IT Security News Daily Summary 2021-02-24

• VMware Carbon Black Named to the 2021 CRN Security 100 List

• spam trap

• honeypot (computing)

• Pentagon plans for spectrum policy changes, IT modernization

• DOD’s 5G-powered smart warehouse network kicks off

• Tax Season Ushers in Quickbooks Data-Theft Spike

• How to protect yourself from common job search scams

• Palo Alto Networks Commits to Be Carbon Neutral by 2030

• CrowdStrike CEO on who bears responsibility for SolarWinds hack

• Botnet Abusing Bitcoin Blockchain To Evade Detection

• CIA nominee: Cyber threats are ‘ever greater risk’ for U.S. society

• Mozilla Patches Bugs in Firefox, Now Blocks Cross-Site Cookie Tracking

• GitHub Hires Mike Hanley as Chief Security Officer

• Google Invests in Linux Kernel Developers to Focus on Security

• A Cryptomining botnet abuses Bitcoin blockchain transactions as C2 backup mechanism

• How the National Cyber Director Position Is Going to Work: Frequently Asked Questions

• The Last Time the Justice Department Prosecuted a Seditious Conspiracy Case

• GitHub Hires Former Cisco Executive Mike Hanley as Chief Security Officer

• Kali Linux 2021.1 released: Tweaked DEs and terminals, new tools, Kali ARM for Apple Silicon Macs

• What is cybersecurity enterprise risk management

• Revealed: The military radar system swiped from aerospace biz, leaked online by Clop ransomware gang

• Billions went to fraudulent unemployment claims in 2020, IG memo reports

• Senate hearing: SolarWinds evidence points to Russia

• Kaseya Buys Managed SOC Provider

• John Clossner’s FCW Security Comic

• BSides Calgary 2020 – AJ Leece’s ‘Malware Analysis For Incident Response’

• LazyScripter Threat Group Targets Airlines with Open Source RATs

• Researchers Identify a New Malware Builder: APOMacroSploit

• VMware Fixes Unauthenticated Remote Code Execution in vCenter

• Shaping post-Trump workforce policy

• Digital queues avert COVID-19 vaccine registration crashes

• Report: Mark Zuckerberg Personally Changed Facebook’s Content Moderation Rules

• Hands-On With Bose’s ‘Tenor’ Audio Sunglasses

• Best Practices to Secure Your SDLC Process

• Google funds Linux kernel developers to work exclusively on security

• VMWare Patches Critical RCE Flaw in vCenter Server

• 5 tips to protect your organization against the next cyberattack

• What do users and IT have in common? They’re both to blame for poor remote security practices

• CrowdStrike Slams Microsoft Over SolarWinds Hack

• The Realities of Extended Detection and Response (XDR) Technology

• Cyber Criminals Exploit Accellion FTA for Data Theft and Extortion

• Analysis of an attack on automotive keyless entry systems

• Barcode Scanner App Fiasco – ‘New Owner’ Responsible For The Disaster

• Apple Patched A Stored XSS Vulnerability In iCloud Domain

• Facebook To Invest $1 Billion In News Industry

• Cl0p ransomware gang hits Aviation giant Bombardier, leaks sensitive data

• Tanden’s bid to lead OMB in doubt as Senate committees postpone votes

• Ukraine reports cyber-attack on government document management system

• Webinar Today: Evaluating Vendor Risk With Security Ratings

• Former Power Company Boss to Admit Wire Fraud

• Infosecurity Europe 2021 Postponed with New Event Dates TBA

• Experts listed the methods used by fraudsters to obtain personal data

• Cartoon Caption Winner: Be Careful Who You Trust

• Universities Face Double Threat of Ransomware, Data Breaches

• Online Trackers Increasingly Switching to Invasive CNAME Cloaking Technique

• DEPENDENCY CONFUSION: A NEW THIRD-PARTY RISK FOR THE SOFTWARE FACTORY

• Google Funds Linux Kernel Developers to Focus Exclusively on Security

• iPhone 13 Lineup Expected to Use Qualcomm’s Snapdragon X60 Modem With Several 5G Improvements

• Apple Pay Launch Appears Imminent in Israel

• What is Privilege Management?

• Becoming resilient by understanding cybersecurity risks: Part 3—a security pro’s perspective

• LazyScripter: From Empire to double RAT

• ‘We’re finding bugs way faster than we can fix them’: Google sponsors 2 full-time devs to improve Linux security

• 39% of Healthcare Organizations Suffered Ransomware Attacks in the Cloud in 2020

• Medical data from France stolen and IT provider ransomware attack

• EU Opens Consultation On Gig Economy Worker Rights

• Helping You Immunize Your Organization Against the Cyber Pandemic: Check Point Research’s 2021 Security Report

• Google invests in open source security by funding Linux kernel developers

• Want to pass on your old PCs to good causes? Here’s how to do it while staying secure

• Nvidia’s Anti-Cryptomining GPU Chip May Not Discourage Attacks

• Ransomware threats to watch for in 2021 include crimeware-as-a-service

• Kroger data breach highlights urgent need to replace legacy, end-of-life tools

• 10 tips for protecting your cloud data and accounts

• How to combat the latest security threats in 2021

• New ‘LazyScripter’ Hacking Group Targets Airlines

• Poor Remote Working Behaviors and Procedures Putting Orgs at Risk

• 3 Security Flaws in Smart Devices & IoT That Need Fixing

• VMware Releases Multiple Security Updates

• Mozilla Releases Security Updates for Thunderbird, Firefox ESR, and Firefox

• Experts Warns of Notable Increase in QuickBooks Data Files Theft Attacks

• A post about searching a software developer on LinkedIn that didn’t go as planned

• Defense in depth with Red Hat Insights

• Prosser: 2021 iMac to Come in Five Colors, Apple Silicon Mac Pro to Resemble ‘Stacked’ Mac Minis

• DHL Express and FedEx targeted by phishing scam

• EE To Expand 4G Coverage As Part Of Shared Rural Network

• Stalkerware And Children | Avast

• Microsoft unveils three more ‘industry clouds’ for financial, manufacturing and nonprofit

• Microsoft Lures Populate Half of Credential-Swiping Phishing Emails

• Four Additional Threat Groups Seen Targeting Industrial Organizations in 2020

• Dragos: ICS security threats grew threefold in 2020

• Bitcoin Slips 17% to $45,000 as Caution Sweeps Over Crypto

• Botnet Uses Blockchain to Obfuscate Backup Command & Control Information

• Balancing Safety and Security During a Year of Remote Working

• Veeam Releases New V11 with 200+ Enhancements, Eliminating Ransomware and Data Loss while Providing a Single Platform for Modern Data Protection

• APT32 state hackers target human rights defenders with spyware

• SolarWinds Hackers Also Went After NASA And The FAA

• Bombardier Data Posted On Ransomware Site Following FTA Hack

• SolarWinds Hack Was The Work Of At Least 1,000 Engineers, Tech Execs Tell Senate

• VMware Warns Of Critical Remote Code Execution Flaw

• Deals: Anker’s MagSafe-Compatible Wireless Charger Drops to $15.99 Today on Amazon

• Today Marks Steve Jobs’ 66th Birthday as MacRumors Turns 21

• Expert Commentary On 30,000 Macs Infected With New Silver Sparrow Malware

• What’s Different About Data Security in the Cloud? Almost Everything.

• How Security Culture Invokes Secure Behaviour

• CNAME-based tracking increasingly used to bypass browsers’ anti-tracking defenses

• CipherCloud Chronicles 9: Docs Journey-Reassuring Data Classification with CipherCloud

• Framing ZTNA and Security Parameters: Risks, Tenets and Best Practices

• 2020 Set a Record for New Linux Malware Families

• This botnet is abusing Bitcoin blockchains to stay in the shadows

• Hackers Leak Data Stolen From Jet Maker Bombardier

• IT Security Firm Kaseya Acquires SOC Platform RocketCyber

• Exploitation of Accellion File Transfer Appliance

• MAR-10325064-1.v1 – Accellion FTA

• CISA Releases Joint Cybersecurity Advisory on Exploitation of Accellion File Transfer Appliance

• Apple Executive Rules Out Possibility of Free Apple Music Tier With Ads

• Apple Watch to Host Activity Challenge for International Women’s Day 2021

• Python Programming Language Rushes to Address RCE Vulnerability

• The Basics of EDR Software: What You Need to Know

• Celebrating Black Pioneers of Technology

• The Future of Cybersecurity in Higher Education: Four Possible Scenarios

• Taking Steps to Secure your Application in 2021

• How DNS History Contributes to Threat Investigations

• President Biden Targets Silicon Shortage With Executive Order

• Companies are using AI to hit business goals, even though they can’t explain how it works

• Critical VMware vCenter Server Flaw Can Expose Organizations to Remote Attacks

• Twitter Shuts Down Four Networks of State-Sponsored Disinformation Accounts

• Vietnamese Hackers Target Human Rights Defenders: Amnesty

• Bill Bozeman Appointed to Netwatch Group’s Executive Board

• NY Department of Financial Services Issues Cyber Fraud Alert to Auto Insurers

• Hackers Tied to Russia’s GRU Targeted the US Grid for Years

• Everything You Need to Know About Evolving Threat of Ransomware

• A Powerful New Approach to Phishing — the Biggest Issue in Cybersecurity

• Sysdig Donates eBPF to CNCF to Improve Linux Security

• Final Cut Pro Trademark Update Suggests Apple Eyeing Future Subscription Model

• New Report Lends Credence to Rumors of Foldable Google Pixel Phone Launching This Year

• Response Comment: Half Of Businesses Suffered A Cyber-Attack In Last 12 Months

• North Korean Hackers Charged with Plot to Steal $1.3B

• IT Salary Survey 2021: Over half of IT pros are satisfied at work – but nearly half are job hunting

• Elon Musk No Longer World’s Richest Man

• 2021 X-Force Threat Intelligence Index Reveals Peril From Linux Malware, Spoofed Brands and COVID-19 Targeting

• Start Options, B2G founder indicted for alleged digital currency, investor fraud

• More private browsing? Firefox gets tougher on cookie tracking with new ‘total’ protection

• Legal Firm Leaks 15,000 Cases Via the Cloud

• Expert Reaction On Google’s Password Checkup Feature Expanding For Android Users

• Microsoft 365 Advanced Audit: What you need to know

• Inrupt offers a standard for controlling data and identity on the web

• SolarWinds Executives Defend Conduct Before US Senate

• What MyFitnessPal Knows About You | Avast

• Don’t Get Caught in the Hackers’ Web: The New Frontier in Web Security

• Ransomware Attacks Double Against Global Universities

• Eve and Coulisse Join Forces to Launch First Thread-Enabled HomeKit Blinds

• Cybersecurity Expert Shares Top Takeaways Amid SolarWinds Hearing

• Expert Comments On Secondary Extortion Attacks

• Healthcare Organisations increasingly targeted in cyberattacks

• Bombardier suffers ransomware and data leak

• SolarWinds, Microsoft, FireEye, and CrowdStrike defend conduct in major breach

• Aircraft-Maker Bombardier Breached by Accellion FTA Hackers

• Jet Manufacturer Bombardier Data Leaked Following FTA Attack

• Babuk Ransomware

• FedEx and DHL Express Hit with Phishing Attacks

• Russia Accused by Ukraine for Major Cyber Attacks

• The Hidden Costs and Challenges of Log Data Storage Using a SIEM

• Breach Clarity Data Breach Report: Week of Feb. 22

• Airplane manufacturer Bombardier has disclosed a security breach, data leaked online

• Looking for adding new detection technologies in your security products?

• Think you know all about security pen-testing in the cloud? Here’s how to prove it

• Critical RCE Flaws Affect VMware ESXi and vSphere Client — Patch Now

• Water Plant Infrastructure Hackers Go Kinetic

• Mozilla Firefox keeps cookies kosher with quarantine scheme, 86s third-party cookies in new browser build

• 2021 will be the year of hybrid working: How can CTOs keep staff secure and productive?

• The US Government is going to respond to the SolarWinds hack very soon

• What’s CNAME of your game? This DNS-based tracking defies your browser privacy defenses

• COVID pandemic causes spike in cyberattacks against hospitals, medical companies

• Clubhouse chats streamed to third‑party website

• U.S. municipalities are the perfect target for cybercriminals in 2021

• Third-party risk management programs still largely a checkbox exercise

• Ransomware Attack on Airplane maker Bombardier

• Clubhouse social app suffers a data breach due to Chinese App developer

• Red Hat closes StackRox Kubernetes security acquisition

• Black History Month: Diversity in Cybersecurity Is More Important than Technology

• Researchers propose more secure and private mobile contact tracing

• Most businesses see state-sponsored cyberattacks as a major threat

• New Firefox Feature Ups the Ante Against Cookie-Based Tracking

• ISC Stormcast For Wednesday, February 24th, 2021 https://isc.sans.edu/podcastdetail.html?id=7386, (Wed, Feb 24th)

• SecurityHQ Response: A mobile app that tracks the status of security incidents at any time

• Whitepaper – EDR to secure mobile devices: Coverage, limits & recommendations

• Indian Railways suffers unspecified security ‘breaches in various IT applications’

• Escaping the echo chamber: How to make cybersecurity accessible for all

• PlusOne Solutions API ensures a whole view of the network’s compliance and risk information

• Tenable launches an all-in-one, risk-based vulnerability management platform

• Entrust VMaaS solution offers a secure, compliant and contemporary approach to visitor management

• Bill establishing cyber abuse takedown scheme for adults enters Parliament

• Tech Firms Say There’s Little Doubt Russia Behind Major Hack

• Malspam pushes GuLoader for Remcos RAT, (Wed, Feb 24th)

• BBVA partners with Google Cloud to improve security infrastructure for financial services

• ZEDEDA integrates with Microsoft Azure IoT to provide full lifecycle management capabilities

• Hillstone Networks X8180 secures networks with more performance and energy efficiency

• Sequitur Labs EmSPARK Security Suite provides essential security defenses for IoT applications

• SolarWinds Attackers Lurked for ‘Several Months’ in FireEye’s Network

• FundGuard closes $12M funding round to enter new markets and grow the executive team

• ScienceLogic raises $105M to support the company’s continued innovation in the AIOps market

• Origin Wireless raises $14M to advance commercialization of WiFi sensing technology

• Red Hat software now supported on IBM Power Virtual servers

• Microsoft president asks Congress to force private-sector orgs to publicly admit when they’ve been hacked

• Supply chain hack took a thousand engineers to pull off, tech exec tells Congress

• Airplane maker Bombardier data posted on ransomware leak site following FTA hack

• Texas power outage highlights need for better use of data analytics, modeling and policy making

• Texas power outage: Data analytics, modeling and policy making will be key to preventing similar disasters

• Vulnerability Summary for the Week of February 15, 2021

• SonicWall Releases Additional Patches

• De lealtad al enfoque CVEx: así evoluciona la atención al cliente

• Firefox 86 Gains Total Cookie Protection and Multiple Picture-in-Picture Views

• James Devine joins Aviatrix as a Principal Solutions Architect

• Fusion Risk Management continues to expand its footprint in the financial services sector

• Keysight Technologies acquires Sanjole to deliver a comprehensive 5G solutions portfolio

• Chinese hackers cloned a Windows security flaw stolen from the NSA

• VMware warns of critical remote code execution flaw in vSphere HTML5 client

• BrandPost: What It Takes to Implement Zero Trust With Employees Working From Home

• Notes from NANOG 81

• CEOs, Senators discuss mandating cyber-attack disclosures

• McAfee shares jump on first public report: Q4 revenue tops expectations, outlook higher as well

• Former CISA Director Chris Krebs Discusses Risk Management & Threat Intel

• Kaseya Supercharges IT Complete Security Suite with the Acquisition of RocketCyber

• VMware addresses a critical RCE issue in vCenter Server

• Apple Facing Antitrust Probe Over ‘Sign in With Apple’ and Other Developer Complaints

• Apple Offers Developers Clarification on Some App Privacy Data Reporting Requirements

• They break into your network but do nothing themselves: ‘Initial access brokers’ resell stolen creds for $7k a pop

• IT Security News Daily Summary 2021-02-23

• Mozilla releases Firefox 86 equipped with ‘Total Cookie Protection’

• Explore the Adversary Universe

• University Recruiter Julie Slater on how to make entry-level hiring more equitable

• To Get Cloud Security Cooking, You Need The Right Recipe For Success

• Mapping It Out: Analyzing the Security of eBPF Maps

• 2021 Global Threat Report: Analyzing a Year of Chaos and Courage

• Microsoft calls for acquisition reform amid JEDI battles

• Why system modernization must be given higher priority

• Louisiana parish police move to cloud records management

• SolarWinds attack could have happened to anyone, CEO says

• AF eyes DevSecOps for upgrading legacy C-130 software

• How to really fix COVID-19 vaccine appointment scheduling

• Network attacks: 5 things to know

• Top 5 things to know about network attacks

• SonicWall Releases Second Set of February Firmware Patches

• BSides Calgary 2020 – Aarti Gadhia’s ‘There Is No Security Skills Shortage!’

• The Security Digest: #49

• The Give and Take of Cake

• Simplify Onboarding and Secure Group Management in AWS SSO

• Sensibo Air Gains HomeKit Compatibility

• Republican Senators Question Merrick Garland: Missives From an Alternative Universe

• Student Surveillance Vendor Proctorio Files SLAPP Lawsuit to Silence A Critic

• Clop ransomware gang leaks online what looks like stolen Bombardier blueprints of GlobalEye radar snoop jet

• 3 SASE case studies exploring real-world deployments

• Twitter removes 100 accounts linked to Russia disseminating disinformation

• What to expect from the SolarWinds hack hearing

• Scammers Threaten Texas Power Customers

• Accellion FTA Exploited for Data Theft and Extortion Attempts

• Researcher Reveals DDoS Amplification Attack Vector in Powerhouse Management VPN

• Local, State and Federal Prosecutors Launch Georgia Cyber Fraud Task Force

• Kiran Ahuja tapped to lead OPM

• IBM Squashes Critical Remote Code-Execution Flaw

• Daycare Webcam Service Exposes 12,000 User Accounts

• Ace your cybersecurity and IT certification exams by taking these prep courses

• 119k Threats Per Minute Detected in 2020

• Louisiana College Cyber-Thief Sentenced

• 10K Targeted in Phishing Attacks Spoofing FedEx, DHL Express

• Apple Now Selling Refurbished M1 MacBook Air Models Priced Starting at $849

• Hello, I am CISO Helen. Nice To Meet You 🙂

• Microsoft president: The only reason we know about SolarWinds hack is because FireEye told us

• Enterprises Warned of Growing Risk Posed by Initial Access Brokers

• Aston Martin Partners with SentinelOne

• Augmenting SMB Defense Strategies With MITRE ATT&CK: A Primer

• BSides Calgary 2020 – Keenan Skelly’s ‘Opening Keynote’

• XKCD ‘Mars Landing Video’

• Surge in ZLoader Attacks Observed

• Cast of Apple TV+ Series ‘Ted Lasso’ to Participate in Panel Discussion at PaleyFest

• Tim Cook Shares Details on Acquisitions, Future of Mac and More at Shareholders Meeting

• The Pitfalls of DIY Security for Your AWS RDS Databases

• Deleted Keybase chat images retrievable on Windows, macOS, Linux

• 5 jobs you need to apply for ASAP

• Google’s Password Checkup feature coming to Android

• Flash version distributed in China after EOL is installing adware

• The Russian created Clubhouse for Android in one day

• IBM addressed flaws in Java Runtime, Planning Analytics Workspace, Kenexa LMS

• Apple’s Research on Anti-Fingerprint Coatings Again Hints at Future Titanium Devices

• Exclusive Deal: Save 10% on Nomad’s New iPad Air Cases

• The Trump Impeachment as Precedent for Future Late Impeachments

• Federal Laws and Grants Are Insufficient to Combat Against Cyber Threats

• New Password Checkup Feature Coming to Android

• Microsoft listed as a Representative Vendor in 2020 Gartner Market Guide for Insider Risk Management Solutions

• 30,000 Apple Macs Infected With ‘Silver Sparrow’ Malware

• Using OIDC for Easy Android Login

• PerimeterX raises $57 million to fight bots and web app attacks

• 5 jobs that you you need to apply for ASAP

• Finnish IT Giant Hit with Ransomware Cyberattack

• The 8 best cloud security certifications for IT pros in 2021

• Keybase secure messaging fixes photo-leaking bug – patch now!

• SonicWall Releases Additional Patches

• Announcing Security Intelligence for Splunk — For Free

• Five Mac Apps Worth Checking Out – February 2021

• Understanding the Automated Patch Management Process

• Accelerating Department of Defense mission workloads with Azure

• The year 2020 witnessed these biggest GDPR fines

• Epic Games Refused Permission To Sue Apple In London

• Check Point Harmony: Highest level of Security for remote users

• Disrupting Cyber Strategies for 2021, and Beyond

• These hackers sell network logins to the highest bidder. And ransomware gangs are buying

• How cyberattacks can threaten colleges and universities

• Highly Active ‘Gamaredon’ Group Provides Services to Other APTs

• How to achieve security observability in complex environments

• Checkout Skimmers Powered by Chip Cards

• 84% of CNI Orgs Experienced Cyber-Attacks in the Last Year

• CVSS as a Framework, Not a Score

• Security + Fraud Protection: Your One-Two Punch Against Cyberattacks

• Organizations at growing risk from initial access brokers – a fast growing class of cybercriminal who breach firms and then charge others to do the ‘dirty work’

• How to Audit and Test for Sudo’s CVE-2021-3156 with LogRhythm

• 10K Microsoft Email Users Hit In FedEx Phishing Attack

• Bitcoin Blockchain Helps Botnet From Being Taken Down

• Hackers Are Selling Network Logins To The Highest Bidder

• SolarWinds Hearing Announced By House Committees

• M1 Mac Users Report Excessive SSD Wear

• Anker Releases MagSafe-Compatible Battery Pack for iPhone 12 Lineup

• Clop targets execs, ransomware tactics get another new twist

• BrandPost: Measuring HP Sure Click Enterprise’s Return on Investment

• BrandPost: 5 Often-Overlooked Log Sources

• Qualcomm, Sophos ink deal to secure 5G Snapdragon PCs

• Ransomware: Sharp rise in attacks against universities as learning goes online

• Is Your Suppliers’ Security Your Business?

• In-House Legal Teams Increasingly Responsible for Cybersecurity

• Malwarebytes Report Confirms the Change in Tactics of Cybercriminals During Covid-19

• How Does Triton Attack Triconex Industrial Safety Systems?

• Return of the MINEBRIDGE RAT With New TTPs and Social Engineering Lures

• Identity Defined Security Alliance Partners with National Cyber Security Alliance to Launch First-Ever ‘Identity Management Day’ April 13, 2021

• Introducing Red Hat Vulnerability Scanner Certification

• Deals: Apple’s 11-Inch iPad Pro Magic Keyboard on Sale for $199 ($100 Off, Lowest Price)

• Brave Browser Tor Mode Leaked .Onion Addresses To ISP – Glitch Fixed

• A Python Vulnerability Could Allow Remote Code Execution Attacks

• BrandPost: A New Model for Defeating Cyberattacks and Reducing Costs

• WhatsApp To Limit Messaging, Unless Users Agree New Terms

• 10K Microsoft Email Users Hit in FedEx Phishing Attack

• Australian Health and Transport Agencies Hit by Accellion Hack

• Austin Energy Customers Targeted in Vishing Scams After Severe Winter Storm Provokes Utility Outages

• Experts Find a Way to Learn What You’re Typing During Video Calls

• State-of-the-Art Cybersecurity Strategies: Essential Microsoft EDR Tools

• Linux Mint users in hot water for being slow with security updates, running old versions

• Global Achievement Awards – What’s new in 2021?

• How to choose the right Mac for your use case

• The State of X Commerce. What’s Next in the Digital Retail Space?

• VC Giant Sequoia Capital Informs Investors of Data Breach

• Think Tank Warns of “Silent Stealing” Fraud

• Experts Discuss How #COVID19 Impacted the Cyber-Threat Landscape

• 2034, Part V: Sailing Into Darkness

• From Zero to Zero Trust: Five Tips to Simplify Your Journey

• Report: The Trouble With Cloud Security

• Epic Games ‘Attempting to Locate’ Former iOS Chief Scott Forstall to Testify in Ongoing Legal Battle with Apple

• Instagram Announces New Features to Help Support Users Affected By Eating Disorders

• Accellion FTA attacks, extortion attempts might be the work of FIN11

• 1-15 February 2021 Cyber Attacks Timeline

• The mystery of the Silver Sparrow Mac malware

• How To Fix Your Hacked JoomlaSite?

• IT Salary Survey 2021: Hiring rate expected to increase but priorities will shift

• FireEye: Accellion FTA Attacks Could be FIN11

• Japan Suffered Record Number of Privacy and Security Violations in 2020

• Alert for Smart Phone Users, How Their Data is Extracted by Apps Via Location Tracking

• 5 Security Lessons for Small Security Teams for the Post COVID19 Era

• Disney+ Launches Adult-Friendly ‘Star’ Channel for International Subscribers

• Accellion Attackers Stole Data and Breached Companies Running FTA Servers

• 10 things work-from-home employees can do now to help protect the network

• 5 ways to combat audit fatigue

• Chrome OS Overtakes macOS In 2020

• Facebook Restarts Australian News, After Government Agrees Changes

• Kroger Data Breach – Hackers Stole Files that Shared Through Secure File Transfer Service

• FCW Insider: Feb. 23

• Quick Hits

• Keybase patches bug that kept pictures in cleartext storage on Mac, Windows clients

• IBM issues patches for Java Runtime, Planning Analytics Workspace, Kenexa LMS

• Most Firms Now Fear Nation State Attack

• Shadow Attacks Let Attackers Replace Content in Digitally Signed PDFs

• Qakbot in a response to Full Disclosure post, (Tue, Feb 23rd)

• Samsung Promises ‘At Least Four Years’ of Security Software Updates for Recent Galaxy Devices

• Apple Pay Launches in Mexico

• Sequoia Capital investor information stolen

• Transport for NSW affected by Accellion breach

• Nvidia Driver For New GPU Card Restricts Cryptomining

• Achieve CIS Compliance in Cloud, Container and DevOps Environments

• New Partnership Launched to Improve Cyber-Resilience in Scotland

• WAF Security – Getting the Most out of Your Web Application Firewall

• FIN11 cybercrime group is behind recent wave of attacks on FTA servers

• Austin Energy: Scammers threaten to cut power

• IT leaders form coalition to develop open standard for tracing the evolution of digital content

• Filmai.in – 645,786 breached accounts

• Chinese Hackers Cloned Exploit Tool Belonging to NSA

• What’s Scarier Than the SolarWinds Breach?

• Facebook Reverses Australian Ban on News Sharing

• NurseryCam – 10,585 breached accounts

• Application security testing is not just buzzwords

• Hackers Abuse Google Alerts to Promote a Fake Adobe Flash Player Update that Installs Malware

• Hackers Exploit Accellion Zero-Days in Recent Data Theft and Extortion Attacks

• Q4 2020 Doxxing Victim Trends: Industrial Sector Emerges as Primary Ransom “Non-Payor”

• Making the Right Cloud Security Investments

• NurseryCam daycare cam service shut down after security breach

• Physical cyber threats: What do criminals leave when they break in?

• Chief Legal Officers face mounting compliance, privacy and cybersecurity obligations

• Survey expects an increase in Cyber Attacks from North Korea

• Ransomware attack exposes Hyundai Logistics Data

• Transport for NSW confirms data taken in Accellion breach

• Brave browser’s Tor mode exposed users’ dark web activity

• Kuo: New MacBook Pro Models With HDMI Port and SD Card Reader to Launch Later This Year

• New iPad Pro and MacBook Models With Mini-LED Displays Again Rumored to Launch This Year

• Top cloud infrastructure risks faced by real-world organizations

• Adversaries exploit supply chains, double down on COVID-19 and ransomware

• 4 Key Cybersecurity Trends Confronting Canada’s Electric Sector

• Attacks Targeting Accellion Product Linked to FIN11 Cybercrime Group

• Kuo: New MacBook Pro With HDMI Port and SD Card Reader to Launch Later This Year

• PCI SSC releases PCI Secure Software Lifecycle (SLC) Standard 1.1

• Worldwide zero trust security market size to reach $51.6 billion by 2026

• ISC Stormcast For Tuesday, February 23rd, 2021 https://isc.sans.edu/podcastdetail.html?id=7384, (Tue, Feb 23rd)

• Unitas Reach: An SDN that offers automated ubiquitous edge access to any cloud location

• People’s Energy – 358,822 breached accounts

• Nutanix announces additional ransomware protections in its cloud platform

• HID Global expands its Seos credential portfolio with two new products

• Robinhood Taps Caleb Sima to Lead Security

• Reddit Names Allison Miller as Chief Information Security Officer (CISO)

• uCloudlink elevates NewCore Wireless’ users data connectivity experience

• Mindtree announced as Google Cloud partner, helping orgs through the cloud migration journey

• CAMS from igroup improves performance and reduces cost for AWS and Azure users

• Privitar helps orgs maximize sensitive data value by addressing gaps in their privacy strategies

• NetGalley – 1,436,435 breached accounts

• 7 Ways Changing Security Requirements Will Impact Industries in 2021

• The Best Approach To Elasticsearch Security

• GAO: DOD has to get a handle on future services spending

• Security Catalyst Office Hours Recap for February 19, 2021

• Secure-IC and MosChip extend technologies and services to ASICs and Indian market

• Viasat authorized to use U.S. government provided classified cyber threat intelligence

• Galgus receives CERTIFIED Passpoint seal of approval from Wi-Fi Alliance

• HUBUC partners with IDEMIA to offer payment cards with MOTION CODE technology

• The perils of non-disclosure? China ‘cloned and used’ NSA zero-day exploit for years before it was made public

• Struggling with SAP in the cloud? Here’s how to cope

• SolarWinds CEO: This could have happened to anyone

• Chinese-Affiliated APT31 Cloned & Used NSA Hacking Tool

• Google Finally Adds App Privacy Labels to Gmail App

• Dr. Helene D. Gayle joins Palo Alto Networks’ board of directors

• Palo Alto Networks CEO: SolarWinds hack will have tailwinds for cybersecurity

• Palo Alto Networks CEO talks Q2 results, future of cybersecurity

Generated on 2021-02-24 23:55:15.642321