IT Security News Daily Summary 2021-07-20

• Adversaries continue to abuse trust in the supply chain

• Russian Hacker Levashov Sentenced to Time Already Served

• An introductory guide to mobile app security testing

• Lawfare Lecture: Quinta Jurecic On Section 230 Reform

• Angry Political Man

• India’s Draconian Rules for Internet Platforms Threaten User Privacy and Undermine Encryption

• OPM takes back control of CHCO Council

• Netflix to Take on Apple Arcade With Mobile Games for Subscribers

• Security experts: Consistency and security are key in creating vaccine passports

• Vaccine passports have to be consistent so that all countries can recognize them, expert says

• DHS unveils second round of new pipeline security requirements

• All Three Major U.S. Carriers and Google Adopt Rich Communication Services, But No Sign of Apple Interest

• CISA: China successfully targeted US oil and natural gas infrastructure

• How to Fix the Big Problems With Two-Factor and Multifactor Authentication

• New Cybersecurity Order Issued for US Pipeline Operators

• Ultra Wideband Availability Expands to Argentina, Paraguay, and More

• Jon Stewart Promo for Upcoming Apple TV+ Show Makes Fun of Billionaire Space Race

• BrandPost: Redefining Home Security

• DHS releases new mandatory cybersecurity rules for pipelines after Colonial ransomware attack

• Deals: Expercom’s New Sale Includes Discounts on Unlocked iPhone 12 Models, 24-Inch iMac, and More

• Victory! Californians Can Now Choose Their Broadband Destiny

• NSO Exploits Still Remains Mysterious: ZecOps Can Help You Fight Back

• BrandPost: View the Women’s Executive Leadership Panel Hosted by HP

• BrandPost: Click Happens: Endpoint Protection That Doesn’t Rely on Detection

• Researchers: NSO Group’s Pegasus Spyware Should Spark Bans, Apple Accountability

• Your iPhone and the Pegasus spyware hack: What you need to know

• Supply chain attacks: Top 5 things to know

• Top 5 things to know about supply chain attacks

• A 16-year-old bug (CVE-2021-3438) in printer driver affects millions of printers worldwide

• NSO Group Hacked

• Newport Wafer Fab Sold To China, Has UK Government Defence Contracts

• EMEA Recruitment Partner Amy Bird on What She Looks For in a Candidate and How Diversity Drives Innovation

• The Hoot Podcast (Episode 35): Humio at Bloomreach with Junaid Sheriff

• XKCD ‘Bad Map Projection: The Greenland Special’

• BSides Vancouver 2021 – Mike Sample’s ‘Linux Sessions For Monitoring And Reviewing Linux Workloads’

• Apple Requiring Retail Employees in Some Regions to Wear Masks, Other Employees Encouraged to Do So

• Hands-On With Apple’s MagSafe Battery Pack

• WifiDemon – iPhone Wifi bug exposed devices to remote attacks

• WiFiDemon – iPhone Zero-click Wifi Hacking Flaw Can be Used to Execute Remote Code

• Chrome for iOS Gains Biometric Authentication for Incognito Tabs

• DuckDuckGo Announces Cross Platform Alternative to Apple’s Hide My Email

• Final Days: Connect to a Brighter Internet ☀️

• Avoid Blind Spots: Is Your Incident Response Team Cloud Ready?

• SSL (secure sockets layer)

• TSA imposes new cyber rules on pipeline operators

• The US and its Allies Accuse China of a Huge Microsoft Exchange Attack

• Romanian Linux Cryptojacking Cybercriminals Spotted

• Aruba Notified Customers Regarding a Data Breach After Two Months

• Saudi Aramco Loses 1TB of Data Following Data Breach

• Low-Risk iOS Wi-Fi Naming Issue can Compromise iPhones Remotely

• Twitter Rolling Out New Version of TweetDeck Starting Today

• The U.S. Is Continuing Its Campaign Against Huawei

• Protecting more with Site Isolation

• Law Firm to the Fortune 500 Breached with Ransomware

• A New Approach to Finding Cybersecurity Talent: A Conversation with Alan Paller

• RansomEXX Ransomware Hits Ecuador’s State-Run CNT Telco

• Researchers flag 7-years-old privilege escalation flaw in Linux kernel (CVE-2021-33909)

• Cybersecurity Professionals to Newcomers: Focus on Vendor-Neutral Certifications

• CISSPs from Around The Globe: An Interview with Theresa Grafenstine

• Why digital issuance is the perfect recipe for modern financial services

• Jeff Bezos Completes Blue Origin Spaceflight

• Nasty Linux systemd security bug revealed

• Google, Bloomberg and Facebook pledge support for second year of Security Training Scholarship Program for women

• Apple’s Insecure iPhone Lets NSO Hack Journalists (Again)

• Tetris Beat, Monster Hunter Stories, and Skate City Tokyo Coming to Apple Arcade

• Advancing an inclusive, diverse security industry

• Ransomware attack on law firm leads to data breach

• Rapid7 Acquires Threat Intelligence Firm Intsights for $335 Million

• Congratulations, Chip! SecureLink CFO awarded “Top CFO” honors by ABJ

• Top 10 Tips to Protect Against OWASP Top 10 Vulnerabilities

• MagSafe Battery Pack Tidbits: Thickness, Weight, Charging Details, and More

• WebRTC Security Vulnerabilities You Should Know About

• What is a SIEM, And Why Should You Have One?

• Success of Ransomware Attacks Shows the State of Cybersecurity

• U.S. Government Attributes ICS Attacks to Russia, China, Iran

• Life in Lockdown: Offices Are Empty of People, Full of Risky IoT Devices

• How Data Discovery and Zero Trust Can Help Defend Against a Data Breach

• The Android apps on your phone each have, on average, 39 security vulnerabilities

• CrowdStrike and Siemplify: SOARing with the Falcon is Now Easier Than Ever

• US, EU, UK, NATO blame china for “reckless” Exchange attacks

• Fortinet’s security appliances hit by remote code execution vulnerability

• Apple iPhone patches are out – no news if recent Wi-Fi bug is fixed

• HP Patches Vulnerable Driver Lurking In Printers For 16 Years

• Chinese Hackers Hid Hacked Data In A Donald Trump Picture

• Apple Under Pressure Over iPhone Security After NSO Spyware Claims

• China Denies Being Behind Major Microsoft Hack

• Hundreds Of Touchscreen Ticket Machines Hit By Ransomware Attack

• iPad Mini 6 Rumored to Feature A15 Chip and Smart Connector

• TeamTNT Campaigns Emphasize Importance of Addressing Cloud Security Gaps

• Defense spending, policy bills may not clear until December

• Why Your Business Needs a Long-Term Remote Security Strategy

• Ransomware: International cooperation is needed to curb these cybersecurity threats, says expert

• Vulnerability Exposes MicroLogix PLCs to Remote DoS Attacks

• A bug in Fortinet FortiManager and FortiAnalyzer allows unauthenticated hackers to run code as root

• Deals: AirPods Max Available for $454.99 at Amazon and Best Buy ($94 Off)

• Adobe Updates Premiere Pro to Run Natively on M1 Macs

• SAP Invests £216m In UK, Opens Offices In London, Manchester

• IBM FlashSystem gets safeguarded data copies to speed up cyberattack recovery

• Google Cloud rolls out new security tools as threat landscape heats up

• 16-Year-Old HP Printer-Driver Bug Impacts Millions of Windows Machines

• China Says Washington Hack Claims ‘Fabricated’, Condemns US Allies

• Cybereason Enhances XDR Offering with empow Acquisition

• Google Cloud targets Biden’s zero trust order with new services

• Sysdig acquires Apolicy to bolster container security offerings

• What’s the consensus on the state of web app security, anyway?

• Google unveils ‘self-driving’ cloud security feature

• MosaicLoader Malware Delivers Facebook Stealers, RATs

• A New Security Paradigm: External Attack Surface Management

• Microsoft Adds Teams Mobile Applications to Bug Bounty Program

• Chinese Gas Pipeline Intrusion Campaign, 2011 to 2013

• Cutting Through the Cybersecurity Noise and Chao

• Northern Train’s ticketing system out to lunch as ransomware attack shuts down servers

• HP patches vulnerable driver lurking in printers for 16 years

• Hundreds of touchscreen ticket machines are offline after a ransomware attack

• Google is using machine learning to stop DDoS attacks

• NordVPN deal: Save over 65% on a two-year subscription and get a $10 credit

• Companies are losing the war against phishing as attacks increase in number and sophistication

• Ransomware fallout is devastating and could often be avoided, study finds

• Summer of SAM – incorrect permissions on Windows 10/11 hives, (Tue, Jul 20th)

• MosaicLoader Malware Uses SEO Poisoning to Infect Software Pirates’ Systems

• Be The Strongest Link In Your Organization’s Supply Chain

• NSO Denies Allegations Pegasus Targetted Activists, Journalists

• Verified: UK.gov launching plans for yet another digital identity scheme

• Cybersecurity M&A Roundup for July 9-19, 2021

• 16-Year-Old Security Bug Affects Millions of HP, Samsung, Xerox Printers

• Apple Looking to Establish a Large Production Campus in Los Angeles for Apple TV+

• 3 Ways CISOs Can Brief Executives on Cybersecurity IT Governance

• How to generate Cryptographically secure random numbers and data in Python

• Ecuador Telecom Giant CNT Suffered Cyber Attack – Ransomware Suspected

• Schneider Electric Patched Security Bugs In EVlink Charging Stations

• Biden administration, US allies condemn China’s malicious hacking, espionage actions

• Government £375m Fund For UK Tech Firm Growth

• 3 Quality Assurance Tools That Will Take Your Business From Good to Great

• UN Rights Chief Alarmed by Reported Use of Powerful Spyware

• Microsoft secured court order to take down domains used in BEC campaign

• Apple Reportedly Agrees Deal to Sell iPhones in Korean LG Retail Stores From August

• Oil Company Saudi Aramco Affected by a Data Breach

• Microsoft heads to court to take on imposter, homoglyph domains

• Researchers: Apple Quietly Patched 0-Click Wi-Fi Code Execution Vulnerability in iOS

• Mitigating Threats to Encryption From Quantum and Bad Random

• U.S. Department of Commerce Seizes Trade with 6 Russian Companies

• Armis: Top Performer in Asset Visibility and Real-Time Detection in MITRE Engenuity ATT&CK® Evaluations for Industrial Control Systems (ICS)

• China Officially Accused of Microsoft Exchange Attacks

• US legal eagles representing Apple, IBM, and more take 5 months to inform clients of ransomware data breach

• China Denies Microsoft Hacking Claim By The West

• Chinese Hackers Were Responsible For The Massive Microsoft Exchange Server Attacks – NCSC, UK

• MagSafe Battery Pack Now Available for In-Store Pickup in UK, EU, Australia, Japan, and China

• Bug hunters asked to probe Microsoft Teams mobile apps, can earn up to $30k

• Four Members of APT40 Indicted by the U.S. Department of Justice

• Google Cloud CISO Phil Venables on the future of cloud security

• 8 biases that will kill your security program

• Quick Hits

• FCW Insider: July 20, 2021

• Beats Studio Buds Now Available to Order in Many European Countries

• Who Can See Your Address Online? | Avast

• WHAT IS A SIEM, AND WHY SHOULD YOU HAVE ONE?

• This New Malware Hides Itself Among Windows Defender Exclusions to Evade Detection

• Apple Could Be Forced to Follow New Digital Competition Rules or Face Fines, Under UK Proposal

• Zero-Trust is an Adjective Without a Noun

• Application security testing is not just buzzwords

• Last (Executive) Orders Please: Supply Chains, Policy and Modernising Cybersecurity

• WhatsApp Now Lets You Join Group Calls Even After They’ve Started

• Apple Pay Now Available for Mir Cardholders in Russia

• Juniper Bug Allows RCE and DoS Against Carrier Networks

• US and Global Allies Accuse China of Massive Microsoft Exchange Attack

• Deepfakes: The Next Big Threat

• WiFiDemon – Recently discovered iPhone Wi-Fi bug could also allow RCE

• Nations come together to condemn China: APT31 and APT40

• Scanning for Vulnerabilities in Cloud-Native Applications

• Rising Threats Target Cloud Providers, Virtual Infrastructure

• How do I select a data recovery solution for my business?

• Vishing attacks on the rise with newest campaign

• Combating deepfakes: How we can future-proof our biometric identities

• Apple iPhones to get protection against Pegasus Mobile Spyware

• Ransomware Attack on Northern Rail UK

• iOS 14.7 Bug May Prevent iPhones With Touch ID From Automatically Unlocking Apple Watch

• IoT malware attacks rose 700% during the pandemic

• Is differential privacy the ideal privacy-enhancing computation technique for your business?

• Implementing Controls Without Breaking Everything (Including the Bank)

• Instagram Introduced Security Checkup – A New Feature to Recover Hacked Accounts

• McAfee Partners with American Express to Provide Best-in-Class Security

• Fighting new Ransomware Techniques with McAfee’s Latest Innovations

• Business correspondence in messengers and social networks poses a cyber threat to companies

• Apple Will Delay Bringing Employees Back to Offices Until at Least October

• Most financial services mobile apps still rely on passwords, even with added friction

• ETSI completes set of IoT MQTT and CoAP testing standards

• CSaaS market to reach valuation of $87.59 billion by 2025

• ISC Stormcast For Tuesday, July 20th, 2021 https://isc.sans.edu/podcastdetail.html?id=7592, (Tue, Jul 20th)

• Cofense Protect MSP: Phishing protection for MSPs safeguarding SMBs

• EXPLAINER: Target List of Israeli Hack-for-Hire Firm Widens

• Thousands of companies compromised by REvil Ransomware – the supply chain strikes again

• Four features your data-centric security strategy must provide

• Synopsys partners with Samsung to accelerate ISO 26262 functional safety deliverables

• Airtel delivers connectivity solutions for enterprises based on Cisco SD-WAN technology

• This tool tells you if NSO’s Pegasus spyware targeted your phone

• Oil giant Saudi Aramco hit by 1TB data breach

• How Phishers Abuse Hypertext Transfer Protocol Secure (HTTPS) Protocol

• Westbase Group acquires Wireless Coverage to extend WISDM platform development

• Fast Radius merges with ECP Environmental Growth Opportunities to become a publicly-listed company

• What’s Next for REvil’s Victims?

• Kdan Mobile raises $16M to increase its global footprint

• OPSWAT acquires Bayshore Networks to extend its suite of CIP cybersecurity solutions

• U.S. and allies say China at fault for massive Microsoft hack

• Supply chain threats demand industrywide approach to AI

• Cybersecurity company warns of American Rescue Plan Act scams as first IRS child tax credit payments released

• Microsoft Cracks Down on Malicious Homoglyph Domains

• L3Harris Technologies develops surveillance concepts for NATO’s AFSC program

• Goldilock raises $1M to expand its air gap cybersecurity solution

• TLS Email Encryption Explained – How To Encrypt Email with TLS>

• Reimagining the Malware Analysis Experience

• 8 Signs It May Be Time for Parental Controls

• Key security patch testing best practices

• Data trust and connectivity challenge Army network innovators

• President Biden Accuses Facebook Of “Killing People” With Misinformation

• Law Firm for Ford, Pfizer, Exxon Discloses Ransomware Attack

• Fortinet Releases Security Updates for FortiManager and FortiAnalyzer

• IT Security News Daily Summary 2021-07-19

• The Pipeline Attack – Is Log Analysis Enough for Cybersecurity?

• Threat Hunting Frameworks and Methodologies: An Introductory Guide

• Lawmakers balk at cost-overruns, transparency issues with VA’s $21 billion health record program

• Unpatched iPhone Bug Allows Remote Device Takeover

• How to activate virtualization-based security and core isolation in Windows 10

• Balancing the benefits with the risks of emerging technology

• Don’t Wanna Pay Ransom Gangs? Test Your Backups.

• capa 2.0: Better, Faster, Stronger

• Apple Releases Safari 14.1.2 Update for macOS Catalina and macOS Mojave

• DACA Update: A Federal Judge Rules that DACA is Illegal, But Keeps Options Open

• US charges four suspected Chinese spies who coordinated APT40 hackers

• How to Monitor for Cryptomining in the Cloud

• Sharding Kafka for Increased Scale and Reliability

• Shlayer Malvertising Campaigns Still Using Flash Update Disguise

• Senior Software Engineer II Aparna Chaudhari Offers Advice for Women in Tech (and Pointers for Making the Industry More Inclusive)

• Rapid7 acquires threat intelligence platform IntSights for $335M

• Agencies ramp up ransomware defenses

• Connecticut pushes cybersecurity with offers of punitive damage protection

• Rapid7 buys outside-the-perimeter security firm IntSights for $335 million

• US charges members of APT40, Chinese state-sponsored group

• How Gaming Attack Data Aids Defenders Across Industries

• US Accuses China of Using Criminal Hackers in Cyber Espionage Operations

• White House Accuses China of Microsoft Exchange Attack

• US DoJ indicts four members of China-linked APT40 cyberespionage group

• iOS 14.7 Features: Everything New in iOS 14.7

• TurboTax-maker Intuit will leave free tax filing partnership with IRS

• Attivo Earns US DoD Contracts for Active Cyber & Deception Defense

• How China’s Hacking Entered a Reckless New Phase

• Coalition for App Fairness: Apple is Using Subpoenas to Punish Opponents by Prying Into Confidential Communications

• If the recent attack on Microsoft is Chinese Government State Sponsored, isn’t it time for a Cyber Geneva Convention?

• Remcos RAT delivered via Visual Basic

• Edge AI’s benefits bring ‘much higher’ security risks, says McAfee data scientist

• US and allies finger China in Microsoft Exchange hack

• NSO Group Spyware Used On Journalists & Activists Worldwide

• Robert M. Lee’s & Jeff Haas’ Little Bobby Comic – ‘WEEK 338’

• Executive Order Update: NIST Establishes a Definition for Critical Software and Outlines Scan Requirements for Software Source Code

• BSides Vancouver 2021 – Vivek Ponnada’s ‘Is The Power Grid A Huge Cybersecurity Risk?’

• Cloudstar – IT provider for real estate, finance, insurance worlds – downed by ransomware

• Two (or More) Is Better Than One: Digital Twin Tech for Cybersecurity

• Threat modeling can protect data used by AI assistants

• Ruthless Attackers Target Florida Condo Collapse Victims

• US government formally names China in Exchange Server hack

• iOS 15: How to Create a Focus

• Juniper Patches Critical Third-Party Flaws Across Product Portfolio

• Apple Employees Continue to Fight Return to Campuses and Push for Better Remote Working Options

• 7 Ways to Effectively Secure Your eCommerce Store Today

• Protecting Phones From Pegasus-Like Spyware Attacks

• When Ransomware Comes to (Your) Town

• Experts disclose critical flaws in Advantech router monitoring tool

• Apple Releases iOS 14.7 With MagSafe Battery Support and Apple Card Family Credit Limit Combining

• Apple Music Spatial Audio and Lossless Quality Rolling Out in India

• Apple Seeds Second Release Candidate Version of macOS Big Sur 11.5 to Developers

• Hyper Releases Stackable GaN Chargers With Up to 1600W of Power From a Single Wall Outlet

• Apple Releases HomePod 14.7 Software With Support for Managing Timers From the Home App

• Google Patched Another Actively Exploited Chrome Zero-Day

• Keeping Your System Secure is Easier than Ever with LinuxSecurity Customized Advisories!>

• Singapore goes online in hunt for intelligence officers

• Apple Releases tvOS 14.7 for Apple TV HD and Apple TV 4K

• Apple Releases watchOS 7.6, Bringing ECG and Irregular Heart Rhythm Notifications to 30 New Regions

• Apple Releases iOS and iPadOS 14.7 With MagSafe Battery Support and Apple Card Family Credit Limit Combining

• The Jan. 6 Select Committee Isn’t Just a Formality

• Law firm for Ford, Boeing, Exxon, Marriott, Walgreens and more hacked in ransomware attack

• Cybersecurity Alliance of EU and NATO to Combat Chinese Attacks

• Enhanced BazarBackdoor Poses New Cybersecurity Risks

• Pegasus Scandal Shows Risk of Israel’s Spy-tech Diplomacy: Experts

• Collective Intelligence: Realities and Hardships of Crowdsourced Threat Intel

• The top 7 identity and access management risks

• Introducing Bounty Awards for Teams Mobile Applications Security Research

• FragAttacks: Everything You Need to Know

• $10M for Info on State-Sponsored Attacks on US Critical Infrastructure

• UK and White House blame China for Microsoft Exchange Server hack

• DOJ charges four members of Chinese government hacking group

• MITRE announces first evaluations of cybersecurity tools for industrial control systems

• More Airline Operators are Being Targeted by Cybercriminals

• Israeli Firm Accused of Developing Spyware Software

• Building Digital Trust with Machine Identity Management

• Top 7 Selection Criteria for Automated Bot Prevention Solutions

• The Power in a Good Pretext

• Richtlinienkonforme Authentifizierung durch Verhaltensbiometrie

• Practical solutions for a secure automotive software development process following ISO/SAE 21434

• Apple Adds New Products to Online Store, Including Linksys Velop Wi-Fi 6 Mesh Routers With HomeKit Support

• MITRE Engenuity launches ATT&CK Evaluations for ICS

• China blamed for Ransomware attacks on Microsoft Exchange Servers

• Leaked NSO Group Data Hints at Widespread Pegasus Spyware Infections

• Candiru: Another Cyberweapons Arms Manufacturer

• GlobalFoundries touts U.S. chip manufacturing for supply chain and national security reasons

• Law Firm Campbell Conroy & O’Neil Discloses Ransomware Attack

• Romanian Cryptojacking Gang Target Linux-based Machines to Install Cryptominer Malware

• New Windows Print Spooler Vulnerability – CVE-2021-34481, (Mon, Jul 19th)

• UK And White House Blame China For Microsoft Exchange Server Hack

• Swedish Man Sentenced For Gold-Backed Cryptocurrency Scam

• Hackers Got Past Windows Hello By Tricking A Webcam

• Apple Warns Against Using Hydrogen Peroxide Disinfectants on Products

• Kaseya ransomware attack FAQ: What we know now

• UK, White House blame China for Microsoft Exchange Server hack

• Details Emerge on Iranian Railroad Cyberattack

• Cisco Discloses Details of Critical Advantech Router Tool Vulnerabilities

• Deals: Nomad Kicks Off New ‘Summer Vibes’ 30% Off Sitewide Sale

• Netflix password crackdown: why users should be arguing for stronger measures

• UK and chums call out Chinese Ministry of State Security for Hafnium Microsoft Exchange Server attacks

• Google Researchers Found Zero-Day Bugs In Safari, Chrome, and Internet Explorer

• New Phishing Campaign Spreads BazarBackdoor Malware Via Nested Archives

• Why You Should Always Conduct Application Security Testing

• Threat actor claims to have stolen 1 TB of data belonging to Saudi Aramco

• The new ransomware threat: triple extortion

• Combatting ransomware: a holistic approach

• How to Stop Spam Emails and Save Your Inbox

• Beware, crypto-scammer seeks foreigner with BLOCK CHAIN ACCOUNT

• U.S., Allies Officially Accuse China of Microsoft Exchange Attacks

• Breaking Down the Threat of Going All-In With Microsoft Security

• 7 Ways AI and ML Are Helping and Hurting Cybersecurity

• Photos of Apple’s New MagSafe Battery Pack Provide First Look at Thickness

• It’s time to get ahead of weaponised vulnerabilities

• Preparing for the ever-growing threat of ransomware

• StopRansomware.gov brings together information on stopping and surviving ransomware attacks

• Incedo Inc. Transforms Security Defenses and Becomes a Highly Resilient Organization with Check Point

• Researchers Warn of Linux Cryptojacking Attackers Operating from Romania

• Deals: Get AirPods Pro for $189.99 ($59 Off) and Regular AirPods for $119.99 ($39 Off) in Newest Sales

• iOS and Android Activations Now Split Evenly in the U.S., Research Shows

• “Candiru” Spyware Maker Exploits Patched Windows 0-Days & Selling Spyware to Attack iPhones, Androids, Macs, PCs

• Adopting OIDC Standard For MFA

• OPSWAT Acquires Industrial Cybersecurity Firm Bayshore Networks

• Israeli Firm Assisted Governments Target Journalists & Activists with Zero Days and Spyware

• Ransomware and the C-I-A Triad

• Trending: 4,500+ Cyber Pros Enroll in Free (ISC)2 Ransomware Course in Less Than a Month in Order to Fortify Their Preparedness and Response Skills

• FCW Insider: July 19, 2021

• Quick Hits: July 19, 2021

• UK blames China for Microsoft Exchange Server hack

• U.S. Government Releases Indictment and Several Advisories Detailing Chinese Cyber Threat Activity

• Review: Anker’s PowerWave Go 3-in-1 Stand Charges Your Apple Devices at Home and on the Go

• Amazon Rolled Out End-to-End Encryption For Ring Devices Globally

• Another Windows Print Spooler Bug Arrives After PrintNightmare Flaws

• Tactics, Techniques, and Procedures of Indicted APT40 Actors Associated with China’s MSS Hainan State Security Department

• Chinese State-Sponsored Cyber Operations: Observed TTPs

• Pegasus Project – how governments use Pegasus spyware against journalists

• NATO and EU launch a cybersecurity alliance to confront Chinese cyberattacks

• U.S., allies accuse China of malicious cyber activities

• Ireland Joins EU Covid Travel Pass System After Ransomware Attack Delay

• Turns Out That Low-Risk iOS Wi-Fi Naming Bug Can Hack iPhones Remotely

• HelloKitty Ransomware Is Now Going After Vulnerable SonicWall Devices

• Why 10,000 gas stations may sue after Colonial Pipeline hack

• Ericsson Sees China Revenues Fall As Trade War Bites

• Amazon-Backed Rivian Delays First Electric Vehicles

• Windows 10 security: Here’s how researchers managed to fool Windows Hello

• NSO Group’s Pegasus spyware used against journalists, political activists worldwide: report

• Five Critical Password Security Rules Your Employees Are Ignoring

• There are new unpatched bugs in Windows Print Spooler

• A week in security (July 12 – July 18)

• Exploiting Wi-Fi Stack on Tesla Model S

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• Tencent Security Keen Lab: Experimental Security Assessment of Mercedes-Benz Cars

• How long-term hybrid work is changing security strategies

• Cybersecurity salaries: What 8 top security jobs pay

• Silicon UK Podcast: How Much Technical Debt Does Your Business Have?

• US Adds Russian Cybersecurity Firms To Trade Blacklist

• China Launches ‘Reusable’ Sub-Orbital Space Vehicle

• TSMC Founder Warns Semiconductor Plans Could Fail

• With Safari Zero-Day Attacks, Russian SVR Hackers Targeted LinkedIn Users

• Thousands of PS4s Seized, Employed in Mining Cryptocurrency Illegally

• Pegasus Spyware Targets Phones of Journalists, Activists, and Politicians

• RansomEXX Ransomware Impacts Ecuador’s Corporación Nacional de Telecomunicaciones CNT

• Campbell Data Breach Leads to Private Information Exposure

• Israeli spyware used in hacking phones of activists, journalists globally

• Swedish man sentenced for gold-backed cryptocurrency scam

• Facebook fights Biden claim that social media is ‘killing people’ through anti-vax, COVID-19 misinformation spread

• 75% of Companies Spend as Much Time on False Positives as on Real Security Events

• ‘iPhone SE 3’ With A14 Bionic Chip and 5G Expected in First Half of 2022

• Apple TV+ Animated Shows Bag Three Daytime Emmys

• Consumer Data And Privacy | Avast

• Top 5 NCSC Cloud Security Principles for Compliance

• CISO Interview Series: How Aiming for the Sky Can Help Keep Your Organization Secure

• Experts show how to bypass Windows Hello feature to login on Windows 10 PCs

• “Seven or eight” zero-days: The failed race to fix Kaseya VSA, with Victor Gevers, Lock and Code S02E13

• Binance Pulls Digital ‘Stock Tokens’ After Crackdown

• Researcher Uncovers Yet Another Unpatched Windows Printer Spooler Vulnerability

• Report: Pegasus Spyware Sold to Governments Uses Zero-Click iMessage Exploit to Infect iPhones Running iOS 14.6

• Trying to register your antivirus in Windows Security Center?

• Cambridge Data Finds Bitcoin Miners Shifting Away From China

• Ericsson takes a thumping in Mainland China for second quarter

• The Second Wave of a Ransomware Pandemic

• Researcher Uncover Yet Another Unpatched Windows Printer Spooler Vulnerability

• Android users – do this now to protect yourself against hackers

• New Leak Reveals Abuse of Pegasus Spyware to Target Journalists Globally

• Cyber Games Offer Competitive Challenges

• Vaccinate your data: Addressing and adapting to new data risks

• Viral video shows Malaysian police destroying 1,069 bitcoin mining rigs with a steamroller

• Protect your smartphone from radio-based attacks

• SOC Second Defense Phase – Understanding the Cyber Threat Profiles

• Half of organizations are ineffective at countering phishing and ransomware threats

• Mobile Phones of Politicians, Journalists, and members of Royal Families were targeted by Israeli Malware

• Cyber scam targeted at owners of expensive Apple laptops

• Application security tools ineffective against new and growing threats

• How to balance employee IT security policies

• Short Édition – 505,466 breached accounts

• ISC Stormcast For Monday, July 19th, 2021 https://isc.sans.edu/podcastdetail.html?id=7590, (Mon, Jul 19th)

• Worldwide AIOps market size to grow steadily by 2027

• Outsourcing cloud management driven by increasingly complex IT environments

• Amnesty International and French media protection org claim massive misuse of NSO spyware

• Soracom Arc enables multiple IoT connections through a single management platform

• ShiftLeft Educate provides consistent and contextual training for developers of different skill levels

• Cleo Integration Cloud for Manufacturing enables manufacturers to confront market volatility

• 50,000 Phone Numbers Worldwide on List Linked to Israeli Spyware: Reports

• Virginia Tech Says it Was Targeted in 2 Recent Cyberattacks

• S3 Ep41: Crashing iPhones, PrintNightmares, and Code Red memories [Podcast]

• devolo launches three Magic 2 series adapters to boost internet connectivity

Generated on 2021-07-20 23:55:41.766598