IT Security News Daily Summary 2021-03-25

• 11 Popular Penetration Testing Tools

• Air Force seeks ‘ubiquitous connectivity’ from telework to bases

• Z-axis tech keeps responders safe

• NGA taps 4 states for cybersecurity policy academy

• How an advanced architecture can dramatically mitigate massive data breaches

• The good and the bad with Chrome web browser’s new security defaults

• Fleeceware Apps Bank $400M in Revenue

• Black Kingdom ransomware foiled through Mega password change

• CISA Adds Two Web Shells to Exchange Server Guidance

• COVID-19 Continues to Fuel Fraud Attacks

• OpenSSL Project released 1.1.1k version to fix two High-severity flaws

• M1 Mac Mini Won’t Wake Connected Displays, Some Owners Complain

• Analyzing attacks taking advantage of the Exchange Server vulnerabilities

• Perkiler malware turns to SMB brute force to spread

• Major vulnerability exposes 5G core network slicing to DoS attacks

• Microsoft Offers Up To $30K For Teams Bugs

• Report: 40% of SaaS application users have lost data

• In Secure Silicon We Trust

• Apple Fitness+ Outage Makes Some Workouts Unavailable

• iPhone 12 Pro Max is Among ‘Best Smartphones of 2021’ Says Consumer Reports

• OpenSSL shuts down two high-severity bugs: Flaws enable cert shenanigans, denial-of-service attacks

• Google removes ClearURLs Chrome extension from its store

• New Code Execution Flaws In Solarwinds Orion Platform

• Nearly Half of Popular Android Apps Built With High-Risk Components

• Extracting Toolmarks from Open Source Reporting, pt II

• Apple Now Accepts Google Pixel 4a and Pixel 5 and Samsung Note 20 for Trade-In Towards New iPhone Purchase

• Apple Fixes iCloud Links for Sharing Shortcuts

• Free as in Climbing: Rock Climber’s Open Data Project Threatened by Bogus Copyright Claims

• What’s Covered Under Data Breach Insurance

• Facebook Disrupts Spy Effort Aimed at Uyghurs

• Cyber insurance company CNA discloses cyber attack

• Data Loss Impacts 40% of SaaS App Users

• Activist Denies Facebook Fraud

• Security Operations in the World We Live in Now

• Cisco Releases Security Updates

• Samba Releases Security Updates

• MSFT ‘The Reaper’

• USENIX Enigma 2021 – Hyrum Anderson’s ‘The Practical Divide Between Adversarial ML Research And Security Practice: A Red Team Perspective’

• 62,000 Microsoft Exchange Servers potentially left unpatched, weeks after software bugs were first uncovered

• YouTubers Demo the Apple-Related Tech They Use to Get Fit

• What Did We Learn From House and Senate Hearings on the Capitol Assault?

• The Geopolitics of Politics and Protest: Myanmar, China and the U.S.

• Announcing the Android Ready SE Alliance

• Slack hurries to fix direct message flaw that allowed harassment

• AI is boring – or is it?

• 2021-03-25 – Medical reminder service trial ending scam emails

• Best Windows and Mac backup software in 2021

• Manufacturing’s Cloud Migration Opens Door to Major Cyber-Risk

• Dodge is using two-factor authentication to secure its most powerful muscle cars

• US Cyber Experts Conducted Operations to Safeguard Election

• The Growing Need for a New Security Platform

• The CIO’s Shifting Role: Improving Security With Shared Responsibility

• Facebook took action against China-linked APT targeting Uyghur activists

• Throwboy Launches New Collection of Apple Themed T-Shirts

• Apple Bought the Most AI Companies From 2016 to 2020

• Popular Android Apps Putting Consumer Privacy and Security At Risk

• BitSight Observations Into Hafnium Part Four: Who Is Still Vulnerable?

• 7 Top Tips for Accelerating your IoT Projects in 2021

• Three ways technology can help revive the music industry

• Cybersecurity strategy…. To Plan or not to plan…That is the question

• A passport to freedom? Fake COVID-19 test results and vaccination certificates offered on Darknet and hacking forums

• Cisco Addresses Critical Security Flaws in Jabber Application

• Facebook Blocks Chinese State-Sponsored Threat Actors

• FBI Warns Scammers Spoofing FBI Office Phone Numbers in Government Impersonation Fraud

• Accellion FTA Vulnerability Affects Universities in Colorado and Miami

• Shell Disclosed Third-Party Data Breach Due To Vulnerable Accellion FTA

• BrandPost: Episode 3: The Zero Trust Model

• Leveraging adversarial data for security control validation

• OneWeb ‘Milestone’ Launch Of Another 36 Satellites

• Secure Software Development Habits

• New Slack Connect DM Feature Raises Security Concerns

• CNA Suffers “Sophisticated” Cyber-Attack

• McAfee Partners with College to Help Address Cyber-Skills Shortage

• Anonymous Hackers reportedly exposed the anti-Russian activities of the British Council

• 7 Quick and Easy Ways to Secure Drupal Website

• Apple Researching ‘Deployable Feet’ to Enhance MacBook Pro Cooling

• T-Mobile Completes Spam Prevention Rollout, Now Authenticates Calls From 98% of Wireless Users

• Deals: Save Up to 40% on Useful Mobile Accessories in Verizon’s New ‘Buy More, Save More’ Sale

• Spotify Launches New Design for Desktop App and Web Player

• DevSecOps as a culture – What you need to know

• SalusCare Hit by Cyberattack on Both its Patient and Employee Data

• SaltStack Issues Second Fix for a Privilege Escalation Bug

• Work from home increases Cyber Threats on Enterprises

• Amazon Executive Fires Back At US Senator Visit To Alabama Workers

• Security Culture – Beyond Technical Controls, by Red Hat’s Andrea Hall

• Severe vulnerabilities patched in Facebook for WordPress Plugin

• IBM launches new services to simplify hybrid cloud security

• How to protect your organization and yourself from cryptocurrency scams

• OpenSSL 1.1.1k Patches Two High-Severity Vulnerabilities

• Feedzai Lands $200M in Series C Funding

• Mamba Ransomware Leverages DiskCryptor for Encryption, FBI Warns

• Threat Stack Announces Enhanced Security Analytics to Proactively Identify Risk and Speed Remediation

• Chrome to Enforce HTTPS Web Protocol (Like It or Not)

• The surge of fake COVID-19 test results, vaccines and vaccination certificates on the Dark Web

• Deals: iPad Sales Providing Up to $100 Off iPad Pro and iPad Air

• New AirPods Expected to Launch in Third Quarter as Production Gets Underway

• Data Breach Suffered by the California Controller’s Office

• Over $400 Million Earned by Fleeceware Apps in the App Store and Play Store

• Cyberattack Hits University of Northampton

• 1-15 March 2021 Cyber Attack Timeline

• Tencent Keen Security Lab: Experimental Security Research of Tesla Autopilot

• TenSec 2019

• Exploiting Wi-Fi Stack on Tesla Model S

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• Transparency about Data Protection at Report URI

• The pandemic-driven rush to cloud is compromising security

• FCW Insider: March 25, 2021

• Impatient lawmakers press Biden for cyber director nominee

• 5 tips for implementing a zero trust model

• 5 Things IT Should Ask Managed Security Providers

• Hackers Start Exploiting Recent Vulnerabilities in Thrive Theme WordPress Plugins

• New Worm Capabilities Targets Windows Machines

• Personal Details of 6.5 Million Israeli Voters Leaked Online

• How Personally Identifiable Information Can Put Your Company at Risk

• Webshells Observed in Post-Compromised Exchange Servers  

• MAR-10329496-1.v1: China Chopper Webshell

• MAR-10329499-1.v1: China Chopper Webshell

• New Research from ForgeRock and Google Cloud Finds 80% of IT Leaders will Adopt or Expand Cloud-Based IAM and Face Challenges

• Engineer punished for reporting data leak

• Attackers exploiting recently-patched vulnerabilities

• Fleeceware apps extract hundreds of dollars per year from their users through subscription services

• What Is MDM Software and Why Is It Important?

• Strengthen and optimize compliance in Azure Security Center

• Defence Industrial Strategy suggests the UK is ready to start taking its homegrown infosec industry seriously

• Cloudflare launches Page Shield to thwart Magecart card skimming attacks

• Four out of five companies say they’ve spotted this cyber-attack. Plenty still fall victim to it

• S3 Ep25: Drained accounts, ransomware attacks and Linux badware [Podcast]

• Rise in Attacks on ICS Computers in Second Half of 2020

• 6 Tips for Limiting Damage from Third-Party Attacks

• The Dark Web Is Teeming With Vaccine Listings Right Now

• Venafi Machine Identity Management Fund Doubles the Number of Developer Projects in 2020

• MITRE Engenuity and Cybrary Partner to Offer First-Ever MITRE ATT&CK® Training and Certification Product

• 30 million Americans affected by the Astoria Company data breach

• Facial Recognition Beats The Covid Mask Challenge

• Facebook Removes Accounts Of China-Based Hackers Targeting Uighurs

• Microsoft Teams Now Has Its Own Bug Bounty For Researchers

• Active Exploits Hit WordPress Sites Vulnerable To Thrive Themes Flaws

• Chinese Hackers Used Fake Facebook Accounts in Effort to Spread Malware

• Average ransomware payouts shoot up 171% to over $300,000

• Microsoft Offers Up to $30,000 for Vulnerabilities in Teams Desktop Client

• Two-Thirds of Large Firms Attacked as #COVID19 Hampers Security

• Purple Fox Malware Campaign Deploys Rootkit and Looks for Exposed SMB Services, Research Finds

• Black Kingdom Ransomware Hunting Unpatched Microsoft Exchange Servers

• As Enterprises Race to Embrace Cloud Security and Compliance Automation, Anitian Announces Explosive Growth and Customer Momentum

• 5 Student Cyber Safety Tips for School IT Teams & Administrators

• Radware Powers New Cloud-Based Attack Mitigation Service Launched by Tech Mahindra

• Introducing New AIOps Enhancements on Prisma SD-WAN 5.5

• Apple Says iOS Developers Have ‘Multiple’ Ways of Reaching Users and Are ‘Far From Limited’ to Using Only the App Store

• Bang & Olufsen Launches $499 Beoplay HX Noise-Canceling Headphones Offering 35 Hours of Battery Life

• CNA Ins. Cyber Attack- Expert Comments

• In-house Versus Externally Managed Security Services

• Experts On NCSC’s Warning To Education Sector Around Cyberattacks

• IoT Maker Sierra Wireless Suffers Ransomware Attack – Experts Reaction And Advice

• FatFace hit by cyberattack, only informing customers two months later

• Facebook stops Chinese hackers spying on Uighurs living abroad

• Zuckerberg Proposes ‘Thoughtful Reform’ Of Section 230 Liability

• Morphisec snags $31M for moving target defense that protects mid-sized companies

• University students refunded for false ads touting job opportunities with Microsoft, Twitter

• This company was hit by ransomware. Here’s what they did next, and why they didn’t pay up

• Microsoft Teams now has its own bug bounties for researchers who can spot security flaws

• Half of UK Firms Suffer Cyber-Skills Gaps

• Groups Call for Ethical Guidelines on Location-Tracking Tech

• Forcing Self-Service Password Reset (SSPR) Registration to Increase ROI

• Apple Provides Timeline for ProtonVPN App Update, Suggesting App Store Rejection Was Unrelated to Current Events in Myanmar

• FatFace Cyberattack Leaves Shoppers Open To Identity Theft

• Security Expert Warns Of Insider Threat Which Is Often Ignored

• Threat Intelligence Expert On Facebook News Regarding Cyber Espionage Activity Hitting Uyghurs

• Expert Commentary: Billions Of Records Belonging To FBS Have Been Leaked

• Microsoft offers rewards for security bugs in Microsoft Teams

• Is Microsoft About To Buy Discord?

• Tesla In-Car Camera Prompts Privacy Worries – Consumer Reports

• The Advantages of a Unified Approach to Cloud Data Security

• #IMOS21: Six Components of a Bug Bounty Program

• New Apple Music ‘Saylists’ Geared Towards Speech Therapy for Children

• BP Chargemaster’s Pulse rebrand let crims send IcedID banking trojan from formerly legit mailboxes

• Business continuity and disaster recovery planning: The basics

• How the Lift mentoring program gives women in cybersecurity a leg up

• Apple Fined $2 Million For Selling iPhone 12 With No Charger

• ‘Like playing whack-a-mole’: Do cyber-crime crackdowns have any real impact?

• FatFace Faces Customer Anger After Controversial Breach Response

• Data From These Two Universities Stolen and Published Online by Clop Ransomware Group

• Critical Cisco Jabber Bug Could Let Attackers Hack Remote Systems

• Benefits of Web Asset Discovery

• Threat landscape for industrial automation systems. Statistics for H2 2020

• Five arrests in hit against investment fraudsters

• Chinese Hackers Used Facebook to Hack Uighur Muslims Living Abroad

• Want to add antivirus to your existing portfolio?

• Decision diversity: more equals better for the sake of a more secure organisation

• IoT Security in the Wake of the Verkada Breach

• Overcoming Multi-cloud Security Challenges with Three Key Tips

• How CISOs Limit Downtime Without Impacting Security

• Using memory encryption in web applications to help reduce the risk of Spectre attacks

• Challenges and benefits of using threat data feeds

• Facebook says it blocked hackers in China who were trying to spy on Uyghur Muslims abroad

• IoT device maker Sierra Wireless hit by Ransomware attack

• Suspected ransomware attack on CNA Insurance Chicago

• Vengeful IT worker gets jail time for deleting company’s Microsoft user accounts

• Continued WAN and application growth resulting in network complexity

• Distributed and remote work creating a perfect storm for network security teams

• How to ensure security and trust in connected cars

• AT&T Cybersecurity announces 2021 ‘Partners of the Year Awards’ Winners

• API Security Weekly: Issue #126

• Scaling up on a shoestring while citizen scientists analyse the Great Barrier Reef

• Neustar Unified Identity: Transforming customer data management

• Worldwide Wi-Fi market to reach $25.244 million by 2026

• 61% of businesses say competitive intelligence has made a direct impact on revenue

• Australian Bureau of Statistics ‘on track’ to avoid Censusfail 2.0 come August 10

• How Tripwire Does Configuration Management Differently

• AttackIQ platform automates the validation of AI and ML-based security technologies

• IBM launches new and enhanced services to simplify hybrid cloud security

• Action1 RMM system allows MSPs and IT departments to take control of remote workforces

• Cyemptive Zero Trust Access provides secure access to networks from remote locations

• Google Warns of a New Android Zero-Day Vulnerability Is Under Active Attack

• ISC Stormcast For Thursday, March 25th, 2021 https://isc.sans.edu/podcastdetail.html?id=7428, (Thu, Mar 25th)

• Sonrai Security integrates with AWS to accelerate cloud security transformation

• Noction Intelligent Routing Platform 3.11 features the remote-triggered blackholing capability

• Benu Networks vBNG brings SASE and 5G WWC capabilities to operator and carrier networks

• Shujinko AuditX expands compliance automation to all major clouds and regulatory frameworks

• Facebook’s Pitch to Congress: Section 230 for Me, But not for Thee

• OPM official: No going back to pre-COVID status quo

• Submitting pfSense Firewall Logs to DShield, (Thu, Mar 25th)

• Apple Shares ‘Fumble’ Ad Highlighting iPhone 12 Ceramic Shield

• ServiceNow acquires Intellibot to extend automation and RPA capabilities

• Astadia acquires Anubex to offer a complete mainframe migration RoadMap

• Ingram Micro boosts data center strategy with Veeam and Zadara cloud services

• Medigate partners with Rapid7 to secure real time health by protecting healthcare IoT devices

• SpaceX employee admits security fraud, insider trading on dark web

• Judge Rejects Ex-CIA Worker’s Try to Dismiss Hacking Charges

• Lawsuit Accuses Facebook Of Not Providing A “Safe” Environment For Users

• Being a CISO in 2021: How to Be a Business Leader in the Boardroom

• Guardicore appoints Amit Serper as Area VP of Security Research

• Michael Oberlaender joins LogMeIn as CISO

• Yellowbrick Data appoints Jonathan Reid as CRO

• Orca Security raises $210M to expand global presence and partner program

• Please stop leaking your own personal data online, Indonesia’s COVID-19 taskforce tells citizens

• Brazil leads in phishing attacks

• Cisco Jabber for Windows, macOS, Android and iOS is affected by a critical issue

• Group-IB joins Cyberveilig Nederland to increase cyber resilience in the Netherlands

• Kathleen Sullivan joins Avaya as VP

• Statement on the Re-election of Richard Stallman to the FSF Board

• Facebook shuts down hackers who infected iOS and Android devices

• How to Stay Connected and Protected in a Remote Work Environment

• Check Point CloudGuard Network Security now integrates with Oracle Cloud Infrastructure’s new Flexible Network Load Balancer

• You’ve learned a lot over the past year – and so have the cyber-criminals hiding in your systems

• Why MSPs Need to Shift from Cybersecurity to Cyber Resilience

• Sonrai Security Deepens Security Ties With AWS

• IT Security News Daily Summary 2021-03-24

• Mozilla Firefox 87 Out With New Default Referrer Policy For More Privacy

• Nine Common Access Management Misconceptions Debunked

• ACSC running scans to find vulnerable Microsoft Exchange servers in Australia

• GitHub Awards $25,000 Bug Bounty to the Google Employee

• Facebook Reports China-Linked Cyberattack Targeting Uyghurs

• Ransomware Incidents Continue to Dominate Threat Landscape

• California State Controller’s Office Suffers Data Breach

• Sierra Wireless Website Still Down After Ransomware Attack

• Introducing Bounty Awards for Teams Desktop Client Security Research

• Data, AI to power medical support on the battlefield

• Dems push modular UI tech for state modernizations

• Smart cities are built on data

• Active Exploits Hit WordPress Sites Vulnerable to Thrive Themes Flaws

• ProtonVPN CEO Blasts Apple for ‘Aiding Tyrants’ in Myanmar

• Top benefits of SOAR tools, plus potential pitfalls to consider

• The Hacker Mind: Shellshock

• How to Ensure Your RDP Is Secure From MitM Attacks

• What’s at stake with Biden’s Pentagon vacancies?

• Facebook Disrupts Chinese Spies Using iPhone, Android Malware

• Most Phishing Attacks Use Compromised Domains and Free Hosting

• Intel CEO Expands on Desire to Make Apple Silicon Chips, Touts ‘Competitive Fun’ With Apple

• Bugs In Netop Vision Pro Learning Platform Threatened Students’ Security

• Tax Season is Here: Avoid These Common Scams Targeting Canadians

• Facebook says Chinese hackers used its platform in targeted campaign to infect, surveil user devices

• Microsoft Exchange Servers See ProxyLogon Patching Frenzy

• Ransomware Attack Foils IoT Giant Sierra Wireless

• Facebook Moves Against ‘Evil Eye’ Hackers Targeting Uyghurs

• All aboard the CMMC bandwagon!

• Breach Clarity Data Breach Report: Week of March 23

• Job Application Filled Out by Steve Jobs in 1973 Sells for $222,400

• Disney+ U.S. Price Increasing to $7.99/Month This Friday

• What Laws Constrain This Russian Private Military Company?

• Making the National Cyber Director Operational With a National Cyber Defense Center

• Merchant Crypto Payments: A New National Security Frontier

• How one data scientist is pioneering techniques to detect security threats

• Over 6 Million Israeli Citizens Suffer Data Leak

• BlackKingdom Ransomware Could Encrypt Files Multiple Times or Brick Systems

• Phishing Attacks Leveraging Email Marketing Services to Bypass SEGs

• Watch out as Purple Fox malware with worm module hits Windows

• Spear Phishing is the Next Big Challenge for CISOs

• Industry groups call for TMF reforms following funding boost

• Microsoft: Ongoing, Expanding Campaign Bypassing Phishing Protections

• Air Charter Firm Solairus Aviation Suffers Data Breach

• Cybeats Technologies Acquired by Relay Medical

• What a Federal Data Privacy Law Would Mean for Consumers

• Cockup or conspiracy? Popular privacy extension ClearURLs removed from Chrome web store

• Introducing the world’s first SIM made of 100% recycled plastic from old refrigerators

• Stories from the SOC – Propagating malware

• What is network segmentation? NS best practices, requirements explained

• BrandPost: A New Approach to Multi-cloud Security

• India Orders Watchdog Probe Over WhatsApp Privacy Policy

• House fight over defense dollars looms

• Where’s the accountability for Solarwinds?

• Does DOD have the leadership it needs on spectrum?

• Vaccination passport apps could help society reopen – first they have to be secure, private and trusted

• FCC sees data as key to closing digital divide

• IBM adds new services to its cloud security portfolio

• Nearly 100,000 web shells detected on Exchange servers

• Drug Maker to Pay $50m for Destroying Data

• #IMOS21: How to Better Understand and Secure Modern Data

• Russia’s Central Bank has warned of hackers targeting banks’ mobile apps

• Hacking medical devices: Five ways to inoculate yourself from attacks

• Older iCloud Links for Sharing Shortcuts Have Suddenly Stopped Working

• What Is Screen Pinning in Cybersecurity?

• Software renewal scammers unmasked

• How to Securely Erase Data from Your Mac and External Drives

• Suspected Ransomware attack on the University of Northampton

• New CopperStealer Malware Targets Users To Steal Login Credentials

• Google Signs News Deal With Italian Publishers

• How to combat the security challenges of a remote workforce

• Vulnerabilities in TBox RTUs Can Expose Industrial Organizations to Remote Attacks

• Collaboration tool security: How to avoid common risks

• Breach at California State Controller’s Office

• How to Protect Our Critical Infrastructure From Attack

• What are you missing when you don’t enable global threat alerts?

• Apple TV+ Renews British Comedy Series ‘Trying’ for Third Season

• Deals: Get the M1 MacBook Pro for the Best Prices Ever, Available at $1,150 for 256GB and $1,350 for 512GB

• Clop Ransomware Leaks Data Stolen from Colorado, Miami Universities

• Covid-related fraud has cost Americans $382 million

• Are you working with a specialist for your SAP landscapes?

• Acer Faces $50 Million Demand After Ransomware Attack – Report

• Netop Vision Pro – Distance Learning Software is 20/20 in Hindsight

• Keep Remote Classes Safe and in Session: What You Need to Know About Netop Vision Pro

• Phishing And Its Growing Threat To Your Business | Avast

• Hundreds of fleeceware apps earn dubious iOS, Android developers over $400 million

• Ransomware on the Rise: How to Keep You & Your Company Safe

• Purple Fox Malware Targets Windows Machines With New Worm Capabilities

• Prioritizing Application & API Security After the COVID Cloud Rush

• Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

• Salesforce and Microsoft Veterans Unveil Ketch with $23M in Funding to Automate Global Data Compliance in as Little as Three Hours

• Billions of FBS Records Exposed in Online Trading Broker Data Leak

• Myanmar Coup and Internet Censorship Pushes Civilians to Underground Forums, Dark Web

• Tesla Cars Can Now Be Bought In Bitcoin

• Chrome 90 Goes HTTPS By Default While Firefox Injects Substitute Scripts To Foil Tech Tracking

• Ransomware Now Hitting Hacked Exchange Servers

• Purple Fox Malware Has Propagated To Windows

• An Android Vulnerability Exploited in the Wild, fixed by Google

• Are Encrypted Communication Apps used for Crime Operations?

• REvil ransomware gang hacked Acer and is demanding a $50 million ransom

• Why Security Shouldn’t Only Fall on Employees

• Which is the Threat landscape for the ICS sector in 2020?

• Personal information of 24,000 WeLeakInfo customers leaked online

• Facebook Expands Support For Security Key To Mobile Apps

• Now-Patched Android Zero-Day Actively Exploited For Targeted Attacks

• Cloud Security Fundamentals: Servers to Containers & Everything In-Between

• SaltStack revises partial patch for command injection, privilege escalation vulnerability

• Insurer CNA Says Cyberattack Caused Network Disruption

• The Case for Taking Down Dark Web Sites

• LogMeIn Appoints Michael Oberlaender as CISO

• Report: Facebook’s Rules Allow For Users To Call For Death Of Public Figures

• Identity Fraud Losses Soared to $56 Billion in 2020, Javelin Researchers Find

• Action Fraud Warns of Ongoing UK National Insurance Scam

• Exabeam Announces New Product to Solve Alert Fatigue and Prevent Breaches

• Black Kingdom ransomware is targeting Microsoft Exchange servers

• Deals: Save Up to $50 on Apple Watch Series 6 and SE Models

• Apple Implements Tougher Security Guidelines at Factories to Prevent Leaks

• Cloudflare DLP provides CISOs built-in protection against internal and external threats

• What Is Update Management and Why Do You Need It

• CNA Was Hit by a Cyberattack and Its Operations Were Impacted

• Clothes retailer Fatface: Someone’s broken in and accessed your personal data, including partial card payment details… Don’t tell anyone

• BT Staff To Receive £1,500 Pandemic Bonus

• Online trading broker FBS exposes 20TB of data with 16 billion records

• Women in Security Part 5: Meet Lavine Oluoch, Threat Analyst

• Purple Fox malware evolves to propagate across Windows machines

• Honeywell Says Malware Disrupted IT Systems

• Ransomware Reminding Cyber Security Experts It Still Exists

• Sonrai Security Advances Relationship with AWS to Accelerate Cloud Security Transformation

• Expert Reacted On Government Department Has Lost 306 Work Devices Since 2019

• Reducing Human Error Security Threats with a Remote Workforce

• 5G network slicing vulnerability leaves enterprises exposed to cyberattacks

• IT contractor sent to jail after deleting 1,200 Microsoft Office 365 accounts

• Purple Fox Malware Makes Its Way Into Exposed Windows Systems

• Duo Celebrates Women’s History Month

• How To Get It Right With Cybersecurity Training

• Elon Musk Says Tesla Cars Can Now Be Brought By Bitcoin

• Fleeceware Apps On Mobile App Stores | Avast

• 5 Cloud Security Must-Haves in 2021

• Microsoft: 92% of vulnerable Exchange servers are now patched, mitigated

• Proton Founder Accuses Apple of “Giving in to Tyrants”

• Determining Key Shape from Sound

• California Controller’s Office employee falls for phishing link

• Financial Risk Management Platform Feedzai becomes Portugal’s first tech unicorn

• Microsoft: Phishing attacks abuse legitimate services

• British Retailer ‘Fat Face’ Suffers Security Breach

• Hackers Exploit Telegram API For Server-Side Data Exfiltration

• Microsoft Defender Now Addresses Exchange Server Vulnerabilities Automatically

• Intel Turnaround Plan To Invest $20 Billion In Chip Manufacturing

• Microsoft: 92% of vulnerable exchange servers are now patched, mitigated

• Forex Broker Leaks Billions of Customer Records Online

• Infosec Study: NICE Framework Adoption Drives 57% Increase In Cybersecurity Recruiting Satisfaction

• Android Trojan Posing As Clubhouse App

• Women’s History Month- The Challenges And Opportunities For Women In Cybersecurity

• What is Endpoint Security? The Minutiae of 2021’s Golden Standard for Cybersecurity

• Scammers tried slurping folks’ login details through 70,000 coronavirus-themed phishing URLs during 2020

• Quick Hits

• FCW Insider: March 24, 2021

• Sierra Wireless Halts Production After Ransomware Attack

• Email Scam Under the Name of IRS Try to gain EFIN of Tax Preparers

• A day before elections, hackers leaked details of millions of Israeli voters

• Firefox 87 Introduces ‘SmartBlock’ Private Browsing Feature to Fix Websites Broken By Tracking Protections

• IoT Company Sierra Wireless Hit with Ransomware

• How Azure Active Directory helps manage identity for remote users

• Why XDR must include MDR

• (IN)SECURE Magazine issue 68 released

• Chrome 90 goes HTTPS by default while Firefox injects substitute scripts to foil tracking tech

• Looking for adding new detection technologies in your security products?

• Bank loses customers’ social security numbers after ransomware attack

• Preventing Cyberattacks on Water Infrastructure

• 92% of worldwide Microsoft Exchange IPs are now patched or mitigated

• Today Marks 20 Years Since Mac OS X First Launched

• Whatever ‘normal’ is, global CEOs don’t expect to see it return before 2022 and are ploughing funds into security

• Firefox 87 launch packed with private browsing ‘SmartBlock’

• Apple has a problem with ProtonVPN wanting to challenge governments

• Taxpayers Personal Data Exposed Online in the UK

• Purple Fox Rootkit Can Now Spread Itself to Other Windows Computers

• Virginia Enacts New Data Privacy Law

• What businesses need to know to evaluate partner cyber resilience

• Hidden areas of security and the future of hybrid working

• Human errors leading to an increase in cyber attacks on Maritime Industry

• Acquisition deals that took place in Cloud Security business recently

• RCE Flaw in Apache OFBiz Allowed An Attackers to Take Over The ERP System

• Women in Cybersecurity: Why Diversity Matters

• When repairing things you own may make you an outlaw

• Almost $2 billion lost to BEC scams in 2020

• Remote workers admit to playing a significant part in increasing their company’s cybersecurity risks

• Total combined fraud losses climbed to $56 billion in 2020

• What is managed detection and response?

• Is automated vulnerability scanning the best way to secure smart vehicles?

• Cybersecurity awareness is too often a part-time effort

• IT leaders adapting to new challenges by prioritizing collaboration, cloud and security

• A Complete Guide to Perform External Penetration Testing on Your Client Network | Step-by-Step Methods

• ISC Stormcast For Wednesday, March 24th, 2021 https://isc.sans.edu/podcastdetail.html?id=7426, (Wed, Mar 24th)

• Entrust IIDaaS issues physical and digital IDs using a single platform

• Stellar Cyber Open XDR platform stores metadata and offers flexible storage options

• LINE stops data flowing to China after Japanese officials ditch app over privacy concerns

• Debunking Top Cloud Misconfiguration Myths

• Proximus applies ADVA’s timing technology to synchronize Belgium’s open mobile network

• Digital Realty expands secure and private access to Google Cloud’s global network in five key metros

• AVSystem integrates Coiote IoT DM with Microsoft Azure IoT Hub and AWS IoT Core through LwM2M

• Ecessa adds MFA and geographic blocking of emerging threats to its latest firmware release

• Nearly 12-months old COVIDSafe legislation cited as cause of Privacy Act review delays

• AEC confident in its security posture with external audits not welcome

• Analysis from March 2021 Traffic Analysis Quiz, (Wed, Mar 24th)

• Veriff partners with Joompay to enable secure money transfers in Europe

• IDT selects XConnect to optimize A2P SMS messaging with global number intelligence

• Microchip integrates BlueSky technology into the SyncServer S600 Series time server and instruments

• KanguruClone 11 M.2 NVMe SSD Pro Duplicator provides high-volume NVMe cloning

• Astoria (unverified) – 11,498,146 breached accounts

• Jumio raises $150M to fuel innovation and automation

• Microsoft joins IoT M2M Council to accelerate the adoption of IoT

• Toshiba partners with Fortem to expand its radar-based security solutions business

• CSI and Summit Technology Group offer secure and compliant cloud hosting solution

• Protecting women in the cloud: eSafety hopes the Online Safety Act will do just that

• REvil continues ransomware attack streak with takeover of laptop maker Acer

• BlackKingdom ransomware still exploiting insecure Exchange servers

• The Security Digest: #53

• macOS Big Sur 11.3 Beta 5 Includes References to Two Unreleased iMacs

• ACI Worldwide appoints two independent directors to its Board of Directors

• Shankar Arumugavelu joins Seagate Board of Directors

• Impinj appoints Steve Sanghi to its board of directors

Generated on 2021-03-25 23:55:15.251567