IT Security News Daily Summary 2021-03-08

• European Banking Authority victim in Microsoft Exchange Server hack

• TAU Threat Advisory: Microsoft Exchange Servers Targeted with Four Zero-day Exploits

• Crypto-Miner Campaign Targets Unpatched QNAP NAS Devices

• Newest Intel Side-Channel Attack Sniffs Out Sensitive Data

• How the Microsoft Exchange hack could impact your organization

• McAfee Sheds Enterprise Business in $4 Billion Deal

• Microsoft releases tools as Exchange Server attacks increase

• HAFNIUM and SolarWinds Attacks Highlight Lack of Accountability

• iMac Pro Now Listed as ‘Currently Unavailable’ in U.S. and Canada

• SMBs need to take immediate action on Microsoft Exchange vulnerabilities

• Biden looks to expand time off for feds to vote

• McAfee to offload enterprise business for $4bn, focus on consumer security

• FluBot Android malware mimics FedEx, Chrome apps to steal user data

• How McAfee’s Inclusive Maternity Benefits Helped Me Thrive as a New Mom

• Shiva’s Tragic Accident Turns into a Story of Resilience

• How a Group of McAfee Team Members Helped Change the Lives of Critically Ill Children

• Hackers Target Texas University

• Virginia Passes New Data Protection Law

• Aqua Security Details Docker Hub, Bitbucket Cryptojacking Attack

• Introduction to Sigma Rules and Detection of Credential Harvesting

• Volexity’s Adair on MFST hack: Afraid of ransomware attack next

• How companies can prevent future hackings, according to former NSA hacker

• Opportunistic Exploitation of Microsoft Exchange Vulnerabilities Growing

• Exchange 0-day attacks: Hundreds of Thousands of Exchange Servers Affected

• Pulse Secure and SuperMicro Announce Trickboot Vulnerabilities

• Celebrate And Support Women This March | Avast

• TiG Acquires ThirdSpace

• Supermicro and Pulse Secure Issue Advisories Regarding ‘TricBoot’ Assaults

• YARA and CyberChef, (Mon, Mar 8th)

• Apple Releases watchOS 7.3.2 With Security Updates

• Apple Releases iOS and iPadOS 14.4.1 With Security Fixes

• Apple Releases macOS Big Sur 11.2.3 With WebKit Security Fix

• Facebook Suspended Trump. The Oversight Board Shouldn’t Let Him Back.

• Washington: Everyone Deserves Reliable Internet

• International Women’s Day: How to support and grow women in cybersecurity

• Why the network compass is obsolete

• McAfee sells its enterprise business to private equity group as it focuses on consumer security

• Do I need a VPN if I have https? A reader question, answered

• Fake Google reCAPTCHA Phishing Attack Swipes Office 365 Passwords

• Firefox Total Cookie Protection comes to mobile and desktop versions

• The Edge Pro Tip: Proceed With Caution

• Vulnerability Summary for the Week of March 1, 2021

• UnityMiner targets unpatched QNAP NAS in cryptocurrency mining campaign

• The FBI Should Stop Attacking Encryption and Tell Congress About All the Encrypted Phones It’s Already Hacking Into

• White House juggles response to both Microsoft and SolarWinds hack

• Kara Swisher: U.S. needs to hone cybersecurity defenses

• Russian Hackers Exploited Lithuanian Infrastructure to Launch Cyber-attacks

• The Key to Firmware Security in Connected IoT Devices | Keyfactor

• HackerOne touts enterprise growth as bug bounties aid digital transformation

• WhatsApp Will Let iPhone Users Protect iCloud Backups with a Password

• A Basic Timeline of the Exchange Mass-Hack

• McAfee Agrees Deal to Sell Enterprise Business for $4bn

• Hacked SendGrid Accounts used In Phishing Attacks To Steal Logins

• A Call to Arms In Favor of Rationality

• MWC Barcelona Conference Planning for 50,000 In-Person Attendees in June

• Deals: New Sales Hit Apple Watch Series 6 GPS and Cellular Models (Save Up to $69)

• What is Extended Detection and Response (XDR)?

• Smart phones that get Android security updates at the earliest

• 3 Alarming Home Tech Cybersecurity Vulnerabilities

• Multiple Linux Kernel Vulnerabilities Could Allow Privilege Escalation

• Air Transport Technology Giant SITA Suffered Data Breach Impacting Several Airlines

• Dalfox – An Automated XSS Finder

• How vaccine-related phishing attacks are posing a greater threat to organizations

• Retailers battle bots as new Yeezy shoes debut in March

• FINRA Warns of Ongoing Phishing Attacks Targeting Brokerage Firms

• Naked Security Live – ICU: How much do your home-working photos give away?

• Why Data Privacy Should Be on President Biden’s Agenda for His First 100 Days

• Hackers compromised Microsoft Exchange servers at the EU Banking Regulator EBA

• European Banking Authority Hit By Microsoft Exchange Hack

• Intel, DoD Start Sprint To Make Homomorphic Encryption Ready For Real

• Ten Of Thousands Of Orgs Hit In Ongoing Exchange Hack

• Supernova Malware Links Chinese Group To SolarWinds Hack

• Prague Was The Victim of a Massive Cyberattack

• Nottinghamshire Secondary Schools Have Suspended Online Learning Following Cyber Attack

• U.S. reportedly prepares action against Russia after major cyberattack

• Intel, Microsoft join DARPA effort to accelerate fully homomorphic encryption

• McAfee ATR Thinks in Graphs

• Innovation Through Diverse Thinking: Amplifying Gender Diversity and Shrinking the Skills Gap

• Women in Security Part 1: Meet Taree Reardon, Senior Threat Analyst

• Everything you need to know about the Microsoft Exchange Server hack

• Work from home? Things I wish someone had told me before I started

• Supernova malware clues link Chinese threat group Spiral to SolarWinds server hacks

• DARPA taps Intel to help build the holy grail of encryption

• Idaho Man Charged With Hacking Into Computers in Georgia

• Snort Vulnerability Leads Various Cisco Products Exposed to Vulnerabilities

• Lifting Each Other Up: A Celebration of Women in Cybersecurity and Their Advocates – Part 2

• CyGlass and Ingram Micro Cloud Join Forces to Address Growing Cybersecurity Market in Australia and New Zealand

• Apple TV+ Announces Partnership With Nobel Peace Prize Winner Malala Yousafzai

• International Women’s Day: the road towards equality is still long for the cybersecurity industry

• 16-28 February 2021 Cyber Attacks Timeline

• Duo’s Object Oriented UX (OOUX) Design Process

• Joanne Lipman on what the Microsoft email hack reveals about U.S. preparedness

• PayPal is acquiring crypto security company Curv for less than $200 million

• University of the Highlands and Islands shuts down campuses as it deals with ‘ongoing cyber incident’

• Celebrating Women in Cybersecurity and Committing to Diversity, Equity and Inclusion

• Cloud Native Tools Series Part 2: Understand Your Responsibilities

• Everything you need to know about Microsoft Exchange Server hack

• EU Banking Regulator Hit by Microsoft Email Hack

• Ukrainians Extradited to U.S. for Providing Money Laundering Services to Cybercriminals

• Disruptions at Pan-American Life Likely Caused by Ransomware Attack

• CISA Offers IT Admins Guidelines to Mitigate Recent MS Exchange Vulnerabilities

• StrikeForce Announces Commercial Availability of Video Conferencing Platform SafeVchat™ to Protect the Hybrid-Workforce From Hackers and Data Breaches

• Microsoft updated MSERT to detect web shells used in attacks against Microsoft Exchange installs

• Apple Launching New ‘Kids & Family’ Experience in Podcasts App

• Deals: Get Apple’s 12.9-Inch Magic Keyboard for New Low Price of $249.99 ($99 Off)

• REvil Ransomware Group Threatens to Launch DDoS Attacks, Call Journalists and Business Partners

• Outspread SITA Security Breach Exposes More Airlines

• White House juggling response to Microsoft, SolarWinds hacks

• Op-ed: The movie ‘I Care A Lot’ can teach us how to prevent elder financial abuse

• International Women’s Day: Women in tech name their heroes

• A week in security (March 1 – 7)

• International Women’s Day: Women in Cybersecurity

• Microsoft Awarded $50k Bounty For Reporting An Account Hijack Vulnerability

• Pay Attention to Your Online Security Before It’s Too Late

• CompuCom Services Fell Prey To DarkSide Ransomware Attack

• We are celebrating International Women’s Day all month long!

• How Secure Is Linux?>

• McAfee sells its enterprise cybersecurity business to private equity firm for $4B

• Microsoft Exchange zero-day attacks: 30,000 servers hit already, says report

• Why adding neurodiversity to the cybersecurity world is a win-win for companies and employees

• Cybersecurity M&A Roundup for Week of Mar. 1, 2021

• The Accellion Breach Keeps Getting Worse—and More Expensive

• Iranian Hackers Using Remote Utilities Software to Spy On Its Targets

• Hacking Digitally Signed PDF Files

• REvil Ransomware Group Threatens to Launch DDoS Attacks, Call Reporters and Business Partners

• SolarWinds just keeps getting worse: New strain of malware found infecting victims

• White House Appoints Big Tech Critic Tim Wu As Adviser

• Researchers Identify More Malware Used By SolarWinds Hack Group

• Cybersecurity in 2021: Stopping the madness

• 6 security risks in software development and how to address them

• Linus Torvalds warns: Watch out for this unusually nasty bug in Linux 5.12 rc1

• Airlines warn passengers of data breach after aviation tech supplier is hit by cyberattack

• McAfee Faces Decades Behind Bars After Fraud Indictment

• Malware Can Exploit New Flaw in Intel CPUs to Launch Side-Channel Attacks

• WhatsApp Still Working on Password-Protected Encrypted iCloud Backups

• Non-Profit Organization Oxfam Australia Was The Victim of a Recent Data Breach

• ​3 Major Cybersecurity Mistakes Your Business Needs To Avoid Making

• 4 ways to keep the cybersecurity conversation going after the crisis has passed

• John McAfee Indicted Over Cryptocurrency Fraud

• What Should You Know About Cloud Security Solutions?

• FCW Insider: March 8

• FTC Busts $110m Charity Fraud Operation

• Cute, but deadly: law enforcement seize over €16 million worth of fake toys

• Microsoft Exchange Cyber Attack — What Do We Know So Far?

• Leaker Suggests Apple Event to Be Held on March 23

• The torture garden of Microsoft Exchange: Grant us the serenity to accept what they cannot EOL

• US Issues Warning Over ‘Far-Reaching’ Microsoft Email Hack

• Instacart Considers Direct Listing After Major Funding Round

• Coursera Files To Go Public As Revenues Surge

• Silicon UK In Focus Podcast: International Women’s Day

• White House warns of ‘active threat’ following Microsoft Outlook breach

• Flagstar Bank customer data breached through Accellion hack

• #IWD2021: Pandemic Fails to Shatter Glass Ceiling for Women in Cyber

• BEC Scammer Infects own Device, Exposes their Activity

• Researcher Laxman Muthiyah Awarded with $50,000 for Detecting a Flaw in Microsoft Account

• Oppo Shows ‘Expanding Phone’ Prototype

• Diversifying the Cybersecurity Workforce this International Women’s Day

• 3 Hiking Principles That Made Me a Better CISO

• Trying to register your antivirus in Windows Security Center?

• Police and customs authorities worldwide are warning the public to be vigilant with their gift-giving after they have seized over €16 million worth of fake toys during the recent festive period.

• Keep Your Eye on the Camera

• The launch of Williams new FW43B car ruined by hackers

• How do I select a SOAR solution for my business?

• Starting your cybersecurity career path: What you need to know to be successful

• Cloud Misconfiguration leads to data exposure of Android and iOS users

• China email hack on Microsoft Exchange victimizes 50 companies

• Number of ransomware attacks grew by more than 150%

• Security awareness programs: The difference between window dressing and behavior change

• The Humanity and Evolution of Cyber

• Trends that will influence remote work in 2021 and beyond

• Digital-first lifestyle opens consumers to potential risks during tax season

• US National Security Council urges review of Exchange Servers in wake of Hafnium attack

• Linux Kernel Vulnerability that Allows Local Attackers to Escalate Privileges

• eSafety defends detail of Online Safety Bill as the ‘sausage that’s being made’

• ISC Stormcast For Monday, March 8th, 2021 https://isc.sans.edu/podcastdetail.html?id=7402, (Mon, Mar 8th)

• GoldMax, GoldFinder, and Sibot, are the 3 new Malwares Used by SolarWinds Hackers

• Apple TV+ Hit ‘Ted Lasso’ Wins Critics Choice Award for Best Comedy Series

• Senate votes to extend pandemic relief for contractors

• Casting a Wide Intrusion Net: Dozens Burned With Single Hack

• Tufin releases Vulnerability-Based Change Automation App

• Intel CPU interconnects can be exploited by malware to leak encryption keys and other info, academic study finds

• Strata Maverics Identity Orchestrator extends Azure AD control to on-premise applications

• A CTF Example Shows You the Easy and Powerful One Gadget Tool

• Poison packages – “Supply Chain Risks” user hits Python community with 4000 fake modules

• GSMA’s ISAG Group adds iconectiv’s CTO to help oversee global telecom industry

• John Morgan joins Confluera as CEO

• PCAPs and Beacons, (Sun, Mar 7th)

• IT Security News Weekly Summary – Week 09

• IT Security News Daily Summary 2021-03-07

• John McAfee Charged with Fraud in Cryptocurrency Scam

• BSides Calgary 2020 -Scott Taylor’s ‘Exploring Common Hacking Techniques’

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comics – ‘WEEK 319’

• Chinese hackers allegedly hit thousands of organizations using Microsoft Exchange

• Call the Doctor! mHealth Apps are Exposing Medical Records

• Working from Home? You’re Not Alone

• Overcoming ‘Work from Home’ Security Challenges Security Beyond the VPN

• BSides Calgary 2020 – Rick Kaun’s ‘Think Global, Act Local In OT Security’

• 9 Ways to Prevent Third-Party Data Breaches

• Kuo: Apple May Release Augmented Reality Contact Lenses in 2030s

• Lessons for Reintegrating Islamic State Detainees

• Customer Spotlight: Managing Uploads to Non-Traditional Applications

• Brave Browser is About to Launch its Own Search Engine

• Thousands of U.S. Organizations Attacked in a Chinese Cyber-Espionage Campaign

• Pandemic Unmasks Vulnerability to Automated Bot Attacks

• Kuo: Apple to Launch Mixed Reality Headset in Mid 2022 and Augmented Reality Glasses by 2025

• U.S. DOJ warns of fake unemployment benefit websites stealing data

• Google Fixes A Chrome Zero-Day Bug Under Active Exploitation

• Russia-linked APT groups exploited Lithuanian infrastructure to launch attacks

• Creator of McAfee Antivirus Software Charged For Conspiracy?

• F1 Team Williams Unveils New Car After Hackers Foil Launch

• How to Tell Which Emails Quietly Track You

• Privacy-First Browser Brave Is Launching a Search Engine

• Security Affairs newsletter Round 304

• AC.1.001 Basic Security Requirements (CMMC Level 1)

• REvil Ransomware gang uses DDoS attacks and voice calls to make pressure on the victims

• Week in review: Exchange Servers under attack, disinformation economics, Patch Tuesday forecast

• Doosra is Helping to Create an Alternative Digital Identity

• Active Email Threat from Microsoft Hack, Warns White House

• Worldwide Hack: Microsoft Exchange Server Zero-day Exploits

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Penetration testing

• Data from the Russian cybercriminal forum Maza (Mazafaka) leaked to the network

• New World – New Opportunities – New Offices

• Why Developer-first IAM, and Why Okta’s Auth0 Acquisition Matters

• The What, Why, and How of API Penetration Testing

• SAP Cybersecurity in an Age of Uncertainty

• The ROI in Preventing Cybersecurity Breaches

• Extended Detection and Response (XDR)

• Microsoft Exchange Server Vulnerabilities Mitigations – updated March 6, 2021

Generated on 2021-03-08 23:55:24.531967