IT Security News Daily Summary 2021-05-26

• Token Resistance: Tackling the New NFT Threat Landscape

• VA lowballed health record modernization costs, watchdog says

• US agencies lack supply chain best practices post-SolarWinds

• Nearly 50,000 IPs compromised in Kubernetes clusters by TeamTNT

• Google Discovers New Rowhammer Attack Technique

• DarkSide will be back, as Russia, China, Iran create ‘safe havens’ for hackers: Feds

• Ryuk Ransomware Operators Shift Tactics to Target Victims

• The Cybersecurity Ecosystem: How Did It Get So Crowded?

• PDF Feature ‘Certified’ Widely Vulnerable to Attack

• Zscaler Buys Deception Technology Startup

• Apple Faces Criticism Over Its Cooperation With China

• VMware Sounds Ransomware Alarm Over Critical Severity Bug

• US Exchanges Offer a Rich Potential Target for Hackers

• How user experience is shaping verifiable credentials and identity

• Russian admin of cybercrime marketplace Deer.io jailed in US

• Cisco: Reduced Complexity in the SOC Improves Enterprise Security

• Halide Developer Highlights Hidden Macro Camera Feature in 2021 iPad Pro

• Bank of England Head Warns Cryptocurrencies Are Dangerous

• Who is DarkSide—The Group Behind the Colonial Pipeline Breach?

• BrandPost: Simplifying Security Across Hybrid Clouds, Multi-clouds and for the Cloud On-ramp with Secure SD-WAN

• BazaLoader Masquerades as Movie-Streaming Service

• French police seized dark web marketplace Le Monde Parallèle

• AliveCor Files Antitrust Suit Against Apple for Preventing Third-Party Irregular Heart Rhythm Analysis on Apple Watch

• What is encryption? And why it matters in a VPN

• Cyber Cyber, Burning Bright: Can XDR Frame Thy Fearful Asymmetry?

• Bug Bounties and the Cobra Effect

• CPDP 2021 – Moderator: John Edwards ‘A Path To Empowering User Choice And Boosting User Trust In Advertising’

• XKCD ‘Wikipedia Caltrops’

• Introducing Security By Design

• How Are Cyber Insurance Companies Assessing Ransomware Risk?

• Introduction of Recently Retired OSCP Exam Machines in PWK Labs

• Vulnerability In VMware Product Has Severity Rating 9.8 Out Of 10

• Cloud (Mis)Configuration: What Do You Need to Consider?

• The rise of QakBot

• SASE as a Service: The role of managed services in the world of network security convergence

• Password security tips and best practices for enterprises

• Tesla To Drop Radar And Use Camera-based Autopilot

• S3 Ep34: Apple bugs, scammers busted, and how crooks bypass 2FA [Podcast]

• Devo: SIEM Continues to Evolve with Tech Trends and Emerging Threats

• 5 Steps in Your CMMC Compliance Checklist | Apptega

• Lessons From Contact-Tracing and Exposure-Notification Apps

• Australia Real Estate Domain warns users of a Cyber Attack

• Data Wiper Malware Disguised As Ransomware Targets Israeli Entities

• Google discovered a new variant of Rowhammer attack dubbed Half-Double

• Apple Looking for a Manager With Experience in Cryptocurrency

• Amid Systemic Censorship of Palestinian Voices, Facebook Owes Users Transparency

• Becoming resilient by understanding cybersecurity risks: Part 4—navigating current threats

• The Impact of Flawed Pseudorandom Number Generators in Network Devices

• The Benefits and Drawbacks of Geo-Restrictions

• Security Risks That Ecommerce Businesses Face and How to Avoid Them

• This weird memory chip vulnerability is even worse than we realised

• Salt Security Raises $70 Million in Series C Funding

• Virtual Event Keynote: John Lambert, Microsoft Threat Intelligence Center

• Plaintext Passwords of 8.3 Million Users Leaked in a DailyQuiz Data Breach

• How to Hide Like and View Counts on Instagram Posts

• What Is a Server Monitoring System?

• The VC View: Identity = Zero Trust for Everything

• VMware Urges Customers to Immediately Patch Critical vSphere Vulnerability

• Apple Patches Zero-Day XCSSET Exploit

• New Disk Wiping Malware Targets Israel

• What Is EMM (Enterprise Mobility Management)?

• Over 60% of Organizations Say Would Not Pay Attackers

• About the Garmin Ransomware Case: Here’s What Happened

• Amazon Buys James Bond Studio MGM For $8.5bn

• Pros and Cons of SOC – Outsourcing Concept

• 11 Best Practices To Secure Your WooCommerce Store

• firewall

• Messaging Apps: The Latest Hotbed in the Fraud Ecosystem

• As Chips Shrink, Rowhammer Attacks Get Harder to Stop

• VMware Releases Security Updates

• Google Releases Security Updates for Chrome

• Flubot Threat Bulletin – Allot blocks 100M C&C connection attempts

• Security automation for digital transformation

• Amazon to Acquire MGM for $8.45 Billion Amid Competition With the Likes of Netflix and Apple TV+

• App Store Scam App Required a Good Review to Function at All

• The Central Bank Digital Currency Is Now A Reality: Payment Card Security Needs To Catch Up

• Expert Insight On StrRAT Malware Disguised As Ransomware

• Private browsing vs VPN – Which one is more private?

• AIs and Fake Comments

• Deals: Get Apple’s 512GB 27-Inch iMac for Lowest Price of $1,699.99 ($299 Off)

• Expert Advice on New FCA Rule to Implement Strong Customer Authentication

• Azure Synapse Analytics – New Insights Into Data Security

• Killing Cloud Security Misconceptions: Common Vulnerabilities and Exposures (CVEs)

• Ransomware: Dramatic increase in attacks is causing harm on a significant scale

• North Korean Takes the Lead in Cyberwarfare

• New Rowhammer Attack Variant Out

• Critical RCE Vulnerability Discovered in VMware vCenter Server

• Steam Used in a New Type of Phishing Attempt

• ‘World’s Leading Bank Robbers’: North Korea’s Hacker Army

• Spikes in automated fraud attempts hit thousands of e-commerce websites in 2020

• New Iranian Threat Actor Using Ransomware, Wipers in Destructive Attacks

• WhatsApp Sues Indian Government Over New Internet Regulations

• Q1 2021 Threat Trends & Intelligence Report

• VMware Discloses Severe Vulnerabilities That Need ‘Immediate Attention’

• WhatsApp Sues Indian Government Over Surveillance Law

• Securing my house with Ubiquiti’s UniFi Protect range

• How to delete your Twitter account: the deactivation process

• Cybersecurity monitoring and threat prevention startup Uptycs raises $50M

• FCW Insider: May 26, 2021

• Quick Hits

• NASA Intends to Reorganize its Cybersecurity Strategy

• Russian Hydra Made Over $1.3 Billion Last Year

• Belgium Hacked, Most Likely by China

• Scalable Security with Cisco Secure Firewall Cloud Native

• Zoom Adds Support for iPad Pro’s New Center Stage Feature

• How Hidden Vulnerabilities will Lead to Mobile Device Compromises

• How dangerous are deepfakes?

• Bluetooth bugs open the door for attackers to impersonate devices

• Half-Double: Google Researchers Find New Rowhammer Attack Technique

• Welcoming the Trinidad & Tobago Government to Have I Been Pwned

• ‘The Me You Can’t See: A Path Forward’ Town Hall Conversation Coming to Apple TV+

• Five Practical Steps to Implementing a Zero-Trust Network

• Belgium’s Interior Ministry uncovers 2-year-long compromise of its network

• Your Next Cybersecurity Hire May Already Be in Your Organization

• API vulnerability detection firm Salt Security raises $70M

• A Peek Inside the Underground Ransomware Economy

• ‘Privateer’ Threat Actors Emerge from Cybercrime Swamp

• Google Patches 32 Vulnerabilities With Release of Chrome 91

• Orange: Your Leaky Security is Coming from Inside the House!

• Managing Cloud Storage Limits in K-12 Schools

• Belgium Interior Ministry said it was hit by a sophisticated cyber attack

• Some New Apple TV 4K Users Report 4K Content Incorrectly Labeled as HD

• Apple TV 4K Very Easy to Repair but Siri Remote Battery Difficult to Replace, Teardown Shows

• Ransomware attribution: Missing the true perpetrator?

• What to do about open source vulnerabilities? Move fast, says Linux Foundation expert

• Google Approved To Build Mega Campus In San Jose

• Transform Your Data Center and Network Security to Support Distributed Cloud Apps and Remote Workers at the Edge

• Rising Cyberattacks in West Highlight Vulnerabilities

• Apple Fixes macOS Zero Day Vulnerability, Abused by XCSSET macOS Malware

• Agrius Iranian Hacking Group Targets Israel

• Russian national jailed for running stolen data, hijacked account seller platform deer.io

• Apple just fixed a security flaw that allowed malware to take screenshots on Macs

• Another critical bug impacts all VMware vCenter Server installs

• VMware fixes critical vCenter Server RCE vulnerability, urges immediate action (CVE-2021-21985)

• Hydra Cryptocurrency Transactions Reached $1.37bn in 2020

• 180 Million Clients’ Data Was Exposed Following a Cyberattack Targeting Domino’s India

• 13 Vulnerabilities in Nagios Server Let Hackers Compromises The IT Infrastructure

• Kaspersky Security Bulletin 2020-2021. EU statistics

• New Apple Via del Corso Retail Store in Rome, Italy Opens May 27

• VMware fixes critical vCenter Server RCE vunerability, urges immediate action (CVE-2021-21985)

• Critical Flaw Is Impacting All vCenter Server Deployments, VMware Alerts

• Amazon Sued By Washington DC’s Attorney General

• European Court Rules GCHQ Mass Surveillance Powers Violated Human Rights

• Computer Misuse Act: Tell the Home Office infosec needs a public interest defence in law, says CyberUp campaign

• How to prepare for the demise of Windows NT LAN Manager

• 5 best practices for conducting ethical and effective phishing tests

• FBI Issues Flash Advisory on Conti Ransomware Attacks Impacting Healthcare and First Responder Networks

• WhatsApp Sues Indian Government Over New Privacy Threatening Internet Law

• Apple Shortcuts With Multiple Actions Reportedly Run Faster in iOS 14.6

• NSA Edward Snowden criticizes British govt for spying on citizen communication

• Salary of the Director of National Cyber Security Centre

• Mission Secure is Newest Competitor in 2021 ‘ASTORS’ Awards Program

• Agrius – The Iranian Hacking Group Targets Israel Using Data Wipers

• JSWorm: A Notorious Ransomware

• VMware issues critical patch on vCenter Server installs

• Almost half of British organisations aren’t reporting data breaches, Crowdstrike finds

• Is Your ZTNA Vendor Really Zero-Trust?

• Recent ransomware attacks prompt action from two-thirds of companies

• Entrust Remote Signing Service provides verified employee identities and strong authentication

• Looking for adding new detection technologies in your security products?

• Social Media And Online Reputation | Avast

• In-person cybersec training? Yes, it’s back on the agenda this year

• Breach Clarity Weekly Data Breach Report: Week of May 24

• Google Researchers Discover A New Variant of Rowhammer Attack

• Apple Supplier TSMC Reportedly Begins Production of A15 Bionic Chip for iPhone 13

• Contract killer: Certified PDFs can be secretly tampered with during the signing process, boffins find

• Apple fixes macOS zero‑day bug that let malware take secret screenshots

• Top 20 Fastest Growing Cybersecurity Companies in Q1 2021

• Agrius group targets Israel with data-wipers disguised as ransomware

• Measuring impact beyond a single incident

• Court finds GCHQ breached citizen’s privacy with its bulk surveillance regime

• Russian Hydra DarkNet Market Made Over $1.3 Billion in 2020

• Apple Set to Surpass Samsung as Largest Purchaser of AMOLED Displays in 2021

• Why is patch management so difficult to master?

• Four proactive steps to make identity governance a business priority

• Critical RCE Vulnerability Found in VMware vCenter Server — Patch Now!

• Label standard and best practices for Kubernetes security

• More Than Likely, Or Less Than Probable: Is a truly quantitative security analysis possible?

• (ISC)² Supports NIST Encouragement of Inclusive Cybersecurity Terminology

• AWS IAM security explained

• Stalkerware: What is being done to protect victims as the number of cases rises

• Anti-money laundering regulation for all crypto exchanges on Austrac’s wish list

• The sharp drop of the cryptocurrency provokes cyber fraudsters

• Enhancing cyber resilience in the oil and gas industry

• Cybersecurity leaders lacking basic cyber hygiene

• How do we decide whether or not to trust AI systems?

• Anit-money laundering regulation for all crypto exchanges on Austrac’s wish list

• 2021 Cybersecurity: Mitigating Mobile Security Risks for CISOs

• ISC Stormcast For Wednesday, May 26th, 2021 https://isc.sans.edu/podcastdetail.html?id=7516, (Wed, May 26th)

• Imperva introduces Serverless Protection to secure serverless computing functions

• Onfido Face Authenticate enables businesses to authenticate customers’ real identities

• VMware reveals critical vCenter hole it says ‘needs to be considered at once’

• ACIC clarifies that it’s not actually interested in your WhatsApp or Signal chat

• Patch immediately: VMware warns of critical remote code execution hole in vCenter

• Juniper Networks Apstra 4.0 enhances the experience of users and operators in the data center

• Belgium Interior Ministry Targeted in Cyber Attack

• A Survey of Bluetooth Vulnerabilities Trends, (Wed, May 26th)

• Aruba’s Wi-Fi 6E solution set supports high-bandwidth applications and use cases

• Datadog’s AWS Lambda extension allows customers to collect telemetry from serverless applications

• LogRhythm Champions Profile: Seth Shestack

• How a defense contractor got a near perfect NIST 800-171 score: 7 important questions and answers

• PLDA launches XpressRICH PCI Express 6.0 Controller IP for SoC designers and system architects

• Inseego collaborates with Net4 to bring the benefits of private 5G infrastructure to enterprise networks

• (ISC)² announces registration opening for its 11th annual Security Congress

• 5 Tips to get Better Efficacy out of Your IT Security Stack

• How to Remotely Control Your iPhone Camera With or Without an Apple Watch

• Cadence unveiled its third-generation 112G long-reach (112G-LR) SerDes IP on TSMC’s N5 process

• Ermetic partners with IDSA to address risks associated with over privileged cloud identities

• Hackers already claiming to have sold Domino’s, Air India databases

• Cybercrime Forum Data Set for 2019 and 2021 – Free Direct Download Technical Collection Copy Available! Grab a Copy Today!

• Tessian raises $65M to accelerate its mission of preventing human risk in global enterprises

• Tony Shadrake joins Beyond Identity as VP of EMEA

• SailPoint appoints Wendy Wu as CMO

• Vendor Selection Matters in the Domain Registrar Ecosystem

• Russia Profiting from Massive Hydra Cybercrime Marketplace

• Rise in Opportunistic Hacks and Info-Sharing Imperil Industrial Networks

• Cloud Compromise Costs Organizations $6.2M Per Year

• IT Security News Daily Summary 2021-05-25

• Try These Best Practices to Counter Common Cybersecurity Risks

• Lawmakers push State Department to act on harassment, discrimination

• US To Issue Cyber Protection Rules For Pipelines After Colonial Hack

• Software and startups top priorities for DOD tech chief pick

• Fast computers, 5G networks and radar that passes through walls are bringing ‘X-ray vision’ closer to reality

• Zscaler stock surges on deal to buy active defense startup Smokescreen, upbeat quarterly results

• RSA Conference 2021: Focus on resilience

• Ivanti fixes high severity flaw in Pulse Connect Secure VPN

• CNBC Details 2015 Acquisition Talks Between Apple and Time Warner

• Post-pandemic telework infrastructure

• Communications board digs into 911 Christmas bombing outage

• Who are you? Rising to the data protection challenge

• Threat Actor ‘Agrius’ Emerges to Launch Wiper Attacks Against Israeli Targets

• Lawfare Live: Bob Bauer on the Danger of the Moment

• Colonial Pipeline attack spurs new rules for critical infrastructure

• Iranian hackers hit Israel with disk wiper in disguise of ransomware

• DHS to issue new pipeline security regulations after Colonial attack

• Hack Prompts New Security Regulations for US Pipelines

• The Rise of Continuous Attack Surface Management

• 180,000 Users Sign Petition Urging Facebook To Drop “Instagram For Kids”

• MacOS Zero-Day Let Attackers Bypass Privacy Preferences

• Construindo uma lista completa de verificação de segurança de rede

• Automatize atualizações de modelos e nunca mais perca uma atualização de software

• 10 astuces essentielles de cybersécurité pour les débutants

• Best browser for privacy 2021: Secure your web browsing

• Ransomware attack on Bose exposes employee SSNs and financial information

• Triple-extortion is a new tool for ransomware attackers

• VMware Security Advisory VMSA-2021-0010, (Tue, May 25th)

• See the Dramatic Improvement Mini-LED Brings to the M1 iPad Pro’s Display

• Federal CIO says cybersecurity is a top priority for new TMF projects

• Russian Sentenced to 30 Months for Running Criminal Website

• Axis Fosters Work-From-Home Momentum with Zero Trust Network Access

• iOS 15 Could Include New Food Tracking Feature

• Upcoming Beats Studio Buds Depicted in Leaked Images

• Hack Exposes Data Of 4.5 Million Air India Passengers

• 7 New Bugs in Bluetooth Let Hackers Impersonate As Legitimate Device & Launch DDoS Attacks

• Data security & App Development—Technology, Strategy & Obligations

• Review: Ford’s SYNC 4 Brings Wireless CarPlay to the 2021 F-150

• Eero 6 and Pro 6 Routers Gain HomeKit Support

• Why Geek Pride Day is Something to be Proud Of

• Audio equipment giant Bose hit by ransomware attack, data breach

• What Does Oura Ring Track? | Avast

• Applying the Invisibility Cloak: Obfuscate C# Tools to Evade Signature-Based Detection

• Email Security Firm Tessian Raises $65 Million at $500 Million Valuation

• What the Cyber EO means for federal agencies

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comic – ‘WEEK 330’

• Behavioral Analytics: How to Secure User Experience under a DDoS Attack

• Microsoft is a Leader in the 2021 Forrester Endpoint Security Software as a Service Wave

• Snowden was right, rules human rights court as it declares UK spy laws broke ECHR

• Trend Micro Bugs Threaten Home Network Security

• Chaos in Maricopa County: The election audit explained

• Your Network’s Smallest Cracks Are Now Its Biggest Threats

• How we can secure the future of healthcare and telemedicine

• Cryptocurrency trading bots: Strengthening Cybersecurity and minimizing risks

• Expert: Biden’s executive order on cybersecurity is a good start toward protecting organizations

• Some cybersecurity weak spots will be strengthened by Biden’s executive order, expert says

• Cryptography quiz questions and answers: Test your smarts

• Crimes of Opportunity: Increasing Frequency of Low Sophistication
  Operational Technology Compromises

• What are Clickjacking Attacks? Tips to Prevent Them

• ElevationLab Debuts AirTag Holder for Pet Collars

• Al-Hela v. Biden and Due Process at Guantanamo

• Adapting to the Cyber Domain: Comparing U.S. and U.K. Institutional, Legal and Policy Innovations

• Introducing Half-Double: New hammering technique for DRAM Rowhammer bug

• Brit watchdog shows some teeth over McAfee antivirus auto-renewals

• Ransomware attack on Bose Corporation

• BrandPost: Changing the Narrative Around Attack Victim Shaming

• Russia Threatens Google With Online Slowdown

• The Makings of a Better Cybersecurity Hire

• Uptycs Offers Resilience Formula to Boost Business Continuity

• Tidal Releases Apple Watch App With Offline Playback and More

• What is Incognito mode? Our private browsing 101

• UK’s Competition and Mergers Authority shows some teeth over McAffee antivirus auto-renewals

• Alert Actionability In Plain English From a Practitioner

• The hidden power of the Federal Citizen Services Fund

• Microsoft takes another stab at a Blockchain-powered ledger service

• Bose Admits Ransomware Hit: Employee Data Accessed

• Combatting Insider Threats with Keyboard Security

• Gartner: Global Security Spending Will Reach $150 Billion in 2021

• Conti ransomware spree draws FBI attention

• How Cybercriminals are Hacking ATM Machines? Here’s a Quick Look

• Apple Releases Security Updates

• Sumo Logic + DFLabs: Cloud SIEM Combined with SOAR Automates Threat Detection and Incident Response

• Cybereason Makes Big Debut on CNBC 2021 Disruptor 50 List

• North Korean Hackers Most Likely to Have Been Behind the CryptoCore Heists

• Hands On with Apple’s New M1 iMac and M1 iPad Pro

• Apache Spark plays in the NetApp data analytics playground

• Huawei To Launch Harmony 2.0 Operating System Next Week

• Not as complex as we thought: Cyberattacks on operational technology are on the rise

• Pulse Secure VPNs Get Quick Fix for Critical RCE

• Shift left security is helpful, but one expert says it’s not enough

• FBI Identifies 16 Conti Ransomware Attacks on U.S. Healthcare

• Actionable threat intelligence for publicly known exploits for RHEL

• Exploited macOS 0-Day Let Hackers Take Screenshots

• Freenode IRC Staff Resign En Masse After Takeover By Korea’s Crown Prince

• A Governor’s Live Zoom Event Got Hacked With Very Graphic Porn

• FBI Analyst Indicted For Theft Of Osama bin Laden Threat Intel

• SolarMarker Backdoor Pretends to be Legit PDFescape Installer

• macOS Malware Caught Spying on Users

• Bluetooth Devices Vulnerable to AuthValue Disclosure

• New Trojan Found to Impersonate Ransomware

• Bose Says Personal Information Compromised in Ransomware Attack

• OT Systems Increasingly Targeted by Unsophisticated Hackers: Mandiant

• Microsoft to Pull the Plug on Internet Explorer 11 in 2022

• The Adversary Within: Preventing Disaster From Insider Threats

• Your Guide to Hacker Summer Camp 2021

• Flexibits Launches Cardhop 2.0 Contacts Management App, Now Included With Fantastical Premium Subscription

• Deals: Save on Apple’s MagSafe Charger and MagSafe Duo Charger Accessories

• The Man Who Has Stolen the PII of 65k Employees of UPMC Pleads Guilty

• Indonesian Government Bans Raid Forums Website After Alleged Leak

• Insider threats: If it can happen to the FBI, it can happen to you

• Online Proctor Exam Pilot Results

• 5 really exciting tech roles open for applicants right now

• Japan’s Biggest Dating App Struck by Major Cyberattack

• Britons Tracked Without their Consent for Vaccine Study

• Malware exploited macOS zero-day flaw to secretly take screenshots. Update to Big Sur 11.4 now

• Trend Micro fixes 3 flaws in Home Network Security Devices

• High-End Mac Mini Said to Feature Thinner Design With ‘Plexiglass’ Top, Magnetic Power Port

• Florida To Prevent Tech Firms ‘Deplatforming’ Political Figures

• Tessian nabs $65M to solve cybersecurity’s ‘people problem’

• Report Highlights Massive Scale of Automated Cyberattacks

• Reminder: New Apple Watch Pride Bands Available at Apple Stores Starting Today

• Apple Fixes MacOS Vulnerability Exploited by XCSSET Malware

• Egnyte extends governance platform API to Google and Dropbox

• Operating in the Shadows: US Cyber Command

• Apple patches dangerous security holes, one in active use – update now!

• Download Ultimate ‘Security for Management’ Presentation Template

• Duo Has Completed a Type 1 C5 Attestation!

• Apple Patches Zero-Day Flaw in MacOS that Allows for Sneaky Screenshots

• New Bluetooth Vulnerabilities Could Expose Many Devices to Impersonation Attacks

• Ongoing Bitcoin Scams Show Power of Social Engineering Triggers

• Turn the Tables: Supply Chain Defense Needs Some Offense, Fortinet Says

• Businesses Boost Security Budgets. Where Will the Money Go?

• Apple addresses three zero-day flaws actively exploited in the wild

• The Top Trends Shaping The Future Of Access Management In 2021

• Expert Commentary on Audio Maker Bose Recent Data Breach

• Apple fixes macOS zero-day exploited by malware (CVE-2021-30713)

• Zeppelin Ransomware Group Is Back in Business After a Temporary Break

• Bose Disclosed Having a Data Breach

• Do You Have What it Takes to Achieve Digital Resilience?

• Iranian hacking group Agrius pretends to encrypt files for a ransom, destroys it instead

• Ransomware: Two-thirds of organisations say they’ll take action to boost their defences

• Apple Patches macOS Big Sur Vulnerability Exploited by Malware

• In A Year Like No Other, What Did Yours Look Like? Take The Survey.

• Team builds first hacker-resistant cloud software system

• Your Remote Working Tech Stack

• Insurance Firm CNA Pays $40m To Ransomware Criminals

• Microsoft: This clever open-source technique helps to protect your privacy

• Spikes in Holiday Fraud Expected as Travel Restrictions Ease in the UK, Action Fraud Warns

• One Identity Doubles Down on its Cloud-First Strategy

• What ‘cross-cloud’ architects need to know

• Encrochat drug dealer betrayed by his love of cheese

• Russian dark web marketplace Hydra cryptocurrency transactions reached $1.37bn in 2020

• Who Could be Behind the Whale Address that Owns Dogecoin Worth $12 Billion?

• Audio equipment maker Bose Corporation discloses a ransomware attack

• Netflix Considering Move into Gaming With Apple Arcade-Style Bundle

• OMICRON Online Conference: Cybersecurity for Critical Infrastructure – How to Secure Your Substation

• Tailor security training to developers to tackle software supply chain risks

• How the post-pandemic world will challenge CISOs

• Supply Chain Attacks: How To Reduce Open-Source Vulnerabilities

• Uncovering Shenanigans in an IP Address Block via Hurricane Electric’s BGP Toolkit, (Tue, May 25th)

• Apple says it’s time to update your iPhone… again

• Cyberattacks: Bigger, Smarter, Faster

• Happy birthday GDPR: IoT impact and practical tips for compliance

• South Korea plans large scale quantum cryptography adoption, thanks in part to tech partnership with USA

• Cyber Diplomacy – a course from UN Office for Disarmament Affairs

• Five Most Common Cloud Threats

• WaterField Designs Launches Leather AirTag Keychain and Luggage Tag

• New High-Severity Vulnerability Reported in Pulse Connect Secure VPN

• Trojan Horse? Here Comes the Trojan Home

• Perform simple security tests yourself – using Metasploit Framework and nmap

• Latest MacOS patch sees fix for zero-day screenshot malware

• It’s GDPR’s 3rd Anniversary!

• Bose reports data breach following ransomware attack

• Application security testing is not just buzzwords

• ASIO chief accuses tech giants of running safe spaces for terrorists and spies

• Zeppelin Ransomware have Resumed their Operations After a Temporary Pause

• Introducing the PerimeterX Automated Fraud Benchmark Report

• Protecting the Hybrid Cloud With Zero-Trust

• US banks are giving facial recognition a go; EU tightens regulations, FTC updates AI guidelines

• Evolution of JSWorm ransomware

• Rom‑con: How romance fraud targets older people and how to avoid it

• Hard cheese: Stilton snap shared via EncroChat leads to drug dealer’s downfall

• Top Threat Detections Can Identify Suspicious Activity

• SOC Analyst Training – Cyber Attack Intrusion Analysis With SIEM Tools|From Scratch To Advanced

• Over 65% of Australians across all age brackets worry about privacy in new tech

• A leadership guide for mitigating security risks with low code platforms

• China’s Digital Yuan not aimed at challenging US dollar, says former People’s Bank governor

• American Express slapped with £90,000 penalty for spamming customers

• Cyber Threats force Tennessee to pass an Insurance Data Security Law

• New Bluetooth Flaws Let Attackers Impersonate Legitimate Devices

• Security must become frictionless for companies to fully secure themselves

• Apple‌ Issues Patches to Combat Ongoing 0-Day Attacks on macOS, tvOS

• Thoughts on Biden’s cybersecurity Executive Order

• Many Cybersecurity Jobseekers Lack a Full Understanding of the Role They Seek

• Four clever ways smart technology can help create big energy savings

• Trend Micro Patches Vulnerabilities in Home Network Security Devices

• Victims lose millions to healthcare related eCrime

• Less than 30% of business have a plan to combat deepfakes, survey finds

• Hack, Disinform, Deny: Russia’s Cybersecurity Strategy

• ISC Stormcast For Tuesday, May 25th, 2021 https://isc.sans.edu/podcastdetail.html?id=7514, (Tue, May 25th)

• Consumers ID theft concerns only growing

• Air India Disclosed Data Breach Affecting 4.5M Customers In The Wake Of SITA Breach

• “Network Security” the Biggest Concern for Public Cloud Adoption, Reveals Survey

• FWaaS market continues to grow

• Ericsson warns it could lose out in China as Huawei reportedly shifts to software

• Siete mitos del trabajo remoto, derribados por Gartner

• Russian to be Deported After Failed Tesla Ransomware Plot

• Eight suspects busted in raid on “home delivery” scamming operation

• IDQ launches Cerberis XG, a QKD system that generates and distributes provably secure keys

• macOS Big Sur 11.4 Addresses Vulnerability That Could Let Attackers Take Secret Screenshots

• Belarus and the Hijacking of Ryanair Flight FR4978: A Preliminary International Law Analysis

• StorMagic and Zerto have been validated with HPE Proliant servers to protect data intensive workloads

• Malware caught using a macOS zero-day to secretly take screenshots

• Japan’s biggest dating app hit by major cyberattack

• DTA says it will get COVIDSafe running costs down to AU$60,000 a month by July

• Epic Games v. Apple Trial Wraps Up, But We Likely Won’t Know the Outcome for Months

• CrowdStrike and EY expand alliance to help businesses grow their resiliency and security posture

Generated on 2021-05-26 23:55:47.153420