IT Security News Daily Summary 2021-06-01

• Cyber-Insurance Fuels Ransomware Payment Surge

• White House nominates top Army career civilian official to be DOD comptroller

• White House seeks reopening plans from agencies

• Digital Disease Surveillance

• Regulatory Alchemy: Turning Cybersecurity Guidelines Into Rules

• Shared services funded in 2022 budget plan

• Next-gen supercomputer lays foundation for exascale

• SolarWinds hackers launch phishing attack

• Pennsylvania flips switch on cloud unemployment system

• Kaspersky: Exploits for MS Office Flaws Most Popular in Q1 2021

• Report: Accellion Failed to Notify Customers of FTA Zero-Day

• Meat Producer JBS USA Hit By Ransomware Attack

• Oh no! A client failed a pen test. Now what?

• Choosing the right DOD cloud

• The Security Digest: #63

• WhatsApp reverses course, will not limit app functionality

• How a national student database could cheapen the college experience

• Meat Producer Ransomware Attack Disrupts Global Production

• BSides Canberra 2021 – Eldar Marcussen’s ‘The Defender’s New Clothes’

• New Epsilon Red Ransomware appears in the threat landscape

• Cobalt Strike, a penetration testing tool abused by criminals

• Cryptomining malware up, financial malware down in Q1 2021, Kaspersky finds

• Greater Share of iPhone 13 Models Expected to Support Ultra-Fast mmWave 5G

• Apple Developer App Gains Lab Signups, Session Info, and New Stickers Ahead of WWDC Keynote

• Cobalt Strike, a penetration testing tool popular among criminals

• Where Bug Bounty Programs Fall Flat

• There’s a lesson here for us all: A third of healthcare orgs in Sophos survey ‘hit with ransomware in 2020’

• Force MFA for AWS IAM Users

• Who is responsible for secure remote access management?

• Return to Basics: Email Security in the Post-COVID Workplace

• Introducing continuous remote worker visibility and expanded data collection with Secure Network Analytics Release 7.3.2

• Snort 3: Rearchitected for Simplicity and Performance

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comic – ‘WEEK 331’

• Apple Launches WWDC 2021 Live Stream on YouTube in Preparation for June 7 Keynote

• Firefox 89 for Mac Released With Cleaner Design, Multi-Touch Zoom, and More

• Cyber attack hits world’s largest meat processor in North America and Australia

• Vulnerability Management is the Key to Stopping Attacks

• Apple Music Celebrating Pride With New Content Every Sunday in June

• Congress Demands Accountability for Service Members

• Cyber Security Roundup for June 2021

• How To Make The Most of Increased Cybersecurity Spend

• How can the cloud take instant card issuance to the next level?

• Name That Edge Toon: In Tow

• Top 10 WordPress website maintenance tips

• BSides Canberra 2021 – Iggy’s ‘Cold Case – Catch A Killer In 16 Bytes’

• Spotify Executive Justifies Antitrust Pressure on Apple and Calls for Other App Store Payment Providers

• WWDC 2021 ‘Digital Lounges’ Now Open for Sign-ups

• Apple Design Award Finalists Revealed Ahead of WWDC 2021

• Apple Updates iWork for iOS and macOS With New Linking Features and More

• Ransomware attack hits world’s largest meat processor in North America and Australia

• Understanding the threat landscape and risks of OT environments

• Microsoft Exchange Servers hit by Epsilon Red Ransomware

• Tech Groups File Lawsuit Against Florida Social Media Law

• Creating a more resilient American infrastructure

• Exabeam Lands $200M Investment, Replaces CEO

• Interpol Seize $83 Million in Operation Against Online Financial Fraud

• Deadshot: A Tool That Marks Sensitive Content for Developers

• Malicious Life Podcast: China’s Unrestricted Cyberwarfare Part 2

• The Line in the Sand: How We Respond Today Impacts Our Security Tomorrow

• American food processing giant JBS Foods halts production after cyberattack

• Apple TV App Available on Nvidia Shield Streaming Device Starting Today

• Understanding The Surge in Cyber Extortion

• Google Photos Ends Unlimited Storage – What To Do

• Remember those wacky cyberpunk costumes in Hackers? They’re on display in London this week

• LG Makes Its Last Ever Smartphone

• CISO Confidence Is Rising, but Issues Remain

• The SolarWinds Hackers Aren’t Back – They Never Went Away

• This Android Trojan Malware Uses Fake Apps To Infect Smartphones, Steal Bank Details

• $83 Million Intercepted In Asian Cybercrime Takedown

• Global Meat Processor JBS Hit By Cyberattack

• iPhone 13 Lineup Appears to Feature Significantly Larger Battery Capacities

• Coinbase Card Now Supports Apple Pay for Easy Spending of Cryptocurrency

• A Comprehensive Answer to the Frequently Asked Question “What is WannaCry Ransomware?’

• EUCC Receives First EU Cybersecurity Certification Scheme

• Malicious Acts Can be Carried via Trustworthy Software Nowadays

• No Time to Waste: Three Ways to Quickly Reduce Risk in Critical Infrastructure Environments

• Microsoft Exchange Admin Portal Goes Down Due to an Expired SSL Certificate

• Deals: Grab the Apple Watch Series 6 in (Product)RED for $70 Off, Starting at $329 for 40mm

• Critical SonicWall Network Security Manager Flaw Let Attackers Perform OS Command Injection

• Learning the Building Blocks of Your CIAM Framework Part 1: Capture

• Constant Contact Email Service Used in Phishing Attack

• Google Buried Location Settings So That You Can’t Disable Them

• NYOB Acts Against the Cookie Banner Terror

• FBI: Ransomware Attackers are Using MEGA.NZ

• [redacted] Emerges From Stealth to Help Companies Pursue, Disrupt Adversaries

• What is a Supply Chain Attack? Here’s How is it Making Your Software Vulnerable

• Cybersecurity Group Hopes to Push 30 More National Priorities

• Russian hacker Pavel Sitnikov arrested for distributing malware via Telegram

• Sen. Angus King: Washington, private sector must work together on cybersecurity

• Kimsuky APT continues to target South Korean government using AppleSeed backdoor

• Tech Giants Paid $96 Billion Less Tax Than Stated, Campaigners Allege

• This Android trojan malware is using fake apps to infect smartphones, steal bank details

• Cyberattack Forces Meat Producer to Shut Down Operations in U.S., Australia

• How Mobile Ad Fraud has Evolved in the Year of the Pandemic

• Swedish Public Health Agency Says Disease Database Targeted in Cyberattacks

• Malware Can Use This Trick to Bypass Ransomware Defense in Antivirus Solutions

• Tim Cook’s Compensation Was Comparatively Modest Among Highest-Paid CEOs of 2020

• Some Users Reporting Excessive Battery Drain Following iOS 14.6 Update

• Guildma is now using Finger and Signed Binary Proxy Execution to evade defenses, (Mon, May 31st)

• Apple Highlights Winners of WWDC 2021 Swift Student Challenge

• The Professional Development Institute Launches Three New Courses

• XSS Vulnerability Found In ReDi Restaurant Reservation WordPress Plugin

• FBI To Share Pwned Passwords With HIBP As It Goes Open Source

• Most Common Tech Scams Targeting Seniors | Avast

• Cybersecurity M&A Roundup: 36 Deals Announced in May 2021

• A CISO’s Guide: Mitigating the Human Risk Factor

• How the Rise of the Remote SOC Changed the Industry

• Asian cybercrime takedown leads to intercept of $83 million in financial theft

• Meat-packing Giant JBS USA Shuts Down Systems Following Cyberattack

• Security Vulnerability in Apple’s Silicon “M1” Chip

• SEC charges US promoters for marketing alleged BitConnect cryptocurrency Ponzi scheme

• Daimler Ends Nokia Spat With Royalty Payment Agreement

• Do you trust Amazon to share your internet connection with others?

• How to Apply the Risk Management Framework (RMF)

• Kids on the Web in 2021: Infinite creativity

• How cybercriminals turn “harmless” stolen or leaked data into dollars

• Defining linchpins: An industry perspective on remediating Sunburst

• Acer Warns Chip Shortage Will Impact Laptop Production

• Zero Trust or Bust: What It Is and Why It Matters to Data Security

• Quick Hits

• FCW Insider: June 1, 2021

• Apple Maps Begins Surveying Poland for ‘Look Around’

• 8 Best Gaming Mouse Under 30$ 2021 – Review and Buying Guide

• Pay Attention: These Unsubscribe Emails Only Lead to Further Spam

• Report: Danish Secret Service Helped NSA Spy On European Politicians

• Canberra considers its digital ID for use in verifying age before accessing porn

• US Soldiers Exposed Information About the Nuclear Weapons Stockpile

• Florian Tudor – The Shark Arrested in Mexico

• Deepfake Map History

• Timeline of Lies About Tesla “FSD”

• Application security testing is not just buzzwords

• Increase confidence in public cloud security: Integrate Intel SGX, says G-Core Labs Cloud

• The Future of Application Security

• Prometheus and Grief – two new emerging ransomware gangs targeting enterprises. Mexican Government data is published for sale.

• Don’t feed the trolls and other tips for avoiding online drama

• Proliferation of DevOps Tools Introduces Risk

• How do I select a data analytics solution for my business?

• A Safer Internet for You, Your Family, and Others Too

• Cybersecurity industry analysis: Another recurring vulnerability we must correct

• Keeping your critical SAN applications always on

• Helping security teams respond to gaps in security and compliance programs with Qualys CSAM

• Ransomware Cyber Attack on Canada Post leaks data of 950,000 Customers

• UK NHS to share data causing data privacy concerns among patients

• EUCC receives first EU cybersecurity certification scheme

• Humach Expresses Concern on New Compliance Vulnerabilities for Remote Contact Centers

• Endpoint complexities leaving sensitive data at risk

• The human cost of understaffed SOCs

• Security leaders more concerned about legal settlements than regulatory fines

• ISC Stormcast For Tuesday, June 1st, 2021 https://isc.sans.edu/podcastdetail.html?id=7522, (Tue, Jun 1st)

• Researchers Uncovered 2 New Hacking Method to Break the Certified PDF Docs

• Have I Been Pwned goes open source, bags help from FBI

• JBS USA cyber attack affecting North American and Australian systems

• Cyber attack hits JBS meat works in Australia, North America

• Group-IB opens MEA Threat Intelligence & Research Center in Dubai

• What to do if you find a lost AirTag

• Shenoy Sandeep joins Cyble as Regional Director of META

• Proofpoint: Compromised cloud accounts cost organizations over $6M

• IT Security News Monthly Summary – June

• IT Security News Daily Summary 2021-05-31

• Swedish Health Agency discloses hacking attempts

• 
Video: Cobalt Strike & DNS – Part 1, (Sun, May 30th)

• Quick and dirty Python: nmap, (Mon, May 31st)

• Vectra: 10 most common threats for Azure AD, Office 365 customers

• Revisiting the NSIS-based crypter

• Denmark intel helped US NSA to spy on European politicians

• WWDC is One Week Away: Five Steps to Get Ready

• BrandPost: Veterans are Key to Filling the Cybersecurity Skills Gap

• Microsoft Creates Cybersecurity Council for the Public Sector in APAC

• Threat Actors Release Patient Data Stolen from New Zealand Hospitals to the Local Media

• Apple Rumored to Adopt OLED Displays in ‘Some’ iPad Models Starting Next Year

• CISA and FBI Warn of New Spearphishing Campaign Targeting Government Organizations and NGOs

• Microsoft asks all Asian Nations to collectively fight Cyber Threats

• Gen Z Y2K Fashion And Y2K Internet | Avast

• Brazil approves stricter legislation to tackle online crime

• Vulnerability Summary for the Week of May 24, 2021

• The DOD’s SWAT Team of Nerds

• Mini-LED Shipments for New MacBook Pro Models Expected in Third Quarter

• Expert Advice on New Crypto Scam Targeting Mobile Users

• Potentially Malicious Apps Your Kids May Use

• Strike First: The Benefits of Working With an Ethical Hacker

• Interpol Says 585 People Arrested in APAC Operation Against Cyber-Enabled Crime

• Interpol Thwarts Online Fraud Intercepting $83 Million Illicit Funds in the Asia-Pacific Region

• Imperva’s WAF Gateway 14.4 Protects Enterprises for the Post-COVID Era

• Gaining Insights Is Fundamental for API Security

• On the Taxonomy and Evolution of Ransomware

• 3 SASE Misconceptions to Consider

• 4 Ways CISOs Can Strengthen Their Security Resilience

• United States Memorial Day 2021

• Designing Zero Trust Endpoints

• US Nuclear Weapon Bunker Secrets Spill From Online Flashcards Since 2013

• Have I Been Pwned Teams With FBI, Gives Open Source Access To Code

• 3 arrested for smuggling over 250 Vietnamese migrants to Germany

• Password authentication is a mess. Here’s a system to replace it

• JBS Foods Shuts Down Due to Massive Cyberattack

• Danish Secret Service Helped US Spy on Germany’s Angela Merkel

• SonicWall Patches Command Injection Flaw in Firewall Management Application

• Kenyan Arrested in Qatar First Targeted by Phishing Attack

• S&P: Cyberattacks Could Trigger More Rating Actions on Banks

• Implications Of Russian Solarwinds Hackers New Email Attack On Government Agencies

• Russian Hackers Launch Major Cyberattack Through U.S. Aid Agency’s Email System, Microsoft Says

• Technology Blind Spots: Is Lack Of Visibility Leaving Your Business Exposed?

• More Businesses Adopting Encryption in the Last Year

• Amazon Devices Will Soon Share Internet with Neighbours

• New Zeeland’s Reserve Bank Taking Action to Respond to Data Breach Reports

• Siemens PLCs New Security Flaws Uncovered

• Cybercriminals Target Companies With New ‘Epsilon Red’ Ransomware

• An Advisory Issued by Carnegie Mellon University Warns Against the Vulnerability in Checkbox Survey

• Expert Advice on News that Fake Movie Streaming Service Leads to Malware

• Russia Phishing Attack On USAID, Other Human Rights Groups

• Russian Hacker Group Nobelium Attack U.S Gov Agencies By Targeting 3,000 Email Accounts

• The OSI Model and You Part 2: The Data Link Layer

• Can Your Business Email Be Spoofed? Check Your Domain Security Now!

• Your Amazon Devices to Automatically Share Your Wi-Fi With Neighbors

• Klarna Privacy Incident Was ‘Self-Inflicted Bug’, Experts Weigh In

• Epsilon Red Ransomware Goes After Unpatched Microsoft Exchange Servers

• Canada Post Disclosed Data Breach Due To Third-Party Ransomware Attack

• Half-Double Rowhammer Vulnerability Even Targets The Latest Chips

• Klarna Privacy Incident Was ‘Self-Inflicted Bug’

• 5 Free and Open Source Patch Management Tools for Your Company

• CISA-FBI Alert: 350 Organizations Targeted in Attack Abusing Email Marketing Service

• What Is a Supply Chain Attack?

• PCs Offer ‘Better Gaming Experience Than 100% of Mac Laptops,’ Intel Claims in Ongoing Anti-Apple Campaign

• May 2021 Web Server Survey

• The slow trend away from facial recognition technology

• US Proposes $750m For Federal SolarWinds Response

• US Sets Next Stage For $250bn Bill To Counter China Tech

• Activists Launch Action Against ‘Cookie Banner Terror’

• IT threat evolution Q1 2021. Mobile statistics

• IT threat evolution Q1 2021

• Apple Publishes 2021 Supplier Progress Report

• Russian Hackers Are Using  4 New Malware Families

• IT threat evolution Q1 2021. Non-mobile statistics

• Apple to ‘Add More Stores’ Around the World, Says SVP of Retail

• Scam Alert! Unsubscribe Spam Emails Used by Spammers to Confirm Legitimate Email Accounts

• 6 most common types of software supply chain attacks explained

• HITRUST explained: One framework to rule them all

• Amazon Introducing ‘Wellness Booths’ Into Warehouses

• ‘Twitter Blue’ Subscription Service Appears On App Stores

• Bitcoin Heads For Worst Slide In Nearly 10 Years

• Experts devised a new attack to bypass Microsoft PatchGuard

• A week in security (May 24 -30)

• BazaLoader Malware is Being Distributed by Hackers Using a Bogus Streaming Website

• Microsoft wants to unite APAC governments with cybersecurity council

• Phishing Victims are Urged to Send their Mailing Address to Hackers Posing as Walmart

• Where Should I Spend My Time? Looking at Verizon DBIR & Executive Order

• U.S. Critical Infrastructure: Addressing Cyber Threats and the Importance of Prevention

• A New Bug in Siemens PLCs Could Let Hackers Run Malicious Code Remotely

• Trying to register your antivirus in Windows Security Center?

• Tesla In-Car Cameras To Monitor Driver Awareness

• Welcoming the Dominican Republic Government to Have I Been Pwned

• Exposing Protonmail and Tutanota’s Illicit Abuse by Ransomware Gangs – A Compilation of Currently Active Ransomware-Themed Email Addresses – Part Two

• COVID-19 – Phishing attacks target employees that come back to the office

• Rethinking SIEM requires rethinking visibility

• Microsoft warns against the new Russian Cyber Attacks that targeted 150 US firms

• Suspected Ransomware attack shuts down JBS Meat Processing

• Best practices for securing the CPaaS technology stack

• The value of SD-WAN connectivity

• How colocation can improve TCO for the enterprise

• Facefish Backdoor Steals Login Credentials & Execute Arbitrary Commands on Linux Systems

• The Ministry of Internal Affairs of Russia will launch a program for recognizing deepfakes in the fall of 2022

• Organizations have seen an increase in device encryption

• Apple’s M1 Chip Has a Fascinating Flaw

• SeKVM: Securing virtual machines in the cloud

• AlmaLinux OS 8.4: A free open source alternative to CentOS

• SnapLogic Fast Data Loader simplifies cloud data warehouse loading

• A Road to a Consistent Encryption Strategy

• Elastic broadens support for osquery, the open source host instrumentation framework

• Amazon ECS Anywhere enables customers to run Amazon ECS on any infrastructure

Generated on 2021-06-01 23:55:32.406939