IT Security News Daily Summary 2021-08-26

• Argonne unwraps testbed supercomputer to prep for exascale

• FedRAMP leans into OSCAL for streamlining authorizations

• Creating innovative, streamlined and accessible digital experiences

• Whitelisting vs. Blacklisting: Which Is Better?

• Man Sues Parents of Teens Who Hijacked Nearly $1M in Bitcoin

• Hands-On With Samsung’s New $1,800 Galaxy Z Fold 3

• Microelectronics supply chain challenges and zero trust

• Arizona Cops Arrest Fugitive in Police Data Bribery Case

• Report: Facebook Considering Creation Of Election Commission This Fall

• Chicago Inspector General: Using ShotSpotter Does Not Justify Crime Fighting Utility

• Detect Container Drift in Your Kubernetes Deployments

• New variant of PRISM Backdoor ‘WaterDrop’ targets Linux systems

• Elder Scammers Indicted | Avast

• Data Is Quicksand: Does Your Current Data Security Solution Pull You Out or Sink You Deeper?

• Clear and present danger: Why business leaders must prioritize cybersecurity

• GOP lawmakers seek answers on SSA’s acting leadership

• 21-year-old tells WSJ he was behind massive T-Mobile hack

• T-Mobile’s Security is ‘Awful’ Says Hacker Who Stole Data From 50 Million Customers

• F5 BIG-IP Flaw Let Hackers Execute Arbitrary System Commands

• How to create locally signed SSL certificates with mkcert

• Angry Birds Developer Accused of Illegal Data Collection

• Tips for DFIR Analysts

• SpaceX Ships 100,000 Starlink Terminals

• Blue Origin Successfully Completes First Test Flight, After Jeff Bezos Mission

• Naval Criminal Investigative Service Nominated in 2021 ‘ASTORS’ Awards

• FIN8 Hackers Add ‘Sardonic’ Backdoor to Malware Arsenal

• New Version of Classic Mac Game ‘Myst’ Available With M1 Mac Optimization

• Apple Releases New Firmware for AirTags

• How FDX standards are paving the way for open banking in North America (VB Live)

• Chinese developers expose data belonging to Android gamers

• F5 Bug Could Lead to Complete System Takeover

• Cisco fixed a critical flaw in Cisco APIC for Nexus 9000 series switches

• Netflix Now Testing Integrated Mobile Games in Poland

• Afghanistan, Policy Choices, and Claims of Intelligence Failure

• Updates on our continued collaboration with NIST to secure the Software Supply Chain

• Kaseya fixed two of the three Kaseya Unitrends zero-days found in July

• More Than 100 Million People Worldwide Use an Apple Watch

• Widespread credential phishing campaign abuses open redirector links

• Latest iPhone exploit, FORCEDENTRY, used to launch Pegasus attack against Bahraini activists

• Data Poisoning: The Next Big Threat

• Google and mobile operating systems top list of privacy concerns, says Kaspersky

• Microsoft finally issues ProxyShell security advisory

• Latest iPhone exploit, FORCEDENRTY, used to launch Pegasus attack against Bahraini activists

• Engineering Workstations Are Concerning Initial Access Vector in OT Attacks

• Bugs aplenty as VMware, Cisco and F5 drop security updates

• Top Code Debugging and Code Security Tools

• Refurbished M1 Mac Mini With 10Gb Ethernet Now Available

• US government and private sector agree to invest time, money in cybersecurity

• Cybersecurity tips for School and College students in 2021

• Realtek Flaw Exposes Dozens Of Brands To Supply Chain Attacks

• Google, Amazon, Microsoft Unveil Massive Cybersecurity Initiatives After White House Meeting

• How Data Brokers Sell Access To The Backbone Of The Internet

• Publishers Who Adopt Apple News Now Qualify for Reduced Commission on In-App Subscriptions

• Cold wallet, hot wallet, or empty wallet? What is the safest way to store cryptocurrency?

• Cisco Patches Serious Vulnerabilities in Data Center Products

• Cisco Releases Security Updates for Multiple Products

• Tim Cook to Receive $750 Million Worth of Apple’s Stock This Week

• Waymo Opens Self-Driving Taxi Testing In San Francisco

• Tech companies pledge to help toughen US cybersecurity in White House meeting

• UK Cyber Security Council Opens Membership Application Process

• Cisco Releases Security Updates for Multiple Products

• Three New Ways Recorded Future and Splunk Help SecOps Teams Focus on What Matters Most

• Deals: Get Up to $100 Off Apple’s 2021 iPad Pro Lineup on Amazon and B&H Photo

• US Bank Impacted By FIN8 Threat Actor with New Sardonic Backdoor

• Medical Data of 12,000 Patients Exposed Following Revere Health Phishing Attack

• Apple Employees Increasingly Content to Criticize the Company Amid Switch Remote Working and Use of Slack

• Toshiba Consults With Private Equity Firms Over ‘Strategic Ideas’

• S3 Ep47: Daylight robbery, spaghetti trouble, and mousetastic superpowers [Podcast]

• Commentary: Proxyshell Flaws Warning Could Spell Trouble For Unprepared Organisations

• Red & Blue: United We Stand

• Microsoft Breaks Silence on Barrage of ProxyShell Attacks

• Podcast: Ransomware Up x10: Disrupting Cybercrime Suppy Chains an Opportunity

• Top IT Firms CEOs to Attend White House Cybersecurity Meeting

• Personal Information of Entire Swiss Town Leaked Following Cyberattack

• Top Linux Vulnerabilities Exploited by Hackers

• Atlassian Patches Critical Code Execution Vulnerability in Confluence

• Scammers Steal Victims Cryptowallets And NFTs, Posing as OpenSea Agents

• SteelSeries Software Flaw Gives Windows 10 Admin Rights

• Lessons from a Former K-12 Teacher: How Duo Brings Cybersecurity to the Head of the Class

• F5 Releases Critical Security Patches for BIG-IP and BIG-IQ Devices

• The Increased Liability of Local In-home Propagation

• CSTA Turns 400 – Proof That Technology Integrations Is Exactly What You Are Looking For

• First ’45mm’ Apple Watch Bands Spotted Ahead of Series 7 Unveiling [Updated]

• (ISC)² Security Congress 2021 is Now Fully Virtual

• Tech giants pledge at least $30 billion to improve cybersecurity following White House meeting

• UK To Overhaul Data Protection Rules, Targets Cookie Pop-ups

• Enabling Anypoint Identity Management With OKTA SAML 2.0 [Video]

• Cloud storage deal: Get 2TB of storage with end-to-end encryption for only $10

• FBI warns of OnePercent ransomware gang – what you need to know

• New SideWalk Backdoor Targeting U.S. Computer Retailers

• First ’45mm’ Apple Watch Band Spotted Ahead of Series 7 Unveiling

• Cybersecurity for Credit Unions: 4 Ways to Reduce the Risk of the Next Attack

• Beware!! New “WhatsApp mod” Hack Your Mobile To Spy Your Activities & Steal SMS Data

• FluBot Malware Strikes Again

• Microsoft Issues Guidance on ProxyShell Vulnerabilities

• How Threat Detection is Evolving

• Hackers put up for sale the passports of more than 1.3 million Russians

• Interesting Privilege Escalation Vulnerability

• 200,000 More Workers Needed to Manufacture iPhone 13 Ahead of Launch

• Big Tech to invest billions in cybersecurity infrastructure

• XSS: Attack, Defense – and C# Programming

• Preventing Multi-Stage Attacks – Case in Point

• Quantum computers could read all your encrypted data. This ‘quantum-safe’ VPN aims to stop that

• Cybersecurity warning: Realtek flaw exposes dozens of brands to supply chain attacks

• Data protection: UK to diverge from GDPR in post-Brexit overhaul of privacy rules

• CIS Control 1: Inventory and Control of Enterprise Assets

• Vulnerabilities Allow Hackers to Tamper With Doses Delivered by Medical Infusion Pumps

• ‘iPhone 13’ Name Emerges on Alleged Packaging Stickers

• Customers in Sensitive Fields Affected by Critical F5 BIG-IP Vulnerability

• Government Names Candidate for New Information Commissioner

• “Sophisticated” Cyber-Attack Compromises Patient Data at Private Health Clinic

• Java deserialization vulnerabilities explained and how to defend against them

• Tech Giants Make Cybersecurity Pledges After White House Meeting

• Unpatched Microsoft Exchange servers hit with ProxyShell attack

• Quick Hits

• FCW Insider: August 26, 2021

• CISA Details Additional Malware Targeting Pulse Secure Appliances

• New Passwordless Verification API Uses SIM Security for Zero Trust Remote Access

• How We’ve Changed Our Approach to Security and Privacy – Intego Mac Podcast Episode 202

• New US CISO appointments, August 2021

• Record Summer for UK’s Cyber Skills Courses

• Surveillance tech company sues Police Digital Service over ‘flawed’ scoring of bids on £18m contract

• New Zero-Click iMessage Exploit Used to Deploy Pegasus Spyware

• Personal Data and docs of Swiss town Rolle available on the dark web

• VMware Issues Patches to Fix New Flaws Affecting Multiple Products

• Big tech proud as punch about cameos in Joe Biden’s security theatre

• Do you know what your supply chain is and if it is secure?

• VMware addressed 4 High-Severity flaws in vRealize Operations

• Apple Reportedly Increasing iPhone 13 Prices to Compensate for Increased Chip Production Cost

• Countries need to come together and have a global response against cybersecurity threats: ESET

• Vulnerability management is facing three core problems: Here’s how to solve them

• Q&A With Andrew Gardner | Avast

• Atlassian warns of critical Confluence flaw

• Critical Flaw Discovered in Cisco APIC for Switches — Patch Released

• Checking for misconfigurations isn’t enough

• Imavex – 878,209 breached accounts

• Australia passes new data privacy bill for criminals

• Cyber Attack on Crypto Exchange brings $97 million loss to customers

• Medical Data for 12,000 Patients Leaked Following Revere Health Attack

• How to make email safe for business

• US gives Huawei licence approval to buy automotive chips: Report

• PJCIS recommends passage of Bill that will allow incidental collection of Australian data

• Cybersecurity market soaring as threats target commercial and govt organizations

• Containers in the Cloud: Key Benefits and Challenges

• How Avanan helps you reduce phishing and ransomware

• Israeli firm Bright Data named as enabler of Philippines government DDOS attacks on opposition groups

• Private network deployments are slow, the window of opportunity for enterprise 5G is closing

• The Next Disruptive ICS Attacker: Only Time Will Tell

• Employees participating in unethical behaviors to help an organization actually harm themselves

• 38 Million Records Exposed from Microsoft Power Apps

• NS1 NetBox Cloud makes open solution technology available as a SaaS

• Ermetic Platform combines CIEM and CSPM capabilities in one integrated solution

• NICE Enlighten AI for Complaint Management identifies and categorizes consumer complaints

• RingCentral’s capabilities enable employees to communicate and collaborate from anywhere

• Syxsense’s workflows detect and resolve critical IT infrastructure disruptions

• Arcserve enhances StorageCraft Cloud Services Basic for MSPs

• Tecore Network 5G iCore Network in a Box provides macro coverage for deployable networks

• Hack Exposes Personal Data of Entire Swiss Town: Report

• Tech Companies Pledge Billions in Cybersecurity Investments

• Arista Networks expands its routing solutions to the network edge

• White House COVID group extends leave for feds to get vaccinated

• Biden gets Google, Apple, others to join “whole-of-nation” cybersecurity effort

• Advantech collaborates with Lynx to offer Mission Critical Edge Starter Kit for IT/OT convergence

• Vulnerability allowed hackers to tamper medication in infusion pump

• LexisNexis Risk Solutions acquires TruNarrative to help prevent financial crime and fraud

• Tessian partners with Optiv Security to help enterprises secure the human layer

• F5 addressed a flaw in BIG-IP devices rated as critical severity under specific conditions

• CloudBees names two leaders to C-level posts to accelerate growth and operational maturity

• Abnormal Security joins MISA to help customers combat global cybersecurity threats

• Vouched raises $4.5M to deliver online verification service to businesses and governments

• Here’s what CEOs are promising to do to help with U.S. cybersecurity

• Cisco Issues Critical Fixes for High-End Nexus Gear

• Zero Trust Can’t Protect Everything. Here’s What You Need to Watch.

• Apple Plans to Develop Program to Improve Supply Chain Security

• Jesse Kinser joins Pathwire as CISO

• Armory appoints Jim Douglas as CEO

• Sam King joins ZeroFox Board of Directors

• Want to become a white-hat hacker? Here’s what you need to know

• Man Robbed of 16 Bitcoin Sues Young Thieves’ Parents

• White House holds major cyber confab

• Austin mandates COVID vaccine for military

• Google, Microsoft plan to spend billions on cybersecurity after meeting with Biden

• IT Security News Daily Summary 2021-08-25

• Pittsburgh stands up citywide fiber network

• Facial recognition tech: Not just for IDing criminals

• IG council scouting for data analytics tools

• IRS beefs up compute power for fraud detection

• Elastic Q1 revenue tops expectations, offers surprise profit, raises year view

• Australia Passes Identify and Disrupt Bill

• The Stealthy iPhone Hacks That Apple Still Can’t Stop

• What’s New With HomeKit in iOS 15

• Watch as hackers disrupt Iran’s prison computers; leak live footage

• Facing foreign election foes, states hire ‘cyber navigators’

• Report: Facebook Won’t Share Data With Researchers, Academics, Or The White House

• Glitch Exposed Data of Alleged Treaty Violator to FBI

• ProxyLogon flaw, evil emails, SQL injections used to open backdoors on Windows boxes

• What the Norton-Avast Merger Means for Cybersecurity

• Kanye’s upcoming album is a scam magnet, Kaspersky finds

• Revere Health Data Breach Impacts Cardiology Patients

• President Biden meets with business leaders on cybersecurity

• Why supply chain security is a concern for the White House Cyber Summit

• DHS stands up new excepted service for cyber talent

• Win10 Admin Rights Tossed Off by Yet Another Plug-In

• FIN8 group used a previously undetected Sardonic backdoor in a recent attack

• Apple TV+ Shows ‘For All Mankind’ and ‘Calls’ Win Emmy Awards

• Apple to Release iOS 15 iCloud Private Relay as a Public Beta

• SolarWinds and the Holiday Bear Campaign: A Case Study for the Classroom

• Disrupting Cryptocurrencies 2: Lessons From the Poly ‘Hack’

• Lawfare Live: Scott Anderson and David Priess on Afghanistan and What Comes Next

• Intern with Lawfare!

• Cybersecurity is the issue of the decade: IBM chair & CEO Arvind Krishna

• New Campaign Sees LokiBot Delivered Via Multiple Methods

• Poly Network Hacker Returns All Stolen Tokens, Offered Job

• Apple Seeds Seventh Beta of tvOS 15 to Developers

• Apple Seeds Seventh Beta of watchOS 8 to Developers

• Apple Seeds Seventh Betas of iOS and iPadOS 15 to Developers

• The best browsers for privacy and security

• How to Quantify the Actual Cost of a Data Breach for Your Own Organization

• Best security system 2021: Protect your home & office

• Best security camera 2021: Secure your home or office

• Mirai-style IoT botnet is now scanning for router-pwning critical vuln in Realtek kit

• Neural Fuzzing: A Faster Way to Test Software Security

• Watchdog Investigation Finds ‘Major Weaknesses’ in Apple’s App Store Child Safety Measures

• How Has CAP Certification Evolved to Lead in Risk Management?

• This feed has moved and will be deleted soon. Please update your subscription now.

• Names of new ransomware groups that are on rise

• AWS Unveils Cloud Security Competency Program for MSSPs

• Apple Celebrates National Parks With Apple Pay Donations, Apple Watch Challenge, and Park-Related Content

• Drama Series ‘The Changeling’ Coming to Apple TV+

• Cybersecurity’s next fight: How to protect employees from online harassment

• OnlyFans Suspends Decision To Ban Porn Content

• OpenSSL Releases Security Update 

• VMware Releases Security Updates for Multiple Products 

• iPhone 13 May Feature Upgraded Face ID That Works With Masks and Foggy Glasses

• A New iPhone Zero-Click iMessage Zero-Day Used to Deploy Pegasus Spyware

• Best security system 2021: Secure your home or office

• US Media, Retailers Targeted by New SparklingGoblin APT

• HackerOne launches AWS certification paths, pen testing service

• 70% of Cyber Pros Believe Cyber Insurance is Exacerbating Ransomware

• FBI Releases Indicators of Compromise Associated with OnePercent Group Ransomware

• OpenSSL Releases Security Update 

• VMware Releases Security Updates for Multiple Products 

• Surveillance of the Internet Backbone

• Tech and finance leaders head to White House cybersecurity summit

• US Approves Licence For Huawei To Purchase Car Chips – Report

• How safe is a quantum-safe virtual private network?

• Vade Secure Ordered to Pay $14 Million to Proofpoint in IP Theft Lawsuit

• Innovative Recruitment Practices Can Close the Cyber Skills Gap

• F5 Releases August 2021 Security Advisory

• FBI Releases Indicators of Compromise Associated with OnePercent Group Ransomware

• These Four Rising Gangs Could Be Your Next Major Security Threat

• Proofpoint Wins $14 Million In IP Theft Court Battle

• iCloud+’s New Custom Email Domain Feature Now Available in Beta

• White House cybersecurity advisor on meeting with CEOs after wave of high-profile hacks

• F5 Releases August 2021 Security Advisory

• Watch now: 2021 Red Hat Security Symposium on-demand

• Red Hat's open approach to vulnerability management

• The Business of Fraud: SIM Swapping

• Facebook Messenger Celebrates Its 10th Birthday With Poll Games, Birthday Cash Gifting, and More

• Deals: Best Buy Takes $300 Off iPhone 12 Mini and $100 Off iPad Mini

• iPhone Serves as Gateway to iPad and Apple Watch Sales, but Mac, Apple TV, and HomePod Lag Behind

• Want to be a white hat hacker? Train with this $10 bundle deal

• IBM launches new SASE service to bolster zero-trust enterprise security

• VMware Patches High-Severity Vulnerabilities in vRealize Operations

• Apple Preparing to Open First Retail Store in Hunan Chinese Province

• Zoom Updated With ‘Raise Hand’ and ‘Thumbs Up’ Gesture Recognition on iPad

• Win 10 Admin Escalation With Razor Bug – Expert Insight

• Phishing by the numbers – July 2021

• Mice “taking over the world!”, one Windows machine at a time

• Blue Origin Loses Key Staff, Amid NASA Contract Battle – Report

• Three Key Benefits of Adopting SASE With a Services Partner

• Survey: 1 in 4 Facility Managers Experienced OT System Breaches

• Preventing your Cloud ‘Secrets’ from Public Exposure: An IDE plugin solution

• ‘Today at Apple’ Session Explores Taking Expressive Pet Portraits

• Hackers Impersonate OpenSea Employees in an Attempt to Steal Cryptocurrency Assets and NFTs

• COVID19 Vaccine Fraudsters Targeted Health Authorities in 40 Countries

• Researchers Uncover FIN8’s New Backdoor Targeting Financial Institutions

• Lessons from a Former K-12 Teacher: How Duo Brings Cybersecurity to Head of the Class

• Virgin Hyperloop Touts Individual Pod Concept

• Leaked Footage Shows Grim Conditions in Iran’s Evin Prison

• Thinking about CAP or CISSP? Here’s How They Compare.

• Cybersecurity startup investments more than doubled in H1 2021

• California Man Hacked iCloud Accounts to Steal Nude Photos

• Incident Response Firm BreachQuest Launches With $4.4 Million in Seed Funding

• Most Important Network Penetration Testing Tools for Hackers & Security Professionals

• The VC View: Digital Transformation

• Top 10 Best Motherboards for i9 9900K 2021 – Top Picks

• Did you give away your password in the comments section?

• South Korea Moves To Curb In-App Purchase Charges

• Biden, Tech Leaders Eye ‘Concrete Steps’ to Boost Cybersecurity

• Joker Virus is Back, Targeting Android Devices

• YouTube Premium Subscribers Can Now Use iOS Picture-in-Picture: Here’s How

• Medical Records of 12,000 Revere Health Patients Exposed in Phishing Attack

• Security blind spots persist as companies cross-breed security with devops

• Proofpoint awarded $13.5 million in IP theft lawsuit against Vade Secure

• Ransomware: These four rising gangs could be your next major cybersecurity threat

• Misconfigured Microsoft Power Apps Portals Exposed Millions of Records

• Drug Dealers Get 27 Years After Police Crack EncroChat Comms

• B.Braun Infusomat Pumps Could Let Attackers Remotely Alter Medication Dosages

• Popular WhatsApp Mod Spreads Malware on Android Devices

• How Windows admins can get started with computer forensics

• Accelerate Your Journey to AWS with IBM Security

• Cybercrime Losses Triple to £1.3bn in 1H 2021

• Nigerian Threat Actor Offers $1 million to Insiders for Planting Ransomware

• iPhone 13 to Launch on September 17, AirPods 3 on September 30, Claims Report

• Apple Supplier Luxshare Reports Record Growth After Securing iPhone 13 Orders

• Biden to host tech, finance and energy CEOs for security summit at White House

• Tech CEOs to Discuss Cybersecurity with Biden Today

• August 2021 Web Server Survey

• ShinyHunters group claims to have data of 70M AT&T customers

• Radiflow’s risk management platform for OT facilities allows CISOs to view all their sites on one dashboard

• Singapore further eases access to contact tracing devices

• New SideWalk Backdoor Targets U.S.-based Computer Retail Business

• Modified version of Android WhatsApp installs Triada Trojan

• Build your own Android security product

• New SideWalk Backdoor Targets U.S-based Computer Retail Business

• Why you need to make Microsoft 365 a 24/7 security priority

• The Third Generation of XDR Has Arrived!

• We’ve Got Next: Building the “Next” in CyberSecurity

• Palo Alto Networks Named a Leader in the 2021 Forrester ZTNA New Wave

• Samsung could use a TV Block feature to disable any of its TVs worldwide

• SubaGames – 6,137,666 breached accounts

• The Poly Network hack turned into career prospects

• Microsoft offers tips to secure Windows 365 Cloud PCs

• Ransomware news headlines trending on Google

• M1 taps 5G to enrich waterfront lifestyle, operations

• Hybrid work: How do you secure every identity on your network?

• How the pandemic delivered the future of corporate cybersecurity faster

• Coinminers, web shells and ransomware made up 56% of malware targeting Linux systems in H1 2021

• Navigating the Troubled Waters of Risk Management

• 40% of SaaS assets are unmanaged, putting companies at risk for data leaks

• 22% of cybersecurity incidents in H1 2021 were ransomware attacks

• Eatigo – 2,789,609 breached accounts

• Advanced persistent threat protection market to grow steadily by 2026

• 6 ways cybersecurity teams can save time and money

• Australia’s ‘hacking’ Bill passes the Senate after House made 60 amendments

• Votiro unveils solution that empowers enterprises to prevent threats from weaponized files

• The SideWalk may be as dangerous as the CROSSWALK

• Microsoft Power Apps misconfiguration exposes millions of records

• TestFlight for Mac Beta Now Available to Developers

• Agencies’ online forms lack required interactive features

• NSO Group facing renewed backlash after helping repressive Bahraini Government hack iPhones of politicians, activists

• 10 Netflix Hacks Enhance Your Binge-Watching Experience

• A Samsung Galaxy A21 Smartphone Caught Fire on a Plane

• Samsung delivers PIM technology to a wider range of applications

• 38 million records exposed online—including contact-tracing info

• Google Pay team reportedly in major upheaval after botched app revamp

• Intel Foundry Services gets a boost from $100M Pentagon award for US-made chips

• A New Chip Cluster Will Make Massive AI Models Possible

• Schools prepare for cyberattacks against educational institutions

• Privacera partners with StreamSets to strengthen data security for ETL processing in the cloud

• Qumulo partners with HPE to bring high file density node for hyperactive data workloads

Generated on 2021-08-26 23:55:23.757785