker Suffers Global Cyber Attack, Operations at a Halt

• Hacker Releases Dating Site Data Belonging to 2+ Million Users

• Cigarette smugglers’ activities up in smoke after illegal factories dismantled across Europe

• Critical Vulns Discovered in Vendor Implementations of Key OT Protocol

• Targeted Phishing Attacks Strike High-Ranking Company Executives

• Privacy Comes of Age During the Pandemic

• Security Threats Loom in Your Cart: Malicious Activity From Online Shopping in the Enterprise

• WordPress security & hardening, the definitive guide

• Strengthening Online Applications Against Pass-the-Cookie Attacks

• Massive Brazilian Data Breach

• Default Email Security Might Not be Enough

• FCW Insider: Jan. 26

• Crane Maker Palfinger Says Cyberattack Had ‘Massive’ Impact on IT Infrastructure

• TikTok Bug Gave Access to Contacts’ Profile Details

• ‘2034: A Novel of the Next World War,’ an Exclusive Excerpt

• Targeted Phishing Attacks Target High-Ranking Company Executives

• North Korea-linked campaign targets security experts via social media

• Experts On Australia’s Securities Regulator Says Server Hit By Cybersecurity Breach

• How one multi-cloud-based business manages security controls

• Twitter ‘Birdwatch’ Trial To Allow Users To Flag Misleading Content

• Apple Issues Warning About iPhones And Pacemakers

• TikTok fixes privacy issue discovered by Check Point Research

• TikTok Flaw Lay Bare Phone Numbers, User IDs For Phishing Attacks

• Cook County Leaks 320,000 Court Records

• Machine Learning in Security – How Machine Learning helps security in the real-world?

• TikTok Bug Could Have Exposed Users’ Profile Data and Phone Numbers

• vCISO Shares Most Common Risks Faced by Companies With Small Security Teams

• Facebook News Tab Launches in the United Kingdom

• Expert Discussion On Third Party/Supply Chain Risks And Means Of Mitigating Them

• North Korean hackers target security researchers

• Crane manufacturer Palfinger hit by global cyberattack

• Security researchers targeted by North Korean hackers

• Misconfigured Cloud Server Exposes 66,000 Gamers

• Australian Cyber Security Centre Hit by Cyber Security Attack

• Spotify Tests Audiobooks Market With Collection of Literary Classics

• ‘There’s A Threat, Pass It On’: A Negative Communication Cycle Between Vendors, IT Leaders And Employees Leaves Enterprises At Risk

• Which Emulator to Choose to Play Epic Seven – 2021 Guide

• UK Cabinet Office spokesman tells House of Lords: We’re not being complacent about impact of SolarWinds hack

• Cyber Attacks on Vaccination centers of Germany

• SonicWall hit by a highly sophisticated cyber attack

• Cook County’s Court Related Records Exposed

• Application security testing is not just buzzwords

• Human and Software Flaws Leave Remote Workers Vulnerable

• How Educational Institutions can Disrupt Ransomware Attackers

• The impact of COVID-19 on how CISOs make buying decisions

• N. Korean Hackers Targeting Security Experts to Steal Undisclosed Researches

• Tailored AI-generated advice may stop the spread of misinformation

• Small security teams overwhelmed by onslaught of cyber attacks

• Standard SNMP Device Monitoring

• Jump Into 2021 With a Unified Approach to Remote Monitoring

• How to Protect Your Business From Supply Chain Attacks

• Internet regulation: Not a matter of freedom of speech, but freedom to conduct business

• Cybersecurity investments will increase up to 10% in 2021

• North Korea infected infosec bods with backdoors via dodgy blog pages, Visual Studio files – Google

• A Look at the Legal Consequence of a Cyber Attack

• Cyber News Rundown: Cryptomining Malware Resurgent

• How secure configurations meet consensus

• ISC Stormcast For Tuesday, January 26th, 2021 https://isc.sans.edu/podcastdetail.html?id=7344, (Tue, Jan 26th)

• Google: North Korean hackers have targeted security researchers via social media

• South Carolina County Suffers Weekend Cyberattack

• Google Warning: North Korean Gov Hackers Targeting Security Researchers

• Claroty Discloses Multiple Critical Vulns in Vendor Implementations of Key OT Protocol

• Ivanti Velocity and Ivanti Speakeasy now optimized for SAP environments

• Platform9 unburdens users from the complexities of Kubernetes while ensuring fast adoption

• End Two Federal Programs that Fund Police Surveillance Tech

• 6 Security Predictions for 2021—And Why They Matter

• Part Two: Secure Coding Urban Myths

• OMB lays out new COVID health and safety guidelines for feds

• House Dems call on AG nominee to protect immigration judges’ union

• Ashok Krishnan joins AXA XL as Chief Data and Analytics Officer

• Internet Society Foundation awards $1M to projects that examine the future and sustainability of the internet

• CloudNatix raises $4.5M to meet the demand for their product across multiple geographies and markets

• SonicWall Is Latest Security Vendor to Disclose Cyberattack

• Dutch police arrested two people for the illegal sale of COVID-19 patient data

• InfluxData appoints Vidya Peters to its Board of Directors

Generated on 2021-01-27 23:55:15.024405