IT Security News Daily Summary 2021-06-05

• US arrested Latvian woman who developed part of Trickbot malware

• A Swarm of Ransomware Attacks Highlights the Need for High-Quality Threat Detection at the Start of the Attack Chain

• Addressing the Growing Cybersecurity Risks of Cyber-Physical Systems

• U.S. Supreme Court restricts scope of computer fraud law

• Security BSides Dublin 2021 – Chintan Shah’s ‘Digging The Attack Surface Of Microsoft Rich Text Format Files – An OLE Perspective’

• Security BSides Dublin 2021 – Matthias Wilson’s ‘Using SOCMINT In Threat Intelligence’

• The Joy of Tech® ‘Google’s Hiding Privacy Settings!’

• The Professional Development Institute Launches Three New Courses

• Turning every Android device into a trusted companion

• Cryptocurrency trading bots: Strengthening Cybersecurity and minimizing risks

• Hacking Group DarkSide Attacks Colonial Pipeline With a Ransomware

• Security News in Review: Bugs, Trains, and Private Banks

• Serious Flaws Identified in CODESYS Industrial Automation Software

• His book explains our obsession with cryptocurrency

• GitHub Updates Policy to Remove Exploit Code When Used in Active Attacks

• BlackCocaine Ransomware, a new malware in the threat landscape

• Bloomberg: iPadOS 15 to Feature Improved Multitasking, Redesigned Notification Banner for iOS 15

• Top Stories: WWDC Kicks Off on Monday, New MacBook Pros Spotted?, iPad and AirPods Rumors

• The Safest Way to Store and Share Your Nudes

• The FBI’s Director Compares Ransomware Threat to 9/11

• Break Into Ethical Hacking With 18 Training Courses For Just $42.99

• DoJ: Investigations into ransomware attacks must have similar priority as terrorism

• Big Tech Companies to Be Hit by ‘Historic’ International Tax Agreement

• Hackers Reportedly Target Cox Media Group Stations

• TikTok Quietly Updated Its Privacy Policy to Collect Users’ Biometric Data

• ALERT: Critical RCE Bug in VMware vCenter Server Under Active Attack

• How to perform a website security check- 6 tools to check website security

• VMware Becomes New Target of FreakOut Malware

• US CISA published a guide to better use the MITRE ATT&CK framework

• Apple Staff Complain About Plans for Return to Office Work in Letter to Tim Cook

• Ex-SEC Enforcer: Crypto Investors are Enabling Hackers

• ‘Build’ or ‘Buy’ your own antivirus product

• Furniture Village Hit by a Week-Long Cyber Attack

• Week in security with Tony Anscombe

• Hackers Stealing More Than $280 Million Per Month From Crypto Transactions

• How can document readers help us fight COVID-19?

• Tom Cruise, TikTok and Fraud: How to combat DeepFakes

• Ransomware and Energy and Utilities

• Asymmetrical threats in Cybersecurity

• What is a trusted advisor?  …and why do I need one?

• Strange goings on with port 37, (Thu, Jun 3rd)

• Nokia NetGuard XDR and MDR provide CSPs with stronger protection for their 5G networks

• The Bigger Picture Behind the Dustup Over the Barr Memo

• Facebook’s Responses in the Trump Case Are Better Than a Kick in the Teeth, but Not Much

• Qualys Helps Organizations Manage Risk with Cybersecurity Asset Management

• Estadísticas globales del trabajo remoto en el 2020 para el futuro de TI

• ISG expands global cybersecurity unit to help clients tackle with cyberattacks

• Eclypsium partners with SecureCraft to extend distribution of its enterprise device integrity platform

• NS1 DDI platform now hosted on Cisco Catalyst 9300 and 9400 Series switches

• Where to See the EFF Staff at RightsCon 2021

• Revenge of the SaaS: Mandiant uses services to escape FireEye

• SignalWire raises $30M to accelerate the creation of unified cloud communications tools

• Unpatched VMware vCenter Software

• Amazon Sidewalk is right around the corner – do you need to walk away?

• oak9 raises $5.9M to launch infrastructure-as-code security platform

• Cybersecurity News Round-Up: Week of May 31, 2021

• GSA awards Booz Allen $674M contract to support growth of DoD’s Advana data analytics platform

• Companies that pay ransoms are feeding the business model, says CISA’s Wales

• Forcepoint: 74% of IT leaders shifted funds to cybersecurity post-pandemic

• Hackers scan for VMware vCenter servers vulnerable to CVE-2021-21985 RCE

• The Safe Connections Act Would Make It Easier to Escape Domestic Violence

• IT Security News Daily Summary 2021-06-04

• 2021-06-03 – Quick post: BazarCall website to BazarLoader infection with Cobalt Strike

• 2021-06-04 – Quick post: Qakbot (Qbot) with Cobalt Strike and spambot activity

• Amazon Sidewalk is right around the corner – do you need to walk away?

• Friday Squid Blogging: Squids in Space

• Cyberattack Suspected in Cox TV and Radio Outages

• Expel rolls out managed detection and response for Microsoft

• Most Brazilian companies lack cybersecurity teams

• Apple Maps Vehicles Begin Collecting ‘Look Around’ Imagery in Czech Republic

• What to Expect at WWDC 2021: iOS 15, macOS 12, watchOS 8, New MacBook Pro?

• BrandPost: Driving Digital Innovations and High Performance On and Off the Race Track

• distributed denial-of-service (DDoS) attack

• FBI, DOJ to treat ransomware attacks with similar priority as terrorism

• SentinelOne Files S-1 for IPO

• Biden expands Chinese tech and military blocklist to 59 companies

• People of JumpCloud | Chancellor Champine

• 5 On Friday – 5 Ways Energy Companies Can Become More Secure

• Prisma Cloud Delivers 276% ROI: 2021 Forrester TEI Study

• ‘Sensibo Pure’ Air Purifier Gains HomeKit Support

• iFixit Digs Into M1 iPad Pro in New XDR Display Teardown

• Necro Python bot now enhanced with new VMWare, server exploits

• MacRumors Giveaway: Win an iPad Keyboard From Typecase

• Protect Elders From Tech Support Scams | Avast | Blog

• Autonomous AI Drones Hunt Soldiers | Avast

• The small federal office at the heart of Biden’s equity agenda

• Ransomware: A cheat sheet for professionals

• iOS 14 Now Installed on 90% of iPhones Released in Last Four Years

• How AI can simplify, streamline, and enhance supply chain operations

• The little office at the heart of Biden’s equity agenda

• CNBC Exclusive: Deputy AG on U.S. ransomware response

• ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

• WhatsApp Won’t Limit Functionality – If you Don’t Accept Privacy Features

• What is Email Spoofing? How Hackers Impersonate Legitimate Senders

• Artificial Intelligence Act: What Is the European Approach for AI?

• Good news for pentesters and network admins: US issues ransomware guidance asking biz to skill up security teams

• Know Your Guest: Why secure identity verification needs to be a top priority for hotels

• Introducing Digital First: A new revolution in mobile card issuance

• SentinelOne Advanced AlienApp

• Digital transformation explained

• Ways to setup Squid proxy server and helpful tips

• Apple Users: This macOS Malware Could Be Spying on You

• Google to Let Android Users Opt-Out to Stop Ads From Tracking Them

• Security pros agree about threats—convincing everyone else is the problem

• Vulnerabilties Found in Realtek Module

• Data Breaches Drive Higher Loan Interest Rates

• Organizations Shift Further Left in App Development

• Why Mass Electric Car Concepts of 1940s May Finally Arrive in 2020s

• Resilience as a Core Component of Successful Security

• White House Pushes Private Sector to Address Ransomware

• FBI investigates over 100 ransomware variants and confirms Russian indulgence

• Organizations Warned: STUN Servers Increasingly Abused for DDoS Attacks

• FujiFilm Shuts Down Network Following Ransomware Attack

• Threats to Asian Communities in North America, Europe, and Oceania

• ETF Spotlight: Cybersecurity ETF gets boost from top holdings

• Deals: All Colors of Apple’s AirPods Max Discounted to $519.99 ($30 Off)

• At Least One New MacBook With Apple Silicon ‘Likely’ at WWDC, Says Morgan Stanley Analyst

• Scripps Health Is Notifying Patients Regarding a Data Breach After a Ransomware Attack

• Avaddon Ransomware: Everything You Need to Know

• What are Software Supply Chain Attacks?

• How to Get on the CISO Certification Path

• Industrial systems under siege from ransomware

• Supreme Court Limits Scope of Controversial Hacking Law

• EU, Mideast Nations Look to Train at Cyprus Security Center

• How to hack into 5500 accounts… just using “credential stuffing”

• What the FedEx Logo Taught Me About Cybersecurity

• Welcome to the New Workplace

• Chrome Fake Reviews: It’s Worse than We Thought

• Ransomware to be investigated like terrorism

• Serious Vulnerabilities Found in CODESYS Software Used by Many ICS Products

• Digital Privacy Tips for Journalists and PR Specialists

• ‘Who Are You, Charlie Brown?’ Coming to Apple TV+ on June 25

• Building digital fitness starts with small steps

• King County ban on police use of facial recognition software spotlights local movements across US

• Hackers use Colonial pipeline ransomware news for phishing attack

• REvil Ransomware Gang Spill Details on US Attacks

• Building End-to-End Security for 5G Networks

• The Perfect Storm for PAM to Grow In

• 10 Critical Flaws Found in CODESYS Industrial Automation Software

• FBI Says It Is Investigating About 100 Types Of Ransomware

• Google PPC Ads Used To Deliver Infostealers

• Supreme Court Narrows Interpretation Of CFAA, To The Relief Of Ethical Hackers

• Chrome 91 Will Warn Users When Installing Untrusted Extensions

• The evolving threat of ransomware and how to guard against attacks

• Announcing New Abuse Research Grants Program

• FUJIFILM Shuts Down Operations Following Suspected Ransomware Attack

• Samsung Patent Reveals Folding Tablet Device

• XDR Platform Provider SentinelOne Files for IPO

• How to Effectively Report to the Board on Cyber Liability and Risk

• Android banking malware sharply increased in the first chunk of 2021, reckons ESET

• Most Reliable Hosting Company Sites in May 2021

• Ransomware Attack Response Should Extend Beyond Money to Your Team’s Morale

• White House Urges Private Companies to Help in Fight Against Ransomware

• Metropolitan Transportation Authority Systems Hacked

• The Great Courses Signature Collection Now Available Through Apple TV Channels

• Hiring from Within and Retaining Cybersecurity Talent: Building Your Strategy

• Facebook Faces UK, European Antitrust Probes

• Perfect storm: Fraud is skyrocketing coming out of pandemic

• Ransomware: Ireland’s health service remains ‘significantly’ disrupted weeks after attack

• Over 90% of OT Organizations Experienced Cyber Incidents in Past Year: Report

• Google to Scan Extension for Chrome to Weed out Malicious Files

• Sumo Logic Extends AWS Alliance to Launch SIEM Service

• China-linked attackers breached Metropolitan Transportation Authority (MTA) using Pulse Secure zero-day

• SkinnyBoy Malware Is Used by Russian Hackers to Breach Sensitive Organisations

• Zero‑day in popular WordPress plugin exploited to take over websites

• Supreme Court Limits Prosecutors’ Use of Anti-Hacking Law

• Security and Human Behavior (SHB) 2021

• Apple Music Coming to Mercedes-Benz MBUX Infotainment System

• UF Health Central Florida Affected by Ransomware Attack

• White House Tells US Businesses to Deploy EDR in Wake of Ransomware Spat

• Currently Active WordPress Plugin Vulnerability Lets Attackers Take Full Control, Research Finds

• Eels shipped by air found in operation Lake-V

• Redesigned MacBook Pro Models May Not Ship to Customers Until Late 2021

• The Largest Ferry Service from Massachusetts Was Hit by a Ransomware Attack

• Apple Developing New iPad Pro With Wireless Charging – Report

• Poison in the Water: The Physical Repercussions of IoT Security Threats

• Is it possible to automate all of cloud operations?

• Eels shipped by air found in operation Lake V

• Herfordshire County Council Reports Almost 16,000 Cyber ‘Attacks’

• Swedish Public Health Agency Disclosed Multiple Hacking Attempts

• Influence of technology on gaming industry

• The dark web index 2021, report

• Google Announces Plans to Allow Android Users to Opt-Out of Tracking Later in 2021

• Experts React: White House Open Letter To Companies Re Ransomware

• The policy of truth: As ransomware claims rise, what’s a cyber insurer to do?

• Security Recruiter Directory

• The SolarWinds hack timeline: Who knew what, and when?

• FCW Insider: June 4, 2021

• Quick Hits

• Planning Your Summer Vacation? Here’s What You Need to Know to Avoid Holiday Booking Fraud

• Bank Fraud Up 159% in Q1, Feedzai Reports – Expert Offers Perspective

• White House urges private sector to enhance their ransomware defenses

• Hackers Linked to the Chinese Government Attacked the NYC MTA’s Computer Systems

• Panda Dome succeeds again: 100% blocking rate in AppEsteem tests

• Chrome 91 will warn users when installing untrusted extensions

• Imperva: 75.9% of stolen data in breaches involve personal information

• Brit retailer Furniture Village confirms ‘cyber-attack’ as systems outage rolls into Day 7

• Cybercrime Forum Publishes Alleged Database, Source Code From Russian Firm That Helped Parler

• Ask Chloé: Where to Begin In InfoSec

• Satori Self-Service Data Access democratizes workflows for enterprise data access requests

• Hart InterCivic partners with Microsoft to provide end-to-end verifiability to voters

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• Aussie businesses blame skills and internet speeds for limiting IT use in 2019-20

• Best identity theft protection & monitoring service 2021

• Myanmar President’s Office Hacked for the Second Time

• Trend Micro details CVE-2021-30724 privilege escalation flaw in macOS, iOS

• Critical vulnerabilities identified in CODESYS ICS automation software

• Ransomware attack on Fujifilm

• U.S. to Give Ransomware Attacks Similar Priority as Terrorism

• Google Security Experts Analyze Open Source Security Challenges and Solutions

• The High Cost of Privacy By Default

• June 2021 Patch Tuesday forecast: Patch management is back in the spotlight

• White House warns companies on Ransomware

• The White House is Urging Companies to Take Ransomware More Seriously

• Exchange Servers Targeted by Epsilon Red Malware

• Russian Dolls VBS Obfuscation, (Fri, Jun 4th)

• Antivirus Softwares Bug Let Hackers Bypass AV & Deactivate Their Protections

• Google Chrome to Help Users Identify Untrusted Extensions Before Installation

• Compromised Cloud Costs Orgs $6.2 Million Annually

• Quantum computing: How should cybersecurity teams prepare for it?

• Apple Still Developing AirPower-Like Charger, Also Exploring Long-Range Wireless Charging

• Changes in the privacy landscape through the pandemic

• Next iPad Pro to Feature Both Wireless Charging and Reverse Wireless Charging Capabilities

• iPad Mini With Slimmer Bezels and No Home Button Coming Later This Year

• What happens after a malicious email reaches employees’ inboxes?

• Minister apologises after NDIA shared details of a victim with her perpetrator

• The first users got SIM cards with Russian encryption

• Higher encryption adoption driven by rising data breach threats

• Nigerian Arrested in US for Hacking Payroll Services Company

• Cyberattacks target the anywhere workforce, legacy security systems can’t provide protection

• ISC Stormcast For Friday, June 4th, 2021 https://isc.sans.edu/podcastdetail.html?id=7528, (Fri, Jun 4th)

• Future of work driven by employees having the ability to work anywhere

• US Supreme Court limits scope of CFAA and rules bribing cops for data is not hacking

• How to use Google’s new dependency mapping tool to find security flaws buried in your projects

• Making Diversity and Inclusion a Business Imperative at Imperva

• CIS Community Defense Model v2.0 is coming this summer

• CloudLinux OS Solo optimizes Linux server and application performance

• A simple model of the brain provides new directions for AI research

• Van Buren is a Victory Against Overbroad Interpretations of the CFAA, and Protects Security Researchers

• 56% of Americans Fear Data Safety of New COVID Vaccine Passport Apps

• 8 Tips for Staying Safe from Ransomware Attacks

• Baffle brings secure computation capabilities to Amazon RDS

• SUSE selects Tigera’s Calico as an option to RKE 2

• Donald Trump bears some blame for Jan. 6 insurrection, former House Speaker John Boehner says

Generated on 2021-06-05 23:55:35.999527