IT Security News Daily Summary 2021-10-29

• The state of CMMC from an assessor perspective

• TA575 criminal group using ‘Squid Game’ lures for Dridex malware

• APTs, Teleworking, and Advanced VPN Exploits: The Perfect Storm

• Friday Squid Blogging: Squid Game Has a Cryptocurrency

• Apple Watch Series 8: Everything We Know So Far

• McAfee Enterprise & FireEye 2022 Threat Predictions

• A malware prevention strategy to complement StopRansomware.gov

• Cybercrime: Europol arrests 12 people for ransomware activities possibly affecting 1,800 victims in 71 countries

• Papua New Guinea ‘s finance ministry was hit by a ransomware

• Could “Unbreakable” Oracle Linux be the Logical Enterprise-Ready CentOS Replacement?>

• AI Weekly: The perils of AI analytics for police body cameras

• SolarMarker Attackers Use SEO Poisoning to Push Malicious Code

• Russian National Accused of Role in Trickbot Is Extradited to US

• Caveat Cyber Emptor: 3 Ways to Protect Sensitive Personal Data this Online Shopping Season

• Cerberus Sentinel Acquires RED74

• iFixit’s Full 16-Inch MacBook Pro Video Teardown Highlights Internal Design Changes

• The best free VPNs: Why they don’t exist

• Summary of the GAO Report on Federal Use of Facial Recognition Technology

• GAO backs Microsoft’s protest of $10 billion NSA cloud award to AWS

• Let’s Encrypt explains last month’s outages caused by certificate expiration

• MITRE, CISA Announce 2021 List of Most Common Hardware Weaknesses

• Police arrested 12 individuals involved in 1800 ransomware attacks worldwide

• MacRumors Giveaway: Win iPhone and iPad Stands From Lululook

• Shrootless: Microsoft found a way to evade Apple’s SIP macOS filesystem protection

• NSA, CISA Release 5G Cloud Security Guidance

• FBI Raids Chinese Payment-Terminal Company

• White House pick for DOD CIO eyes tweaks to CMMC

• Cybercriminals Take Aim at Connected Car Infrastructure

• Teardown of 140W MacBook Pro Power Adapter Shows What’s Inside

• Apple Seeds First Public Beta of macOS Monterey 12.1 With SharePlay

• Copyright Regulator Eases Restrictions on Research, Education, and Repair

• CISSP: The Time is Now

• Stories from the SOC – Data exfiltration

• FBI warns of ransomware gang – What you need to know about the OnePercent group

• 1,000,000 WordPress Websites Affected with OptinMonster Vulnerabilities

• Apple’s Warranty Expenses Have Significantly Declined Since Ditching the Butterfly Keyboard in Macs

• The return of the Malwarebytes CrackMe

• Microsoft to offer cyber security training in community colleges across US

• 7 Ways to Improve Your Cybersecurity Team’s Employee Satisfaction

• How much can you make with an associate in cybersecurity?

• Massachusetts Health Network Hacked; Patient Info Exposed

• HelpSystems Expands Shopping Spree With Digital Guardian Acquisition

• Google Releases Security Updates for Chrome

• Ransomware Has Disrupted Almost 1,000 Schools In The US This Year

• How Can You Keep Your Personal Information Safe?

• Google Chrome is Abused to Deliver Malware as ‘Legit’ Win 10 App

• Hackers upping SSL usage for encrypted attacks, communications

• shoulder surfing

• What Exactly Is Secure Access Service Edge (SASE)?

• GoCD Authentication Vulnerability

• Google Releases Security Updates for Chrome

• Apple Executives Address Lack of Face ID and Touchscreens on Macs

• Deals: Verizon Discounting Apple Accessories, MagSafe Chargers, iPhones, iPads, and More

• New Malware Dubbed AbstractEmu Goes Undetected

• A New Zero-day Vulnerability Is Impacting All Windows Versions

• Tips to protect your data, security, and privacy from a hands-on expert

• Update your OptinMonster WordPress plugin immediately

• Data-breached Guntrader website calls in liquidators, is reborn as Guntrader 2 Ltd

• Microsoft documents “SHROOTLESS” hack patched in latest Apple updates

• Finding the Right Approach to Cloud Security Posture Management (CSPM)

• A Treehouse of Security Horrors

• GoCD Authentication Vulnerability

• Microsoft Overtakes Apple as World’s Most Valuable Company

• UK data watchdog calls for end-to-end encryption across video chat apps by default

• Shrootless: macOS Vulnerability Found by Microsoft Allows Rootkit Installation

• Experts Slam Facebook For Collecting Data From Deactivated Accounts

• This New Android Malware Can Gain Root Access to Your Smartphones

• NSA and CISA explained how to prevent and detect lateral movement in 5G networks via cloud systems

• Shrootless: Microsoft finds Apple macOS vulnerability

• Russian Man Extradited to U.S. for Role in TrickBot Malware Development

• Remote Work Security: Handling Setbacks in the Time of COVID-19

• Panasonic Prototype Battery Lasts Five Times Longer

• 12 People Arrested Over Ransomware Attacks on Critical Infrastructure

• Diversity Matters in Cybersecurity

• Dragos secures $200 million investment turning company into ICS unicorn

• 76% of UK healthcare organisations want government to ban ransomware payments

• Mark Zuckerberg Explains Facebook Meta Name Change

• 400,000 Users Exposed By API Vulnerability – Expert Comment

• Apple fixes security feature bypass in macOS (CVE-2021-30892)

• Ransomware: Police sting targets suspects behind 1,800 attacks that ‘wreaked havoc across the world’

• Schreiber Foods back to normal after ransomware attack shuts down milk plants

• Ransomware Attack Hits PNG Finance Ministry

• Winter is Coming for CentOS 8

• New ‘Shrootless’ Bug Could Let Attackers Install Rootkit on macOS Systems

• Ransomware attack hits Papua New Guinea’s finance department

• Sugar Daddy Scams | Avast

• Chrome 95 Update Patches Exploited Zero-Days, Flaws Disclosed at Tianfu Cup

• Expert Advise On News That WhatsApp To Stop Working On Thousands Of Phones Next Week

• Developing Trends In Cybersecurity

• Commentary On TA505 Phishing Campaign

• Cybercriminals Use Squid Game To Target Fans With Dangerous Malware; New Wave Of Malicious Email Attacks – Proofpoint Research

• 7 Secrets of Successful Software Development Process in 2021

• Google fixes two high-severity zero-day flaws in Chrome

• India’s Top Court Orders Probe Into Pegasus Snooping

• Europol and European Investment Bank sign Working Arrangement

• Google Photos ‘Locked Folder’ Feature for Pixel Phones Coming to iOS

• 18 cybersecurity startups to watch

• FCW Insider: October 29, 2021

• macOS Monterey Users Report Connectivity Issues With USB Hubs

• Misconfigured Database Leaks 880 Million Medical Records

• Forrester Predicts Mass Cybersecurity Brain Drain

• Employees To Demand Remote Work In 2022 | Avast

• Suspected Trickbot Malware Developer Faces 60 Years in Jail

• 12 targeted for involvement in ransomware attacks against critical infrastructure

• Russian TrickBot Gang Hacker Extradited to U.S. Charged with Cybercrime

• Want your endpoint security product in the Microsoft Consumer Antivirus Providers for Windows ?

• Google fixes 2 new actively exploited zero-day flaws in Chrome

• Ranzy Locker Ransomware warning issued by FBI

• New infosec products of the week: October 29, 2021

• Ransomware attack on National Rifle Association of America

• Three OT security lessons learned from 2021’s biggest cyber incidents

• Feds cuff Russian said to be developer of ‘Trickbot’ ransomware

• Safeguarding the B2B sharing economy

• Apple’s Poor Patching Policies Potentially Make Users’ Security and Privacy Precarious

• How do I select an SD-WAN solution for my business?

• MEET THE RECIPIENTS OF THE 2021 (ISC)² GOVERNMENT PROFESSIONAL AWARD

• Trends in connected homes in 2021 – Improved security and connectivity

• Winner of the AT&T Diversity and Inclusion Champion Award 2021

• Google Releases Urgent Chrome Update to Patch 2 Actively Exploited 0-Day Bugs

• Employers must balance productivity and collaboration tools with security

• India’s Supreme Court starts probe into use of Pegasus spyware

• Israeli Researcher Cracked Over 3,500 Wi-Fi Networks in Tel Aviv City

• Unauthorized account openings increased by 21% in the last 12 months

• Securing your Linux Virtual Private Server | Top 5 Ways To Implement Better Server Security

• Cops Receive Stalkerware Training

• Data Breach at University of Colorado

• Despite large investments in security tools, organizations are not confident they can stop data exfiltration

• Kinetic Business Managed Network Security detects and mitigates real-time network attacks

• Appgate launches SDP solution to help enterprises expand and accelerate zero trust initiatives

• Keysight Technologies TimeKeeper monitors time-critical applications, devices and infrastructure

• Services Australia testifies Cellebrite tech only used for fraud and identity theft cases

• AFP confiscates AU$1.7m from Sydney man who stole Netflix, Spotify, Hulu accounts

• 5 tips for parents for a cybersecure Halloween

• DTEX Systems provides insider threat intelligence and investigation services with DTEX I3 research team

• SharePlay Added in macOS Monterey 12.1 Beta

• This is What Facebook’s Upcoming Smart Watch Looks Like

• NAVEX Global collaborates with ECI to enhance ethics and compliance program assessment standards

• VMware partners with eero to improve network connectivity for remote workers

• German authorities and reporters claim to identify core REvil member

• Assange extradition appeal: lawyers cite new claims of CIA plot to harm him

• TrickBot author extradited to U.S. to face cyber crime charges

• Inequitable Access: An Anti-Competitive Scheme by Textbook Publishers

• Report: 64% of security leaders identify obstacles to internal cyber threat intelligence

• Best VPN 2021: Top VPN services reviewed

• Microsoft Edge finally arrives on Linux – “Official” build lands in repos

• Renesas acquires Celeno to deliver end-to-end connectivity solutions for clients and access points

• SUSE acquires NeuVector to strengthen container management security for customers

• DataVisor partners with Equifax to enhance its behavior analytics and fraud detection solution

• Choosing a Managed Security Service: MDR, Firewalls & SIEM

• 6 Ways to Rewrite the Impossible Job Description

• Dragos raises $200M to boost operations against cyberattacks at the industrial level

• Report: 83% of companies say 24-hour shutdown causes incapacitating damage

• Manual certificate management falling way behind PKI growth

• Microsoft found Shrootless bug in macOS that could bypass System Integrity Protection

• Jessica Couto joins Imperva as VP of North America Channel Sales

• Cyber Readiness Institute appoints Karen S. Evans as Managing Director

• Federal cyber leaders assess TMF awards

• Apple ‘Working Feverishly’ to Improve iPhone 13 Supplies

• Apple CEO Tim Cook: We’re Focused on Maintaining Privacy and Security of the App Store

• White House: ‘There’s not a cliff here’ when it comes to vaccine deadlines

• All Sectors Are Now Prey as Cyber Threats Expand Targeting

• Avast releases decryptors for multiple ransomware strains

• IT Security News Daily Summary 2021-10-28

• IRS tech, CISA funding in Build Back Better

• Amid explosive growth, API security a growing concern

• SEO Poisoning Used to Distribute Ransomware

• Apple Reports 4Q 2021 Results: $20.6B Profit on $83.4B Revenue

• Apple Reports All-Time Quarterly Revenue Record for Macs

• Supply Constraints Cost Apple $6 Billion in Q4 2021

• Apple’s Services Achieve All-Time Quarterly Revenue Record

• ICS Security Firm Dragos Reaches $1.7B Valuation in Latest Funding Round

• Over 1 million WordPress sites affected by OptinMonster plugin flaws

• Report: 79% of IT teams have seen increase in endpoint security breaches

• Suspected REvil Gang Insider Identified

• Tech Companies Create Security Baseline for Enterprise Software

• NSA-CISA Series on Securing 5G Cloud Infrastructures

• Ordr Unveils Cybersecurity Innovations and Ransom-Aware Rapid Assessment Service to Expand Its Leadership In Connected Device Security

• How to Use High Power Mode on 16-inch M1 Max MacBook Pro

• Australia Wants Search Engine Choice Screen On Smartphones

• Breaking News: Facebook Changes Name To Meta

• Luxury hotel chain in Thailand reports data breach

• Yet again, Cream Finance skimmed by crooks: $130m in crypto assets stolen

• Twitter details internal Yubico security key rollout

• Researcher found 70% Wi-Fi networks in Tel Aviv are hackable

• Threat Actors Using Squirrelwaffle Loader to Deploy Qakbot & Cobalt Strike Malware

• Identity and Access Management: What’s Driving the Rush?

• Zales.com Leaked Customer Data, Just Like Sister Firms Jared, Kay Jewelers Did in 2018

• Stop Zero-Day Ransomware Cold With AI

• US to Create Diplomatic Bureau to Lead Cybersecurity Policy

• NSA-CISA Series on Securing 5G Cloud Infrastructures

• Dropbox Seemingly Has No Plans to Natively Support Apple Silicon Macs [Updated]

• Throwboy Launches New Apple-Themed Pillows Modeled After iBook G3, iMac G4, Apple Lisa and More

• First iOS 15.2 and iPadOS 15.2 Betas Available to Public Beta Testers

• Apple Seeds First Beta of macOS Monterey 12.1 to Developers

• Facebook Changes Its Name to ‘Meta’

• Europe’s Digital Services Act: On a Collision Course With Human Rights

• Roundup: 2021 Energy & Utility Data Breaches and Defenses in the News

• How Shopping Bots Can Compromise Retail Cybersecurity

• 2021 Cyber Resilient Organization Study: Rise of Ransomware Shows the Need for Zero Trust and XDR

• Keeping tabs on responders’ mental health

• Job hunting? Watch out for this nasty remote work scam

• CIS Control 10: Malware Defenses

• FBI warns of Ranzy Locker ransomware threat, as over 30 companies hit

• Vendor-Neutral Initiative Sets Bare-Minimum Baseline for Security

• Scottish Cybersecurity Startup Unveils Versatile AI-Based Deception

• Free Decryption Tools Available for Babuk, AtomSilo and LockFile Ransomware

• FBI Publishes Indicators of Compromise for Ranzy Locker Ransomware

• S3 Ep56: Cryptotrading rodent, ransomware hackback, and a Docusign phish [Podcast]

• Microsoft to Tap Community Colleges’ Cyber Talent

• CrowdStrike vs Symantec: Top EDR Solutions Compared

• NSA-CISA Series on Securing 5G Cloud Infrastructures

• BSI: Die Lage der IT-Sicherheit in Deutschland (German)

• Growing Ransomware Danger Demands Layered Defense of Your Endpoints

• Termination of Federal Unemployment Programs Represents Turning Point for Fraudsters

• A Brief History of Online Influence Operations

• Recent NPM package hack is an alarming reminder of the risks of website supply-chain fraud

• New! Improvements to Your (ISC)² Cybersecurity Online Continuing Education

• MVSP: A minimum cybersecurity baseline to simplify vendor security assessment

• Protecting your device information with Private Set Membership

• REvil gang member identified living luxury lifestyle in Russia, says German media

• The future of state and local citizen service depends on digital adoption

• Applying security to operating models requires collaboration

• 3 Security Lessons Learned From the Kaseya Ransomware Attack

• ISC Releases Security Advisory for BIND

• Cisco Releases Security Updates for Multiple Products

• Wslink, a previously undescribed loader for Windows binaries

• What Is Different About Cloud Security?

• 6 Business functions that will benefit from cybersecurity automation

• Introducing AT&T Managed Extended Detection and Response (XDR)

• Critical Polygon Blockchain Vulnerability Could Allow Withdrawing Huge Amounts

• Mozilla Removed Two Popular Firefox Add-Ons For Abusing Their Proxy API

• US Copyright Office Adds Support For Right To Repair

• ISC Releases Security Advisory for BIND

• Cisco Releases Security Updates for Multiple Products

• What is GLBA Compliance related to Data Security

• Developer-First Application Security Platform Tromzo Nabs $3.1 Million From Leading CISOs

• EU’s Green Pass Vaccination ID Private Key Leaked

• AbstractEmu, a new Android malware with rooting capabilities

• How we took part in MLSEC and (almost) won

• AtomSilo and LockFile Ransomware Decryptor Now Available for Free

• Microsoft announces plan to cut cybersecurity workforce shortage in half by 2025

• Microsoft finds new macOS vulnerability, Shrootless, that could bypass System Integrity Protection

• Uber To Offer 50,000 Tesla Cars To Drivers

• How to Easily Set Up Mutual TLS SSL

• An Amazon rival reveals the only honest reason to get a video doorbell

• Threat profile: Ranzy Locker ransomware

• Intel Touts New 12th Gen PC Processors

• Best gifts for hackers 2021: Top cybersecurity presents

• How to prepare your team to address a significant security issue

• A Guide to Shift Away from Legacy Authentication Protocols in Microsoft 365

• Israeli Researcher Cracked Over 3500 Wi-Fi Networks in Tel Aviv City

• Issuance of Export Licenses Reveals Strategic Limits on Economic Decoupling

• Lawfare Live: A Discussion on Recent Climate Security Reports

• Learn skills to kick off a lucrative cybersecurity career for only $20

• Codenotary: Notarize and verify your software bill of materials

• 2021 CWE Most Important Hardware Weaknesses

• Cyberattack Cripples Iranian Fuel Distribution Network

• Grief Ransomware Gang Pwns The NRA

• HTTPS Threats Grow More Than 314% Through 2021: Report

• NPM Packages Disguised As Roblox API Code Caught Carrying Ransomware

• Free Decrypters Available Now for AtomSilo, Babuk, and LockFile Ransomware

• Over two-thirds of workers are at risk of a cyber security attack

• You’ve Just Been Ransomed … Now What?

• 2021 CWE Most Important Hardware Weaknesses

• German investigators identify crypto millionaire behind REvil operations

• NRA Presumably Attacked by Grief Ransomware

• Do you need to learn HTML to work as a content manager?

• Iran Blames Nation State For Cyberattack on Petrol Stations

• SlashNext, which uses AI to combat phishing, raises $26M

• HTTPS threats grow more than 314% through 2021: report

• Ransomware: It’s a ‘golden era’ for cyber criminals – and it could get worse before it gets better

• Cloud security in 2021: A business guide to essential tools and best practices

• Grief Ransomware Targets NRA

• Adobe Fixes Gaping Vulnerability Glitches in 14 Software Products

• Downloads in Subscriptions

• VoIP Services Experience “Unprecedented” Cyber-attack In UK

• Israeli Users Targeted by Android Spyware Apps Since 2018

• Good Grief! Ransomware gang has only gone and pwned the NRA – or so it claims

• Ransomware Soars 148% to Record-Breaking Levels in 2021

• Shadow IT Alert: Half of Home Workers Buy Potentially Insecure Kit

• Cyber Scams 2.0 – new tips to help boost your cyber skills

• More Russian SVR Supply-Chain Attacks

• Armis Launches APEX Partner Programme

• What is fileless malware?

• Join Check Point Software Technologies at Microsoft Ignite

• Expert Commentary: Organizations Under Increasing Threat from DNS Attacks

• Following the 2020 Hack, Twitter Security Keys Should Be Used By the Company’s Employees

• Personal Information Belonging to 400,000 German Students Exposed

• September 2021 Cyber Attacks Statistics

• Facebook Orders Staff Not To Destroy Internal Documents

• IoT security provider Viakoo raises $10M

• Crooks steal $130 million worth of cryptocurrency assets from Cream Finance

• Conti ransomware explained: What you need to know about this aggressive criminal group

• Quick Hits

• FCW Insider: October 28, 2021

• Apple releases macOS 12, iOS 15.1, watchOS 8.1, and more

• Say Hey to macOS Monterey – Intego Mac Podcast Episode 211

• Dragos raises $200M to protect industrial customers from cyberattacks

• Malicious NPM Libraries Caught Installing Password Stealer and Ransomware

• New Wslink Malware Loader Runs as a Server and Executes Modules in Memory

• Number of Ransomware Attacks Has Doubled in Just a Year, GCHQ Director Warns

• Small Businesses Pay Up to $1M to Recover from Breaches

• Multiple Local TV Stations in the USA Stop Working Due to A Cyber Attack

• Do you know what your supply chain is and if it is secure?

• If your hair isn’t already gray, 2022’s security threats will get it there, warn infosec duo

• Ransomware news trending on Google

• New certification in Network Defense, Ethical Hacking and Digital Forensics

• #ISC2CONGRESS – Lisa Forte Keynote: Insider Threats A Bigger Challenge Than Ever

• What is 5G shared responsibility and how would it work?

• Why access management needs to evolve beyond passwords

• Hands-on domain password policy setup for Active Directory

• Wireless Network Penetration Testing Checklist – A Detailed Cheat Sheet

• State Department to get cyber bureau

• DOD leans on civilian workforce to fill tech talent gaps

• Intelligence community diversity lags at the highest levels

• Wslink: Unique and undocumented malicious loader that runs as a server

• Dark HunTOR: 150 arrested, $31 million seized in major dark web bust

• New real-world cybersecurity training range opens in South Florida

• NRA responds to reports of Grief ransomware attack

• HelpSystems Acquires Digital Guardian, Extends DLP Capabilities

• Avast releases free decrypters for AtomSilo and LockFile ransomware families

Generated on 2021-10-29 23:55:25.547709