IT Security News Daily Summary 2021-07-13

• RPA is accelerating business transformations, Transform 2021 panelists say

• The risks of pushing for procurement equity

• Microsoft Crushes 116 Bugs, Three Actively Exploited

• Vulnerability in Less.js Causes Website to Leak AWS Secret Keys

• Microsoft Patches 3 Windows Zero-Days Amid 117 CVEs

• Apple’s MagSafe Battery Pack Unlocks Long Rumored Reverse Charging Feature

• Ransomware Giant REvil’s Sites Disappear

• Report: Scammers Are Falsely Promising Facebook Verification

• SSA investigates data center management options

• Outside reviews can limit bias in forensic algorithms, GAO says

• FedRAMP authorizes identity verification service

• Amazon rolls out encryption for Ring doorbells

• Unpatched Critical RCE Bug Allows Industrial, Utility Takeovers

• Guess Fashion Brand Deals With Data Loss After Ransomware Attack

• The Security Digest: #69

• This couple lost £15,000 to scammers. We followed the money – and found millions in stolen crypto

• Adobe patches critical vulnerabilities in Reader, Acrobat, and Illustrator

• Lawfare Live: Benjamin Wittes and Scott Anderson on the Afghanistan Withdrawal

• Free Coventry University Course to Help Everyone Protect their Online Privacy

• July 2021 Patch Tuesday: Microsoft fixes 4 actively exploited bugs

• REvil ransomware gang’s websites vanish soon after Kaseya fiasco, Uncle Sam threatens retaliation

• SAP Patches High-Risk Vulnerabilities in NetWeaver

• 17 free cybersecurity tools you should know about

• Spoofed Domains Still a Persistent Threat

• Microsoft July 2021 Patch Tuesday, (Tue, Jul 13th)

• REvil websites down after governments pressured to take action following Kaseya attack

• Microsoft July 2021 Patch Tuesday: 117 vulnerabilities, Pwn2Own Exchange Server bug fixed

• Adobe Patches 11 Critical Bugs in Popular Acrobat PDF Reader

• DoD-Validated Data Security Startup Emerges From Stealth

• Microsoft Releases July 2021 Security Updates

• Apple Working on ‘Apple Pay Later’ Feature With Monthly Installments for Apple Pay Purchases

• Black Hat 2021: Better Than Ever (As Always)

• Amazon Rolls Out End-To-End Encryption For Ring Doorbells

• Bad actor offers up for sale data from 600 million LinkedIn members scraped from the site

• Microsoft Patches 3 Under-Attack Windows Zero-Days

• XKCD ‘Board Game Party Schedule’

• Apple Debuts AirTag Leather Loop and Key Ring in New Colors

• Manage RDP and SSH connectivity at scale with Azure Bastion

• UK govt draws a blank over vaccine certification app – no really, the report is half-empty

• spyware

• Facebook announces time bonus payouts for bug hunters

• Firefox 90 Adds Cross-Origin Protections, Advanced Tracker Blocker

• Apple Seeds RC Version of tvOS 14.7 to Developers

• Apple Seeds RC Version of watchOS 7.6 to Developers

• Apple Seeds RC Version of iOS and iPadOS 14.7 to Developers

• Apple Seeds RC Version of macOS Big Sur 11.5 to Developers

• Clearview’s Face Surveillance Still Has No First Amendment Defense

• Igniting Passion for Diversity, Equity and Inclusion (DEI): Cybersecurity Professionals Address Challenges and Offer Tangible Advice for Weaving Inclusion into Our Industry

• Best practices for a secure ecommerce website

• Microsoft To Acquire RiskIQ To Bolster Cybersecurity

• Your Home Away From Home May Not Be as Cybersecure as You Think

• ‘Charming Kitten’ APT Siphons Intel From Mid-East Scholars

• Why We Need to Raise the Red Flag Against FragAttacks

• Kaseya Ransomware Attack: Guidance and Resources

• VMware Releases Security Update

• Digital Defense Expands Reach into the United Kingdom and South Africa with Private Protocol Partnership

• Intelligent Orchestration and Code Dx: Security superheroes

• BSidesNoVA 2021 – John Stoner’s ‘Na-Na-Na-Na Na-Na I’m Gonna Start A (CTI) Fight’

• The Kaseya VSA REvil Ransomware Supply Chain Attack: How It Happened, How It Could Have Been Avoided

• Multi-Domain SSL – Comprehensive SSL Security for Business Websites

• Ted Lasso Scores Emmy Nomination for Outstanding Comedy Series

• Deals: Apple’s 128GB 12.9-Inch M1 iPad Pro Hits New Low Price at $999 ($100 Off)

• Apple Launches $99 MagSafe Battery Pack

• DNS Provider Hit With Outrageous Blocking Order – Is Your Provider Next?

• Here are the new members of Biden’s cybersecurity team

• Cybercriminals using Marvel’s Black Widow movie to spread malware

• Versa Networks Newest Competitor in 2021 ‘ASTORS’ Awards Program

• Ransomware: Only half of organisations can effectively defend against attacks, warns report

• New Phishing Attacks Targeting Professors and Writers in the Middle East

• New SolarWinds Zero-Day Vulnerability Used in Cyberattacks

• Cyberattacks Should be Treated as a National Disaster in the U.S.

• Adobe: Critical Flaws in Reader, Acrobat, Illustrator

• Russian banks to launch a system against telephone fraud

• Enterprises Altering Their Supply Chain Defenses on Heels of Latest Breaches

• Critical Flaws Reported in Etherpad — a Popular Google Docs Alternative

• Balancing Agility with Data Security

• Apple’s Digital Car Key Feature Will Soon Work With Your iPhone in Your Pocket

• Let’s Bet on the Next Big Policy Crisis—No, Really

• Top 5 features of a secure password reset solution

• FCC finalizes program to rip and replace Huawei, ZTE telecom equipment in the U.S.

• Google Ordered To Pay $600m By French Watchdog

• New CISA Director Confirmed, White House Gains Cyber-Director

• Is Remote Desktop Protocol Secure? It Can Be

• When it comes to incident response, is your cyberinsurance carrier on your side?

• Guess Suffers Data Breach Following Ransomware Attack

• AttackIQ Raises $44 Million in Series C Funding Round

• Can Government Effectively Help Businesses Fight Cybercrime?

•  Adobe Releases Security Updates for Multiple Products 

• Zero Trust: The Protection Model for the Post-Pandemic World

• Mind the Gap: Securely Embracing the Digital Explosion

• JetBlue Pilots to Receive M1 iPad Pro

• Patch Tuesday July 2021:Microsoft To Deliver 40 Security Patches, Including Several Fixes for an Exploitable Zero-Day Vulnerability

• New BIOPASS Malware Sniffs Victims via Live Streams

• Ransomware websites operated by REvil are down: Sources

• You’ll never Guess whose data has been nicked as US fashion firm confirms systems breach

• Visa on using advanced AI such as unsupervised learning to fight fraud

• 3D printing opens DOD to cyber risks, IG finds

• The Trouble With Automated Cybersecurity Defenses

• ModiPwn flaw in Modicon PLCs bypasses security mechanisms

• Iranian State-Sponsored Hacking Attempts

• REvil Ransomware Site Goes Offline

• SolarWinds Issues Hotfix For Zero-Day Flaw Under Active Attack

• Iranian Hackers Posed As British-Based Academic

• Guess Announces Breach Of Employee SSNs And Financial Data After DarkSide Ransomware Attack

• Armis Discovers Critical Vulnerability In Schneider Electric Modicon PLCs

• iPhone Periscope Camera Patent Granted Ahead of Rumored 2022 or 2023 Debut

• EU Halts Digital Tax Plan, Amid Ongoing OECD Effort

• Security Operations Firm Arctic Wolf Raises $150 Million at $4.3 Billion Valuation

• Spamhaus Botnet Threat Update: Q2-2021

• Computer vision hasn’t passed ‘awareness phase,’ survey shows

• Mozilla Releases Security Updates for Firefox

• Cybereason Launches Global Defenders League Partner Program

• Rallying Security Intelligence With the Pride Community

• Deals: Get the M1 MacBook Air for Up to $150 Off, Starting at $899 for 256GB

• A ‘Potential Ransomware Pandemic’ Must Be Prevented, Interpol Urges

• Modipwn: code execution vulnerability discovered in Schneider Electric Modicon PLCs

• These Iranian hackers posed as academics in a bid to steal email passwords

• SolarWinds Issues Hotfix for Zero-Day Flaw Under Active Attack

• Google Cloud Certificate Authority Service Becomes Generally Available

• Iranian Hackers Impersonate British Scholars in Recent Campaign

• Tool Sprawl & False Positives Hold Security Teams Back

• Reimagining Ransomware Responses

• Hairpinning: The Bottleneck in Most Secure Web Gateway Architectures

• INTERPOL: International police coordination required to combat global cyberthreats

• Microsoft to beef up security portfolio with reported half-billion-dollar RiskIQ buyout

• Are you READY for (ISC)² Security Congress?

• Microsoft Acquire Cyber Security Firm RiskIQ for $500+ Million in Cash

• Crypto-Based Phishing Scams | Avast

• Arctic Wolf raises $150M to continuously monitor cyberthreats

• A practical guide to CMMC

• Great Power or Great Vulnerability? Securing 5G and 6G Networks

• Mint Mobile Suffered a Data Breach

• Stolen Credit Card Data Hidden in Images by Magecart Hackers for Vague Exfiltration

• $350,000 Stolen from Users by Fake Cryptocurrency Mining Apps

• iOS 15: How to Drag and Drop Screenshots

• How to Set a Cybersecurity Baseline for Your Vendors – and Hold Them to It

• Apple Threatens UK Exit Over Patent Dispute

• Ransomware: We need a new strategy to tackle ‘exponential’ growth, says Interpol

• Google’s Certificate Authority Service leaves preview, now generally available

• Critical Vulnerability Can Be Exploited to Hack Schneider Electric’s Modicon PLCs

• Valimail Amplify enables mailbox providers to display logos next to authenticated email messages

• Theft of Customer Data Is a Growing Risk for U.S. Health Insurers

• Sir Richard Branson Wins Battle Of Billionaires Space Race

• Check Point Software showcases new offerings, integrations, and tools at Microsoft Inspire 2021

• Tobacco products worth more than € 2 million seized in Spain and Portugal

• Gmail increases email security by adding support for BIMI

• Researchers warn of unpatched remote code execution flaws in Schneider Electric industrial gear

• Connected Cars: The State of Digital Transport

• Recently Patched ForgeRock AM Vulnerability Exploited in Attacks

• The Internet of Things is a Complete Mess (and how to Fix it)

• Social media partially disrupted in Cuba amid anti-government protests

• Armis discloses critical vulnerability that allows remote takeover of Schneider Electric industrial controllers

• Review of dnsx – a multi-purpose DNS toolkit

• Iranian Hackers Posing as Scholars Target Professors and Writers in Middle-East

• Microsoft Outlines New Features Coming to Edge Browser Later This Year

• British spy chief declares ransomware biggest online threat

• How to choose the best SIEM software

• SolarWinds patches zero-day exploited in the wild (CVE-2021-35211)

• A Critical Serv-U Vulnerability Exploited in the Wild, Fixed by SolarWinds

• American Clothing Brand Guess Discloses Data Breach

• We’re terrified of sharing information, but the benefits of talking about IT and infosec outweigh the negatives

• Protecting Your Business Against Malware in the Cloud

• DNS over HTTPS (DoH): Definition, Implementation, Benefits, and More

• Apple Expecting High Demand for Upcoming MacBook Pros, Enlists Extra Mini-LED Display Supplier

• Google to Roll Out New ‘Drive for Desktop’ App in the Coming Weeks, Replacing Backup & Sync and Drive File Stream Clients

• Critical vulnerability in Schneider Electric Modicon PLCs can lead to RCE (CVE-2021-22779)

• Kaseya restores SaaS, then ‘performance issues’ force a do-over

• Trickbot Malware Returns with a new VNC Module to Spy on its Victims

• How Public Cybersecurity Companies Performed in 1H 2021

• How to Build a Cybersecurity Culture

• American retailer Guess discloses data breach after ransomware attack

• GitHub’s Commercial AI Tool Was Built From Open Source Code

• F1 2021 reviewed: Codemasters adds story, keeps the racing sim feeling fresh

• Startup hopes the world is ready to buy quantum processors

• Health officials rail against Pfizer’s push for COVID boosters—for many reasons

• Microsoft discovers critical SolarWinds zero-day under active attack

• There’s a ‘high degree of uncertainty’ on impact of China’s focus on data security: Morgan Stanley

• Kaseya restores SaaS, then “performance issues” force a do-over

• Application security testing is not just buzzwords

• Propaganda as a Social Engineering Tool

• It takes more than MFA to beat human hacking

• Reduce your risk of being hit by a ransomware attack

• Microsoft to acquire Cyber Threat detection business RiskIQ

• CTOs not ready to take the blame of data breaches

• How Microsoft is taking cloud-powered innovation beyond Earth with Azure Space

• Kaseya restores SaaS, then “performance issues” force a do-over

• Canberra proposes IoT ‘star’ ratings and mandatory cyber standards for big business

• Apple Reportedly Aiming to Manufacture Apple Car Batteries in the United States

• Addressing the cybersecurity skills gap: Where do we go from here?

• A New Study Reveals That China’s Great Firewall Blocks Over 311,000 Domains

• Vulnerability in Schneider Electric PLCs allows for undetectable remote takeover

• New phishing attack SpoofedScholars targets professors and writers specializing in the Middle East

• Critical RCE Flaw in ForgeRock Access Manager Under Active Attack

• A more dynamic approach is needed to tackle today’s evolving cybersecurity threats

• DoD Adds Two More (ISC)² Certifications to Requirements for Cybersecurity Staff

• MWC 2021: Three key Thales innovations at this year’s event

• Ways to prevent ransomware attacks: how to avoid becoming a victim

• Authentication bypass allows complete takeover of Modicon PLCs used across industries

• Fashion Retailer Guess Notifies Users of Data Breach

• Schneider Electric PLCs vulnerable to remote takeover attacks

• What is the cost of an insider data breach?

• ACSC introduces Essential Eight zero level cyber maturity and aligns levels to tradecraft

• A New Critical SolarWinds Zero-Day Vulnerability Under Active Attack

• Hiring by technology companies continues to grow

• 1 in 5 companies fail PCI compliance assessments of their infrastructure

• ISC Stormcast For Tuesday, July 13th, 2021 https://isc.sans.edu/podcastdetail.html?id=7582, (Tue, Jul 13th)

• Hack The Box launches Academy for Business to help organizations combat cyberattacks

• ThreatQuotient releases ThreatQ Data Exchange to simplify bidirectional sharing of intelligence data

• Guess announces breach of employee SSNs and financial data after DarkSide ransomware attack

• uCloudlink expands its Paas and Saas platform with Hyperconn

• D2iQ Kubernetes Platform now available in the Microsoft Azure Marketplace

• AI leaders talk intersectionality, microaggressions, and more at Transform Women in AI Breakfast

• US Senate confirms Jen Easterly as head of cyber agency

• CyberEdge Group launches new LeadingEdge Group subsidiary to serve non-cybersecurity vendors

• Unity’s Danny Lange explains why synthetic data is better than the real thing at Transform 2021

• SolarWinds releases security advisory after Microsoft says customers ‘targeted’ through vulnerability

• AT&T Ends Data Throttling for Unlimited Elite Customers, Adds 40GB Hotspot Data and 4K HBO Max

• Securonix opens office in Tokyo to enhance its presence in Asia

• cPacket Networks expands its global footprint with new headquarters

• ZARIOT appoints Jimmy Jones as Head of Security

• How To Secure Your Application Inside Azure Kubernetes Service in 10 Minutes

• ¿Cómo actuar ante la ciberdelincuencia?

• Yes, states did get more money from Washington than they needed for COVID-19 relief

• Georgia smart road triples V2X infrastructure

• Microsoft acquires cybersecurity company RiskIQ

• IT Security News Daily Summary 2021-07-12

• Execs from MasterCard, PayPal, and Goldman Sachs discuss major AI trends in the finance industry at Transform 2021

• 4 actions that can protect critical infrastructure from ransomware

• NIST outlines standards for critical software use and verification

• How government can move out of the ransomware bull’s-eye

• Report: Facebook Was Shocked To Discover Foreign Interference On Its Platform

• Was Haiti Assassination Inspired by American History of Domestic Coups?

• Disney Raising Prices for ESPN+ to $6.99 Per Month/$69.99 Per Year

• With a straight face, Putin agrees to do something about ransomware coming out of Russia, apparently

• SolarWinds Discloses Zero-Day Under Active Attack

• SolarWinds fixes critical Serv-U zero-day exploited in the wild

• California State University Offering iPad Air, Apple Pencil, and Keyboard to 35,000 Incoming Students

• CNA Disclosed Data Breach In The Wake Of Ransomware Attack

• Coursera API Vulnerability Could Affect Learners’ Experience

• How to Avoid Being Impacted by a Managed Service Provider (MSP) Breach

• Build Your Cyber Resiliency at Fal.Con for Public Sector 2021

• Why security analytics needs to outgrow its ‘magic phase’

• WordPress File Management Plugin Riddled with Critical Bugs

• BIOPASS RAT Uses Live Streaming Steal Victims’ Data

• Measuring Security Risks in Open Source Software: Scorecards Launches V2

• How to implement machine identity management for security

• Gmail support for BIMI is a major milestone for strong email authentication

• BSidesNoVA 2021 – Devon Rollins’, Juliet Okafor’s, Anne Marie Zettlemoyer’s & Jitendra Chan’s: Diversity & Inclusion – Building High Performing Teams’

• A New Consultant’s 1st Con – Wild West Hackin Fest – Way West 2021

• Empty Threats and Warnings on Cyber

• SolarWinds issues software update – one it wrote for a change – to patch hole exploited in the wild

• Kaseya Provides Security Updates for VSA On-Premises Software Vulnerabilities

• Microsoft to Acquire Threat Intelligence Vendor RiskIQ

• The Everyday IT Tools That Can Offer ‘God Mode’ to Hackers

• Anatomy of a Breach: Preventing the Next Advanced Attack

• Last call for 2021 innovation nominations

• China Announces New Cybersecurity Regulations

• BIOPASS RAT Infects Chinese Gambling Sites

• Microsoft Confirms Acquisition of RiskIQ

• HomePod 15 Beta Software Adds Lossless Audio Support

• The Lifeline of a Vulnerability

• How Verizon delivers a ‘phygital’ customer experience with data, AI

• Pentagon eases COVID restrictions, allows 90% occupancy

• Critical RCE Vulnerability in ForgeRock OpenAM Under Active Attack

• Biden and Merkel to Discuss Cybersecurity This Week

• Kaseya Releases Fixes for the 3 Remaining Flaws

• Apple Releases New HomePod 15 Beta Update Following Reports of Sudden Failures

• Here’s What the iPhone 13 Lineup Will Look Like

• CVSS: The Basics Explained

• Ransomware: How banks and credit unions can secure their data from attacks

• Gmail announces support for email logo authentication effort

• Don’t get tricked by this crashtastic iPhone Wi-Fi hack!

• Reduce open source software risks in your supply chain

• BSidesNoVA 2021 – Kwadwo Burgee’s ‘Stakeholder Specific Vulnerability Categorization: CVSS Alternative’

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comic – ‘WEEK 337’

• Threat actors scrape 600 million LinkedIn profiles and are selling the data online – again

• The most dangerous messaging apps on Android

• Four Critical Flaws Identified in Sage X3 ERP Software

• The Identity Brief: Why Going Passwordless is Even More Important Than You Think

• How ClassPass Adapted to the Pandemic & Remote Work with a Cloud Directory

• Michelin Drives Sustainable Mobility Using Data and DevOps

• ‘Shocking If True…’: 5 Takeaways from Tackling Misinformation 2021

• Analysis of the FBI’s Anom Phone

• How can predictive analysis unlock the potential of 5G?

• Back to the office…

• Malicious Android App Posed As QR Scanner To Launch Joker Malware That Steals SMS Data

• RoboSki and Global Recovery: Automation to Combat Evolving Obfuscation

• 5 things cybersecurity leaders need to know to make hybrid work safe

• Solarwinds Confirms New Zero-Day Flaw Under Attack

• Kaseya Releases Security Patch as Companies Continue to Recover

• Apple Says Blix’s Twice-Tossed Anti-Competitive Lawsuit Alleged ‘False Conspiracy Theories’

• Advancing application reliability with the Azure Well-Architected Framework

• Germany declares country’s first Cyber Catastrophe

• Kaseya issues patches for vulnerabilities exploited in ransomware attack

• Gmail embraces BIMI to authenticate emails with verified logos

• Kaseya Patches Zero-Days Used in REvil Attacks

• Kaseya Releases Security Patch As Companies Continue to Recover

• Vulnerability Summary for the Week of July 5, 2021

• Mac Shipments Continue to Rise Amid Surge in Demand for PCs

• After the Biden-Putin Summit, U.S.-Russia Expert Consultations Should Focus on the Financial Sector

• Phishing on Adobe Spark

• Complete Guide to Installing Security Updates in Debian & Ubuntu>

• White House Executive Order – Removing Barriers to Sharing Threat Information

• Crypto Dictionary, book review: A useful A-Z of cryptography definitions

• Critical ForgeRock Access Management Vulnerability

• Microsoft to acquire RiskIQ to strengthen cybersecurity of digital transformation and hybrid work

• Magecart Group Conceal Stolen Credit Card Details Into Image Files

• How data collected in gaming can be used to breach user privacy

• Greek Ministry of Education Protects 65,000 Distance Learners with Check Point ZoneAlarm

• Why Salesforce’s Kathy Baxter says diversity and inclusion efforts aren’t enough

• Looking for some up close and personal cybersecurity training? Well, look to London

• AI and Cybersecurity: Making Sense of the Confusion

• BIOPASS malware abuses OBS Studio to spy on victims

• Exclusive Deal: Get 30% Off Two of Satechi’s Best Charging Accessories This Week Only

• Apple Says iCloud Mail is Currently Down for Some Users

• Australians Have Lost AU$7.2 Million to Remote Access Scams So Far This Year

• Mint Mobile Was Hit by a Data Breach

• Nope, that isn’t Elon Musk, and he isn’t offering a free Topmist Dust watch either

• Kaseya ransomware attack: What we know now

• Here’s how to opt-out of Google Chrome’s Privacy Sandbox (FLoC) trials

• CISA Releases Analysis of 2020 Risk and Vulnerability Assessments

• Navigating Active Directory Security: Dangers and Defenses

• Does Twitter Management Bias Mean Violation of Law?

• How the Growing Number of EU Regulations Are Impacting Businesses Worldwide

• Apple TV+ to Offer Russian-Language Content Through New First-Look Deal

• FBI Warns of Cryptocurrency Attacks

• With Kaseya patch, IT teams begin the long slog to recovery

• Mitsubishi Electric Patches Vulnerabilities in Air Conditioning Systems

• Cyberattack Hits Iran’s Transport Ministry

• Has your iPhone been hacked? This app will let you know (and tell you what to do)

• Putin Urged Again to Take Action Against Ransomware Attacks Coming from Russia

• DNS-over-HTTPS takes another small step towards global domination

• Google FLoC | Avast

• Seizing Cryptocurrency: How is Law Enforcement Tracing and Recovering Bitcoin Payments?

• 10 of the biggest ransomware attacks of 2021 — so far

• The Risk-Conscious, Security-Aware Culture: The Forgotten Critical Security Control

• Apple Threatens to Leave UK Market Due to $7 Billion Patent Dispute

• Security Evangelist or Zealot – Where to Draw the Line

• Kaseya Releases Patches for Vulnerabilities Exploited in Ransomware Attack

• Crafting a Custom Dictionary for Your Password Policy

• Netskope Raises $300 Million at $7.5 Billion Valuation

• Hackers Spread BIOPASS Malware via Chinese Online Gambling Sites

• Leaker: LiDAR Scanner to Remain Exclusive to iPhone 13 ‘Pro’ Models This Year

• Morgan Stanley Disclosed Data Breach Following The Accellion FTA Exploit

• Ransomware: This new ransom tracker reveals how much bitcoin gangs have been paid

• Cybercriminals troll Iran’s leader, cause railway network ‘chaos’

• Foxconn In Talks With Wisconsin For EV Plant

• Indonesia’s Bukalapak Plans $1bn Domestic IPO

• Crypto Exchange Start-Up Bullish Sets Market Debut

• SoftBank Buys Into Korean Travel Start-Up Yanolja Ahead Of US Listing

• Consumer Group Lodges EU Complaint Against WhatsApp

• 2020 threat landscape: See what evaded perimeter defenses

• Kaseya Patches the Vulnerabilities Used in REvil Ransomware Attack

• Swiss Consumer Outlet Comparis Hit with Ransomware Attack

• A week in security (July 5 – July 11)

• Kaseya issues patch for on-premise customers, SaaS rollout underway

• Hackers Have Devised a New Trick to Disable Macro Security Warnings

• 15 Philips Vue Vulnerabilities Could Result in Full Takeover of the Devices

• 11 technologies improving database security

• Windows 11’s best security features

• Eighteen arrested in Spain in a sting against migrant smugglers operating overseas

• Dutch Institute Exposes Flaws in Kaseya – VSA Platform

• Gurman: Larger Apple Silicon iMac ‘En Route,’ May Feature More Powerful ‘M2X’ Chip

• CNA Financial Customers Notified of Data Breach Following a Ransomware Attack

• The False Identity Frenzy and the Need for Authentication

• Tripwire Patch Priority Index for June 2021

• China Expands Regulatory Crackdown On Didi As Investors Sue

• TikTok To Automatically Delete Some Content

• Judge Dismisses Amazon’s JEDI Challenge After Project Cancelled

• Welcoming the Israeli Government to Have I Been Pwned

• Kaseya releases patches for flaws exploited in massive ransomware supply-chain attack

• Setting and achieving your application security goals

• Top 5 Physical Security Considerations

• Phishing, Ransomware Driving Wave of Data Breaches

• Trying to register your antivirus in Windows Security Center?

• Explaining STIX And TAXII Standards | Avast

• How to Prepare for a Cyberattack

• Magecart hackers hide stolen credit card data into images and bogus CSS files

• Tech’s next wave of development will happen in Asia, Singapore’s IMDA chief predicts

• Sixth-Generation iPad Mini With Smaller Bezels, Larger Display, and Improved Performance Expected to Launch This Fall

• Cities Key in War on Ransomware, Neuberger Tells Mayors

• How do I select a third-party risk management solution for my business?

• Understanding and stopping 5 popular cybersecurity exploitation techniques

• Now a website to track down ransomware payments

• Cyber Attack news trending on Google

• Experts discussed how to fight cyberbullying on children at Cyber Polygon 2021

• Paving the way for women in industrial cybersecurity research

• Kaseya Releases Patches for Flaws Exploited in Widespread Ransomware Attack

• 79% of organizations identify threat modeling as a top priority in 2021

• Health insurers facing growing risk of customer data theft

• IT, healthcare and manufacturing top targets for cyberattacks

• ISC Stormcast For Monday, July 12th, 2021 https://isc.sans.edu/podcastdetail.html?id=7580, (Mon, Jul 12th)

• Securing and Optimizing Networks: Using pfSense Traffic Shaper Limiters to Combat Bufferbloat, (Mon, Feb 15th)

• IT decision-makers doubt current data architectures will meet future model inferencing requirements

• Kaseya claims SaaS restoration going swimmingly

• Aussies have lost over AU$7 million to remote access scams already this year

• Tier 1 communications group chooses Allot to protect their customers from cyberthreats

• Malwarebytes integrates with Datto to to streamline endpoint security for MSPs

Generated on 2021-07-13 23:55:49.471739