IT Security News Daily Summary 2021-03-06

• Multiple Cisco products exposed to DoS attack due to a Snort issue

• Security News in Review: Ryuk Ransomware Develops Self-Replication Capabilities

• BSides Calgary 2020 – Rahul Raghavan’s ‘The Clutter That’s Choking AppSec’

• Commit Strips’ ‘Call The Police’

• BSides Calgary 2020 – Richard Rowlandson’s ‘Developing A Holistic Approach To Threat Hunting: Welcome To The Jungle’

• Hackers breached four prominent underground cybercrime forums

• Microsoft releases IOC Detection Tool for Microsoft Exchange Server flaws

• Check to see if you’re vulnerable to Microsoft Exchange Server zero-days using this tool

• Microsoft Shares Additional Mitigations for Exchange Server Vulnerabilities Under Attack

• U.S. DOD Weapons Programs Struggles to Add ‘Key’ Cybersecurity Measures

• Apple Confirms iMac Pro Will Be Discontinued When Supplies Run Out, Recommends 27-Inch iMac

• NSA and CISA Jointly Issued Guidance On Protective DNS Services

• Backdoor Affects 20,000 U.S Agencies Via Microsoft Vulnerability

• Utah’s ‘Porn Filter’ Law Passes the State Legislature

• Microsoft IOC Detection Tool for Exchange Server Vulnerabilities

• Top Stories: iPhone 13 Leaks, OLED iPads and Macs, New AirTags Evidence

• Will Google’s Privacy Sandbox take the bite out of tracking cookies?

• 15 Schools in The UK Were Compromised due to Cyber Attack

• Spotting the Red Team on VirusTotal!, (Sat, Mar 6th)

• ‘Build’ or ‘Buy’ your own antivirus product

• 15 Schools in UK Were Compromised due to Cyber Attack

• Around 580,000 Privilege Fliers Data Breached, says Singapore Airlines

• iMac Pro No Longer Custom Configurable, Available ‘While Supplies Last’

• How ESET’s work on SafetyNet® helps protect children online

• Week in security with Tony Anscombe

• Okta CEO defends $6.5 billion deal for rival Auth0 after shares fall

• Review: OWC’s Envoy Pro FX is an Ultra Fast, Expensive Portable SSD for Macs

• Okta CEO defends move to acquire rival cybersecurity firm Auth0

• Chinese Hacking Spree Hit an ‘Astronomical’ Number of Victims

• Microsoft Releases Alternative Mitigations for Exchange Server Vulnerabilities

• CEOs on Okta’s $6.5 billion deal for rival cybersecurity outfit Auth0

• Attention Android Users: This Free VPN App Leaked the Data of 21 Million Users

• Millions of travelers of several airlines impacted by SITA data breach

• Anatomy of a Security Super Bowl Dynasty, Part 2: The Offense

• A List of Potential Attack Artifacts for the Top 3 Phished Brands in 2020

• Video game engine powers radiation visualizations

• We were promised jetpacks. DARPA looks to deliver

• TSA explores video analytics for better security screening

• NIST charting federal vulnerability disclosure policy

• Software Icon McAfee Charged in Cryptocurrency Scam

• Apple’s Upcoming iPhone 12 MagSafe Battery Pack: Everything We Know

• At least 30,000 organizations newly hacked via Microsoft email flaw

• Microsoft Exchange Server Vulnerabilities Mitigations – March 2021

• IT Security News Daily Summary 2021-03-05

• Microsoft, FireEye report 3 new malware linked to SolarWinds hackers

• OPM tells agencies to restart union talks to uproot Trump-era orders

• TMF money, more leave in Senate’s take on COVID relief

• At Least 30,000 U.S. Organizations Newly Hacked Via Holes in Microsoft’s Email Software

• Microsoft Exchange Server Exploits Hit Retail, Government, Education

• McAfee Is Indicted for Altcoin Pump-and-Dumps and ICO Schemes

• Apple’s Upcoming iPhone 12 MagSafe Battery Pack

• Why You Can’t Sue Your Broadband Monopoly

• EFF urges Google to ground its FLoC: ‘Pro-privacy’ third-party cookie replacement not actually great for privacy

• The Fastest Route to SASE

• virus (computer virus)

• WordPress Injection Anchors Widespread Malware Campaign

• U.S. DoD Weapons Programs Lack ‘Key’ Cybersecurity Measures

• 5 Ways Social Engineers Crack Into Human Beings

• Microsoft Adopted an ‘Aggressive’ Strategy for Sharing SolarWinds Attack Intel

• HAFNIUM Exchange Zero-Day Scanning

• What’s Good for Litigation Isn’t Necessarily Good for Cybersecurity

• The Questions FBI Director Christopher Wray Wasn’t Asked

• Facebook, It’s Time to Put the Rules in One Place

• BitSight Is A Partner for Cybersecurity In Law Enforcement

• Massive Supply-Chain Cyberattack Breaches Several Airlines

• 80% of senior IT leaders see cybersecurity protection deficits

• Hackers Target Russian Cybercrime Forums

• On International Women’s Day 2021, Does the ‘Rule of Steve’ Still Apply? Yes.

• Realistic Patch Management Tips, Post-SolarWinds

• Threat Roundup for February 26 to March 5

• John McAfee Indicted for ICO Manipulation, Securities Fraud

• GoldMax, GoldFinder, and Sibot, 3 new malware used by SolarWinds attackers

• A Look Inside Apple’s 23,000 Square-Foot Fitness+ Studio

• MacRumors Giveaway: Win an Apple Watch Series 6 and Band From BluShark

• Attivo Networks Launches ADAssessor for Continuous Visibility to Active Directory Security Exposures

• Cyber Defense Magazine nominated Cobwebs Technologies for Its 2021 InfoSec Awards for threat intelligence

• Four zero-days in Microsoft Exchange actively exploited in the wild

• Detecting Privilege Escalation

• BitSight Is Partner for Cybersecurity In Law Enforcement

• SolarWinds SUNBURST Backdoor DGA and Infected Domain Analysis

• Cybercrime Forum Breaches Are a Common Theme in 2021

• FTC Joins 38 States in Takedown of Massive Charity Robocall Operation

• Details of Two New Ransomware Types Released

• Stolen SendGrid Accounts Used in Phishing Attacks

• Threat actors hijacking Bitbucket and Docker Hub for Monero mining

• House GOP urges increase in defense spending

• What is cyber insurance? Everything you need to know about what it covers and how it works

• Facebook “Welcomes” Stronger Privacy Regulations

• Encrypted Traffic Strategies

• Apple Releases Third watchOS 7.4 Public Beta With iPhone Unlocking Feature

• Ray Liotta and Taron Egerton to Star in Apple TV+ Series ‘In With The Devil’

• China’s RedEcho accused of targeting India’s power grids

• Edge to core to cloud, part 3: On premises to the cloud, or cloud to on premises?

• Critics Blast Google’s Aim to Replace Browser Cookie with ‘FLoC’

• Thousands of Mobile Apps Expose Data via Misconfigured Cloud Containers

• US Warns of Fake Unemployment Benefit Websites

• BSides Calgary 2020 – Nigel Weber’s ‘Stay Classy – Class Object Model’

• Myanmar Democracy Under Fire: Military Coup Commands International Attention

• All the Apps That Support Apple’s Spatial Audio Feature

• Class Action Lawsuit Over Apple Providing Refurbished Replacement Devices Proceeding to Trial in August

• Malaysia and Singapore Airlines Breached in Third Party Hacks

• 16-28 February 2019 Cyber Attacks Timeline

• Zigbee inside the Mars Perseverance Mission and your smart home

• Failure to Report Breach Costs Mortgage Lender $1.5m

• Bug in Apple’s Find My Feature Could’ve Exposed Users’ Location Histories

• Cisco Secure Email: A Proven and Consistent Leader

• How To add Bot Management Solution in Your Web Security Measures?

• No, RSA Is Not Broken

• Review: Aqara Camera Hub G2H and Sensors Offer Easy Setup and Fast Response Times in Compact Designs

• iPhone 13 Rumor Recap: Smaller Notch, Larger Batteries, 120Hz for Pro Models, Improved 5G, Wi-Fi 6E, and More

• Cyber Security Roundup for March 2021

• Reasons Why the Security Industry is Protecting the Wrong Thing

• Oh SITA: Airline IT provider confirms passenger data leaked after major ‘cyber-attack’

• Ransomware news trending on Google

• Protecting Our & Your Health Data: 3 Pillars of COVID-19 Era Data Security

• Microsoft: We’ve found three more pieces of malware used by the SolarWinds attackers

• D-Link, IoT Devices Under Attack By Tor-Based Gafgyt Variant

• NIST Cybersecurity Framework: A cheat sheet for professionals

• Ransomware Takedowns Underscore Need for Private-Public Cybersecurity Collaboration

• CompuCom MSP Hit By DarkSide Ransomware Cyberattack

• Threat Actors Target PrismHR in a Potential Ransomware Attack

• Russian Hacking Forum Maza Hijacked, Suffers Data Breach

• Make Sure That Stimulus Check Lands in the Right Bank Account

• Threat Model Humor

• Deals: Take Up to $100 Off 2020 iPad Pro Models at Amazon and B&H Photo

• Polecat, a Data Analytics Agency Held to Ransom After Leaving a Server Unsecured

• Cloud Clarity: Adding Security and Control to the AWS Shared Responsibility Model

• These two unusual versions of ransomware tell us a lot about how attacks are evolving

• Multiple Airlines Impacted by Data Breach at Aviation IT Firm SITA

• FTC Joins 38 States Taking Down Massive Charity Robocall Operation

• ‘For All Mankind,’ ‘Servant,’ and ‘Amazing Stories’ Nominated for Saturn Awards

• Email Protection 101: What You Need to Know About Secure Communication

• Microsoft’s windows.com Domain Hit with Bit-flipping

• The Biden Administration Considers Cybersecurity a Top Priority for National Security

• Global Air Transport Giant SITA Confirms Security Breach

• (VIDEO) Getting Started With Duo – Step 2: Enrollment & Self-Remediation

• Report: Russian Hackers Exploit Lithuanian Infrastructure

• NSA, DHS Issue Guidance on Protective DNS

• Reblaze Rolls Out Managed Reverse Proxy Security Service

• A Technical Approach to Data Loss Prevention (DLP)

• Rising Demand for DDoS Protection Software Market By 2020-2028

• How Does Ransomware Spread Globally?

• YouTube CEO Outlines Criteria To Restore Donald Trump Account

• Avast Identifies Ursnif Malware Victims | Avast

• Trend Micro: Remote work drove high-risk email threats up 32% in 2020

• FTC joins 38 states in takedown of massive charity robocall operation

• Supermicro, Pulse Secure Respond to Trickbot’s Ability to Target Firmware

• Trace An Object initiative expands to the Asia Pacific region

• Weekly Update 233

• ISC Stormcast For Friday, March 5th, 2021 https://isc.sans.edu/podcastdetail.html?id=7400, (Fri, Mar 5th)

• Microsoft Edge 89 Brings Vertical Tabs and New History View

• 15 Schools Hit By Cyberattack In Nottinghamshire

• SECURITY ALERT: Microsoft released emergency fixes for 4 Zero-Days in Exchange

• Colorado-Based Sengrid Email Marketing Company Accounts Were Hacked

• CISSPs from Around the Globe: An Interview with Chris Clinton

• Top Reasons Behind the VPN Pricing and How to Save When Buying

• The Coding Challenge Most Developers Overlook

• Be a Hero at Home: Why you Should Become a Certified Ethical Hacker

• SolarWinds: “IT’s Pearl Harbor.”

• Salesforce’s LinkedIn Account Hijacked With Black Lives Matter Post

• $100 in crypto for a kilo of gold: Scammer pleads guilty to investor fraud

• South Africa Opposes WhatsApp-Facebook Data Sharing

• Three New Malware Strains Linked to SolarWinds Hackers

• Docker Hub and Bitbucket Resources Hijacked for Crypto-Mining

• Managed Services provider CompuCom by Darkside ransomware

• What is a Remote Access Trojan (RAT)?

• Best practices for Securing Office 365 against pervasive cloud collaboration risks

• Virginia data protection bill signed into law

• Amazon Goes Till-Less With Grocery Store In London

• FCW Insider: March 5

• Microsoft Exchange zero-day vulnerabilities exploited in attacks against US local governments

• While Reg readers know the difference between a true hacker and cyber-crook, for everyone else, hacking means illegal activity

• Fraudsters Circumvent 3D Secure with Social Engineering

• Mazafaka — Elite Hacking and Cybercrime Forum — Got Hacked!

• Google Cloud Certifications — Get Prep Courses and Practice Tests at 95% Discount

• Microsoft Visual Studio Code Updated With Official Apple Silicon Support

• Twitter Reportedly Working on ‘Undo Send’ Feature for Tweets

• Dutch government: Did we say 10 ‘high data protection risks’ in Google Workspace block adoption? Make that 8

• Cyberattack shuts down online learning at 15 UK schools

• Someone Is Hacking Cybercrime Forums and Leaking User Data

• SITA Supply Chain Breach Hits Multiple Airlines

• Wi-Fi Mouse Application Detected with Bug

• Researchers Find 3 New Malware Strains Used by SolarWinds Hackers

• Apple Pay Promo Offers 10% Back in Bed Bath & Beyond Rewards

• Cybercriminals Finding Ways to Bypass 3D Secure

• Decentralizing Cloud Security Management

• Five privilege escalation flaws fixed in Linux Kernel

• Apple Held Top Spot in Global Smartwatch Market in Q4 2020, Shipping 13 Million Apple Watch Series 6 and SE Models

• In battle with U.S., China to focus on 7 ‘frontier’ technologies from chips to brain-computer fusion

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• It’s an Amazing Time to Be in Digital Identity

• Zero-Trust in a Trusting World

• Spam Farm Spotted in the Wild, (Fri, Mar 5th)

• DarkSide Ransomware targets CompuCom Systems

• Cyber Attack on Indian Stock Exchange

• Breach Trends & Insights – February 2021

• Risky business: 3 timeless approaches to reduce security risk in 2021

• March 2021 Patch Tuesday forecast: Off to an early start

• Cybersecurity risks and challenges facing the financial industry

• Microsoft rushes out fixes for four zero‑day flaws in Exchange Server

• Cybercriminals increasingly impersonate business-related apps

• Credential exposure trends: You need a better password

• Biden administration labels China top tech threat, promises proportionate responses to cyberattacks

• OLED 10.9-Inch iPad Rumored for Early 2022, 12.9-Inch iPad Pro and 16-Inch MacBook Pro Could Follow

• CrowdStrike Falcon platform enhancements improve SOC efficiency

• In the digital economy, computing power defines productivity

• To support a growing remote workforce, the public sector turned to the cloud

• China spending on research and development to rise 7% per year in push for major tech breakthroughs

• Attackers Utilized Weaponized Microsoft Office Documents to Deliver ObliqueRAT

• Kaspersky detected new ransomware attack on Russian companies

• Attivo offers solution for preventing the misuse of Active Directory

• Awake’s NDR platform strengthens cybersecurity across cloud, hybrid and IoT environments

• BrandPost: How to Cope with Disruptive Shifts in Cyberattacks

• Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities

• Samsung Electronics, Mastercard and Samsung Card develop fingerprint biometric payment card

• Unbound Security CORE enables enterprises to reimagine cryptographic infrastructure security

• Siren 11.1 simplifies everyday tasks for the analyst and business user

• SIRP’s SOAR platform helps organizations reduce incident response time

• Serverless and PaaS Security with CloudPassage Halo

• China’s and Russia’s Spying Sprees Will Take Years to Unpack

• Developers Start Receiving $500 Credits for Returning DTK Mac Minis

• OSSA introduces Camera Cyber Security Specification and App Developer Council

• GPY241 expands MaxLinear’s portfolio of Ethernet physical layer transceivers and switches

• CoreView add-on tool gets deeper insight into Microsoft Teams

• Under new law, NIST looks to map out vulnerability disclosure policies for government

• IDnow acquires identity Trust Management AG to expand portfolio of verification methods

• Tyto Athene to acquire AT&T Government Solutions

• Blumira and Cerium Networks simplify threat detection and response

• IOTech Edge XRT: A time-critical edge platform for Microsoft Azure Sphere

• Discussing SolarWinds hack, FireEye CEO says US is ‘playing defense’ in cyberspace

• Fireeye CEO on state of cyberthreats: ‘I’ve never seen anything like it’

• Video: Folding@Home Director Dr. Gregory Bowman | Avast

• Rebuild security and compliance foundations with automation

• Business Apps Spoofed in 45% of Impersonation Attacks

• White-Label Marketplace helps resellers automate their cloud business

• IBM expands executive team for NewCo

• Cyber Defense Labs names Marla Beckham as Chief Financial Officer

Generated on 2021-03-06 23:55:19.804871