IT Security News Daily Summary 2021-03-26

• How to Securely Erase Data from Your Mac and External Drives

• SolarWinds Experimenting With New Software Build System in Wake of Breach

• Apple Releases Security Updates 

• Threat Roundup for March 19 to March 26

• Monitoramento de rede do Windows facilitado com OpManager

• Razões pelas quais o patch integrado e o gerenciamento de vulnerabilidade reduzem os riscos de forma rápida e eficiente

• Friday Squid Blogging: Squid Potato Masher

• Dystopia Prime: Amazon Subjects Its Drivers to Biometric Surveillance

• Dismantling the ‘old boys’ club’ at State

• Advanced encryption powers privacy-protecting gun registry

• Air Force scorecard to track increasing connectivity

• Global 5G from space

• DOE investing in machine learning tools for data analysis

• Executive Order Would Strengthen Cybersecurity Requirements for Federal Agencies

• ‘Russian Hackers’ Again Target German MPs: Report

• Jumio CEO discusses new $150 million funding round

• Apple Patches iOS Zero-Day

• 40% of Apps Leaking Information

• Judge in Upcoming Epic v. Apple Trial to Limit In-Person Attendees

• Facebook removes 100s of accounts for spreading iOS, Android malware

• Employee Lockdown Stress May Spark Cybersecurity Risk

• How to install the Pritunl VPN server on Ubuntu Server 20.04

• Microsoft Shares Exchange Server Post-Compromise Attack Activity

• Alan Turing, WWII Cryptanalyst and Computer Pioneer, on New £50 Note

• Enrich Your Experience With Palo Alto Networks on LIVEcommunity Today

• Phished Healthcare Provider Takes Legal Action Against Amazon

• A Day in the Life of a DevSecOps Manager

• USENIX Enigma 2021 – Sofía Celi’s’ ‘I Thought I Was Being Strong With A Complicated Person: The Tales Of Intimate Gender-Based Online Abuse In The Global South’

• XKCD ‘IMDb Vaccines’

• Is Tesla an Elaborate Scam?

• Hades ransomware gang targets big organizations in the US

• MacRumors Giveaway: Win a Leather Folio for the iPad From Woolnut

• A quick FAQ about NFTs

• Data Dump for 7.3 million Dutch Car Owners Offered for Sale on Hacking Forum

• OpenSSL Update Fixes Two High-Severity Vulnerabilities

• Mamba Ransomware Stores Key in Plaintext

• Google wants to standardize digital car key and ID support on Android

• A new Android spyware masquerades as a ‘system update’

• 15 Email Delivery Terms Explained

• Stratus Technologies, Sierra Wireless Suffered Ransomware Attacks

• BrandPost: 5 tips for maximizing the effectiveness of your EDR solutions

• Cloud Security Fundamentals: Servers to Containers & Everything In-Between

• Cloudflare goes deep on API abuse detection

• VA chief looks at spend, productivity on $16B health record modernization plan

• Stay in control with Azure AD Privileged Identity Management

• Data Bias in Machine Learning: Implications for Social Justice

• CISO Stories Podcast: Going All-In on a Career in Security

• Apple Releases watchOS 7.3.3 With Security Updates

• Apple Releases iOS and iPadOS 14.4.2 to Fix Actively Exploited Security Vulnerability

• Four clever ways smart technology can help create big energy savings

• How telecom operators can address the challenges of ‘going digital’

• How the eSIM market is pushing boundaries in 2021

• SD-WAN vs. MPLS: how do they compare from a security perspective?

• Texas power failures highlight dangers of grid attacks

• Women in Security Part 5: Meet Lavine Oluoch, Threat Analyst

• Data-centric security is key to resiliency, cyber risk report says

• How set up and use a VPN on Windows, Mac, iOS, or Android

• Insurance Giant CNA Hit with Novel Ransomware Attack

• SolarWinds CEO gives chief security officer authority and air cover to make software security a priority

• Severe Flaws in Official ‘Facebook for WordPress’ Plugin

• Kaspersky Sees Rise in Ransomware Attacks on ICS Devices in Developed Countries

• EU, US Make New Attempt for Data Privacy Deal

• Report: US Gov Executive Order to Mandate Data Breach Disclosure

• NGA Picks Four States for Academy on Cybersecurity Policy

• Black code: Two critical vulnerabilities found in Intel processors

• Enterprise Cybersecurity Measurement

• Imperva Observes Hive of Activity Following Hafnium Microsoft Exchange Disclosures

• Reducing Human Error Security Threats with a Remote Workforce

• BackBlaze Mistakenly Shared Backup Meta Data with Facebook

• Facebook patches 2 severe vulnerabilities for WordPress Plugin

• UK names Russia and China as Cyber Threats

• Sierra Wireless partially restores network following ransomware attack

• Severe Flaws in Facebook for WordPress Plugin

• How can ransomware attack cloud storage?

• FBI Issues Mamba Alert

• OpenSSL Releases Security Update

• Apple Arcade March 2021 Roundup: ‘SP!NG,’ ‘Cozy Grove,’ ‘HitchHiker,’ and ‘Farm It!’

• Hades ransomware targets ‘big game’ in the US

• Two vulnerabilities found in Intel Processors

• Evil Corp Evades OFAC Sanctions by Employing Hades Ransomware

• What Is Network Monitoring?

• NAS Devices Still Targeted by Brute-Force Attacks, QNAP Warns

• Cloudflare Enhance Users Safety With Browser Isolation, Page Shield

• FCW Insider: March 26, 2021

• Quick Hits

• Accelerating modernization with an extra $1B

• 5G Security Flaw Allows Data Access, DoS Attacks

• QNAP Urges Users to Secure Devices Against Brute-Force Attacks

• Moving from DevOps to CloudOps: The Four-Box Problem

• OpenSSL Releases Patches for 2 High-Severity Security Vulnerabilities

• JumpCloud Sweeps G2 Crowd Leadership Ratings and Wins Big in G2 Momentum Grids

• Solarwinds Orion Platform updates fix two remote code execution issues

• Deals: Get Apple’s 11-Inch iPad Pro Magic Keyboard for $199 ($100 Off, Lowest Price)

• Expert Commentary On UK Gov Cyber Security Report

• Bug bounty program issued for Teams

• Merging Machine-Learning into Endpoint Protection (EPP)

• How Do IT Asset Management Solutions Work and How to Choose One

• Don’t post it! Six social media safety sins to say goodbye to

• 66 Password Statistics That Will Change Your Online Habits

• BrandPost: 5 Mistakes to Avoid When Evaluating Your Next Security Investment

• Alan Turing’s £50 banknote officially unveiled

• Major Security Flaw Spotted in 5G Core Network Slicing Design

• Hacking Weapons Systems

• Suspected Chinese Group Calypso APT Exploiting Vulnerable Microsoft Exchange Servers

• Buffer Overruns, License Violations, And Bad Code: FreeBSD 13’s Close Call

• Hades Ransomware Operators Are Hunting Big Game In The US

• OpenSSL Fixes High-Severity Flaw That Allowed DoS

• Manufacturing’s Cloud Migration Opens Door To Major Cyber Risk

• Experts Insight On Babuk Locker Ransomware Gang Leaks Military Contractor’s Data

• What Is PXE Boot and How Does It Work?

• A Discussion on How to Prevent Ransomware Attacks

• Boards still aren’t taking cybersecurity seriously, warns new NCSC boss. That means everyone is at risk

• What is a VPN and why do you need one? Everything you have to know

• Exchange Server attacks: Microsoft shares intelligence on post-compromise activities

• Vulnerabilities Can Allow Attackers to Remotely Gain Control of Weintek HMIs

• UK Security Chief: CEOs Must Get Closer to Their CISOs

• REvil Ransomware Gang Introduces New Malware Features which can Reboot Infected Devices

• Forex Broker Leaked Customer Records

• 2021 Security Outcomes Study: Timely Incident Response as a Business Enabler

• As Blinken Visits Europe, China Retaliates Against U.S., EU Xinjiang Sanctions

• The Christchurch Report Points to Better Avenues for Internet Reform

• Mamba ransomware weakness exposed by the FBI

• Phishing Emails Are Now Spreading Trickbot Malware, FBI and CISA Warn

• (VIDEO) Getting Started With Duo – Step 5: Adding Users

• Google sets up Android group for future car keys, national ID, e-wallets

• General Says Attacks by Foreign Hackers Are ‘Clarion Call’

• Endpoint Security Provider Morphisec Bags $31 Million Investment

• Burned Out Employees Put Corporate Security at Risk

• Leaker Reveals Size of Apple’s AirTags and Says They’ll Cost Around $39

• Accellion Breach Leaks University & Health System Data – Expert Comments

• The (Cyber)Education Of Man

• Two Critical Vulnerabilities Patched in Facebook for WordPress Plugin

• Why would a lawyer ever need an Information Security Professional?

• Hackers Gained Access to 150,000 IP Cameras Inside Hospitals, Police Departments, Prisons, Schools, and Companies like Tesla & Equinox

• Hades ransomware operators are hunting big game in the US

• Patch Facebook for WordPress to Fix Site Takeover Bugs

• Three arrested in Spain for terrorist financing

• Bloomberg: Apple May Launch Rugged Apple Watch Model for Extreme Sports as Soon as This Year

• iPhone 13 Pro Lineup Rumored to Include Matte Black Option, New Anti-Fingerprint Coating for Stainless Steel Edges, and More

• Security Expert Reacted On Facebook For WordPress Vulnerabilities

• UK Clothing Retailer Breached, Tells Customers Not To Disclose It

• CSO’s ultimate guide to security and privacy laws, regulations, and compliance

• The race to secure 5G

• Women IT leaders reset the CIO-CISO relationship

• ‘Hacktivism’ adds twist to cybersecurity woes

• Critical Flaw in Jabber for Windows Could Lead to Code Execution

• Kroll Acquires Redscan to Expand Cyber-Risk Offering

• Data Breach Saga: What You Need To Know About The Cit0day Data Leak

• Facebook Developing Instagram App for Kids Under 13 | Avast

• New 5G Flaw Exposes Priority Networks to Location Tracking and Other Attacks

• FBI published a flash alert on Mamba Ransomware attacks

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• 5 tendências que definirão o gerenciamento de endpoint em 2021 e além

• Cuatro pilares de gestión de cuentas privilegiadas (PAM), según Gartner

• Report Finds Surge in Malware Aimed at MacOS

• Setting up a SOC in the Midst of a Pandemic

• New Details on Astoria Company Hack Emerge

• 70% of organizations recognize the importance of secure coding practices

• New infosec products of the week: March 26, 2021

• Astoria (unverified) – 11,498,146 breached accounts

• Online businesses that are most targeted by cyber attacks

• Facebook offers 2 severe vulnerabilities for WordPress Plugin

• Purple Fox Malware Propagates as Worms Attacking Windows Machines

• Google says ACCC’s work on ad tech regulation could be at odds with Privacy Act

• Warning issued over scams touting fake COVID‑19 vaccines, asking for Bitcoin

• Another Critical RCE Flaw Discovered in SolarWinds Orion Platform

• Attack volume surged by 48% during the first year of the pandemic

• The war against the virus also fueling a war against digital fraud

• International Women’s Day: Celebrating female-led innovation

• Why biometric bank cards are the future of payments

• Security checklist for using cryptocurrency in online casino transactions

• With more than 400,000 crypto scams created in 2020, increase of 75% predicted for 2021

• Financial services and insurance faring better than most in the pandemic year

• Report: Facebook Is Autogenerating Pages For Extremist Groups

• Data Theorem Cloud Secure protects cloud-native apps, API services and serverless cloud functions

• How to get affordable DV certificates for onion sites

• ISC Stormcast For Friday, March 26th, 2021 https://isc.sans.edu/podcastdetail.html?id=7430, (Fri, Mar 26th)

• Elastic enables users to uncover insights and drive action with their data through the power of search

• SonicWall NSa 3700: Thwarting attacks targeting government agencies and large enterprises

• Elastic Observability updates accelerate root cause analysis and enables unified monitoring

• Services Australia reported 20 security incidents to the ACSC in 2019-20

• Office macro execution evidence, (Fri, Mar 26th)

• Acronis integrates with Kaseya VSA platform to enable better productivity for MSPs

• AWS and Red Hat announce availability of Red Hat OpenShift Service on ROSA

• cPacket cStor 100 sets new standard for capturing, storing, and analyzing network packet data

• SMART Modular expands its DuraFlash ME2 SATA SSD portfolio with M.2 2242, mSATA and Slim SATA

• Samsung expands its DDR5 DRAM memory portfolio with the 512GB DDR5 module based on HKMG

• Combat Networks acquires Duologik and GDL to strengthen its managed solution offerings

• Kroll acquires Redscan to expand cyber risk offering

• Trava raises $3.5M to invest in data science and ML expertise to develop its insurance analytics platform

• IDEMIA partners with Cybernetica to offer strong mobile authentication and digital signatures

• Insight to sell and support the Byos family of patented plug-and-play Secure Endpoint Edge solutions

• CISA is warning of vulnerabilities in GE Power Management Devices

• Consent Management: Picking the Right CIAM Strategy

• Gary Reinersman joins Cloud 9 as CTO

• Paradigm appoints Daniel Creed as VP of cloud and information security

• Confluent expands executive team with two new appointments

• Box appoints Sebastien Marotte as President of Box EMEA

• Strike Graph hires Dan Adams as VP of sales

• Four-Pronged Approach to Keep Your Domain Names and DNS Secure from Cyberattacks

• Lawmakers seek clarity on hazy White House pot policy

• Australia’s COVIDSafe app costs AU$100,000 per month to keep running

• Exec Order Could Force Software Vendors to Disclose Breaches to Federal Gov’t Customers

• U.S. Carriers Fix SMS Routing Vulnerability That Let Hackers Hijack Texts

• IT Security News Daily Summary 2021-03-25

• 11 Popular Penetration Testing Tools

• Air Force seeks ‘ubiquitous connectivity’ from telework to bases

• Z-axis tech keeps responders safe

• NGA taps 4 states for cybersecurity policy academy

• How an advanced architecture can dramatically mitigate massive data breaches

• The good and the bad with Chrome web browser’s new security defaults

• Fleeceware Apps Bank $400M in Revenue

• Black Kingdom ransomware foiled through Mega password change

• CISA Adds Two Web Shells to Exchange Server Guidance

• COVID-19 Continues to Fuel Fraud Attacks

• OpenSSL Project released 1.1.1k version to fix two High-severity flaws

• M1 Mac Mini Won’t Wake Connected Displays, Some Owners Complain

• Analyzing attacks taking advantage of the Exchange Server vulnerabilities

• Perkiler malware turns to SMB brute force to spread

• Major vulnerability exposes 5G core network slicing to DoS attacks

• Microsoft Offers Up To $30K For Teams Bugs

• Report: 40% of SaaS application users have lost data

• In Secure Silicon We Trust

• Apple Fitness+ Outage Makes Some Workouts Unavailable

• iPhone 12 Pro Max is Among ‘Best Smartphones of 2021’ Says Consumer Reports

• OpenSSL shuts down two high-severity bugs: Flaws enable cert shenanigans, denial-of-service attacks

• Google removes ClearURLs Chrome extension from its store

• New Code Execution Flaws In Solarwinds Orion Platform

• Nearly Half of Popular Android Apps Built With High-Risk Components

• Extracting Toolmarks from Open Source Reporting, pt II

• Apple Now Accepts Google Pixel 4a and Pixel 5 and Samsung Note 20 for Trade-In Towards New iPhone Purchase

• Apple Fixes iCloud Links for Sharing Shortcuts

• Free as in Climbing: Rock Climber’s Open Data Project Threatened by Bogus Copyright Claims

• What’s Covered Under Data Breach Insurance

• Facebook Disrupts Spy Effort Aimed at Uyghurs

• Cyber insurance company CNA discloses cyber attack

• Data Loss Impacts 40% of SaaS App Users

• Activist Denies Facebook Fraud

• Security Operations in the World We Live in Now

• Cisco Releases Security Updates

• Samba Releases Security Updates

• MSFT ‘The Reaper’

• USENIX Enigma 2021 – Hyrum Anderson’s ‘The Practical Divide Between Adversarial ML Research And Security Practice: A Red Team Perspective’

• 62,000 Microsoft Exchange Servers potentially left unpatched, weeks after software bugs were first uncovered

• YouTubers Demo the Apple-Related Tech They Use to Get Fit

• What Did We Learn From House and Senate Hearings on the Capitol Assault?

• The Geopolitics of Politics and Protest: Myanmar, China and the U.S.

• Announcing the Android Ready SE Alliance

• Slack hurries to fix direct message flaw that allowed harassment

• AI is boring – or is it?

• 2021-03-25 – Medical reminder service trial ending scam emails

• Best Windows and Mac backup software in 2021

• Manufacturing’s Cloud Migration Opens Door to Major Cyber-Risk

• Dodge is using two-factor authentication to secure its most powerful muscle cars

• US Cyber Experts Conducted Operations to Safeguard Election

• The Growing Need for a New Security Platform

• The CIO’s Shifting Role: Improving Security With Shared Responsibility

• Facebook took action against China-linked APT targeting Uyghur activists

• Throwboy Launches New Collection of Apple Themed T-Shirts

• Apple Bought the Most AI Companies From 2016 to 2020

• Popular Android Apps Putting Consumer Privacy and Security At Risk

• BitSight Observations Into Hafnium Part Four: Who Is Still Vulnerable?

• 7 Top Tips for Accelerating your IoT Projects in 2021

• Three ways technology can help revive the music industry

• Cybersecurity strategy…. To Plan or not to plan…That is the question

• A passport to freedom? Fake COVID-19 test results and vaccination certificates offered on Darknet and hacking forums

• Cisco Addresses Critical Security Flaws in Jabber Application

• Facebook Blocks Chinese State-Sponsored Threat Actors

• FBI Warns Scammers Spoofing FBI Office Phone Numbers in Government Impersonation Fraud

• Accellion FTA Vulnerability Affects Universities in Colorado and Miami

• Shell Disclosed Third-Party Data Breach Due To Vulnerable Accellion FTA

• BrandPost: Episode 3: The Zero Trust Model

• Leveraging adversarial data for security control validation

• OneWeb ‘Milestone’ Launch Of Another 36 Satellites

• Secure Software Development Habits

• New Slack Connect DM Feature Raises Security Concerns

• CNA Suffers “Sophisticated” Cyber-Attack

• McAfee Partners with College to Help Address Cyber-Skills Shortage

• Anonymous Hackers reportedly exposed the anti-Russian activities of the British Council

• 7 Quick and Easy Ways to Secure Drupal Website

• Apple Researching ‘Deployable Feet’ to Enhance MacBook Pro Cooling

• T-Mobile Completes Spam Prevention Rollout, Now Authenticates Calls From 98% of Wireless Users

• Deals: Save Up to 40% on Useful Mobile Accessories in Verizon’s New ‘Buy More, Save More’ Sale

• Spotify Launches New Design for Desktop App and Web Player

• DevSecOps as a culture – What you need to know

• SalusCare Hit by Cyberattack on Both its Patient and Employee Data

• SaltStack Issues Second Fix for a Privilege Escalation Bug

• Work from home increases Cyber Threats on Enterprises

• Amazon Executive Fires Back At US Senator Visit To Alabama Workers

• Security Culture – Beyond Technical Controls, by Red Hat’s Andrea Hall

• Severe vulnerabilities patched in Facebook for WordPress Plugin

• IBM launches new services to simplify hybrid cloud security

• How to protect your organization and yourself from cryptocurrency scams

• OpenSSL 1.1.1k Patches Two High-Severity Vulnerabilities

• Feedzai Lands $200M in Series C Funding

• Mamba Ransomware Leverages DiskCryptor for Encryption, FBI Warns

• Threat Stack Announces Enhanced Security Analytics to Proactively Identify Risk and Speed Remediation

• Chrome to Enforce HTTPS Web Protocol (Like It or Not)

• The surge of fake COVID-19 test results, vaccines and vaccination certificates on the Dark Web

• Deals: iPad Sales Providing Up to $100 Off iPad Pro and iPad Air

• New AirPods Expected to Launch in Third Quarter as Production Gets Underway

• Data Breach Suffered by the California Controller’s Office

• Over $400 Million Earned by Fleeceware Apps in the App Store and Play Store

• Cyberattack Hits University of Northampton

• 1-15 March 2021 Cyber Attack Timeline

• Tencent Keen Security Lab: Experimental Security Research of Tesla Autopilot

• TenSec 2019

• Exploiting Wi-Fi Stack on Tesla Model S

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• Transparency about Data Protection at Report URI

• The pandemic-driven rush to cloud is compromising security

• FCW Insider: March 25, 2021

• Impatient lawmakers press Biden for cyber director nominee

• 5 tips for implementing a zero trust model

• 5 Things IT Should Ask Managed Security Providers

• Hackers Start Exploiting Recent Vulnerabilities in Thrive Theme WordPress Plugins

• New Worm Capabilities Targets Windows Machines

• Personal Details of 6.5 Million Israeli Voters Leaked Online

• How Personally Identifiable Information Can Put Your Company at Risk

• Webshells Observed in Post-Compromised Exchange Servers  

• MAR-10329496-1.v1: China Chopper Webshell

• MAR-10329499-1.v1: China Chopper Webshell

• New Research from ForgeRock and Google Cloud Finds 80% of IT Leaders will Adopt or Expand Cloud-Based IAM and Face Challenges

• Engineer punished for reporting data leak

• Attackers exploiting recently-patched vulnerabilities

• Fleeceware apps extract hundreds of dollars per year from their users through subscription services

• What Is MDM Software and Why Is It Important?

• Strengthen and optimize compliance in Azure Security Center

• Defence Industrial Strategy suggests the UK is ready to start taking its homegrown infosec industry seriously

• Cloudflare launches Page Shield to thwart Magecart card skimming attacks

• Four out of five companies say they’ve spotted this cyber-attack. Plenty still fall victim to it

• S3 Ep25: Drained accounts, ransomware attacks and Linux badware [Podcast]

• Rise in Attacks on ICS Computers in Second Half of 2020

• 6 Tips for Limiting Damage from Third-Party Attacks

• The Dark Web Is Teeming With Vaccine Listings Right Now

• Venafi Machine Identity Management Fund Doubles the Number of Developer Projects in 2020

• MITRE Engenuity and Cybrary Partner to Offer First-Ever MITRE ATT&CK® Training and Certification Product

• 30 million Americans affected by the Astoria Company data breach

• Facial Recognition Beats The Covid Mask Challenge

• Facebook Removes Accounts Of China-Based Hackers Targeting Uighurs

• Microsoft Teams Now Has Its Own Bug Bounty For Researchers

• Active Exploits Hit WordPress Sites Vulnerable To Thrive Themes Flaws

• Chinese Hackers Used Fake Facebook Accounts in Effort to Spread Malware

• Average ransomware payouts shoot up 171% to over $300,000

• Microsoft Offers Up to $30,000 for Vulnerabilities in Teams Desktop Client

• Two-Thirds of Large Firms Attacked as #COVID19 Hampers Security

• Purple Fox Malware Campaign Deploys Rootkit and Looks for Exposed SMB Services, Research Finds

• Black Kingdom Ransomware Hunting Unpatched Microsoft Exchange Servers

• As Enterprises Race to Embrace Cloud Security and Compliance Automation, Anitian Announces Explosive Growth and Customer Momentum

• 5 Student Cyber Safety Tips for School IT Teams & Administrators

• Radware Powers New Cloud-Based Attack Mitigation Service Launched by Tech Mahindra

• Introducing New AIOps Enhancements on Prisma SD-WAN 5.5

• Apple Says iOS Developers Have ‘Multiple’ Ways of Reaching Users and Are ‘Far From Limited’ to Using Only the App Store

• Bang & Olufsen Launches $499 Beoplay HX Noise-Canceling Headphones Offering 35 Hours of Battery Life

• CNA Ins. Cyber Attack- Expert Comments

• In-house Versus Externally Managed Security Services

• Experts On NCSC’s Warning To Education Sector Around Cyberattacks

• IoT Maker Sierra Wireless Suffers Ransomware Attack – Experts Reaction And Advice

• FatFace hit by cyberattack, only informing customers two months later

• Facebook stops Chinese hackers spying on Uighurs living abroad

• Zuckerberg Proposes ‘Thoughtful Reform’ Of Section 230 Liability

• Morphisec snags $31M for moving target defense that protects mid-sized companies

• University students refunded for false ads touting job opportunities with Microsoft, Twitter

• This company was hit by ransomware. Here’s what they did next, and why they didn’t pay up

• Microsoft Teams now has its own bug bounties for researchers who can spot security flaws

• Half of UK Firms Suffer Cyber-Skills Gaps

• Groups Call for Ethical Guidelines on Location-Tracking Tech

• Forcing Self-Service Password Reset (SSPR) Registration to Increase ROI

• Apple Provides Timeline for ProtonVPN App Update, Suggesting App Store Rejection Was Unrelated to Current Events in Myanmar

• FatFace Cyberattack Leaves Shoppers Open To Identity Theft

• Security Expert Warns Of Insider Threat Which Is Often Ignored

• Threat Intelligence Expert On Facebook News Regarding Cyber Espionage Activity Hitting Uyghurs

• Expert Commentary: Billions Of Records Belonging To FBS Have Been Leaked

• Microsoft offers rewards for security bugs in Microsoft Teams

• Is Microsoft About To Buy Discord?

• Tesla In-Car Camera Prompts Privacy Worries – Consumer Reports

• The Advantages of a Unified Approach to Cloud Data Security

• #IMOS21: Six Components of a Bug Bounty Program

• New Apple Music ‘Saylists’ Geared Towards Speech Therapy for Children

• BP Chargemaster’s Pulse rebrand let crims send IcedID banking trojan from formerly legit mailboxes

• Business continuity and disaster recovery planning: The basics

• How the Lift mentoring program gives women in cybersecurity a leg up

• Apple Fined $2 Million For Selling iPhone 12 With No Charger

• ‘Like playing whack-a-mole’: Do cyber-crime crackdowns have any real impact?

• FatFace Faces Customer Anger After Controversial Breach Response

• Data From These Two Universities Stolen and Published Online by Clop Ransomware Group

• Critical Cisco Jabber Bug Could Let Attackers Hack Remote Systems

• Benefits of Web Asset Discovery

• Threat landscape for industrial automation systems. Statistics for H2 2020

• Five arrests in hit against investment fraudsters

• Chinese Hackers Used Facebook to Hack Uighur Muslims Living Abroad

• Want to add antivirus to your existing portfolio?

• Decision diversity: more equals better for the sake of a more secure organisation

• IoT Security in the Wake of the Verkada Breach

• Overcoming Multi-cloud Security Challenges with Three Key Tips

• How CISOs Limit Downtime Without Impacting Security

• Using memory encryption in web applications to help reduce the risk of Spectre attacks

• Challenges and benefits of using threat data feeds

• Facebook says it blocked hackers in China who were trying to spy on Uyghur Muslims abroad

• IoT device maker Sierra Wireless hit by Ransomware attack

• Suspected ransomware attack on CNA Insurance Chicago

• Vengeful IT worker gets jail time for deleting company’s Microsoft user accounts

• Continued WAN and application growth resulting in network complexity

• Distributed and remote work creating a perfect storm for network security teams

• How to ensure security and trust in connected cars

• AT&T Cybersecurity announces 2021 ‘Partners of the Year Awards’ Winners

• API Security Weekly: Issue #126

• Scaling up on a shoestring while citizen scientists analyse the Great Barrier Reef

• Neustar Unified Identity: Transforming customer data management

• Worldwide Wi-Fi market to reach $25.244 million by 2026

• 61% of businesses say competitive intelligence has made a direct impact on revenue

• Australian Bureau of Statistics ‘on track’ to avoid Censusfail 2.0 come August 10

• How Tripwire Does Configuration Management Differently

• AttackIQ platform automates the validation of AI and ML-based security technologies

• IBM launches new and enhanced services to simplify hybrid cloud security

• Action1 RMM system allows MSPs and IT departments to take control of remote workforces

• Cyemptive Zero Trust Access provides secure access to networks from remote locations

• Google Warns of a New Android Zero-Day Vulnerability Is Under Active Attack

• ISC Stormcast For Thursday, March 25th, 2021 https://isc.sans.edu/podcastdetail.html?id=7428, (Thu, Mar 25th)

• Sonrai Security integrates with AWS to accelerate cloud security transformation

• Noction Intelligent Routing Platform 3.11 features the remote-triggered blackholing capability

• Benu Networks vBNG brings SASE and 5G WWC capabilities to operator and carrier networks

• Shujinko AuditX expands compliance automation to all major clouds and regulatory frameworks

• Facebook’s Pitch to Congress: Section 230 for Me, But not for Thee

• OPM official: No going back to pre-COVID status quo

• Submitting pfSense Firewall Logs to DShield, (Thu, Mar 25th)

• Apple Shares ‘Fumble’ Ad Highlighting iPhone 12 Ceramic Shield

• ServiceNow acquires Intellibot to extend automation and RPA capabilities

• Astadia acquires Anubex to offer a complete mainframe migration RoadMap

• Ingram Micro boosts data center strategy with Veeam and Zadara cloud services

• Medigate partners with Rapid7 to secure real time health by protecting healthcare IoT devices

• SpaceX employee admits security fraud, insider trading on dark web

• Judge Rejects Ex-CIA Worker’s Try to Dismiss Hacking Charges

• Lawsuit Accuses Facebook Of Not Providing A “Safe” Environment For Users

• Being a CISO in 2021: How to Be a Business Leader in the Boardroom

• Guardicore appoints Amit Serper as Area VP of Security Research

• Michael Oberlaender joins LogMeIn as CISO

• Yellowbrick Data appoints Jonathan Reid as CRO

• Orca Security raises $210M to expand global presence and partner program

• Please stop leaking your own personal data online, Indonesia’s COVID-19 taskforce tells citizens

• Brazil leads in phishing attacks

• Cisco Jabber for Windows, macOS, Android and iOS is affected by a critical issue

• Group-IB joins Cyberveilig Nederland to increase cyber resilience in the Netherlands

• Kathleen Sullivan joins Avaya as VP

• Statement on the Re-election of Richard Stallman to the FSF Board

Generated on 2021-03-26 23:55:15.040297