IT Security News Daily Summary 2021-04-17

• CPDP 2021 – Prof. Paul De Hert ‘Opening Remarks’

• CPDP 2021 – Moderator: István Böröcz. ‘To Record Or Not To Record?’, ‘COVID-19, Body Temperature Screenings And The GDPR’s Material Scope’

• Google Project Zero updates vulnerability disclosure policy moving to a “90+30” model

• The United States imposes sanctions against 25 Russian companies for cyber attacks and Crimea

• Online Learning of University of Hertfordshire Disrupted Due to a Major Cyber-Attack

• The SASE wave: Why cloud-native edge security is gathering huge momentum

• The New Russia Sanctions Resolve a Mystery That Mueller Left Unanswered

• How the FBI Got Into the San Bernardino Shooter’s iPhone

• Malware Evasion Techniques

• Microsoft fixes 2 critical Exchange Server flaws reported by the NSA

• denial-of-service attack

• RangeForce & BCA to Create Cyber Career Advancement Opportunities

• Top Stories: Apple Event Next Tuesday, Mini-LED iPad Pro, iPhone Rumors

• Reliable Leaker Hints Redesigned Colorful iMac to Debut at ‘Spring Loaded’ Event

• What are the different roles within cybersecurity?

• SysAdmin of Billion-Dollar Hacking Group Gets 10-Year Sentence

• Critical Zero-day Vulnerability in Desktop Window Manager (DWM) Let Attackers to Escalate Privilege

• Critical RCE can Compromise Juniper Networks Devices

• Crypto Lending Service, Celsius Suffers Third Party Data Breach

• IBM: Flags More Cyber Attacks on COVID-19 Vaccine Infrastructure

• Who Invented the Personal Computer? “Apple Was Literally Following Us Around”

• ‘Build’ or ‘Buy’ your own antivirus product

• 6 out of 11 EU agencies running Solarwinds Orion software were hacked

• Code42 Announces Its Accelerate Partner Program, Increases Partners on Board over 200%

• Top Biden Administration Cyber Leaders Headline Billington CyberSecurity Defense Summit

• ioXt Alliance Expands Certification Program for Mobile and VPN Security

• Use AI to fight AI-powered cyber-attacks

• 5 steps to respond to a data breach

• Spring cleaning? Don’t forget about your digital footprint

• Week in security with Tony Anscombe

• Querying Spamhaus for IP reputation, (Fri, Apr 16th)

• 2021-04-16 – TA551 (Shathak) German-template Word docs push Ursnif (Gozi/ISFB)

• 2021-04-16 – BazaLoader (BazarLoader) activity

• Cyberthreat update from Acronis CPOCs: Week of April 12, 2021

• Phishing 101: How It Works & What to Look For

• Identity Management Day: Cause for Celebration or Concern?

• Senate bill would give feds paid family and medical leave

• El futuro de TI según Forrester

• Steve Dodenhoff joins Okta as SVP of Worldwide Partners and Alliances

• What Are the Connections to Identified Hafnium Malicious IP Addresses?

• Cybersecurity, an Essential Weapon in the Cyberwarfare to Protect Our Democracy

• A hacker claims to be selling sensitive data from OTP generating firm

• information security (infosec)

• Update to REvil ransomware changes Windows passwords to automate file encryption via Safe Mode

• What to consider when shopping for cyber insurance

• Pandemic Drives Greater Need for Endpoint Security

• IT Security News Daily Summary 2021-04-16

• Hopeful employees targeted as phishers identify new windows of opportunity

• How to improve your workplace’s cybersecurity

• BazarLoader Malware Abuses Slack, BaseCamp Clouds

• Security Gaps in IoT Access Control Threaten Devices and Users

• High-Level Admin of FIN7 Cybercrime Group Sentenced to 10 Years in Prison

• Keyfactor to Acquire PrimeKey to Advance Certificate Automation

• Call for Papers: The University of Texas at Austin Announces the 2021 ‘Bobby R. Inman Award’ for Student Scholarship on Intelligence

• 4 Tips for Securing Your Communication Lines Remotely

• Smarter Cybersecurity Spending in a Pandemic

• Days after sanctions, House to vote again on Cyber Diplomacy Act

• iOS Kids Game Morphs into Underground Crypto Casino

• Report: It’s not all doom and gloom in cybersecurity with remote workers

• Balance Online and Offline Activities the Digital Nomad Way

• What to Expect From Apple’s April 20 Event: New iPads, AirTags and More

• Lawmakers talk agency performance plans, TMF

• NSA: 5 Security Bugs Under Active Nation-State Cyberattack

• Microsoft releases biannual reports on digital trust

• XKCD ‘Post Vaccine Social Scheduling’

• What’s New for April 2021

• 21.5-inch iMac Availability Dwindling at Apple Stores

• Duo Security Named a 2021 Gartner Peer Insights Customers’ Choice for Access Management

• HackBoss Cryptocurrency Malware Being Distributed Through Telegram

• NFT Site Rarible Targeted in Typosquatting Campaign

• Celsius Cryptocurrency Breach

• FBI cleans web shells from hacked Exchange servers in rare active defense move

• Top 5 Tips To Enhance Cloud Computing Security Solutions In 2021

• Shady scam bots trick Omegle users into nonconsensual video sex recordings

• Vulnerabilities in OpENer Stack Expose Industrial Devices to Attacks

• 6 SSH best practices to protect networks from attacks

• US Indicts SecondEye Operators

• Swedish Authorities Say Russia Is to Blame for Sports Confederation Hack

• One-Click Remote Code Execution Vulnerabilities Found in Multiple Popular Apps

• WordPress Releases Security and Maintenance Update

• Critical RCE can allow attackers to compromise Juniper Networks devices

• LTPO Displays Supporting 120Hz Refresh Rates Again Rumored for iPhone 13 Pro Models

• Deals: MagSafe Duo Charger Drops to $112.45 on Amazon ($16.55 Off)

• MacRumors Giveaway: Win an Apple Watch Fitness Award Prize Pack From Activity Awards

• Russian infosec firm Positive Technologies trying to stay positive after US sanctions

• Corporate Vision Names Intelligent Waves LLC Best High-Impact IT Systems Integrator in 2021 Global Technology Innovation Competition

• For Second Year in a Row, Hillstone Networks Recognized by Gartner as Customers’ Choice for Network Firewalls 2021

• GrammaTech Provides Static Application Security Testing (SAST) for DoD Platform One

• Considerations for performing IoMT Risk Assessments

• Do customers really care about SASE? Absolutely, and here’s why

• US Issues Russian SVR Warning

• The Whitsun Reef Incident and the Law of the Sea

• How To Protect Your Enterprise When You Can’t See Your Employees

• Security Expert Re: NSA Urges Organizations To Patch Top Vulnerabilities Exploited By Russia

• Experts On Russia Being Held Accountable For SolarWinds

• Debunking Three Cyber Insurance Myths For SMEs

• How Cisco Rolled Out Zero Trust With Duo to 100,000+ Users

• Is Russia acting as safe harbor for ransomware spreading criminals

• Companies must train their SOC teams well to prevent breaches

• Keyfactor to Merge with PrimeKey

• Meet the Cisco Telemetry Broker Team: Sunil Amin

• U.S. Fingers Putin’s Cozy Bear for SolarWinds Attacks

• Apple-Backed ‘Project CHIP’ to Start Smart Home Device Certification in Late 2021

• Expert Advice Developers to Improve Software Security After NAME:WRECK Disclosure

• Expert Insights: Dir Nat’l Intelligence Releases Annual Threat Assessment Thursday

• Patch now! NSA, CISA, and FBI warn of Russian intelligence exploiting 5 vulnerabilities

• The 7 R’s: Why infrastructure is critical to your application cloud migration

• 1-click code execution vulnerabilities in popular software apps

• Planning the best route with multiple destinations is hard even for supercomputers

• Getting real-time crash data to responders

• ‘Snakebot’ takes a dive to go where other robots can’t

• Scientists are on a path to sequencing 1 million human genomes and use big data to unlock genetic secrets

• Mandiant Front Lines: How to Tackle Exchange Exploits

• Critical Vulnerability Can Allow Attackers to Hijack or Disrupt Juniper Devices

• How the Kremlin Provides a Safe Harbor for Ransomware

• U.S. Agencies Warns of Russian APT Operators Exploiting Five Publicly Known Vulnerabilities

• Cybereason and MassCyberCenter Partner to Mentor College Students

• Trend Micro Offerings Are FedRAMP Authorized and Available on AWS

• Flaw Allows Attackers To Brick Kubernetes Clusters

• Facebook Faces Mass Legal Action Over Data Leak

• US Government Strikes Back At Kremlin For SolarWinds Hack Campaign

• Bitcoin Tumbles After Turkey Bans Crypto Payments Citing Risks

• Swinburne University Confirms Over 5,000 Individuals Affected In Data Breach

• Deals: M1 MacBook Air and MacBook Pro Deals Offer Up to $100 Off Apple’s Latest Notebooks

• PSA: Apple is Updating Old Apps With Latest Signing Certificate Ahead of iOS 14.5

• Expert Comment On DPC Facebook Investigation

• Expert Reaction on Research that Coronavirus Triggering Surge in Cyber Fraud

• Everything You Need to Know About the 2021 Facebook Data Breach

• Cleaning and Catering Business Spotless Hit by a Severe Data Breach

• Class Action Filed Over Data Breach by Presidio Employee

• Russian SVR Behind the SolarWinds Hack, According to U.S. Government

• Deepfakes were going to change everything. And then they didn’t

• Microsoft received almost 25,000 requests for consumer data from law enforcement over the last six months

• Apache SpamAssassin 3.4.6 Release Fixes Two Potentially Aggravating Bugs>

• How AI in Cybersecurity Addresses Challenges Faced by Today’s SOC Analysts

• What is the ACME protocol and how does it work? | Keyfactor

• Industry Reactions to FBI Cleaning Up Hacked Exchange Servers: Feedback Friday

• S3 Ep28.5: Hacking back – is attack an acceptable form of defence? [Podcast]

• How the Biden Administration Can Make Digital Identity a Reality

• Palo Alto Networks a Customers’ Choice in Gartner Peer Insights Report

• Video of Alleged Third-Generation Apple Pencil Leaks Ahead of Apple Event

• Some iPhone 11 Users Seeing Increased Battery Health Percentages After iOS 14.5 Recalibration Process

• Apple Music Tops Spotify With One Cent Paid Per Stream

• Apple Shares 2021 Environmental Progress Report

• A Technical Analysis of the Mirai Botnet Phenomenon

• Tesla Settles Lawsuit Against Ex Staffer Over Source Code

• Indicator Of Attack(IoA’s) And Activities – SOC/SIEM – A Detailed Explanation

• Combating Sleeper Threats With MTTD

• Google backs new security standard for smartphone VPN apps

• Google Project Zero Cuts Bug Disclosure Timeline to a 30-Day Grace Period

• Sanctioned Russian IT Firm Was Partner With Microsoft, IBM

• More Countries Officially Blame Russia for SolarWinds Attack

• Did Someone at the Commerce Dept. Find a SolarWinds Backdoor in Aug. 2020?

• Russia-linked APT SVR actively targets these 5 flaws

• More Than 5,000 People Affected in Data Breach at Swinburne University

• Celsius Email System Suffers Security Breach

• Cybersecurity Models Explained

• US sanctions Russian government, security firms for SolarWinds breach, election interference

• Apple $200m ‘Restore Fund’ Targets Climate Change

• Ransomware Attacks in 2021: Information Meets Emotion

• NSA Discloses Vulnerabilities in Microsoft Exchange

• Facebook CEO Mark Zuckerberg Urged to Scrap Instagram for Kids Plan

• Russian Intelligence Actively Exploits Five Known Vulnerabilities, NSA Says

• Malware and Scammers Are Now Targeting the Popular NFT Marketplace Rarible

• Watchdog thinks Google tricked Australians into giving up data, sues. Judge semi-agrees

• EU’s Proposed Rules For AI Usage Leaked Online

• Google Project Zero Announces 2021 Updates to Vulnerability Disclosure Policy

• Mass Monitoring of Remote Workers Drives Shadow IT Risk

• Creating a safer online world together with the Cybersecurity Tech Accord

• Microsoft Edge Gains New ‘Kids Mode’ for Safer Web Browsing

• How to Encrypt and Password Protect Files on Your Mac

• The CSO guide to top security conferences, 2021

• Quick Hits: April 16

• FCW Insider: April 16, 2021

• Cyberattack on UK university knocks out online learning, Teams and Zoom

• Google to Delay Publishing Bug Details for 30 Days

• White House Blames Russian Foreign Intelligence for SolarWinds, Imposes Sanctions on Rival Nation

• Firefox 88 to Disable FTP Next Week With Full Removal Set for June

• Adapting Security Awareness to the Post-Pandemic World

• Most Common IaaS Security Issues and Ways To Mitigate Them

• Digital Spring Cleaning: Seven Steps for Faster, Safer Devices

• Google Broke Australian Law Over Location Data Collection: Court

• Microsoft Patch Tuesday, April 2021 Edition

• Trickbot Actors Target Slack and BaseCamp Users

• University of Hertfordshire Hit by Cyberattack

• 643GB of Customer Information Exposed in a Data Breach Suffered by Bizongo

• ParkMobile Data Breach: 21Million User Data Exposed

• Severe Bugs Reported in EtherNet/IP Stack for Industrial Systems

• Mirai code re-use in Gafgyt

• iPhone 13 Series CAD Leaks Reveal Larger Camera Dimensions

• Facebook Expands Oversight Board Scope | Avast

• New Federal Data Privacy Legislation Proposed

• Three Wishes to Revitalize SIEM and Your SOC

• Emotet Takedown: Time to Celebrate?

• OPPO Watch and Band Now Support iPhone and Apple Health Syncing

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• US Senate to halt all big tech merger and acquisitions

• IOT Devices operating worldwide are vulnerable to Name Wreck Bug

• Critical Microsoft Exchange Server Vulnerabilities Could Allow Hackers to Control of Enterprise Networks

• Mozilla to start disabling FTP next week with removal set for Firefox 90

• Wordsmithing: Cybersecurity or Cyber Safety?

• Lazarus BTC Changer. Back in action with JS sniffers redesigned to steal crypto

• HTTPS Support for All Internal Services, (Fri, Apr 16th)

• Swinburne University confirms over 5,000 individuals affected in data breach

• One in six people use pet’s name as password

• Clubhouse Exclusivity Applies to Membership, Not Data

• (ISC)2 and the Creation of the U.K. Cyber Security Council

• The rise of QakBot

• The difference between SASE and Zero Trust

• Consumers worry about the cybersecurity of connected vehicles

• Infection Monkey: Open source tool allows zero trust assessment of AWS environments

• The parallels of pandemic response and IoT security

• Protecting the human attack surface from the next ransomware attack

• Securing APIs: Empowering Security

• Cyber Security Headlines – Week in Review – April 12-16, 2021

• The enterprise eGRC market is expected to grow

• 49% of employees prefer a hybrid work arrangement

• Google Project Zero testing 30-day grace period on bug details to boost user patching

• A quick round up of privacy highlights for Q1 of 2021

• Cloud Forensics Firm Cado Security Raises $10 Million in Series A Funding

• Codecov Bash Uploader Dev Tool Compromised in Supply Chain Hack

• New integration: MSPs can now manage Acronis via Kaseya VSA

• D-Link releases lineup of Vigilance solutions to provide high-resolution business surveillance

• Virsec Security Platform 2.0 stops attacks using app-aware runtime visibility inside the container

• InfluxData releases InfluxDB Notebooks to improve communication for software development teams

• DNSFilter Insights Reporting gives users deep visibility into their network’s activity

• AWS launches AQUA for Amazon Redshift to bring compute to the storage layer

• ISC Stormcast For Friday, April 16th, 2021 https://isc.sans.edu/podcastdetail.html?id=7460, (Fri, Apr 16th)

• CloudMoyo and Terracon complete data engineering initiative to modernize the BI platform

• Linux Foundation Research to broaden understanding of open source ecosystem and impact

• LinkSquares helps legal teams accelerate business contracts and deal negotiations

• Styra’s compliance packs for DAS ease collaboration between security and DevOps teams

• 2021-04-15 – BazaLoader (BazarLoader) activity

• Software Developer Arrested in Computer Sabotage Case

• Dell Technologies to spin-off VMware, positioning it for further growth

• BoxBoat reports momentum for BoxOps, its platform for DevSecOps managed services

• Lenovo unveils plans to drive transformation from devices to solutions company

• Vapor IO and VMware announce the Open Grid Alliance to accelerate the evolution of the internet

• Proctoring Tools and Dragnet Investigations Rob Students of Due Process

Generated on 2021-04-17 23:55:10.242445