IT Security News Daily Summary 2021-03-11

• 2021-03-11 – IcedID (Bokbot) from Excel spreadsheet macro

• All You Need to Know: The Four Zero Days in Microsoft Exchange Servers

• Quick Hits

• CMMC board’s training lead resigns

• States, cities get $325B in direct aid from COVID-19 package

• To address racial inequity, many leaders are starting with a map

• TrickBot Takes Over, After Cops Kneecap Emotet

• Ransomware Attack Strikes Spain’s Employment Agency

• Developer-first security raises Snyk’s tides, among others

• How security teams can prepare for advanced persistent threats

• School Boss Resigns After Porn Found on Computer

• Expert publishes PoC exploit code for Microsoft Exchange flaws

• Apple Releases Safari Technology Preview 122 With Bug Fixes and Performance Improvements

• Continuing to Raise the Bar for Verifiable Security on Pixel

• Finalists announced in second annual Microsoft Security 20/20 awards

• Best password manager in 2021

• Hackers update Gootkit RAT to use Google searches and discussion forums to deliver malware

• After Oldsmar: How vulnerable is US critical infrastructure?

• Apple Accuses Former Employee of Stealing Trade Secrets and Leaking Them to Media

• #ShareTheMicInCyber: Brooke Pearson

• Congress Proposes Bold Plan to End the Digital Divide

• Cyberattack Forces Brewery Shutdown at Molson Coors

• Microsoft Exchange Server Exploit Code Posted to GitHub

• AirPods Max in Pink Now Available to Ship on Amazon

• The US Seizes Phishing Domains Impersonating COVID-19 Vaccine Sites

• Spanish Government Attacked with Ryuk Ransomware

• FIN8 Bolsters Their BADHATCH Backdoor

• Europol ‘Unlocks’ Encrypted Sky ECC Chat Service to Make Arrests

• Microsoft Patch Tuesday March Fixed Exchange Server Bugs Under Attack, IE Zero-Day, And More

• NanoCore RAT Scurries Past Email Defenses with .ZIPX Tactic

• Data Security and Governance Provider Privacera Raises $50 Million

• How confidential are your calls? This iPhone app shared them with everyone

• Actionable Tips for Engaging the Board on Cybersecurity

• Apple Launches All-in-One Web Page With Privacy Labels for Its Own Apps

• Google Maps Gaining Tools for Drawing Missing Roads, Sharing Photo Updates

• Chinese, US Chip Trade Associations Team Up – Report

• Chinese hackers using RedXOR backdoor against Linux systems

• This malware was written in an unusual programming language to stop it from being detected

• Microsoft Exchange Servers Face APT Attack Tsunami

• This Netgear SOHO switch has 15 – count ’em! – vulns, which means you need to upgrade the firmware… now

• Hackers attempt to poison the well, but AI cybersecurity solutions bolster water treatment facility security

• How confidential are your calls? This iPhone app shared them with everyone!

• Another 210,000 Americans Affected by Netgain Ransomware Attack

• Reflections on 2020 security vulnerabilities

• IBM Security and Recorded Future: Better Together

• Have You Taken Our LinuxSecurity User Survey?>

• Dridex Campaign Propelled by Cutwail Botnet and Poisonous PowerShell Scripts

• FIN8 Resurfaces with Revamped Backdoor Malware

• Linux Systems Under Attack By New RedXOR Malware

• A new Linux Foundation open source signing tool could make secure software supply chains universal

• Serious Vulnerabilities Found in Schneider Electric Power Meters

• Cisco found cryptomining activity within 69% of customers

• The Broader Application of Pentesting Skills

• The Biden Administration’s Opportunity to Secure International Mail

• Commission Criticizes Lack of Preparedness; U.S. Likely to Implement Sweeping Rule on Tech-Related Transactions

• What Is Email Fraud Prevention?

• The biggest challenges—and important role—of application security

• Police credit “unlocked” SKY ECC encryption for organized crime bust

• SEPE employment agency of Spain targeted by Ransomware Attack

• GitHub Vulnerability Could Expose Users’ Session Tokens – Bug Fixed

• Organizations thrive on VDI

• Clearview AI Sued In California By Immigrant Groups

• How to stop robocalls

• XDR Firm Cynet Raises $40 Million Series C Funding

• Trans Tracking Plugin Reported to Norwegian Authorities

• Facebook Sued By Russia For Not Deleting Protest Content

• Russian authorities slow access to Twitter over banned content

• 5 Steps for Investigating Phishing Attacks

• ProxyLogon PoC Exploit Released; Likely to Fuel More Disruptive Cyber Attacks

• $20M Raised by AI-powered Cyber Insurance Innovator Cowbell Cyber

• Confluera Joins Forces with SYNNEX Corporation, Continuing Expansion of Reseller Program for its Detection and Response Solution

• Cobalt Announces Launch of Partner Program On Heels of 75% YoY ARR Growth

• Spying on your Exchange Server

• Bounty Hunter Hackers Earn $40m Thanks To Pandemic

• Vexing Mystery Surrounds 0-Day Attacks On Exchange Servers

• This Trojan Malware Is Now Your Biggest Security Headache

• F5, CISA Warn Of Critical BIG-IP And BIG-IQ RCE Bugs

• Deals: Amazon Discounting Apple’s Official iPhone Cases, Including Up to $35 Off iPhone 12 mini Cases

• Apple-Designed 5G Modem Said to Debut in All 2023 iPhone Models

• Norway’s Stortingnet becomes newest victim of Microsoft Exchange malware

• F5 Announces Critical BIG-IP pre-auth RCE bug

• What Is an XSS Attack? Definition, Types, Prevention

• February 2021 Cyber Attacks Statistics

• Ten Hacking Groups Exploiting Microsoft Email Flaw, Warns ESET

• Icon files abused in malspam to spread NanoCore Trojan

• Cowbell Cyber raises $20 million, aims to build out its AI-drive cyber insurance platform

• Criminals arrested after trusting encrypted chat app cracked by police

• F5, CISA Warn of Critical BIG-IP and BIG-IQ RCE Bugs

• At Least 10 Threat Actors Targeting Recent Microsoft Exchange Vulnerabilities

• Tausight Raises $20M to Protect Healthcare Data

• Facial Recognition Company Sued by California Activists

• S3 Ep23: Hafnium happenings, I see you, and Pythonic poison [Podcast]

• Fixing the Weakest Link — The Passwords — in Cybersecurity Today

• Hackers stole data from Norway parliament exploiting Microsoft Exchange flaws

• Notability’s New Mac Catalyst App Adds Shape Detection, Apple Pencil Support for Sidecar, and More

• Heimdal™ Releases Vulnerability Data on the Microsoft Exchange Patch

• 5 common VPN myths busted

• ZIPX files that aren’t: Keep a weather eye out for disguised malware in email attachments

• Latest CrowdStrike Global Threat Report Finds Healthcare Orgs in the Social Engineering Crosshairs

• This trojan malware is now your biggest security headache

• The year of living remotely: Let’s swap pandemic stories

• Sumo Logic Agrees Deal to Acquire DFLabs

• After OTP Issues,TRAI Suspends New SMS Rules For 7 Days

• Threat Trends: DNS Security, Part 1

• Panzura Makes Threat Detection Simple, Boosts Security with Release of CloudFS 8 Defend

• Veracode Tackles Cybersecurity Skills Gap with Launch of The Hacker Games

• Cybersecurity Industry’s Most Comprehensive Guarantee and Warranty Announced by Deep Instinct and Backed by the Munich Re Group

• Australia Eyes Consumer Impact of Google’s Default Search Engine Deal With Apple

• Deals: MagSafe Duo Charger Drops to $99.99 at Best Buy ($29 Off, Lowest Price)

• Space Gray HomePod Currently Unavailable From Apple in the United States

• How to Manage Gmail and Google Security and Privacy Settings

• Apple Discontinues iMac Pro All-In-One Computer

• Choose The Best Server for Your Small Business | Avast

• FCW Insider: March 11, 2021

• Ajay Sabhlok Appointed Rubrik’s First Joint CIO and CDO

• With Proof-of-Concept Out, FBI & CISA Urge Organizations to Mitigate Microsoft Exchange Threat ASAP

• Fast Random Bit Generation

• Security Flaw In Popular iPhone App Exposes Call Recordings Of Thousands

• Experts On University Of Lancashire Suffers Cyber Attack

• Spanish employment agency hit by major cyberattack

• Three UK universities hit by cyber-attacks

• Getting your application security program off the ground

• Everything You Need to Know About Batteries – Intego Mac Podcast Episode 178

• What is cryptojacking? How to prevent, detect, and recover from it

• 8 new roles today’s security team needs

• Data Centre Fire Blamed For Russia Google Outage

• Facebook Urges Dismissal Of Lawsuits From US Government, US States

• Beware Of Your Browser Extensions | Avast

• February 2021’s Most Wanted Malware: Trickbot Takes Over Following Emotet Shutdown

• TrustArc launches PrivacyCentral to bring data privacy intelligence to enterprises

• Exchange Server security patch warning: Apply now before more hackers exploit the vulnerabilities

• F5 issues BIG-IP patches to tackle unauthenticated remote code execution, critical flaws

• Smart sex toys: appealing to you, exploitable to hackers

• Employers aren’t training staff to use new tech tools. Employees are paying the price

• Facebook Halts Project for Undersea Data Cable to Hong Kong

• Record Number of Cyber-Incidents Hit US Schools in 2020

• Third of Office Workers Warned After Sharing Data Via Unofficial Apps

• Menlo Security Gateway Now Protects Mobile Devices

• RedXOR, a new powerful Linux backdoor in Winnti APT arsenal

• Apple Could Use Contract Manufacturers Like Foxconn or Magna for Apple Car Assembly

• Wistron Resumes iPhone Production at Violence-Hit India Factory

• Advancements In Invoicing – A Highly Sophisticated Way To Distribute ZLoader

• AT&T Cybersecurity Launches Managed SASE Solution with Fortinet

• Should Security Ratings Require Independent Verification?

• UK to introduce new laws and a code of practice for police wanting to rifle through mobile phone messages

• Report: At least 10 hacking groups are exploiting Microsoft Exchange flaws

• Ransomware “Paralyzes” Spanish Employment Agency

• Illegal mobile application with more than 100 million users taken down in Spain

• Top Seven Cybersecurity Ripple Effects From 2020

• Clast82 Malware Dropper In 9 Utility Apps On Google Play Store

• 85% of workers are looking forward to returning to the office

• Å nei! Norway’s Stortinget struck by Microsoft Exchange malware

• Sky ECC denies police have ‘cracked’ encrypted messaging platform

• GitHub Informed Clients of “Potentially Serious” Security Bug

• Malware WannaCry And Vulnerability EternalBlue Remain at Large

• The Future of Cyberwarfare

• F5 addresses critical vulnerabilities in BIG-IP and BIG-IQ

• (ISC)² establishes Global DEI Task Force to expand cybersecurity workforce

• Want to add antivirus to your existing portfolio?

• India and China’s Conflict Goes Cyber

• Experts Reaction On Verkada Hack Affecting 150,000 Of Its Security Cameras

• Working hard to secure your network perimeter? The cybercrims will be pleased…

• NSW Police to use SMS geo-targeting tool to find ‘high-risk’ missing persons

• Senators concerned ‘hacking’ Bill powers could be used beyond intended scope

• Critical Pre-Auth RCE Flaw Found in F5 Big-IP Platform — Patch ASAP!

• Intel Corp. to Speak at SecurityWeek Supply Chain Security Summit

• HR Strategies to Drive Cybersecurity Culture in the New Normal

• Indian hackers spreading ransomware to retaliate Govt actions on Farmers

• Datto acquires BitDam to boost its cyber threat detection business

• Online health security – when ‘opt out’ isn’t an option

• Exchange servers under siege from at least 10 APT groups

• Piktochart – Phishing with Infographics, (Thu, Mar 11th)

• Alert overload still plagues cybersecurity industry

• Passing a compliance audit in the cloud doesn’t have to be hard

• Malware Dropper Found in 9 Malicious Android Apps on the Official Google Play store

• The impact of the pandemic on digital transformation and data access

• Defending enterprise systems during a pandemic

• Combating Risk Negligence Using Cybersecurity Culture

• Home Assistant, Pwned Passwords and Security Misconceptions

• ISC Stormcast For Thursday, March 11th, 2021 https://isc.sans.edu/podcastdetail.html?id=7408, (Thu, Mar 11th)

• NetApp Astra provides application-aware data management for Kubernetes

• 4 Cybersecurity Best Practices for Your Small Business

• Top 20 Dockerfile Best Practices

• Australia’s answer to thwarting ransomware is good cyber hygiene

• Microsoft Exchange hack: Why so many enterprises still run their own Exchange servers

• Denuvo Anti-Cheat solution available on PlayStation 5

• AWS announces new lower cost One Zone storage classes

• HPE updates GreenLake cloud services portfolio with new capabilities and partnerships

• Now it is F5’s turn to reveal critical security bugs – and the Feds were quick to sound the alarm on these BIG-IP flaws

• Hackers access 150,000+ security cameras in massive Verkada hack

• API Security Weekly: Issue #124

• Attackers Won’t Stop With Exchange Server. You Need a New Playbook

• Ingram Micro Cloud collaborates with AWS to drive cloud innovation for channel partners

• Accedian launches TLS 1.3 decryption capabilities for Skylight platform

• Juniper Networks partners with PBX-Change to increase network speed and visibility

• Clint Poole joins Egress as CMO

• JupiterOne adds several industry leaders to board of investors

• Qumulo announced a full integration with Commvault

• Bridgepointe Technologies adds PacketFabric to its supplier portfolio

• Virtium releases StorFly Series 6 M.2 NVMe line of SSDs

• CyberArk appoints Avril England to its board of directors

• Ric Smith joins SentinelOne as CTO

• iPhone app exposed other people’s call recordings

• Top 10 Cybersecurity Vulnerabilities of 2020

• New House task force focuses on supply chain vulnerabilities

• Travel Oklahoma – 637,279 breached accounts

• IT Security News Daily Summary 2021-03-10

• How to Become a CISO in 5 Steps

• The Most Common Types of Cybercrime

• HASC chair pivots spending debate to acquisition reform

• Florida hack exposes danger to water systems

• NIST tackles video analytics for public safety

• DOD: Counter-drone defense calls for data fusion

• COVID raises the stakes for digitally accessible documents

• Fake Ad Blocker Delivers Hybrid Cryptominer/Ransomware Infection

• SAP Stomps Out Critical RCE Flaw in Manufacturing Software

• How cybercrime groups are exploiting the latest Microsoft Exchange flaws

• European Police Pounce After Cracking Crime Chat Network

• Superstar K-Pop Band’s TikTok Hacked

• Malware Operator Employs New Trick to Upload Its Dropper into Google Play

• Review: 2021 Chrysler Pacifica Shows Off Uconnect 5 With Wireless CarPlay

• Apple Renews Animated Musical Comedy ‘Central Park’ for a Third Season

• Twitter to Make ‘Spaces’ Chat Feature Available to Everyone in April

• Apple More Prominently Highlighting iPhone Trade-In Deals From Carriers

• Jamf move improves enterprise security and compliance for macOS

• Cyberattackers Exploiting Critical WordPress Plugin Bug

• F5 Patches Four Critical Bugs in Big-IP Suite

• Malware Operator Employs New Trick to Upload its Dropper into Google Play

• FBI-CISA Joint Advisory on Compromise of Microsoft Exchange Server

• BrandPost: Implementing Unified Security with an Open Fabric Ecosystem

• House passes Rescue package with TMF funding

• Startup uses NLP and AI to make software security reviews less painful

• Security platform replaces manual risk assessment with on-the-fly analysis during the build process

• WhatsApp Will Let iPhone Users Protect iCloud Backups with a Password

• Romance Fraudster Who Conned Jenifer Lewis Jailed

• Multiple Attack Groups Exploited Microsoft Exchange Flaws Prior to the Patches

• ‘Thousands’ of Verkada Cameras Affected by Hacking Breach

• US Schools Faced Record Number of Security Incidents in 2020

• Does a SIEM make sense for my MSP?

• BSidesSF 2021: Recharge Day 2

• Joy Of Tech® ‘Tweets For Sale’

• How Security Assurance Teams Can Use DevOps Principles to Become More Productive and Happier

• White hat hackers gained access more than 150,000 surveillance cameras

• Deals: Apple’s 512GB M1 MacBook Pro Hits New Low Price of $1,349.99 ($149 Off)

• Don’t Be a Victim of Cyber Extortion

• App Stores Have Kicked Out Some Location Data Brokers. Good, Now Kick Them All Out.

• Leaders warn of U.S. cyber vulnerabilities

• Hacktivists breach Verkada and view 150,000 CCTV cams in hospitals, prisons, a Tesla factory, even Cloudflare HQ

• Linux Foundation Announces Open-Source Software Signing to Combat Supply Chain Attacks

• OVH Datacenter Goes up in Flames

• zoMiner Botnet is Targeting Elasticsearch and Jenkins Servers

• Top sites affected after OVH data center catches disastrous fire

• CISA: No federal agencies compromised by Exchange hack so far

• Cyber criminals targeting hospitals are ‘playing with lives’ and must be stopped, report warns

• 150,000 security cameras allegedly breached in “too much fun” hack

• American Companies Not Taking Cybersecurity Seriously

• New major interventions to block encrypted communications of criminal networks

• Black Hat USA

• How to Protect Vulnerable Seniors From Cybercrime

• Hiding in Plain Sight: Protecting Enterprises from the ‘New’ Shadow IT

• F5 Security Advisory for RCE Vulnerabilities in BIG-IP, BIG-IQ

• Why the BISO May Be the Utility Player Your Org Needs Now

• The Week in Breach News: 03/03/21 – 03/09/21

• What is Secure Boot? It’s Where IoT Security Starts | Keyfactor

• VLANs Streamline Network Connectivity and Increase Security

• Get earlier, actionable vulnerability insights from Black Duck Security Advisories

• If you have an F5, it’s time to patch! Thanks Michele for the link to today’s crop of F5 CVE’s, which include an unauthenticated RCE against the API, and another RCE against “hidden” config pages! https://support.f5.com/csp/article/K02566623, (Wed, Mar 10th)

• See the Unseen in AWS Mirrored Traffic With VM-Series

• Apple Now Able to Repair an iPhone 12 Pro’s Cracked Rear Glass Without Replacing the Entire Device

• Apple TV+ Series ‘Lady in the Lake’ to Star Natalie Portman and Lupita Nyong’o

• How Biden’s Cyber Strategy Echoes Trump’s

• EU Privacy Law and U.S. Surveillance: Solving the Problem of Transatlantic Data Transfers

• The risks of social selling

• Leveraging Automation to Secure Your Remote & Hybrid Workforce

• Fuzzing Java in OSS-Fuzz

• EFF to Supreme Court: Users Must Be Able to Hold Tech Companies Accountable in Lawsuits When Their Data is Mishandled

• OVH cloud datacenter destroyed by fire

• International Women’s Day: Women in Cybersecurity

• Russia Slows Twitter And Threatens Total Ban

• Apple Chooses Munich For Chip Design Centre

• Enabling COOP and COEP reports on Report URI

• 3.6 million websites taken offline after fire at OVH datacenters

• 2020 was a ‘record-breaking’ year in US school hacks, security failures

• Nim-Based Malware Loader Spreads Via Spear-Phishing Emails

• How organizations can combat the security risks of working remotely

• Proposed Bill Would Allow Americans to Sue Foreign Cyber-Actors

• SolarWinds Unlikely to Be an Isolated Event as Attackers Become More Sophisticated

• EU Banking Regulator Suffers Cyberattack in a Microsoft Email Breach

• A Massive Security Breach for the Silicon Valley Start-Up

• University of the Highlands and Islands Deals with a Sudden Cyber Attack

• Threat Actors Ruined the Launch of Wiliams New FW43B Car

• Kremlin concerned about the report of possible US cyber attacks

• Microsoft Releases March 2021 Security Updates

• Researchers Unveil New Linux Malware Linked to Chinese Hackers

• CISO Stories Podcast: Your Job is to Make Cybersecurity Simple

• Linux Foundation Lauches Software Signing Service

• Twitter Testing Full-Sized Image Previews in Timeline on iOS and Android

• What Is IT Asset Inventory Management (ITAM)?

• Azure Defender for Storage powered by Microsoft threat intelligence

• Belgian cops crack down on encrypted phone network Sky ECC in 200 overnight raids as firm denies criminal ties

• Cyber attack on Norway Parliament and Russia Kremlin website down

• Ransomware: Prevention is better than cure

• Apple Cuts iPhone Orders By 20 Percent – Report

• Hackers steal $3.8 million from Defi Protocol DODO

• Cybersecurity in 2021: Stopping the madness

• 6 security risks in software development and how to address them

• What is Secure Boot? It’s Where IoT Security Starts | Keyfactor

• Researchers Show First Side-Channel Attack Against Apple M1 Chips

• Latest Mass Hacks Highlight Challenge for Biden Administration

• Developer Security Firm Snyk Raises $300 Million at $4.7 Billion Valuation

• Exchange Server issues loom over March Patch Tuesday

• ESET: More Than 10 APT Groups Exploiting Recent Microsoft Exchange Vulnerabilities

• Digitally Transforming Trusted Transactions Through Biometrics, ML & AI

• Call Recorder iPhone App Flaw Uncovered

• OVH data centers suffered a fire, many popular sites are offline

• Using Intelligence to Prioritize AWS Guard Duty Alerts

• Deals: Woot Discounts AirPods Pro to $189.99 ($59 Off) [Update: Sold Out]

• Datto acquires BitDam to help shape the security roadmap for MSPs

• Ryuk Ransomware Hits 700 Spanish Government Labor Agency Offices

• GandCrab Ransomware Affiliate Member Was Arrested For Phishing Attacks

• Palo Alto Networks CEO on what we know about the scope of the Microsoft hack

• Everything You Need to Know About Batteries in Your iPhone, iPad, and Mac

• 9 Practical Tips to Take Your Cybersecurity Career to the Next Level

• BrandPost: Hack to the Future: Why Attack Simulations are the Future of Security Control Testing

• New Linux Backdoor RedXOR Likely Operated by Chinese Nation-State Actor

• Capital One Ventures partners with Securonix on cloud-native security analytics in $24M deal

• App security platform provider Pathlock raises $20M

• Microsoft expands AccountGuard ahead of elections, deepens Yubico partnership

• Protect your online data with this decentralized VPN and firewall portable solution

• Breach Exposes Verkada Security Camera Footage at Tesla, Cloudflare

• How your remote employees may be sharing sensitive data

• Lumu Raises $7.5M to Advance Threat Detection

• Snyk Advances Developer-First Security with Series E Investment

• SharpRDP – PSExec without PSExec, PSRemoting without PowerShell, (Wed, Mar 10th)

• CEO Reaction On New Cyber Legislation

• Experts On West Ham Utd Website Leaks Users’ Data

• CEO Fraud Emails – Not Every Money Transfer Request You Receive is Legit

• Internet Advocates Call on ISPs to Commit to Basic User Privacy Protections

• Cybercrime could cost $10.5 trillion dollars by 2025, according to Cybersecurity Ventures

• BitSight Observations Into the HAFNIUM Attacks: Part One

• Belgian cops crack down on encrypted phone network Sky ECC in 200 overnight raids, as firm denies criminal ties

• Hackers steal $2.3 million from Defi Protocol DODO

• Check Point CloudGuard NDR integrates with AWS VPC Traffic Mirroring

• How Snyk targeted developers to become a $4.7B cloud-security giant

• FCW Insider: March 10

• Cyber Insurance Provider Corvus Raises $100 Million

• NHS Regulator Faces Surge in Email Attacks During Vaccine Rollout

• It’s Open Season for Microsoft Exchange Server Hacks

• How to Balance IT Stability and Strong Security

• Deals: Woot Discounts AirPods Pro to $189.99 ($59 Off)

• Experts Insight On Critical Remote Code Execution Flaws, IE Zero-Day Fixed In Microsoft’s March Patch Tuesday

• Verkada security cameras hijacked following breach

• Adobe releases security patches for a number of their apps

• Four IT Applications in Western Australia Are Having Control Weaknesses

• The CARES Grant: Don’t Leave Money on the Table

• The Best Way To Track Your Kids’ Real-Time Location

• Right To Repair Law To Tackle E-Waste Problem

• DataGrail, which helps enterprises manage data privacy requests, raises $30M

• How weak passwords could put your organization at risk

• Aqua Security Achieves Unicorn Status After $135 Million Funding Round

• Hackers Breach Cameras at Banks, Jails, Tesla and More

• Aqua Security Announces $135 Million in Series E Funding at a $1 Billion Valuation

• More on the Chinese Zero-Day Microsoft Exchange Hack

• Expert Views: Microsoft Exchange Is Not The Issue, Email Is

• z0Miner Spreads Using ElasticSearch and Jenkins RCE Vulnerabilities

• Benefits And Risks Of Remote Work For Businesses | Avast

• 2021 Cybersecurity Outlook: Attackers vs. Defenders

• Stop Trying to Take Humans Out of SOC … Except … Wait… Wait… Wait…

• Is Your Fate In the Cloud? What Is Security Shared Fate?

• Aqua Security protects containerized apps and infrastructure, raises $135M

• SAP Patches Critical Flaws in MII, NetWeaver Products

• Most Threat Analysts Banned from Sharing Intel with Peers

• It’s Open Season for Microsoft Exchange Hacks

• Leaked Renders Claim to Show Third-Generation AirPods Design

• Researchers discover flaws in Apple’s offline ‘find my device’ feature

• Hackers Breach Security Company Verkada Accessing 150,000 Cameras Inside Tesla, Hospitals, and Jails

• 5 reasons why the cost of ransomware attacks is rising

• Why the Microsoft Exchange Server attack isn’t going away soon

• Tesla Shares Rally After Expensive Share Slide

• Iranian Hackers Uses ScreenConnect Remote Access Tool to Target Government Agencies

• Exposed admin password leads to massive surveillance camera breach at hundreds of businesses

• OVHcloud data centers engulfed in flames

• WaterISAC: 15 Security Fundamentals You Need to Know

• Exposed Password Gave Hackers Access to 150,000 Cameras

• Russia threatens to block Twitter over banned content

• Microsoft Exchange: Patching Too Late If Already Compromised

• Loose SPF, DKIM, DMARC, and ARC Settings Sabotage Security

• Verkada CCTV Breach Exposes Hundreds Of Businesses

• Unpatched Flaws in Netgear Business Switches Expose Organizations to Attacks

• Microsoft Expands Coverage of Exchange Server Patches

• FIN8 Hackers Return With More Powerful Version of BADHATCH PoS Malware

• A flaw in The Plus Addons for Elementor WordPress plugin allows sites takeover

• Ad blocker with miner included

• Adobe Photoshop 22.3 Update Rolling Out With Apple Silicon Support

• US Govt Concern Over A Hack On Microsoft’s Exchange Email Software

• Cybersecurity Expert Insight: SITA Data Breach

• Experts Reaction On Tens Of Thousands Of US Organisations Hit In Ongoing Microsoft Exchange Hack

• Heimdal™ Proactively Protects Its Customers Against Microsoft Exchange Server Exploit

• Brit cybercops issue tender to rip and replace their formerly flaw-ridden CyberAlarm tool

• Microsoft’s March Patch Tuesday fixes 14 Critical flaws

• Apple to Invest Over 1 Billion Euros in Munich Silicon Design Center

• EU Banking Reg. Hit By MS Exchange Attack– Experts Reaction

• REvil ransomware’s calling, and it’s not good news

• Looking for adding new detection technologies in your security products?

• Is Cybersecurity More Difficult Than Going to Mars?

• Missing colleagues in cybersecurity? That’s no surprise – the world is missing 3.5 million

• What Most Enterprises Get Wrong About ZTNA

• How to mitigate security risks as cloud services adoption spikes

• ZecOps Selected to Fast Company’s Most Innovative Companies for 2021

• Hackers breach systems of Cloud based Security Camera company Verkada

• French company sues Apple Inc over Data Privacy

• The Future of Global Cybersecurity in the Manufacturing Industry

• How to Apply Patches to Mule 4.x

• Importance of 2FA in Improving The Security Of Atlassian Products

• Verkada disables accounts after reports its security cameras were breached

• WhatsApp may soon roll out encrypted chat backups

• Microsoft Issues Security Patches for 82 Flaws — IE 0-Day Under Active Attacks

• Protecting Your Data from Cyber Extortion: Lessons from the Latest Mega-hack

• 372% increase in healthcare bot traffic could tamper with booking vaccine dates

• 2021 Hacker Report: Hackers are not just driven by money

• Human rights lawyers ask Australia’s ‘hacking’ Bill be redrafted

• iPhone 12 Mini Faces Production Cut Due to ‘Far Lower’ Demand Than Expected

• Rapid digital transformation makes an application strategy a business imperative

• Most decision makers plan to increase spending on cybersecurity this year

• How FIM Is More Than Just About Maintaining Compliance

• ISC Stormcast For Wednesday, March 10th, 2021 https://isc.sans.edu/podcastdetail.html?id=7406, (Wed, Mar 10th)

• Two New Apple Silicon MacBooks Expected to Enter Mass Production in Second Half of 2021

• Lightspin enhances contextual security for cloud environments

• Free sigstore signing service confirms software origin and authenticity

• FireEye CEO: Reckless Microsoft Hack Unusual for China

• 2021 iPad Pro Case Found at Target as Rumors Swirl About Upcoming Refresh

• Akash MAINNET 2 decentralized open-source cloud now available

• India pauses blockchain-powered SMS spam-scrubber after it swallows people’s one-time login codes

• Microsoft Patch Tuesday, March 2021 Edition

• Sontiq acquires Breach Clarity to lead data breach and financial fraud protection initiatives

• VMware unveils portfolio updates to help customers modernize apps and infrastructure

• Big Breaches: Cybersecurity Lessons for Everyone book released

• Cybercrime could cost $10.5 trillion dollars by 2025

• Combating Evolved Cyber Threats Starts With Knowing Where You Stand

• Privacy in Practice: Securing Your Data in 2021 and Beyond

• Linux Foundation announces new open-source software signing service

• 1Password for Mac Updated With Apple Silicon Support

• The Microsoft Exchange Hack and the Great Email Robbery

• CybelAngel announces new hires and plans for London office

• Mastercard expands Engage platform to provide digital payment experiences for consumers

• Gigamon Hawk integrates with AWS to simplify and secure cloud adoption

• TinyCheck: Stalkerware detection that doesn’t leave a trace

• Pentagon issues cyber tasking order in response to Exchange hack

• WA Auditor-General finds control weaknesses in four state IT applications

• Apple’s Device Location-Tracking System Could Expose User Identities

• Apple Podcasts App Lets Users ‘Follow’ New Content Instead of ‘Subscribe’ in iOS 14.5

• SailPoint appoints Heather Gantt-Evans as CISO

• Ayla Fast Track program helps OEMs quick launch of new connected products

• Microsoft’s big email hack: What happened, who did it, and why it matters

Generated on 2021-03-11 23:55:29.736981