IT Security News Daily Summary 2021-08-24

• Orgs have had the same digital security vulnerabilities for the last 4 years

• OnlyFans Content Creators Are the Latest Victims of Financial Censorship

• Looking Back at Executive Order on Cybersecurity and What it Means for Your Business

• Silver Optis: Innovative and Socially Conscious Technologies at Black Hat

• Five Steps to Get a Cybersecurity Job

• B. Braun updates faulty IV pump after McAfee discovers vulnerability allowing attackers to change doses

• Scammer Infiltrated Thousands of iCloud Accounts to Find Nude Photos

• OnePercent ransomware group hits companies via IceID banking Trojan

• Cyber-thieves Scam New Hampshire Town Out of $2.3m

• 38 million records exposed in Microsoft Power apps misconfiguration

• Poly Network Recoups $610M Stolen from DeFi Platform

• Facebook Backtracks, Releases Shelved Transparency Report That Made The Company Look Bad

• Cybersecurity for Executives: How to Talk About Risk Management

• New CISA Blacklist: What It Means For You

• You can remove or update a single entry from the SSH known_hosts file

• Don’t get rugged: DeFi scams go from zero to $129 million in a year to become top financial hack

• FBI Issues Ransomware Group Flash Alert

• Nokia-Owned SAC Wireless Discloses Data Breach

• Hulu Now Supports HDR on Apple TV for Original Content

• Apple, Amazon, Microsoft CEOs To Discuss Cybersecurity At White House

• US Signs Cybersecurity Agreements with Singapore

• ‘Asphalt 8: Airborne’ and Zelda-Inspired ‘Baldo’ Coming to Apple Arcade on Friday

• Deals: Get 25% Off Mophie Charging Accessories and More During ZAGG’s Sitewide Flash Sale

• Can a VPN Protect You from Hackers? How It Keeps You Secure – And How It Doesn’t

• Pegasus Spyware Uses iPhone Zero-Click iMessage Zero-Day

• South Korea Could Ban Apple From Requiring Developers to Use In-App Purchase System

• Tencent Security Keen Lab: Experimental Security Assessment of Mercedes-Benz Cars

• TMF, cyber EO drive modernization at Labor, CIO says

• Why VA must keep Vista healthy

• WhatsApp New Modified Version Installs Triada Trojan

• Mr. White Returns All $610 Crypto Assets Stolen in Cyberattack

• How a gaming mouse can get you Windows superpowers!

• New zero-click exploit used to target Bahraini activists’ iPhones with NSO spyware

• T-Mobile Wins Title of Fastest U.S. Carrier in 2021 5G Test

• CISA Releases Five Pulse Secure-Related MARs

• CrowdStrike trading higher today ahead of its addition to Nasdaq-100

• Proofpoint wins $14m from ex-VP and French email security rival in IP theft court battle

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• CISSPs From Around the Globe: An Interview with Adesoji Ogunjobi

• How to Protect Yourself From a Server-Side Template Injection Attack

• HYCU initiative offers free evaluation for ransomware recovery prospects

• Custom WhatsApp Build Delivers Triada Malware

• Survey: Boards want to invest more in technology, data analytics

• Risk officers and board members don’t agree on use of tech and data in business

• Researchers Warn of 4 Emerging Ransomware Groups

• MAR-10333243-3.v1: Pulse Secure Connect

• CISA Releases Five Pulse Secure-Related MARs

• 38 million personal identifiable information exposed in Microsoft Power Apps data leak

• Joe Biden to meet US Tech companies CEOs to protect National Infrastructure against Cyber Attacks

• Intellectual property protection: 10 tips to keep IP safe

• Tesla’s Elon Musk Says Latest Self-Driving Beta Is ‘Not Great’

• New iOS Zero-Click Exploit Defeats Apple ‘BlastDoor’ Sandbox

• OpenSSL Vulnerability Can Be Exploited to Change Application Data

• MAR-10336935-2.v1: Pulse Secure Connect

• MAR-10333243-3.v1: Pulse Secure Connect

• MAR-10338401-2.v1: Pulse Secure Connect

• MAR-10334057-3.v1: Pulse Secure Connect

• Action is Critical in US Cyber Policy

• Third-Party Risk Management — Don’t Collaborate Without It!

• Google Health Disbanded; Staff Sent To Other Divisions

• FluBot Android malware now targets UK banks

• Singapore and the U.S. Will Work More Closely on Cybersecurity

• APT41 Resurfaces as Earth Baku With New Cyberespionage Campaign

• Kickstart Robust Cloud Security with the Industry’s Best Website Security Checklist

• Microsoft Power Apps misconfiguration exposes data from 38 million records

• Tech CEOs To Meet With Biden Over Infrastructure Security

• Microsoft Spills 38 Million Sensitive Data Records

• Video Shows Moment Iranian Prison Realizes It Was Hacked

• Windows 10 Admin Rights Gobbled By Razer Devices

• Rumor: Apple Watch Series 7 to Come in Larger 41mm and 45mm Sizes

• Hundreds of Thousands of Devices Using Realtek SDK Targeted by Mirai Botnet

• Criminals exploited weak checks and old tech to pull off vast COVID benefit fraud

• OnlyFans Bans ‘Sexually Explicit Content’, Blames Payment Giants

• 13 Million Security Incidents Were Attempted to Hack Linux Systems in 2021

• Overmedicated: Breaking the Security Barrier of a Globally Deployed Infusion Pump

• McAfee Enterprise ATR Uncovers Vulnerabilities in Globally Used B. Braun Infusion Pump

• Hackers Claim to Have Data of 70 Million AT&T Customers

• US Military Personnel Lost Over $822m to Cyber Frauds

• Building a DevSecOps culture and shifting security left

• Spotify Competes With Apple by Expanding Podcast Subscriptions Program

• Cybercriminal Gives Back the Stolen Cryptocurrency and Receives a 500K Reward

• Amazon, Apple and Microsoft CEOs reportedly to attend White House cybersecurity meeting

• Threat Modeling: The Key to Dealing With 5G Security Challenges

• FBI Shares Details on “OnePercent Group” Ransomware Operators

• Triada Trojan in WhatsApp mod

• The Apple Client-Side Scanning System

• Amazon, Apple and Microsoft CEOs to reportedly attend White House cybersecurity meeting

• Realtek-based routers, smart devices are being gobbled up by a voracious botnet

• Microsoft Power Apps Data Leak Impacts 38 Million People

• XDR Firm Hunters Raises $30 Million in Series B Funding

• Deals: All-Time Low Prices Arrive for Apple’s 12.9-inch iPad Pro Magic Keyboard and Smart Keyboard Folio

• Today Marks 10 Years Since Tim Cook Became Apple’s CEO

• More and More Companies Are Getting Hit with Ransomware

• Intezer Analyze Transforms for Maltego

• Hunters advances adoption of its XDR security platform with $30M

• IT Leaders Fear Being Targets of Rising Nation-State Attacks

• Effective Threat-Hunting Queries in a Redacted World

• Details Disclosed for Zoom Exploit That Earned Researchers $200,000

• Hackers Could Up Medication Doses Through Infusion Pump Flaws

• Bahraini Activists Targeted Using a New iPhone Zero-Day Exploit From NSO Group

• Modified Version of WhatsApp for Android Spotted Installing Triada Trojan

• Leaker: Upcoming MacBook Pro to See Price Hike Over Current Model, Equal Performance Across 14 and 16-Inch Sizes

• Iranian Threat Actor Siamesekitten Spies on Israeli Organizations

• Poly Network Thanks ‘Mr. WhiteHat’ For Returning Stolen Crypto Totalling $610 million

• Researchers Warn of 4 Emerging Ransomware Groups That Can Cause Havoc

• Cybersecurity for Executives: How to Talk to Leaders About the Importance of Risk Management

• T-Mobile Sued Over Data Breach Affecting Millions of Customers

• US Organizations Targeted by OnePercent Ransomware Group, FBI Says

• 8 Best Motherboards for Ryzen 5 3600X 2021 – Review and Buying Guide

• 4 most dangerous emerging ransomware threat groups to watch

• Apple Urged To Drop CSAM Scanning Plans By Campaigners

• Fitbit Charge 5 Tracker Design and Features Leaked in New Video

• U.S. State Department Reportedly Hit By Cyber Attack

• UPS Phishing Campaign: Malware Is Distributed By Making Use of an XSS Flaw

• What CISOs need to know about Wi-Fi 6E

• CISA’s Joint Cyber Defense Collaborative: Why it just might work

• Micro Frontend Guide: Technical Integrations

• Nvidia’s ARM Purchase Raises ‘Significant Competition Concerns’ – CMA

• Diversity and Inclusion in Tech

• Microsoft, Google partner on eBPF

• Sumo Logic delivers on SOAR promise it made by acquiring DFLabs

• Apple, Microsoft and Amazon chiefs to meet Biden over critical infrastructure cyber attacks

• Researchers Show How Censorship Systems Can Be Abused for DDoS Amplification

• Mass Exploitation of Exchange Server ProxShell Bugs

• Microsoft Power Apps Tool Exposed 38 Million Records by Default

• Time to Fix High Severity Apps Increases by Ten Days

• Razer Device Plug-In grants Admin Rights on Windows 10 OS

• 38 Million Records Exposed from Microsoft Power Apps of Dozens of Organisations

• Triada Trojan in WhatsApp MOD

• Realtek SDK vulnerability exploitation attempts detected (CVE-2021-35395)

• Nokia Branch SAC Wireless Had Suffered a Data Breach Following a Conti Ransomware Incident

• 8 Free and Open Source Patch Management Tools for Your Company

• The Top 10 Highest Paying Jobs in Information Security – Part 2

• FBI flash alert warns on OnePercent Group Ransomware attacks

• Chinese auto-maker accused of altering data after fatal autonomous car accident

• Looking for adding new detection technologies in your security products?

• 38 Million Records Exposed Due to Microsoft Misconfiguration

• Hacker Behind $600 Million Crypto Heist Returned Stolen Funds

• Realtek SDK flaws exploited to deliver Mirai bot variant

• Three reasons why ransomware recovery requires packet data

• Ransomware tips by CISA

• Google bans the following cryptocurrency apps for data security

• What is the HIPAA Security Rule? Three safeguards to have in place

• Kubescape helps admins manage Kubernetes securely

• How do I select an automated red teaming solution for my business?

• Top Cybersecurity Podcasts

• Security and compliance still a challenge for container architectures

• DLL side-loading Attack Takes Advantage of Windows Search Order to Inject Malicious DLL

• Adverse security implications of enterprises network overprovisioning

• How Tripwire Can Help to Defend Against Ransomware

• IoT market to reach $1.5 trillion by 2027, security top priority

• Zylpha launches Adobe Sign integration for iManage10 to eliminate the risk of documents being lost

• Guardicore Centra enables security teams to stop ransomware and lateral movement

• Palo Alto Networks Cortex XDR 3.0 automates threat detection and investigation across cloud environments

• Konni RAT variant targeting Russia in ongoing attack campaign

• SophosLabs: Research shows BlackMatter ransomware is closely acquainted with DarkSide

• AdvoLogix and iManage provide a cloud-scale solution for the legal industry

• Hackers wipe out Coinbase customer accounts

• Security Camera Hacking: It Can Happen to You. Here’s How to Stop It

• Naval Criminal Investigative Service Nominated in 2021 ‘ASTORS’ Awards

• NICE adds five partners to Evidencentral Marketplace to increase incident response

• Glory partners with Paysafe to improve access to the digital economy for consumers

• Microsoft Spills 38 Million Sensitive Data Records Via Careless Power App Configs

• Facebook Bringing Voice and Video Calling Back to Main App After Moving Them to Messenger

• Apple CEO Tim Cook to Meet With U.S. President Joe Biden to Discuss Cybersecurity

• F5 announces new projects to scale modern application architectures

• Elastic acquires build.security to enforce security actions for cloud native environments

• What You Need to Know About Linux Rootkits>

• Trent Anderson joins Bluebird Network as CRO

• ACI Worldwide reveals that its Fraud Management solution protects more than one billion consumers

• Poly Network says it’s got pretty much all of that $610m in stolen crypto-coins back

• Google issues another security threat warning – fourth time in two months

• Key Takeaways from the Linux Threat Report

• Protecting citizen-facing staff from phishing starts with a people-first approach

• Illinois takes a big hit on COVID-related unemployment fraud

• Price tag on NY’s vaccination app keeps rising

• CISA updates ransomware tips

• Get paid to improve Linux and open-source security

• AT&T Denies Data Breach

• Pentagon pushes ahead with COVID vaccine mandate

• Why zero-trust models should replace legacy VPNs

• Razer to fix Windows installer that grants admin powers if you plug in a mouse

• IT Security News Daily Summary 2021-08-23

• Palo Alto beats Q4 estimates with strength in large customer transactions

• Trend Micro’s Linux Threat Report identifies the most vulnerable distributions and biggest security headaches

• How to create a hidden, nearly undeletable folder in Windows 10

• TippingPoint Threat Protection System Certified by NetSecOPEN

• CISA recommends immediately patch Exchange ProxyShell flaws

• 38 million records exposed by misconfigured Microsoft Power Apps. Redmond’s advice? RTFM

• Olivia Rodrigo Partners With Apple For Custom AR Face Masks Used in New ‘Brutal’ Music Video

• Apple Expands Native Maps Rating and Review Feature to the U.S.

• SSDF: The Key to Defending Against Supply Chain Cyberattacks

• Want to lead in IT? Find a subject to master.

• Microsoft Power Apps misconfiguration exposes 38 million data records

• Poly Network Hacker Returns Remaining Funds

• ACLU Advocate Reining in Government Use of Face Surveillance, Champion of Privacy Rights Research, and Data Security Trainer Protecting Black Communities Named Recipients of EFF’s Pioneer Award

• Pay Now or Pay Later: Don’t Procrastinate When It Comes to Preventing Ransomware

• Biden names slate of FSIP appointees

• ProxyShell Attacks Pummel Unpatched Exchange Servers

• Ransomware Groups Look for Inside Help

• 3 Ways an IP Geolocation API Can Help with Cybersecurity

• CISA: ProxyShell flaws being actively exploited, patch now

• Apple’s ‘The Tragedy of Macbeth’ to Premiere at the London Film Festival

• Do you know what your supply chain is and if it is secure?

• Razer software bug lets anyone gain admin rights on Windows PC

• What’s *THAT* on my 3D printer? Cloud bug lets anyone print to everyone

• Patch now! Microsoft Exchange is being attacked via ProxyShell

• Worried ransomware merchants know more about file storage than you do? You should be…

• Hackers Leak Footage of Iranian Prison

• The Challenges of Understanding Taliban Finance

• Photos: Windows 365 Business in action

• Elastic to Acquire build.security for Cloud Security Expansion

• Vulnerability Summary for the Week of August 16, 2021

• How Vodafone Global Security Director creates an inclusive and secure workplace

• Lockfile Ransomware hackers again targeting Microsoft Exchange Server Vulnerability

• BrandPost: Better Cyber Hygiene is Critical to Preventing a Damaging Cyberattack

• Executive Spotlight: Q&A with Chief Information Officer, Scott Howitt

• Windows 10 Admin Rights Gobbled by Razer Devices

• Vulnerability Summary for the Week of August 16, 2021

• Are you using a Sophos UTM appliance? Be sure it is up to date!

• 2021 Q3 Updates from Our Chairperson and CEO: Membership Milestones and More

• Realtek SDK Vulnerabilities Exploited in Attacks Days After Disclosure

• Apple Shares ‘The Morning Show’ Season 2 Trailer

• What is Ransomware?

• US State Department Reportedly Suffered Cyber Attack

• spear phishing

• MD5

• Managing Privileged Access to Secure the Post-COVID Perimeter

• Windows 365 Business: How this new tool can help your organization

• State Department Allegedly Hit by Cyberattack

• US State Department Hit By Cyber-Attack

• Attackers Actively Exploiting Realtek SDK Flaws

• The US Military May Soon Declassify A Secret Space Weapon

• Crypto Platform Poly Network Says Hacked Funds Returned

• The State Department Has Reportedly Been Hacked

• Ryan Reynolds and Rob McElhenney Demand Ted Lasso Biscuits in Satirical Letter Addressed to Apple TV+

• LockFile Ransomware Exploits PetiPotam To Attack Windows Domains

• Indra Group and Iran Railway Attacks May Be Related

• Report: Cyberattacks on Education Increased by 29% Worldwide

• T-Mobile Customers Sueing the Company Over Data Breach

• Cyber Warfare May be Losing Its Advantage of Deniability

• Cloudflare Mitigated Record-Setting 17.2 Million RPS DDoS Attack

• Private Details of 70M AT&T Users Offered For Sale on Underground Hacking Forum

• Researchers Detail Modus Operandi of ShinyHunters Cyber Crime Group

• Navigating Vendor Risk Management as IT Professionals

• PowerShell Obfuscation

• Deals: Anker’s New Sale Includes Discounts on Soundcore Earbuds, MagSafe-Compatible Car Mount, and More

• LockFile Ransomware Compromises Microsoft Exchange via ProxyShell

• DDoS Attack. How Distributed Denial of Service Works and How to Prevent It

• One material with two functions could lead to faster memory

• Patch now! Microsoft Exchange attacks target ProxyShell vulnerabilities

• 8 Online Gaming Security Risks – Are You Protected?

• Can Your Wearable Health Monitors Be Compromised?

• Details Disclosed for Critical Vulnerability in Sophos Appliances

• 38M Records Exposed Online—Including Contact-Tracing Info

• Top 15 Vulnerabilities Attackers Exploited Millions of Times to Hack Linux Systems

• T-Mobile Offering Free Year of Apple TV+ to Select Customers Starting Wednesday

• Hacker behind $600 million crypto heist returns final slice of stolen funds

• Autonomous car insurance drives new opportunities

• Apple Store Purchases Made With Apple Pay in U.S. Will Support the National Park Foundation This Week

• Data Brokers Are Advertising Data on U.S. Military Personnel

• PetitPotam Vulnerability Exploited in Ransomware Attacks

• CISA Warns Organizations of ProxyShell Attacks on Exchange Servers

• Internet Browser Vulnerabilities Exploited by North Korean Hackers to Implant Malware

• Google Docs Scam Still Pose a Risk

• New Evidence Shows Strong Connection Between Diavol Ransomware and TrickBot Gang

• ShadowPad Malware – A Popular Choice Among Chinese Espionage Groups

• T-Mobile Acknowledges Breach of Customer Data, Launches Probe

• Pakistan’s FBR Suffered Cyber Attack – Network Access Sold On Dark Web

• A Complete Guide to Perform External Penetration Testing on Your Client Network | Step-by-Step Methods

• ProxyShell vulnerabilities actively exploited to deliver web shells and ransomware

• Razer Synapse Vulnerability: with a Simple Mouse Plugging in, Windows System Privileges Are Achieved

• A week in security (August 16 – August 22)

• I turned on CSP and all I got was this crappy lawsuit!

• Cloud Security Posture Management: Getting It Right

• Singapore, US pledge deeper collaboration in cybersecurity

• JPMorgan Chase Bank Notifies Customers of Data Exposure

• How to Use Apple’s Hide My Email

• US military personnel defrauded into losing $822m through scams

• UK Regulator Raises Serious Concerns Over Nvidia-Arm Deal

• Infosecurity Europe Moves to ExCeL London in 2022

• Touch ID Not Returning With iPhone 13, Despite Apple Testing Under-Screen Sensor

• FCW Insider: August 23, 2021

• Quick Hits

• T-Mobile Breach Now Affects 54.6 Million Individuals

• Gaming-related cyberthreats in 2020 and 2021

• IBM Telum Processor improves the ability to intercept fraud in real-time

• New LockFile Ransomware Variant Exploits “PetitPotam” Bug

• Microsoft Increasing Price of Commercial ‘Microsoft 365’ Plans Next Year

• Kubernetes hardening: Drilling down on the NSA/CISA guidance

• The T-Mobile data breach: A timeline

• How attackers could exploit breached T-Mobile user data

• Number of T-Mobile Customers Confirmed to Be Affected by Hack Reaches 54 Million

• How To Identify Phone Scams | Avast

• LPE zero-day flaw in Razer Synapse allows attackers to take over Windows PCs

• How to Use Hide My Email

• Trying to register your antivirus in Windows Security Center?

• Cyber Mindfulness Quiz | Avast

• The US State Department was Recently Hit by a Cyber Attack

• Memorial Health System forced to cancel surgeries after ransomware attack

• Why automated pentesting won’t fix the cybersecurity skills gap

• Cloudflare Recorded 17.2 Million Request-Per-Second (rps) – Largest HTTP DDoS Attack Ever Detected

• Things that are easy to miss in the race towards hybrid working and the cloud

• Cyber Attacks on Global Education Sector witness a jump

• Details of US State Department Cyber Attack

• 58% of IT leaders worried their business could become a target of rising nation state attacks

• ICS vulnerabilities disclosed in H1 2021 rose by 41%

• Report: Agencies aren’t fielding interactive digital forms

• 446 Australian breach notifications with 30% of system faults found after a year

• Key email threats and the high cost of BEC

• The impact of eCommerce fraud on retailers and shoppers

• Identity management org SailPoint unveils no-code tool

• Using Threat Modeling to Boost Your Incident Response Strategy

• Facebook sat on report that reveals most-shared post for months was questionable COVID story

• Colocation services market to grow steadily over the next 5 to 7 years

• The average price of access to a hacked company in the darknet reached $5,400

• eBook: The Psychology of Cyber

• NextDC joins Fujitsu and Equinix as latest certified to store Canberra’s sensitive data

• UK competition authority raises alarm over Nvidia and Arm merger

• IBM finds ASX outage the result of trade platform not being ready for go-live

Generated on 2021-08-24 23:55:49.131054