IT Security News Daily Summary 2021-07-22

• What we learned about accessibility by scanning more than 2 million federal .gov web pages

• FBI: Cybercriminals Eyeing Broadcast Disruption at Tokyo Olympics

• Teardown Shows Off What’s Inside Apple’s New MagSafe Battery Pack

• Lawmakers push for new defense supply chain strategy

• Critical Jira Flaw in Atlassian Could Lead to RCE

• Phish Swims Past Email Security With Milanote Pages

• Kaseya obtains universal decryptor key for recent REvil ransomware attacks

• The Kaseya Ransomware Nightmare Is Almost Over

• Rural water utilities vulnerable to cyberattacks

• Colorado requires accessibility to state, local government websites

• California funds broadband infrastructure expansion

• Rapid7 Acquires IntSights to Gain External Threat Intelligence

• WifiDemon – iPhone Wifi bug exposed devices to remote attacks

• VA to continue pause on Cerner deployment for six more months

• With billions available for public health, it’s time to rebuild

• Tabletop exercise tests election security

• Akamai has trouble and the internet hiccups again

• Akamai Software Update Triggers Internet Outages

• Kaseya obtained ransomware decryptor from ‘trusted third party’

• How to conduct security patch validation and verification

• Twitter Beta for iOS Gains ‘Sign in With Apple’ Option

• Apple Music’s Spatial Audio Feature Doesn’t Work With Built-In Speakers of iPhone XR, iPad, or iPad mini

• Bug Bounty and VDP Platform YesWeHack Raises $18.8 Million

• Apple Music App for Android Gains Spatial Audio and Lossless Quality

• Microsoft Edge 92 starts rolling out to mainstream users

• BSides Vancouver 2021 – Dolev Farhi’s ‘Damn GraphQL – Defending And Attacking APIs’

• XKCD ‘Pre-Pandemic Ketchup’

• How to Reduce Noise and Fix Alert Fatigue in Security Operations [With Examples]

• Pegasus Project investigation uncovers the reach and implications of NSO Group spyware

• BSides Vancouver 2021 – Chris Timmons’s ‘So You Cracked A Bunch Of Passwords. Now What?’

• Advancing an inclusive, diverse security industry

• Protecting more with Site Isolation

• How to protect your CAD data files with MIP and HALOCAD

• Microsoft has a workaround for ‘HiveNightmare’ flaw: Nuke your shadow copies from orbit

• Critical Oracle Weblogic Flaw Let Remote Attacker Take Control of The System

• My Journey from Intern to Principal Engineer

• Industrial Networks Exposed Through Cloud-Based Operational Tech

• Report: It’s Easy For Misinformation Groups To Avoid Detection On Facebook

• Oracle fixes critical RCE vulnerabilities in Weblogic Server

• Legal Tetris and the FBI’s ANOM Program

• 5 years for swatter who caused a man’s death for a Twitter handle

• Ofcom: Telecom Firms Must Do More To Help Struggling Customers

• Scammers offer streaming services, giveaways and a fake cyber currency to cash in on the Olympic Games

• Malicious NPM Package Stealing Users’ Passwords

• France Examines Cybersecurity Measures After Spyware Reports

• Why Understanding Cyber Criminals Behavior and Tools is Vital

• Lost in the Cloud: Akamai DNS Outage, (Thu, Jul 22nd)

• Team streamlines neural networks to be more adept at computing on encrypted data

• A guide to balancing external threats and insider risk

• API Security Weekly: Issue #143

• Securing the cloud while Windows burns: Microsoft pops CloudKnox in trolley

• British Hacker Arrested for 2020 Twitter Hack and Bitcoin Scam

• Biden to Convene Business Sector Leaders to Discuss Cybersecurity in August

• 7 Hot Cyber Threat Trends to Expect at Black Hat

• Multiple Major Websites Down Amid Akamai Outage

• When coin miners evolve, Part 1: Exposing LemonDuck and LemonCat, modern mining malware infrastructure

• Apple Issues Urgent iPhone Updates; None for Pegasus Zero-Day

• Apple Shares ‘Hello Sunshine’ Ad Highlighting Apple Watch Series 6 Health and Fitness Features

• Okta CEO on cybersecurity: Take an identity-centric approach

• Pegasus Spyware Hacks iPhones of Prominent Individuals

• How Can CCSP Certification Help Your Organization?

• MWC 2021: Three key Thales innovations at this year’s event

• Visa Continues Fintech Push With Currencycloud Acquisition

• Attacks on critical infrastructure are dangerous. Soon they could turn deadly, warn analysts

• Get a lifetime of data encryption for your company for just $60

• Swedish Crypto Scammer Jailed for 15 Years in Gold-Backed Fraud

• Comforte AG Announces New Partnership with ITKaa

• Group-IB helps Dutch police identify members of phishing developer gang Fraud Family

• Nasty Printer Driver Vulnerability

• Next-Generation iPad Mini Will Reportedly Feature a Mini-LED Display

• Most Common Remote Work Security Risks in 2021

• Respect in Security initiative aims to build reporting lines for infosec bods suffering harassment at work, conferences and online

• Atlassian Patches Critical Vulnerability in Jira Data Center Products

• S3 Ep42: Viruses, Nightmares, patches, rewards and scammers [Podcast]

• Spain and Serbia dismantle Serbian marijuana trafficking network

• NPM Package Steals Passwords Via Chrome’s Account Recovery Tool

• Saudi Aramco Denies Breach After Hackers Hawk Stolen Files

• 740 Ransomware Victims Named On Data Leak Sites In Q2 2021

• Long-Awaited Bill Would Force Breach Victims To Contact CISA

• NSO Will No Longer Talk To The Press About Damning Reports

• HBO’s Apple TV Channel Shuts Down Today, Forcing All Users to Migrate to HBO Max

• Tesla To Open Supercharger Network To Other EVs

• Systemd can’t seem to catch a break: New vulnerability found

• The ransomware risk management calculus is changing for OT, ICS and critical infrastructure

• How cyberattacks exploit known security vulnerabilities

• U.K. man arrested in connection with 2020 Twitter breach

• IoT Devices a Huge Risk to Enterprises

• Drupal Releases Security Updates

•  Cisco Releases Security Updates

• Apple security updates: iOS 14.7 fixes WiFiDemon flaw

• How to Secure Your Smart Home: A Step-by-Step Guide

• British man arrested in connection with Twitter mega-hack that posted cryptocurrency scam from celebrity accounts

• Windows “HiveNightmare” bug could expose system files to non-admin users

• Google Cloud Unveils New SOC, IDS Solutions

• CISO Stories Podcast: Protecting the Crown Jewels

• You’re Invited to AWS re:Inforce 2021

• Sony Offering PS5 Owners An Extended Six Month Free Trial of Apple TV+

• 740 ransomware victims named on data leak sites in Q2 2021: report

• Deals: Get Apple’s 2021 128GB 11-Inch iPad Pro for $749 on Amazon ($50 Off)

• Winners Announced for 14th Annual iPhone Photography Awards

• CARROT Weather Gains Weather Report Videos and Smart Layouts

• What Is the Principle of Least Privilege?

• Microsoft Adds Another Security Acquisition With CloudKnox

• An Explosive Spyware Report Shows the Limits of iOS Security

• Satechi Launches Trio of New GaN USB-C Wall Chargers

• 3 Ways CISOs Can Brief Executives on Cybersecurity IT Governance

• Decentralized identity authentication platform Magic raises $27M

• 1,000 GB of local government data exposed by Massachusetts software company

• Saudi Aramco denies breach after hackers hawk stolen files

• Microsoft Issues Windows 10 Workaround Fix for ‘SeriousSAM’ Bug

• China-Linked APT31 Abuses Hacked Routers in Attacks, France Warns

• CISA analyzed stealthy malware found on compromised Pulse Secure devices

• Millions of Windows machines affected by ancient printer vulnerability

• Updated XCSSET Malware Targets Telegram, Other Apps

• NSO Group: Blame The Customer, Not Us

• Cloud security in 2021: A business guide to essential tools and best practices

• 1,000 GB of local government data exposed exposed by Massachusetts software company

• iOS Security Update Patches Recently Disclosed Wi-Fi Vulnerability

• Beef up your ransomware defense with Cisco Secure Choice

• Five Key Takeaways from SASEDay 21

• Authlogics announces enhancements to its Password Security Management Product

• The Role of Culture in Compliance

• Top 7 Cybersecurity Strategies For Startup Businesses

• Do you want to start building your website? Here are 6 helpful tips.

• You don’t want to miss these 7 cybersecurity trends of 2021

• Comparis Disclosed Data Breach Following Ransomware Attack

• CISA Details Malware Used in Attacks Targeting Pulse Secure Devices

• Pegasus spyware has been here for years. We must stop ignoring it

• FCW Insider: July 22, 2021

• Quick Hits

• Apple and Tim Cook Celebrate 40 Years of Company’s Presence in Singapore

• Check Point Software Rewards Channel Excellence for Securing Migration to the Cloud

• Tips for Securing Your Industrial Control Systems with a Safer Operational Technology (OT) Environment

• Microsoft just published a workaround for this important Windows 10 flaw

• Is Your SecOps Solution Keeping Up?

• Safeguard Your Smartphones From Radio-based Attacks

• Cyber-Attack by Hackers Disrupt Iranian Railway System

• APT Hackers Distributed Android Trojan via Syrian e-Government Portal

• New Jira Vulnerability May Result in Critical Remote Code Execution

• Q2 2021 Cyber Attack Statistics

• Briton Arrested Over Twitter Hack Of Public Figures

• Reduce End-User Password Change Frustrations

• Prepare for the End of 3G Networks – Intego Mac Podcast Episode 197

• Avast Receives AV-Comparatives Approved Business Product Award | Avast

• Secure multiparty computation explained: Ensuring trust in untrustworthy environments

• Why you need to update your iPhone and iPad now

• Resellers List AirTag Accessory Color Options Not Yet Offered by Apple

• NPM Malware Poses a Threat to Passwords in Google Chrome

• A Stealthy Malware Found on Hacked Pulse Secure Devices

• Vishing attacks on the rise with newest campaign

• Apple releases iOS 14.7, watchOS 7.6, macOS 11.5, and more

• Pegasus: The Case of the Infamous Spyware

• Did you know a third of cybersecurity pros have experienced harassment?

• What Is a Botnet & How to Prevent Your PC From Being Enslaved

• XLoader Malware Now Upgraded to Target MacOS Systems

• Fighting new Ransomware Techniques with McAfee’s Latest Innovations

• Pegasus And Spyware | Avast

• Thales launches payment card with onboard fingerprint scanner

• Oracle Warns of Critical Remotely Exploitable Weblogic Server Flaws

• Malicious NPM Package Steals Chrome Browser Passwords By Abusing Legitimate Tool

• China bans children under 16 from appearing in live-streaming and online video content

• Lack of cyber in Australian supply chain resilience plan has IBM concerned

• Another Hacker Arrested for 2020 Twitter Hack and Massive Bitcoin Scam

• Securing UX in Open Banking Apps

• Twitter Spaces Will Soon Let You Manipulate the Sound of Your Voice

• Want to add antivirus to your existing portfolio?

• A Cure for a Disheartened Cybersecurity Professional

• How (and Why) Hacker Forums Self-Moderate

• Secure Your Images with AWS Lambda Serverless Functions

• China pushes back against Exchange attack sponsorship claims

• TicketClub Italy Database Offered in Dark Web

• Questions that help CISOs and boards have each other’s back

• Ransomware attack on Saudi Aramco leaks critical data

• Twitter Hack 2020 culprit arrested in Spain

• Telegram Pavel Durov says that since 2018 he knew about the potential surveillance of his phone

• Thousands of Humana customers have their medical data leaked online by threat actors

• Asset inventory management: What’s the ROI?

• Modi government accused of spying on critics and opponents using Pegasus spyware

• Financial services accounting for nearly 40% of all phishing URLs

• Elon Musk walks back his fossil fuel worries, says Tesla will likely start accepting bitcoin again

• Who is responsible for improving security in the software development environment?

• Igniting Passion for Diversity, Equity and Inclusion (DEI): Cybersecurity Professionals Address Challenges and Offer Tangible Advice for Weaving Inclusion into Our Industry

• How can predictive analysis unlock the potential of 5G?

• DDoS attacks are up, with ever-greater network impact

• NSO Group ‘will no longer be responding to inquiries’ about misuse of its software

• Agile adoption increasing within both IT and non-IT teams

• Heartless Attackers Stole Identities of Surfside Condo Collapse Victims

• Edge AI software market to expand significantly by 2030

• Skyflow PII Data Privacy Vault ensures regulatory compliance for sensitive data

• US senators warn China’s Digital Yuan could compromise Olympic athletes

• Singapore neglecting smart nation roots in COVID-19 fumble

• Biden to Meet Next Month With Private Sector on Cyber Issues

• ISC Stormcast For Thursday, July 22nd, 2021 https://isc.sans.edu/podcastdetail.html?id=7596, (Thu, Jul 22nd)

• XioGuard delivers visibility and response capabilities across the entire attack surface

• Wipro invests $1B in cloud transformation capabilities and launches Wipro FullStride Cloud Services

• 2021-07-21 – TA551 (Shathak) BazarLoader with Cobalt Strike

• Cybercriminals may target 2020 Tokyo Olympics, FBI warns

• Styra DAS extends OPA policy-as-code guardrails to public, private and hybrid cloud configurations

• Microchip Smart Storage adapters enable NVMe and 24G SAS connectivity and manageability

• Ping Identity adds its IAM solutions to the Department of Homeland Security CDM APL

• TP-Link expands Omada business line with two 10G switches and one transceiver

• Security and Restaurant Businesses: 5 Things to Remember in 2021

• What Does a Transparent and Secure Digital Workplace Look Like?

• Transcend: Cookie consent banners hurt rankings

• Microsoft doubles down on cybersecurity with CloudKnox acquisition

• Apple Releases Safari Technology Preview 128 With Bug Fixes and Performance Improvements

• Dialpad partners with Miro to enable the fluidity of work that surrounds remote meetings

• SIGNIUS and Cryptomathic launch qualified e-signature platform to a broad range of organizations

• Intel collaborates with Airtel to drive network development of 5G technology

• Scale Computing collaborates with IBM to help enterprises adopt an edge computing strategy

• Home and office routers come under attack by China state hackers, France warns

• Can federal funding fill gaps in rural cyber preparedness?

• Sysdig acquires Apolicy to help customers secure Infrastructure As Code and automate remediation

• Cybereason acquires empow to enhance its XDR features

• Unbound Security partners with HashiCorp to offer integrated encryption key management solution

• Extended Detection and Response (XDR) Needs a New Kill Chain

• No, You Don’t Need EDR

• US DoJ indicts four members of China-linked APT40 cyberespionage group

• The Top Five Habits of Cyber-Aware Employees

• UK national arrested in Spain after DOJ indictment for Twitter hack

• Open Systems appoints Tom Corn as CPO

• Hypori appoints Jim Cushman as President of Commercial Markets and CPO

• Unisys announces a four-year contract to improve data security and travel for the European Union

• Black & Veatch Management Consulting achieves accreditation as a RPO from CMMC-AB

• U.S. Patents and Trademark Office grants two patents for Bugcrowd’s proprietary systems and methods

• How to prevent chargeback fraud in your online business?

• Security Advisory Regarding HiveNightmare

• Cinq lectures dignes d’intérêt : L’hygiène des mots de passe – Le premier pas vers une meilleure sécurité

• 6 claves de Gartner contra el ransomware

• Cloudflare reaches final step before full FedRAMP authorization

• SAP unveils its financial results and increases revenue, profit outlook

• Chris Riley joins Avanan as VP of Enterprise Sales

• ionir announces Mike Wall as CEO

• Risk analysis for DEF CON 2021

• Supply Chain Disruption Cost Multinational Companies $4 Trillion Last Year. Don’t Let Lax Cybersecurity Be the Cause

• Venmo Takes Another Step Toward Privacy

• IT Security News Daily Summary 2021-07-21

• AI sifts through video data to spot fires

• TSA tightens cyber rules for pipelines

• ‘Blockchain light’ may help Army ensure data trustworthiness

• Japanese government official says Olympic ticket data leaked

• A Purposeful Mission and a Culture of Innovation Fuels Balbix

• Benefits of multi-factor authentication

• Infographic – 7 Common SSL/TLS Certificate Errors and How to Avoid Them

• Everything Cybereason at the Black Hat 2021 Virtual Conference

• Can JADC2 fly without budget reform?

• How MLOps can bring government’s AI visions to life

• How to activate Microsoft Defender Application Guard in Windows 10

• Google Cloud Introduces New Zero Trust Offerings for Government

• Serial Swatter Who Caused Death Gets Five Years in Prison

• PrintNightmare: How To Check If Your Systems Are Still Vulnerable

• Guntrader – 112,031 breached accounts

• Cheers to the Winners of EFF’s 13th Annual Cyberlaw Trivia Night

• Spanish cops cuff Brit bloke accused of playing role in 2020 celeb Twitter hijacking

• US House terminates deal with iConstituent after company waited days to raise ransomware alarm

• Patch now: Linux file system security hole, dubbed Sequoia, can take over systems

• Saudi Aramco Facing $50M Cyber Extortion Over Leaked Data

• Your Work Email Address is Your Work’s Email Address

• How to Install Apple’s Beta Firmware on AirPods Pro

• NSO Exploits Still Remain Mysterious: ZecOps Can Help You Fight Back

• Senate breach disclosure bill targets agencies, contractors, infrastructure

• Apple Security Under Scrutiny Amid Fallout from NSO Spyware Scandal

• U.S. FTC Commits to Fighting Against Unlawful Repair Restrictions

• Elon Musk says Tesla will likely start accepting bitcoin again

• Introducing Bounty Awards for Teams Mobile Applications Security Research

• Should we use AI in cybersecurity? Yes, but with caution and human help

• BSides Vancouver 2021 – Petr McAllister’s ‘How To Secure Microservices Without Traditional Firewall’

• Apple Confirms iOS 14.7 Fixes WiFi Bug and Many Other Vulnerabilities

• Twitter Testing Internal ‘Dislike’ Button for Tweet Replies

• New to GovCloud: Falcon Managed Detection and Response Transforms Government Security

• Defining Log Management: The Importance of Logging and Best Practices

• iOS Engineering Lead and Senior Manager Thibault Martin-Lagardette on Building a More Diverse Workforce (and Market-leading Products)

• What is a digital certificate?

• NPM Package Steals Passwords via Chrome’s Account-Recovery Tool

• France ANSSI agency warns of APT31 campaign against French organizations

• This Chat is Being Recorded: Egregor Ransomware Negotiations Uncovered

• Google Cloud Introduces Security Tools for the Public and Private Sectors

• Russian Cybercriminal Levashov Sentenced to Time Already Served

• Ransomware Attack on UK Rail System – Spray and Pray or Targeted?

• BSides Vancouver 2021 – Filipi Pires’ ‘Discovering C&C In Malicious PDF With Obfuscation, Encoding And Other Techniques’

• The Joy of Tech® ‘Facebook Is Killing People!’

• 22-Year-Old UK Citizen Arrested for 2020 Twitter Hack Affecting Apple

• The life and death of the ZeuS Trojan

• Indictments, Attribution Unlikely to Deter Chinese Hacking, Researchers Say

• New Cybersecurity Requirements for Pipeline Operators

• Work from Home is To Blame for Financial Services Cyberattacks

• Microsoft Acquires Cloud Security Start-up CloudKnox

• 2021 CWE Top 25 Most Dangerous Software Weaknesses

• Apple Releases macOS Big Sur 11.5 With Podcast App Updates and Bug Fixes

• Apple Releases iPadOS 14.7 With Apple Card Merging Option, Fix for 3.5mm Headphone Jack to USB-C Adapter Bug

• Why Current Botnet Takedown Jurisprudence Should Not Be Replicated

• The White House Responded to the Chinese Hacks of the Microsoft Exchange Servers This Week. Is It Enough?

• Google Cloud’s Intrusion Detection Service attempts to make security ‘invisible’ but cost will be the big giveaway

• Beyond Ransomware: Four Threats Facing Companies Today

• What is Anomaly Detection in Cybersecurity?

• Verizon Releasing Fios TV App for Apple TV Tomorrow

• Instagram Stories Gains Built-In Text Translation Feature

• Are you READY for (ISC)² Security Congress?

• ‘Numberless’ bank cards could be the future: here’s why

• Your top five questions on biometric bank cards answered

• Reduce Instances of Covid-19 Phishing Email Attacks

• Amazon To Halt Covid Testing For US Workers

• Microsoft acquires privileged access management vendor CloudKnox Security

• Windows “HiveNightmare” bug could leak passwords – here’s what to do!

• Microsoft acquires security start-up CloudKnox

• The evolution of a matrix: How ATT&CK for Containers was built

• Microsoft acquires CloudKnox Security to offer unified privileged access and cloud entitlement management

• Mobile Phones in UK are vulnerable to Cyber Threats

• Millions of Printers Worldwide Vulnerable To The 16-Year-Old Bug

• The space wide web is ready to launch

• DNSFilter Raises $30 Million in Series A Funding

• Venmo Gets More Private—but It’s Still Not Fully Safe

• TSA Announces New Pipeline Security Order

• Why Apple’s Walled Garden Is No Match For Pegasus Spyware

• MacOS Being Picked Apart By $49 XLoader Data Stealer

• EU Plans To Make Bitcoin Transfers More Traceable

• Fortinet’s Security Appliances Hit By Remote Code Exec Vuln

• ID theft ghouls targeting Surfside victims is appalling, but no surprise

• We Now Have a National Cyber Director…But Is That Enough?

• Keep Virgin Media O2 Routers Out Of Direct Sunlight

• Low- and middle-income countries lack access to big data analysis – here’s how to fill the gap

• Kubernetes Cloud Clusters Face Cyberattacks via Argo Workflows

• Industrial Firms Warned of Risk Posed by Cloud-Based ICS Management Systems

• Malware Targeting Pulse Secure Devices

• Common Windows Malware Can Now Infect Macs

• New Malware “MosaicLoader” Targeting Users Searching for Pirated Software

• Hybrid Workplace Vulnerabilities: 4 Ways to Promote Online Safety

• Hackers embrace 5-day workweeks, unpatched vulnerabilities

• MAR-10336935-1.v1: Pulse Connect Secure

• MAR-10337580-1.v1: Pulse Connect Secure

• MAR-10337580-2.v1: Pulse Connect Secure

• MAR-10338401-1.v1: Pulse Connect Secure

• MAR-10338868-1.v1: Pulse Connect Secure

• XLoader, a $49 spyware that could target both Windows and macOS devices

• Back to work: Onslaught of personal devices could pose serious cybersecurity risk

• HiveNightmare zero-day lets anyone be SYSTEM on Windows 10 and 11

• TenSec 2019

• Exploiting Wi-Fi Stack on Tesla Model S

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• Tencent Security Keen Lab: Experimental Security Assessment of Mercedes-Benz Cars

• Cybersecurity risk: The number of employees going around IT security may surprise you

• Guide to the latest Black Hat 2021 Conference news

• “Summer of SAM”: Microsoft Releases Guidance for CVE-2021-36934, (Wed, Jul 21st)

• Deals: Shop All-Time Low Prices on 2021 Apple TV 4K Models, Starting at $169 for 32GB ($10 Off)

• Japan Sets Data Transfer Speed Record Of 319Tbps

• New Attacks on Kubernetes via Misconfigured Argo Workflows

• This password-stealing Windows malware is distributed via ads in search results

• French Launch NSO Probe After Macron Believed Spyware Target

• Oracle Releases July 2021 CPU With 342 Security Patches

• Apple Releases Security Updates

• Podcast | Social and Emotional Learning in K-12 Schools

• Ermetic Automates Identity Governance for Cloud Infrastructure

• Three Ransomware Attacks that Upped the Ante

• Sigstore: An open answer to software supply chain trust and security

• AirPods Pro Beta Firmware Now Available

• What Is an Intrusion Prevention System – IPS? Definition and Benefits

• Biden Backtracks Over Facebook ‘Killing People’ Comment

• Hackers co-opt Microsoft’s anti-phishing feature for phishing attacks

• Chrome 92 Brings Several Privacy, Security Improvements

• Malicious NPM Package Caught Stealing Users’ Saved Passwords From Browsers

• What Is an Intrusion Prevention System – IPS? Definition, How Does It Work, Benefits

• Core Scientific, a major U.S. bitcoin mining company, is going public via SPAC

• Tracking Malware and Ransomware Domains in 2021

• This New Malware Hides Itself Among Windows Defender Exclusions to Avoid Detection

• Now Available: Microsoft 365 Application for Duo Single Sign-On

• StrongPity APT Group Deploys Android Malware for the First Time

• Macron Among 14 Heads of States on Potential Spyware List

• Caliente Bandits Target Spanish Speaking Individuals to Spread Bandook Malware

• The Security Startup Ecosystem and the Trends Cisco is Watching

• Malware, Cybercrime and Cloud Security

• DNSFilter nabs $30M to fight DNS threats with AI

• Chrome just added these big new security and privacy features

• ‘Where’s my iPadOS 14.7 update?’

• Cybersecurity lags behind as IoT devices proliferate, according to a new report

• Zero Trust, We Must

• Millions of Devices Affected by Vulnerability in HP, Samsung, Xerox Printer Drivers

• TSA issues second cybersecurity directive for pipeline companies

• Cybercriminals May Be Targeting Tokyo 2020 Olympic Games, FBI Warns

• New bill would make some companies report cyberattacks to the government

• Apple Delays Staff Office Return As Covid Cases Rise

• Check Point R81.10 AI & ML Driven Threat Prevention and Security Management

• Apple confirms iOS 14.7 unlocking bug headache, especially for enterprise users

• Chrome browser just added these new security and privacy features

• Moving OT to the cloud means accounting for a whole new host of security risks

• Fortinet plugs RCE hole in FortiManager and FortiAnalyzer (CVE-2021-32589)

• Linux Kernel Vulnerability Allows Hackers to Acquire Root Privileges on Most Distros

• Short Édition – 505,466 breached accounts

• Levashov Walks. Russian Spam King gets slap on the wrist

• Phone Of France’s Macron Targetted By NSO Pegasus – Report

• $49 malware receives major upgrade to strike both Windows and macOS PCs

• This new password-stealing Windows malware is distributed via adverts for cracked software

• Adobe Patches 21 Vulnerabilities Across Seven Products

• XLoader Windows InfoStealer Malware Now Upgraded to Attack macOS Systems

• DuckDuckGo Launches a New Email Privacy Service

• New bill would make some companies report cyber attacks to the government

• MacOS Being Picked Apart by $49 XLoader Data Stealer

• [eBook] A Guide to Stress-Free Cybersecurity for Lean IT Security Teams

• Several New Critical Flaws Affect CODESYS Industrial Automation Software

• Managed Detection and Response in Q4 2020

• Google Maps Gains Expanded Transit Crowdedness Predictions

• Best Mitre D3FEND advice to harden Windows networks

• Digital Wallets And Driver’s Licenses | Avast

• Joker billing fraud malware found in Google Play Store

• Easily exploitable, unpatched Windows privilege escalation flaw revealed (CVE-2021-36934)

• Hackers Might Gain Admin Rights Through a 16-years-old Vulnerability

• Safe Security raises $33M to manage and mitigate cyber risk

• Fortinet Patches Remote Code Execution Vulnerability in FortiManager, FortiAnalyzer

• Salvation Army Achieves Game-Changing Cybersecurity Posture with LogRhythm

• Apple Music to Livestream Premiere of Kanye West’s New Album ‘Donda’ on Thursday

• 15 000 tonnes of illegal food and beverages off the market

• iPhone Supplier Foxconn Says China Floods Not Impacting Operations

• Apple’s iPhone is the Easiest to Snoop on Using the Pegasus, Says Amnesty

• Aqara HomeKit Accessories Now Available From Online Apple Store in Europe

• Looking for adding new detection technologies in your security products?

• Security and Culture are Key to Digital Transformation

• New Bill Could Force U.S. Businesses to Report Data Breaches Quicker

• IT/OT Convergence or IT/OT Integration?

• New Windows and Linux Flaws Give Attackers Highest System Privileges

• ASX issues caution for Aussies investing in crypto and contemplates exchange regulation

• Defending Against Pervasive Spyware

• Product showcase: Action1 RMM

• Google offers additional security features for its cloud users

• Are advertising unique IDs anonymous?

• LPE flaw in Linux kernel allows attackers to get root privileges on most distros

• Kelihos botmaster Peter Levashov gets time served

• Despite good defensive measures, ransomware continues to get in

• A unified approach is the future of data backup

• Researchers smash internet speed record

• China dismisses Exchange attribution and accuses US of whitewashing its cyber heists

• How Artificial Intelligence is Changing Healthcare

• DDoS attacks increased 33% in H1 2021

• Security Evangelist or Zealot – Where to Draw the Line

• How can Digital First banking benefit financial institutions?

• Fast track to StateRAMP for more secure state and local government

• Air Force taps Google Cloud for aircraft maintenance system

• Google Enhances Protections in Cloud Armor Web Security Service

• Image encryption technique could keep photos safe on popular cloud photo services

• What is DNS Attack and How Does it Work?

• AirPods 3 Mass Production Said to Kick Off in August

• Most companies still rely on manual tools and tech for internal audit processes

• ISC Stormcast For Wednesday, July 21st, 2021 https://isc.sans.edu/podcastdetail.html?id=7594, (Wed, Jul 21st)

• Nikkei: 2022 iPhone SE to Feature A15 Chip, 5G, and 4.7-Inch Display

• Dropbox continues building tools to protect personal content

• Europe’s IT and business services market propelled by growing cloud-based services adoption

• Thales’s biometric payment card provides users with increased security and convenience

• Stellar Cyber XDR Kill Chain allows security analyst teams to disrupt cyberattacks

• Votiro introduces an AWS S3 bucket connector to reduce risk of weaponized files in storage buckets

• Vocera Edge maximizes EHR investments and empowers mobile clinicians

• Make-me-admin holes found in Windows, Linux kernel

• DHS lacks comprehensive strategy to counter violent extremism, report says

• Some URL shortener services distribute Android malware, including banking or SMS trojans

• The Security Digest: #70

• How to build a security-first culture with remote teams

• Google Cloud’s zero trust offerings help U.S. government organizations guard against cyberthreats

• Hide yo’ operating systems: Make-me-admin holes found in Windows, Linux kernel

• How China’s Hacking Entered a Reckless New Phase

• Bosch upgrades its Dicentis system server with new hardware from HP

• Mastercard enhances its card program for cryptocurrency wallets and exchanges

• Safety Vision WiFi 6e reduces download time from hours to minutes

• Virtium launches StorFly Series 3 M.2 NVMe SSD platform designed for extreme environments

• Oh great, now I’ve gotta check my phone for Pegasus spyware?

• Hackers use single bit change in Intel CPU register to evade detection

• What We Know About the Secretive Company Behind the Pegasus Spy Software

• China hits back at the US and its allies for “fabricated” hacking allegations

• ‘Flexgate’ Class Action Lawsuit Over Faulty MacBook Pro Displays Dismissed by Judge

• CoreSite enhances connectivity in Silicon Valley with Google Cloud Dedicated Interconnect

• Infortrend releases U.2 SSD for EonStor CS scale-out NAS

• Journo who went to prison for 2 years for breaking US cyber-security law is jailed again

Generated on 2021-07-22 23:55:42.404357