IT Security News Daily Summary 2021-03-10

• How to Become a CISO in 5 Steps

• The Most Common Types of Cybercrime

• HASC chair pivots spending debate to acquisition reform

• Florida hack exposes danger to water systems

• NIST tackles video analytics for public safety

• DOD: Counter-drone defense calls for data fusion

• COVID raises the stakes for digitally accessible documents

• Fake Ad Blocker Delivers Hybrid Cryptominer/Ransomware Infection

• SAP Stomps Out Critical RCE Flaw in Manufacturing Software

• How cybercrime groups are exploiting the latest Microsoft Exchange flaws

• European Police Pounce After Cracking Crime Chat Network

• Superstar K-Pop Band’s TikTok Hacked

• Malware Operator Employs New Trick to Upload Its Dropper into Google Play

• Review: 2021 Chrysler Pacifica Shows Off Uconnect 5 With Wireless CarPlay

• Apple Renews Animated Musical Comedy ‘Central Park’ for a Third Season

• Twitter to Make ‘Spaces’ Chat Feature Available to Everyone in April

• Apple More Prominently Highlighting iPhone Trade-In Deals From Carriers

• Jamf move improves enterprise security and compliance for macOS

• Cyberattackers Exploiting Critical WordPress Plugin Bug

• F5 Patches Four Critical Bugs in Big-IP Suite

• Malware Operator Employs New Trick to Upload its Dropper into Google Play

• FBI-CISA Joint Advisory on Compromise of Microsoft Exchange Server

• BrandPost: Implementing Unified Security with an Open Fabric Ecosystem

• House passes Rescue package with TMF funding

• Startup uses NLP and AI to make software security reviews less painful

• Security platform replaces manual risk assessment with on-the-fly analysis during the build process

• WhatsApp Will Let iPhone Users Protect iCloud Backups with a Password

• Romance Fraudster Who Conned Jenifer Lewis Jailed

• Multiple Attack Groups Exploited Microsoft Exchange Flaws Prior to the Patches

• ‘Thousands’ of Verkada Cameras Affected by Hacking Breach

• US Schools Faced Record Number of Security Incidents in 2020

• Does a SIEM make sense for my MSP?

• BSidesSF 2021: Recharge Day 2

• Joy Of Tech® ‘Tweets For Sale’

• How Security Assurance Teams Can Use DevOps Principles to Become More Productive and Happier

• White hat hackers gained access more than 150,000 surveillance cameras

• Deals: Apple’s 512GB M1 MacBook Pro Hits New Low Price of $1,349.99 ($149 Off)

• Don’t Be a Victim of Cyber Extortion

• App Stores Have Kicked Out Some Location Data Brokers. Good, Now Kick Them All Out.

• Leaders warn of U.S. cyber vulnerabilities

• Hacktivists breach Verkada and view 150,000 CCTV cams in hospitals, prisons, a Tesla factory, even Cloudflare HQ

• Linux Foundation Announces Open-Source Software Signing to Combat Supply Chain Attacks

• OVH Datacenter Goes up in Flames

• zoMiner Botnet is Targeting Elasticsearch and Jenkins Servers

• Top sites affected after OVH data center catches disastrous fire

• CISA: No federal agencies compromised by Exchange hack so far

• Cyber criminals targeting hospitals are ‘playing with lives’ and must be stopped, report warns

• 150,000 security cameras allegedly breached in “too much fun” hack

• American Companies Not Taking Cybersecurity Seriously

• New major interventions to block encrypted communications of criminal networks

• Black Hat USA

• How to Protect Vulnerable Seniors From Cybercrime

• Hiding in Plain Sight: Protecting Enterprises from the ‘New’ Shadow IT

• F5 Security Advisory for RCE Vulnerabilities in BIG-IP, BIG-IQ

• Why the BISO May Be the Utility Player Your Org Needs Now

• The Week in Breach News: 03/03/21 – 03/09/21

• What is Secure Boot? It’s Where IoT Security Starts | Keyfactor

• VLANs Streamline Network Connectivity and Increase Security

• Get earlier, actionable vulnerability insights from Black Duck Security Advisories

• If you have an F5, it’s time to patch! Thanks Michele for the link to today’s crop of F5 CVE’s, which include an unauthenticated RCE against the API, and another RCE against “hidden” config pages! https://support.f5.com/csp/article/K02566623, (Wed, Mar 10th)

• See the Unseen in AWS Mirrored Traffic With VM-Series

• Apple Now Able to Repair an iPhone 12 Pro’s Cracked Rear Glass Without Replacing the Entire Device

• Apple TV+ Series ‘Lady in the Lake’ to Star Natalie Portman and Lupita Nyong’o

• How Biden’s Cyber Strategy Echoes Trump’s

• EU Privacy Law and U.S. Surveillance: Solving the Problem of Transatlantic Data Transfers

• The risks of social selling

• Leveraging Automation to Secure Your Remote & Hybrid Workforce

• Fuzzing Java in OSS-Fuzz

• EFF to Supreme Court: Users Must Be Able to Hold Tech Companies Accountable in Lawsuits When Their Data is Mishandled

• OVH cloud datacenter destroyed by fire

• International Women’s Day: Women in Cybersecurity

• Russia Slows Twitter And Threatens Total Ban

• Apple Chooses Munich For Chip Design Centre

• Enabling COOP and COEP reports on Report URI

• 3.6 million websites taken offline after fire at OVH datacenters

• 2020 was a ‘record-breaking’ year in US school hacks, security failures

• Nim-Based Malware Loader Spreads Via Spear-Phishing Emails

• How organizations can combat the security risks of working remotely

• Proposed Bill Would Allow Americans to Sue Foreign Cyber-Actors

• SolarWinds Unlikely to Be an Isolated Event as Attackers Become More Sophisticated

• EU Banking Regulator Suffers Cyberattack in a Microsoft Email Breach

• A Massive Security Breach for the Silicon Valley Start-Up

• University of the Highlands and Islands Deals with a Sudden Cyber Attack

• Threat Actors Ruined the Launch of Wiliams New FW43B Car

• Kremlin concerned about the report of possible US cyber attacks

• Microsoft Releases March 2021 Security Updates

• Researchers Unveil New Linux Malware Linked to Chinese Hackers

• CISO Stories Podcast: Your Job is to Make Cybersecurity Simple

• Linux Foundation Lauches Software Signing Service

• Twitter Testing Full-Sized Image Previews in Timeline on iOS and Android

• What Is IT Asset Inventory Management (ITAM)?

• Azure Defender for Storage powered by Microsoft threat intelligence

• Belgian cops crack down on encrypted phone network Sky ECC in 200 overnight raids as firm denies criminal ties

• Cyber attack on Norway Parliament and Russia Kremlin website down

• Ransomware: Prevention is better than cure

• Apple Cuts iPhone Orders By 20 Percent – Report

• Hackers steal $3.8 million from Defi Protocol DODO

• Cybersecurity in 2021: Stopping the madness

• 6 security risks in software development and how to address them

• What is Secure Boot? It’s Where IoT Security Starts | Keyfactor

• Researchers Show First Side-Channel Attack Against Apple M1 Chips

• Latest Mass Hacks Highlight Challenge for Biden Administration

• Developer Security Firm Snyk Raises $300 Million at $4.7 Billion Valuation

• Exchange Server issues loom over March Patch Tuesday

• ESET: More Than 10 APT Groups Exploiting Recent Microsoft Exchange Vulnerabilities

• Digitally Transforming Trusted Transactions Through Biometrics, ML & AI

• Call Recorder iPhone App Flaw Uncovered

• OVH data centers suffered a fire, many popular sites are offline

• Using Intelligence to Prioritize AWS Guard Duty Alerts

• Deals: Woot Discounts AirPods Pro to $189.99 ($59 Off) [Update: Sold Out]

• Datto acquires BitDam to help shape the security roadmap for MSPs

• Ryuk Ransomware Hits 700 Spanish Government Labor Agency Offices

• GandCrab Ransomware Affiliate Member Was Arrested For Phishing Attacks

• Palo Alto Networks CEO on what we know about the scope of the Microsoft hack

• Everything You Need to Know About Batteries in Your iPhone, iPad, and Mac

• 9 Practical Tips to Take Your Cybersecurity Career to the Next Level

• BrandPost: Hack to the Future: Why Attack Simulations are the Future of Security Control Testing

• New Linux Backdoor RedXOR Likely Operated by Chinese Nation-State Actor

• Capital One Ventures partners with Securonix on cloud-native security analytics in $24M deal

• App security platform provider Pathlock raises $20M

• Microsoft expands AccountGuard ahead of elections, deepens Yubico partnership

• Protect your online data with this decentralized VPN and firewall portable solution

• Breach Exposes Verkada Security Camera Footage at Tesla, Cloudflare

• How your remote employees may be sharing sensitive data

• Lumu Raises $7.5M to Advance Threat Detection

• Snyk Advances Developer-First Security with Series E Investment

• SharpRDP – PSExec without PSExec, PSRemoting without PowerShell, (Wed, Mar 10th)

• CEO Reaction On New Cyber Legislation

• Experts On West Ham Utd Website Leaks Users’ Data

• CEO Fraud Emails – Not Every Money Transfer Request You Receive is Legit

• Internet Advocates Call on ISPs to Commit to Basic User Privacy Protections

• Cybercrime could cost $10.5 trillion dollars by 2025, according to Cybersecurity Ventures

• BitSight Observations Into the HAFNIUM Attacks: Part One

• Belgian cops crack down on encrypted phone network Sky ECC in 200 overnight raids, as firm denies criminal ties

• Hackers steal $2.3 million from Defi Protocol DODO

• Check Point CloudGuard NDR integrates with AWS VPC Traffic Mirroring

• How Snyk targeted developers to become a $4.7B cloud-security giant

• FCW Insider: March 10

• Cyber Insurance Provider Corvus Raises $100 Million

• NHS Regulator Faces Surge in Email Attacks During Vaccine Rollout

• It’s Open Season for Microsoft Exchange Server Hacks

• How to Balance IT Stability and Strong Security

• Deals: Woot Discounts AirPods Pro to $189.99 ($59 Off)

• Experts Insight On Critical Remote Code Execution Flaws, IE Zero-Day Fixed In Microsoft’s March Patch Tuesday

• Verkada security cameras hijacked following breach

• Adobe releases security patches for a number of their apps

• Four IT Applications in Western Australia Are Having Control Weaknesses

• The CARES Grant: Don’t Leave Money on the Table

• The Best Way To Track Your Kids’ Real-Time Location

• Right To Repair Law To Tackle E-Waste Problem

• DataGrail, which helps enterprises manage data privacy requests, raises $30M

• How weak passwords could put your organization at risk

• Aqua Security Achieves Unicorn Status After $135 Million Funding Round

• Hackers Breach Cameras at Banks, Jails, Tesla and More

• Aqua Security Announces $135 Million in Series E Funding at a $1 Billion Valuation

• More on the Chinese Zero-Day Microsoft Exchange Hack

• Expert Views: Microsoft Exchange Is Not The Issue, Email Is

• z0Miner Spreads Using ElasticSearch and Jenkins RCE Vulnerabilities

• Benefits And Risks Of Remote Work For Businesses | Avast

• 2021 Cybersecurity Outlook: Attackers vs. Defenders

• Stop Trying to Take Humans Out of SOC … Except … Wait… Wait… Wait…

• Is Your Fate In the Cloud? What Is Security Shared Fate?

• Aqua Security protects containerized apps and infrastructure, raises $135M

• SAP Patches Critical Flaws in MII, NetWeaver Products

• Most Threat Analysts Banned from Sharing Intel with Peers

• It’s Open Season for Microsoft Exchange Hacks

• Leaked Renders Claim to Show Third-Generation AirPods Design

• Researchers discover flaws in Apple’s offline ‘find my device’ feature

• Hackers Breach Security Company Verkada Accessing 150,000 Cameras Inside Tesla, Hospitals, and Jails

• 5 reasons why the cost of ransomware attacks is rising

• Why the Microsoft Exchange Server attack isn’t going away soon

• Tesla Shares Rally After Expensive Share Slide

• Iranian Hackers Uses ScreenConnect Remote Access Tool to Target Government Agencies

• Exposed admin password leads to massive surveillance camera breach at hundreds of businesses

• OVHcloud data centers engulfed in flames

• WaterISAC: 15 Security Fundamentals You Need to Know

• Exposed Password Gave Hackers Access to 150,000 Cameras

• Russia threatens to block Twitter over banned content

• Microsoft Exchange: Patching Too Late If Already Compromised

• Loose SPF, DKIM, DMARC, and ARC Settings Sabotage Security

• Verkada CCTV Breach Exposes Hundreds Of Businesses

• Unpatched Flaws in Netgear Business Switches Expose Organizations to Attacks

• Microsoft Expands Coverage of Exchange Server Patches

• FIN8 Hackers Return With More Powerful Version of BADHATCH PoS Malware

• A flaw in The Plus Addons for Elementor WordPress plugin allows sites takeover

• Ad blocker with miner included

• Adobe Photoshop 22.3 Update Rolling Out With Apple Silicon Support

• US Govt Concern Over A Hack On Microsoft’s Exchange Email Software

• Cybersecurity Expert Insight: SITA Data Breach

• Experts Reaction On Tens Of Thousands Of US Organisations Hit In Ongoing Microsoft Exchange Hack

• Heimdal™ Proactively Protects Its Customers Against Microsoft Exchange Server Exploit

• Brit cybercops issue tender to rip and replace their formerly flaw-ridden CyberAlarm tool

• Microsoft’s March Patch Tuesday fixes 14 Critical flaws

• Apple to Invest Over 1 Billion Euros in Munich Silicon Design Center

• EU Banking Reg. Hit By MS Exchange Attack– Experts Reaction

• REvil ransomware’s calling, and it’s not good news

• Looking for adding new detection technologies in your security products?

• Is Cybersecurity More Difficult Than Going to Mars?

• Missing colleagues in cybersecurity? That’s no surprise – the world is missing 3.5 million

• What Most Enterprises Get Wrong About ZTNA

• How to mitigate security risks as cloud services adoption spikes

• ZecOps Selected to Fast Company’s Most Innovative Companies for 2021

• Hackers breach systems of Cloud based Security Camera company Verkada

• French company sues Apple Inc over Data Privacy

• The Future of Global Cybersecurity in the Manufacturing Industry

• How to Apply Patches to Mule 4.x

• Importance of 2FA in Improving The Security Of Atlassian Products

• Verkada disables accounts after reports its security cameras were breached

• WhatsApp may soon roll out encrypted chat backups

• Microsoft Issues Security Patches for 82 Flaws — IE 0-Day Under Active Attacks

• Protecting Your Data from Cyber Extortion: Lessons from the Latest Mega-hack

• 372% increase in healthcare bot traffic could tamper with booking vaccine dates

• 2021 Hacker Report: Hackers are not just driven by money

• Human rights lawyers ask Australia’s ‘hacking’ Bill be redrafted

• iPhone 12 Mini Faces Production Cut Due to ‘Far Lower’ Demand Than Expected

• Rapid digital transformation makes an application strategy a business imperative

• Most decision makers plan to increase spending on cybersecurity this year

• How FIM Is More Than Just About Maintaining Compliance

• ISC Stormcast For Wednesday, March 10th, 2021 https://isc.sans.edu/podcastdetail.html?id=7406, (Wed, Mar 10th)

• Two New Apple Silicon MacBooks Expected to Enter Mass Production in Second Half of 2021

• Lightspin enhances contextual security for cloud environments

• Free sigstore signing service confirms software origin and authenticity

• FireEye CEO: Reckless Microsoft Hack Unusual for China

• 2021 iPad Pro Case Found at Target as Rumors Swirl About Upcoming Refresh

• Akash MAINNET 2 decentralized open-source cloud now available

• India pauses blockchain-powered SMS spam-scrubber after it swallows people’s one-time login codes

• Microsoft Patch Tuesday, March 2021 Edition

• Sontiq acquires Breach Clarity to lead data breach and financial fraud protection initiatives

• VMware unveils portfolio updates to help customers modernize apps and infrastructure

• Big Breaches: Cybersecurity Lessons for Everyone book released

• Cybercrime could cost $10.5 trillion dollars by 2025

• Combating Evolved Cyber Threats Starts With Knowing Where You Stand

• Privacy in Practice: Securing Your Data in 2021 and Beyond

• Linux Foundation announces new open-source software signing service

• 1Password for Mac Updated With Apple Silicon Support

• The Microsoft Exchange Hack and the Great Email Robbery

• CybelAngel announces new hires and plans for London office

• Mastercard expands Engage platform to provide digital payment experiences for consumers

• Gigamon Hawk integrates with AWS to simplify and secure cloud adoption

• TinyCheck: Stalkerware detection that doesn’t leave a trace

• Pentagon issues cyber tasking order in response to Exchange hack

• WA Auditor-General finds control weaknesses in four state IT applications

• Apple’s Device Location-Tracking System Could Expose User Identities

• Apple Podcasts App Lets Users ‘Follow’ New Content Instead of ‘Subscribe’ in iOS 14.5

• SailPoint appoints Heather Gantt-Evans as CISO

• Ayla Fast Track program helps OEMs quick launch of new connected products

• Microsoft’s big email hack: What happened, who did it, and why it matters

• HASC chair flips spending debate to acquisition reform

• VERT Threat Alert: March 2021 Patch Tuesday Analysis

• Microsoft Patch Tuesday Updates Fix 14 Critical Bugs

• How to enable Android’s Password Checkup feature

• Microsoft Patch Tuesday Fixes 82 CVEs, Internet Explorer Zero-Day

• SAP Releases March 2021 Security Updates

• Beware the IDEs of March: Microsoft’s latest monthly fixes land after frantic Exchange Server updates

• IT Security News Daily Summary 2021-03-09

• Sarbloh ransomware aims at supporting Indian Farmers’ Protest

• Space Force seeks central portal for application development

• A global semiconductor shortage highlights a troubling trend

• Unlocking the mysteries of science with Linux containers

• Hafnium hack poses extended threat

• Agencies on track for data center optimization

• Dark Web Markets for Stolen Data See Banner Sales

• Warning the World of a Ticking Time Bomb

• Phishing, Scam, & Marketing Emails: What’s the Difference?

• MetalBallStudios: Size Of The Internet – Bytes In Perspective

• Another French hospital hit by a ransomware attack

• Sonos Unveils Portable $169 Roam Speaker With AirPlay 2, Sound Swap, and More

• Introducing sigstore: Easy Code Signing & Verification for Supply Chain Integrity

• Seven Windows Wonders – Critical Vulnerabilities in DNS Dynamic Updates

• Why MITRE ATT&CK Matters?

• Martorana to take over as federal CIO

• Microsoft’s March Patch Tuesday: Critical remote code execution flaws, IE zero-day fixed

• Fastest VPN in 2021

• Adobe releases batch of security fixes for Framemaker, Creative Cloud, Connect

• Adobe Critical Code-Execution Flaws Plague Windows Users

• Microsoft Exchange Server attacks: What we know so far

• Report: Medical Misinformation Has Been Spreading On Facebook For Years Despite Policies

• Linux Foundation Debuts Sigstore Project for Software Signing

• Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities

• Microsoft March 2021 Patch Tuesday, (Tue, Mar 9th)

• EFF to Supreme Court: States Face High Burden to Justify Forcing Groups to Turn Over Donor Names

• Microsoft hack was looking for target whereas SolarWind had a target: Pro

• Microsoft Exchange attacks cause panic as criminals go shell collecting

• Abode launches $35 Abode Cam 2 security camera

• UVMask by UM Systems: COVID-19 protective gear for the present, and future

• Microsoft Ships Massive Security Patch Bundle

• Vodafone Calls for New Cybersecurity Policies to Help SMEs

• Arkansas Bill Addresses “Unfair” Social Media Censorship

• Dark Reading ‘Name That Toon’ Winner: Gather ‘Round the Campfire

• Who’s Hacking You?

• 3 Ransomware Myths Businesses Need to Stop Believing ASAP

• Adobe Releases Security Updates

• XKCD ‘Vaccine Guidance’

• 10 Tips to Strengthen Your Insider Threat Program – Data, Intent and Context [Part 1]

• PerimeterX Named to Fast Company’s List of the World’s Most Innovative Companies for 2021

• Security Vulnerability in ‘Call Recorder’ App Exposed User Conversations

• Disney+ Now Has More Than 100 Million Subscribers

• Apple Releases New ‘3C39’ AirPods Max Firmware

• Here’s Merrick Garland’s Orientation Memo for the Trump-Era Hangover on Press Freedom

• Was SolarWinds a Different Type of Cyber Espionage?

• March 2021 Patch Tuesday: Microsoft fixes yet another actively exploited IE zero-day

• US newspaper’s ‘Biden will hack Russia’ claim: A good way to reassure Putin you’ll leave him alone

• Android users hit by banking trojan in 10 Play Store apps

• Adobe Patches Code Execution Flaws in Connect, Creative Cloud, Framemaker

• Breach Clarity Acquired by Sontiq

• FTC Urged to Enforce Rules that Protects User Health Data Shared with Fertility Apps

• U.S. Department of Justice Warns of Fake Unemployment Benefits Websites Stealing Data

• 48% of Security Pros Prohibited From Intelligence-Sharing

• Huge Fallout from Microsoft Incompetence: Let’s Exchange Exchange

• Octane X GPU Renderer Comes to Mac App Store

• T-Mobile Automatically Opting Customers In to Expanded Data Collection Program for Targeted Ads

• Apple Planning Switch to Randomized Serial Numbers for Future Products Starting in ‘Early 2021’

• Best Mac cleaner: Favorite cleaning and optimization tools

• Top 5 things to know about messaging apps

• Apple Patches Remote Code Execution Bug in WebKit

• Third French Hospital Hit by Cyberattack

• Leaked Development Secrets a Major Issue for Repositories

• COVID-19 Contact-Tracing Apps Signal Broader Mobile App Security Concerns

• Apple Releases Security Updates

• Microsoft releases ProxyLogon patches for unsupported Microsoft Exchange versions

• Should You Buy a Super Cheap Refurbished iPhone From Amazon?

• BitSight Observations Into HAFNIUM: Part One

• Flagstar Bank Suffers Data Breach

• Scammers Are Already Targeting the Next Round of Coronavirus Relief Checks

• New Ransomware Encrypts Files in Support of Indian Farmers

• New free software signing service aims to strengthen open-source ecosystem

• Google Play Harbors Malware-Laced Apps Delivering Spy Trojans

• West Ham Supporters’ Personal Details Leaked on Club Website

• Sunshuttle, the Latest Strain Allegedly Linked to SolarWinds Hackers

• Belkin’s 2-in-1 MagSafe Charger for iPhone and AirPods Now Available for Pre-Order

• Apple Exploring Wider Use of Haptic Feedback on MacBooks

• GitHub Fixed a Bug impacting Authenticated Sessions

• Scholars Under Surveillance: How Campus Police Use High Tech to Spy on Students

• Insurance CEOS warn of rapid cost increases from cyber losses

• Azure LoLBins: Protecting against the dual use of virtual machine extensions

• Symphony Technology to acquire Cybersecurity Firm McAfee for $4 billion

• Best Route Optimization Software in 2021

• NetApp AI open-source software and tools

• Privacera raises $50M to help companies manage compliance and security risk across clouds

• Best VPN service in 2021: Safe and fast don’t come free

• Apple Plugs Severe WebKit Remote Code-Execution Hole

• Vulnerability That Allows Complete WordPress Site Takeover Exploited in the Wild

• Look to Banking as a Model for Stopping Crime-as-a-Service

• Microsoft Pushes Patches for Older Versions of Exchange Server

• Cisco Email Security Expands, Simplified to Detect More Threats, Stop More Attacks

• What is NoSQL Injection Attack and How to Prevent It?

• Reflections on 2020 security vulnerabilities

• Microsoft’s Crazy Huge Hack, Explained

• Emails Show Shadow Structure Behind Encrochat

• Malicious Apps On Google Play Dropped Banking Trojans On User Devices

• Chinese Hackers Targeted SolarWinds Customers In Parallel With Russian Op

• Twitter Executive on Super Follows and Apple’s Subscription Fees: ‘We’re Not in the Business of Getting Around Platform Rules’

• 12.9-Inch iPad Pro With Mini-LED Display Said to Launch as Soon as Late March

• Five Ways Bad Bots Are Threatening Financial Services

• Patch Tuesday, March 2021: Microsoft Releases Several Out-of-Band Patches for Windows Exposures, Including Four Documented Zero-Day Server Exchange Vulnerabilities

• Zero Day Attack 101: What It Is and How to Deal with It

• US Bank and Mortgage Lender Flagstar Victim of a major data breach

• European Banking Authority Reveals Microsoft Exchange Hack

• And the 2021 Cybersecurity Excellence Awards Go To …

• Have You Taken Our LinuxSecurity User Survey?>

• Why the Demand for Application Development Security Skills Is Exploding

• Bug bounties: More hackers are spotting vulnerabilities across web, mobile and IoT

• How the SolarWinds attack may affect your organization’s cybersecurity

• Intel to Speak at SecurityWeek Supply Chain Security Summit on March 10th

• Siemens Releases Several Advisories for Vulnerabilities in Third-Party Components

• Protection and Privacy Pivotal to the UK’s National Data Strategy

• Representative of the Russian Foreign Ministry announced the need for universal regulation of the Internet

• How to Quickly Integrate your SD-WAN with Bitglass

• Is MFA a Security Illusion?

• Cloud Entitlements Are the New Security Perimeter: Wipro State of the Cybersecurity Report 2020

• Apple fixes CVE-2021-1844 RCE that affects iOS, macOS, watchOS, and Safari

• The Broader Application of Pentesting Skills

• Apple Highlights Women’s Health Study Data to Help ‘Destigmatize Menstruation’

• Deals: Save Up to $150 on Apple’s 2020 iMac Lineup, Including Lowest Prices on 21.5- and 27-Inch Models

• Expert Insight On Indian state government website exposed COVID-19 lab test results

• More Than 1m Small Businesses ‘At Risk Of Collapse’ Due To Cyber Threats

• Unpatched QNAP NAS Devices Targeted by UnityMiner in Cryptocurrency Mining Campaign

• iPhone, iPad and Mac security: Apple releases fixes for bug that could allow code execution via malicious web content

• European Banking Authority restores email service in wake of Microsoft Exchange hack

• Huge Rise in Hackers Submitting Vulnerabilities During #COVID19

• Experts On Elara Caring Discloses Data Breach

• February 2021 Cyber Attacks Statistics

• Secure Access to Your Google Chrome Enterprise With Duo

• 6 Tips to Integrate Security into Agile Application Development

• New Crypto-Miner Campaign Targets QNAP NAS Devices via the Unauthorized RCE Vulnerability

• GitGuardian data reveals 20% rise in ‘secrets’ hidden in public GitHub repos

• GitHub Informs Users of ‘Potentially Serious’ Authentication Bug

• Serious Security: Webshells explained in the aftermath of HAFNIUM attacks

• Veriff Appoints Duncan Steblyna as New VP of Product

• Guardian: Truecaller Fixes Location Vulnerabilty In Its New App

• Spying on your Exchange Server

• TrendForce: Apple Overtook Samsung to Become World’s Largest Smartphone Maker in Fourth Quarter

• Apple Set to Begin iPhone 12 Production in India

• QNAP storage devices hijacked by UnityMiner cryptocurrency malware

• GitHub bug invalidated users’ sessions and logged them out of their accounts

• EU Aims To Boost High-End Semiconductor Production

• Analyst: Apple AR Headset Could Arrive ‘Next Year’

• Microsoft Exchange attacks: Now Microsoft rushes out a patch for older versions of Exchange

• Microsoft Exchange server hack: Banking agency on ‘heightened alert’ after cyberattack

• Malicious apps on Google Play dropped banking Trojans on user devices

• 10 Google Play Apps Found Containing Banking Malware

• 9 Android Apps On Google Play Caught Distributing AlienBot Banker and MRAT Malware

• Microsoft Exchange Server Hack

• Sarbloh ransomware supports Indian Farmers

• How to patch Exchange Server for the Hafnium zero-day attack

• Deliveroo To Hand Some Riders £10,000 Bonuses

• Tesla Share Slide Wipes £200bn Off Market Capitalisation

• Data Privacy Legislation Update | Avast

• Dangerous Malware Dropper Found in 9 Utility Apps on Google’s Play Store

• FCW Insider: March 9

• Quick Hits

• Microsoft Exchange attacks: Now Microsoft rushes out a patch for these unsupported Exchange servers, too

• So it appears some of you really don’t want us to use the word ‘hacker’ when we really mean ‘criminal’

• DARPA Ramps-Up FHE Encryption Project with Intel

• The Microsoft Exchange Server mega-hack – what you need to know

• Seizure of €14 million worth of contraband cigarette leads to 13 arrests in Danish-Dutch sting

• Cybersecurity Webinar — SolarWinds Sunburst: The Big Picture

• Migrating Spring Boot Applications to AWS Lambda with No Code Change

• Don’t run that code

• Apple’s Personalized Ads System Targeted in Privacy Complaint to French Data Regulator

• (ISC)² 2021 Security Congress to focus on cybersecurity challenges across regions

• Google ‘Recommended Therapy’ Following Racism Complaints

• Isle Of Wight Drone Medical Delivery Trials Set To Continue

• UnityMiner cryptocurrency malware hijacks QNAP storage devices

• Flaws in Apple Location Tracking System Could Lead to User Identification

• NCSC: Don’t Fall for Mother’s Day Scams This Week

• SolarWinds Hack — New Evidence Suggests Potential Links to Chinese Hackers

• European Banking Authority Compromised By Exchange Hackers

• SITA Data Breach Exposes Numerous Airlines

• Google reCAPTCHA used by Phishing Attackers

• Microsoft Exchange Hackers Also Breached European Banking Authority

• Secure Offboarding Best Practices

• SUPERNOVA backdoor that emerged after SolarWinds hack is likely linked to Chinese actors

• Imperva recognized for Performance in The Forrester Wave™: DDoS Mitigation Solutions, Q1 2021 Report

• Application security testing is not just buzzwords

• U.S. issues warning after Microsoft says China hacked its mail server program

• Apple Issues Patch for Remote Hacking Bug Affecting Billions of its Devices

• Stop Password Reuse by Going Passwordless

• Kuo: 2023 iPhones to Feature ‘Periscopic’ Telephoto Lens

• Keeping your serverless architecture secure

• GitHub bug briefly gave valid authenticated session cookies to wrong users

• Bitglass achieves FedRamp Cloud Security compliance through StackArmor

• Biden to launch cyber attack task force against adversaries

• Intel joins DARPA in search of encryption ‘holy grail’

• Going dark: Service disruptions at stock exchanges and brokerages

• Women in cybersecurity: Gender gap narrows but not enough

• Azure flings out free virtual trusted platform module for cloudy VMs

• Kuo: Apple’s Upcoming Mixed Reality Headset to Feature 15 Camera Modules

• 49% of female cybersecurity pros say the pandemic had a positive impact on their career

• A great deal of employees have inappropriate access to sensitive data

• Compliance – The Invisible Hand of Cybersecurity

• Ghidra 101: Loading Windows Symbols (PDB files)

• Microsoft Server Hack Has Victims Hustling to Stop Intruders

• New Side-Channel Attack Targets Intel CPU Ring Interconnect

• 451 Research Shows Security is #1 Challenge to Cloud Adoption

• 5G slicing will generate $20 billion in revenue

• Only 12% of enterprises have fully embraced SASE

• ISC Stormcast For Tuesday, March 9th, 2021 https://isc.sans.edu/podcastdetail.html?id=7404, (Tue, Mar 9th)

• McAfee sells its Enterprise business for $4 billion

• eBook: Protecting Active Directory

• Avaya announces devices designed to improve workstream collaboration

• Intel partners with DARPA to perform in Data Protection in Virtual Environments program

• Hafnium hack poses new long-term threat for already overtaxed cyber workers

• Intel Corp. to Speak at SecurityWeek Supply Chain Security Summit

• Microsoft supports Paysafe’s move to cloud-based services

• Airspan enters into agreement with NBA to expand 5G market

• Apple emits patches for iOS, macOS, Safari, etc to stop dodgy websites hijacking people’s gadgets

• What Is It Like to Be an Ethical Hacker?

• CISA Strongly Urges All Organizations to Immediately Address Microsoft Exchange Vulnerabilities

• How to Disable Tab Previews in Safari on Mac

• BMW CFO on Apple Car: ‘Competition is a Wonderful Thing’

• Bitglass receives FedRAMP Moderate ATO for their Total Cloud Security Platform

• AMS partners with Revature enabling organizations to compete in the future of work

• A contractor calls for hiring more techies in-house

• TMF set to receive $1B infusion in COVID relief bill

• Microsoft Exchange Server attack hits local governments

• McAfee to Sell Enterprise Business to Equity Firm STG for $4B

• KnowBe4 Buys Competitor MediaPRO

• iMac Pro Now Listed as ‘Currently Unavailable’ in U.S. and Canada [Update: Back in Stock]

• Apple TV+ Show ‘Ted Lasso’ Nominated for Additional Awards

• Marianna Tessel joins Cisco board of directors

• EFF, ACLU and EPIC File Amicus Brief Challenging Warrantless Cell Phone Search, Retention, and Subsequent Search

• Google engineer urges web devs to step up and secure their code in this data-spilling Spectre-haunted world

Generated on 2021-03-10 23:55:14.197669