IT Security News Daily Summary 2021-10-05

• Nominee to lead USAF acquisition names software, IT as top priorities

• Axis releases updates for three new vulnerabilities found by security company

• Analysis of a Parental Control System

• IP Surveillance Bugs in Axis Gear Allow RCE, Data Theft

• Why Windows 11’s security is such a big deal

• New AirPods Pro and AirPods Max Firmware Adds Updated Find My Integration

• The Biggest Cybersecurity Threats Facing Healthcare Organizations—and How to Protect Yourself

• The Top 6 Cyber Attacks Of 2021 So Far

• It’s Cybersecurity Awareness Month. Does your business have a viable plan yet?

• How the cloud eased VA’s COVID pains

• One Identity Acquires OneLogin

• Apple Users Underwhelmed by iPhone 13 and Apple Watch Series 7, Survey Shows

• Enhance Network Security for AWS Transit Gateway

• Apache Web Server Zero-Day Exposes Sensitive Data

• Squid Game Scenes Cut Over Data Exposure

• What Happens to Victims When a Ransomware Gang Vanishes?

• Cybersecurity risk assessment: Does Your Company Need It?

• DISA restructures cloud office

• BlackBerry ties malware campaign targeting victims in India to Chinese cyberespionage group

• What, exactly, is cybersecurity? And why does it matter?

• Chase Bank Heavily Targeted Via XBALTI Phishing Kit

• Apple CEO Tim Cook Reflects on Steve Jobs in Heartfelt Memo to Employees

• Apple Updates AirPods 2, AirPods Pro and AirPods Max Firmware to Version 4A400

• White House Dark Web Marketplace Shuts Down its Operations

• Is accidental data deletion the biggest threat to data protection?

• Apache Fixes Actively Exploited Zero-Day Vulnerability, Patch Now

• One Identity acquires OneLogin in bid to offer consolidated IAM suite

• Reolink RLC-811A security camera review: Pan tilt, zoom and an extra loud siren

• Adaptive Shield Raises $30M for SaaS Security Posture Management

• Northern Irish Voucher Scheme Marred by Identity Snag

• Apache patch a zero-day flaw exploited in the wild

• Apple Responds to Report Saying Company’s Health Team Has Faced Several Internal Issues

• Banks Pressuring Visa to Cut Back on Apple Pay Fees

• AT&T Business Summit is virtual Oct. 27-28 and free!

• Whistleblower Says Facebook Knows It Is Harming People

• How Does Hashgraph Work – A Simple Guide for Beginners

• Executive Spotlight: Q&A with Vice President, Global Commercial, Britt Norwood

• IRS solidifies relationship with management group

• Facebook whistleblower: ‘Morally bankrupt’ social giant will have to ‘hook kids’ to grow

• Why Access Control Has Become an Important Front in the War Against Cybercrime

• Researchers Discover UEFI Bootkit Targeting Windows Computers Since 2012

• Facebook shoots own foot, hits Instagram and WhatsApp too

• Tesla Ordered To Pay $130 Million To Former Worker

• UK To Base Its ‘National Cyber Force’ In Lancashire

• Mobile security: It’s time for a little tough love for Android users

• Unnamed Ransomware gang uses a Python script to encrypt VMware ESXi servers

• Practical tips on how to use application security testing and testing standards

• Cyber Attack fear for abandoned US Vehicles and Aircrafts in Afghanistan

• McAfee Enterprise Is Ready for Windows 11, Are You?

• 2021 Hispanic Heritage Month Pt. 2: A Celebration of Hispanic Heritage and Hope

• When your VPN is a matter of life or death, don’t rely on reviews

• UEFI threats moving to the ESP: Introducing ESPecter bootkit

• Water Wars: ‘AUKUS Is Born’

• Multi-Factor Authentication Best Practices & Solutions

• Be Cyber Smart During Cybersecurity Awareness Month

• Illegal Activities Endure on China’s Dark Web Despite Strict Internet Control

• Certified Information Systems Auditor (CISA)

• How to Build an Incident-Response Plan, Before Security Disaster Strikes

• Phishing campaigns against Chase Bank customers are on the rise

• Qualys Ransomware Risk Assessment service aims to help you thwart potential attacks

• Be Cyber Smart During Cybersecurity Awareness Month

• Apache Warns of Zero-Day Exploit in the Wild — Patch You Web Servers Now!

• Criminals were inside Syniverse for 5 years before anyone noticed

• How to Use Multitasking on the iPad

• Ransomware gang behind attacks on 100+ companies busted

• New Attack Let Hackers Steal Data From Air-Gapped Networks Using Ethernet Cable

• Earning trust from others — a CIA veteran’s suggestions

• YubiKey Bio builds biometric authentication into a security key

• First look at the YubiKey Bio

• New Python ransomware targets virtual machines, ESXi hypervisors to encrypt disks

• Oops! Compound DeFi Platform Gives Out $90M, Would Like it Back, Please

• Facebook Blames Outage on Faulty Router Configuration

• Secure Data Collaboration Firm Duality Technologies Raises $30 Million

• Arizona Launches Command Center to Combat Cyberattacks

• Cloud Security Company Orca Raises $550 Million in Extended Series C Round

• CVE Data Is Often Misinterpreted: Here’s What to Look For

• Telegraph Newspaper Bares 10TB Of Subscriber Data And Server Logs To World+Dog

• Senate Committee Drops New FISMA Reform Bill

• iPad Pro Could Adopt OLED Display With ProMotion Down to 10Hz in 2023 or 2024

• Deals: VMware Kicks Off 15% Storewide Sale, Including New Savings on Fusion 12 Software

• Apple Now Most Popular Watch Brand Among Upper-Income U.S. Teens, Unseating Rolex

• Europol announces two more ransomware busts in Ukraine

• New Ransomware Dubbed Atom Silo Targets Confluence Servers

• Heimdal™ Security Is a Finalist at the Network Computing Awards 2021 in Five Categories

• Telegraph newspaper bares 10TB of subscriber data and server logs to world+dog

• CTO 3.0: The Neo Chief Technology Officer

• Donald Trump Asks US Judge To Reinstate Twitter Account

• New Study Links Seemingly Disparate Malware Attacks to Chinese Hackers

• Deals: Adorama Introduces New Low Prices on 32GB Apple TV 4K ($159) and AirPods Max ($449)

• Google Protects Your Accounts – Even When You No Longer Use Them

• Harassment and the Skills Gap: Improving Retention in the Security Community

• Developer-focused infrastructure security platform Mondoo raises $15M

• Cloud Services Providers Introduce Trusted Cloud Principles

• Privacy-preserving data platform Duality Technologies raises $30M

• Cloud security provider Orca Security nabs $550M

• Telecoms Giant Syniverse Discloses Years-Long Data Breach

• Microsoft Releases Windows 11, Mac Virtualization Support Still Seems Unlikely

• Be on the Lookout for These Five Common Network Security Threats

• VMware Edge launched to service enterprises developing multi-cloud apps

• Google Patches Over 50 Serious Vulnerabilities in Android

• VAT fraud with cash registers uncovered in Germany

• How to Get Your Family to Actually Use a Password Manager

• Apache Airflow Servers Leak Thousands of Credentials

• Global Telecom Company Syniverse Reveals Five-year Breach

• ICS Security Experts Share Tales From the Trenches – Part 2

• 8 Best Gaming Laptops 2021 in Philippines – Review & Buying Guide

• Atom Silo ransomware operators target vulnerable Confluence servers

• Facebook Blames Configuration Change For Global Outage

• Misconfigured, old Airflow instances leak Slack, AWS credentials

• Third-party September patch roundup: Another heavy month of fixes

• Google Pledges $1m to Secure Open Source Project

• Device identity: The overlooked insider threat

• FCC asks carriers to step up to stop SIM swapping, port-out fraud

• FCW Insider: October 5, 2021

• Text Message Giant Reveals Five-Year Breach

• Telco service provider giant Syniverse had unauthorized access since 2016

• Windows 11 is out. Is it any good for security?

• Facebook Blames Global Outage on Configuration Error

• Facebook, Instagram, WhatsApp, Messenger Are Back Online After Hours of Outage

• Labour in vineyards and farms checked across Europe

• Dark web marketplace White House announces end to its operations

• Apple’s A15 Chip Faster Than Company’s Own Claims in Independent Tests

• Apple Commemorates 10th Anniversary of Steve Jobs’ Passing

• Ransomware Hackers Who Attacked Over 100 Companies Arrested in Ukraine

• Misconfigured Apache Airflow servers leak thousands of credentials

• Looking for adding new detection technologies in your security products?

• Social Media Surveillance By Law Enforcement | Avast

• For adapting to new cloud security threats, look to “old” technology

• Five proven techniques for building effective fraud management

• Facebook October 2021 downtime could result from a revolting Cyber Attack

• Details of Pandora Papers data leak

• Large ransom demands and password-guessing attacks escalate

• How CISOs plan to accelerate the adoption of automation

• Apple Agrees to Pay $95 Million to Settle Lawsuit Claiming Refurbished Devices Aren’t ‘Equivalent to New’

• The cybersecurity issues organizations deal with remain complex and numerous

• Domain security remains an underutilized component to curb attacks

• WhatsApp, Instagram, Facebook & Messenger Down More than an Hour Globally – Back to Live Now!!

• Don’t Warn Your Co-Workers About That Phishing Test

• Security and trust in software remains top priority for buyers

• Streamline Customer Screening Today. Here’s How.

• AbleDocs ADWeb delivers manual and automated compliance auditing of websites

• IriusRisk Community Edition offers free threat knowledge base for developers

• Software AG adds new functionalities for ARIS to help automate key transformation initiatives

• Equinix expands support for Kubernetes to help companies scale their apps across any infrastructure

• Software AG updates webMethods platform to serve up data insights and automate business

• More Than 90 Percent of Malware in Q2 Came Via Encrypted Traffic: WatchGuard

• Ori Industries parters with VMware to advance telco and multi-cloud adoption for enterprises

• Amartus and MEF launch MEF LSO API Onboarding and Interop Testing Service

• One Identity acquires OneLogin to help organizations enhance their identity security

• Allot provides Asahi Net with comprehensive network analytics and real-time traffic management

• Periculus partners with Merchants Information Solutions to help SMBs protect their business

• Voyager Digital partners with Fundstrat to deliver crypto market intelligence to customers

• Intelligent Waves collaborates with Teradici to provide secure environment for government agencies

• JFrog becomes latest organization authorized as numbering authority for vulnerabilities exposure

• Midwest health system implements CynergisTek’s additional controls for more stringent requirements

• DigitalBridge extends Vantage SDC platform with the acquisition of CA22

• NetApp to acquire CloudCheckr to improve cloud infrastructure for the organizations

• Peak Fintech acquires Cubeler to expand its global footprint

• Facebook Whistleblower Slams Company For Prioritizing Profits Over Safety

• Facebook Is Down

• Cirrus Logic appoints Raghib Hussain to Board of Directors

• Cihan Tuncay joins Payfare as Head of Investor Relations and Corporate Development

• ATM bombing suspect blew himself up while filming tutorial

• Cyberattacks are getting worse, but most people aren’t taking basic security steps

• Windows 11 Available: What Security Pros Should Know

• Logicali joins MISA to expand its security solutions for customers

• i-PRO EMEA becomes independent from Panasonic to bring new products to the market

• Ivanti names Jeff Abbott as CEO

• Certified Information Security Manager (CISM)

• One Identity Acquires OneLogin to Boost Identity Security Portfolio

• IT Security News Daily Summary 2021-10-04

• Why Facebook, Instagram, and WhatsApp All Went Down Today

• Intel’s Latest PC vs. Mac Ad Involves a ‘Social Experiment’ With Apple Fans

• Bipartisan FISMA update drops

• OPM director talks federal recruitment with students

• National Smart Coalitions Partnership unites regional efforts

• Facebook Outage Drags Down Instagram, WhatsApp, Messenger, Oculus VR

• 2 suspected ransomware operators arrested in Ukraine

• Encrypted & Fileless Malware Sees Big Growth

• Windows 11 offers chip to cloud protection to meet the new security challenges of hybrid work

• Ransomware threats calls for tough conversations

• DeepMind Technologies Sued Over Data Sharing

• Pandora Spills Secrets of Super Rich

• Law Enforcement Agencies Seize $375K in Ukraine Ransomware Bust

• New Atom Silo Ransomware Group Targets Confluence Servers

• Facebook, Instagram, WhatsApp Go Down

• Neiman Marcus data breach affects millions

• Peraton wins $2.7B DHS cloud award

• What Happened to Facebook, Instagram, & WhatsApp?

• Apple Adding Its AA Battery Charger and Third-Generation Apple TV to Vintage Products List

• Lawsuit claims hospital ransomware infection cost baby her life

• It’s time to start taking digital identity seriously

• ‘Zero-day’ cyber attacks are destructive, becoming more common, says expert

• BrandPost: Think You Are Prepared for Ransomware? You’re Probably Not.

• Facebook, WhatsApp, Instagram Suffer Global Outage

• 2021 Hispanic Heritage Month Pt. 1: A Celebration of Hispanic Heritage and Hope

• Police take a piece out of a ransomware gang, but won’t say which one

• 5 principles for AppSec program maturity

• Facebook, WhatsApp, and Instagram are down worldwide, it’s panic online

• MacRumors Giveaway: Win an Apple-Themed T-Shirt From Throwboy

• Safari 15 Users Say New Tab Design is Counterintuitive

• #BeCyberSmart: When we learn together, we’re more secure together

• (ISC)² Celebrates Cybersecurity Awareness Month With Treasure Trove of Knowledge Building Resources

• Google Patched Two Further Zero-Day Vulnerabilities With Latest Chrome Browser Release

• DHS financial systems modernization still years away

• Facebook down with Messenger, Instagram, WhatsApp service disruption

• WhatsApp, Instagram, Facebook & Messenger Down More than an Hour Globally

• Latest TMF awards underscore cybersecurity

• Mandiant Confirms Name Change from FireEye, Inc. to Mandiant, Inc.

• CISA Kicks Off Cybersecurity Awareness Month

• Vulnerability Summary for the Week of September 27, 2021

• Tough conversations on ransomware ahead

• Facebook Whistleblower to Testify Before Senate

• Vulnerability Summary for the Week of September 27, 2021

• Ransomware Remains a Serious Threat

• How Continuous Monitoring is a Driver of Effective Risk Management

• How to better secure user authentication protocols

• A Journey in Organizational Resilience: Crisis Management

• Facebook goes down, along with Instagram and WhatsApp

• Jony Ive Writes Touching Letter About Steve Jobs a Decade After His Passing

• McAfee and FireEye $2 billion merger details

• Ransomware in a global context

• Ex-army admin jailed for 12 years over US military health data theft

• Prolific Ransomware Operators Arrested in Joint Law Enforcement Action

• MFA Glitch Leads To 6K+ Coinbase Customers Getting Robbed

• Researcher Refuses Telegram’s Bounty Award, Discloses Bug

• Ukrainian Cops Cuff Two Over $150m Ransomware Gang Allegations, Seize $1.3m In Cryptocurrency

• Fraudster Jailed For Stealing Military Records, Benefits

• China’s New Climate Pledge: Is Geopolitical Competition Good for the Climate?

• Private Data/Public Regulation

• UK’s £5bn National Cyber Force HQ to be sited in Lancashire beside Defence Secretary’s constituency

• Multilingual Cybersecurity Awareness Training adapted for your needs

• Ransomware: Police arrest two in operation against ‘prolific’ gang that targeted big businesses

• Cybersecurity budgets for industrial control systems and operational tech increasing: SANS Institute

• Transnational Fraud Ring Bilks U.S. Military Service Members Out of Millions

• Two ‘Prolific’ Ransomware Operators Arrested in Ukraine

• Remote access vs. site-to-site VPN: What’s the difference?

• DevSecOps tools, culture and misconceptions: Advice from Red Hatters

• Today Marks the 10th Anniversary of Apple Introducing the iPhone 4S With Siri

• Deals: Get $10 Amazon Credit When Purchasing a $100 Apple Gift Card

• Apple Watch Series 6 vs. Apple Watch Series 7: Should You Upgrade?

• Hackers Try To Steal OTP Via Malicious Telegram Bots In Recent Campaigns

• Chinese Hackers Attack & Spy Windows Users Using Rootkits

• Data Regulations: HIPAA vs. GDPR vs. PCI

• Creating Wireless Signals with Ethernet Cable to Steal Data from Air-Gapped Systems

• Cheating on Tests

• Let’s Encrypt Root Certificate Expiration – Expert Source

• Ukrainian cops cuff two over $150m ransomware gang allegations, seize $1.3m in cryptocurrency

• Deals: New Sales Hit Every AirPods Model, Starting at $109 for Regular AirPods

• Staking Protocol Compound Users Mistakenly Receive $90M

• House Delays U.S. Infrastructure Bill Vote – Cybersecurity Funding in Jeopardy? And What Security Practitioners Say Needs to be Prioritized

• Misconfigured Airflows Leak Thousands of Credentials from Popular Services

• Do your part and #BeCyberSmart with these online safety tips

• Cybersecurity Awareness: The Basics Are the Foundation

• Poorly Configured Apache Airflow Instances Leak Credentials for Popular Services

• Pottawatomie County paid the ransom to recover its systems

• BrandPost: How to Automate Configuration Review

• Most Reliable Hosting Company Sites in September 2021

• Open source: Google is going to pay developers to make projects more secure

• Hackers Stole Cryptocurrency From Thousands of Coinbase Accounts

• Two ransomware operators were arrested in Kyiv with EUROPOL’s support

• Apple Watch Series 7 Pre-Orders to Start This Friday, Available on October 15

• Sandhills Shut Down by Ransomware Attack

• Expired Let’s Encrypt Root Certificate Causes Problems for Many Companies

• Top 5 Skills Modern SOC Teams Need to Succeed

• The Shortfalls of Mean Time Metrics in Cybersecurity

• A New APT Hacking Group Targeting Fuel, Energy, and Aviation Industries

• Google commits $1M to new Linux Foundation open source security rewards program

• Cybersecurity Awareness Month: #BeCyberSmart

• ‘Report a Problem’ App Store Option Returns to Combat Scams

• One Identity completes acquisition of OneLogin

• New offensive cyber force will “confront aggressive behaviour”, says Foreign Secretary

• Fraudster jailed for stealing US military health records, millions in benefits

• Pottawatomie County Fixing Systems After Ransomware Attack

• Expert Reacted On Hackers Steal Funds Of 6,000 Coinbase Customers

• Cybersecurity Experts Comment On Pandora Papers

• Cybersecurity M&A Roundup: 43 Deals Announced in September 2021

• New APT ChamelGang Targets energy and aviation companies in Russia

• Apple Ramps Up iPhone 13 Chip Orders, Scales Down Orders for Older iPhones

• Biden Administration Gathers 30 Countries for a Meeting on Cybercrime and Ransomware

• 7 Best Motherboard For I5 9400F 2021 – Top Picks

• Does Cybersecurity Awareness Month actually improve security?

• PoC Exploit Released for macOS Gatekeeper Bypass

• Former Army Contractor Received 12.5 Years Sentence for Fraud Scheme

• Apple ‘May Be Working On Mobile Advertising Platform’

• US-Led International Group Takes Aim At Ransomware Gangs

• One Identity acquires OneLogin to unify identity security for enterprises

• Quick Hits

• FCW Insider: October 4, 2021

• Extra, Extra, VERT Reads All About It: Cybersecurity News for the week of September 27, 2021

• Researchers Discover How Hackers Were Stealing Money Via Apple Pay From iPhones

• Top Search On Bing Is ‘Google’, Google Tells Court

• Waze Pushes Crowdsourcing For Petrol Pump Data

• A week in security (Sept 27 – Oct 3)

• Ex-Army Technician Gets 12 Years for Role in Fraud Scheme

• Apple Makes iCloud Safari Bookmarks End-To-End Encrypted

• iPhone 13 Pro Costs Around $20 More to Build Compared to the iPhone 12 Pro, Despite Being the Same Price for the Customer

• Why today’s cybersecurity threats are more dangerous

• Google Pledges $1 Million to Secure Open Source Program

• UK’s National Cyber Force Heads to the Northwest

• Coinbase Attackers Bypassed Account Authentication

• Ransomware gang arrested in Ukraine with Europol’s support

• DeepMind Hit By Legal Action Over NHS Deal

• Experimental AI Hones Forecasts For Short-Term Weather Events

• Sir Tim Berners-Lee and the BBC stage a very British coup to rescue our data from Facebook and friends

• Apple Makes Safari Bookmarks End-To-End Encrypted

• Trying to register your antivirus in Windows Security Center?

• E-Scooter Company Looks To Thwart QR Code Theft

• Firewalls? Pfft – it’s no match for my mighty spares-bin PC

• LockBit 2.0 ransomware hit Israeli defense firm E.M.I.T. Aviation Consulting

• Combating vulnerability fatigue with automated security validation

• Google Play hosts malware that offers click baits to users

• Joe Biden to unite 30 countries against Ransomware Cyber Threats

• How collaboration between IT pros and senior leaders could drive the future of risk mitigation

• Do you have a plan for your cybersecurity career? Time to skill up!

• Infosec products of the month: September 2021

• McAfee Enterprise Sees Proliferation of REvil and DarkSide Ransomware Surge in Q2 2021

• CCSP vs. EXIN Cloud Certifications: What are the Differences?

• McAfee Enterprise Advanced Threat Research Report: Ransomware’s Increasing Prevalence

• Erosion of digital trust: Consumers want more personal information protection

• Conquering the Taproot of Cybersecurity

• Steve Jobs Once Tossed the Original iPhone Across a Room to Impress Journalists

• Tanium Risk offers customers a real-time view of risk posture across their organization

• The future role of data, AI and the cloud

• Semperis Directory Services Protector 3.6 monitors for cyber threats in hybrid AD environments

• DISA reorganizes cloud office

• Bring on the Fist Bumps and Nasal Swabs—Tech Conferences Are Back

• Apple Pay security flaw allows hackers to steal your money when your iPhone is locked

• Coinbase hackers exploit multi-factor flaw to steal from 6,000 customers

• White House to Enlist 30 Countries to Fight Ransomware

Generated on 2021-10-05 23:55:25.644218