IT Security News Daily Summary 2021-09-21

• Ransomware Attacks Jumped Nearly 300% in 2021

• Choosing a web hosting service that’s right for your business

• StateRAMP posts first authorized vendor list

• VMware, Slack announce secure cloud services

• key fob

• US Treasury Dept. sanctions Russian cryptocurrency exchange for work with ransomware groups

• HTTPS Is Actually Everywhere

• Protecting critical infrastructure: All hands on deck

• Treasury Department sanctions cryptocurrency exchange Suex

• Facebook Goes On The Defensive Over Privacy, Data Challenges

• Turla APT group used a new backdoor in attacks against Afghanistan, Germany and the US

• Red Hat Insights and the delivery of a new security recommendation

• iOS 15 Removes Do Not Disturb Option That Silenced Notifications Only When iPhone Was Locked

• Suex to be you: Feds sanction cryptocurrency exchange for handling payments from 8+ ransomware variants

• Microsoft Outlook users report frustrating search, security keys bugs

• Telework is the new normal for Air Force Materiel Command

• Everything New in iOS 15.1 Beta 1

• HomePod 15.1 Beta Adds Lossless Audio and Dolby Atmos Support

• 12 years jail for man who unlocked phones, defrauded AT&T of $200m

• Epik Confirms Hack, Gigabytes of Data on Offer

• 3 Quick Ways to Recover Outlook PST Password Online

• 12 Benefits of Hiring a Certified Ethical Hacker

• NDAA cyber reserve proposal revised with labor in mind

• GSA plans cloud marketplace

• NETGEAR Releases Security Updates for RCE Vulnerability

• Western Sahara, the Biden Administration and Human Rights

• Resetting Passwords (and Saving Time and Money) at the IT Help Desk

• EU Set To Unveil Common Phone Charger Proposal

• Google unveils results of DevOps report, finding increase in public cloud use

• Russia-Linked Turla APT Uses New Backdoor in Latest Attacks

• The benefits of an IT management response

• NETGEAR Releases Security Updates for RCE Vulnerability

• iOS 15.1 Beta Lets Users Add COVID Vaccination Card to Wallet App

• Biden sanctions Suex cryptocurrency exchange to stifle ransomware payments

• National Diversity Awards | Avast

• Hackers Are Going ‘Deep-Sea Phishing,’ So What Can You Do About It?

• Decade-Old Adobe ColdFusion Vulnerabilities Exploited by Ransomware Gang

• Afghan Interpreters’ Data Exposed in MoD Breach

• VMware Releases Security Updates

• Deals: Get the Apple Pencil 2 for $109.99 ($19 Off) and 512GB M1 MacBook Air for $1,099.99 ($149 Off)

• iOS 15.1 Lets Users Add COVID Vaccination Card to Wallet App

• Medical Device Cybersecurity Center Launches in Minnesota

• VMware Releases Security Updates

• Apple Seeds First Beta of tvOS 15.1 to Developers

• Apple Seeds First Beta of watchOS 8.1 to Developers

• Apple Seeds First Betas of iOS 15.1 and iPadOS 15.1 to Developers

• Apple Seeds Seventh Beta of macOS Monterey to Developers

• SharePlay Re-Enabled in iOS 15.1, iPadOS 15.1, and tvOS 15.1 Betas

• An update on Memory Safety in Chrome

• Is Low Code development the biggest cyber threat?

• Top 10 Reasons to Invest in Web Security

• identity theft

• Apple Releases Security Updates for Multiple Products

• Unpatched High-Severity Vulnerability Affects Apple macOS Computers

• Users increasingly willing to abandon digital platforms that demand personal info, stringent passwords and time-consuming forms: study

• iOS 15 includes Face ID fix for security bypass using fake heads

• The iOS 15 Privacy Settings You Should Change Right Now

• Apple Releases Security Updates for Multiple Products

• Apple Will Let iPhone 13 Pro Users Disable Auto Switching to Ultra Wide Lens for Macro Photography Later This Fall

• Why EFF Flew a Plane Over Apple’s Headquarters

• Revolut CEO on newly-offered U.S. stock trading platform

• 3 trends shaping identity as the center of modern security

• Google To Purchase NY Office Building For $2.1 Billion

• Canadian firm VoIP.ms hit by non-stop extortion-based DDoS attacks

• Cybersecurity Solutions to Know in 2021: Open Source and Scaling Up

• White House nominates John Sherman for DOD CIO

• Turla APT Plants Novel Backdoor In Wake of Afghan Unrest

• 3 components to consider when selecting an MDR service

• Hacker Steals $12M from DeFi Platform

• Crowdstrike CEO on the threats the sector is facing, new company offerings

• Internet safety tips for kids and teens: A comprehensive guide for the modern parent

• The Biden administration plans to target exchange supporting ransomware operations with sanctions

• Defeat Ransomware with Immutable Backup Data and Encryption

• Cybersecurity experts’ advice: how to become cyber-resilient [Live Webinar] Sept 23, 2021

• Misconfigurations are the biggest threat to cloud security, period

• Hackers Attack Aviation Industry With AsyncRAT to Steal Login Credentials

• Nutanix announces new features for Cloud Platform

• Pakistani Scammer Sentenced to 12 Years in $200 Million Phone-Fraud Scheme

• 35 yrs Of Imprisonment for the Administrator of 200,000 DDoS Attacks

• Cisco Secure Receives Nutanix Technology Alliances New Partner of the Year Award

• China-Linked Group TAG-28 Targets India’s “The Times Group” and UIDAI (Aadhaar) Government Agency With Winnti Malware

• Nation-State Group Breaches Alaska Department Of Health

• HackerOne Expands To Tackle Open Source Projects

• Siemens Launches AI Solution To Fight Industrial Cybercrime

• $5.9 Million Ransomware Attack On Farming Cooperative May Cause Food Shortage

• Biden on US response to terrorism

• Catching the big fish: Analyzing a large-scale phishing-as-a-service operation

• How to Use iCloud+, with Additional Security and Privacy Features, and More

• BT Pledges To Curb Carbon Emissions By 2030

• “Modern CTO” Features Avast’s Michal Pechoucek | Avast

• Zero trust, EMS top Air Force cyber priorities

• Google, Microsoft and Oracle amassed the most cybersecurity vulnerabilities in the first half of 2021

• U.S. Treasury sanctions cryptocurrency exchange for alleged role in ransomware attacks

• OpenOffice Vulnerability Exposes Users to Code Execution Attacks

• Providing Developers Value-Focused Feedback in Security Software Development

• Deals: Not Upgrading to iPhone 13? Amazon Has Apple’s Official iPhone 11 and iPhone 12 Cases for Up to $30 Off

• What is Doxxing and How to Avoid It (UPDATED 2021)

• Is Extended Detection and Response (XDR) the Ultimate Foundation of Cybersecurity Infrastructure?

• Cryptominer z0Miner Uses Newly Discovered Vulnerability CVE-2021-26084 to Its Advantage

• Computer vision-powered workplace safety systems could lead to bias and other harms

• iPhone 13 Reviews: Excellent Cameras, Speedy Performance, and Improved Battery Make for Worthy Upgrade

• Apple iOS 15 Update: What Is New?

• Boris Johnson Talks Tax With Amazon’s Jeff Bezos

• Identity Management Beyond the Acronyms: Which Is Best for You?

• BlackMatter Strikes Iowa Farmers Cooperative, Demands $5.9M Ransom

• How privacy and security challenges may cause people to abandon your website

• U.S. companies excel at limiting shadow IT, according to a new report

• Managing change in AI: Don’t forget about your staff’s needs and abilities

• iPhone 13 Pro Reviews: ProMotion and Longer Battery Life Highlight an Iterative Refresh

• EventBuilder Data Exposure: Registrants’ Details in Plain Sight

• Turla hacking group launches new backdoor in attacks against US, Afghanistan

• Four months on from sophisticated cyberattack, Alaska’s health department is still recovering

• Average consumer spending $273 per month on subscription services: report

• HackerOne expands Internet Bug Bounty project to tackle open source bugs

• Multi-party breaches cause 26-times the financial damage of the worst single-party breach: Report

• 46% of On-Prem Databases Globally Contain Vulnerabilities: Is Yours Safe?

• Fix network printing or keep Windows secure? Admins would rather disable PrintNightmare patch

• Details of 100M Visitors to Thailand Exposed Online: Research Firm

• Cring Ransomware Gang Exploits 11-Year-Old ColdFusion Bug

• iPhone 13 and iPhone 13 Pro Unboxing Videos Shared Ahead of Friday’s Launch

• BlackMatter Ransomware Hits New Cooperative

• 4 Best Practices for Supply Chain Cyber Risk Management

• The Importance of Adopting a Risk Management Approach to Security and Privacy

• Software supply chain management company Cloudsmith raises $15M

• App observability platform DeepFactor raises $15M

• Slack launches new media sharing features and government tier

• Identity Solutions Provider Saviynt Raises $130 Million

• New OffSec Training Library Subscriptions: Learn One and Learn Unlimited

• Zero Trust Architecture – No Longer A ‘Nice To Have’

• Marketron Suffers BlackMatter Attack, Shuts Down All svcs. – 5 Experts Comment

• New Mac malware masquerades as iTerm2, Remote Desktop and other apps

• Twitter Offers $800m To Settle Investor Lawsuit

• DARPA’s vision for satellite communications

• UK Ministry of Defence apologises after Afghan interpreters’ personal data exposed in email blunder

• Ransomware Group Demands Millions From U.S. Farmer Cooperative

• Detection evasion in CLR and tips on how to detect such attacks

• Alaska’s Department of Health and Social Services Hack

• Apple Begins Selling Refurbished iPhones in Canada

• How to mitigate security vulnerabilities automatically with RASP

• Here Are the Free Ransomware Decryption Tools You Need to Use

• OneTrust acquires Tugboat Logic to automate InfoSec assurance and certification

• Expert Comment On ‘Smishing’: The Rising Threat For Businesses

• US agricultural co-op hit by ransomware, expects food supply chain disruption

• GFI FaxMaker makes it easy for administrators

• 8 Best Motherboards for Ryzen 7 3700X 2021 – Buying Guide

• How to Use the Find My App to Locate Friends, Apple Devices, and AirTags

• Malicious Email Surge Predicted for Q4

• New Capoae Malware Infiltrates WordPress Sites and Installs Backdoored Plugin

• US agricultural co-op hit by ransomware, expects supply chain disruption

• Windows IIS Servers Compromised

• iOS 15 lets you spy on apps that might be spying on you

• Siemens launches AI solution to fight industrial cybercrime

• Apple Offering 6-Month Apple Music Subscription Free With AirPods and Beats Purchases

• Apple Researching Ways to Use iPhone Camera to Detect Childhood Autism

• RGA Data Breach: Another Organization Affected by Massive Microsoft Exchange Hacking Campaign

• Quick Hits

• FCW Insider: September 21, 2021

• European Police Bust €10m Mafia Fraud Ring

• CRISC certification: Your ticket to the C-suite?

• The new math of cybersecurity value

• Farming Group Warns of Supply Chain Chaos After Ransomware Attack

• $100 Million Pledged by Google to Groups that Manage Open-Source Projects

• Payment API Flaws Exposed Millions of Users’ Data

• Forgot to Pre-Order Your iPhone 13 or 13 Pro? Apple Store Pickup Remains an Option for Launch Day

• Importance of Access Revocation for SMBs | Avast

• Cybersecurity Priorities in 2021: How Can CISOs Re-Analyze and Shift Focus?

• Looking for adding new detection technologies in your security products?

• F5 acquires Threat Stack to strengthen its cloud security capabilities

• CoSoSys Endpoint Protector 5.4.0.0 enables users to override a DLP policy

• Apache OpenOffice is currently impacted by a remote code execution flaw

• Microsoft Power Apps data exposure: Prioritizing sensitive data with secure configuration settings

• Black Matter gang demanded a $5.9M ransom to NEW Cooperative

• The complexities of vulnerability remediation and proactive patching

• Rules to follow for data destruction on Hard Drives

• F5 to acquire cloud security firm Threat Stack

• Challenges CISOs face in a rapidly evolving cybersecurity landscape

• Mafia works remotely, too, it seems: 100+ people suspected of phishing, SIM swapping, email fraud cuffed

• 77% of execs concerned about security tools gaps in their company

• CISSP – Tales of the Unexpected

• Data of 106 million visitors to Thailand leaked online

• Organizations prioritize strategic security programs, but lack fundamentals

• You’ve trained at the cutting edge, here’s how to keep your DFIR skills razor sharp

• Attacks Targeting OMIGOD Vulnerability Ramping Up

• Office workers unwilling to change their behavior, despite being aware of the cybersecurity challenges

• How to Report a Data Breach per GDPR

• Cybersecurity Maturity Model Certification (CMMC) – A Model for Everyone

• 3-D Secure transactions growth fueled by card-not-present explosion and PSD2

• ProLion ClusterLion for SAP now available on Azure Marketplace

• 2021-09-20 – Squirrelwaffle Loader with Cobalt Strike

• Trend Micro launches first data centre region in Australia

• NordVPN vs. Surfshark: Which VPN is best for you?

• CDS partners with Post-Quantum to provide post-quantum encryption algorithms for super yachts

• Water Basilisk Uses New HCrypt Variant to Flood Victims with RAT Payloads

• Apple Card Gains Advanced Fraud Protection in iOS 15

• San Diego steps up cloud, remote support, IT service management

• Does Your Organization Have a Security.txt File?

• The Ultimate iOS 15 Walkthrough: Guides and How Tos for Every New Feature

• IT Security News Daily Summary 2021-09-20

• Europol nabs 106 criminals involved in SIM swapping, money laundering

• Ohio opens smart mobility corridor

• Amazon Driver-Surveillance Cameras Roll Out, Sparking Debate

• 1Password Releases Safari Extension for iOS 15 and iPadOS 15

• Apple Prompts Pre-Order Customers to ‘Get Ready’ for New iPhone 13 With iCloud Syncing and Trade-Ins

• Windows 11 prep: How to convert MBR hard drive partitions to GPT

• European Regulators Flag Privacy Concerns With Facebook Smart Glasses

• Apache OpenOffice can be hijacked by malicious documents, fix still in beta

• iMovie and Clips Apps for iOS Gain Support for iPhone 13 Features

• iOS 15 Features: Our Top 10 Picks

• Iowa farm services provider hit with BlackMatter ransomware and $5.9 million ransom

• Europol Breaks Open Extensive Mafia Cybercrime Ring

• Americans Stressed Out by Cyber-attack Coverage

• France Condemns #Anti2010 Cyber-bullying

• iOS 15 Includes Improved Face ID Anti-Spoofing Models and Other Vulnerability Fixes

• Web-Based iCloud Mail Redesign, Hide My Email, and Custom Domain Features Now Live

• Taking meaningful steps toward stronger security

• Apple Ships iOS 15 with MFA Code Generator

• BrandPost: Keeping Your Hybrid Workforce Secure with Cyber Hygiene Training

• Zero Trust: Follow a Model, Not a Tool

• GSA plans one-stop shop cloud marketplace

• Payment API Bungling Exposes Millions of Users’ Payment Data

• Apple Releases Safari 15 Update for macOS Big Sur and macOS Catalina With New Safari Design, Tab Groups, and More

• Just Install iOS 15? Here’s Where to Start

• On the Special Counsel’s Weird Prosecution of Michael Sussmann

• The Cozy Relationship Between Russian State and Criminal Actors

• These iOS 15 Features Aren’t Available on the iPhone X or Older

• Low-Cost iPad and iPod Touch Are Last iOS Devices With Headphone Jack as iPad Mini 6 Drops Support

• How the pandemic transformed citizen service

• Here’s how to become an in-demand cybersecurity expert

• Cybercriminals Linked to Italian Mafia Arrested by European Police

• Data of 106 Million Visitors to Thailand Breached

• Large phishing campaign targets EMEA and APAC governments

• Ransomware recovery: Start getting back up before you’re even hit

• Apple Releases tvOS 15 With Spatial Audio, Stereo Support Using Two HomePod Minis, Hey Siri Improvements and More

• Apple Releases New HomePod 15 Software With Siri Playback Support, HomePod Mini Stereo Pairs, and More

• Apple Releases iOS 15 and iPadOS 15 With Safari Updates, Focus Mode, Live Text, iCloud+, System-Wide Translate, On-Device Siri and More

• A guide to combatting human-operated ransomware: Part 1

• Introducing the World’s First Free Cloud WAF to Secure Your Web Applications

• Should companies pay ransomware, and is it illegal to?

• How to Use Focus to Limit Notifications in iOS 15 and macOS Monterey

• BSidesSF Call For Papers Announced

• All old Android phones to get the latest mobile security update from Google

• Operation Layover Malware Campaign Targeted Aviation Industry For Five Years

• IoT Security (Internet of Things Security)

• Russian electronic voting system hit by 19 DDoS attacks in one day

• McAfee Enterprise Defender Blog | MSHTML CVE-2021-40444

• A Journey in Organizational Cyber Resilience Part 2: Business Continuity

• Vulnerability Summary for the Week of September 13, 2021

• Police Announce Huge Bust Of Mafia’s Cyber Crime Operations

• Google Announces Major Privacy Change Coming To Android

• Epik Data Breach Affects 15 Million Users, Including Non-Customers

• FBI Says $133 Million Lost In Romance Scams In 2021

• Kuo: iPhone 14 Pro Models to Feature Hole-Punch Display and 48MP Wide Camera

• Kuo: iPhones With Under-Screen Touch ID Now Coming in 2023, Foldable iPhone in 2024

• Multilingual Cybersecurity Awareness Training adapted for your needs

• APT actors exploit flaw in ManageEngine single sign-on solution

• Phishing attacks: Police make 106 arrests as they break up online fraud group

• Cloud security company Threat Stack acquired by F5 for $68 million

• EventBuilder Exposed Information of Over 100,000 Event Registrants

• “Back to basics” as courier scammers skip fake fees and missed deliveries

• Vulnerability Summary for the Week of September 13, 2021

• COBIT

• How to see who is trying to break into your Office 365 and what they’re trying to hack

• iPhone 13 Pro Pre-Orders Off to Promising Start With Strong Early Demand, Says Analyst

• Regulating Online Speech: Ze German Way

• Ransomware Crypto Exchanges Sanctions to Be Implemented by the U.S.

• Let’s Encrypt’s Root Certificate is expiring!

• Post-pandemic IT leadership

• Deals: Amazon Introduces Its First iPad Mini 6 Discount, Get the 64GB Wi-Fi Tablet for $459.99 ($39 Off)

• iPhone 13 vs. iPhone 12 Buyer’s Guide

• $200M Lost in Illegal Phone Unlocking Scheme

• How Cybersecurity Can Affect Your SEO Ranking

• 5 Ways Businesses Can Stay Ahead of Cybersecurity Attacks

• Microsoft Researches Ransomware Attack Targeting App Developers

• Google: This major privacy change is coming to billions of Android devices soon

• Trust, but verify: An in-depth analysis of ExpressVPN’s terrible, horrible, no good, very bad week

• Numando: a Banking Trojan Targeting Brazil Abuses YouTube for Spreading

• Exclusive Deals: Get 40% Off a MagSafe-Compatible Car Mount for Your iPhone 13 and More in Our New Anker Sale

• Popular DJing App Djay Becomes One of First Apps to Integrate Shazam on iOS 15

• How to Protect Yourself from Security Challenges Caused by Video Players

• Health Care Interoperability: What Are the Security Considerations?

• Bring Your APIs Out of the Shadows to Protect Your Business

• Attackers Use Linux Binaries as Loaders for Windows Malware

• Lubbock County Denies Data Leak, Says Data Temporarily Attainable Under New Software System

• Links Detected Between MSHTML Zero-Day Attacks and Ransomware Operations

• Numando: a Banking Trojan Targeting Brazil Abuses YouTube for Spreading

• Europol arrested 106 fraudsters, members of a major crime ring

• Kape Technologies Acquired The Popular ExpressVPN For $936 Million

• Serious RCE Vulnerabilities Found In Motorola Halo+ Baby Monitor

• Google To Roll Out Permissions Auto-Reset For Android Apps Even On Older Devices

• Microsoft Introduced Passwordless Account Logins For Enhanced Safety

• AI-powered disinformation detection platform Blackbird nabs $10M

• Cyberattack on Alaska Health Department Linked to State-Sponsored Hackers

• Microsoft makes a bold move towards a password-less future

• Facebook rebukes WSJ over investigation on the platform’s ability to harm, ‘toxic’ impact

• Google: This major app change is coming to billions of Android devices soon

• CCSP vs. Professional Cloud Security Manager: How Do They Compare?

• Ongoing Phishing Campaign Targets APAC, EMEA Governments

• Europol Busts Major Crime Ring, Arrests Over 100 Online Fraudsters

• Experts Make Out a List of Vulnerabilities Abused by Ransomware Groups

• 8 Best White Motherboards For Your Gaming Build 2021 – Top Picks

• Freedom Hosting operator gets 27 years for hosting Dark Web child abuse sites

• Indonesia Says No Evidence of Alleged Chinese Intel Hack

• Infosecurity Magazine Autumn Online Summit 2021 – Last Chance to Register!

• Mirai botnet exploiting Azure OMIGOD vulnerabilities

• A New Wave of Malware Attack Targeting Organizations in South America

• A week in security (Sept 13 – Sept 19)

• GitLab Files For Initial Public Offering After $6bn Valuation

• ‘Intensifying’ Auto Chip Shortage Hits Daimler Truck Production

• Ireland Privacy Regulator Quizzes Facebook Over Smart Glasses

• US Sanctions ‘Aim To Cut Off Hackers’ Access’ To Cryptocurrency

• Nigerian Threat Actor Targeting Aviation Industry Since 2018

• ‘Ted Lasso’ Makes History as First Streaming Service Show With Emmy Win For Outstanding Comedy Series

• Former IT Exec Pleads Guilty to Insider Trading Conspiracy

• A New Crypto Giveaway Scam Is Promoted Via Email

• Back to School Cyber Security Tips

• 7 unexpected ransomware costs

• 5 observations about XDR

• FCW Insider: September 20, 2021

• Payment API Vulnerabilities Exposed “Millions” of Users

• US Set to Sanction Cryptocurrency Firms Involved in Ransomware

• Everything You Need to Know About Credential Stuffing and How to Prevent It

• OpenSea Employee Resigns Over NFT ‘Insider Trading’ Row

• Teamsters Union Targets Amazon Facilities Across Canada

• Silicon UK In Focus Podcast: Schneider Electric

• 106 arrested in a sting against online fraudsters

• Trying to register your antivirus in Windows Security Center?

• Alphabet X Links Congo Cities With Beams Of Light

• Secrets from Public Repositories Were Exposed Due to Travis CI Flaw

• CIO names stocks that are resilient in the face of tax reform, pandemic and rising rates

• Pakistani man sentenced to 12 years of prison for his role in AT&T hacking scheme

• How to retain the best talent in a competitive cybersecurity market

• Google to Auto-Reset Unused Android App Permissions for Billions of Devices

• Securing Kubernetes as it becomes mainstream

• Learn dance from Artificial Intelligence AI based Robots

• Serious vulnerability in HP Omen gaming PCs discovered

• Numando: A New Banking Trojan Targeting Latin American Users

• What businesses need to know about data decay

• Zero trust security solutions widely adopted, spurred by surge in ransomware

• Ransomware still a primary threat as cybercriminals evolve tactics

• Apple Highlights Additional iOS 15 Features, Such as Dual-SIM Phone Number Switching in iMessage Conversations

• Tech pros reporting a positive perception of their roles, looking forward to what lies ahead

• Everything You Need to Know about Cyber Crisis Tabletop Exercises

• The Digital Pandemic – Ransomware

• Cloud and online backups increasing in popularity, but tape usage remains

• Apple Says Find My Network Support for AirPods Delayed Until Later This Fall

• How do you measure the impact of security? Find out at SecTalks 2021

• Victoria launches five-year, AU$50 million cyber strategy

• Tick, tick, tick … TikTok China just limited kids to 40 minutes’ use each day

Generated on 2021-09-21 23:55:20.519227