IT Security News Daily Summary 2021-08-28

• Deepfakes in cyberattacks aren’t coming. They’re already here.

• I Spy With My Little… Phone? Yes, It Can Happen to You.

• Five iPhone 13 Rumors You May Have Missed

• Cybersecurity in Software Development: The Good Rules to Follow

• I Spy With My Little… Phone?

• Five Steps to Get a Cybersecurity Job

• Earth Baku APT Hackers Group Upgraded Its Hacking Toolset for New Cyberespionage

• T-Mobile’s Security Is ‘Awful,’ Says Purported Thief

• LockFile Ransomware Bypasses Protection Using Intermittent File Encryption

• Microsoft Warns of Widespread Phishing Attacks Using Open Redirects

• Boffins show PIN bypass attack Mastercard and Maestro contactless payments

• This open-source ML model will help you predict vulnerability exploits

• Multiple Vulnerabilities Spotted In elFinder File Manager WordPress Plugin

• Misconfigurations in Microsoft Power Apps Leaked Millions Of Records From Multiple Firms

• California Man Stole 620,000 iCloud Photos in Search of Nudes

• Microsoft Issues an Advisory on ProxyShell Vulnerabilities

• We underestimated IoT security. Let’s not make that mistake with robotics.

• T-Mobile hack: Everything you need to know

• Top Stories: iPhone 13 Nears Launch, Larger Apple Watch?, MacBook Pro and Mac Mini Rumors

• Cisco Published Two Critical and Six High-Severity Patches for Nexus Gear

• CISA Published MARs on Samples Targeting Pulse Secure Devices

• F5 Security Patched Severe Vulnerabilities in its BIG-IP Networking Device

• Phorpiex botnet shuts down and authors put source code for sale

• Build or Buy your own antivirus product

• Atlassian released security patches to fix a critical flaw in Confluence

• Top Free Cybersecurity Tools 2021

• Work from Home Increased Worldwide Phishing Attacks

• Top Cybersecurity Podcasts

• Apache Kafka as Real-Time Backbone for Cybersecurity

• Christopher Krebs: Truth and consequences

• Craig Abod: Taking the pain out of procurement

• DARPA’s Pandemic Protection Program

• Beyond the pandemic: Why are data breach costs at an all‑time high?

• Week in security with Tony Anscombe

• YugabyteDB 2.9 eliminates the need for external load balancers

• 3 Tests to Ensure Zero Trust Network Security

• Action1 RMM enables AllCode to improve the security and efficiency of its remote operations

• Help! I Think My Phone’s Been Hacked

• Cloudflare says it stopped the largest DDoS attack ever reported

• ISACA unveils two audit programs to improve backup and recovery strategies for organizations

• Microsoft Azure Cosmos DB Guidance

• An RCE in Annke video surveillance product allows hacking the device

• Accenture Federal Services hires Portia Crowe as Chief Data Strategy Director for Defense

• Explosion in Geofence Warrants Threatens Privacy Nationwide

• Microsoft Azure Cosmos DB Guidance

• Apple Launches ‘No Sound’ Repair Program for iPhone 12 and 12 Pro Models

• Cisco says it will not release software update for critical 0-day in EOL VPN routers

• Researchers discover critical flaw in Azure Cosmos DB

• What is the Islamic State in Khorasan?

• Lawfare Live: Steve Vladeck and Lindsay Wiley on Public Vaccination Mandates

• Microsoft warns of widespread open redirection phishing attack – which Defender can block, coincidentally

• IT Security News Daily Summary 2021-08-27

• Security alert: The threat is coming from inside your Docker container images

• NIST’s ransomware guidelines look a lot like cyber resilience

• Friday Squid Blogging: Tentacle Doorknob

• What’s New With the Health App in iOS 15: Data Sharing, Lab Result Improvements, COVID Vaccine Records and More

• 38 million records exposed online—including contact-tracing info

• Google Pay team reportedly in major upheaval after botched app revamp

• Intel Foundry Services gets a boost from $100M Pentagon award for US-made chips

• A New Chip Cluster Will Make Massive AI Models Possible

• Whitehat hackers accessed primary keys of Azure’s Cosmos DB customers

• Experts: WH Cybersecurity Summit Should Be Followed by Regulation, Enforcement

• Parallels Offers ‘Inconvenient’ Fix for High-Severity Bug

• T-Mobile offers details of data breach that affected 40M

• Biden orders 2.7% pay raise for civilian feds

• Winning the Cyber-Defense Race: Understand the Finish Line

• How malicious Android apps use social engineering tactics to access Facebook accounts

• T-Mobile CEO Apologizes for Data Breach, Shares Info on Future Security Plans

• Cuba’s central bank now recognizes cryptocurrencies such as bitcoin

• Update on the vulnerability in the Azure Cosmos DB Jupyter Notebook Feature

• Ransomware demands and payments skyrocket

• Google Channels Jony Ive in Ad Promoting Pixel 5a Headphone Jack

• Apple Expands Efforts to Vaccinate Employees, But Doesn’t Mandate Vaccines

• The 4-phase approach smart companies take to mitigate DDoS attacks

• Beginners Guide for Web Scraping Using Selenium

• Building tomorrow’s network today

• App store commission fees scrutinized by South Korea

• Microsoft, Google Among Tech Giants Pledging Big Money to Cybersecurity

• Cuba’s central bank now recognizes cryptocurrencies like bitcoin

• Young People Are the Key to Decreasing the Skills Gap

• VA readies cloud-based data platform

• Best Third-Party Risk Management (TPRM) Tools of 2021

• Apple’s Plan to Scan Photos in Messages Turns Young People Into Privacy Pawns

• MacRumors Giveaway: Win an iPhone, iPod, or Mac Pillow From Throwboy

• What to Expect From the Apple Watch Series 7

• Reorganizing for the Biden agenda at OPM

• 3D-printed barracks opens for Texas Military Department trainees

• T-Mobile CEO apologizes for massive hack, announces cybersecurity deal with Mandiant

• FIN8 Targets US Bank With New ‘Sardonic’ Backdoor

• Top 10 tech and health jobs with the best pay and growth potential

• Microsoft Cloud Databases Exposed

• Ms. Information Vaccine Campaign Launches

• Russians began to complain more often about hacking accounts on Public Services

• ChaosDB, a Critical Cosmos DB flaw affected thousands of Microsoft Azure Customers

• Facebook’s Secret War on Switching Costs

• Critical Azure Cosmos DB Bug Allows Full Cloud Account Takeover

• “Intruders” in the cloud: Microsoft warns “thousands” of Azure customers about potential exposure

• 2021 Q3 Updates from Our Chairperson and CEO: Membership Milestones and More

• Why Privileged Access Management Is So Hard in the Cloud

• Azure Cosmos DB alert: This critical vulnerability puts users at risk

•  ICSJWG 2021 Fall Virtual Meeting

• FBI Releases Indicators of Compromise Associated with Hive Ransomware

• The T-Mobile data breach: A timeline

• Microsoft Warns Cloud Customers Of Potential Breach

• Microsoft warns about phishing campaign using open redirects

• Building a Career in CyberSecurity

•  ICSJWG 2021 Fall Virtual Meeting

• FBI Releases Indicators of Compromise Associated with Hive Ransomware

• Secure. Compliant. Effective. Meeting the Needs of our Federal Customers.

• Man-in-the Middle (MITM) Attack

• Slap on wrist for NCC Group over CREST exam-cheating scandal as infosec org agrees to rewrite NDAs and more

• Important information about Ragnarok Ransomware and Hive Ransomware

• FIN8 Resurfaces with New Sardonic Backdoor

• How to stay secure from ransomware attacks this Labor Day weekend

• New Cyber Warfare Wing Coming to Ohio

• The FBI issued a flash alert for Hive ransomware operations

• Twitter Begins Rolling Out Ticketed Spaces on iOS

• Apple Shares Trailer for Broadway Musical ‘Come From Away’

• Hive Ransomware: Technical Info Released by the FBI

• States pull back on COVID data even amid delta surge

• Ragnarok Ransomware Gang Bites the Dust, Releases Decryptor

• “Intruders” in the cloud: Microsoft warns “thousands” of customers about potential exposure

• Vulnerability Allows Remote Hacking of Annke Video Surveillance Product

• FBI Shares IOCs for ‘Hive’ Ransomware Attacks

• Details of the Recent T-Mobile Breach

• Apple Watch Series 7 Clones Emerge in China

• Notice to Developers: You Could Be Entitled to Between a $250 and $30,000 Payment From Apple

• Three Key Questions to Define ICT Supply Chain Security

• Top Strategies That Define the Success of a Modern Vulnerability Management Program

• Threat Actors Abuse Top 15 Flaws Millions of Times to Target Linux Systems

• Deals: Amazon Drops Price of 256GB M1 MacBook Air to New Low of $849.99 ($149 Off)

• Apple Agrees App Store Deal With Small Developers

• Electronic Code Book (ECB)

• Cybersecurity Is the ‘Core National Security Challenge’ according to Biden at this week’s CEO Summit

• Defining Zero Day Attacks, Exploits, Vulnerabilities

• ‘Pay Ransom’ Screen? Too Late, Humpty Dumpty – Podcast

• Kaseya Patches New 0-Day Vulnerabilities Affecting Unitrends Servers

• Enterprise Technology Management Provider Oomnitza Raises $20 Million

• Making it Safe: IBM and Cisco Partner to Secure Applications

• CCSP vs. Cloud+: How Do They Stack Up?

• In a Hybrid Workplace, Men Are More Likely to Engage in Risky Behavior Than Women: Study

• Amazon to Offer Free Cybersecurity Training Materials, MFA Devices

• OpenSSL Vulnerabilities Impact Various Synology Products

• Tim Cook Lands $750m Bonanza In Share Award

• Parents of teens who stole $1 million in Bitcoin sued by alleged victim

• Engineering PCs Are Concerning Initial Access Vector in OT Attacks

• US charges HeadSpin ex-CEO over fake $1bn valuation scheme

• Google: Here’s how our $10bn investment will boost US cybersecurity

• Microsoft, Google to Invest $30 Billion in Cybersecurity Over Next 5 Years

• Ragnarok Ransomware Victims Receive Decryptor Key After the Gang Decided to Shutdown

• FBI Warns Businesses of New Hive Ransomware

• Ransomware: It’s only a matter of time before a smart city falls victim, and we need to take action now

• Chinese Developer Exposes Data on Over One Million Gamers

• Critical IoT Camera Flaw Allows for Device Hijacking

• Leaked Emails Shows ULA Conspire against Elon Musk and SpaceX

• Kaseya Issues Patches for Two New 0-Day Flaws Affecting Unitrends Servers

• Security Recruiter Directory

• CSO’s guide to the worst and most notable ransomware

• Critical Vulnerability Exposed Azure Cosmos DBs for Months

• Victims of Ragnarok ransomware can decrypt their files for free

• Token-Based Security, OAuth 2.0, OIDC and IdentityServer4

• First Episode of ‘See’ Season Two Premieres on Apple TV+

• Google Could Pay Apple $15 Billion to Maintain Default iOS Search Engine Status in 2021, Suggests Analyst

• Home Affairs believes technological capability not there yet for cryptocurrency travel rule

• Critical Cosmos Database Flaw Affected Thousands of Microsoft Azure Customers

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• FIN8 APT Hackers Attacks Financial Institutions Using Sophisticated Backdoor

• Chinese Android Game Developer Exposes Data of Over 1 Million Gamers

• 73,500 Patients Data was Compromised in a Ransomware Attack on a Singapore Eye Clinic

• Tech CEOs Attend White House Meeting | Avast

• B. Braun Infusomat pumps could be hacked to alter medication doses

• New infosec products of the week: August 27, 2021

• Mobile Security companies are lining up for protection against Pegasus Malware

• UK new information security commissioner is John Edwards

• This Week in Security News – August 27, 2021

• Weekly Update 258

• Your data, your choice

• IndiaMART – 20,154,583 breached accounts

• Trends in the OT/ICS security space and what’s to come

• As China tightens data rules, Xpeng says it’s on the ‘right side’ of regulation

• Let the Games Begin! TikTok Partners with NICE to Attract Young Cybersecurity Professionals

• Asset Visibility – Breaking the Fourth Wall in Cybersecurity

• AWS Web Server Security

• Challenges organizations face when implementing zero trust architecture

• The 4 most common bad bot attack methods targeting financial services

• What is driving organizations to explore emerging technologies?

• GRC solutions revenues to reach nearly $15.2 billion in 2025

• Approov Alliance and Integration Program offers security solutions to protect APIs

• Man impersonates Apple support, steals 620,000 photos from iCloud accounts

• Granulate adds Kubernetes filtering feature to open-source gProfiler

• Bitwarden helps MSPs provide enterprise-ready security solutions to their customers

• Big bad decryption bug in OpenSSL – but no cause for alarm

• Azure’s now-fixed Cosmos DB flaw could have been exploited to read, write any database

• How to Spot Fake Login Pages

• Apple Pays $100 Million to Settle Developer Lawsuit and Agrees to Multiple App Store Changes

• Digital Rights Updates with EFFector 33.5

• Apple Making Multiple App Store Changes to Settle Class-Action Developer Lawsuit

• Fluree collaborates with government entities to ensure data integrity and secure data sharing

• FBI releases alert about Hive ransomware after attack on hospital system in Ohio and West Virginia

• Microsoft Issues ProxyShell Advisory After Attacks Begin

• Elastic acquires Cmd to bring comprehensive cloud runtime security to customers

Generated on 2021-08-28 23:55:27.975753