IT Security News Daily Summary 2021-08-25

• Pittsburgh stands up citywide fiber network

• Facial recognition tech: Not just for IDing criminals

• IG council scouting for data analytics tools

• IRS beefs up compute power for fraud detection

• Elastic Q1 revenue tops expectations, offers surprise profit, raises year view

• Australia Passes Identify and Disrupt Bill

• The Stealthy iPhone Hacks That Apple Still Can’t Stop

• What’s New With HomeKit in iOS 15

• Watch as hackers disrupt Iran’s prison computers; leak live footage

• Facing foreign election foes, states hire ‘cyber navigators’

• Report: Facebook Won’t Share Data With Researchers, Academics, Or The White House

• Glitch Exposed Data of Alleged Treaty Violator to FBI

• ProxyLogon flaw, evil emails, SQL injections used to open backdoors on Windows boxes

• What the Norton-Avast Merger Means for Cybersecurity

• Kanye’s upcoming album is a scam magnet, Kaspersky finds

• Revere Health Data Breach Impacts Cardiology Patients

• President Biden meets with business leaders on cybersecurity

• Why supply chain security is a concern for the White House Cyber Summit

• DHS stands up new excepted service for cyber talent

• Win10 Admin Rights Tossed Off by Yet Another Plug-In

• FIN8 group used a previously undetected Sardonic backdoor in a recent attack

• Apple TV+ Shows ‘For All Mankind’ and ‘Calls’ Win Emmy Awards

• Apple to Release iOS 15 iCloud Private Relay as a Public Beta

• SolarWinds and the Holiday Bear Campaign: A Case Study for the Classroom

• Disrupting Cryptocurrencies 2: Lessons From the Poly ‘Hack’

• Lawfare Live: Scott Anderson and David Priess on Afghanistan and What Comes Next

• Intern with Lawfare!

• Cybersecurity is the issue of the decade: IBM chair & CEO Arvind Krishna

• New Campaign Sees LokiBot Delivered Via Multiple Methods

• Poly Network Hacker Returns All Stolen Tokens, Offered Job

• Apple Seeds Seventh Beta of tvOS 15 to Developers

• Apple Seeds Seventh Beta of watchOS 8 to Developers

• Apple Seeds Seventh Betas of iOS and iPadOS 15 to Developers

• The best browsers for privacy and security

• How to Quantify the Actual Cost of a Data Breach for Your Own Organization

• Best security system 2021: Protect your home & office

• Best security camera 2021: Secure your home or office

• Mirai-style IoT botnet is now scanning for router-pwning critical vuln in Realtek kit

• Neural Fuzzing: A Faster Way to Test Software Security

• Watchdog Investigation Finds ‘Major Weaknesses’ in Apple’s App Store Child Safety Measures

• How Has CAP Certification Evolved to Lead in Risk Management?

• This feed has moved and will be deleted soon. Please update your subscription now.

• Names of new ransomware groups that are on rise

• AWS Unveils Cloud Security Competency Program for MSSPs

• Apple Celebrates National Parks With Apple Pay Donations, Apple Watch Challenge, and Park-Related Content

• Drama Series ‘The Changeling’ Coming to Apple TV+

• Cybersecurity’s next fight: How to protect employees from online harassment

• OnlyFans Suspends Decision To Ban Porn Content

• OpenSSL Releases Security Update 

• VMware Releases Security Updates for Multiple Products 

• iPhone 13 May Feature Upgraded Face ID That Works With Masks and Foggy Glasses

• A New iPhone Zero-Click iMessage Zero-Day Used to Deploy Pegasus Spyware

• Best security system 2021: Secure your home or office

• US Media, Retailers Targeted by New SparklingGoblin APT

• HackerOne launches AWS certification paths, pen testing service

• 70% of Cyber Pros Believe Cyber Insurance is Exacerbating Ransomware

• FBI Releases Indicators of Compromise Associated with OnePercent Group Ransomware

• OpenSSL Releases Security Update 

• VMware Releases Security Updates for Multiple Products 

• Surveillance of the Internet Backbone

• Tech and finance leaders head to White House cybersecurity summit

• US Approves Licence For Huawei To Purchase Car Chips – Report

• How safe is a quantum-safe virtual private network?

• Vade Secure Ordered to Pay $14 Million to Proofpoint in IP Theft Lawsuit

• Innovative Recruitment Practices Can Close the Cyber Skills Gap

• F5 Releases August 2021 Security Advisory

• FBI Releases Indicators of Compromise Associated with OnePercent Group Ransomware

• These Four Rising Gangs Could Be Your Next Major Security Threat

• Proofpoint Wins $14 Million In IP Theft Court Battle

• iCloud+’s New Custom Email Domain Feature Now Available in Beta

• White House cybersecurity advisor on meeting with CEOs after wave of high-profile hacks

• F5 Releases August 2021 Security Advisory

• Watch now: 2021 Red Hat Security Symposium on-demand

• Red Hat's open approach to vulnerability management

• The Business of Fraud: SIM Swapping

• Facebook Messenger Celebrates Its 10th Birthday With Poll Games, Birthday Cash Gifting, and More

• Deals: Best Buy Takes $300 Off iPhone 12 Mini and $100 Off iPad Mini

• iPhone Serves as Gateway to iPad and Apple Watch Sales, but Mac, Apple TV, and HomePod Lag Behind

• Want to be a white hat hacker? Train with this $10 bundle deal

• IBM launches new SASE service to bolster zero-trust enterprise security

• VMware Patches High-Severity Vulnerabilities in vRealize Operations

• Apple Preparing to Open First Retail Store in Hunan Chinese Province

• Zoom Updated With ‘Raise Hand’ and ‘Thumbs Up’ Gesture Recognition on iPad

• Win 10 Admin Escalation With Razor Bug – Expert Insight

• Phishing by the numbers – July 2021

• Mice “taking over the world!”, one Windows machine at a time

• Blue Origin Loses Key Staff, Amid NASA Contract Battle – Report

• Three Key Benefits of Adopting SASE With a Services Partner

• Survey: 1 in 4 Facility Managers Experienced OT System Breaches

• Preventing your Cloud ‘Secrets’ from Public Exposure: An IDE plugin solution

• ‘Today at Apple’ Session Explores Taking Expressive Pet Portraits

• Hackers Impersonate OpenSea Employees in an Attempt to Steal Cryptocurrency Assets and NFTs

• COVID19 Vaccine Fraudsters Targeted Health Authorities in 40 Countries

• Researchers Uncover FIN8’s New Backdoor Targeting Financial Institutions

• Lessons from a Former K-12 Teacher: How Duo Brings Cybersecurity to Head of the Class

• Virgin Hyperloop Touts Individual Pod Concept

• Leaked Footage Shows Grim Conditions in Iran’s Evin Prison

• Thinking about CAP or CISSP? Here’s How They Compare.

• Cybersecurity startup investments more than doubled in H1 2021

• California Man Hacked iCloud Accounts to Steal Nude Photos

• Incident Response Firm BreachQuest Launches With $4.4 Million in Seed Funding

• Most Important Network Penetration Testing Tools for Hackers & Security Professionals

• The VC View: Digital Transformation

• Top 10 Best Motherboards for i9 9900K 2021 – Top Picks

• Did you give away your password in the comments section?

• South Korea Moves To Curb In-App Purchase Charges

• Biden, Tech Leaders Eye ‘Concrete Steps’ to Boost Cybersecurity

• Joker Virus is Back, Targeting Android Devices

• YouTube Premium Subscribers Can Now Use iOS Picture-in-Picture: Here’s How

• Medical Records of 12,000 Revere Health Patients Exposed in Phishing Attack

• Security blind spots persist as companies cross-breed security with devops

• Proofpoint awarded $13.5 million in IP theft lawsuit against Vade Secure

• Ransomware: These four rising gangs could be your next major cybersecurity threat

• Misconfigured Microsoft Power Apps Portals Exposed Millions of Records

• Drug Dealers Get 27 Years After Police Crack EncroChat Comms

• B.Braun Infusomat Pumps Could Let Attackers Remotely Alter Medication Dosages

• Popular WhatsApp Mod Spreads Malware on Android Devices

• How Windows admins can get started with computer forensics

• Accelerate Your Journey to AWS with IBM Security

• Cybercrime Losses Triple to £1.3bn in 1H 2021

• Nigerian Threat Actor Offers $1 million to Insiders for Planting Ransomware

• iPhone 13 to Launch on September 17, AirPods 3 on September 30, Claims Report

• Apple Supplier Luxshare Reports Record Growth After Securing iPhone 13 Orders

• Biden to host tech, finance and energy CEOs for security summit at White House

• Tech CEOs to Discuss Cybersecurity with Biden Today

• August 2021 Web Server Survey

• ShinyHunters group claims to have data of 70M AT&T customers

• Radiflow’s risk management platform for OT facilities allows CISOs to view all their sites on one dashboard

• Singapore further eases access to contact tracing devices

• New SideWalk Backdoor Targets U.S.-based Computer Retail Business

• Modified version of Android WhatsApp installs Triada Trojan

• Build your own Android security product

• New SideWalk Backdoor Targets U.S-based Computer Retail Business

• Why you need to make Microsoft 365 a 24/7 security priority

• The Third Generation of XDR Has Arrived!

• We’ve Got Next: Building the “Next” in CyberSecurity

• Palo Alto Networks Named a Leader in the 2021 Forrester ZTNA New Wave

• Samsung could use a TV Block feature to disable any of its TVs worldwide

• SubaGames – 6,137,666 breached accounts

• The Poly Network hack turned into career prospects

• Microsoft offers tips to secure Windows 365 Cloud PCs

• Ransomware news headlines trending on Google

• M1 taps 5G to enrich waterfront lifestyle, operations

• Hybrid work: How do you secure every identity on your network?

• How the pandemic delivered the future of corporate cybersecurity faster

• Coinminers, web shells and ransomware made up 56% of malware targeting Linux systems in H1 2021

• Navigating the Troubled Waters of Risk Management

• 40% of SaaS assets are unmanaged, putting companies at risk for data leaks

• 22% of cybersecurity incidents in H1 2021 were ransomware attacks

• Eatigo – 2,789,609 breached accounts

• Advanced persistent threat protection market to grow steadily by 2026

• 6 ways cybersecurity teams can save time and money

• Australia’s ‘hacking’ Bill passes the Senate after House made 60 amendments

• Votiro unveils solution that empowers enterprises to prevent threats from weaponized files

• The SideWalk may be as dangerous as the CROSSWALK

• Microsoft Power Apps misconfiguration exposes millions of records

• TestFlight for Mac Beta Now Available to Developers

• Agencies’ online forms lack required interactive features

• NSO Group facing renewed backlash after helping repressive Bahraini Government hack iPhones of politicians, activists

• 10 Netflix Hacks Enhance Your Binge-Watching Experience

• A Samsung Galaxy A21 Smartphone Caught Fire on a Plane

• Samsung delivers PIM technology to a wider range of applications

• 38 million records exposed online—including contact-tracing info

• Google Pay team reportedly in major upheaval after botched app revamp

• Intel Foundry Services gets a boost from $100M Pentagon award for US-made chips

• A New Chip Cluster Will Make Massive AI Models Possible

• Schools prepare for cyberattacks against educational institutions

• Privacera partners with StreamSets to strengthen data security for ETL processing in the cloud

• Qumulo partners with HPE to bring high file density node for hyperactive data workloads

• Cloud Security Alliance announces inaugural members of the CSA CxO Trust Advisory Council

• Endace collaborates with Kemp to help security teams reduce incident response times

• Dragos and DNG-ISAC announce initiative to increase security in the natural gas industry

• Chicago Inspector General: Police Use ShotSpotter to Justify Illegal Stop-and-Frisks

• Shravan Goli joins NETGEAR board of directors

• Splunk appoints Pamela Fusco as CISO

• Camilla Törnblom joins Clavister as Marketing Director

• Chris Dimitriadis becomes ISACA’s first Chief Global Strategy Officer

• LS-ISAO establishes Cyber Incident Response Committee to expand threat awareness for law firms

• Fake Apple rep amasses 620,000+ stolen iCloud pics, vids in hunt for images of nude women to trade

• ReliaQuest opens corporate headquarters at Thousand & One in Florida

• Secure Code Warrior’s growth fueled by global demand for security-skilled developers

• Federal 100: Eric Adolphe

• Federal 100: Ron Bewtra

• Endpoint protection: Securing the pieces that make up the whole

• VA readies cloud-based data platform

• Cloud-native incident management streamlines emergency response

• Fake Apple rep stole 620,000+ pics, vids from iCloud accounts in hunt for images of nude women to trade

• CVE-2021-3711 in OpenSSL can allow to change an application’s behavior

• The Limits of Leverage in Taliban-Led Afghanistan

• Fake Apple rep amassed 620,000+ stolen iCloud pics, vids in hunt for images of nude women to trade

• IT Security News Daily Summary 2021-08-24

• Orgs have had the same digital security vulnerabilities for the last 4 years

• OnlyFans Content Creators Are the Latest Victims of Financial Censorship

• Looking Back at Executive Order on Cybersecurity and What it Means for Your Business

• Silver Optis: Innovative and Socially Conscious Technologies at Black Hat

• Five Steps to Get a Cybersecurity Job

• B. Braun updates faulty IV pump after McAfee discovers vulnerability allowing attackers to change doses

• Scammer Infiltrated Thousands of iCloud Accounts to Find Nude Photos

• OnePercent ransomware group hits companies via IceID banking Trojan

• Cyber-thieves Scam New Hampshire Town Out of $2.3m

• 38 million records exposed in Microsoft Power apps misconfiguration

• Poly Network Recoups $610M Stolen from DeFi Platform

• Facebook Backtracks, Releases Shelved Transparency Report That Made The Company Look Bad

• Cybersecurity for Executives: How to Talk About Risk Management

• New CISA Blacklist: What It Means For You

• You can remove or update a single entry from the SSH known_hosts file

• Don’t get rugged: DeFi scams go from zero to $129 million in a year to become top financial hack

• FBI Issues Ransomware Group Flash Alert

• Nokia-Owned SAC Wireless Discloses Data Breach

• Hulu Now Supports HDR on Apple TV for Original Content

• Apple, Amazon, Microsoft CEOs To Discuss Cybersecurity At White House

• US Signs Cybersecurity Agreements with Singapore

• ‘Asphalt 8: Airborne’ and Zelda-Inspired ‘Baldo’ Coming to Apple Arcade on Friday

• Deals: Get 25% Off Mophie Charging Accessories and More During ZAGG’s Sitewide Flash Sale

• Can a VPN Protect You from Hackers? How It Keeps You Secure – And How It Doesn’t

• Pegasus Spyware Uses iPhone Zero-Click iMessage Zero-Day

• South Korea Could Ban Apple From Requiring Developers to Use In-App Purchase System

• Tencent Security Keen Lab: Experimental Security Assessment of Mercedes-Benz Cars

• TMF, cyber EO drive modernization at Labor, CIO says

• Why VA must keep Vista healthy

• WhatsApp New Modified Version Installs Triada Trojan

• Mr. White Returns All $610 Crypto Assets Stolen in Cyberattack

• How a gaming mouse can get you Windows superpowers!

• New zero-click exploit used to target Bahraini activists’ iPhones with NSO spyware

• T-Mobile Wins Title of Fastest U.S. Carrier in 2021 5G Test

• CISA Releases Five Pulse Secure-Related MARs

• CrowdStrike trading higher today ahead of its addition to Nasdaq-100

• Proofpoint wins $14m from ex-VP and French email security rival in IP theft court battle

• Tencent Keen Security Lab joins GENIVI Alliance

• Tencent Keen Security Lab: Experimental Security Assessment on Lexus Cars

• CISSPs From Around the Globe: An Interview with Adesoji Ogunjobi

• How to Protect Yourself From a Server-Side Template Injection Attack

• HYCU initiative offers free evaluation for ransomware recovery prospects

• Custom WhatsApp Build Delivers Triada Malware

• Survey: Boards want to invest more in technology, data analytics

• Risk officers and board members don’t agree on use of tech and data in business

• Researchers Warn of 4 Emerging Ransomware Groups

• MAR-10333243-3.v1: Pulse Secure Connect

• CISA Releases Five Pulse Secure-Related MARs

• 38 million personal identifiable information exposed in Microsoft Power Apps data leak

• Joe Biden to meet US Tech companies CEOs to protect National Infrastructure against Cyber Attacks

• Intellectual property protection: 10 tips to keep IP safe

• Tesla’s Elon Musk Says Latest Self-Driving Beta Is ‘Not Great’

• New iOS Zero-Click Exploit Defeats Apple ‘BlastDoor’ Sandbox

• OpenSSL Vulnerability Can Be Exploited to Change Application Data

• MAR-10336935-2.v1: Pulse Secure Connect

• MAR-10333243-3.v1: Pulse Secure Connect

• MAR-10338401-2.v1: Pulse Secure Connect

• MAR-10334057-3.v1: Pulse Secure Connect

• Action is Critical in US Cyber Policy

• Third-Party Risk Management — Don’t Collaborate Without It!

• Google Health Disbanded; Staff Sent To Other Divisions

• FluBot Android malware now targets UK banks

• Singapore and the U.S. Will Work More Closely on Cybersecurity

• APT41 Resurfaces as Earth Baku With New Cyberespionage Campaign

• Kickstart Robust Cloud Security with the Industry’s Best Website Security Checklist

• Microsoft Power Apps misconfiguration exposes data from 38 million records

• Tech CEOs To Meet With Biden Over Infrastructure Security

• Microsoft Spills 38 Million Sensitive Data Records

• Video Shows Moment Iranian Prison Realizes It Was Hacked

• Windows 10 Admin Rights Gobbled By Razer Devices

• Rumor: Apple Watch Series 7 to Come in Larger 41mm and 45mm Sizes

• Hundreds of Thousands of Devices Using Realtek SDK Targeted by Mirai Botnet

• Criminals exploited weak checks and old tech to pull off vast COVID benefit fraud

• OnlyFans Bans ‘Sexually Explicit Content’, Blames Payment Giants

• 13 Million Security Incidents Were Attempted to Hack Linux Systems in 2021

• Overmedicated: Breaking the Security Barrier of a Globally Deployed Infusion Pump

• McAfee Enterprise ATR Uncovers Vulnerabilities in Globally Used B. Braun Infusion Pump

• Hackers Claim to Have Data of 70 Million AT&T Customers

• US Military Personnel Lost Over $822m to Cyber Frauds

• Building a DevSecOps culture and shifting security left

• Spotify Competes With Apple by Expanding Podcast Subscriptions Program

• Cybercriminal Gives Back the Stolen Cryptocurrency and Receives a 500K Reward

• Amazon, Apple and Microsoft CEOs reportedly to attend White House cybersecurity meeting

• Threat Modeling: The Key to Dealing With 5G Security Challenges

• FBI Shares Details on “OnePercent Group” Ransomware Operators

• Triada Trojan in WhatsApp mod

• The Apple Client-Side Scanning System

• Amazon, Apple and Microsoft CEOs to reportedly attend White House cybersecurity meeting

• Realtek-based routers, smart devices are being gobbled up by a voracious botnet

• Microsoft Power Apps Data Leak Impacts 38 Million People

• XDR Firm Hunters Raises $30 Million in Series B Funding

• Deals: All-Time Low Prices Arrive for Apple’s 12.9-inch iPad Pro Magic Keyboard and Smart Keyboard Folio

• Today Marks 10 Years Since Tim Cook Became Apple’s CEO

• More and More Companies Are Getting Hit with Ransomware

• Intezer Analyze Transforms for Maltego

• Hunters advances adoption of its XDR security platform with $30M

• IT Leaders Fear Being Targets of Rising Nation-State Attacks

• Effective Threat-Hunting Queries in a Redacted World

• Details Disclosed for Zoom Exploit That Earned Researchers $200,000

• Hackers Could Up Medication Doses Through Infusion Pump Flaws

• Bahraini Activists Targeted Using a New iPhone Zero-Day Exploit From NSO Group

• Modified Version of WhatsApp for Android Spotted Installing Triada Trojan

• Leaker: Upcoming MacBook Pro to See Price Hike Over Current Model, Equal Performance Across 14 and 16-Inch Sizes

• Iranian Threat Actor Siamesekitten Spies on Israeli Organizations

• Poly Network Thanks ‘Mr. WhiteHat’ For Returning Stolen Crypto Totalling $610 million

• Researchers Warn of 4 Emerging Ransomware Groups That Can Cause Havoc

• Cybersecurity for Executives: How to Talk to Leaders About the Importance of Risk Management

• T-Mobile Sued Over Data Breach Affecting Millions of Customers

• US Organizations Targeted by OnePercent Ransomware Group, FBI Says

• 8 Best Motherboards for Ryzen 5 3600X 2021 – Review and Buying Guide

• 4 most dangerous emerging ransomware threat groups to watch

• Apple Urged To Drop CSAM Scanning Plans By Campaigners

• Fitbit Charge 5 Tracker Design and Features Leaked in New Video

• U.S. State Department Reportedly Hit By Cyber Attack

• UPS Phishing Campaign: Malware Is Distributed By Making Use of an XSS Flaw

• What CISOs need to know about Wi-Fi 6E

• CISA’s Joint Cyber Defense Collaborative: Why it just might work

• Micro Frontend Guide: Technical Integrations

• Nvidia’s ARM Purchase Raises ‘Significant Competition Concerns’ – CMA

• Diversity and Inclusion in Tech

• Microsoft, Google partner on eBPF

• Sumo Logic delivers on SOAR promise it made by acquiring DFLabs

• Apple, Microsoft and Amazon chiefs to meet Biden over critical infrastructure cyber attacks

• Researchers Show How Censorship Systems Can Be Abused for DDoS Amplification

• Mass Exploitation of Exchange Server ProxShell Bugs

• Microsoft Power Apps Tool Exposed 38 Million Records by Default

• Time to Fix High Severity Apps Increases by Ten Days

• Razer Device Plug-In grants Admin Rights on Windows 10 OS

• 38 Million Records Exposed from Microsoft Power Apps of Dozens of Organisations

• Triada Trojan in WhatsApp MOD

• Realtek SDK vulnerability exploitation attempts detected (CVE-2021-35395)

• Nokia Branch SAC Wireless Had Suffered a Data Breach Following a Conti Ransomware Incident

• 8 Free and Open Source Patch Management Tools for Your Company

• The Top 10 Highest Paying Jobs in Information Security – Part 2

• FBI flash alert warns on OnePercent Group Ransomware attacks

• Chinese auto-maker accused of altering data after fatal autonomous car accident

• Looking for adding new detection technologies in your security products?

• 38 Million Records Exposed Due to Microsoft Misconfiguration

• Hacker Behind $600 Million Crypto Heist Returned Stolen Funds

• Realtek SDK flaws exploited to deliver Mirai bot variant

• Three reasons why ransomware recovery requires packet data

• Ransomware tips by CISA

• Google bans the following cryptocurrency apps for data security

• What is the HIPAA Security Rule? Three safeguards to have in place

• Kubescape helps admins manage Kubernetes securely

• How do I select an automated red teaming solution for my business?

• Top Cybersecurity Podcasts

• Security and compliance still a challenge for container architectures

• DLL side-loading Attack Takes Advantage of Windows Search Order to Inject Malicious DLL

• Adverse security implications of enterprises network overprovisioning

• How Tripwire Can Help to Defend Against Ransomware

• IoT market to reach $1.5 trillion by 2027, security top priority

• Zylpha launches Adobe Sign integration for iManage10 to eliminate the risk of documents being lost

• Guardicore Centra enables security teams to stop ransomware and lateral movement

• Palo Alto Networks Cortex XDR 3.0 automates threat detection and investigation across cloud environments

• Konni RAT variant targeting Russia in ongoing attack campaign

• SophosLabs: Research shows BlackMatter ransomware is closely acquainted with DarkSide

• AdvoLogix and iManage provide a cloud-scale solution for the legal industry

• Hackers wipe out Coinbase customer accounts

• Security Camera Hacking: It Can Happen to You. Here’s How to Stop It

• Naval Criminal Investigative Service Nominated in 2021 ‘ASTORS’ Awards

• NICE adds five partners to Evidencentral Marketplace to increase incident response

• Glory partners with Paysafe to improve access to the digital economy for consumers

Generated on 2021-08-25 23:55:48.298054