IT Security News Daily Summary 2021-03-09

• Sarbloh ransomware aims at supporting Indian Farmers’ Protest

• Space Force seeks central portal for application development

• A global semiconductor shortage highlights a troubling trend

• Unlocking the mysteries of science with Linux containers

• Hafnium hack poses extended threat

• Agencies on track for data center optimization

• Dark Web Markets for Stolen Data See Banner Sales

• Warning the World of a Ticking Time Bomb

• Phishing, Scam, & Marketing Emails: What’s the Difference?

• MetalBallStudios: Size Of The Internet – Bytes In Perspective

• Another French hospital hit by a ransomware attack

• Sonos Unveils Portable $169 Roam Speaker With AirPlay 2, Sound Swap, and More

• Introducing sigstore: Easy Code Signing & Verification for Supply Chain Integrity

• Seven Windows Wonders – Critical Vulnerabilities in DNS Dynamic Updates

• Why MITRE ATT&CK Matters?

• Martorana to take over as federal CIO

• Microsoft’s March Patch Tuesday: Critical remote code execution flaws, IE zero-day fixed

• Fastest VPN in 2021

• Adobe releases batch of security fixes for Framemaker, Creative Cloud, Connect

• Adobe Critical Code-Execution Flaws Plague Windows Users

• Microsoft Exchange Server attacks: What we know so far

• Report: Medical Misinformation Has Been Spreading On Facebook For Years Despite Policies

• Linux Foundation Debuts Sigstore Project for Software Signing

• Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities

• Microsoft March 2021 Patch Tuesday, (Tue, Mar 9th)

• EFF to Supreme Court: States Face High Burden to Justify Forcing Groups to Turn Over Donor Names

• Microsoft hack was looking for target whereas SolarWind had a target: Pro

• Microsoft Exchange attacks cause panic as criminals go shell collecting

• Abode launches $35 Abode Cam 2 security camera

• UVMask by UM Systems: COVID-19 protective gear for the present, and future

• Microsoft Ships Massive Security Patch Bundle

• Vodafone Calls for New Cybersecurity Policies to Help SMEs

• Arkansas Bill Addresses “Unfair” Social Media Censorship

• Dark Reading ‘Name That Toon’ Winner: Gather ‘Round the Campfire

• Who’s Hacking You?

• 3 Ransomware Myths Businesses Need to Stop Believing ASAP

• Adobe Releases Security Updates

• XKCD ‘Vaccine Guidance’

• 10 Tips to Strengthen Your Insider Threat Program – Data, Intent and Context [Part 1]

• PerimeterX Named to Fast Company’s List of the World’s Most Innovative Companies for 2021

• Security Vulnerability in ‘Call Recorder’ App Exposed User Conversations

• Disney+ Now Has More Than 100 Million Subscribers

• Apple Releases New ‘3C39’ AirPods Max Firmware

• Here’s Merrick Garland’s Orientation Memo for the Trump-Era Hangover on Press Freedom

• Was SolarWinds a Different Type of Cyber Espionage?

• March 2021 Patch Tuesday: Microsoft fixes yet another actively exploited IE zero-day

• US newspaper’s ‘Biden will hack Russia’ claim: A good way to reassure Putin you’ll leave him alone

• Android users hit by banking trojan in 10 Play Store apps

• Adobe Patches Code Execution Flaws in Connect, Creative Cloud, Framemaker

• Breach Clarity Acquired by Sontiq

• FTC Urged to Enforce Rules that Protects User Health Data Shared with Fertility Apps

• U.S. Department of Justice Warns of Fake Unemployment Benefits Websites Stealing Data

• 48% of Security Pros Prohibited From Intelligence-Sharing

• Huge Fallout from Microsoft Incompetence: Let’s Exchange Exchange

• Octane X GPU Renderer Comes to Mac App Store

• T-Mobile Automatically Opting Customers In to Expanded Data Collection Program for Targeted Ads

• Apple Planning Switch to Randomized Serial Numbers for Future Products Starting in ‘Early 2021’

• Best Mac cleaner: Favorite cleaning and optimization tools

• Top 5 things to know about messaging apps

• Apple Patches Remote Code Execution Bug in WebKit

• Third French Hospital Hit by Cyberattack

• Leaked Development Secrets a Major Issue for Repositories

• COVID-19 Contact-Tracing Apps Signal Broader Mobile App Security Concerns

• Apple Releases Security Updates

• Microsoft releases ProxyLogon patches for unsupported Microsoft Exchange versions

• Should You Buy a Super Cheap Refurbished iPhone From Amazon?

• BitSight Observations Into HAFNIUM: Part One

• Flagstar Bank Suffers Data Breach

• Scammers Are Already Targeting the Next Round of Coronavirus Relief Checks

• New Ransomware Encrypts Files in Support of Indian Farmers

• New free software signing service aims to strengthen open-source ecosystem

• Google Play Harbors Malware-Laced Apps Delivering Spy Trojans

• West Ham Supporters’ Personal Details Leaked on Club Website

• Sunshuttle, the Latest Strain Allegedly Linked to SolarWinds Hackers

• Belkin’s 2-in-1 MagSafe Charger for iPhone and AirPods Now Available for Pre-Order

• Apple Exploring Wider Use of Haptic Feedback on MacBooks

• GitHub Fixed a Bug impacting Authenticated Sessions

• Scholars Under Surveillance: How Campus Police Use High Tech to Spy on Students

• Insurance CEOS warn of rapid cost increases from cyber losses

• Azure LoLBins: Protecting against the dual use of virtual machine extensions

• Symphony Technology to acquire Cybersecurity Firm McAfee for $4 billion

• Best Route Optimization Software in 2021

• NetApp AI open-source software and tools

• Privacera raises $50M to help companies manage compliance and security risk across clouds

• Best VPN service in 2021: Safe and fast don’t come free

• Apple Plugs Severe WebKit Remote Code-Execution Hole

• Vulnerability That Allows Complete WordPress Site Takeover Exploited in the Wild

• Look to Banking as a Model for Stopping Crime-as-a-Service

• Microsoft Pushes Patches for Older Versions of Exchange Server

• Cisco Email Security Expands, Simplified to Detect More Threats, Stop More Attacks

• What is NoSQL Injection Attack and How to Prevent It?

• Reflections on 2020 security vulnerabilities

• Microsoft’s Crazy Huge Hack, Explained

• Emails Show Shadow Structure Behind Encrochat

• Malicious Apps On Google Play Dropped Banking Trojans On User Devices

• Chinese Hackers Targeted SolarWinds Customers In Parallel With Russian Op

• Twitter Executive on Super Follows and Apple’s Subscription Fees: ‘We’re Not in the Business of Getting Around Platform Rules’

• 12.9-Inch iPad Pro With Mini-LED Display Said to Launch as Soon as Late March

• Five Ways Bad Bots Are Threatening Financial Services

• Patch Tuesday, March 2021: Microsoft Releases Several Out-of-Band Patches for Windows Exposures, Including Four Documented Zero-Day Server Exchange Vulnerabilities

• Zero Day Attack 101: What It Is and How to Deal with It

• US Bank and Mortgage Lender Flagstar Victim of a major data breach

• European Banking Authority Reveals Microsoft Exchange Hack

• And the 2021 Cybersecurity Excellence Awards Go To …

• Have You Taken Our LinuxSecurity User Survey?>

• Why the Demand for Application Development Security Skills Is Exploding

• Bug bounties: More hackers are spotting vulnerabilities across web, mobile and IoT

• How the SolarWinds attack may affect your organization’s cybersecurity

• Intel to Speak at SecurityWeek Supply Chain Security Summit on March 10th

• Siemens Releases Several Advisories for Vulnerabilities in Third-Party Components

• Protection and Privacy Pivotal to the UK’s National Data Strategy

• Representative of the Russian Foreign Ministry announced the need for universal regulation of the Internet

• How to Quickly Integrate your SD-WAN with Bitglass

• Is MFA a Security Illusion?

• Cloud Entitlements Are the New Security Perimeter: Wipro State of the Cybersecurity Report 2020

• Apple fixes CVE-2021-1844 RCE that affects iOS, macOS, watchOS, and Safari

• The Broader Application of Pentesting Skills

• Apple Highlights Women’s Health Study Data to Help ‘Destigmatize Menstruation’

• Deals: Save Up to $150 on Apple’s 2020 iMac Lineup, Including Lowest Prices on 21.5- and 27-Inch Models

• Expert Insight On Indian state government website exposed COVID-19 lab test results

• More Than 1m Small Businesses ‘At Risk Of Collapse’ Due To Cyber Threats

• Unpatched QNAP NAS Devices Targeted by UnityMiner in Cryptocurrency Mining Campaign

• iPhone, iPad and Mac security: Apple releases fixes for bug that could allow code execution via malicious web content

• European Banking Authority restores email service in wake of Microsoft Exchange hack

• Huge Rise in Hackers Submitting Vulnerabilities During #COVID19

• Experts On Elara Caring Discloses Data Breach

• February 2021 Cyber Attacks Statistics

• Secure Access to Your Google Chrome Enterprise With Duo

• 6 Tips to Integrate Security into Agile Application Development

• New Crypto-Miner Campaign Targets QNAP NAS Devices via the Unauthorized RCE Vulnerability

• GitGuardian data reveals 20% rise in ‘secrets’ hidden in public GitHub repos

• GitHub Informs Users of ‘Potentially Serious’ Authentication Bug

• Serious Security: Webshells explained in the aftermath of HAFNIUM attacks

• Veriff Appoints Duncan Steblyna as New VP of Product

• Guardian: Truecaller Fixes Location Vulnerabilty In Its New App

• Spying on your Exchange Server

• TrendForce: Apple Overtook Samsung to Become World’s Largest Smartphone Maker in Fourth Quarter

• Apple Set to Begin iPhone 12 Production in India

• QNAP storage devices hijacked by UnityMiner cryptocurrency malware

• GitHub bug invalidated users’ sessions and logged them out of their accounts

• EU Aims To Boost High-End Semiconductor Production

• Analyst: Apple AR Headset Could Arrive ‘Next Year’

• Microsoft Exchange attacks: Now Microsoft rushes out a patch for older versions of Exchange

• Microsoft Exchange server hack: Banking agency on ‘heightened alert’ after cyberattack

• Malicious apps on Google Play dropped banking Trojans on user devices

• 10 Google Play Apps Found Containing Banking Malware

• 9 Android Apps On Google Play Caught Distributing AlienBot Banker and MRAT Malware

• Microsoft Exchange Server Hack

• Sarbloh ransomware supports Indian Farmers

• How to patch Exchange Server for the Hafnium zero-day attack

• Deliveroo To Hand Some Riders £10,000 Bonuses

• Tesla Share Slide Wipes £200bn Off Market Capitalisation

• Data Privacy Legislation Update | Avast

• Dangerous Malware Dropper Found in 9 Utility Apps on Google’s Play Store

• FCW Insider: March 9

• Quick Hits

• Microsoft Exchange attacks: Now Microsoft rushes out a patch for these unsupported Exchange servers, too

• So it appears some of you really don’t want us to use the word ‘hacker’ when we really mean ‘criminal’

• DARPA Ramps-Up FHE Encryption Project with Intel

• The Microsoft Exchange Server mega-hack – what you need to know

• Seizure of €14 million worth of contraband cigarette leads to 13 arrests in Danish-Dutch sting

• Cybersecurity Webinar — SolarWinds Sunburst: The Big Picture

• Migrating Spring Boot Applications to AWS Lambda with No Code Change

• Don’t run that code

• Apple’s Personalized Ads System Targeted in Privacy Complaint to French Data Regulator

• (ISC)² 2021 Security Congress to focus on cybersecurity challenges across regions

• Google ‘Recommended Therapy’ Following Racism Complaints

• Isle Of Wight Drone Medical Delivery Trials Set To Continue

• UnityMiner cryptocurrency malware hijacks QNAP storage devices

• Flaws in Apple Location Tracking System Could Lead to User Identification

• NCSC: Don’t Fall for Mother’s Day Scams This Week

• SolarWinds Hack — New Evidence Suggests Potential Links to Chinese Hackers

• European Banking Authority Compromised By Exchange Hackers

• SITA Data Breach Exposes Numerous Airlines

• Google reCAPTCHA used by Phishing Attackers

• Microsoft Exchange Hackers Also Breached European Banking Authority

• Secure Offboarding Best Practices

• SUPERNOVA backdoor that emerged after SolarWinds hack is likely linked to Chinese actors

• Imperva recognized for Performance in The Forrester Wave™: DDoS Mitigation Solutions, Q1 2021 Report

• Application security testing is not just buzzwords

• U.S. issues warning after Microsoft says China hacked its mail server program

• Apple Issues Patch for Remote Hacking Bug Affecting Billions of its Devices

• Stop Password Reuse by Going Passwordless

• Kuo: 2023 iPhones to Feature ‘Periscopic’ Telephoto Lens

• Keeping your serverless architecture secure

• GitHub bug briefly gave valid authenticated session cookies to wrong users

• Bitglass achieves FedRamp Cloud Security compliance through StackArmor

• Biden to launch cyber attack task force against adversaries

• Intel joins DARPA in search of encryption ‘holy grail’

• Going dark: Service disruptions at stock exchanges and brokerages

• Women in cybersecurity: Gender gap narrows but not enough

• Azure flings out free virtual trusted platform module for cloudy VMs

• Kuo: Apple’s Upcoming Mixed Reality Headset to Feature 15 Camera Modules

• 49% of female cybersecurity pros say the pandemic had a positive impact on their career

• A great deal of employees have inappropriate access to sensitive data

• Compliance – The Invisible Hand of Cybersecurity

• Ghidra 101: Loading Windows Symbols (PDB files)

• Microsoft Server Hack Has Victims Hustling to Stop Intruders

• New Side-Channel Attack Targets Intel CPU Ring Interconnect

• 451 Research Shows Security is #1 Challenge to Cloud Adoption

• 5G slicing will generate $20 billion in revenue

• Only 12% of enterprises have fully embraced SASE

• ISC Stormcast For Tuesday, March 9th, 2021 https://isc.sans.edu/podcastdetail.html?id=7404, (Tue, Mar 9th)

• McAfee sells its Enterprise business for $4 billion

• eBook: Protecting Active Directory

• Avaya announces devices designed to improve workstream collaboration

• Intel partners with DARPA to perform in Data Protection in Virtual Environments program

• Hafnium hack poses new long-term threat for already overtaxed cyber workers

• Intel Corp. to Speak at SecurityWeek Supply Chain Security Summit

• Microsoft supports Paysafe’s move to cloud-based services

• Airspan enters into agreement with NBA to expand 5G market

• Apple emits patches for iOS, macOS, Safari, etc to stop dodgy websites hijacking people’s gadgets

• What Is It Like to Be an Ethical Hacker?

• CISA Strongly Urges All Organizations to Immediately Address Microsoft Exchange Vulnerabilities

• How to Disable Tab Previews in Safari on Mac

• BMW CFO on Apple Car: ‘Competition is a Wonderful Thing’

• Bitglass receives FedRAMP Moderate ATO for their Total Cloud Security Platform

• AMS partners with Revature enabling organizations to compete in the future of work

• A contractor calls for hiring more techies in-house

• TMF set to receive $1B infusion in COVID relief bill

• Microsoft Exchange Server attack hits local governments

• McAfee to Sell Enterprise Business to Equity Firm STG for $4B

• KnowBe4 Buys Competitor MediaPRO

• iMac Pro Now Listed as ‘Currently Unavailable’ in U.S. and Canada [Update: Back in Stock]

• Apple TV+ Show ‘Ted Lasso’ Nominated for Additional Awards

• Marianna Tessel joins Cisco board of directors

• EFF, ACLU and EPIC File Amicus Brief Challenging Warrantless Cell Phone Search, Retention, and Subsequent Search

• Google engineer urges web devs to step up and secure their code in this data-spilling Spectre-haunted world

• 2021-03-08 – Spelevo Exploit Kit (EK) pushes ZLoader malware

• Feeding Frenzy as criminal groups stake their claim on Outlook Web Access servers

• Vague contract language hampers cybersecurity for weapons systems, GAO says

• Achieving air-tight cybersecurity with KVM

• DARPA picks teams to bring homomorphic encryption to life

• Ezviz C3X outdoor security camera review: Simple setup, superb features

• Security chaos engineering helps you find holes in your cyber defenses before hackers do

• Facebook Is Grilled About The Role Of Weapons Ads In Jan. 6 Riot

• Intel, Microsoft Aim for Breakthrough in DARPA Encryption Project

• Microsoft Exchange Server Attack Escalation Prompts Patching Panic

• ‘Retaliation’ for Russia’s SolarWinds Spying Isn’t the Answer

• How Europe’s Intelligence Services Aim to Avoid the EU’s Highest Court—and What It Means for the United States

• Lawfare Live: War Powers in the Biden Administration

• IT Security News Daily Summary 2021-03-08

• European Banking Authority victim in Microsoft Exchange Server hack

• TAU Threat Advisory: Microsoft Exchange Servers Targeted with Four Zero-day Exploits

• Crypto-Miner Campaign Targets Unpatched QNAP NAS Devices

• Newest Intel Side-Channel Attack Sniffs Out Sensitive Data

• How the Microsoft Exchange hack could impact your organization

• McAfee Sheds Enterprise Business in $4 Billion Deal

• Microsoft releases tools as Exchange Server attacks increase

• HAFNIUM and SolarWinds Attacks Highlight Lack of Accountability

• iMac Pro Now Listed as ‘Currently Unavailable’ in U.S. and Canada

• SMBs need to take immediate action on Microsoft Exchange vulnerabilities

• Biden looks to expand time off for feds to vote

• McAfee to offload enterprise business for $4bn, focus on consumer security

• FluBot Android malware mimics FedEx, Chrome apps to steal user data

• How McAfee’s Inclusive Maternity Benefits Helped Me Thrive as a New Mom

• Shiva’s Tragic Accident Turns into a Story of Resilience

• How a Group of McAfee Team Members Helped Change the Lives of Critically Ill Children

• Hackers Target Texas University

• Virginia Passes New Data Protection Law

• Aqua Security Details Docker Hub, Bitbucket Cryptojacking Attack

• Introduction to Sigma Rules and Detection of Credential Harvesting

• Volexity’s Adair on MFST hack: Afraid of ransomware attack next

• How companies can prevent future hackings, according to former NSA hacker

• Opportunistic Exploitation of Microsoft Exchange Vulnerabilities Growing

• Exchange 0-day attacks: Hundreds of Thousands of Exchange Servers Affected

• Pulse Secure and SuperMicro Announce Trickboot Vulnerabilities

• Celebrate And Support Women This March | Avast

• TiG Acquires ThirdSpace

• Supermicro and Pulse Secure Issue Advisories Regarding ‘TricBoot’ Assaults

• YARA and CyberChef, (Mon, Mar 8th)

• Apple Releases watchOS 7.3.2 With Security Updates

• Apple Releases iOS and iPadOS 14.4.1 With Security Fixes

• Apple Releases macOS Big Sur 11.2.3 With WebKit Security Fix

• Facebook Suspended Trump. The Oversight Board Shouldn’t Let Him Back.

• Washington: Everyone Deserves Reliable Internet

• International Women’s Day: How to support and grow women in cybersecurity

• Why the network compass is obsolete

• McAfee sells its enterprise business to private equity group as it focuses on consumer security

• Do I need a VPN if I have https? A reader question, answered

• Fake Google reCAPTCHA Phishing Attack Swipes Office 365 Passwords

• Firefox Total Cookie Protection comes to mobile and desktop versions

• The Edge Pro Tip: Proceed With Caution

• Vulnerability Summary for the Week of March 1, 2021

• UnityMiner targets unpatched QNAP NAS in cryptocurrency mining campaign

• The FBI Should Stop Attacking Encryption and Tell Congress About All the Encrypted Phones It’s Already Hacking Into

• White House juggles response to both Microsoft and SolarWinds hack

• Kara Swisher: U.S. needs to hone cybersecurity defenses

• Russian Hackers Exploited Lithuanian Infrastructure to Launch Cyber-attacks

• The Key to Firmware Security in Connected IoT Devices | Keyfactor

• HackerOne touts enterprise growth as bug bounties aid digital transformation

• WhatsApp Will Let iPhone Users Protect iCloud Backups with a Password

• A Basic Timeline of the Exchange Mass-Hack

• McAfee Agrees Deal to Sell Enterprise Business for $4bn

• Hacked SendGrid Accounts used In Phishing Attacks To Steal Logins

• A Call to Arms In Favor of Rationality

• MWC Barcelona Conference Planning for 50,000 In-Person Attendees in June

• Deals: New Sales Hit Apple Watch Series 6 GPS and Cellular Models (Save Up to $69)

• What is Extended Detection and Response (XDR)?

• Smart phones that get Android security updates at the earliest

• 3 Alarming Home Tech Cybersecurity Vulnerabilities

• Multiple Linux Kernel Vulnerabilities Could Allow Privilege Escalation

• Air Transport Technology Giant SITA Suffered Data Breach Impacting Several Airlines

• Dalfox – An Automated XSS Finder

• How vaccine-related phishing attacks are posing a greater threat to organizations

• Retailers battle bots as new Yeezy shoes debut in March

• FINRA Warns of Ongoing Phishing Attacks Targeting Brokerage Firms

• Naked Security Live – ICU: How much do your home-working photos give away?

• Why Data Privacy Should Be on President Biden’s Agenda for His First 100 Days

• Hackers compromised Microsoft Exchange servers at the EU Banking Regulator EBA

• European Banking Authority Hit By Microsoft Exchange Hack

• Intel, DoD Start Sprint To Make Homomorphic Encryption Ready For Real

• Ten Of Thousands Of Orgs Hit In Ongoing Exchange Hack

• Supernova Malware Links Chinese Group To SolarWinds Hack

• Prague Was The Victim of a Massive Cyberattack

• Nottinghamshire Secondary Schools Have Suspended Online Learning Following Cyber Attack

• U.S. reportedly prepares action against Russia after major cyberattack

• Intel, Microsoft join DARPA effort to accelerate fully homomorphic encryption

• McAfee ATR Thinks in Graphs

• Innovation Through Diverse Thinking: Amplifying Gender Diversity and Shrinking the Skills Gap

• Women in Security Part 1: Meet Taree Reardon, Senior Threat Analyst

• Everything you need to know about the Microsoft Exchange Server hack

• Work from home? Things I wish someone had told me before I started

• Supernova malware clues link Chinese threat group Spiral to SolarWinds server hacks

• DARPA taps Intel to help build the holy grail of encryption

• Idaho Man Charged With Hacking Into Computers in Georgia

• Snort Vulnerability Leads Various Cisco Products Exposed to Vulnerabilities

• Lifting Each Other Up: A Celebration of Women in Cybersecurity and Their Advocates – Part 2

• CyGlass and Ingram Micro Cloud Join Forces to Address Growing Cybersecurity Market in Australia and New Zealand

• Apple TV+ Announces Partnership With Nobel Peace Prize Winner Malala Yousafzai

• International Women’s Day: the road towards equality is still long for the cybersecurity industry

• 16-28 February 2021 Cyber Attacks Timeline

• Duo’s Object Oriented UX (OOUX) Design Process

• Joanne Lipman on what the Microsoft email hack reveals about U.S. preparedness

• PayPal is acquiring crypto security company Curv for less than $200 million

• University of the Highlands and Islands shuts down campuses as it deals with ‘ongoing cyber incident’

• Celebrating Women in Cybersecurity and Committing to Diversity, Equity and Inclusion

• Cloud Native Tools Series Part 2: Understand Your Responsibilities

• Everything you need to know about Microsoft Exchange Server hack

• EU Banking Regulator Hit by Microsoft Email Hack

• Ukrainians Extradited to U.S. for Providing Money Laundering Services to Cybercriminals

• Disruptions at Pan-American Life Likely Caused by Ransomware Attack

• CISA Offers IT Admins Guidelines to Mitigate Recent MS Exchange Vulnerabilities

• StrikeForce Announces Commercial Availability of Video Conferencing Platform SafeVchat™ to Protect the Hybrid-Workforce From Hackers and Data Breaches

• Microsoft updated MSERT to detect web shells used in attacks against Microsoft Exchange installs

• Apple Launching New ‘Kids & Family’ Experience in Podcasts App

• Deals: Get Apple’s 12.9-Inch Magic Keyboard for New Low Price of $249.99 ($99 Off)

• REvil Ransomware Group Threatens to Launch DDoS Attacks, Call Journalists and Business Partners

• Outspread SITA Security Breach Exposes More Airlines

• White House juggling response to Microsoft, SolarWinds hacks

• Op-ed: The movie ‘I Care A Lot’ can teach us how to prevent elder financial abuse

• International Women’s Day: Women in tech name their heroes

• A week in security (March 1 – 7)

• International Women’s Day: Women in Cybersecurity

• Microsoft Awarded $50k Bounty For Reporting An Account Hijack Vulnerability

• Pay Attention to Your Online Security Before It’s Too Late

• CompuCom Services Fell Prey To DarkSide Ransomware Attack

• We are celebrating International Women’s Day all month long!

• How Secure Is Linux?>

• McAfee sells its enterprise cybersecurity business to private equity firm for $4B

• Microsoft Exchange zero-day attacks: 30,000 servers hit already, says report

• Why adding neurodiversity to the cybersecurity world is a win-win for companies and employees

• Cybersecurity M&A Roundup for Week of Mar. 1, 2021

• The Accellion Breach Keeps Getting Worse—and More Expensive

• Iranian Hackers Using Remote Utilities Software to Spy On Its Targets

• Hacking Digitally Signed PDF Files

• REvil Ransomware Group Threatens to Launch DDoS Attacks, Call Reporters and Business Partners

• SolarWinds just keeps getting worse: New strain of malware found infecting victims

• White House Appoints Big Tech Critic Tim Wu As Adviser

• Researchers Identify More Malware Used By SolarWinds Hack Group

• Cybersecurity in 2021: Stopping the madness

• 6 security risks in software development and how to address them

• Linus Torvalds warns: Watch out for this unusually nasty bug in Linux 5.12 rc1

• Airlines warn passengers of data breach after aviation tech supplier is hit by cyberattack

• McAfee Faces Decades Behind Bars After Fraud Indictment

• Malware Can Exploit New Flaw in Intel CPUs to Launch Side-Channel Attacks

• WhatsApp Still Working on Password-Protected Encrypted iCloud Backups

• Non-Profit Organization Oxfam Australia Was The Victim of a Recent Data Breach

• ​3 Major Cybersecurity Mistakes Your Business Needs To Avoid Making

• 4 ways to keep the cybersecurity conversation going after the crisis has passed

• John McAfee Indicted Over Cryptocurrency Fraud

• What Should You Know About Cloud Security Solutions?

• FCW Insider: March 8

• FTC Busts $110m Charity Fraud Operation

• Cute, but deadly: law enforcement seize over €16 million worth of fake toys

• Microsoft Exchange Cyber Attack — What Do We Know So Far?

• Leaker Suggests Apple Event to Be Held on March 23

• The torture garden of Microsoft Exchange: Grant us the serenity to accept what they cannot EOL

• US Issues Warning Over ‘Far-Reaching’ Microsoft Email Hack

• Instacart Considers Direct Listing After Major Funding Round

• Coursera Files To Go Public As Revenues Surge

• Silicon UK In Focus Podcast: International Women’s Day

• White House warns of ‘active threat’ following Microsoft Outlook breach

• Flagstar Bank customer data breached through Accellion hack

• #IWD2021: Pandemic Fails to Shatter Glass Ceiling for Women in Cyber

• BEC Scammer Infects own Device, Exposes their Activity

• Researcher Laxman Muthiyah Awarded with $50,000 for Detecting a Flaw in Microsoft Account

• Oppo Shows ‘Expanding Phone’ Prototype

• Diversifying the Cybersecurity Workforce this International Women’s Day

• 3 Hiking Principles That Made Me a Better CISO

• Trying to register your antivirus in Windows Security Center?

• Police and customs authorities worldwide are warning the public to be vigilant with their gift-giving after they have seized over €16 million worth of fake toys during the recent festive period.

• Keep Your Eye on the Camera

• The launch of Williams new FW43B car ruined by hackers

• How do I select a SOAR solution for my business?

• Starting your cybersecurity career path: What you need to know to be successful

• Cloud Misconfiguration leads to data exposure of Android and iOS users

• China email hack on Microsoft Exchange victimizes 50 companies

• Number of ransomware attacks grew by more than 150%

• Security awareness programs: The difference between window dressing and behavior change

• The Humanity and Evolution of Cyber

• Trends that will influence remote work in 2021 and beyond

• Digital-first lifestyle opens consumers to potential risks during tax season

• US National Security Council urges review of Exchange Servers in wake of Hafnium attack

• Linux Kernel Vulnerability that Allows Local Attackers to Escalate Privileges

• eSafety defends detail of Online Safety Bill as the ‘sausage that’s being made’

• ISC Stormcast For Monday, March 8th, 2021 https://isc.sans.edu/podcastdetail.html?id=7402, (Mon, Mar 8th)

• GoldMax, GoldFinder, and Sibot, are the 3 new Malwares Used by SolarWinds Hackers

• Apple TV+ Hit ‘Ted Lasso’ Wins Critics Choice Award for Best Comedy Series

• Senate votes to extend pandemic relief for contractors

• Casting a Wide Intrusion Net: Dozens Burned With Single Hack

• Tufin releases Vulnerability-Based Change Automation App

• Intel CPU interconnects can be exploited by malware to leak encryption keys and other info, academic study finds

• Strata Maverics Identity Orchestrator extends Azure AD control to on-premise applications

• A CTF Example Shows You the Easy and Powerful One Gadget Tool

• Poison packages – “Supply Chain Risks” user hits Python community with 4000 fake modules

• GSMA’s ISAG Group adds iconectiv’s CTO to help oversee global telecom industry

• John Morgan joins Confluera as CEO

Generated on 2021-03-09 23:55:16.218200