IT Security News Daily Summary 2021-04-03

• CERIAS – Adwait Nadkarni’s ‘Building Practical Security Systems For The Post-App Smart Home’

• XKCD ‘Checkbox’

• Facebookery: 533 million Facebook PII Leaked

• CERIAS – Scott Shackelford’s ‘The Internet of Things: What Everyone Needs To Know’

• Data of 533 million Facebook users leaked in a hacking forum for free

• Credible Leaker Says New iMac to Feature ‘Really Big’ Display Larger Than Current 27-inch Model

• Facebook data on 533 million users posted online

• Credible Leaker Says New iMac to Feature “Really Big” Display Larger Than Current 27-inch Model

• Capital One discovered more customers’ SSNs exposed in 2019 hack

• Data, Data, and more Data!!!

• Security News in Review: Google’s Project Zero Shuts Down Counterterrorist Hacking Team; Enterprises See Rise in Firmware Attacks

• Protect Your Android Phones from Android ‘System Update’ Malware

• Cops Take Down the ‘World’s Biggest’ Video Game Cheat Ring

• Top Stories: WWDC 2021 Announced, iPhone SE Rumors, ‘Cheese Grater’ iPhone Design?

• Centre of Attraction for Scammers : NFTs

• Hacker Hacks Underground Covid Vaccine Market On Dark Web

• Mackenzie Scott Scam: Fraudsters asking Fake Donations in Billionaire’s name

• Russian Law Requires Smart Devices To Come Pre-Installed With Domestic Software

• Activision warns of Call of Duty Cheat tool used to deliver RAT

• US lawmakers Press Online Ad Auctioneers Over User Data

• Ubiquiti has been Covering up a Data Breach

• Attackers are abusing GitHub infrastructure to mine cryptocurrency

• Google to Limit Which Apps Can See Other Installed Apps on Android Devices, Evoking Similar Privacy Changes Apple Made in iOS 9

• Tim Cook Responds to Facebook Criticism of iOS App Tracking Transparency Changes, Says It’s ‘Hard To Argue Against’ Privacy

• Evolution and rise of the Avaddon Ransomware-as-a-Service

• ‘Build’ or ‘Buy’ your own antivirus product

• Google limits which apps can access the list of installed apps on your device

• How Cyrebro Can Unify Multiple Cybersecurity Defenses to Optimize Protection

• Ransomware Attack Has Infected IT Systems at Schools Across London

• Week in security with Tony Anscombe

• Biden taps DIU head for top Pentagon acquisition post

• Myanmar’s Internet Shutdown Is an Act of ‘Vast Self-Harm’

• Apple Adds New SVP of Hardware Engineering John Ternus to Leadership Site

• QNAP caught napping as disclosure delay expires, critical NAS bugs revealed

• CERIAS – The Shoulders of InfoSec – Jack Daniel

• Save Time & Money With Automated Password Resets

• BBC Claims Americans Think of Presidents as Demigods

• Software Composition Analysis: Developers’ Security Silver Bullet

• FBI and CISA are warning of APT actors targeting Fortinet FortiOS servers

• Friday Squid Blogging: 500-Million-Year-Old Cephalopod

• IT Security News Daily Summary 2021-04-02

• 10 Most Innovative Information Security Companies at RSA Conference 2020 (USA)

• CISA, FBI warn of hacking threat against Fortinet product

• FirstNet public safety cellular network adds 5G and data encryption

• Inside the Ransomware Campaigns Targeting Exchange Servers

• Check Point Software and HashiCorp partner to help organizations automate firewall operations while maintaining security posture and compliance.

• DARPA aims to find out how good quantum computers really are

• Army shifts AR into high gear with $22B contract for customized HoloLens goggles

• How private DoH can help protect data for remote workers

• FBI: APTs Actively Exploiting Fortinet VPN Security Holes

• Vaccination data poses data management challenges for firms

• Follow the money: members of drug trafficking network arrested for money laundering in Germany and Luxembourg

• Hungarian authorities break up €8 million VAT fraud scheme

• Man Indicted In Kansas Water Facility Breach

• Hackers Demand $40M in Ransom From Florida School District

• Apple Stops Signing iOS 14.4.1 After Releasing iOS 14.4.2 With Fix for Actively Exploited Security Vulnerability

• DOD should update emergency response plans to accommodate telework, IG says

• Best cyber insurance 2021

• Call of Duty Cheats Expose Gamers to Malware, Takeover

• Water Supply Hacks Are a Serious Threat—and Only Getting Worse

• Why Charity Water Wells May Be Worse For Women Than Long Walks With Cans

• TIM’s Red Team Research (RTR) team found 5 zero-day flaws in the CA eHealth Performance Manager product

• Deals: Get Nomad’s Base Station Pro Wireless Charger for 50% Off ($99.98)

• MacRumors Giveaway: Win a Luna Display Adapter to Turn Your iPad or Mac Into an Extra Screen

• Testing the Oppo Find X3 Pro’s Microscope Camera Lens

• Maine Should Take this Chance to Defund the Local Intelligence Fusion Center

• What We Can Learn About Backdoor Attacks From WordPress

• SSA under pressure to reopen Trump-era union contract

• Best practices for VPN traffic monitoring

• Poll: Facebook Is Widely Mistrusted, Even Compared To Other Tech Giants

• FBI & CISA Warn of Active Attacks on FortiOS Vulnerabilities

• XKCD ‘Ingenuity’

• Tens of thousands of QNAP SOHO NAS devices affected by unpatched RCEs

• Deals: Apple Accessory Sales Mark Down Magic Keyboards ($100 Off), MagSafe Charger ($5 Off), and More

• Spotify iOS App Reveals Hints of ‘Car Thing,’ Podcast Paid Subscriptions and Comments

• Most Reliable Hosting Company Sites in March 2021

• From PowerShell to Payload: An Analysis of Weaponized Malware

• Intelligence Analyst Fed Secrets to Reporter

• The Threat to the Water Supply Is Real—and Only Getting Worse

• Endpoint Management and Its Evolving Role in IT

• A Risk Management Wake-Up Call

• Bsides Seattle 2020 – Luka Trbojevic’ ‘Anti-Checklist Culture: Building Useful Security Compliance’

• Conti Ransomware targets Florida’s largest school district

• Cisco Live 2021: New Webex features, as-a-service offerings, improved security and no passwords

• SecureDrop Workstation Gets Post-Audit Security Refresh

• Troll Fined $81 After Victim Kills Herself

• Russia has created a new data transmission device with protection against cyber threats

• Hackers Attack Users With Malware Using Underground Call Centres

• FBI-CISA Joint Advisory on Exploitation of Fortinet FortiOS Vulnerabilities

• VMware Releases Security Update

• Canada’s Defense Strategy Falls Behind in the Quantum Age

• What Is a Cybersecurity Legal Practice?

• Spot Ocean offers scalability and cost savings for NetApp IT

• Hackers Setup Fake Cyber Security firm to Target InfoSec Experts

• The DeanBeat: Chasing away the cheaters in Call of Duty: Warzone

• Microsoft Suffers Second Outage in Two Weeks

• Cybercrimial are Using Twitter as a Doorway to Target Indonesian Banks

• US Tech Dominance Rides on Securing Intellectual Property

• Simplifying Microservices Debugging with Thundra Sidekick

• Conti Ransomware gang demanded $40 million ransom to Broward County Public Schools

• Intel MacBook Pro Owner Adds Water Cooling to Silence Noisy Fans and Boost Performance

• New NCSC Chief Issues Cybersecurity Warning to Companies

• What Is ITSM Software and How Does It Work?

• APT Attack: Everything You Need to Know to Keep Your Company Safe

• Web Application Pentesting with Manual SQL Injection – Integer Based

• Robinhood Warns Customers of Tax-Season Phishing Scams

• DeepDotWeb Dark Web Admin Pleads Guilty To Drug, Gun Kickbacks

• Feds Indict Kansas Man For Allegedly Hacking Into Water Supply

• Legacy QNAP NAS Devices Vulnerable To Zero-Day Attack

• Dutch Watchdog Fines Booking.com 475,000 Euros For Keeping Customer Data Theft Quiet

• Exclusive Deals: Casely Offers MacRumors Readers 30% Off Sitewide on iPhone and AirPods Cases

• iPhone Users Spent Average of $138 on Apps Last Year

• An Overview of Traditional Email Security Solutions and How to Enhance Them

• LG Likely To Exit Smartphone Market – Report

• Nine Critical Flaws in FactoryTalk Product Pose Serious Risk to Industrial Firms

• Financial Sector Remains Most Targeted by Threat Actors: IBM

• Airlift Express Fixes Vulnerabilities in Its E-commerce Store

• Apple Arcade Adds 30 Classic Games Including ‘Fruit Ninja’ and ‘Cut the Rope Remastered’

• Apple Details Carbon Neutral Progress, Announces Energy Storage Project

• US Department of Justice Warns of COVID-19 Vaccine Survey Scams

• CISA Orders Action Against Exchange Vulnerabilities

• Malware Hidden in Call of Duty Cheating Software

• Microsoft 365 Restored After Outage

• A Guide To NFTs | Avast

• Trustwave Uncovers Vulnerability in Popular Website CMS

• DHS CISA requires federal agencies to assess their Microsoft Exchange servers by April 5

• All 20 Apple Stores in France to Close Again Under Third Lockdown

• New ‘BazarCall’ Malware Uses Call Centers to Trick its Victims into Infecting Themselves

• Hackers Use Vaccine Surveys to Steal Personal Information

• Booking.com Fined €475,000 For Late Data Breach Reporting

• New US CISO appointments, March 2021

• Quick Hits

• FCW Insider: April 2, 2021

• Kansas Man Could Serve 25 Years in Prison for Hacking Local Water System

• Hackers use BazarCall Malware to Infect Victims

• Dutch Privacy Watchdog fines Booking.com €475K

• Telemetry Data is Being Shared by Google and Apple Despite the user Explicitly Opting out

• Browser lockers: extortion disguised as a fine

• Italian Menswear Brand Loses Corp Data in Ransomware Attack – Expert Comments

• Decrypting Cryptocurrencies

• Cybersecurity Firm ReliaQuest Announces New Senior Appointments

• Weekly Update 237

• ‘Fantasian,’ by Creator of Final Fantasy, Now Available on Apple Arcade

• Leak Allegedly Shows New Spring Color Options for iPhone 12 MagSafe Cases

• Understanding and Preventing S3 Leaks

• Don’t Let the Fox Watch the Henhouse: Securing Firmware

• Man indicted for tampering with public water system in Kansas

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• Massive Cyber Attack on F5 Systems and University of California

• Cyber Attack on Inter Parliamentary Alliance on China

• SolarWinds Hackers Accessed Emails of US Department of Homeland Security (DHS) Officials

• Leaky Apps Heighten Supply Chain Risk

• C2 Activity: Sandboxes or Real Victims?, (Fri, Apr 2nd)

• Is your dishwasher trying to kill you?

• Menlo Security Celebrates Winners of First Annual APAC Partner of the Year Awards

• New infosec products of the week: April 2, 2021

• Death, taxes, and hacks: How to prevent cyberattacks during tax season

• Ethos Capital Is Grabbing Power Over Domain Names Again, Risking Censorship-For-Profit. Will ICANN Intervene?

• The Latest LogRhythm Employee Initiatives

• Encrypted method that measures encounters could slow down or prevent future pandemics

• 5 key cybersecurity risks in 2021, and how to address them now

• ISC Stormcast For Friday, April 2nd, 2021 https://isc.sans.edu/podcastdetail.html?id=7440, (Fri, Apr 2nd)

• The authentication and brand protection market to reach $3.7 billion by 2026

• Mobile providers exposing sensitive data to leakage and theft

• 2021-04-01 – Quick post: IcedID (Bokbot) activity

• Large Florida School District Hit by Ransomware Attack

• US Looks to Keep Critical Sectors Safe From Cyberattacks

• Platform9 Managed Kubernetes with IPv6 support optimizes 5G service delivery

• Cisco Webex enhances People Insights feature to ensure privacy and security in a hybrid workplace

• Inseego Wavemaker PRO FX2000e provides flexible 5G broadband with ethernet and Wi-Fi 6 connectivity

• Cisco helps service providers and web scale companies offer a more accessible internet

• DTEX InTERCEPT delivers advanced UAM and workforce behavioral awareness capabilities

• Acronis Cyber Protect Cloud enables MSPs to offer cyber protection services on more endpoints

• Content Moderation Is A Losing Battle. Infrastructure Companies Should Refuse to Join the Fight

• Krebs cautions on push for national cyber director

• Criminals send out fake “census form” reminder – don’t fall for it!

• Apple Now Rejecting App Updates That Defy iOS 14.5 App Tracking Transparency Rules

• Entrust integrates its nShield HSMs with Microsoft Double Key Encryption

• Elliptic Labs partners with Cadence to optimize ML algorithms on Cadence Tensilica HiFi DSPs

• FedHIVE secures FedRAMP authorization for its IaaS and PaaS capabilities

• Ericsson Open Lab focuses on innovating virtualized 5G RAN technologies

Generated on 2021-04-03 23:55:07.818157