IT Security News Daily Summary 2021-05-22

• Qlocker ransomware leverages HBS flaw to infect QNAP NAS devices

• Watch out as fake ransomware attack infects PCs with StrRAT

• Verizon details cloud cybercrime roots in data breach report

• A {swiftr} Brief Interlude While Awaiting {cdcfluview} CRAN Checks

• CPDP 2021 – Moderator: Samson Esayas ‘Global Ai Governance: Perspectives From Four Continents’

• The Joy of Tech® ‘The New Cigarettes!’

• CPDP 2021 – Moderator: Samson Esayas ‘Global AI Governance: Perspectives From Four Continents’

• Social Profiling – OSINT for Red/Blue

• Top Application Security Tips for under-resourced Security Teams

• Foreign hackers breached Russian federal agencies, said FSB

• Socure Brings on Top Identity Fraud and Cybersecurity Executive Gary Sevounts as Chief Marketing Officer

• AttackIQ Introduces New Partner Academy To Help Channel Partners Around the World Accelerate Adoption of Threat-Informed Defense Practice

• Cybersecurity Pioneer Cyemptive Technologies Launches Free Online Cybersecurity Knowledge Base

• What’s Next for Cybersecurity Workers? You Tell Us.

• CISSPs from Around the Globe: An Interview with Jason Lau

• Japanese E-Commerce Platform Mercari Suffers Major Data Breach

• Security News In Review: Data Breaches, Data Poison, and Big Data

• Hackers Take Note: The No Starch Press Foundation Has Launched To Fund STEM Initiatives, Contests, And More

• Apple Details New iPad Pro’s Liquid Retina XDR Display, Thunderbolt, 5G, and More in New Support Documents

• 45 Lakh Customer Data Compromised as Air India Servers Gets Hacked

• Report: Facebook Is Still Recommending Medical Misinformation At An Alarming Rate

• Apple isn’t Happy About the Amount of Mac Malware

• Conti Ransomware hit 16 US health and emergency Services, said FBI

• Apple TV Won’t Support Hi-Res Lossless at Launch, AirPods Max Wired Playback ‘Will Not Be Completely Lossless’

• cyberwarfare

• Apple Exec Calls Mac Malware Levels Unacceptable Under Oath

• Identity crisis? It’s time to take the holistic approach.

• Top Stories: Apple Music Lossless, M2 MacBook Pro Rumors, Apple Watch Redesign?

• How to Avoid Those Infuriating Cookie Pop-Ups

• Air India suffered a data breach, 4.5 million customers impacted

• HomePod and HomePod mini to Gain Support For Apple Music Lossless Audio in Future Software Update

• U.S Insurance Gaint CNA Financial Paid Hackers $40 Million in Ransom to Recover Files

• Goodbye Internet Explorer—and Good Riddance

• FBI Analyst Charged With Stealing Counterterrorism and Cyber Threat Info

• American insurance giant CNA reportedly pays $40m to ransomware crooks

• Weekly Update 244

• FBI Analyst Charged With Stealing Counterterrorism and Cyber Threats Info

• “Serverless” Phishing Campaign, (Sat, May 22nd)

• Yam – 13,258,797 breached accounts

• ‘Build’ or ‘Buy’ your own antivirus product

• DarkSide Affiliates Claim Gang’s Bitcoin Deposit

• FBI Warns Conti Ransomware Hit 16 U.S. Health and Emergency Services

• Week in security with Tony Anscombe

• HomePod to Gain Support For Apple Music Lossless Audio in Future Software Update

• Experts reported a twofold increase in the activity of ransomware hackers in Russia

• Air India Hack Exposes Credit Card and Passport Info of 4.5 Million Passengers

• Creating Secure Software Requires More Than Just Motivation

• Unlimited Access to Free Industry Leading Cybersecurity Webinars

• 5 IT security strategies that you should think about as employees return to the office

• AppSec Tips for Vue.js Users

• Using PKI to secure plug and charge

• Los desafíos de monitoreo de red claves que enfrentan los MSP y cómo superarlos

• How to Secure Jenkins Pipelines without the hassle

• Livpure – 269,552 breached accounts

• Congratulations on the Ceasefire. Now the Hard Work Begins.

• IDrive Mirror secures cloud-based full image backups for Windows computers and server operating systems

• 2021-05-21 – Qakbot (Qbot) infection with Cobalt Strike

• CyberLink partners with ACE Biotek for a fully automated solution to control access

• DataStax collaborates with NetApp to adopt and manage high scale, cloud native data

• SailPoint CEO on fighting cyberthreats in a hybrid work environment

• Ransomware cyberattacks cripple Ireland’s health system

• SailPoint CEO expects to see more collaboration between cyber companies, customers

• Socure appoints Gary Sevounts as CMO

• HackerOne hires new leaders to drive the product roadmap

• WFH and Data Sharing: 6 Ways to Protect Your Systems via Cybersecurity

• 4 Tips for Improving Physical Cybersecurity

• 2021-05-21 – Racoon Stealer

• Report: how cybercriminals abuse API keys to steal millions

• FBI warns Conti ransomware gang struck health and emergency networks

• How much economic damage would be done if a cyberattack took out the internet?

• IT Security News Daily Summary 2021-05-21

• 5 Unique Online Scams and How to Defend Against Them

• Scale Venture Partners: Security software buying trends in 2021

• BrandPost: The Importance of Network Data in Cloud Workload Security

• 7 best practices to ensure your CI/CD pipeline’s security

• Hands-On With Apple’s New Orange M1 iMac

• EFF Sues Police Standards Agency to Obtain Use of Force Training Materials

• BrandPost: What the Colonial Pipeline Attack Means for Securing Critical Infrastructure

• BrandPost: Insecure Protocols: SMBv1, LLMNR, NTLM, and HTTP

• NARA seeks DOD’s help in addressing records request backlog

• Florida water treatment plant was involved in second security incident before poisoning attempt: report

• FBI Issues Conti Ransomware Alert as Attacks Target Healthcare

• Judge Grills Tim Cook on App Store Policies as End of of Epic Games v. Apple Trial Approaches

• Apple Exec: New Apple TV Remote Doesn’t Need Find My Because It’s Thicker and Harder to Lose

• A Political Compromise on Qualified Immunity

• Revisiting Ukraine’s Nuclear Past Will Not Help Secure Its Future

• Shining a Light on DARKSIDE Ransomware Operations

• Cloud Security Blind Spots: Where They Are and How to Protect Them

• Data in Danger Amid New IT Challenges

• Indonesia ‘s government confirms social security data breach for some citizens

• Judge Grills Tim Cook on App Store Policies on Final Day of Epic Games v. Apple Trial

• Stale sessions, ML poisoning among 2021’s top security threats

• Cloud Security Blind Spots: Where They Are, And How to Protect Them

• CPDP 2021 – Moderator: Antonio Kung ‘Granular Or Holistic Approach? Enforcing Privacy Rights In Complex Ict Ecosystems’

• Apple Executive Admits Mac Malware Problem

• Avaddon Targets Insurer AXA with Ransomware | Avast

• How to fund security and modernize at the same time

• DarkSide Getting Taken to ‘Hackers’ Court’ For Not Paying Affiliates

• AI, cyber terrain analytics improve hybrid multicloud security

• Building SIEM for Today’s Threat Landscape

• U.S. officials discuss 2020 election security, misinformation

• RSA Conference 2021: 3 hot cybersecurity trends explained

• Top 4 Digital Brand Threats

• Deals: Amazon Slashes M1 Mac Mini to New Low Prices, Starting at $599.99 for 256GB ($99 Off)

• MacRumors Giveaway: Win a Maxed Out iPad Air and a Copy of WALTR PRO From Softorino

• Web Scraping: The Fine Line Between Business Intelligence and Data Privacy Violation. Is it Legal?

• How to Tell a Job Offer from an ID Theft Trap

• Apple Explains Why You Should Buy a Mac

• Deals: Amazon Slashes M1 Mac Mini to Record Low Prices, Starting at $599.99 for 256GB ($99 Off)

• WP Statistics Bug Allows Attackers to Lift Data from WordPress Sites

• CPDP 2021 – Moderator: Chloé Berthélémy ‘New Police Surveillance Technologies: Combatting The Science Fiction Collectively – A Civil Society Perspective’

• People of JumpCloud | Kelsey Carlson

• XKCD ‘Dimensional Chess’

• Snap is ‘Happy’ to Pay Apple’s 30% Commission Rate, Says Evan Spiegel

• iPad 2 Now Considered Obsolete Worldwide

• Apple Seeds Second iOS and iPadOS 14.6 Release Candidate to Developers

• Does Avast Free Protect Against Ransomware in Your Mobile Device

• Over 100 Million Personal Data Leaked Due to Misconfiguration From 23 Android Apps

• Snap is ‘Happy’ to Pay Apple’s 30% Commission Rate, Says Evan Speigel

• Cloud (Mis)Configuration: What Do You Need to Consider?

• What is data loss prevention?

• 5 Thrilling Questions About Digital Age Verification Answered!

• Top 10 Cybersecurity Memes for All Occasions

• What Makes North Korean Hacking Groups More Creative?

• Washington State Has Sued a Patent Troll For Violating Consumer Protection Laws

• US Business Insurance company pays $40 million to ransomware hackers

• Keep the Change: 3 Tips for Using the Twitter Tip Jar

• Taking Time Off? What Your Out of Office Message Tells Attackers

• Apple Discusses M1 iPad Pro in New Interview, Including Lack of XDR Display on 11-Inch Model

• Apple CEO Tim Cook Testifies in Epic Games v. Apple Trial

• UK Computer Misuse Act convictions declined last year despite pandemic explosion in online criminal activity

• ICS Vendors Assessing Impact of New OPC UA Vulnerabilities

• Blind SQL Injection Flaw in WP Statistics Affected 600K+ Sites

• Cyber Attackers Hijacked Google and Microsoft Services for Malicious Phishing Emails

• Scammers Employ ‘Vishing’ Technique to Steal Personal Details of Online Shoppers

• Insurance Firm CNA Financial Reportedly Paid Hackers $40 Million in Ransom

• Insurance giant CNA Financial paid a $40 million ransom

• YouTube Enables 4K Video Playback at 60FPS on New Apple TV 4K

• Fraudsters Use Amazon ‘Vishing’ Attacks to Steal Private Information

• Kia Ransomware 101: How It Started and How The Situation Developed

• Level up! How the updated NetApp Unified Partner Program will help partners achieve more

• hacktivism

• ethical hacker

• New STRRAT RAT Malware Convinces Believe They’ve Fallen Victim to Ransomware, Researchers Find

• Businesses are getting better at security. But they’re still forgetting one big risk

• Microsoft Unveils SimuLand: Open Source Attack Techniques Simulator

• The Changing Face of Cybersecurity Awareness

• The Edge Poll: Moving On

• Shaky Rumor Claims Redesigned MacBook Pros Will Feature ‘M1X’ Chip and Remove the Front Logo

• Healthcare Organizations Are the New Targets of Ransomware Attacks

• CryLock Ransomware Explained: Origins, How It Works and How to Remove It

• Under the AI hood: A view from RSA Conference

• Virtual Wallet Users are Being Scammed

• Double-Encrypting Ransomware

• Deals: Shop Record Low Prices on Apple’s M1 MacBook Air and MacBook Pro (Up to $199 Off)

• Spotify Announces Downloads and Offline Playback on Apple Watch for Premium Subscribers

• Email Campaign Spreads StrRAT Fake-Ransomware RAT

• Tulsa Cybersecurity Attack Similar to Pipeline Attack

• An Overview of DDoS Attacks in Q1

• Radware Threat Researchers Live: Episode 10

• Apple Begins Selling PS5 DualSense Controller After Compatibility With iPhone, iPad, Apple TV, and Mac Added

• Microsoft: This new open source tool helps you test your defences again hacker attacks

• Police Can Investigate TikTok Videos Easier

• AHK Rat Loader Used in Ongoing Delivery Campaigns

• RSA Conference 2021 – Summary of Vendor Announcements

• Apple TV 4K: How to Stream Audio From Your TV’s Inputs to HomePod

• Major Australian Telcos Warned for Not Verifying New Customer Information

• UK-Based API Security Firm 42Crunch Raises $17 Million

• Dealing with stress, burnout and mental health

• Recapping RSAC 2021: Cisco’s Keynote, Zero Trust Deployment & Passwordless Authentication

• Why FIDO2 Is the Answer to Better Security

• Expert Commentary: Android Apps Exposed Data Of Millions Of Users Through Cloud Authentication Failures

• How has Covid-19 changed our relationship with digital identity?

• PyPI Repository Deluged with Spam Packages and Pirated Movie Links

• 1-15 May 2021 Cyber Attacks Timeline

• More Than Likely, Or Less Than Probable: Is a truly quantitative security analysis possible?

• Executive Admits Apple Mac Malware Problem

• Daily Quiz – 8,032,404 breached accounts

• Here’s how we got persistent shell access on a Boeing 747 – Pen Test Partners

• Google To Open Retail Store In New York

• Irish court issues injunction against Conti hackers to stop health service data exposure, sale

• This ransomware-spreading malware botnet just won’t go away

• Data Access Control Firm Immuta Raises $90 Million in Series D Funding

• Apple Launches Affiliate Program for Podcasts Subscriptions

• Fake Amazon order emails lead to vishing

• Mobile App Developers Exposed 100 Million Android Users’ Data

• Google’s ‘Ask me anything’ on Privacy Sandbox was more about questions than answers

• Ransomware Gang Shutters Operations after Making $365K in One Month

• Bitcoins of DarkSide ransomware gang still locked in hacker forum’s escrow

• Top 9 Best Gaming Keyboard Under $30 2021 – Buying Guide

• In search of good cybersecurity

• Conti Ransomware Releases Decryptor for Ireland’s Health Service, Still Threatens to Sell Data

• Ireland Tests Decrypt Tool After ‘Catastrophic’ Ransomware Attack

• US insurance giant CNA Financial paid $40 million ransom to regain control of systems: report

• Warning Over Royal Mail Smishing Campaign

• Experts Comments On GDPR Anniversary

• How API attacks work, and how to identify and prevent them

• Google Released a New Feature in Chrome to Fix Your Hacked Password in 1-Click

• 10 Best HP Laptop for College Students 2021 – Reviews

• Doncaster insurance firm One Call hit by not-dead-at-all Darkside ransomware gang

• Microsoft Warns of Data Stealing Malware That Pretends to Be Ransomware

• Amazon to Shut Down Prime Now App and Move Two-Hour Deliveries into Main App

• Ask Chloé: Hackers’ Rights and Women in Infosec

• Air Quality Index Feature Expands to More Countries in iOS 14.7 Beta

• DarkSide Disappeared, but its Affiliates Continues to Operate

• Ransomware Susceptibility Index Spells Trouble for Pharma

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• How Remote Work Changes Where we Work and Live

• Microsoft and Google Clouds Used for Phishing

• New Banking Trojan Dubbed Bizarro Is Spreading Across Europe

• New SSDs Provide Ransomware and Data Theft Security

• Android 12 will give you more control over how much data you share with apps

• High Court Deals Blow to Data Privacy Regulations

• Microsoft SimuLand, an open-source lab environment to simulate attack scenarios

• Locking Kernel32.dll As Anti-Debugging Technique, (Fri, May 21st)

• New infosec products of the week: May 21, 2021

• AI company Splunk to acquire cloud-based threat intelligence firm TruSTAR

• Now misconfigured mobile apps are leaking data

• Cybersecurity, emerging technology and systemic risk: What it means for the medical device industry?

• Australian telco sector looking down the barrel of a prescribed security standard

• Three smart ways SMBs can improve cybersecurity

• Toyota rear-ended by twin cyber attacks that left ransomware-shaped dents

• Diving Deeper to Understand the Windows Event logs for Cyber Security Operation Center (SOC)

• The youngest crypto millionaire Mr. Buterin destroyed almost $7 billion worth of Shiba tokens donated to him

• Top application security challenges: Bad bots, broken APIs, and supply chain attacks

• IIMJobs – 4,216,063 breached accounts

• (ISC)² Supports NIST Encouragement of Inclusive Cybersecurity Terminology

• 7 Top Tips for Accelerating your IoT Projects in 2021

• Stories from the SOC -SSH brute force authentication attempt tactic

• Teaching kids internet safety tips for Zoom parties

• How to Reduce Your Chances of an API Data Breach

• Mobile stalkerware is on the rise

• Healthcare IoT Cybersecurity Firm Cynerio Raises $30 Million

• C-level cybersecurity attitudes as enterprises embrace the everywhere workplace

• 5 Things to Do with MITRE ATT&CK – Tips and Tricks Special

• 5G business smartphone shipments to grow steadily

• ISC Stormcast For Friday, May 21st, 2021 https://isc.sans.edu/podcastdetail.html?id=7510, (Fri, May 21st)

• ServiceNow delivers new security integrations with Microsoft to automate security workflows

• Given a Malicious Email Address, What Can You Discover with Maltego’s WhoisXML API Transforms?

• Spire Global launches multiple novel computing platforms for AI to improve predictive data capabilities

• Aruba’s solution for mobile devices analyzes roaming device performance in real-time

• Don’t Fall For Search Engine Scams | Avast

• New YouTube Video Series: Everything you ever wanted to know about DNS and more!, (Thu, May 20th)

• Here’s how Abu Dhabi plans to superposition itself as a high-tech hub

• New open source scanning tool is built for ethical hackers

• Time Magazine Lauds Clearview AI Despite Its Sketchy Facial Recognition Tech

Generated on 2021-05-22 23:55:26.000697