IT Security News Daily Summary 2021-07-14

• Police seize illegal cryptomining farm using thousands of PS4s, GPUs

• West Point eyes cloud-based Common App platform

• Air Force plans 3D scans of facilities

• Tokyo 2020 Olympics must be extra secure to avoid cyberattacks and ransomware

• Google to Bring HTTPS-First Mode to Chrome Browser

• Google: four zero-day flaws have been exploited in the wild

• ElevationLab’s ‘MagBase’ Docks Your MagSafe Charger to Your Desk

• CVSS: The Basics Explained

• The Lifeline of a Vulnerability

• 75 new National Geospatial Data Assets available on ArcGIS

• SonicWall Warns of Imminent Ransomware Attacks Targeting Firmware Flaw

• Risk & Repeat: Breaking down the Kaseya ransomware attacks

• Targeted Attack Activity Heightens Need for Orgs. to Patch New SolarWinds Flaw

• Linksys Adds HomeKit Support to Velop AX4200 WiFi 6 System

• SonicWall releases urgent notice about ‘imminent’ ransomware targeting firmware

• Google details recent malware campaigns amid uptick in zero-day attacks

• Capital One uses NLP to discuss potential fraud with customers over SMS

• How voice biometrics is saving financial services companies millions and eliminating fraud

• Cryptominer Farm Rigged with 3,800 PS4s Busted in Ukraine

• Kaspersky: LuminousMoth spearphishing campaign hit 1,500 targets in Asia

• The Joy of Tech® ‘The Commercialization Of Space!’

• BSidesNoVA 2021 – Clint Kehr’s & Mark Schmidt’s ‘XXE And The Cloud: The Sky IS Falling’

• Where Did REvil Ransomware Go? Will it Be Back?

• Egypt, Iraq and Jordan: A New Partnership 30 years in the Making?

• WhatsApp Has a Secure Fix for One of Its Biggest Drawbacks

• Cybereason says it accepts 2020 election results after investor Mnuchin refuses to reject Trump lie

• Facial-recognition technology gets a smack in the chops from civil rights campaigners

• Best VPN 2021: Top VPNs reviewed and compared

• Microsoft: Chinese threat actor exploited SolarWinds zero-day

• macOS Monterey Beta 3: Apple Redesigns Safari Tab Interface Following Complaints

• BrandPost: 4 Factors That Should Be Part of Your Cybersecurity Strategy

• Chinese Hackers Target Government Entities in Widespread Campaign

• Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse
  Secure VPN Devices

• China-linked LuminousMoth APT targets entities from Southeast Asia

• Everything New in iOS 15 Beta 3: New Safari Search, Address Bar Relocation and Reload

• Arrests of members of Tetrade seed groups Grandoreiro and Melcoz

• Twitter Cancels ‘Fleets’ Just Months After Launch

• UK’s Draft Online Safety Bill Raises Serious Concerns Around Freedom of Expression

• Cybereason stands by investor Mnuchin after ex-Treasury boss refuses to acknowledge Trump election lie

• Why Are DV Certificates Hot Favourites Of Hackers?

• IoT projects demand new skills from IT project managers

• Did the Cybersecurity Workforce Gap Distract Us From the Leak?

• CISA Insights: Guidance for MSPs and Small- and Mid-sized Businesses

• Upcoming Speaking Engagements

• Apple Seeds Third Beta of tvOS 15 to Developers

• Apple Seeds Third Beta of watchOS 8 to Developers

• Apple Seeds Third Betas of iOS and iPadOS 15 to Developers

• Apple Seeds Third Beta of macOS 12 Monterey to Developers

• AirPlay 2 and HomeKit Available on 2020 Toshiba and Insignia Fire TVs

• Covid scams cost Americans nearly $500 million — and criminals are now eyeing the child tax credit

• Worries from a Democrat about the Biden administration and federal procurement

• Apps Built Better: Why DevSecOps is Your Security Team’s Silver Bullet

• Linux-Focused Cryptojacking Gang Tracked to Romania

• Microsoft delivers comprehensive solution to battle rise in consent phishing emails

• Phishing on Adobe Spark

• NIST Has Come Out With Its Own Ransomware Guidance | #RansomwareWeek

• How to achieve financial inclusion with Open Banking

• Meaningful security metrics

• Asset management in the age of digital transformation

• Firefox 90 Improves Tracking Blocking For Private Browsing

• Worries about the Biden administration and federal procurement

• Trickbot Malware Rebounds with Virtual-Desktop Espionage Module

• Home delivery scams get smarter – don’t get caught out

• 10 Mistakes Companies Make In Their Ransomware Responses

• BSidesNoVA 2021 – Sophia Fadli’s, Brad Schonhorst’s, Jeremiah Osburn’s And Steve Helfen’s ‘Panel: SOC Life’

• How to Win at State Privacy Whack-A-Mole

• Security and HR phishing scams are luring employees, KnowBe4 report finds

• Ex-Trump Treasury Secretary Steven Mnuchin’s firm leads $275 million investment in Cybereason

• Instagram to enhance security of its users

• Personal data compromises up 38%, according to new cybersecurity report

• Repealing the ‘Zombie’ Iraq AUMF(s): A Clear Win for Constitutional Hygiene but Unlikely to End Forever Wars

• Bad bot activity on sports betting websites rises during Euro 2020

• Announcing nominees for the 2021 Women in AI Awards

• These states saw the most hacks in 2020

• TrickBot Makes a Comeback with a VNC Module

• Sussex-Based Couple Loses £15,000 to Scammers

• Top Tips for Ransomware Defense

• TikTok Becomes First Non-Facebook App to Hit 3 Billion Downloads

• How Microsoft Security empowers partners to build customer trust

• MISA expands portfolio and looks ahead during Microsoft Inspire

• Microsoft integrates Dynamics 365 and Teams, unveils security services

• Congressional Bill Aiming to Enhance Cybersecurity in Education

• ICS Patch Tuesday: Siemens and Schneider Electric Address 100 Vulnerabilities

• Germany Is About to Block One of the Biggest Porn Sites

• Windows Hello Bypass Fools Biometrics Safeguards In PCs

• Updated Joker Malware Floods Into Android Apps

• Amazon Rolls Out Encryption For Ring Doorbells

• Microsoft July 2021 Patch Tuesday Addresses 117 Vulnerabilities

• Cellebrite Under Fire Again After Being Used To Target Journalist

• 600 million LinkedIn members scraped, data offered up for sale on hacker forum

• Critical Breaches Found in Etherpad

• Enhanced Trickbot Malware Targeting Users with Spyware

• 4 Integrated Circuit Security Threats and How to Protect Against Them

• Location- and Device-agnostic Security for the Mobile Workforce

• BT to Expand 5G to Entire UK by 2028 Using Drones, Satellites, and Portable Cells, Will End 3G Service by 2023

• Is crypto’s criminal rollercoaster approaching a terminal dip?

• Apple Releases MagSafe Battery Pack For iPhone 12

• Targeted Phishing Attack against Ukrainian Government Expands to Georgia

• REvil Vanished from the Internet

• Virsec Raises $100 Million in Series C Funding Round

• Deals: Find All-Time Low Prices on M1 MacBook Pro Models in Amazon’s Newest Sales ($199 Off)

• TrickBot Emerges with a New Update

• BT Confirms 3G Service Will Be ‘Retired’ In 2023

• MongoDB adds scaling, compliance boosts to version 5.0 of its database platform

• VMware Patches Vulnerabilities in ESXi, ThinApp

• SecurityWeek to Host Cloud Security Summit July 21, 2021

• Salt Security Report Highlights Prevalence of API Vulnerabilities

• Apple Has Deployed More Than $1 Billion Towards Affordable Housing Initiatives in California

• ‘Today at Apple’ Sessions Coming to YouTube, Starting With ‘Peanuts’ Video

• Ring Doorbell Encryption Now Provided by Amazon

• REvil ransomware group vanishes after mounting US pressure

• Cyberthreat prevention platform Virsec raises $100M

• Does cybercrime impact cryptocurrency prices? Researchers find out

• What are Product Security Incident Response Team (PSIRT) Best Practices?

• Spot the Ball & Security Detection Games

• 16 Cybercriminals Behind Mekotio and Grandoreiro Banking Trojan Arrested in Spain

• Finally! Ring Doorbells get End-to-End Encryption, but There’s a Big Catch

• Trickbot improve its VNC module in recent attacks

• Apple Supplier Rockley Photonics Unveils Health Tracking Tech Likely to Come to Apple Watch

• Heimdal™ Is Launching Its Official Channel Partners Accelerator

• Cybersecurity firm Cybereason CEO and Mnuchin on latest funding round

• Watch CNBC’s full interview with former Treasury Secretary Steven Mnuchin, Cybereason CEO Lior Div

• Biden discussed Russian ransomware gangs with Putin in a phone call

• Kaseya releases patches for flaws exploited in massive ransomware supply-chain attack

• Updated Joker Malware Floods into Android Apps

• Firm Hacked to Spread Ransomware Had Previous Security Flaws

• One way to fail at malspam – give recipients the wrong password for an encrypted attachment , (Wed, Jul 14th)

• A Windows Hello Authentication Bypass Vulnerability Was Fixed by Microsoft

• Steven Mnuchin’s PE firm leads $275 million investment in Cybereason

• Four in-the-wild exploits, 13 critical patches headline bumper Patch Tuesday

• How Can CCSP Certification Help Your Organization?

• New Law Will Help Chinese Government Stockpile Zero-Days

• How can we get rid of them and why law enforcement is not really the answer

• Adobe Issued Security Updates for 28 Vulnerabilities in 6 Programs

• NIST’s EO-mandated software security guidelines could be a game-changer

• REvil Gang Websites Go Dark After Attacks

• Indian call center seized over Amazon hacking scam against US citizens

• VERT Threat Alert: July 2021 Patch Tuesday Analysis

• Windows Hello Bypass Fools Biometrics Safeguards in PCs

• Seven Attributes of a Great Security Team

• Data Security Startup Code-X Emerges From Stealth With $5 Million in Funding

• REvil Ransomware Gang Mysteriously Disappears After High-Profile Attacks

• China Taking Control of Zero-Day Exploits

• Google ‘Pixel Fold’ to Use Ultra-Thin Glass, Still on Track for 2021 Release

• Outpost24 acquires threat intelligence provider Blueliv

• Ukraine Seized Gaming Consoles used for Illegal Crypto Mining

• Chinese Hackers Stole Call Details of Nepal Telecom

• Dark Web User ‘The Bull’ Charged for Selling Insider Stock Info

• CISA Emergency Directive Points Out to PrintNightmare: Federal Agencies Required to Take Immediate Action

• Tesla Powerwall Battery Production Slows Due To Chip Shortage

• CISA Issues Emergency Directive to Address ‘PrintNightmare’ Vulnerability

• Microsoft Says SolarWinds Serv-U Zero-Day Exploited by Chinese Group

• Hackers Are Using the New SolarWinds Zero-day Vulnerability to Target US Defence Organizations

• Kaseya Rolls Out Patches For VSA Bugs Exploited In The Ransomware Attack

• WhatsApp Beta Tests Disappearing Video, Photo Messages

• Thousands of PS4s seized in Ukraine in illegal cryptocurrency mining sting

• US charges Greek national for selling insider trading subscriptions in the Dark Web

• LuminousMoth APT: Sweeping attacks for the chosen few

• Ring Video Doorbells to Gain End-to-End Encryption, But Still No Sign of HomeKit Support

• 16-30 June 2021 Cyber Attacks Timeline

• Securing CI/CD pipelines: 6 best practices

• Windows 11 hardware requirements will drive security update decisions

• Quick Hits: July 14, 2021

• FCW Insider: July 14, 2021

• Use This Definitive RFP Template to Effectively Evaluate XDR solutions

• Google Meet Places One-Hour Cap on Group Video Calls for Non-Paying Users

• CISA Says Multiple Threat Actors Exploiting Windows ‘PrintNightmare’ Vulnerability

• China-linked hacking group DEV-0322 behind Solarwinds Serv-U zero-day attacks

• Hong Kong working to share its digital IDs with mainland China

• 20 World’s Best Free Hacking Books For 2021 – Beginners to Advanced Level

• How To Clean Up Your Digital Footprint | Avast

• Zero-Trust for the Post-Pandemic World

• Apple Music Four-Month Free Trial Offered to US Military and Veterans

• Looking for adding new detection technologies in your security products?

• Security in the Age of Increasing Cyberattacks

• Twitter Rolls Out Ability to Change Who Can Reply to Your Tweet After It’s Posted

• REvil Ransomware Websites Mysteriously Gone Offline

• Despite Pen Testing Efforts, Stubborn Vulnerabilities Persist

• Rebuilding your security culture as employees return to the office

• What follows Patch Tuesday? Exploit Wednesday. Grab this bumper batch of security updates from Microsoft

• Facebook is firing three engineers per month for accessing user data

• Joe Biden government cyber attacks REvil aka Sodinokibi Ransomware Servers

• Ensuring HIPAA compliance when using the cloud

• Cybercriminals took advantage of WFH to target financial services companies, says Financial Stability Board report

• Singapore’s Changi Airport is using digital certificates to speed up immigration checks

• Firefox 90 lands with just-in-time support for unblocking Facebook when users log in

• Update Your Windows PCs to Patch 117 New Flaws, Including 9 Zero-Days

• Product showcase: ESET Cybersecurity Awareness Training

• Southeast Asia seeks greater tech cooperation as U.S.-China rivalry grows

• The infrastructure and websites used by REvil ransomware gang are not reachable

• Dealing with security vulnerabilities on data center servers requires more skilled staff

• Six Steps to Protect Your Organization from Ransomware | #RansomwareWeek

• U.S. Government Equates Threat of Ransomware with Terrorism | #RansomwareWeek

• MWC Barcelona 2021 – Highlights from the biggest mobile trade show

• Cybersecurity and government

• Small businesses save up to 60% in McAfee and Visa partnership

• Businesses relying on data to achieve post-pandemic digital transformation goals

• Chinese Hackers Exploit Latest SolarWinds 0-Day to Target U.S. Defense Firms

• 54% of businesses now have a policy in place to deal with ransomware attacks

• Microsoft names Chinese group as source of new attack on SolarWinds

• ISC Stormcast For Wednesday, July 14th, 2021 https://isc.sans.edu/podcastdetail.html?id=7584, (Wed, Jul 14th)

• What drives SDN adoption?

• Apple Boosting iPhone 13 Production in Anticipation of High Demand at September Debut

• Electronic IDentification HelloID builds any digital onboarding process within hours

• DigiCert issues Verified Mark Certificates to help organizations secure their emails from abuse

• Bandura Cyber Intelligence Marketplace deploys cyber intelligence data across network in real-time

• ColorTokens Xaccess provides zero trust access across cloud or hybrid applications and data stores

• Data quality, COVID response, saving the coral reefs and more during Transform’s Data, Analytics, & Intelligent Automation Summit

• Macquarie Telecom earmarks AU$78m to build ‘largest ever’ data centre in Sydney

• QuantConnect Datasets enables quants to harness a data feed with a single line of code

• iland supports Veeam Backup & Replication v11 to protect customers from data loss and ransomware

• LogRhythm launches cybersecurity automation tools in Qatar

• The hybrid workplace: What does it mean for cybersecurity?

• Choosing your MSP: What the Kaseya incident tells us about third‑party cyber risk

• StrongBox Data Solutions StrongLink 3.2 increases automation to simplify data management

• Informatica IDMC now available on Microsoft Azure Germany

• NICE extends Capture and Archiving Technology for Microsoft Teams to law enforcement agencies

• Cuba’s Social Media Blackout Reflects an Alarming New Normal

• RtBrick delivers route convergence on off-the-shelf hardware

• BrandPost: How to Secure the Modern Customer Experience

• 2021-07-12 – Trickbot gtag rob106

• Microsoft acquires cybersecurity firm RiskIQ for $500M

• REvil Ransomware Gang Goes Offline, Prompting Questions

• RIP Grant W. Dotson — A dear friend

• Game Over: How to Stop DDoS Attacks on Online Gamers

• SES-led consortium defines quantum communication infrastructure for Europe

• Radisys introduces Combo PON Combo PON Optical Line Terminal for broadband service providers

• Russian cybergang REvil seems to have gone dark

• Citrix Releases Security Updates for Virtual Apps and Desktops

• Secureworks delivers Taegis XDR for EU customers and channel partners

• Entrust and Red Sift simplify adoption of email sender authentication based on BIMI standards

• Microsoft’s Incomplete Patch: Ongoing PrintNightmare for CVE-2021-1675, CVE-2021-34527

• The Hoot Podcast (Episode 19): Humio with Miguel Adams, Government Agency Security Engineer

• SAP Releases July 2021 Security Updates

• Secure Identity Alliance encourages authorities to ensure the supply of chips for identity documents

• Arctic Wolf raises $150M to expand operations globally and bring to market new products and innovation

• AttackIQ raises $44M to fuel global growth and vision of security optimization

• InsightFinder announces new customers, leadership, and funding to support increased market demand

• Outrun the cyber-crooks with information security training from SANS Institute

• REvil gang suddenly goes silent leaving victims unable to recover systems

• The State of Vulnerability Management and Patching in The Enterprise Environment>

• New Phishing Campaign Targets Individuals of Interest to Iran

• Apple’s MagSafe Battery Pack: Everything You Need to Know

• Anaplan appoints Vikas Mehta as CFO

• Erin Joe joins FireEye as SVP of Strategy and Alliances

• Microsoft discovers threat actor targeting SolarWinds Serv-U software with 0-day exploit

• What Is Domain-Driven Design?

• Vote delayed on Biden’s SBA nominee amid GOP-led filibuster attempts

• Questions on the impact of contract protests arise after JEDI

• Cybersecurity organizations announce new first responder credentialing program

• The impact of Apple’s sideloading philosophy on developers

• Microsoft Patch Tuesday, July 2021 Edition

• Apple May Be Interested in Acquiring A24 Film Studio

• IT Security News Daily Summary 2021-07-13

• RPA is accelerating business transformations, Transform 2021 panelists say

• The risks of pushing for procurement equity

• Microsoft Crushes 116 Bugs, Three Actively Exploited

• Vulnerability in Less.js Causes Website to Leak AWS Secret Keys

• Microsoft Patches 3 Windows Zero-Days Amid 117 CVEs

• Apple’s MagSafe Battery Pack Unlocks Long Rumored Reverse Charging Feature

• Ransomware Giant REvil’s Sites Disappear

• Report: Scammers Are Falsely Promising Facebook Verification

• SSA investigates data center management options

• Outside reviews can limit bias in forensic algorithms, GAO says

• FedRAMP authorizes identity verification service

• Amazon rolls out encryption for Ring doorbells

• Unpatched Critical RCE Bug Allows Industrial, Utility Takeovers

• Guess Fashion Brand Deals With Data Loss After Ransomware Attack

• The Security Digest: #69

• This couple lost £15,000 to scammers. We followed the money – and found millions in stolen crypto

• Adobe patches critical vulnerabilities in Reader, Acrobat, and Illustrator

• Lawfare Live: Benjamin Wittes and Scott Anderson on the Afghanistan Withdrawal

• Free Coventry University Course to Help Everyone Protect their Online Privacy

• July 2021 Patch Tuesday: Microsoft fixes 4 actively exploited bugs

• REvil ransomware gang’s websites vanish soon after Kaseya fiasco, Uncle Sam threatens retaliation

• SAP Patches High-Risk Vulnerabilities in NetWeaver

• 17 free cybersecurity tools you should know about

• Spoofed Domains Still a Persistent Threat

• Microsoft July 2021 Patch Tuesday, (Tue, Jul 13th)

• REvil websites down after governments pressured to take action following Kaseya attack

• Microsoft July 2021 Patch Tuesday: 117 vulnerabilities, Pwn2Own Exchange Server bug fixed

• Adobe Patches 11 Critical Bugs in Popular Acrobat PDF Reader

• DoD-Validated Data Security Startup Emerges From Stealth

• Microsoft Releases July 2021 Security Updates

• Apple Working on ‘Apple Pay Later’ Feature With Monthly Installments for Apple Pay Purchases

• Black Hat 2021: Better Than Ever (As Always)

• Amazon Rolls Out End-To-End Encryption For Ring Doorbells

• Bad actor offers up for sale data from 600 million LinkedIn members scraped from the site

• Microsoft Patches 3 Under-Attack Windows Zero-Days

• XKCD ‘Board Game Party Schedule’

• Apple Debuts AirTag Leather Loop and Key Ring in New Colors

• Manage RDP and SSH connectivity at scale with Azure Bastion

• UK govt draws a blank over vaccine certification app – no really, the report is half-empty

• spyware

• Facebook announces time bonus payouts for bug hunters

• Firefox 90 Adds Cross-Origin Protections, Advanced Tracker Blocker

• Apple Seeds RC Version of tvOS 14.7 to Developers

• Apple Seeds RC Version of watchOS 7.6 to Developers

• Apple Seeds RC Version of iOS and iPadOS 14.7 to Developers

• Apple Seeds RC Version of macOS Big Sur 11.5 to Developers

• Clearview’s Face Surveillance Still Has No First Amendment Defense

• Igniting Passion for Diversity, Equity and Inclusion (DEI): Cybersecurity Professionals Address Challenges and Offer Tangible Advice for Weaving Inclusion into Our Industry

• Best practices for a secure ecommerce website

• Microsoft To Acquire RiskIQ To Bolster Cybersecurity

• Your Home Away From Home May Not Be as Cybersecure as You Think

• ‘Charming Kitten’ APT Siphons Intel From Mid-East Scholars

• Why We Need to Raise the Red Flag Against FragAttacks

• Kaseya Ransomware Attack: Guidance and Resources

• VMware Releases Security Update

• Digital Defense Expands Reach into the United Kingdom and South Africa with Private Protocol Partnership

• Intelligent Orchestration and Code Dx: Security superheroes

• BSidesNoVA 2021 – John Stoner’s ‘Na-Na-Na-Na Na-Na I’m Gonna Start A (CTI) Fight’

• The Kaseya VSA REvil Ransomware Supply Chain Attack: How It Happened, How It Could Have Been Avoided

• Multi-Domain SSL – Comprehensive SSL Security for Business Websites

• Ted Lasso Scores Emmy Nomination for Outstanding Comedy Series

• Deals: Apple’s 128GB 12.9-Inch M1 iPad Pro Hits New Low Price at $999 ($100 Off)

• Apple Launches $99 MagSafe Battery Pack

• DNS Provider Hit With Outrageous Blocking Order – Is Your Provider Next?

• Here are the new members of Biden’s cybersecurity team

• Cybercriminals using Marvel’s Black Widow movie to spread malware

• Versa Networks Newest Competitor in 2021 ‘ASTORS’ Awards Program

• Ransomware: Only half of organisations can effectively defend against attacks, warns report

• New Phishing Attacks Targeting Professors and Writers in the Middle East

• New SolarWinds Zero-Day Vulnerability Used in Cyberattacks

• Cyberattacks Should be Treated as a National Disaster in the U.S.

• Adobe: Critical Flaws in Reader, Acrobat, Illustrator

• Russian banks to launch a system against telephone fraud

• Enterprises Altering Their Supply Chain Defenses on Heels of Latest Breaches

• Critical Flaws Reported in Etherpad — a Popular Google Docs Alternative

• Balancing Agility with Data Security

• Apple’s Digital Car Key Feature Will Soon Work With Your iPhone in Your Pocket

• Let’s Bet on the Next Big Policy Crisis—No, Really

• Top 5 features of a secure password reset solution

• FCC finalizes program to rip and replace Huawei, ZTE telecom equipment in the U.S.

• Google Ordered To Pay $600m By French Watchdog

• New CISA Director Confirmed, White House Gains Cyber-Director

• Is Remote Desktop Protocol Secure? It Can Be

• When it comes to incident response, is your cyberinsurance carrier on your side?

• Guess Suffers Data Breach Following Ransomware Attack

• AttackIQ Raises $44 Million in Series C Funding Round

• Can Government Effectively Help Businesses Fight Cybercrime?

•  Adobe Releases Security Updates for Multiple Products 

• Zero Trust: The Protection Model for the Post-Pandemic World

• Mind the Gap: Securely Embracing the Digital Explosion

• JetBlue Pilots to Receive M1 iPad Pro

• Patch Tuesday July 2021:Microsoft To Deliver 40 Security Patches, Including Several Fixes for an Exploitable Zero-Day Vulnerability

• New BIOPASS Malware Sniffs Victims via Live Streams

• Ransomware websites operated by REvil are down: Sources

• You’ll never Guess whose data has been nicked as US fashion firm confirms systems breach

• Visa on using advanced AI such as unsupervised learning to fight fraud

• 3D printing opens DOD to cyber risks, IG finds

• The Trouble With Automated Cybersecurity Defenses

• ModiPwn flaw in Modicon PLCs bypasses security mechanisms

• Iranian State-Sponsored Hacking Attempts

• REvil Ransomware Site Goes Offline

• SolarWinds Issues Hotfix For Zero-Day Flaw Under Active Attack

• Iranian Hackers Posed As British-Based Academic

• Guess Announces Breach Of Employee SSNs And Financial Data After DarkSide Ransomware Attack

• Armis Discovers Critical Vulnerability In Schneider Electric Modicon PLCs

• iPhone Periscope Camera Patent Granted Ahead of Rumored 2022 or 2023 Debut

• EU Halts Digital Tax Plan, Amid Ongoing OECD Effort

• Security Operations Firm Arctic Wolf Raises $150 Million at $4.3 Billion Valuation

• Spamhaus Botnet Threat Update: Q2-2021

• Computer vision hasn’t passed ‘awareness phase,’ survey shows

• Mozilla Releases Security Updates for Firefox

• Cybereason Launches Global Defenders League Partner Program

• Rallying Security Intelligence With the Pride Community

• Deals: Get the M1 MacBook Air for Up to $150 Off, Starting at $899 for 256GB

• A ‘Potential Ransomware Pandemic’ Must Be Prevented, Interpol Urges

• Modipwn: code execution vulnerability discovered in Schneider Electric Modicon PLCs

• These Iranian hackers posed as academics in a bid to steal email passwords

• SolarWinds Issues Hotfix for Zero-Day Flaw Under Active Attack

• Google Cloud Certificate Authority Service Becomes Generally Available

• Iranian Hackers Impersonate British Scholars in Recent Campaign

• Tool Sprawl & False Positives Hold Security Teams Back

• Reimagining Ransomware Responses

• Hairpinning: The Bottleneck in Most Secure Web Gateway Architectures

• INTERPOL: International police coordination required to combat global cyberthreats

• Microsoft to beef up security portfolio with reported half-billion-dollar RiskIQ buyout

• Are you READY for (ISC)² Security Congress?

• Microsoft Acquire Cyber Security Firm RiskIQ for $500+ Million in Cash

• Crypto-Based Phishing Scams | Avast

• Arctic Wolf raises $150M to continuously monitor cyberthreats

• A practical guide to CMMC

• Great Power or Great Vulnerability? Securing 5G and 6G Networks

• Mint Mobile Suffered a Data Breach

• Stolen Credit Card Data Hidden in Images by Magecart Hackers for Vague Exfiltration

• $350,000 Stolen from Users by Fake Cryptocurrency Mining Apps

• iOS 15: How to Drag and Drop Screenshots

• How to Set a Cybersecurity Baseline for Your Vendors – and Hold Them to It

• Apple Threatens UK Exit Over Patent Dispute

• Ransomware: We need a new strategy to tackle ‘exponential’ growth, says Interpol

• Google’s Certificate Authority Service leaves preview, now generally available

• Critical Vulnerability Can Be Exploited to Hack Schneider Electric’s Modicon PLCs

• Valimail Amplify enables mailbox providers to display logos next to authenticated email messages

• Theft of Customer Data Is a Growing Risk for U.S. Health Insurers

• Sir Richard Branson Wins Battle Of Billionaires Space Race

• Check Point Software showcases new offerings, integrations, and tools at Microsoft Inspire 2021

• Tobacco products worth more than € 2 million seized in Spain and Portugal

• Gmail increases email security by adding support for BIMI

• Researchers warn of unpatched remote code execution flaws in Schneider Electric industrial gear

• Connected Cars: The State of Digital Transport

• Recently Patched ForgeRock AM Vulnerability Exploited in Attacks

• The Internet of Things is a Complete Mess (and how to Fix it)

• Social media partially disrupted in Cuba amid anti-government protests

• Armis discloses critical vulnerability that allows remote takeover of Schneider Electric industrial controllers

• Review of dnsx – a multi-purpose DNS toolkit

• Iranian Hackers Posing as Scholars Target Professors and Writers in Middle-East

• Microsoft Outlines New Features Coming to Edge Browser Later This Year

• British spy chief declares ransomware biggest online threat

• How to choose the best SIEM software

• SolarWinds patches zero-day exploited in the wild (CVE-2021-35211)

• A Critical Serv-U Vulnerability Exploited in the Wild, Fixed by SolarWinds

• American Clothing Brand Guess Discloses Data Breach

• We’re terrified of sharing information, but the benefits of talking about IT and infosec outweigh the negatives

• Protecting Your Business Against Malware in the Cloud

• DNS over HTTPS (DoH): Definition, Implementation, Benefits, and More

• Apple Expecting High Demand for Upcoming MacBook Pros, Enlists Extra Mini-LED Display Supplier

• Google to Roll Out New ‘Drive for Desktop’ App in the Coming Weeks, Replacing Backup & Sync and Drive File Stream Clients

• Critical vulnerability in Schneider Electric Modicon PLCs can lead to RCE (CVE-2021-22779)

• Kaseya restores SaaS, then ‘performance issues’ force a do-over

• Trickbot Malware Returns with a new VNC Module to Spy on its Victims

• How Public Cybersecurity Companies Performed in 1H 2021

• How to Build a Cybersecurity Culture

• American retailer Guess discloses data breach after ransomware attack

• GitHub’s Commercial AI Tool Was Built From Open Source Code

• F1 2021 reviewed: Codemasters adds story, keeps the racing sim feeling fresh

• Startup hopes the world is ready to buy quantum processors

• Health officials rail against Pfizer’s push for COVID boosters—for many reasons

• Microsoft discovers critical SolarWinds zero-day under active attack

• There’s a ‘high degree of uncertainty’ on impact of China’s focus on data security: Morgan Stanley

• Kaseya restores SaaS, then “performance issues” force a do-over

• Application security testing is not just buzzwords

• Propaganda as a Social Engineering Tool

• It takes more than MFA to beat human hacking

• Reduce your risk of being hit by a ransomware attack

• Microsoft to acquire Cyber Threat detection business RiskIQ

• CTOs not ready to take the blame of data breaches

• How Microsoft is taking cloud-powered innovation beyond Earth with Azure Space

• Kaseya restores SaaS, then “performance issues” force a do-over

• Canberra proposes IoT ‘star’ ratings and mandatory cyber standards for big business

• Apple Reportedly Aiming to Manufacture Apple Car Batteries in the United States

• Addressing the cybersecurity skills gap: Where do we go from here?

• A New Study Reveals That China’s Great Firewall Blocks Over 311,000 Domains

• Vulnerability in Schneider Electric PLCs allows for undetectable remote takeover

• New phishing attack SpoofedScholars targets professors and writers specializing in the Middle East

• Critical RCE Flaw in ForgeRock Access Manager Under Active Attack

• A more dynamic approach is needed to tackle today’s evolving cybersecurity threats

• DoD Adds Two More (ISC)² Certifications to Requirements for Cybersecurity Staff

• MWC 2021: Three key Thales innovations at this year’s event

• Ways to prevent ransomware attacks: how to avoid becoming a victim

• Authentication bypass allows complete takeover of Modicon PLCs used across industries

• Fashion Retailer Guess Notifies Users of Data Breach

• Schneider Electric PLCs vulnerable to remote takeover attacks

• What is the cost of an insider data breach?

• ACSC introduces Essential Eight zero level cyber maturity and aligns levels to tradecraft

• A New Critical SolarWinds Zero-Day Vulnerability Under Active Attack

• Hiring by technology companies continues to grow

• 1 in 5 companies fail PCI compliance assessments of their infrastructure

• ISC Stormcast For Tuesday, July 13th, 2021 https://isc.sans.edu/podcastdetail.html?id=7582, (Tue, Jul 13th)

• Hack The Box launches Academy for Business to help organizations combat cyberattacks

• ThreatQuotient releases ThreatQ Data Exchange to simplify bidirectional sharing of intelligence data

• Guess announces breach of employee SSNs and financial data after DarkSide ransomware attack

• uCloudlink expands its Paas and Saas platform with Hyperconn

• D2iQ Kubernetes Platform now available in the Microsoft Azure Marketplace

• AI leaders talk intersectionality, microaggressions, and more at Transform Women in AI Breakfast

• US Senate confirms Jen Easterly as head of cyber agency

• CyberEdge Group launches new LeadingEdge Group subsidiary to serve non-cybersecurity vendors

Generated on 2021-07-14 23:55:57.514591