IT Security News Daily Summary 2021-09-18

• AT&T Free Msg: You know you shouldn’t click … so we did it for you!

• Capoae Malware Attacking Linux systems & Web Apps Using Multiple Vulnerabilities

• The Biden administration plans to target exchanges supporting ransomware operations with sanctions

• Edward Snowden urges users to stop using ExpressVPN

• Threat actor has been targeting the aviation industry since at least 2018

• Telegram emerges as new dark web for cyber criminals

• FCC Commissioner Calls For More Transparency, Accountability From Facebook

• Scammers Use ‘IT Support-Themed Email’ to Target Organizations

• Republican Governors Association Targeted in Microsoft Exchange Server Attacks

• Get two extra displays for your laptop plus a lifetime of powerful VPN protection

• Former US Intelligence Operatives Admit They Hacked for UAE

• Top Stories: iPhone 13, Apple Watch Series 7, New iPads, and More

• The FCC is trying to stop robocalls, but the scammers won’t disappear

• Expert discloses details and PoC code for Netgear Seventh Inferno bug

• South Africa’s Department of Justice hit by a Ransomware Attack

• A Look at the Triple Extortion Ransomware

• Epik Data Breach- Blue Hexagon Comments

• Build or Buy your own antivirus product

• Indicator Of Attack(IoA’s) And Activities – SOC/SIEM – A Detailed Explanation

• National Small Business Week: 10 Best Practices for Small Business Cybersecurity

• 2021-09-17 – Squirrelwaffle Loader with Cobalt Strike

• SnapLogic Flows enables non-technical business teams to build integrations and automations

• Mirantis Flow provides virtualization and containerization in the data center

• Numando: Count once, code twice

• Week in security with Tony Anscombe

• Apple and Google Go Further Than Ever to Appease Russia

• Weekly Update 261

• Kolide raises $17M to fuel the growth and expansion of its go-to market strategy

• Cytracom acquires OmniNet to deliver security and connectivity solutions for their customers

• TTEC hit with ransomware attack, hampering work for major clients

• CVE-2021-26333 AMD Chipset Driver flaw allows obtaining sensitive data

• Jason Chan joins Torq CISO Advisory Board

• Yes, of course there’s now malware for Windows Subsystem for Linux

• BLM to bring leadership back to D.C.

• IT Security News Daily Summary 2021-09-17

• 2021-09-14 – Pcap and malware for an ISC diary (Hancitor with Cobalt Strike)

• Friday Squid Blogging: Ram’s Horn Squid Shells

• $133 million lost in online romance scams in 2021: FBI

• Best VPN for iPhone and iPad 2021

• Attackers Exploit OMIGOD Flaw in Azure Despite Microsoft Fixes

• Apple fixes actively exploited FORCEDENTRY zero-day flaws

• HTML Smuggling: A Resurgent Cause for Concern

• New CIOs: 5 Key Steps in Your First 100 Days

• AI Weekly: UN proposes moratorium on ‘risky’ AI while ICLR solicits blog posts

• Minnesota launches digital vaccination record

• Experts warn that Mirai Botnet starts exploiting OMIGOD flaw

• How California’s Broadband Infrastructure Law Promotes Local Choice

• Humio Recognized as Top 3 Observability Award Winner by EMA

• Shining a Light on DarkOxide

• Gem State University Saves a Small Fortune on TCO With Humio

• Hurricane Ida knocked out key NARA system

• IRS’ plans for cracking cryptocurrency wallets

• Securing Home Employees with Enterprise-Class Solutions

• How to use VPN to access blocked websites?

• How to Protect Against Deepfake Attacks and Extortion

• Recently reported Microsoft zero-day gaining popularity with attackers, Kaspersky says

• Prison for AT&T Phone-Unlocking Fraudster

• More Tribes Given Enhanced Access to US Crime Data

• How not to get caught in law-enforcement geofence requests

• MacRumors Giveaway: Win an iPhone 13 Pro or Pro Max From iMazing

• Biden administration set to ban crypto for ransomware payments

• How To Start a Successful Phishing Simulation Program

• How Ethical Hacking Optimizes Your Cybersecurity

• This Week in Security News – September 17, 2021

• Porn Problem: Adult Ads Persist on US Gov’t, Military Sites

• Have you tried to guess your boss’s password? Lots of workers have, according to a report

• Hackers Alter Cobalt Strike Beacon to Target Linux Environments

• How Agencies Can Refine Threat Intelligence Through Automation

• Apple to Require COVID Testing for Employees Starting Next Month, Still No Vaccine Mandate

• Apple and Belkin Reducing Environmental Impact of Packaging With iPhone 13 Launch

• Google Fixed Two Chrome Zero-Day Bugs Under Attack

• Cybersecurity Risk Management During the Covid-19 Time

• Small businesses need to step up efforts to secure and retain hybrid workers

• Dell study finds most organizations don’t think they can recover from a ransomware attack

• Credit Union’s Legal Battle With Tech Giant Fiserv Rumbles On

• Renewable AppleCare+ Coverage for Mac Now Available in Australia, Canada, France, Germany, Italy, Japan, Spain, and the UK

• Something phishy: Tech recruiters jabbed by fake COVID-19 Passport scam

• Are You the Keymaster?

• Identity in Africa – an existential right for every citizen

• How Estonia Created Trust in Its Digital-Forward Government

• Free REvil Decryptor Launched

• Microsoft MSHTML Flaw Exploited By Ryuk Ransomware Gang

• Tesla To Work With Global Regulators On Data Security

• Telegram Emerges As New Dark Web For Cyber Criminals

• Cryptocurrency Launchpad Hit By $3 Million Supply Chain Attack

• Apple Shares Guided Video Tour of iPhone 13 and 13 Pro

• FireEye CEO discusses the state of cybersecurity

• At Least One iPhone 14 Model Will Reportedly Still Lack 120Hz ProMotion Display

• IronNet shares fall 17% in intraday trading

• US Mulls Sanctions Use In War Against Hacker Cryptocurrency Payments

• AMD Chipset Driver Vulnerability Can Allow Hackers to Obtain Sensitive Data

• Keeping Software Secure – Reflections in Honor of National Coding Week

• email spam

• CISA warns of APT actors exploiting newly identified vulnerability in ManageEngine ADSelfService Plus

• Severe Remote Code Execution Flaws Discovered in Motorola Halo+ Baby Monitors

• First Circuit Expands Due Process Rights of Noncitizens at Immigration Bond Hearings

• Facebook’s own research reveals the harm that Instagram can inflict

• German Election body hit by a cyber attack

• iPhone 13 vs. iPhone 13 Pro Buyer’s Guide

• Some Customers Have Experienced Issues Pre-Ordering the iPhone 13 With an Apple Card

• Deals: Walmart Takes Up to $50 Off Apple’s iPad mini 6 in First Sales

• FBI and CISA warn of APT groups exploiting ADSelfService Plus

• Operator of ‘DownThem’ DDoS Attack Service Convicted

• Deals: Apple’s MagSafe Duo Charger Hits New All-Time Low Price of $96.74 on Verizon ($32 Off)

• A New Malware Uses Windows Subsystem

• Ditch the Alert Cannon: Modernizing IDS is a Security Must-Do

• Pakistani Man Involved in AT&T Hacking Scheme Sentenced to Prison in U.S.

• Apple Starts Offering 0% Financing on iPhones for 24 Months in Canada

• Online Romance Scams Led to $113 Million Financial Loss in 2021, the FBI Reports

• 6 Benefits of Using Privileged Access Management

• AT&T Phone-Unlocking Malware Ring Costs Carrier $200M

• Is it OK to use stolen data? What if it’s scientific research in the public interest?

• Mirai Botnet Starts Exploiting OMIGOD Flaw as Microsoft Issues More Guidance

• Deals: A Look at the iPhone 13 Sales Offered by AT&T, Verizon, T-Mobile, Best Buy, and More

• Google, Apple Pull Alexei Navalny App After Russian Demand

• The M140i project post – Part 15

• Microsoft MSHTML Flaw Exploited by Ryuk Ransomware Gang

• German Election Authority Confirms Likely Cyber Attack

• Anonymous Hacktivists Leak 180 GB of Data from Web Host Epik

• Lenovo: No Fix for High-Severity Flaw in Legacy IBM System X Servers

• iPhone 13 Pro’s New 1TB Storage Option Already Facing Delivery Times Into October

• Ransomware Groups Reinvest Capital to Improve Attack Methods

• Biometrics and the problem of privacy

• Download Kali Linux 2021.3 with Kali NetHunter on smartwatch, new tools

• U.S. Agencies Warn of APTs Exploiting Recent ADSelfService Plus Zero-Day

• Anonymous Leaked a Bunch of Data From a Right-Wing Web Host

• iPhone 13, iPhone 13 Mini, iPhone 13 Pro, and iPhone 13 Pro Max Now Available for Pre-Order

• Security Expert Re: New OWASP Top 10 List for Application Security Risks

• Microsoft Lets Users Go Passwordless, Experts Weigh In

• Former US Intel Operatives Fined $1.6M For Hacking For A Foreign Govt

• Understanding & Surviving Ransomware

• Sir Clive Sinclair, Computing Pioneer, Dies At 81

• Zero-Click iMessage Exploit

• iPadOS 15 Allows Apps to Use Up to 12GB of RAM on High-End iPad Pro, Up From Just 5GB

• FBI and CISA Warn Regarding a Critical Zoho Bug

• A New App Helps Iranians Hide Messages in Plain Sight

• New Malware Targets Windows Subsystem for Linux to Evade Detection

• Apple Seemingly Adds Russia to List of Countries Where iCloud Private Relay Won’t Be Available

• The Bug Report | September 2021: CVE-2021-40444

• This banking Trojan abuses YouTube to manage remote settings

• Cybersecurity M&A Roundup for September 1-15, 2021

• New Go malware Capoae uses multiple flaws to target WordPress installs, Linux systems

• Exploitation of the CVE-2021-40444 vulnerability in MSHTML

• MikroTik Shared a Mitigation to Secure Routers From Massive Mēris DDoS Botnet Attack

• Romance Scammers Make $133m in First Half of 2021

• iPhone 13 Batteries Positively Excel at Video Streaming Compared to iPhone 12

• Top cybersecurity M&A deals for 2021

• Cyberattacks against the aviation industry linked to Nigerian threat actor

• Experts Concerned Over New Digital Secretary’s Lack of Cyber Knowledge

• Section 889: the US Regulation that extends far beyond the US

• Government Use Of Biometric Data | Avast

• CISA: Patch Zoho Bug Being Exploited by APT Groups

• Now You Can log in to your Microsoft Account Without a Password

• Facebook Releases Video Capture Glasses | Avast

• What is the Dark Web? The Dark Web explained

• Years-Long Attack by Chinese-Linked APT Groups Discovered by McAfee

• Malware Attack on Aviation Sector Uncovered After Going Unnoticed for 2 Years

• A new Win malware uses Windows Subsystem for Linux (WSL) to evade detection

• Want your endpoint security product in the ‘Microsoft Consumer Antivirus Providers for Windows’ ?

• China formally applies to join CPTPP trade pact

• No more Password based logins for Microsoft users

• Telegram becomes a hub for hackers buying stolen data

• Securing AWS Infrastructure with Trend Micro Workshop

• Integrate Serverless Security for Runtime Apps

• New infosec products of the week: September 17, 2021

• Open source cyberattacks increasing by 650%, popular projects more vulnerable

• The digital identity imperative

• Apple Online Store Down Ahead of iPhone 13 and 13 Pro Pre-Orders

• Highest paying IT certifications in 2021

• WTF? Microsoft makes fixing deadly OMIGOD flaws on Azure your job

• NAVEX Global Named a Leader in Gartner® 2021 Magic Quadrant™ for IT Risk Management

• Cloud Security Alliance Releases New Guidance for Healthcare Delivery Organizations That Provides Measurable Approach to Detecting and Defending Against Ransomware Attacks

• Poll: Cyber Pros Say White House Cybersecurity Summit Is a Step in the Right Direction

• ‘Numberless’ bank cards could be the future: here’s why

• How surveillance capitalism will totally transform the domain name system

• Australia, UK, and US Announce Security Partnership

• US Imprisons World’s Largest Facilitator of CSAM

• Modern security strategies key to support remote workforce demands

• Data and AI professionals prioritize learning new skills amid labor shortage

• How to Help Seniors Spot Online Job Scams

• NSW to trial geolocation and facial recognition app for home-based quarantine

• 5G trends accelerating, all major regions pursuing 5G Core testing and deployments

• Safe Systems CloudInsight M365 Security Basics provides visibility into Microsoft security settings

• Trial Ends in Guilty Verdict for DDoS-for-Hire Boss

• Sentry’s capabilities enable enterprise teams to reduce risk and management overhead

• Push Technology Diffusion 6.7 secures personalized data delivery to individual clients

• Additional Guidance Regarding OMI Vulnerabilities within Azure VM Management Extensions

• FTC: Health Apps Must Notify Consumers of Data Breaches

• DDN and Tintri announces IntelliFlash N6000 series to enhance latency and throughput for file services

• Versa Networks offers 5G WAN Edge products to deliver SASE services to the network edge

• Google and Microsoft had the most vulnerabilities in the first half of 2021

• OWASP Names a New Top Vulnerability for First Time in Years

Generated on 2021-09-18 23:55:30.636934