IT Security News Daily Summary 2021-06-16

• US Convicts Russian Malware-masker

• Deloitte Acquires Terbium Labs

• IAB Tech Lab Accused of “World’s Largest Data Breach”

• Members of Clop Ransomware Gang Arrested in Ukraine

• NHS Test and Trace Bolsters its Cybersecurity

• A Conversation with Arielle McKee on the Meaning of Pride

• Marketplace Selling Stolen Credentials Is Dismantled

• “Homeless Hacker” Arrested

• IoT Supply Chain Bug Hits Millions of Cameras

• Most Ransomware Victims Are Hit Again After Paying

• Football Fever Puts Password Security at Risk

• Penetration testing

• 5 Tips to Prevent and Mitigate Ransomware Attacks

• Security Camera Feeds Exposed Due to Flaw in SDK Used by Many Vendors

• OpManager makes network monitoring easy for Heritage Credit Union

• Apple Planned Black Ceramic Apple Watch Edition

• The Changing Trends In Cyber Security

• Ransomware Infects US Weapons Contractor

• New Cybereason Ransomware Study Reveals True Cost to Business

• Security Threats To Minimally Staffed/Abandoned Offices Post Pandemic – Expert Source

• Ensuring A Safer Web Browsing Experience: Using Ad Blockers To Fight Malvertising

• Avaddon Ransomware Gang Evaporates Amid Global Crackdowns

• EU Court Leaves Facebook More Exposed to Privacy Challenges

• Malware Attack on South Korean Entities Was Work of Andariel Group

• What We Can Learn from the Colonial Pipeline Breach

• Expert Insight On ALPACA Attack

• Expert Reaction On The World’s Largest Data Breach

• Tom Friedman on two key points Biden should discuss with Putin

• Papa don’t breach: UK data watchdog fines that other pizza place £10,000 over unsolicited marketing blitz

• CCSP: The Best Way to Achieve Cloud Security

• Unsecured servers and cloud services: How remote work has increased the attack surface that hackers can target

• Nasty Linux systemd root level security bug revealed and patched

• Researchers: Booming Cyber-Underground Market for Initial-Access Brokers

• How to Create a Post-Pandemic Data Security RFP

• Fitness Machines, Cyberattack Victims Too: Peloton Bike Plus System Vulnerability Detected

• Magecart are still going strong, join us and fight back!

• Peloton Bike+ Bug Gives Hackers Complete Control

• Alibaba Victim of Massive Data Leak as China Tightens Security

• Vulnerabilities Allow Hackers to Disrupt, Hijack Schneider PowerLogic Devices

• DuckDuckGo’s Quest to Prove Online Privacy Is Possible

• Akamai Platform Update: New Security Enhancements That Intelligently Automate Application and API Security, Mitigate Online Fraud, and Reduce Burden on Security Professionals

• VPNs and Trust

• Threat Activity Group RedFoxtrot Linked to China’s PLA Unit 69010; Targets Bordering Asian Countries

• Microsoft Adds Support for Detecting Jailbroken iOS Devices to Microsoft Defender for Endpoint

• Windows 10 To Be Retired In 2025, As Windows 11 Leaks

• TeaBot Trojan Steals Bank Details via Fake Antivirus Apps

• Mensa Data Leak was Due to Unauthorized Internal Download

• Some Apple Card Customers Unable to Make In-Store Purchases for Second Day in a Row [Resolved]

• Armis welcomes Crowdstrike’s Michael Carpenter to company Board

• Business security remains resilient in the wake of coronavirus

• The Source Code of Paradise Ransomware Released on a Hacking Forum

• What is Azure Confidential Ledger?

• Microsoft’s CISO: Why we’re trying to banish passwords forever

• Apple releases emergency update for older iPhones and iPads

• Flaws in STEM Conference Room Speakerphone Can Be Exploited to Spy on Users

• Cyber Attackers Faced a Denial After Fujifilm Refused to Pay Ransom

• WSJ: Apple Piloted Running Its Own Subscription Based Primary Healthcare Service With ‘Apple Doctors’

• Some Apple Card Customers Unable to Make In-Store Purchases for Second Day in a Row

• Ferocious Kitten: 6 years of covert surveillance in Iran

• Apple fixes actively exploited vulnerabilities affecting older iDevices

• AmeriGas Discloses 8-Second Data Breach

• 4 steps to prevent spear phishing

• Sir Tim Berners-Lee To Auction Web Source Code As NFT

• FCW Insider: June 16, 2021

• Ransomware Attackers Partnering With Cybercrime Groups to Hack High-Profile Targets

• Twitter May Let You ‘Unmention’ Yourself in Tweets and Prevent You From Being Tagged in Future Replies

• SEC settles with First American over massive leak of mortgage data, disclosure

• Most firms face second ransomware attack after paying off first

• Facebook awards $30,000 bounty for exploit exposing private Instagram content

• Ikea France Found Guilty in Employee Spying Scandal

• What’s New in v8 of the CIS Controls

• Disney+ Won’t Offer a Cheaper Ad-Supported Plan Anytime Soon

• 630 potential victims of exploitation identified during Europe-wide coordinated action days

• Top 8 Ways Attackers Can Own Active Directory

• Looking for adding new detection technologies in your security products?

• Cybersecurity for Cloud Applications in 2021

• AI bias and discrimination aplenty: Australian Greens want Online Safety Bill repealed

• Could Monero Replace Bitcoin in the Cybercrime World?

• Israeli Chief-of-Staff was Hacked by an Iranian State-Sponsored Cybercriminal

• Critical ThroughTek Flaw Opens Millions of Connected Cameras to Eavesdropping

• An Inside Look at How Hackers Operate

• The Hacker Mind Podcast Hits 10,000 Downloads

• ¿La nube se está acercando?

• Report Reveals AWS S3 Buckets are Poorly Protected

• Cyberium malware-hosting domain employed in multiple Mirai variants campaigns

• Two Companies Have to Pay $43,000 Over Private Information Breaches Impacting SAF and Mindef Employees

• Ransomware and Cyber Attacks were hot topics at G7 Summit

• Apple asks to ‘Move beyond Password’

• Android opens up earthquake alerts and end-to-end encrypted messages

• How to secure data one firewall at a time

• Understanding the cloud shared responsibility model

• Alibaba suffers billion-item data leak of usernames and mobile numbers

• Is Your Peloton Spinning Up Malware?

• A New Program for Your Peloton – Whether You Like It or Not

• Corporate attack surfaces growing concurrently with a dispersed workforce

• Hiring from Within and Retaining Cybersecurity Talent: Building Your Strategy

• Introducing AT&T USM Anywhere Advisors

• Effects of the pandemic on consumer security behaviors

• Poland Target of ‘Unprecedented’ Cyber Attacks: Govt

• Identity management is now mostly about security

• ISC Stormcast For Wednesday, June 16th, 2021 https://isc.sans.edu/podcastdetail.html?id=7544, (Wed, Jun 16th)

• Open source UChecker tool detects vulnerable libraries on Linux servers

• Alibaba suffers billion-user data leak of usernames and mobile numbers

• Gelsemium Hacker Group Attack Governments, Universities Using Various Hacking Tools

• Bad cybersecurity behaviors plaguing the remote workforce

• Impinj RAIN RFID reader chips address increasing demand for item connectivity

• Kensington’s cross-platform solutions enable secure biometric authentication for any device

• Microsoft takes down large‑scale BEC operation

• SmartBear expands API lifecycle development platform to backend Java developers

• Akamai’s enhancements expand possibilities for developers at the edge

• IDSA: Number of identities in the enterprise soared with remote work

• Video: Microsoft’s John Lambert on Better Information Sharing in Cybersecurity

• EdgeQ 5G chipset-as-a-service model allows customers to configure 5G and AI services

• Microchip PoE injector simplifies deployment of Wi-Fi 6 access points and small cell nodes

• Syniverse and AlefEdge support enterprises in creating their own 5G edge networks

• Cohere Technologies partners with VMware to help CSPs improve network and spectrum efficiencies

• Zscaler: Cloud infrastructure at risk from expanded attack surfaces

• GAO urges IRS to adopt tougher data security as TurboTax grapples with compromised accounts

• Mandiant On-Demand Cyber Intelligence Training builds cyber threat intelligence expertise

• Wipro and Oracle collaborate to help organizations migrate to the cloud

• Granholm refocuses Energy’s cyber shop

• The Security Digest: #65

• ThreatX raises $10M to strengthen its position in the web application security market

• ForgeRock appoints David Burden as CIO

• Akamai CEO says security is becoming a major growth driver for the content business

• Akamai Technologies CEO on ransom attacks, security growth and government standards

• Security is becoming a bigger part of Akamai Technologies, CEO says

• CISA warns manufacturers of ThroughTek vulnerability

• Thousands of VMware vCenter Servers Remain Open to Attack Over the Internet

• Microsoft Disrupts Large-Scale BEC Campaign Across Web Services

• iOS 15: How to Use Background Sounds to Minimize Distractions and Stay Focused

• Lessons Learned from 100 Data Breaches: Part 3, Securing Public Cloud Services

• IT Security News Daily Summary 2021-06-15

• TSA preps second pipeline cyber directive

• Forcepoint to Extend Defense-Grade Security by Acquiring Deep Secure

• Security Experts Scrutinize Apple, Amazon IoT Networks

• Fujifilm restores operations after recent ransomware attack

• USDA looks to staff up with funding boost

• Millions of Connected Cameras Open to Eavesdropping

• Andariel Group Targets South Korean Entities in New Campaign

• Sonos Complains About Apple’s Restrictions on Third-Party Siri Access in Antitrust Hearing

• Katzenberg-backed digital security startup Aura valued at $1 billion after new round of funding

• BrandPost: The Top Ten Industries Under Cyber Attack

• Thousands of publicly accessible VMware vCenter Servers vulnerable to critical flaws

• How digitization can break down silos

• NIST, FedRAMP push OSCAL for automated cloud review

• A solid cloud foundation proves crucial at crunch time

• Mayo Clinic Patients Can Now Add Their Health Records to iPhone

• Demo: Check Out AirPlay 2 on a Mac in macOS Monterey

• Revil ransomware gang claims breaching US nuclear weapons contractor

• Identity-Based Access Provider Elisity Raises $26 Million

• How to get started with security chaos engineering

• Deloitte Buys Terbium Labs to Expand Threat Intel Capabilities

• BSides Tampa 2021 – Buddy Smith’s ‘Mobile Penetration Testing Hybrid’

• The source code of the Paradise Ransomware was leaked on XSS hacking forum

• 100% increase in daily DDoS traffic in 2020 as potential grows for 10 Tbps attack: Nokia

• How the Federal Government is Revolutionizing Endpoint Security in a Zero Trust Environment

• Apple Music Spatial Audio Coming Soon to India

• Zoll Defibrillator Dashboard would execute contents of random Excel files ordinary users could import

• Apple, Google Face Mobile Ecosystem Investigation By CMA

• Apple Releases Security Updates for iOS 12.5.4

• Key Takeaways from Biden’s Sweeping Executive Order on Cybersecurity

• Angry Birds Reloaded, Doodle God Universe and Alto’s Odyssey: The Lost City Coming to Apple Arcade

• New Zealand’s Troubling Precedent for China Extradition

• Protecting the Critical of Critical: What Is Systemically Important Critical Infrastructure?

• McAfee Named a 2021 Gartner Peer Insights Customers’ Choice for SWG

• Malicious PDFs Flood the Web, Lead to Password-Snarfing

• Securing Your Remote Workforce Under Constant Change

• Microsoft Disrupts Large-Scale, Cloud-Based BEC Campaign

• The US has linked major cyber attacks against Russia with Chinese hackers

• What Industrial Control System Vulnerabilities Can Teach Us About Protecting the Supply Chain

• An Inside Look at Cloud Security from Industry Experts

• Palo Alto Networks teams with AT&T to deliver managed SASE

• How President Biden Can Better Defend the US From Russian Hacks

• Apple Shares Trailer for ‘Central Park’ Season 2

• 22 Rights Groups Tell PayPal and Venmo to Shape Up Policies on Account Closures

• Windows 10 to retire in four years (or 52 Patch Tuesdays, in sysadmin years)

• Serious vulnerability discovered on Microsoft Teams

• European Court Backs National Watchdog Data Enforcement

• How Does One Get Hired by a Top Cybercrime Gang?

• 7 Mobile Security Tips to Help Safeguard Your Device and Personal Information

• Apple Says It’s Time to Digitize Your ID, Ready or Not

• The Verizon Data Breach Investigation Report – How do you Use it?

• Ransomware prevention begins with securing your applications

• How To Find Cybersecurity for Service Providers

• Former NSA contractor Reality Winner who leaked gov report will be released on November

• Andrew Appel on New Hampshire’s Election Audit

• So Just What Is Cloud-based Access Management?

• Expert Reacted On Research That Third Of Workers Have Picked Up Bad Security Behaviours

• AT&T Cybersecurity grows SASE offering by adding Palo Alto Networks

• Afternoon Cyber Tea: Microsoft’s cybersecurity response to COVID-19

• Changes In The Ransomware Landscape | Avast

• Three Unpatched Bugs Spotted in Third-Party Provisioning Platform

• SIP Protocol Exploited to Trigger XSS Attacks via VoIP Call Monitoring Software

• SecureX threat response Turnkey Integrations

• Experts Reacted On Tiktok Recent Privacy Update To Collect ‘Faceprints’ And ‘Voiceprints’

• Should Police To Be Given Powers Over Passwords, Expert Weighs In

• CyberSmart Disrupts SME Cybersecurity with $10 million Series A Funding

• Deloitte scoops up digital risk protection company Terbium Labs

• CloudLinux releases UChecker security tool for Linux servers

• SASE & Zero Trust: The Dream Team

• Insider Risks In the Work-From-Home World

• Researcher Earns $30,000 for Instagram Flaw Exposing Private Posts

• Western Australia Might Be Quarantining COVID Check-in Info

• Patch now! Apple fixes in-the-wild iPhone vulnerabilities

• NCSC chief: Ransomware is more of a threat to Britain than hostile nations’ spies

• Biden Urged To Appoint FCC Commissioner To Speed Net Neutrality Return

• Fujifilm Restores Services Following Ransomware Attack

• How Does the Government Buy Its Cybersecurity?

• TimeCache Aims To Block Side-Channel Cache Attacks

• Critical Remote Code Execution Flaw In Thousands Of VMWare vCenter Servers Remains Unpatched

• Apple Hurries Patches For Safari Bugs Under Active Attack

• Utilities Concerningly At Risk From Active Exploits

• Digital Artists Targeted In RedLine Infostealer Campaign

• Twelve South Debuts ‘SurfacePad’ MagSafe-Compatible Wallet Folio for iPhone 12

• Microsoft product vulnerabilities reached a new high of 1,268 in 2020

• PCI compliance and WooCommerce – All you need to know

• ManagedMethods Wins 2021 Fortress Cyber Security Award

• Instagram flaw allowed to see private, archived Posts/Stories of users without following them

• Risk-Based Vulnerability Intelligence Does What CVSS Can’t

• Deals: Apple’s 512GB M1 MacBook Pro Hits $1,299.99 on Amazon ($199 Off, Lowest Price)

• TimeCache aims to block side-channel cache attacks – without hurting performance

• Unique TTPs link Hades ransomware to new threat group

• How to Prepare for Your Child’s First Smartphone

• Learning the Building Blocks for Your CIAM Framework Part 3: Manage

• NATO: Series of cyberattacks could be seen as the same threat as an armed attack

• Critical remote code execution flaw in thousands of VMWare vCenter servers remains unpatched

• Google Workspace Gets Client-Side Encryption

• Reality Winner, NSA Contractor in Leak Case, Out of Prison

• Experts Shed Light On Distinctive Tactics Used by Hades Ransomware

• Scammers Bypassed Office 365 MFA in BEC Attacks

• Trying to register your antivirus in Windows Security Center?

• Is it time to go back to the office?

• Sacramento adopts hardware-based authentication

• Microsoft Gets Second Shot at Banning hiQ from Scraping LinkedIn User Data

• Cybersecurity Firm Exposes Breach Database Containing 5 Billion User Records

• “Face of Anonymous” suspect deported from Mexico to face US hacking charges

• Andariel evolves to target South Korea with ransomware

• Cyber criminals are targeting digital artists

• Zero trust networking startup Elisity raises $26M

• Microsoft disrupted this large cloud-based business email scam operation

• 341% Surge in DDoS Attacks During the Epidemic

• Back to the Future of Firewall

• Plans for iOS15 put victims of stalking and abuse at risk

• G7 Demands Russia to Hedge Against Domestic Ransomware Gangs

• Attackers Use SEO Poisoning to Infect Victims with SolarMarker Malware, Microsoft Warns

• What’s Your Fail-Safe Posture? Before You Learn How to Fly, Learn How to Fall

• Making Web Application Penetration Testing A Success

• Apple Hurries Patches for Safari Bugs Under Active Attack

• Critical Entities Targeted in Suspected Chinese Cyber Spying

• Wear your MASQ! New Device Fingerprint Spoofing Tool Available in Dark Web

• Multi Perimeter Device Exploit Mirai Version Hunting For Sonicwall, DLink, Cisco and more, (Tue, Jun 15th)

• Apple and Google ‘Duopoly’ to Come Under Scrutiny in the UK

• Expert Commentary – GCHQ Cybersecurity Boss Sounds Alarm Over Extortion By Hackers

• UK Watchdog Agrees ‘Oversight’ On Google’s Cookie Removal

• Web Application Penetration Testing Checklist – A Detailed Cheat Sheet

• Instagram‌ ‌Bug Allowed Anyone to View Private Accounts Without Following Them

• Serious Vulnerability in Microsoft Teams That Could Expose Confidential Files

• The latest REvil ransomware victim? Sol Oriens. Oh, a US nuclear weapons contractor

• Check Point Software is Cloud Security!

• REvil Claims Responsibility for Invenergy Data Breach

• Facebook Messenger Rooms Exploit Bypasses Android Screen Lock Protection

• HomePod mini Launches in Austria and Ireland, ‘Coming Soon’ to New Zealand

• iPadOS 15: Files App Gains NTFS Support, Progress Indicator, and More

• Surge of New Digital Accounts During the Pandemic Leads to Lingering Security Side Effects

• Comprehensive Cyber Defence Policy Closer to Adoption

• All Facebook Data Can Be Acccessed Without Unlocking the Phone

• Vodafone Chooses Samsung For 5G, Open RAN

• FCW Insider: June 15

• Food Industry Increasingly Targeted by Cybercriminals

• REvil ransomware gang hit US nuclear weapons contractor Sol Oriens

• Insights Into an Excel 4.0 Macro Attack using Qakbot Malware

• Best new Windows 10 security features: Improvements to Intune, Windows Defender Application Guard

• Security firm COO indicted for aiding hospital’s attackers: What CSOs should know

• Cybersecurity Certifications: Take Your Career to the Next Level

• Tim Cook Highlights Apple’s iOS 15 Privacy Protections in New Video for European Audiences

• HomePod mini Launches in Austria, New Zealand, and Ireland

• Emotet Has Taken Down – Should I Still Be Worried?

• Passenger Bids $28 Million To Join Jeff Bezos On Blue Origin Debut

• Apple to Reduce Apple TV+ Free Trial to Three Months From July 1

• Latest Apple Music Beta for Android Adds Spatial and Lossless Audio

• Apple Launches Podcasts Subscriptions

• Application security testing is not just buzzwords

• Western Australia finally thinks about quarantining COVID check-in info from cops

• Iranian State-sponsored Cybercriminal Hacked Israeli Chief-of-Staff

• Rethinking Networking to Derail Ransomware

• When security gets physical: Mossad boss hints at less-than-subtle Stuxnet followup

• Cloud Security Priorities Shift in Wake of Pandemic

• iOS 15: How to Invite Android Users to a FaceTime Call

• How do I select an ITSM solution for my business?

• To identify cybersecurity vendor sustainability, start with the fundamentals

• Top 5 Cyber Attack news headlines trending on Google

• Google to face a lawsuit by Britain against Cyber Frauds

• Why XSS is still an XXL issue in 2021

• Protect Children From Online Grooming | Avast

• VPN attacks up nearly 2000% as companies embrace a hybrid workplace

• Survey Now Open: What Differences Did the Year Make in Cybersecurity?

• Malware hosting domain Cyberium fanning out Mirai variants

• Nationally-known Australian company lawyered up to resist ASD help

• Pandemic prompts digital ‘boom’ in account creation – as well as password fatigue

• Apple Issues Urgent Patches for 2 Zero-Day Flaws Exploited in the Wild

• Looking for VAPT in India? This is What You Should Know

• Top threats to consumer cyber safety

• Cloud computing costs skyrocketing as businesses support a remote workforce

• BackdoorDiplomacy APT Group Attacks Telecommunications & Organizations Worldwide

• ISC Stormcast For Tuesday, June 15th, 2021 https://isc.sans.edu/podcastdetail.html?id=7542, (Tue, Jun 15th)

• Vaccine passports challenged by data privacy and security implications

• Fotolog – 16,717,854 breached accounts

• Most Federal Credit Unions Lack Strong Email Security Set Ups

• Neustar TRUSTID Solutions helps orgs improve contact center efficiency and comply with regulations

• U.S. Supreme Court sends LinkedIn data-scraping suit back to lower court

• ShiftLeft helps orgs benchmark and validate the accuracy of ShiftLeft CORE using OWASP Benchmark

• How to Reduce Audit Fatigue and Compliance Costs (Tips from Security Professionals)

• How Hyperproof is Building the Future of Security Assurance

• Thales provides data security and identity protection capabilities through Google Workspace

• Accurics partners with GitLab to contextualize risk across the SDLC

• Ransomware attacks continue to Surge, hitting a 93% increase year over year

• Does the U.S. need a cyber force?

• Vishing: What is it and how do I avoid getting scammed?

• VPN Attacks Surged in First Quarter

• Apple fixed 2 WebKit flaws exploited to target older iPhones

• Flashpoint partners with Cyware to deliver enhanced threat intelligence

• TeamViewer partners with SAP to drive digital transformation in industrial environments

• Unconstitutional Florida Law Barring Platforms from Suspending Politicians Should be Blocked, EFF Tells Court

• Another one bites the dust: Avaddon ransomware group shuts down operation

Generated on 2021-06-16 23:55:51.012039